last executing test programs: 3m1.563705066s ago: executing program 2 (id=58): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x7, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x5}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x55af) r6 = dup(r3) ioctl$KVM_SET_MSRS(r6, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES64]) syz_emit_vhci(&(0x7f0000000580)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) r7 = openat$comedi(0xffffffffffffff9c, 0x0, 0x40000, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x1, 0x40001051, r8, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r9, 0x0, 0x6, 0x0) write$binfmt_misc(r12, &(0x7f00000000c0), 0xfdef) read$FUSE(r8, &(0x7f0000000600)={0x2020}, 0x2020) read(r7, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r11, 0x89f8, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x80, 0x10, 0xffffffff, 0x6, {{0xe, 0x4, 0x2, 0x3, 0x38, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x24, 0x63, 0x3, 0x6, [{@multicast2}, {@remote, 0x1000}, {@loopback, 0x6}, {@local}]}]}}}}}) 3m1.378366029s ago: executing program 2 (id=65): open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000001c0)='./file1\x00', 0x60) (async) mkdirat(r0, &(0x7f00000001c0)='./file1\x00', 0x60) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x1) 3m1.30172621s ago: executing program 2 (id=67): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) (rerun: 64) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=r4], 0x6c}, 0x1, 0xe00, 0x0, 0x200000c1}, 0x4008802) 3m1.222429287s ago: executing program 2 (id=71): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x7a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa3a86dd6000000000442f00fe880000000000000000000000000001fe8000000000000000000000000000aa000008001dc33088107b16da71ce00"], 0x0) getitimer(0x1, &(0x7f0000000100)={{0x0, 0x0}}) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000002060101000000000900020073797a30000000000c00078008001240fffffffe11000300686173683a69702c6d61726b00000000050005000200000005000400"/88], 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100027bd7000fbdbdf250a00000008000300", @ANYRES32=0x0, @ANYBLOB="9659320c000600010000420090649c7173e46cb5020000000000000008", @ANYRES32=0x0, @ANYBLOB="0c000600030000000300000006000900020000000c0006000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f00000003c0)='./file0/file0\x00', r6, &(0x7f0000000380)='./file0\x00') sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYRESHEX=r6], 0x1c}, 0x1, 0x0, 0x0, 0x24000814}, 0x20048041) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000000040)) syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x1, 0xfffffffd}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x1, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x69, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3m0.873912902s ago: executing program 2 (id=73): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x8, r0, 'id0\x00'}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000180)=""/151, &(0x7f0000000240)=""/237, &(0x7f0000000340)=""/240, 0x3000}) 3m0.631909544s ago: executing program 2 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x10, 0x200) r0 = open(&(0x7f0000000140)='./file1\x00', 0x80000, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0xfffff399}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x100}) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') 3m0.556309556s ago: executing program 32 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x10, 0x200) r0 = open(&(0x7f0000000140)='./file1\x00', 0x80000, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0xfffff399}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x100}) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') 1m58.361427301s ago: executing program 3 (id=792): memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) (async) r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x12, r0, 0x0) userfaultfd(0x80801) (async) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000780)={0x0, 0x0, 0xf6e, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000780)={0x0, 0x0, 0xf6e, 0x1}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000000)={{r2}, {@val={r3}, @max}}) personality(0xfc6703a0ffffffff) (async) personality(0xfc6703a0ffffffff) sendmsg$nl_route(r2, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x100, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x8040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0e1d6c77e161"}]}, 0x40}}, 0x8000) 1m58.217176271s ago: executing program 3 (id=793): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x113000, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="22dec3af7f4160cd5a400c24a6fac7f4b2dfbb801554dafaee14b6b8729e4d5f80f27553dcab51d9cb6d8b755481ca52b0a5ba549f3926d688e02b2988e2bcfb40e83b928f8a2272f9999ad6676f05f72b631bf2be5dfa74d04231155e890190267c4c2d1d298145cea58072aeccb8015065d60ceb14ae952ee524855e400ea386cf5b690fee1bc25bc69cf14a172422b71acc8101e8189bac65164d0d05e9a2bdf4819671b42bff7649a0b13e", 0xad}) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000140)=0x1) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r1) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000240)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000280)={r2}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000002300)={0x4, 0x8, 0x80200000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000002340)={r4}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000002380)={0x10000000, 0x7, 0x92}) close(r0) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000023c0), 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000002400)={0x7, 0x3, 0x1, "18826d1df5b0042e5cb7bf59185dbf3e26730b4f29bdb10b8cf906ec474b4e53", 0x3432564e}) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000002440), 0x428800, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002480), 0x10400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000024c0)={0x1, 0x5, 0x3}) close(r5) openat2$dir(0xffffffffffffff9c, &(0x7f0000002500)='./file0/file0\x00', &(0x7f0000002540)={0x6800c3, 0x18}, 0x18) sendmsg$AUDIT_TRIM(r5, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x10, 0x3f6, 0x200, 0x70bd2a, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40010}, 0x40) r8 = fcntl$getown(r5, 0x9) r9 = syz_open_procfs(r8, 0xfffffffffffffffc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000002680)={0x0, @in6={{0xa, 0x4e20, 0x7f, @mcast2, 0x1ff}}, 0xd, 0x200, 0x9, 0x4a, 0x0, 0x0, 0x2}, &(0x7f0000002740)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000002780)={r10, 0x3, 0x2c, "bb0d67a079c5c8bdb452a43bca14deada99a23b9ddd87f6430743cf971f28ae988d1ea972e2e641ff656d7ef"}, 0x34) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r11, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x3c, 0xc, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044001}, 0x90) cachestat(r6, &(0x7f00000028c0)={0x7ff, 0x6}, &(0x7f0000002900), 0x0) sendmsg$nl_route(r5, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd28, 0x25dfdbfc, {0x80, 0x80, 0x10, 0x4e, 0xfe, 0x0, 0xfe, 0xc, 0x1600}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 1m58.215748088s ago: executing program 3 (id=794): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000003c0)=0x1) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f00000000c0)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1m58.215396922s ago: executing program 3 (id=795): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netstat\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) truncate(&(0x7f0000000080)='./file0\x00', 0xa68d) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={""/10, ""/2, @private}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000340)=0x0) getresuid(&(0x7f0000000380)=0x0, &(0x7f0000000400), &(0x7f0000000440)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000480)={0x0, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x1, 0x80}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000004c0)={0x4, 0xd, {0x0}, {0xee01}, 0x8000000000000, 0x80000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f000000cffc)=0x4, 0x1, 0x1, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x400, 0x4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4010444, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC=r1, @ANYBLOB=',noextend,nodevmap,nodevmap,dfltgid=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=r3, @ANYBLOB=',directio,version=9p2000,uid>', @ANYRESDEC=r4, @ANYBLOB=',permit_directio,fowner<', @ANYRESDEC=r5, @ANYBLOB=',smackfsroot=/dev/ttyprintk\x00,euid<', @ANYRESDEC=r7, @ANYBLOB=',|easure,uid>', @ANYRESDEC=r8, @ANYBLOB=',measure,fowner=', @ANYRESDEC=r9, @ANYBLOB=',fsname=,\x00']) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(r6, 0x1, &(0x7f00000008c0)=0x2) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r12, &(0x7f00000233c0)={0x0, 0x0, &(0x7f0000023380)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x20048054) recvmmsg(r12, &(0x7f000000a140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001980)=""/109, 0x6d}], 0x1}, 0x8}], 0x1, 0x40010061, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r10, 0x5412, &(0x7f00000000c0)=0xf9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) 1m58.214036038s ago: executing program 3 (id=796): mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xc06850d1, 0x0) r0 = eventfd2(0x762, 0x800) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x400041, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) fstat(r2, &(0x7f0000000340)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x44, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4f21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000480)={'mangle\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 1m58.152480169s ago: executing program 3 (id=798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) close(0x3) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001ec0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0xfffffffc, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x8, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x3000c88c) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x5, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0x18fff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2400c080) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000040)=0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180), &(0x7f0000000240)=0x4) close_range(r7, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00e20000000000001c00128009000100626f6e640004000100000000080012407fc30000"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0xa006}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m48.714066328s ago: executing program 0 (id=863): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f00000023c0)={0x2, 0x4e24, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x12) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1aa5c4c, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80, 0x2, 0x0, 0x0, 0x1) 1m48.630210491s ago: executing program 0 (id=856): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f0000000180)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) mount(&(0x7f0000000080)=@md0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='smb3\x00', 0x208001, 0x0) 1m47.743585018s ago: executing program 0 (id=876): creat(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000080)={0x20, 0x1, 0x101, 0x40, 0x0, 0x8000, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x80a0000, 0x0, 0x8, 0x3, 0xd2, 0x40, 0x7, 0x0, 0x3, 0x19, 0x9}, {0x5000, 0x2, 0x3, 0x0, 0x40, 0x7, 0x7f, 0x6, 0x5, 0x0, 0x3, 0x6}, {0x3000, 0x1000, 0x8, 0x5, 0x1, 0x3, 0x0, 0x9, 0x0, 0xab, 0x8, 0x81}, {0x6000, 0x100000, 0xc, 0x0, 0x3, 0x2, 0x1, 0xf8, 0x8, 0x9, 0xe, 0xf1}, {0xffff4000, 0x2000, 0xc, 0x3, 0x15, 0x2, 0xab, 0x7f, 0x1, 0x83, 0xf7, 0x3}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x100000, 0x1, 0xe, 0x5, 0x0, 0x5, 0x4, 0x3, 0x5, 0x81, 0x3, 0x70}, {0x0, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0x8, 0xf0, 0xc}, {0x3000, 0x32}, {0xdddd0000, 0x7}, 0x80000031, 0x0, 0x6000, 0x2120a4, 0x6, 0x0, 0x3000, [0x6800000000000000, 0x9, 0x5e, 0x3]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x8d7}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)='\a', 0x1}], 0x1}, 0x4048043) 1m46.823381888s ago: executing program 0 (id=885): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000fcb000)=0xffffffff, 0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) 1m46.631810697s ago: executing program 0 (id=887): r0 = syz_io_uring_setup(0x231c, &(0x7f00000002c0)={0x0, 0x4048, 0x2, 0x3, 0x240}, &(0x7f0000000140), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600013, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 1m46.571895691s ago: executing program 0 (id=888): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) r3 = dup(r0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$P9_RVERSION(r0, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x7fff, 0x6, '9P2000'}, 0x13) (async) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}], [], 0x6b}}) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x40) (async) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) 1m42.923232408s ago: executing program 33 (id=798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) close(0x3) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001ec0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0xfffffffc, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x8, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x3000c88c) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x5, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0x18fff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2400c080) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000040)=0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000180), &(0x7f0000000240)=0x4) close_range(r7, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00e20000000000001c00128009000100626f6e640004000100000000080012407fc30000"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0xa006}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m31.578634042s ago: executing program 34 (id=888): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) r3 = dup(r0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$P9_RVERSION(r0, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x7fff, 0x6, '9P2000'}, 0x13) (async) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}], [], 0x6b}}) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x40) (async) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) 1m16.260875511s ago: executing program 6 (id=1374): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8, 0x4b2}, 0x50) mq_open(&(0x7f0000000a80)='\'\xf5@$*\x00', 0x40, 0xb, &(0x7f0000000ac0)={0x8, 0xffff, 0x1, 0x6}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) add_key$keyring(&(0x7f0000005180), 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f030000000100000007000000", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004814) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000080)=0x2c) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) 1m16.202737001s ago: executing program 6 (id=1375): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002cc0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba2300850000002b000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede58ee094518a5800000082c81ddfe3960a29ea15fa7e22f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b24a4bcdc33b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43f5e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41aa3b4b7fc28882cad315db3fffc5183deca7a32838e80ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d12afdb295ce2edecb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9ac692145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000020000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc7324000b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a4900000000000000035d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135c74d0f95d36cf02670cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde31469c4aea0c64850eb3f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f333735a000000000000000000400000602bfd2f1ace65f2e74dc9c1709cb73a37f40362b7904e8a0ea8d2d9805c924f9985d22972031a1223afa1288af3f48c93fcdb11963d0b748287448f722dc180e87637b662b11effabf45beda2e3a7e1adf8f94b619fa152b33440f2358a745848caf7000eb305c936d26964a2a85e133d01368b8d228d02f96064de261cf02c9632a0eb4ab259e8f4dd63d8b6d2d6b2a0c297bab7d04d73a381c29eaf344655b64e12f216fbc646cc6bd60ca773d187f2fd317f6cb2309d1a13526a44b7d9b2bf93947dc3ac3340a7a114051d33d152310574f0d784910dc1a8403f9200a8f5bbf3610c544437626236458f285196161496389b02ba46a72da0149b4ddfdd55f7862a07395752a37cb0244e94e1310e0c0a148a9a48b149bf2f345f3f89813c9eb05160f63f0b363deee5cb77ea6e951857e1942e5c56d72d724af7aa24a8aadb512f3302972c53b0eb7a693e0b0c775b21aed72995cfe9e9347a07d43ce3db9f22d461e86416ffff6f2e4e36306630052a2b03ee36ec52af0d684fabd5f38adffaa6c5a7a8100d1aefaf8576b363690b76e2eb96b07ab790cf63cfc334b7469b5b5b397c622f7c3ee064f9272443bcb928b6f7a2450cd33550a42843b0b5ac9e37134c81bd56b72e1030b05a5b3ac47b5af22a9dff0700004adacc71db2b15b4ffd98e30224763382ade45d164be76877d63de448f3ee2cd29707484df87ea6e8e6333b5fcb1b8b43a7c005ea800000000000000000000010000000000387592adc78ccfe479549e6f4efc14c4a5cfe845e6157d6fe70b278147edf0e25065ec6b17f8022493d105c9c31121e7957aeec5f7f2af0446d128778c8bf15b87a0eec6f4c75966b5f0e06744bda63134223416102aea1254d57c390e1f84ec7d5c3a758ce59c9e2c4ce1f28b6783661e272bf1cb5c8ac177aa9c6ccbead9a96b22394afb840247e5d69473b836f070dc0bf9302e33b03d4e07395c82e33667726b51ff24b0bbea730702835159e3517ffb3da0d01833589fec3bdab629b21e5d9e87c3c58d962ff5e75c81f583c64b7d5a643674801e18b06ca98b49d9e28d004c7ebccf076c64ef71421f672b0948b18ab5af448ca9446e71ba6dd4bd15a12553066de7cb767a121d56d9d26ce27fdbe6721191f2ed1cc3f9c5e300000000c4793165b3cbf51c7d0cf9edf823641e1bc7db7803b60dc8b21e49a33a73ac00337067dfd3ecaf4e6dceee1048f300000000000000000000000000000000f8ff00000000007958a50896df65337581398793d0a9abe75251908c07d2957ca70ad7ac31aae536294d6a944cd35f46cb554d8aecae5a72cb24596d896ff9ad83473567b6cb9d032c395a1459399cea31ebafc1e77649b55af527ca0f1ac972ee72a78391473c1b9e0000000000000000004076eac7e605f8de6f0ce5702af52c5d78bac0097d92f078a3a98229ebf281c3c876d2614109b69967871fea621fb2a29a77a1516b51d9b1c3c5ef1436f50fad4a1cd92a211fec61d37c8b410a20fbdeb642228d6cfeb8cda8eea3a7f343fcaa0459b9d916abb668d4799534307084ee7d854dd0850000000000000000000000002f40c3e24f9c0a56edf543425058ff00ebda26a43bdab770212186b84421d8b841cf9181d47c08cb392e414c1efba9978a97769e65ae443644dbdb32a50cdc717a34d1aa9ced37820a6d1cd0920a9a07e36a85e967bfa7f2caf1c9b52c06f4d178fbb91a169e9533e401819e57cab8147618196e7029327eeed624bb92a7462538dbd8a4b82f87df7982b44b160a598c75bafa5a9b388a4430bdbebc83ac2ad2da3ae80c851bc2fdb8d444597fdac4538aa33bbd204ffe534b15a1878be30157d0815d38fc2effeb7b87d6bd15e21c7b7c7d1ad7b3fd69b4bd06716a203e82f4c0413719eae0967fc70f03570375c2d0986b020066368e6a18f50d32f6fa95542f70b0cf850a3f25a9e76601587e9158b8cf107cc68e0263b270359dd3f4848a049a11659714f6a40df0fc79b3129bd9b1f27b433ae6dbf2c61be55f6a9a06cd6676e2193cf61876330d948b9986df5536574edd427376d308b328f961d821edec74b8eea8f3eb5e9b412f31b85c71ddea2838600ae982987233316bba8bfe260e556eefa9c6946acc5852d2f504d9d43e7d52621b892267642dedf4d6cc2ceaa0be2c070b87ded2785832344532fc562c6a8d39dd9e7233415bfbc74cde3b4afb43fe01e2f9161a1f7ec212c3c2938545efc041e65c8da6fa08004fc47a32b89dc1bf5aebe7b3668d72700b163a005ca227e017a1f90439fca246e7860d0b2536a859d1b07773c7a9eeef06d2fb5241211848f16a6f58dbcdf108d64b6a556aab2ebe79ca06f30d89bc640173815d74aeafdb0856db3b2e9b855538c13609ed94da1419d8312b0feecf56c2e203ae14e1ed05361128aec71587fd6f40b33499cf1c39e28859ba544d413036156cb01a2381ece755c2b6da49d3889f37341a68fb35eea166cfbe1cdbcee9173314d294431f5e9c42028079d0215578896b2edb1e98a3576dafbd1cb7374cc76268304d49e82c1bdacd6eac6ad33de8574a3c39609717af2991314069ba9ec6766ded1acfbbfc0f7438e2376411b3ed7e41f2a9e1ad3473c97d5a351f893847b134d9c205880a0b55dd256f85daa4c519caa42f043cac2d6cffdfd28b9c407c517305a1ba7898cf3343a8a796d45f08aac755a49a2bf2"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xc8fee3f8}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f00000020c0), 0xa0200, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000002100)) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 1m16.202371359s ago: executing program 6 (id=1376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x706f}]}}]}, 0x38}}, 0x0) 1m16.102368323s ago: executing program 6 (id=1377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x70bd27, 0x4, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r5, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000894}, 0x801) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x601, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x48880) 1m15.625000009s ago: executing program 6 (id=1381): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0x10000}, {0x6, 0x6}, 0xab4, [0x5, 0x7a, 0x1, 0x4000000005, 0x40, 0x66, 0x1, 0x5b, 0x2, 0x1, 0x10, 0x4, 0x0, 0xffdffffffffffff7, 0x621, 0xa]}) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) quotactl_fd$Q_GETFMT(r2, 0x50bac076224e9b10, r3, &(0x7f0000000300)) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000005200010000000000000000001c000015140001"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040014) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2d7, 0x7}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44054}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0x60, 0x16, 0x4}]}}]}}]}, 0x44}}, 0x440c0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRES16=r0], 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 1m15.491369945s ago: executing program 6 (id=1386): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x3d90, 0x0) 1m0.479555839s ago: executing program 35 (id=1386): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='binfmt_misc\x00', 0x3d90, 0x0) 30.373876522s ago: executing program 4 (id=1701): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000000080)}, {&(0x7f0000000180)=""/192, 0xc0}, {&(0x7f0000000300)=""/221, 0xdd}, {&(0x7f0000000400)=""/158, 0x9e}, {&(0x7f00000004c0)=""/204, 0xcc}], 0x6, 0x3, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x15) (async) r3 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8009, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 30.09158534s ago: executing program 4 (id=1705): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000040)=0xc) 30.091315324s ago: executing program 4 (id=1706): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) write$sequencer(r2, &(0x7f00000000c0)=[@t={0x81, 0x3, 0x0, 0x0, @generic}], 0x8) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0xfffffff8, 0x0, r3, 0x3}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x2, 0xfff, 0x0, 0xffffffffffffffff}}}, 0x28) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) recvfrom$unix(r0, &(0x7f0000000300)=""/225, 0xe1, 0x12000, 0x0, 0x0) 29.212387333s ago: executing program 4 (id=1714): prlimit64(0x0, 0x5, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) (async) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) (async, rerun: 64) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x80, 0x4d, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x3, 0xb, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xd1, 0x7, 0x10}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x6, 0x2}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x3, 0x6, 0x3, 0x40}, 0x4a, &(0x7f00000001c0)={0x5, 0xf, 0x4a, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "f2c674f8739c3bd3ca96e3d121faf188"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x8, 0x3, 0x3, 0xfd}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x4000, 0xf00, 0x8, [0xff00, 0xff0000, 0xfff0, 0xc00f]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0x2, 0xfffb}]}, 0x7, [{0x89, &(0x7f0000000240)=@string={0x89, 0x3, "65d26bed64d6f675fbc953803878b8ca391b8c25b006638de5deaa80a0138a071282a2ffd34c0da1b14606fb74efd8b2bec6b6a633bd37ca7da8b5b9b7fd5e2179204666b1a4477c2c8db0fef541e456e19fafa9b22272f87be8d65bbac88ce31d36799bd1ef9b856f123df94869e284242ace5acb5909893053ed9f1ad3fd6fc99c0b2d296c2a"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2801}}, {0x46, &(0x7f0000000340)=@string={0x46, 0x3, "15d1c8b0a6768e6bcabdf21b1239c5f4bd729cb91b3e5b70ea7b7c98f4560f00ec0c8224c1b8e5e7eba2a490b42744de8fb4127aef1e9c78cfeef9a77845d9f956e58c5b"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x809}}, {0x6b, &(0x7f0000000440)=@string={0x6b, 0x3, "e452ecfe8d366ddd016484f9514fee67a3abfb477e39d2b877c99dbd9a3335d1ef4928275bb4349e71c9e30e384ba9bee7fe93a89ad72a0d49abb7e3d757414f47485ac357a126bc1ed2835c6a448f50259e9f2aba4033a141db97ee612059e1acf81fc55b678c9e01"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x5d, &(0x7f0000000500)=@string={0x5d, 0x3, "74d0ad4c3ec99a6461fd723c2c749a4721e5af688441cbe64a33aa55a0be7fbc8fa5b68b86ab9b228f422b23e2b3275b58f12e253d6a6f53d4f8d31d217d9a04ceb9cbcb36fed17ae50900d55378188ca3b9a07286c6e5c984c6af"}}]}) (rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 32) socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 32) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000140)="0f23c9dfe02e64660f38017906660fc734f0815c7014c666b93c0800000f32660fd4ca66b92d0900000f3266b9000200000f3264660f3a40b7008828", 0x3c}], 0x1, 0xa, &(0x7f0000000100)=[@flags={0x3, 0x84}, @vmwrite={0x8, 0x0, 0xe, 0x0, 0x1}], 0x2) 29.145774637s ago: executing program 4 (id=1717): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[], [], 0x3a}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = syz_usbip_server_init(0x3) write$usbip_server(r2, &(0x7f0000001bc0)=@ret_submit={{0x3, 0xffffffba, 0x0, 0x1, 0x5}, 0x8, 0x0, 0xd4aa, 0x0, 0x9}, 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0x8000, 0xc) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000100), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001780)=""/4096, 0x8ec0}], 0x12}, 0x40000002) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r8, 0x29, 0x2d, &(0x7f0000000000)={0x37e1, {{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd9}}}, 0x88) 28.572623513s ago: executing program 4 (id=1727): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, &(0x7f0000000200)}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x140) write$binfmt_misc(r0, &(0x7f0000000240), 0x0) splice(r0, 0x0, r1, 0x0, 0x714f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000040)=0x700000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r7, 0x10c, 0x8, &(0x7f0000000040)=0xffff, 0x4) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e44", 0x4}], 0x2}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', r4}, 0x94) 13.438731556s ago: executing program 36 (id=1727): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, &(0x7f0000000200)}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x140) write$binfmt_misc(r0, &(0x7f0000000240), 0x0) splice(r0, 0x0, r1, 0x0, 0x714f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000040)=0x700000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r7, 0x10c, 0x8, &(0x7f0000000040)=0xffff, 0x4) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e44", 0x4}], 0x2}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', r4}, 0x94) 4.828431046s ago: executing program 1 (id=1954): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000380)="0f20d835080000000f22d80f090f01cb66b8f0000f00d007bbc035040000000f22c0660f3a21fe809a00700000180166baf80cb8d1bed58def66bafc0cb04beeab0fc731", 0x44}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000040)="c7442400ca5ed150c7442402688f80cdc7442406000000000f011c2466b8e0008ec00f01bcc8f3c3792ab9800000c00f3235002000000f30c744240074830000c7442402feab0000c7442406000000000f011424c402793401b805000000b9060000000f01c1f367360fbae97343335300c4a12d65596b"}], 0x1, 0x40, 0x0, 0xff88) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.641541627s ago: executing program 1 (id=1955): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (fail_nth: 1) 3.782491081s ago: executing program 1 (id=1957): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 3.542272186s ago: executing program 5 (id=1963): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) getdents(r1, &(0x7f0000000000)=""/26, 0x1a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x2}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)=r3) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000240)={@my=0x0, 0x2}) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xa0000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) fsync(0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x0) 3.352709692s ago: executing program 5 (id=1967): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x98, 0x24, 0xd0f, 0x8, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0x4, 0xffff}, {0x1}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2, 0xe, 0x5, 0x1, 0x4, 0x4, 0x2}}, {0x8, 0x2, [0x6, 0x3ff]}}, {{0x1c, 0x1, {0x9, 0x0, 0x6, 0xffffffff, 0x0, 0xf, 0x7fffffff, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x1, 0xf, 0x200, 0x2, 0x2, 0x7ff, 0x0, 0x3}}, {0xa, 0x2, [0xf, 0xd, 0x7]}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) writev(r0, &(0x7f0000000200)=[{&(0x7f0000002380)="684671aa", 0x4}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x7, 0xcc, 0x3, 0x6, 0x13, "cfbf6b2b6a147be2ba746023f082964ebda589"}) 3.352370481s ago: executing program 5 (id=1968): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0xff, 0x0, 0x3, 0x2}, 0x20) socket$inet6(0xa, 0x1, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x38}}) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x38}}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r8, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10120, 0x0) (async) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10120, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0x4, 0xffffffffffffffff, 0x200000000000008, 0x1000000008, 0x200, 0x9, 0x2c, 0x80000006, 0x1}) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0x4, 0xffffffffffffffff, 0x200000000000008, 0x1000000008, 0x200, 0x9, 0x2c, 0x80000006, 0x1}) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000380)) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}, {@verity_require}], [], 0x2f}) r9 = eventfd2(0x80, 0x0) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, &(0x7f0000000180)={0x3, r9}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@bridge_dellink={0xc4, 0x11, 0x2, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8106, 0x4}, [@IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, ':\x00'}]}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x54, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x101}, @IFLA_IFALIASn={0x4}, @IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}]}, 0xc4}}, 0x44004) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@bridge_dellink={0xc4, 0x11, 0x2, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8106, 0x4}, [@IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, ':\x00'}]}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_hsr\x00'}, @IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x54, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x101}, @IFLA_IFALIASn={0x4}, @IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}]}, 0xc4}}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) 2.959761306s ago: executing program 1 (id=1969): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x480002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 2.891970414s ago: executing program 1 (id=1970): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="f78d9ca38fff26f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed", 0x39}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da9884560b0033079725f33a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c4430400", 0x65}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000031c0), 0xe00, 0x0) ioctl$CDROMREADAUDIO(r2, 0x530e, &(0x7f0000003240)={@lba=0x2, 0x3, 0x1c, &(0x7f0000000040)=""/28}) 2.891628171s ago: executing program 1 (id=1971): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, 0x0, 0x0) close(r0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, 0x0, 0x4080) r2 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x8, 0xc9, 0x9}}}, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) write$P9_RMKNOD(r4, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x80, 0x0, 0x3}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) 2.461882249s ago: executing program 5 (id=1975): write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[]) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r2, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0xfffffffd, 0x0, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x3, 0x2, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004280)="ba5b8ea61489f0f38300fd701eb516b4c60bbe2ff4823e4606fb2bb264192217c6fa28b332cf26b91e1d9164bd551945a835ae0d1cbd61c683a32fcfc15e84e91526d14a8f3a5e20426db65cd52292757c753315dcfc610cc8fec0689484ec083ec9b5abb9fae2bf0a3b615f0dea062169cf61a9f0cb3f29a6c28752f80c082728c300e1ecca8a70b8e500dea6d9152bc6627bfd3018cfb624a1b541defe58da6df08027d67434aaa60468d9fc3772251814262313bc9f879561d5479379d0bcc9736efeb8b2927751c83c2beb3cebe9a44b8962332c6298095dd686e96a86ff0ea7add27ad201b64b7340ce6dfa43464a8270f0f11b1485389f8b4e85756be2ebcc8a560a2edf06e44cc43d256501a1e44283fc4c14cd5a17a8538c602de6eaa0db28eb73343825ef7d295cf1af0d4a3154db224d319f1c109a09bf3a723e5bf7c69aa82ce7150de7713ac205e73945a7f94b1cdfb1376f2e41a70fb7d39cc4e38e60c2ca1ab7937defac79abe448aed5be52805b47f4811729cccc363b0dd88472950ce5afedf7e3ee53e567540674d48528c0dd9c341ba63fe213d5c907889e1a048e7c239306ef73a03cdd8c2636831949418bc4b651e523f781f3588ce069c174e7195d6a15a14f09d14b1f7bb2b33d37421e63ddfa269ab8b62a0ee3d97d516a5bb00b8125e38eb3a536a0b17b54621febb2936dbba1079139474afcbdb0ce42811d1e4c345eddf278b16de9ef061afa842c4596f93d7f4b25a1e04efa933b7c3c9f69a6e998acc68e22b11bb935fa8715134028a6cdaecec54089c2a0c689dbb9b54114b03889ffc4230be929a2b27b04f8db25c52f0e994d55197cf4a035a060a5d0a5bb702bb1c5c4cd8762cfa2bd55440960be8fa8a21193cefb0ea9fd71854f8201129ea98e89224f80b50d3280b2ca4675719b12be1544eb3d1c9aa6d0b8fb3bbc76895d9bb836683f84fdd22fe08add2f5b05afdc35c1ca9464ff38c5023c6e83c08d4782056cfa79f5afcb6a64b3588611d728a201dd5347a476b41e230ca9d495df26795e8f3f3aaa3bf94f9b7480c2a6c699cf91a48f7b1f6cd489f65fe73e13c009e18d70ba6f14d2d6f1553ebda5e195342486f18229b2627418b336bebce7c27aab37618dc9f2451d9eb0680101af466f33aff9a8b12961e2cd01e815f673190e7c3cbf84cf0d233679cdd5cac74c4fc4d784398fedd4f52c098632d8e10a12f34cbfb256ba61362432ec74732abc64c3b711f2aab8273ef88e31897d2e503bb80493c0a1182d638420beb6ef9e11aca868c9fc61aa787ca8dbac99df545ce2d5d5c4fc7e31e415e5c2b06a32abeab7306c528bd22c23135e94fafa4271ad4bb229871909786a2252b8214a30f09bea5913b84079d2fe6845d75013a15069002b0e0956e4c81c2a9f75fcc040c47ad4c23a4f2797c8d9c43f87cbbe0786b11967d5ad1dcbc5fe39b61615ba16392337b78bd5e5fc9ad9d646be0ab3a8d246309e056fa66d34ddef99b7371713b9e2827a30d54645664743af794ebbe927e43df9146950aa24058b81ce7f9555d1987baa47c486bc4180db65b897eb21ff2529423c88f2227ef4eef0b035ccc9d11f895d18ed9f00504d9db260d1561a5cc3692a52dac20d64ed22c50da171b223fcfe0a7e451c8341deb63e3ed6ffca9fd79aac6c8cd4e58a4c2af8acd487bea4846b7c222add7872d21ab64567800fee1b1669f631201335fbc5d1b3d9045b000055edc3bd551518216893d708a44b438e4479e33508c12fe031e8f7a1968912eb7cbe4053f5940063c2fb5770387db74dd8707a71b7671cc5abf42012a9ee638c60f59d9678b22fc536ffb953843ed6c66ab9bcf7cf5ff249a440aa726339b9a96fd3a0e3c3ed11ab910ebdc3e0eba99809fbd8bf1580f0a140924bedce7e90ee7e0d8bb9f8cbc990da15772e67d36991a25c38b77ef6d01357ccbbf6549103955a4dc82e0b1cd5e16907a4e7f488b0949934947a7b69f3956b3b62c9d357c9a3329dda4b827437c6d0efc7f5b767253c0a7b463ec9ec9064142f0b14a1c617ef9b7130a51cc2b98079337edfac68c8b777b73bd58097daa9f64ca3b9daabcc53dfce7be8dcd83b73f453023d5732ab3bb95a80845e6e427ba688518ef7425cf036ad42df97b339ab880c949081ebe5f4c051823cd12679164984abc2a2e3676e7e44c20643e48a2f2440ef1b541b9baf3e8a7db7a0f01c5217ef20038474d9c1207e72fd71a25d5a8f7b91be13b3a3b9d57edcf7c88b0a3b4a060a7e03a5667e5b444b0057dd5ab4e1c85e09f5552faa5654bba884bdca0247f12b3244a0f7a0492e321eb418cfa75915d76e9e26d734345fbd6e9b40f9c47b203ebbfbad6b330ec90adac0e1b03745e48a1eb3fa3c079d47062bf5a779c3479e6f5c4b8800a1e7513fcdfa0a6c6bcaccc6f736a0ec4031d7fa23c89bb6a8702a694aa87e88521490a5dbd5d0e5775b561ef9d4376e367e31a83df641c55d3801f573ef7a2ea945379f9d07a04cf8bae55e51599719f79ca33917c421ff63a335e11b4f266f5171e27b60b544f893cc8fec2bd191ff7ed87476e31979df4f01d71af376541bf09c0147d3ccb91285e6eff7c44fc8031e3a03b47abea0828e42861d2747259e1f7815d1d18bc8efcc36a27643fbbbf33eeed6b5036773a305a901da08f858e1909ff3ea335bb48200020044b0711b67615a0626017da66274e804883aa858d04707d443805caceb8bd239e31ea7a446752fe789205bb083f1ca90d1589c43e8bb152801fff7bf3853d8bfcdd630b41aa3fe1f09bdc4cb1ec33885c21b883935468dfa05063f9d7c1faf14115ed359122187a90b2045c96650b2be20f1519edaa1d3597d2bb22e08954d00f7addb14b639258c75698a98046028c6f9ff187086b569cd4856d97ea1799722158e8418dde709acb7fcf890edeedf6f49c7d79ee5df4c535d53bb54ecd4a3031471262190d44b1d86a5410f34b80e387eee07acb83acb7de24b2df74b0b9bd6179e132d1a5e70fb52a2f704df3851e264192663297183b1dcf9e7f1a2c746991c2f239308201a1daa8b2478079af02204c8244adc87dfcc0397a4db01f1f079c39bed4b12a5c5e4cc0b0c66e83691ddb7e7c30d23a1b97ae7e0fdb56564ba2999c7aecced3e0fd1d185bdc1c27f4404f11177275563d1303dbdd6947277d90ff461425f6e6aa64a69a1463861f83fedd00d0c3f8c21eb9184cc02f501ab353cdcd3ec8da677e8da8472d22bf14f34bd5c4335dcb59d8a645a7074f604cf2defbd2fa005b0b88d64f010f1902612a3006dbd0c0c6af178ae888dcddd074845fd691dfe45d56311f491549581b225d6997703eb55cbd60beabb8d468d07ef9e6d8ad78521a455dd0595a66c2d5bef407cf266c4837e8b41ec5b08e7f097abc73e0e36ab26e101e5f994f672c741a49e608d93843e84a42162f0774436fded89e7e753902869178a9346c237266943780da10ac18b6a8abb97b558d4fb331fd90820b2a3b64b11776e7d4f53a1bb0f6695319120905d8d32f9042c3a40c2c47f89b4622cde88af69f732bb6438085a7c614a9cb913a7753feacbc54e32c33431230c78b252b4bc0874b1e07d85e7cb3b07957916d448bba0e9d97c320a7fca0e01948cf7507fb3bd94221e3b92ba3c55f00a4569d64c3eb3936a2fae6db0d527b55e40171f2df19b84cfcd57332eba0765eebabbd9e6a9bc8e1f43829d170025cd465318a28ef062815445264aee30b5976da2480cd70d23255b6f240ea6f211560b767ea16b8738f8e85398d4df771b1005e5d590062d55434d504b5e9be5a8b3d2b3b41413cfc2a808318679ef0b2607d6ef00496234956cdf74ba8332051a8facb438dceada860d3aad5cb33385023d224715cc28cec354686541f66902a883c4552528b078aadc8528a442dab2e68451d9ad0966687c6d8fd696652af8d43ffd37e7ccb96d5a0bf6d72c37685512e90bd085d5f46d36ef55af96e2eaa1f5d5ce44460413578d716f963df48ac4ce00130bb44db351e4fb52f8b2ae0a944c49514da5d740f3891c34b0681066f0c2f7c26a80a44018832051d2c358df63f6e339da476150cf834100f26e73ed4bbd82107c2fcd401955bcf1c83c2a1a1b1f72c60da8f9c5647113364cff4a204af27f131883e993e436c186b5319f1d2475842d032baaf41722e697e2d1fe83717e1fb6be097fea1fba7d354ebf8d688d78b0df5c11a49f3f3a2a134ba1157372820cf67138b7672bc6e115219df45ffbc31074cd6ef7ce0ec8574bda2c839a086335164894a9ccd2da9b53c95ea12f6499ced7e2011720f0fcc32fc6fd00a8a206754abec3525674040f63cad36056425d329cae87d1e76cdcb43fa95151f250362666eed4a3924551919da9d6ffb8094d836340ea3cfd1d4916b6b631bb0886f696e60b604c4d7fdd55e282e22c549814ce6f75bd3460488d3500ce58aa241a6a8c5d50af901df1b85dbd32fced3dfc4d510f08ccaf81fdae78db2d5bf7676f0b2ab72fe3f43878f7dc43e4bab02047ff51c02b37b1db2f68068fdee95f59248a633ee9dd1153b0a54129197fe8fea93fc473ce6097704da00fc25c99adbd1e24e5532868e8b1c2649699385a480785c88d837513a33ea024af35adf57c6c7a0bc8f5495d7424235116a79739c86842bb35e9ca5da7798f7ae3ccd9434dad566b70bed82c644cb65ddb37e94a2f06c332b32a829aad2ddc813ebcc07e07e5587f7f7ab27bafa0aac1441a809fba549bd3fa7b8c16851c3d22d7ba41ebb1b19f8e9f5d114950a5798ad8ed4d1b5bb4ddc6f3cecdd719baa78ad32d0fb94b8156811f9ef54ab2a29738e2e596b1424b19ef39d0a354c3e8aa6227f4fb2787b10cfc615dc356800066f800718edb658bb3b85d775c0724e7c2942c8cacf420a0e23fc2bc40d078ca5f4fb9d95236c8c35008c43e864b2ee0d7f2a634978c6c34bc2b5040a29ca1b1c60a92d7ff86b3c9dd90ebf3fb212d4c23d69be399837b92fa04dca5075ea7877561ab64664d12a1e1ff39cc20f4518b460ae9f87995bd3ae66272f3f24a47c6340cb0318b67acdb26064bcccf7ccba386e07127d9ffbda288cf2924623902d9f4be97605ab5dd02a969f44de8a94abd68020c1f47033ac2b7d0e9431035e358f7d876a119e31b154b6e66815f286a41a23cba9fea4dc4febb5210b291202e8dbeb6ee9e006f108ddf891ece25c7311e7f4c788c37e8a39382405627a547e609393cffd1cbfadf90ff9060a14700539d497dafb6a249e4ec814a9e68d7a954a3c51776af6fd839b9b4b1af37797431c15794508731fd5be32edc6514ee16681f9934b0d83185ca69820d3a590d511e9f5f3ee5bf33f6ed22d507481bd7f05aa644ff19809d49a3c2924cc408ddb839d6f07cf0894ec6a6372c453d23aa324802308833027861946679abd540548abb956743cf0ccb3925caff0c597334b72e8d081c7aa9822207426b16539e370678a2fda3f34555d721570e725e3eab5cce6e0f7faaa3580f6c7d7eedbab4a0b7af72d3daa450e467917181bb2c3eaec374209f7e74a4e9195487316e7c934d3f4d0a0ffd73ae1c0855690d5f03d04ad567dcdfc366f92bf13c3e667dbce23e2b64232c11f641bd7cac7f1f9eee72eb98a5cc28226afcd1fefec1b275186c48f063fc2e99448569bb5a903ad450a5812b17c8fa3a7ae639734974d368ad0968b2ff1381c128ab00b837d765e36bfdaf8d5284975faf739b9882a0db327ea522fbd71c3a708cc674bee98602540804d856829826a95543c0168af63ff084c46ed81320f5d6bcca8fe5955091caeb78ddf53b819ff91bce937e02025beaff559462045263a3ff132dfdb5024747bb5afcdf8dee04a8085a9268790256483e7f33fde71478f8772339154952dff0e1acffe87ee37f830c30b89042b778cc87fbbb7967fb0110a54ea4a7bbdc575a93dfcd4f1841c9a75dce63f90afed202aceb7a9593d0deece3adfd66b4f40f50c0cc1822835bfba2b20f25d991f8ed85204e9b56da4709e3c1544a96fcb914c327aa8d6e7e22b21c3745f579483a1959a2766cb34a961572c6b1cedc06cbb4299053514fbb384f8192f4a5e0483667c685b3fd032a9c01471651bd7f8503eb7a9b564f779f9d33b120fb9eae779e37b28c82790917da2d763186401bf9b9d3a50572dbd7f7ac54a5afed50594e175ecb23f9c9fb949bbf84b94ec580a1d70aa405d645ee0848517d239d5dd0c0474e0b50991236b57d6af5325621399fa647946be8b27bff179dabfbf084cd7bc3fdb5313636ba7ee5264e90d76add5b41c3d23fbcb2e9066f187bba2770abea27f2aaf8cbe545f216e5bdecb3a584511970314058474803a24f88903bbd69e333e2c9046183c7945736a0f39676b64b12b319c3ce11107679c67d87ab6e9e1d2d28905674e9da798e2026cb544d4ae356991d29ed4bd38f2a5a7c6cf2a30b1b6d48700cce7eb573e84a46c25070525f67d45538704ca3cf53be6c44e84fbb40387803e6db47b373cd36783689b7f93eb27287570dae90d21214a85d6bfa898fcc2181af6e25daea786d7d50afa58731b4fac9c9d2861c802cfa6ef854e747217c0a894a28d21d0a43b9de43985c4756c29b561029ef95cfdc27bf38f26dac2fdf97cc58d9c1c59bf4ee59768ad51a1d0d8de92d0e2c723b1ddf411d23566ce0b72cc227d41fb63b6a13188fe72525ad316fae05f5aa7233f7bfed187f1b1f87a861afb173552f5d7c9bc7acc95107bbc323c376044a01ab13da42d1ab27b86dc3de3b157e47790b78896bcb2c532a7b7487bb6f24c4021c42357df52e4d5848b5584609a482dea46d173d2a695958002abd093c25f002116f8afc55e729024a4dedf5a4d3c626ebd9367fc18e7e4c7554fba0ad7349c5d526ea6dbd2c03ff33580b15fec3c1f827e885db592b47015544f6b1d400bde1133afa0071f68feebd987a807cc6d5b1b8827410c0b6d46c4b0cf6a5df999f71ba3ef4d9dae246d3e58e7428d98a33076ffc525946780d0100000000000000b872f0999d47c6e424317bd8b0e2f70ac10dfaa19990e2a3f744ea5b32996dc228ff8de836b5ecb7e56cfb3dbf48172b5ff09eecf14439b8bbc5cf3ccc9863ef5547fa2896b73196cdcab97954f9acbec8e7d2626b1a3b8983fa31961ef8c8684ee824f343933cd73d516e1f8086556ab718010022319ab39f72b9e7989e50ec8681f3f6a778e7d23c8be2f4c26bc0ed855947107e93cc9e7515fe67b0c3b6e43d9fb157be2b2f2d9c799de55214974ec254f54cb6c20a76e656cd753502499750238164f1cefc37636e9eb4038053b631c95d80bc50e248ef5692eeb3f0c86aa50476eeb8f80f7115a4c410dd80264c123ff0b62b6291db85865816cc36871b061984a4afc440029c338684330a640e9b31e06eea4ded4e15d92c44a28368138aed08699aee772ac5734e74a65a6b8acd6cb86b2bcf12330ea808524ee838adfa3c185d24e3b2e5e89a5c9b95a659298a4935549e218d4bb4da58a2a663251ffae5c6137f8e70a86a3a26f4bdf2187fa4b9fb3c822ab961846fc01d247530c89daed7ef18a14cba3b47d369980cf48049021cbaa271caee8e00aea56ac7b5c29899348ae129ba840c39f33a7c2f0b2fefb5291d23ea7e5aa91101585576d9996a05897341e41063bf9cae137ed985283bbe3abe8e5a2754378e2ca7f1287056c8a05459d6a47ae4933c43879287b7ee557f3af6b047775ce76aa064be50caec22382a5e735765910fdd926d148ff77f42ee9f60fedb0c4158e02a385934c84521d52be0e0e0dddb0bae54acc1685919cc0d62192950c2e476d169f3533ff9dd440c6092450e15e5199d1d302bd81c3f1df78e71a39df0194beb1ff8dac956129b7be3d39b6505b17d2fb309859d6de62cf58760a4623267ec5496588d2ab5407e31a132f26fe29ece80ad80653ca190b83c9ac8345259087f0a84a001fbfb49c7442ab371d30897b94779039f17857ea96afb9fa41db33d7f3dcf123244975a1714a96db05fc1bcac173081dfaae090b16c05aca4dc98afd5798347b2cfc60ba92eb5e237752d64df1982ef13b116f6b010b0d2eca243f0f991a3f34a486bf58e06d6f922e07413d5844ff279559f8c401785e0207ece4ce7dc53c7705e2647a3c352902efb136fb0f6952eb8acebf90e7e56e831c228cc319e9d079d89d2ff1d43fc1a1139c2d7893ae246747a8c0c1c34c28cf5d6ea9b6c71b3e966b3f32259a19c3e35e4a08d4dd27052033fd7f1437ce9cd2088b31b8ba974558dedb1f8d4355e224e1b8df8da3bc93cb3f9b582ac379dcd0104a3f146d6d3fb699de99cccd099beabe63841a2dba61a465b258692fd98c9d4ff1fbc7212ea2066c5367f64707e7b2e14c51d78a5328d044ac33b1313502b986ac0462c6c3455f60f727e3e895b1e4df196d4f7a9e21c53a6500f0dc6e957530164bc648ebfedb6c973ae8fe49a92fca7274f29edcb202356775baab723f9e3a03a1d24d6dda56853ef0a91ca8bc7c530e28ee896efd1a1f5866206dd82e0eb554f4afedd9e87562903b49963d72d8caca7bb0975252f8f5578287e583aac618995a941299fa0973e67ae44469336e45b68f978fedfc8785e333610f8029b194226f86e770ac987cb84f9c76e5ccaaefe64bfcadf5635bee6077e05364e8872100003c9442e1c7cadd6f98e0dc9e2db17eabc8e6307ffd485dd06935a423d5c9cff832cc1d481e49d6dc00176d0342fdab19cec251b6fbed3ab6374ecd022de617cb2720ffebfb8b98b426cb445439b7b088fc7d9ed9a91989f2bbad8519070a6f916df7c49e3184fef1753387a5a2b5b991e04de915e053c471d198b843fb0afe5a68cf8fffe65bab08f6f5425d458a55de6355558bc5049e3a176977630a45de0b7076cdda2a167003090bbbfba5618ba2f6481cdb1386d1fb3c44a35c4d0cf9ca14dad697078fa4a062e55515c8cd69c6b2e911b19f637cba7c6ca26b3b4b2a74fd5cbc64f269fa5d6f9628830962db2d7ee04a6c37673c593771e568e8dd6cb965e67e6f4be91e625c1015160c234e8893eac8ba39708b9f32e519abfb9c5b2562e424d6eb2c8a737a830997821fc294c559d14d7c0bc8fb03ceb44f1bce3f63c46607ba95d70cb8098d30e1e3e6c5957ed3b4bb1b96d3c3879098247483e6c4f669bd556387b346bfc5497fd76a8e89bf185968f3e3dd58214ec024f5a4a180b31eefef8233bbcac8d9706b35476cd5d4cbe86034928f5c4a3c07fbd3e19ec89536aaa4fcbc2c7212ad2b5c3213a32d760e9883149f1770ef77a1313bcbbd41ebe246e847aac1baf975fdd326bf81fc68e19ce8cc7f056f5be524f35fdc7f4c0420c36846ce5415c725291ebe4964090e5c59d6844ad02acb37c437486e677b0b48c8bfced79275ff64f4be33b3492d40b8496754a36b9657efbaeb2e958de29b2de4c2346de000039c2877e1a21bf2b550d0ac6cce5feb72faaccb3ba47f498c460669ca345b5561f99b5f2f020a2c01b9d95399064eed1b7e75b802f3e70239b1c58c75f9067ca4543ec5d5e32fbfbb36d9ba9db1682c7c63e91f399752c155dc5077a2dacfdd6f9e52031290be704314d5ebdcccf9f30985dbae514d0283f6c4b7e3ebdd46b6279e8031b3847a8b46240053ce76bee81fa7b62266a1b501153aacda0803809cb4671d53f6e55dad8fd508373c1c2c9353a1c9f8de2509eacbe8e1733477880c549e327a8db5aae29169ac886cd5086b7f4e8823549c44e48fcc3683fd045dd93677336998c4016dc31823ec36a0d2ceca92c131cb3d8d5e08275f40f70943de8bbcf583a8985c30dbacef8425aaca57dc860753c31c17194f71c5d316572bcf81ab8db62e06c1ee39c6a24dd0f68d82c75762842c9bbb70127029154cb768aafd308471eb518c8aecf27c0efd01883961ce002a6231189293d00dc4d71824d2af860b7b3efc3c282b2719dc737bc5c3ac23dd7dd1420472d64acf6bb2d97503804a67cf9516e28167ab8fd38acf90ce56cfb304b59a5960f4f38963db71bd7ead69178d8ce52b74297ea3a0cdd55bb1eb849c02f8a87610bc7fc48a7af7d6e56cc41cff303afadeb6b4592605c3c3c2385c9a165c1c7e30194c0e994499472b08aaaaca3707b9baf3185f5b1314853d50d7b86f255615fd4009f07b87085bcc44c865f7e14d29e64f95001bc00c68afc3a0a0555027d460519f15264289c0918cf594b5ad37252575a9484a1de681f70745d2c6248581cd3702767115637c7cf7bc15a63775b90c285be77db8b85dc08ab81bb307694417a8d1c4aa1ed8716bc58a35e1dc8e23cde3748c6a93370397dd5c41371fbe45b86e3180e410dec137bd47730c7fdb7e062cafae686201b69071f6027ac38c191c333d27f5cc814c4522859598e7e54a04a7deae272533ae39e296785124efb6714089e6567b8db2cb403d87bea3a718b925825b914764ead06b48727e4c42bee1a36e9844f35c79fb50c89e4d9ad6a7b464299fcd10037166c2cecd017bfc184ef59fe2575e93a139a47e2baf5482f3a5d248413c87a39baf7e1eb1441ceb37f5df211844834808cd4df62b2e0b0b0a75da0e27720b5ae54fe00518e951e21ba4e1bc2d454e7bbfb86e3aaf7b9a25e354e56aeebd11e832471fc8edd0d3b4d3c123779cee870c86d97d703bc44b639a2fc49855fa54e9304de1dcedf90df397733fa94792c1bf0685335b027f3de1ac8f7f007f61ea9e51988f1fcbaf982b5b808645c4eb2fcaaca3c10667eddc4007061eaf3c250744baae0332bff7c9f077ede4b593853f4a165dcfee11b75d5107d1a86a6669c231415eef1dbb58f0b829ef03f4ee0e6acc787b1ad31807852ec4269d23322304842ac0cb13cd53e7e4479cb7fd9d7b4ecd722ecfea4c59f69760323d9930b03cba558cbe30711447ca93a01596d2bc245e9908738b1de17f07c9eeaa28472e08570a3129e81c874a894b23b1d8a77c1b4275fdea8adf5ff10bad0ebd41073059c3a900801699d4c1b023336ed5d675b57db4770f85b0cf1e0dab135633936ceaffbc4a8a1dd58bec1fd3fbcee9be9874158abd4376928b2023191d2c87f3657943a60dcb16212704cfbee381e58194c5671b594494c60325512773dc7dc38da37d8b275becb97f472067bfd7d3594afd78a0803839248c75fdce6b62711026cc32e1e3aa01152175a3096603394e773883790e96622a2b347ebe569eb26d4010115cfa611d4deb83ae4b0753b528fea440c95d5650acb53931f8ef6b6614b2aefd0754c5484b6139ad18a0cc23efbc3def8595ca45ef24cb6083c93261381a111f2ef450f5f95a343de96d4d426d3a7a72526b09b825a75df24dbf4d51a5b77f8cb948bcb78c4b4c09da92aeaf9855d40b0d5d8eabc5fe57c555f58ba0125e29512d2295b0c9ddba45f37a346e7826a4e3bcfa40a54be096f695adf9e66bc9f369556ac26c6fe46d4bd80ac949cd31e1390c14387a81cb5cf814944e60a2937", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x7, 0x80002, 0x0, 0x8081, 0x0, {0x101, 0x7, 0x80000000000, 0x80000000004, 0x400000000000, 0x4000000000006, 0x0, 0xfffffffd, 0x5, 0x4000, 0x4000000, 0x0, 0x0, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10010, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x7) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.568207961s ago: executing program 5 (id=1981): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (fail_nth: 3) 1.382397134s ago: executing program 8 (id=1983): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x66ab, &(0x7f0000000440)={0x0, 0x5f32, 0x80, 0x0, 0x8000021e}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB]) socketpair(0xa, 0x80000, 0x9, &(0x7f0000000000)) 1.382227584s ago: executing program 5 (id=1984): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) connect$vsock_stream(r0, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) (async) listen(r0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) accept(r0, 0x0, 0x0) (async) 1.231715981s ago: executing program 7 (id=1985): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x98}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpeername$packet(r4, 0x0, &(0x7f0000000500)) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="3675a1ab615b78c78467034c908067bb2e6b671f40b0975769c02e05696c479eaf1c9a3885c0239efd210e8136d1206f365f16a9b828f21d365c0f95935a01f5b81834b94cec913ad340fa917620d8b4b9dfcbad7021b50201c42f1994f84aec32b8d651a77d861df44c4f5ebc349a2c47ab1a22f74ae5fa3fb7b9acc70b2628718c393b65896a463ef558a663e12667b3915aa2fdbf84e47ae4276300106bd05ea6b609bb526635f26803202c3a94c5a5e8c4356d9f4b70e999021cffca85727d3d4534c15ec580fe5ae714", 0xc4) r5 = accept(r0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6", 0x11}, {&(0x7f0000000100)="994ac10457328c5ae9a6a9a471c9d0f27aa106580dddc1aff66dd289c97efbbdb391f7437773572b03f9352157993f356dca37a1cebe13ebf51709b0b0f366a517f63f89811bcaee8206385c8b268fb68092c6b4c7b7b486b959ae3b4937c45c7db583d2cfad590c9a5641ae78a1630748e1fc828ef13e1676b8cca6a77de3090b6cb3e9225d527e192e4c83ab87b41f55d9f5e4ca35f115de9d230e8f40e979ac16346e22e2cf78", 0xa8}], 0x2}], 0x1, 0x20004891) recvmsg(r5, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f0000000000)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x99}], 0x2}, 0x2002) 1.231337125s ago: executing program 7 (id=1986): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x40, 0x48, 0xd}, 0x18) fstat(r1, &(0x7f0000000540)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) r2 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x7) (async) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000200001000000000000000000020000040bf13dad7deed6e3fa0a41afa20000000000000000050019003c000000"], 0x24}}, 0x48850) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f00000000c0)={@multicast2, @dev={0xac, 0x14, 0x14, 0xd}, @rand_addr=0x64010101}, 0xc) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01012abd"], 0x24}, 0x1, 0x0, 0x0, 0x240000c4}, 0x24000000) r8 = getpid() syz_pidfd_open(r8, 0x0) (async) syz_open_procfs(r8, &(0x7f0000000000)='schedstat\x00') 1.141746685s ago: executing program 7 (id=1987): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = accept4$rose(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, &(0x7f0000000480)=@nl, &(0x7f0000000500)=0x80, 0x80000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) sendmsg$AUDIT_SET(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x3e9, 0x400, 0x70bd29, 0x25dfdbfc, {0x2, 0x1, 0x1, r4, 0x591b751a, 0x4, 0x4c, 0x101, 0x0, 0x6, 0x48000}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040840}, 0x44080) get_robust_list(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@getchain={0x4c, 0x66, 0x300, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x3, 0xa}, {0x5, 0xfff2}, {0x9, 0xc}}, [{0x8, 0xb, 0x401}, {0x8, 0xb, 0xfffffffc}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xb}, {0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x850) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x28, 0x1404, 0x4, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40028054}, 0x840) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffd, 0x3}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040081}, 0x880) 1.052639345s ago: executing program 8 (id=1988): setreuid(0xee01, 0xee01) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0x19) r3 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x8, 0x202, 0xffffffff, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x71, 0x0, r0}) r6 = eventfd2(0x45b, 0x800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000380)=r6, 0x1) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.049923515s ago: executing program 8 (id=1989): write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[]) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r2, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0xfffffffd, 0x0, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x3, 0x2, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x7, 0x80002, 0x0, 0x8081, 0x0, {0x101, 0x7, 0x80000000000, 0x80000000004, 0x400000000000, 0x4000000000006, 0x0, 0xfffffffd, 0x5, 0x4000, 0x4000000, 0x0, 0x0, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10010, 0xffffffffffffffff, 0x0) syz_emit_vhci(0x0, 0x7) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 872.598115ms ago: executing program 7 (id=1990): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x8, 0x70bd27, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x44000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc010000000000000000000000000000ac1414aa00000000000000000000000000000000000002090200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe"], 0xec}}, 0x0) 864.51129ms ago: executing program 7 (id=1991): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 92.574154ms ago: executing program 8 (id=1992): r0 = socket$inet6(0xa, 0x802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000561000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x18, 0x20ec, 0x0, 0x100000, 0x0}) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}}], 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 32.419485ms ago: executing program 8 (id=1993): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 31.892851ms ago: executing program 8 (id=1994): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0xc0384707, &(0x7f0000000080)={0x8, 0x5, 0x609152b0, 0x10000000, 0xe, "3eccd2000500ef002100"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xa8}, 0x18) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x181702, 0x0) poll(&(0x7f0000000240)=[{r3, 0x20}], 0x1, 0x2) write$FUSE_BMAP(r3, &(0x7f0000000580)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af24, &(0x7f0000000040)={0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000020603000008000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080012400000000305000500020000000500010006"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000040)={0x6, [0x7, 0x8, 0x2, 0x2, 0x8388, 0x7f]}, &(0x7f0000000080)=0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) writev(r7, &(0x7f0000000440)=[{&(0x7f00000001c0)="2c1cbf6d78c76cca14f0b1dfd5af514fcc6f5bd69ce4df3145e02c97dd3c0a", 0x1f}], 0x1) recvmsg$inet_nvme(r7, &(0x7f0000001700)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001680)=[{&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/196, 0xc4}, {&(0x7f0000001480)=""/227, 0xe3}, {&(0x7f0000001580)=""/40, 0x28}, {&(0x7f00000015c0)=""/154, 0x9a}], 0x8}, 0x82) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 0s ago: executing program 7 (id=1995): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001800010028bd7000fedbdf251d010700150003000100008007010000d3698ac660061306040000001508040002e8ed4cb0e47b12510203a76125486300000000"], 0x44}, 0x1, 0x0, 0x0, 0xde50a9659187563d}, 0x40000c0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f00000000000002000300"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r3, 0x2000) read$usbfs(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): 8 [ 169.231235][ T7111] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.234749][ T7111] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.238722][ T7111] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.241842][ T7111] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.246862][ T7111] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.249828][ T7111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.306095][T10425] lo speed is unknown, defaulting to 1000 [ 169.456836][ T7111] usb 6-1: GET_CAPABILITIES returned 0 [ 169.458694][ T7111] usbtmc 6-1:16.0: can't read capabilities [ 169.579794][ T5985] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 169.678561][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.682789][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.686978][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.690811][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.694593][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.701056][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.705477][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.709379][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.730005][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.733622][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.737169][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.740958][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.746889][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.750986][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.754950][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.757734][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 169.762457][ T840] usb 6-1: USB disconnect, device number 5 [ 169.873390][T10448] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 169.876026][T10448] overlayfs: failed to set xattr on upper [ 169.878410][T10448] overlayfs: ...falling back to redirect_dir=nofollow. [ 169.880742][T10448] overlayfs: ...falling back to index=off. [ 169.882942][T10448] overlayfs: ...falling back to uuid=null. [ 169.890635][T10448] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 169.892858][T10448] overlayfs: failed to set xattr on upper [ 169.894798][T10448] overlayfs: ...falling back to redirect_dir=nofollow. [ 169.897456][T10448] overlayfs: ...falling back to index=off. [ 169.897759][T10446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10446 comm=syz.6.1283 [ 169.899299][T10448] overlayfs: ...falling back to uuid=null. [ 170.072604][ T5971] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 170.107348][T10464] binder: 10462:10464 ioctl c0306201 0 returned -14 [ 170.110466][T10464] binder: 10462:10464 ioctl c0306201 200000000240 returned -11 [ 170.173585][ T5971] Bluetooth: hci0: ACL packet too small [ 170.485170][T10487] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 170.488069][T10487] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 170.491608][T10487] vhci_hcd vhci_hcd.0: Device attached [ 170.500837][T10488] vhci_hcd: connection closed [ 170.502770][ T1210] vhci_hcd: stop threads [ 170.507280][ T1210] vhci_hcd: release socket [ 170.509958][ T1210] vhci_hcd: disconnect device [ 170.712108][ T5971] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 170.746208][T10497] __nla_validate_parse: 5 callbacks suppressed [ 170.746224][T10497] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1300'. [ 170.803517][T10499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.823752][T10499] bond1: (slave ip6gretap1): making interface the new active one [ 170.829191][T10499] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 170.898910][ T5971] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 170.902244][ T5971] Bluetooth: hci0: Injecting HCI hardware error event [ 170.904156][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1303'. [ 170.907956][ T5985] Bluetooth: hci0: hardware error 0x00 [ 170.979907][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 170.979933][ T40] audit: type=1800 audit(170.854:1206): pid=10507 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1304" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 171.017951][T10512] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1306'. [ 171.024587][T10512] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 171.063699][T10512] nvme_fabrics: missing parameter 'transport=%s' [ 171.068824][T10512] nvme_fabrics: missing parameter 'nqn=%s' [ 171.071604][T10512] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 171.076453][ T5971] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 171.112539][T10519] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1309'. [ 171.141212][ T5976] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 171.145548][ T5976] Bluetooth: hci4: Injecting HCI hardware error event [ 171.151369][ T5976] Bluetooth: hci4: hardware error 0x00 [ 171.282506][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 171.304483][T10536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 171.419897][T10550] tipc: Enabling of bearer rejected, failed to enable media [ 171.424169][T10550] program syz.4.1317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.930678][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1328'. [ 171.934883][T10577] tipc: Started in network mode [ 171.937291][T10577] tipc: Node identity 2, cluster identity 4711 [ 171.939740][T10577] tipc: Node number set to 2 [ 172.005582][ T40] audit: type=1400 audit(171.874:1207): avc: denied { create } for pid=10575 comm="syz.6.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 172.116949][ T40] audit: type=1400 audit(171.984:1208): avc: denied { write } for pid=10591 comm="syz.1.1331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 172.173876][ T40] audit: type=1400 audit(172.044:1209): avc: denied { mount } for pid=10598 comm="syz.6.1333" name="/" dev="rpc_pipefs" ino=39852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 172.181091][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 172.189508][ T40] audit: type=1400 audit(172.054:1210): avc: denied { accept } for pid=10598 comm="syz.6.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 172.194415][T10596] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.205073][ T40] audit: type=1400 audit(172.074:1211): avc: denied { connect } for pid=10595 comm="syz.1.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 172.244280][ T40] audit: type=1400 audit(172.114:1212): avc: denied { getopt } for pid=10598 comm="syz.6.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 172.345148][T10614] 9pnet_fd: Insufficient options for proto=fd [ 172.392173][T10621] mkiss: ax0: crc mode is auto. [ 172.396335][ T40] audit: type=1400 audit(172.264:1213): avc: denied { bind } for pid=10619 comm="syz.1.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 172.403881][ T40] audit: type=1400 audit(172.264:1214): avc: denied { setopt } for pid=10619 comm="syz.1.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 172.491144][T10631] XFS (nbd4): no-recovery mounts must be read-only. [ 172.496141][T10617] lo speed is unknown, defaulting to 1000 [ 172.597910][T10640] v: renamed from gretap0 (while UP) [ 172.618196][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1337'. [ 172.639159][T10625] lo speed is unknown, defaulting to 1000 [ 172.805194][T10665] fuse: Unknown parameter 'rootUode' [ 172.830771][ T5971] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 172.899668][ T5971] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 172.977516][ T5985] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 172.992194][ T40] audit: type=1400 audit(172.864:1215): avc: denied { listen } for pid=10670 comm="syz.4.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.044011][T10680] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 173.047774][T10681] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1349'. [ 173.061840][T10675] netem: unknown loss type 12 [ 173.064204][T10675] netem: change failed [ 173.146131][T10685] IPv6: sit1: Disabled Multicast RS [ 173.150741][T10685] sit1: entered allmulticast mode [ 173.227188][ T5976] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 173.235680][T10693] tmpfs: Too few inodes for current use [ 173.265289][T10696] devpts: Bad value for 'max' [ 173.270028][T10697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.318237][T10702] lo speed is unknown, defaulting to 1000 [ 173.321157][T10702] lo speed is unknown, defaulting to 1000 [ 173.324492][T10702] lo speed is unknown, defaulting to 1000 [ 173.331943][T10702] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 173.341409][T10702] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 173.375312][T10702] lo speed is unknown, defaulting to 1000 [ 173.380741][T10702] lo speed is unknown, defaulting to 1000 [ 173.385111][T10702] lo speed is unknown, defaulting to 1000 [ 173.385636][T10708] comedi comedi2: comedi_parport: I/O port conflict (0x4f27,3) [ 173.391294][T10702] lo speed is unknown, defaulting to 1000 [ 173.395126][T10702] lo speed is unknown, defaulting to 1000 [ 173.402082][T10702] lo speed is unknown, defaulting to 1000 [ 173.408359][T10702] lo speed is unknown, defaulting to 1000 [ 173.466434][T10715] binder_alloc: 10713: binder_alloc_buf size 16448 failed, no address space [ 173.469651][T10715] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 173.472154][T10711] mkiss: ax0: crc mode is auto. [ 174.402743][T10764] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 174.474482][T10768] lo: entered promiscuous mode [ 174.485462][ T2137] lo speed is unknown, defaulting to 1000 [ 174.489985][ T2137] syz0: Port: 1 Link DOWN [ 174.595276][ T5976] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 175.489835][T10799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.499052][T10799] validate_nla: 4 callbacks suppressed [ 175.499067][T10799] netlink: 'syz.1.1393': attribute type 2 has an invalid length. [ 176.034061][ T40] kauditd_printk_skb: 109 callbacks suppressed [ 176.034081][ T40] audit: type=1400 audit(175.904:1325): avc: denied { setopt } for pid=10812 comm="syz.1.1398" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.043559][ T40] audit: type=1400 audit(175.904:1326): avc: denied { ioctl } for pid=10812 comm="syz.1.1398" path="socket:[42165]" dev="sockfs" ino=42165 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 176.129876][ T40] audit: type=1400 audit(176.004:1327): avc: denied { create } for pid=10814 comm="syz.1.1399" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.139014][ T40] audit: type=1400 audit(176.004:1328): avc: denied { read write } for pid=10814 comm="syz.1.1399" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 176.150005][ T40] audit: type=1400 audit(176.004:1329): avc: denied { open } for pid=10814 comm="syz.1.1399" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 176.366628][ T840] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 176.518242][ T840] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 176.522533][ T840] usb 6-1: config 0 interface 0 has no altsetting 0 [ 176.529773][ T840] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 176.534366][ T840] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 176.538379][ T840] usb 6-1: Product: syz [ 176.540384][ T840] usb 6-1: Manufacturer: syz [ 176.542669][ T840] usb 6-1: SerialNumber: syz [ 176.549481][ T840] usb 6-1: config 0 descriptor?? [ 176.563204][ T840] usb 6-1: selecting invalid altsetting 0 [ 176.758334][ T2137] usb 6-1: USB disconnect, device number 6 [ 176.975088][ T6041] hid_parser_main: 5 callbacks suppressed [ 176.975111][ T6041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.981334][ T6041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.984489][ T6041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.989646][ T6041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.992741][ T6041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.995856][ T6041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.999649][ T6041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 177.002867][ T6041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 177.006476][ T6041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 177.011097][ T6041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 177.024160][ T6041] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 177.056506][ T40] audit: type=1400 audit(176.924:1330): avc: denied { unlink } for pid=5973 comm="syz-executor" name="file0" dev="tmpfs" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 177.080262][T10827] fido_id[10827]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 177.122959][ T40] audit: type=1400 audit(176.994:1331): avc: denied { read write } for pid=10830 comm="syz.1.1404" name="vbi6" dev="devtmpfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 177.133252][ T40] audit: type=1400 audit(176.994:1332): avc: denied { open } for pid=10830 comm="syz.1.1404" path="/dev/vbi6" dev="devtmpfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 177.142397][ T40] audit: type=1400 audit(176.994:1333): avc: denied { ioctl } for pid=10830 comm="syz.1.1404" path="/dev/vbi6" dev="devtmpfs" ino=1016 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 177.174484][ T40] audit: type=1400 audit(177.044:1334): avc: denied { write } for pid=10833 comm="syz.1.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 177.553117][T10853] binder_alloc: binder_alloc_mmap_handler: 10851 200000ffd000-200001000000 already mapped failed -16 [ 177.558761][T10852] binder: BINDER_SET_CONTEXT_MGR already set [ 177.560302][T10853] __nla_validate_parse: 8 callbacks suppressed [ 177.560317][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1412'. [ 177.561411][T10852] binder: 10851:10852 ioctl 4018620d 200000000040 returned -16 [ 177.569654][T10853] binder_alloc: 10851: binder_alloc_buf, no vma [ 177.569709][T10854] binder_alloc: 10851: binder_alloc_buf, no vma [ 177.818418][T10868] CIFS mount error: No usable UNC path provided in device string! [ 177.818418][T10868] [ 177.818441][T10869] CIFS mount error: No usable UNC path provided in device string! [ 177.818441][T10869] [ 177.823510][T10868] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 177.828062][T10869] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 177.838152][T10868] IPv6: Can't replace route, no match found [ 178.263332][T10896] openvswitch: netlink: IP tunnel dst address not specified [ 178.279931][T10894] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3663400886 (468915313408 ns) > initial count (101983626112 ns). Using initial count to start timer. [ 178.299228][T10894] kvm: pic: level sensitive irq not supported [ 178.299768][T10894] kvm: pic: non byte read [ 178.453143][T10912] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 178.456725][T10912] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 178.464173][T10912] vhci_hcd vhci_hcd.0: Device attached [ 178.470696][T10913] vhci_hcd: connection closed [ 178.472596][ T1187] vhci_hcd: stop threads [ 178.478078][ T1187] vhci_hcd: release socket [ 178.479825][ T1187] vhci_hcd: disconnect device [ 178.660131][T10916] team0 (unregistering): Port device team_slave_0 removed [ 178.667718][T10916] team0 (unregistering): Port device team_slave_1 removed [ 179.034716][T10921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1431'. [ 179.298037][T10931] mmap: syz.1.1434 (10931) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 179.403415][T10933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=10933 comm=syz.5.1435 [ 179.459708][T10936] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1436'. [ 179.465185][T10936] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1436'. [ 179.514139][T10940] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1437'. [ 180.116347][T10953] bond0: entered promiscuous mode [ 180.118720][T10953] bond_slave_0: entered promiscuous mode [ 180.121695][T10953] bond_slave_1: entered promiscuous mode [ 180.124660][T10953] bond0: entered allmulticast mode [ 180.127648][T10953] bond_slave_0: entered allmulticast mode [ 180.130455][T10953] bond_slave_1: entered allmulticast mode [ 180.404452][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1445'. [ 180.422206][T10965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10965 comm=syz.1.1445 [ 180.429373][ T53] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 180.576656][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 180.580336][ T53] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.583822][ T53] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 180.588207][ T53] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 180.592919][ T53] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 180.597729][ T53] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.604435][ T53] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.608715][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.618248][ T53] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 181.173482][T10956] netlink: 'syz.4.1439': attribute type 2 has an invalid length. [ 181.177697][T10956] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1439'. [ 181.182943][T10956] nbd: must specify a device to reconfigure [ 181.188294][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 181.188309][ T40] audit: type=1400 audit(181.064:1391): avc: denied { setopt } for pid=10948 comm="syz.4.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.226201][T10972] CUSE: info not properly terminated [ 181.329166][ T40] audit: type=1400 audit(181.204:1392): avc: denied { mount } for pid=10975 comm="syz.1.1450" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 181.518984][ T40] audit: type=1400 audit(181.394:1393): avc: denied { lock } for pid=10985 comm="syz.1.1452" path="socket:[43414]" dev="sockfs" ino=43414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 181.553055][T10987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1452'. [ 181.560386][ T40] audit: type=1400 audit(181.434:1394): avc: denied { bind } for pid=10989 comm="syz.5.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.566991][ T40] audit: type=1400 audit(181.434:1395): avc: denied { node_bind } for pid=10989 comm="syz.5.1453" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 181.598037][T10986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1452'. [ 181.604866][ T40] audit: type=1400 audit(181.474:1396): avc: denied { ioctl } for pid=10995 comm="syz.5.1454" path="socket:[44256]" dev="sockfs" ino=44256 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.632841][T10986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1452'. [ 181.651284][ T40] audit: type=1400 audit(181.524:1397): avc: denied { create } for pid=10998 comm="syz.5.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 181.658138][ T40] audit: type=1400 audit(181.534:1398): avc: denied { write } for pid=10998 comm="syz.5.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 181.668469][ T40] audit: type=1400 audit(181.544:1399): avc: denied { connect } for pid=11000 comm="syz.1.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 181.678272][ T40] audit: type=1400 audit(181.544:1400): avc: denied { write } for pid=11000 comm="syz.1.1456" path="socket:[43415]" dev="sockfs" ino=43415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 181.747111][T11007] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.863842][T11018] sg_write: data in/out 808464396/251 bytes for SCSI command 0x0-- guessing data in; [ 181.863842][T11018] program syz.1.1462 not setting count and/or reply_len properly [ 181.871744][T11018] tmpfs: Bad value for 'mpol' [ 181.932873][T11023] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20000 [ 181.963141][T11025] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 182.140799][T11028] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 182.144728][T11028] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 182.174526][T11028] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 182.177603][T11028] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.184231][T11028] vhci_hcd vhci_hcd.0: Device attached [ 182.417044][ T53] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 182.707983][T11029] vhci_hcd: connection reset by peer [ 182.711058][ T1264] vhci_hcd: stop threads [ 182.712595][ T1264] vhci_hcd: release socket [ 182.715618][ T1264] vhci_hcd: disconnect device [ 182.802340][T11042] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.939853][T11049] fuse: Bad value for 'fd' [ 183.073667][ T6039] usb 9-1: USB disconnect, device number 8 [ 183.276056][T11067] lo speed is unknown, defaulting to 1000 [ 183.412554][T11067] lo speed is unknown, defaulting to 1000 [ 183.733351][T11082] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 183.942799][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1479'. [ 183.950889][T11093] : entered promiscuous mode [ 183.953705][T11093] : left promiscuous mode [ 184.714024][T11112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.781252][T11120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29549 sclass=netlink_route_socket pid=11120 comm=syz.1.1486 [ 184.895852][T11126] netlink: 'syz.4.1489': attribute type 10 has an invalid length. [ 184.900051][T11126] hsr_slave_0: left promiscuous mode [ 184.903115][T11126] hsr_slave_1: left promiscuous mode [ 184.982065][T11131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=11131 comm=syz.5.1491 [ 185.091575][ T5971] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 185.099201][T11140] sp0: Synchronizing with TNC [ 185.268530][T11159] usb usb4: usbfs: interface 0 claimed by hub while 'syz.4.1500' sets config #896 [ 185.269439][T11160] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1500'. [ 185.480780][T11177] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 185.492783][T11174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11174 comm=syz.5.1503 [ 185.650476][T11183] lo speed is unknown, defaulting to 1000 [ 185.733226][T11183] lo speed is unknown, defaulting to 1000 [ 186.028874][T11203] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1510'. [ 186.096442][ T5984] Bluetooth: hci3: command 0x0406 tx timeout [ 186.099851][ T5971] Bluetooth: hci1: command 0x0406 tx timeout [ 186.223528][T11221] xt_limit: Overflow, try lower: 271964/0 [ 186.780520][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 186.780540][ T40] audit: type=1400 audit(186.654:1470): avc: denied { append } for pid=11239 comm="syz.4.1520" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 186.780589][T11240] random: crng reseeded on system resumption [ 186.782829][ T40] audit: type=1400 audit(186.654:1471): avc: denied { open } for pid=11239 comm="syz.4.1520" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 186.802911][ T40] audit: type=1400 audit(186.674:1472): avc: denied { firmware_load } for pid=1210 comm="kworker/u32:10" path="/lib/firmware/regulatory.db.p7s" dev="sda1" ino=449 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 186.810187][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1520'. [ 186.810943][ T40] audit: type=1400 audit(186.674:1473): avc: denied { firmware_load } for pid=1187 comm="kworker/u32:9" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 186.815254][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1520'. [ 186.824935][ T40] audit: type=1400 audit(186.684:1474): avc: denied { ioctl } for pid=11239 comm="syz.4.1520" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 186.876421][ T40] audit: type=1400 audit(186.744:1475): avc: denied { bind } for pid=11241 comm="syz.4.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.877532][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1521'. [ 186.982415][ T40] audit: type=1400 audit(186.854:1476): avc: denied { shutdown } for pid=11241 comm="syz.4.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 187.261072][T11248] netlink: 'syz.5.1522': attribute type 5 has an invalid length. [ 187.526458][ T53] vhci_hcd: vhci_device speed not set [ 187.944453][T11257] overlayfs: failed to resolve './file1': -2 [ 187.949340][T11257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1525'. [ 187.987061][T11259] futex_wake_op: syz.4.1526 tries to shift op by 32; fix this program [ 188.115099][ T40] audit: type=1400 audit(187.984:1477): avc: denied { write } for pid=11263 comm="syz.4.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.119714][T11265] sctp: [Deprecated]: syz.4.1528 (pid 11265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.119714][T11265] Use struct sctp_sack_info instead [ 188.209808][T11267] block nbd5: Attempted send on invalid socket [ 188.213344][T11267] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 188.216652][T11267] EXT4-fs (nbd5): unable to read superblock [ 188.878680][T11276] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 188.913259][T11282] nfs: Unknown parameter 'l1µo#' [ 188.947619][ T40] audit: type=1400 audit(188.824:1478): avc: denied { mount } for pid=11283 comm="syz.4.1535" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 188.948657][T11284] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 188.975331][ T40] audit: type=1400 audit(188.844:1479): avc: denied { unmount } for pid=6300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 189.030436][T11296] vivid-004: disconnect [ 189.033160][T11296] netlink: zone id is out of range [ 189.034909][T11296] netlink: zone id is out of range [ 189.038833][T11296] netlink: zone id is out of range [ 189.040904][T11296] netlink: zone id is out of range [ 189.042630][T11296] netlink: zone id is out of range [ 189.044322][T11296] netlink: zone id is out of range [ 189.045994][T11296] netlink: zone id is out of range [ 189.048260][T11296] netlink: zone id is out of range [ 189.050498][T11296] netlink: zone id is out of range [ 189.052924][T11296] netlink: zone id is out of range [ 189.056591][T11295] vivid-004: reconnect [ 189.114828][T11298] netlink: 'syz.1.1539': attribute type 10 has an invalid length. [ 189.128216][T11298] team0: Device hsr_slave_0 failed to register rx_handler [ 189.253357][T11315] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 189.259584][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'. [ 189.269171][T11319] bridge0: port 3(dummy0) entered disabled state [ 189.285785][T11319] dummy0 (unregistering): left allmulticast mode [ 189.289077][T11319] bridge0: port 3(dummy0) entered disabled state [ 189.542672][ T5985] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 189.578870][T11339] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1555'. [ 189.584635][T11339] binder: 11338:11339 ioctl 400c620e 200000000640 returned -22 [ 189.751694][ T5985] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.758157][ T5985] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.762225][ T5985] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.765879][ T5985] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.769500][ T5985] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.795032][T11358] batman_adv: batadv0: Adding interface: gretap2 [ 189.800181][T11358] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.809309][T11358] batman_adv: batadv0: Interface activated: gretap2 [ 189.852204][T11352] lo speed is unknown, defaulting to 1000 [ 189.953471][T11352] lo speed is unknown, defaulting to 1000 [ 190.010467][T11370] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1565'. [ 190.072020][T11352] chnl_net:caif_netlink_parms(): no params data found [ 190.180159][ T1210] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.242366][T11352] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.247624][T11352] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.257241][T11352] bridge_slave_0: entered allmulticast mode [ 190.260480][T11352] bridge_slave_0: entered promiscuous mode [ 190.267137][T11352] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.269558][T11352] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.272513][T11352] bridge_slave_1: entered allmulticast mode [ 190.278940][T11352] bridge_slave_1: entered promiscuous mode [ 190.316783][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1570'. [ 190.345475][ T1210] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.371812][T11395] bridge_slave_1: left allmulticast mode [ 190.373680][T11395] bridge_slave_1: left promiscuous mode [ 190.375936][T11395] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.385043][T11395] bridge_slave_0: left allmulticast mode [ 190.388667][T11395] bridge_slave_0: left promiscuous mode [ 190.391681][T11395] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.491680][T11352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.513187][ T1210] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.523849][T11352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.569109][T11352] team0: Port device team_slave_0 added [ 190.572565][T11352] team0: Port device team_slave_1 added [ 190.583273][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1573'. [ 190.643049][ T1210] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.650598][T11352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.652987][T11352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.663013][T11352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.670156][T11352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.672553][T11352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.680727][T11352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.745870][T11352] hsr_slave_0: entered promiscuous mode [ 190.749048][T11352] hsr_slave_1: entered promiscuous mode [ 190.751651][T11352] debugfs: 'hsr0' already exists in 'hsr' [ 190.753657][T11352] Cannot create hsr debugfs directory [ 190.837153][ T1125] sr 2:0:0:0: [sr0] tag#28 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 190.841562][ T1125] sr 2:0:0:0: [sr0] tag#28 Sense Key : Illegal Request [current] [ 190.844641][ T1125] sr 2:0:0:0: [sr0] tag#28 Add. Sense: Invalid command operation code [ 190.848204][ T1125] sr 2:0:0:0: [sr0] tag#28 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 190.854421][ T1125] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 190.857962][ T1125] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 190.946724][ T1210] bridge_slave_1: left allmulticast mode [ 190.948710][ T1210] bridge_slave_1: left promiscuous mode [ 190.952339][ T1210] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.964103][ T1210] bridge_slave_0: left allmulticast mode [ 190.966009][ T1210] bridge_slave_0: left promiscuous mode [ 190.968066][ T1210] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.056733][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 191.089335][T11422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11422 comm=syz.1.1578 [ 191.097916][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1578'. [ 191.642277][ T1210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.651968][ T1210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.662798][ T1210] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 191.676008][ T1210] bond0 (unregistering): Released all slaves [ 191.713336][T11423] vlan2: entered allmulticast mode [ 191.715654][T11423] bond2: entered allmulticast mode [ 191.718797][T11443] PKCS8: Unsupported PKCS#8 version [ 191.727951][T11443] No buffer was provided with the request [ 191.786038][ T5985] Bluetooth: hci2: command tx timeout [ 191.811136][ T1210] tipc: Left network mode [ 191.862715][T11448] kvm: user requested TSC rate below hardware speed [ 191.897408][ T40] kauditd_printk_skb: 141 callbacks suppressed [ 191.897428][ T40] audit: type=1400 audit(191.764:1621): avc: denied { read open } for pid=11451 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.916817][ T40] audit: type=1400 audit(191.764:1622): avc: denied { getattr } for pid=11451 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.929769][ T40] audit: type=1400 audit(191.784:1623): avc: denied { add_name } for pid=11449 comm="dhcpcd-run-hook" name="resolv.conf.eth6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.943753][ T40] audit: type=1400 audit(191.784:1624): avc: denied { create } for pid=11449 comm="dhcpcd-run-hook" name="resolv.conf.eth6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.955172][ T40] audit: type=1400 audit(191.784:1625): avc: denied { write } for pid=11449 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth6.link" dev="tmpfs" ino=8030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.967354][ T40] audit: type=1400 audit(191.784:1626): avc: denied { append } for pid=11449 comm="dhcpcd-run-hook" name="resolv.conf.eth6.link" dev="tmpfs" ino=8030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.998780][ T40] audit: type=1400 audit(191.874:1627): avc: denied { remove_name } for pid=11453 comm="rm" name="resolv.conf.eth6.link" dev="tmpfs" ino=8030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.008446][ T40] audit: type=1400 audit(191.874:1628): avc: denied { unlink } for pid=11453 comm="rm" name="resolv.conf.eth6.link" dev="tmpfs" ino=8030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 192.032522][T11352] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 192.041664][T11352] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 192.047855][T11352] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 192.048744][ T40] audit: type=1400 audit(191.924:1629): avc: denied { write } for pid=11455 comm="syz.1.1586" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 192.060976][T11352] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 192.178298][T11468] dlm: non-version read from control device 0 [ 192.179879][ T40] audit: type=1400 audit(192.054:1630): avc: denied { connect } for pid=11467 comm="syz.5.1587" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.205054][T11352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.245421][ T1210] hsr_slave_0: left promiscuous mode [ 192.263530][ T1210] hsr_slave_1: left promiscuous mode [ 192.266020][ T1210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.268861][ T1210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.273739][ T1210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.284340][ T1210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.359904][ T1210] veth1_macvtap: left promiscuous mode [ 192.361780][ T1210] veth0_macvtap: left promiscuous mode [ 192.364180][ T1210] veth1_vlan: left promiscuous mode [ 192.366093][ T1210] veth0_vlan: left promiscuous mode [ 192.555012][T11496] syz.4.1592 (11496): /proc/11496/oom_adj is deprecated, please use /proc/11496/oom_score_adj instead. [ 192.703442][T11501] netlink: 'syz.4.1592': attribute type 1 has an invalid length. [ 192.706686][T11501] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1592'. [ 192.773270][ T5985] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 192.789633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 193.364772][ T1210] team0 (unregistering): Port device team_slave_1 removed [ 193.476490][ T1210] team0 (unregistering): Port device team_slave_0 removed [ 193.806560][ T840] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 193.866550][ T5976] Bluetooth: hci2: command tx timeout [ 193.976145][ T840] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.981051][ T840] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 193.985745][ T840] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.989772][ T840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 193.994460][ T840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 194.000622][ T840] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.004583][ T840] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.007986][ T840] usb 6-1: Product: syz [ 194.009441][ T840] usb 6-1: Manufacturer: syz [ 194.019662][ T840] cdc_wdm 6-1:1.0: skipping garbage [ 194.022156][ T840] cdc_wdm 6-1:1.0: skipping garbage [ 194.026206][ T840] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 194.028838][ T840] cdc_wdm 6-1:1.0: Unknown control protocol [ 194.355356][T11495] vlan2: entered promiscuous mode [ 194.357943][T11495] bridge0: entered promiscuous mode [ 194.391190][T11352] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.410588][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.413090][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.438087][T11510] block nbd5: NBD_DISCONNECT [ 194.443459][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.446087][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.587663][ T6039] usb 6-1: USB disconnect, device number 7 [ 194.677757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 194.680900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 194.698596][T11534] QAT: Device 2 not found [ 194.699070][T11352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.768448][ T1210] IPVS: stop unused estimator thread 0... [ 194.836612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 194.836642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 194.872707][T11352] veth0_vlan: entered promiscuous mode [ 194.881603][T11352] veth1_vlan: entered promiscuous mode [ 194.908211][T11352] veth0_macvtap: entered promiscuous mode [ 194.914863][T11352] veth1_macvtap: entered promiscuous mode [ 194.932693][T11352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.945419][T11352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.953167][ T1210] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.957678][ T1210] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.972559][ T1210] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.975967][ T1210] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.028917][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.031722][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.036504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 195.054903][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.059149][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.065974][ T5976] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 195.148115][T11558] block nbd7: Attempted send on invalid socket [ 195.150510][T11558] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.155438][T11558] ADFS-fs (nbd7): error: unable to read block 3, try 0 [ 195.225485][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1603'. [ 195.490609][T11583] netlink: 'syz.5.1610': attribute type 2 has an invalid length. [ 195.493463][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1610'. [ 195.544430][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1612'. [ 195.591969][T11596] net_ratelimit: 111 callbacks suppressed [ 195.591982][T11596] openvswitch: netlink: Flow actions attr not present in new flow. [ 195.789948][ T6025] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 195.826718][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1615'. [ 195.829824][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1615'. [ 195.834214][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1615'. [ 195.884746][T11606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'. [ 195.891328][T11606] netlink: 'syz.1.1616': attribute type 1 has an invalid length. [ 195.895071][T11606] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1616'. [ 195.926398][ T6025] usb 12-1: device descriptor read/64, error -71 [ 195.936590][ T5985] Bluetooth: hci2: command tx timeout [ 196.045462][T11613] input: syz1 as /devices/virtual/input/input21 [ 196.186745][ T6025] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 196.326616][ T6025] usb 12-1: device descriptor read/64, error -71 [ 196.409709][T11624] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 196.421110][T11624] syz_tun: entered allmulticast mode [ 196.427767][T11624] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 196.430837][T11624] mroute: pending queue full, dropping entries [ 196.436166][T11624] netlink: 'syz.5.1622': attribute type 10 has an invalid length. [ 196.443158][T11624] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 196.446905][ T6025] usb usb12-port1: attempt power cycle [ 196.447769][T11623] syz_tun: left allmulticast mode [ 196.796443][ T6025] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 196.817547][ T6025] usb 12-1: device descriptor read/8, error -71 [ 197.056502][ T6025] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 197.077316][ T6025] usb 12-1: device descriptor read/8, error -71 [ 197.186638][ T6025] usb usb12-port1: unable to enumerate USB device [ 197.297279][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 197.297297][ T40] audit: type=1400 audit(197.174:1680): avc: denied { watch_reads } for pid=11635 comm="syz.1.1626" path="/437/file0" dev="tmpfs" ino=2377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 197.341428][ T40] audit: type=1400 audit(197.214:1681): avc: denied { create } for pid=11638 comm="syz.1.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.352085][ T40] audit: type=1400 audit(197.214:1682): avc: denied { bind } for pid=11638 comm="syz.1.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.358905][ T40] audit: type=1400 audit(197.214:1683): avc: denied { listen } for pid=11638 comm="syz.1.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.365576][ T40] audit: type=1400 audit(197.214:1684): avc: denied { connect } for pid=11638 comm="syz.1.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.372930][ T40] audit: type=1400 audit(197.214:1685): avc: denied { accept } for pid=11638 comm="syz.1.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.380200][ T40] audit: type=1400 audit(197.214:1686): avc: denied { read } for pid=11638 comm="syz.1.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.399834][T11645] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1627'. [ 197.425541][ T40] audit: type=1400 audit(197.294:1687): avc: denied { ioctl } for pid=11646 comm="syz.5.1630" path="socket:[46790]" dev="sockfs" ino=46790 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 197.436217][ T40] audit: type=1400 audit(197.304:1688): avc: denied { mount } for pid=11646 comm="syz.5.1630" name="/" dev="autofs" ino=47248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 197.451164][T11647] netlink: 'syz.5.1630': attribute type 10 has an invalid length. [ 197.487987][ T40] audit: type=1400 audit(197.364:1689): avc: denied { unmount } for pid=9189 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 197.846536][ T53] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 198.008791][ T53] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.012493][ T53] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.016464][ T5985] Bluetooth: hci2: command tx timeout [ 198.016895][ T53] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 198.021287][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.023816][ T53] usb 10-1: SerialNumber: syz [ 198.235110][ T53] usb 10-1: 0:2 : does not exist [ 198.237248][ T53] usb 10-1: unit 14 not found! [ 198.246155][ T53] usb 10-1: USB disconnect, device number 2 [ 198.271368][ T6755] udevd[6755]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.943473][T11700] netlink: 212288 bytes leftover after parsing attributes in process `syz.7.1644'. [ 199.211532][T11708] random: crng reseeded on system resumption [ 199.308930][T11723] veth1_to_batadv: entered promiscuous mode [ 199.380898][T11731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=11731 comm=syz.4.1652 [ 199.394005][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.566453][ T840] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 199.704702][ T840] usb 10-1: device descriptor read/64, error -71 [ 199.946662][ T840] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 200.076460][ T840] usb 10-1: device descriptor read/64, error -71 [ 200.186702][ T840] usb usb10-port1: attempt power cycle [ 200.536448][ T840] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 200.570189][ T840] usb 10-1: device descriptor read/8, error -71 [ 200.816548][ T840] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 200.836981][ T840] usb 10-1: device descriptor read/8, error -71 [ 200.946768][ T840] usb usb10-port1: unable to enumerate USB device [ 200.962673][T11771] __nla_validate_parse: 1 callbacks suppressed [ 200.962684][T11771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1663'. [ 200.968770][T11771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1663'. [ 201.016946][T11778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1665'. [ 201.026733][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1665'. [ 201.129929][ T5976] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 201.384653][T11814] binder: 11813:11814 unknown command 0 [ 201.392209][T11814] binder: 11813:11814 ioctl c0306201 200000000080 returned -22 [ 201.475857][T11831] lo speed is unknown, defaulting to 1000 [ 201.538295][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'. [ 201.542619][T11835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1676'. [ 201.549560][T11835] netlink: 'syz.1.1676': attribute type 19 has an invalid length. [ 201.590518][T11831] lo speed is unknown, defaulting to 1000 [ 201.677533][T11839] bridge_slave_0: left allmulticast mode [ 201.679884][T11839] bridge_slave_0: left promiscuous mode [ 201.682656][T11839] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.690300][T11839] bridge_slave_1: left allmulticast mode [ 201.692962][T11839] bridge_slave_1: left promiscuous mode [ 201.695582][T11839] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.707019][T11839] bond0: (slave bond_slave_0): Releasing backup interface [ 201.713213][T11839] bond0: (slave bond_slave_1): Releasing backup interface [ 201.726127][T11839] team0: Port device team_slave_0 removed [ 201.734362][T11839] team0: Port device team_slave_1 removed [ 201.739992][T11839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.742742][T11839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.747282][T11839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.749681][T11839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.772898][T11840] team0: Mode changed to "random" [ 201.784568][T11839] vlan0: entered promiscuous mode [ 201.798782][T11839] team0: Port device vlan0 added [ 201.804368][T11839] tipc: Started in network mode [ 201.807363][ T1464] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 201.808026][T11839] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 201.814360][T11839] tipc: Enabled bearer , priority 0 [ 201.960397][ T1464] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 201.964588][ T1464] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.971249][ T1464] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 201.975441][ T1464] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 201.979467][ T1464] usb 6-1: Product: syz [ 201.980036][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1679'. [ 201.981212][ T1464] usb 6-1: Manufacturer: syz [ 201.981232][ T1464] usb 6-1: SerialNumber: syz [ 201.984862][ T1464] usb 6-1: config 0 descriptor?? [ 201.993706][T11845] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 201.999213][ T1464] usb 6-1: selecting invalid altsetting 0 [ 202.052419][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1680'. [ 202.088039][T11848] erspan0: entered promiscuous mode [ 202.207829][ T1464] usb 6-1: USB disconnect, device number 8 [ 202.253241][T11862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11862 comm=syz.7.1686 [ 202.318918][T11862] input: syz0 as /devices/virtual/input/input22 [ 202.332559][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 202.332570][ T40] audit: type=1400 audit(203.206:1721): avc: denied { write } for pid=11861 comm="syz.7.1686" name="hidraw0" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 202.587299][ T5976] Bluetooth: hci2: command tx timeout [ 202.777201][T11877] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.816880][ T56] tipc: Node number set to 11578026 [ 202.938891][ T40] audit: type=1400 audit(203.816:1722): avc: denied { create } for pid=11879 comm="syz.7.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 202.947728][ T40] audit: type=1400 audit(203.826:1723): avc: denied { ioctl } for pid=11879 comm="syz.7.1691" path="socket:[46992]" dev="sockfs" ino=46992 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 202.989774][ T40] audit: type=1400 audit(203.866:1724): avc: denied { create } for pid=11886 comm="syz.1.1693" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 203.006745][ T40] audit: type=1400 audit(203.876:1725): avc: denied { unlink } for pid=5973 comm="syz-executor" name="file0" dev="tmpfs" ino=2472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 203.024767][ T40] audit: type=1400 audit(203.896:1726): avc: denied { append } for pid=11894 comm="syz.5.1695" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.036607][T11895] comedi: valid board names for 8255 driver are: [ 203.038654][T11895] 8255 [ 203.039593][T11895] comedi: valid board names for vmk80xx driver are: [ 203.041684][T11895] vmk80xx [ 203.044627][T11895] comedi: valid board names for usbduxsigma driver are: [ 203.048928][T11895] usbduxsigma [ 203.050393][T11895] comedi: valid board names for usbduxfast driver are: [ 203.053198][T11895] usbduxfast [ 203.054449][T11895] comedi: valid board names for usbdux driver are: [ 203.058683][T11895] usbdux [ 203.059201][ T40] audit: type=1400 audit(203.936:1727): avc: denied { write } for pid=11899 comm="syz.7.1697" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 203.059728][T11895] comedi: valid board names for ni6501 driver are: [ 203.067412][ T40] audit: type=1400 audit(203.936:1728): avc: denied { name_connect } for pid=11899 comm="syz.7.1697" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 203.078310][ T40] audit: type=1400 audit(203.936:1729): avc: denied { listen } for pid=11899 comm="syz.7.1697" lport=43025 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.081678][T11895] ni6501 [ 203.085748][ T40] audit: type=1400 audit(203.936:1730): avc: denied { accept } for pid=11899 comm="syz.7.1697" lport=43025 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.091246][T11895] comedi: valid board names for dt9812 driver are: [ 203.100100][T11895] dt9812 [ 203.101277][T11895] comedi: valid board names for ni_labpc_cs driver are: [ 203.103656][T11895] ni_labpc_cs [ 203.104835][T11895] comedi: valid board names for ni_daq_700 driver are: [ 203.107551][T11895] ni_daq_700 [ 203.108757][T11895] comedi: valid board names for labpc_pci driver are: [ 203.111177][T11895] labpc_pci [ 203.112316][T11895] comedi: valid board names for adl_pci9118 driver are: [ 203.114485][T11895] pci9118dg [ 203.115770][T11895] pci9118hg [ 203.119244][T11895] pci9118hr [ 203.120394][T11895] comedi: valid board names for 8255_pci driver are: [ 203.122667][T11895] 8255_pci [ 203.125893][T11895] comedi: valid board names for s526 driver are: [ 203.129963][T11895] s526 [ 203.130977][T11895] comedi: valid board names for multiq3 driver are: [ 203.133748][T11895] multiq3 [ 203.134807][T11895] comedi: valid board names for pcmuio driver are: [ 203.137969][T11895] pcmuio48 [ 203.139819][T11895] pcmuio96 [ 203.141048][T11895] comedi: valid board names for pcmmio driver are: [ 203.143310][T11895] pcmmio [ 203.144658][T11895] comedi: valid board names for pcmda12 driver are: [ 203.146897][T11895] pcmda12 [ 203.147937][T11895] comedi: valid board names for pcmad driver are: [ 203.150035][T11895] pcmad12 [ 203.151086][T11895] pcmad16 [ 203.152294][T11895] comedi: valid board names for ni_labpc driver are: [ 203.154539][T11895] lab-pc-1200 [ 203.155720][T11895] lab-pc-1200ai [ 203.157091][T11895] lab-pc+ [ 203.158094][T11895] comedi: valid board names for atmio16 driver are: [ 203.160383][T11895] atmio16 [ 203.161391][T11895] atmio16d [ 203.162451][T11895] comedi: valid board names for ni_at_ao driver are: [ 203.164556][T11895] at-ao-6 [ 203.165571][T11895] at-ao-10 [ 203.167096][T11895] comedi: valid board names for ni_at_a2150 driver are: [ 203.169770][T11895] ni_at_a2150 [ 203.171081][T11895] comedi: valid board names for adq12b driver are: [ 203.173447][T11895] adq12b [ 203.174534][T11895] comedi: valid board names for mpc624 driver are: [ 203.178198][T11895] mpc624 [ 203.179414][T11895] comedi: valid board names for c6xdigio driver are: [ 203.181753][T11895] c6xdigio [ 203.183077][T11895] comedi: valid board names for aio_iiro_16 driver are: [ 203.185590][T11895] aio_iiro_16 [ 203.186948][T11895] comedi: valid board names for aio_aio12_8 driver are: [ 203.189239][T11895] aio_aio12_8 [ 203.190441][T11895] aio_ai12_8 [ 203.191677][T11895] aio_ao12_4 [ 203.193137][T11895] comedi: valid board names for fl512 driver are: [ 203.195660][T11895] fl512 [ 203.197221][T11895] comedi: valid board names for dmm32at driver are: [ 203.199897][T11895] dmm32at [ 203.201028][T11895] comedi: valid board names for dt282x driver are: [ 203.203218][T11895] dt2821 [ 203.204169][T11895] dt2821-f [ 203.205181][T11895] dt2821-g [ 203.206210][T11895] dt2823 [ 203.207253][T11895] dt2824-pgh [ 203.208314][T11895] dt2824-pgl [ 203.209504][T11895] dt2825 [ 203.210559][T11895] dt2827 [ 203.211645][T11895] dt2828 [ 203.212722][T11895] dt2829 [ 203.213746][T11895] dt21-ez [ 203.214812][T11895] dt23-ez [ 203.215992][T11895] dt24-ez [ 203.217653][T11895] dt24-ez-pgl [ 203.218942][T11895] comedi: valid board names for dt2817 driver are: [ 203.221187][T11895] dt2817 [ 203.222224][T11895] comedi: valid board names for dt2815 driver are: [ 203.224414][T11895] dt2815 [ 203.225466][T11895] comedi: valid board names for dt2814 driver are: [ 203.228358][T11895] dt2814 [ 203.229563][T11895] comedi: valid board names for dt2811 driver are: [ 203.232100][T11895] dt2811-pgh [ 203.233216][T11895] dt2811-pgl [ 203.234308][T11895] comedi: valid board names for dt2801 driver are: [ 203.236889][T11895] dt2801 [ 203.237918][T11895] comedi: valid board names for das6402 driver are: [ 203.240253][T11895] das6402-12 [ 203.241385][T11895] das6402-16 [ 203.242609][T11895] comedi: valid board names for das1800 driver are: [ 203.244908][T11895] das-1701st [ 203.246110][T11895] das-1701st-da [ 203.247721][T11895] das-1702st [ 203.248818][T11895] das-1702st-da [ 203.249996][T11895] das-1702hr [ 203.251087][T11895] das-1702hr-da [ 203.252311][T11895] das-1701ao [ 203.253402][T11895] das-1702ao [ 203.254474][T11895] das-1801st [ 203.255584][T11895] das-1801st-da [ 203.257253][T11895] das-1802st [ 203.258561][T11895] das-1802st-da [ 203.260051][T11895] das-1802hr [ 203.261284][T11895] das-1802hr-da [ 203.262513][T11895] das-1801hc [ 203.263604][T11895] das-1802hc [ 203.264688][T11895] das-1801ao [ 203.265778][T11895] das-1802ao [ 203.267014][T11895] comedi: valid board names for das800 driver are: [ 203.269076][T11895] das-800 [ 203.270110][T11895] cio-das800 [ 203.271907][T11895] das-801 [ 203.273257][T11895] cio-das801 [ 203.274562][T11895] das-802 [ 203.276231][T11895] cio-das802 [ 203.277559][T11895] cio-das802/16 [ 203.278768][T11895] comedi: valid board names for isa-das08 driver are: [ 203.281288][T11895] isa-das08 [ 203.282439][T11895] das08-pgm [ 203.283767][T11895] das08-pgh [ 203.284852][T11895] das08-pgl [ 203.285917][T11895] das08-aoh [ 203.289439][T11895] das08-aol [ 203.290570][T11895] das08-aom [ 203.291735][T11895] das08/jr-ao [ 203.293214][T11895] das08jr-16-ao [ 203.296146][T11895] pc104-das08 [ 203.298088][T11895] das08jr/16 [ 203.299367][T11895] comedi: valid board names for das16m1 driver are: [ 203.301568][T11895] das16m1 [ 203.302674][T11895] comedi: valid board names for dac02 driver are: [ 203.304843][T11895] dac02 [ 203.305819][T11895] comedi: valid board names for rti802 driver are: [ 203.308334][T11895] rti802 [ 203.309391][T11895] comedi: valid board names for rti800 driver are: [ 203.311491][T11895] rti800 [ 203.312456][T11895] rti815 [ 203.313416][T11895] comedi: valid board names for pcm3724 driver are: [ 203.315545][T11895] pcm3724 [ 203.317783][T11895] comedi: valid board names for pcl818 driver are: [ 203.320360][T11895] pcl818l [ 203.321830][T11895] pcl818h [ 203.322996][T11895] pcl818hd [ 203.324108][T11895] pcl818hg [ 203.325134][T11895] pcl818 [ 203.326104][T11895] pcl718 [ 203.327181][T11895] pcm3718 [ 203.328195][T11895] comedi: valid board names for pcl816 driver are: [ 203.330328][T11895] pcl816 [ 203.331303][T11895] pcl814b [ 203.332436][T11895] comedi: valid board names for pcl812 driver are: [ 203.334520][T11895] pcl812 [ 203.335493][T11895] pcl812pg [ 203.336608][T11895] acl8112pg [ 203.337770][T11895] acl8112dg [ 203.339096][T11895] acl8112hg [ 203.340511][T11895] a821pgl [ 203.341560][T11895] a821pglnda [ 203.342784][T11895] a821pgh [ 203.344086][T11895] a822pgl [ 203.345139][T11895] a822pgh [ 203.346186][T11895] a823pgl [ 203.347729][T11895] a823pgh [ 203.348792][T11895] pcl813 [ 203.349813][T11895] pcl813b [ 203.350860][T11895] acl8113 [ 203.352111][T11895] iso813 [ 203.353305][T11895] acl8216 [ 203.354498][T11895] a826pg [ 203.355515][T11895] comedi: valid board names for pcl730 driver are: [ 203.358212][T11895] pcl730 [ 203.359139][T11895] iso730 [ 203.360200][T11895] acl7130 [ 203.361211][T11895] pcm3730 [ 203.362222][T11895] pcl725 [ 203.363199][T11895] p8r8dio [ 203.364200][T11895] acl7225b [ 203.365253][T11895] p16r16dio [ 203.366621][T11895] pcl733 [ 203.368166][T11895] pcl734 [ 203.369444][T11895] opmm-1616-xt [ 203.370656][T11895] pearl-mm-p [ 203.371929][T11895] ir104-pbf [ 203.373177][T11895] comedi: valid board names for pcl726 driver are: [ 203.375725][T11895] pcl726 [ 203.376806][T11895] pcl727 [ 203.377876][T11895] pcl728 [ 203.378907][T11895] acl6126 [ 203.380092][T11895] acl6128 [ 203.381104][T11895] comedi: valid board names for pcl724 driver are: [ 203.383298][T11895] pcl724 [ 203.384257][T11895] pcl722 [ 203.385208][T11895] pcl731 [ 203.386205][T11895] acl7122 [ 203.387366][T11895] acl7124 [ 203.388395][T11895] pet48dio [ 203.389496][T11895] pcmio48 [ 203.390517][T11895] onyx-mm-dio [ 203.391841][T11895] comedi: valid board names for pcl711 driver are: [ 203.394328][T11895] pcl711 [ 203.395354][T11895] pcl711b [ 203.396582][T11895] acl8112hg [ 203.397754][T11895] acl8112dg [ 203.398869][T11895] comedi: valid board names for amplc_pc263 driver are: [ 203.401181][T11895] pc263 [ 203.402131][T11895] comedi: valid board names for amplc_pc236 driver are: [ 203.404480][T11895] pc36at [ 203.405511][T11895] comedi: valid board names for amplc_dio200 driver are: [ 203.407843][T11895] pc212e [ 203.408806][T11895] pc214e [ 203.409793][T11895] pc215e [ 203.410767][T11895] pc218e [ 203.411773][T11895] pc272e [ 203.412736][T11895] comedi: valid board names for comedi_parport driver are: [ 203.414988][T11895] comedi_parport [ 203.416193][T11895] comedi: valid board names for comedi_test driver are: [ 203.418533][T11895] comedi_test [ 203.419741][T11895] comedi: valid board names for comedi_bond driver are: [ 203.421929][T11895] comedi_bond [ 219.296794][ T6041] page_pool_release_retry() stalled pool shutdown: id 54, 1 inflight 60 sec [ 219.680585][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 219.680596][ T40] audit: type=1400 audit(220.556:1734): avc: denied { write } for pid=11939 comm="syz.4.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 219.683898][T11943] netlink: 'syz.4.1701': attribute type 1 has an invalid length. [ 219.700957][T11943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1701'. [ 219.710400][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1701'. [ 219.711827][T11946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11946 comm=syz.5.1702 [ 219.713786][T11942] bridge_slave_1: left allmulticast mode [ 219.720983][T11946] netlink: 'syz.5.1702': attribute type 1 has an invalid length. [ 219.721727][T11942] bridge_slave_1: left promiscuous mode [ 219.726999][T11942] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.744748][T11942] bridge_slave_0: left allmulticast mode [ 219.747329][T11942] bridge_slave_0: left promiscuous mode [ 219.750025][T11942] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.852377][T11955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11955 comm=syz.7.1703 [ 219.861812][T11946] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.880521][T11950] veth0: entered promiscuous mode [ 219.939563][ T40] audit: type=1400 audit(220.816:1735): avc: denied { mount } for pid=11960 comm="syz.4.1706" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 219.947267][ T40] audit: type=1400 audit(220.816:1736): avc: denied { unmount } for pid=11960 comm="syz.4.1706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 220.001738][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1706'. [ 220.021536][T11962] vxlan1: entered promiscuous mode [ 220.029492][ T55] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.033284][ T55] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.037605][ T55] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.041508][ T55] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.580507][T11948] veth0: left promiscuous mode [ 220.622689][ T40] audit: type=1400 audit(221.496:1737): avc: denied { name_bind } for pid=11969 comm="syz.7.1709" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 220.700504][ T40] audit: type=1400 audit(221.576:1738): avc: denied { bind } for pid=11975 comm="syz.1.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.701785][T11976] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 220.704001][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1710'. [ 220.708392][ T40] audit: type=1400 audit(221.576:1739): avc: denied { connect } for pid=11975 comm="syz.1.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.711023][T11976] netlink: 16118 bytes leftover after parsing attributes in process `syz.1.1710'. [ 220.872968][T12000] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 220.876484][T12000] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 220.882525][T12000] vhci_hcd vhci_hcd.0: Device attached [ 220.885631][T12006] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 220.893710][ T5974] libceph: connect (1)[c::]:6789 error -101 [ 220.895559][ T1187] vhci_hcd: stop threads [ 220.897779][ T5974] libceph: mon0 (1)[c::]:6789 connect error [ 220.903650][ T1187] vhci_hcd: release socket [ 220.905425][ T1187] vhci_hcd: disconnect device [ 220.935873][T12003] ceph: No mds server is up or the cluster is laggy [ 220.985941][ T40] audit: type=1400 audit(221.866:1740): avc: denied { unmount } for pid=5973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 221.055236][ T40] audit: type=1326 audit(221.926:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.1.1720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98078ebe9 code=0x7ffc0000 [ 221.064070][ T40] audit: type=1326 audit(221.926:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.1.1720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98078ebe9 code=0x7ffc0000 [ 221.073669][ T40] audit: type=1326 audit(221.926:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.1.1720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98078ebe9 code=0x7ffc0000 [ 221.088945][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 221.096636][ T54] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 221.130745][T12018] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1721'. [ 221.242134][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 221.246823][ T54] usb 10-1: Using ep0 maxpacket: 8 [ 221.250825][ T54] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 221.255734][ T54] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 221.260827][ T54] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.265102][ T54] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.271022][ T54] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.274731][ T54] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.311242][T12027] openvswitch: netlink: IPv6 tunnel dst address is zero [ 221.343878][T12029] netlink: 'syz.1.1725': attribute type 4 has an invalid length. [ 221.486064][ T54] usb 10-1: GET_CAPABILITIES returned 0 [ 221.488376][ T54] usbtmc 10-1:16.0: can't read capabilities [ 221.632236][T12036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.411767][T12051] netlink: 'syz.1.1731': attribute type 1 has an invalid length. [ 223.414374][T12051] netlink: 'syz.1.1731': attribute type 3 has an invalid length. [ 223.416965][T12051] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1731'. [ 223.420131][T12051] NCSI netlink: No device for ifindex 0 [ 223.429311][T12050] netlink: 'syz.1.1731': attribute type 1 has an invalid length. [ 223.431985][T12050] netlink: 'syz.1.1731': attribute type 3 has an invalid length. [ 223.434493][T12050] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1731'. [ 223.437567][T12050] NCSI netlink: No device for ifindex 0 [ 223.521653][T12056] comedi comedi0: Minor 3 could not be opened [ 223.843438][ T54] usb 10-1: USB disconnect, device number 7 [ 223.919693][T12080] netlink: 'syz.7.1739': attribute type 1 has an invalid length. [ 223.919724][T12079] netlink: 'syz.7.1739': attribute type 1 has an invalid length. [ 223.937270][T12080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.945572][T12079] bond1: (slave geneve2): making interface the new active one [ 223.949335][T12079] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 223.987898][T12088] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 224.029682][T12090] geneve3: entered promiscuous mode [ 224.031553][T12090] geneve3: entered allmulticast mode [ 224.033952][ T55] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.038783][ T55] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.041895][ T55] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.045156][ T55] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.186448][ T1464] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 224.340246][ T1464] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.345061][ T1464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 224.349060][ T1464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 224.352361][ T1464] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.356528][ T1464] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.359650][ T1464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.364604][ T1464] usb 6-1: config 0 descriptor?? [ 224.771667][ T1464] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 224.786581][ T1464] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 224.828524][T12099] __nla_validate_parse: 3 callbacks suppressed [ 224.828537][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1744'. [ 225.005368][ T40] kauditd_printk_skb: 81 callbacks suppressed [ 225.005383][ T40] audit: type=1400 audit(225.876:1825): avc: denied { setopt } for pid=12104 comm="syz.5.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.029864][ T40] audit: type=1400 audit(225.906:1826): avc: denied { bind } for pid=12106 comm="syz.5.1747" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 225.036928][ T40] audit: type=1400 audit(225.906:1827): avc: denied { name_bind } for pid=12106 comm="syz.5.1747" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 225.046792][ T40] audit: type=1400 audit(225.906:1828): avc: denied { node_bind } for pid=12106 comm="syz.5.1747" saddr=ff00::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 225.075624][ T40] audit: type=1400 audit(225.946:1829): avc: denied { append } for pid=12110 comm="syz.7.1749" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.087988][T12113] Bluetooth: hci0: unsupported parameter 256 [ 225.090355][T12113] Bluetooth: hci0: unsupported parameter 256 [ 225.092896][T12113] fuse: Unknown parameter 'M݉Q' [ 225.130559][ T40] audit: type=1400 audit(226.006:1830): avc: denied { add_name } for pid=12108 comm="syz.5.1748" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.139290][ T40] audit: type=1400 audit(226.006:1831): avc: denied { create } for pid=12108 comm="syz.5.1748" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 225.150833][ T40] audit: type=1400 audit(226.006:1832): avc: denied { associate } for pid=12108 comm="syz.5.1748" name="net_prio.prioidx" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 225.160142][ T40] audit: type=1400 audit(226.006:1833): avc: denied { read append } for pid=12108 comm="syz.5.1748" name="net_prio.prioidx" dev="9p" ino=35913874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 225.170730][ T40] audit: type=1400 audit(226.006:1834): avc: denied { open } for pid=12108 comm="syz.5.1748" path="/244/file0/net_prio.prioidx" dev="9p" ino=35913874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 225.203069][T12115] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1749'. [ 225.233084][T12119] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1750'. [ 226.028824][T12132] netlink: 212308 bytes leftover after parsing attributes in process `syz.7.1754'. [ 226.278384][ T56] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 226.340693][T12136] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1756'. [ 226.439858][ T56] usb 12-1: config 1 has an invalid interface number: 7 but max is 0 [ 226.442830][ T56] usb 12-1: config 1 has no interface number 0 [ 226.445598][ T56] usb 12-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 226.450824][ T56] usb 12-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 226.455238][ T56] usb 12-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.462447][ T56] usb 12-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 226.465433][ T56] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.469692][ T56] usb 12-1: Product: syz [ 226.471560][ T56] usb 12-1: Manufacturer: syz [ 226.473581][ T56] usb 12-1: SerialNumber: syz [ 226.480401][T12132] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 226.639200][T12142] macvlan2: entered promiscuous mode [ 226.640957][T12142] macvlan2: entered allmulticast mode [ 226.652750][T12145] block nbd1: Attempted send on invalid socket [ 226.655393][T12145] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 226.658838][T12145] befs: (nbd1): unable to read superblock [ 226.685492][T12132] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 226.702589][T12148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.891979][ T9] usb 6-1: USB disconnect, device number 9 [ 226.917347][ T56] sierra_net 12-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.7-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 226.939432][ T5976] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 227.066566][ T9262] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 227.093674][ T56] sierra_net 12-1:1.7 wwan0: Submit SYNC failed -71 [ 227.096046][ T56] sierra_net 12-1:1.7 wwan0: Send SYNC failed, status -71 [ 227.098807][ T56] sierra_net 12-1:1.7 wwan0: Submit SYNC failed -71 [ 227.101261][ T56] sierra_net 12-1:1.7 wwan0: Send SYNC failed, status -71 [ 227.105381][ T56] usb 12-1: USB disconnect, device number 6 [ 227.108963][ T56] sierra_net 12-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.7-1, Sierra Wireless USB-to-WWAN Modem [ 227.167752][ T56] sierra_net 12-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 227.218690][ T9262] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.222599][ T9262] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.225836][ T9262] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 227.229430][ T9262] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.233748][ T9262] usb 10-1: config 0 descriptor?? [ 227.643637][ T9262] hid_parser_main: 73 callbacks suppressed [ 227.643658][ T9262] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 227.657032][ T9262] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 227.662547][ T9262] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0D8C:0022.0006/input/input23 [ 227.680028][ T9262] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 227.744844][T12172] Invalid source name [ 227.747132][T12172] UBIFS error (pid: 12172): cannot open "ubifs", error -22 [ 227.847038][ T9262] usb 10-1: USB disconnect, device number 8 [ 227.892715][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1769'. [ 227.955461][T12188] loop6: detected capacity change from 0 to 7 [ 227.962197][T12188] Dev loop6: unable to read RDB block 7 [ 227.964720][T12188] loop6: AHDI p1 [ 227.966531][T12188] loop6: partition table partially beyond EOD, truncated [ 228.262731][ T5985] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 228.498000][T12204] cgroup: none used incorrectly [ 228.568370][T12206] netlink: 'syz.5.1776': attribute type 1 has an invalid length. [ 228.571443][T12206] netlink: 'syz.5.1776': attribute type 4 has an invalid length. [ 228.690397][T12219] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 228.692715][T12219] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 228.696654][T12219] vhci_hcd vhci_hcd.0: Device attached [ 228.699626][T12220] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 228.705158][ T9217] vhci_hcd: stop threads [ 228.707840][ T9217] vhci_hcd: release socket [ 228.709520][ T9217] vhci_hcd: disconnect device [ 229.065165][T12235] netlink: 596 bytes leftover after parsing attributes in process `syz.7.1782'. [ 229.102116][T12237] block nbd7: Attempted send on invalid socket [ 229.105182][T12237] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.110530][T12237] block nbd7: Attempted send on invalid socket [ 229.112639][T12237] I/O error, dev nbd7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 229.283571][T12254] netlink: 'syz.5.1788': attribute type 4 has an invalid length. [ 229.291928][T12254] netlink: 'syz.5.1788': attribute type 4 has an invalid length. [ 229.298816][ T5974] lo speed is unknown, defaulting to 1000 [ 229.301406][ T5974] syz0: Port: 1 Link ACTIVE [ 229.336958][T12257] sp0: Synchronizing with TNC [ 229.561858][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1791'. [ 229.628653][T12272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1793'. [ 229.633818][T12270] mkiss: ax0: crc mode is auto. [ 229.802639][T12274] lo speed is unknown, defaulting to 1000 [ 229.909422][T12274] lo speed is unknown, defaulting to 1000 [ 230.032762][T12321] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 230.229703][T12328] kvm: pic: non byte read [ 230.232961][T12328] kvm: pic: level sensitive irq not supported [ 230.365159][T12331] overlayfs: missing 'workdir' [ 230.481252][T12337] tipc: Failed to obtain node identity [ 230.483316][T12337] tipc: Enabling of bearer rejected, failed to enable media [ 230.530307][T12339] ptrace attach of "/syz-executor exec"[12340] was attempted by "/syz-executor exec"[12339] [ 230.593422][T12339] dummy0: entered allmulticast mode [ 230.629976][T12348] program syz.1.1805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.635455][T12347] block nbd1: Attempted send on invalid socket [ 230.640103][T12347] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 230.643512][T12347] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 230.660584][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 230.660598][ T40] audit: type=1400 audit(231.536:1856): avc: denied { listen } for pid=12349 comm="syz.5.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 230.670096][ T40] audit: type=1400 audit(231.536:1857): avc: denied { write } for pid=12349 comm="syz.5.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 230.679785][ T40] audit: type=1400 audit(231.536:1858): avc: denied { getopt } for pid=12349 comm="syz.5.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 230.694438][ T40] audit: type=1400 audit(231.566:1859): avc: denied { write } for pid=12352 comm="syz.1.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.776147][T12358] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1809'. [ 230.889855][T12363] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1811'. [ 230.893173][T12363] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1811'. [ 230.899517][T12363] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1811'. [ 230.903301][T12363] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1811'. [ 231.604219][T12373] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1815'. [ 231.662364][ T40] audit: type=1400 audit(232.536:1860): avc: denied { map } for pid=12372 comm="syz.5.1815" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 231.705168][ T40] audit: type=1400 audit(232.576:1861): avc: denied { ioctl } for pid=12377 comm="syz.7.1816" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 231.824755][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1819'. [ 231.883218][ T40] audit: type=1400 audit(232.756:1862): avc: denied { create } for pid=12383 comm="syz.7.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 231.920951][ T40] audit: type=1400 audit(232.796:1863): avc: denied { watch } for pid=12383 comm="syz.7.1818" path="/68/file0" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 231.929024][ T40] audit: type=1400 audit(232.806:1864): avc: denied { watch_sb watch_reads } for pid=12383 comm="syz.7.1818" path="/68/file0" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 231.943447][ T40] audit: type=1400 audit(232.816:1865): avc: denied { write } for pid=12396 comm="syz.5.1824" name="file0" dev="tmpfs" ino=1476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 232.023126][T12402] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1824'. [ 232.687824][T12405] tmpfs: User quota inode hardlimit too large. [ 232.822747][T12417] ubi31: attaching mtd0 [ 232.842668][T12417] ubi31: scanning is finished [ 232.845025][T12417] ubi31: empty MTD device detected [ 232.953283][T12417] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 232.957809][T12417] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 232.961572][T12417] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 232.964623][T12417] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 232.968307][T12417] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 232.971752][T12417] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 232.975472][T12417] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2349187961 [ 232.980638][T12417] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 232.985321][T12422] ubi31: background thread "ubi_bgt31d" started, PID 12422 [ 233.081293][T12431] fuse: Bad value for 'fd' [ 233.151359][T12436] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.225913][ T5985] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 233.365558][T12445] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 233.411933][T12457] random: crng reseeded on system resumption [ 233.465625][T12464] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1841'. [ 233.573849][T12472] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1844'. [ 233.728952][ T5976] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 233.856030][T12486] overlay: filesystem on ./bus not supported [ 234.951902][T12514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.132788][ T5985] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 235.137833][T12519] program syz.7.1857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.263176][T12312] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.353319][T12312] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.434974][T12312] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.541536][T12312] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.654181][ T5985] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 235.695125][T12312] bridge_slave_1: left allmulticast mode [ 235.697407][T12312] bridge_slave_1: left promiscuous mode [ 235.699382][T12312] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.704018][T12312] bridge_slave_0: left allmulticast mode [ 235.705919][T12312] bridge_slave_0: left promiscuous mode [ 235.711588][T12312] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.726777][ T56] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 235.733850][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 235.733861][ T40] audit: type=1400 audit(236.606:1887): avc: denied { remount } for pid=12547 comm="syz.5.1867" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 235.737353][T12548] tmpfs: Cannot enable quota on remount [ 235.813443][T12552] netlink: 'syz.7.1869': attribute type 10 has an invalid length. [ 235.859023][T12555] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12555 comm=syz.5.1867 [ 235.881008][ T56] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 235.883684][ T56] usb 6-1: config 1 has no interface number 0 [ 235.885722][ T56] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 235.890512][ T56] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 235.893994][ T56] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.900505][ T56] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 235.903406][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.906044][ T56] usb 6-1: Product: syz [ 235.908677][ T56] usb 6-1: Manufacturer: syz [ 235.910473][ T56] usb 6-1: SerialNumber: syz [ 235.914199][T12539] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.956739][ C2] ata1: illegal qc_active transition (00000000->00000003) [ 235.985718][T12312] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 236.116480][ T53] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 236.119853][T12539] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 236.268457][ T53] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.272869][ T53] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.276765][ T53] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.281348][ T53] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.284612][ T53] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.289548][ T53] usb 12-1: config 0 descriptor?? [ 236.298352][ T1115] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 236.303126][T12312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.306577][ T1115] ata1.00: configured for UDMA/100 [ 236.312674][T12312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.319113][T12312] bond0 (unregistering): Released all slaves [ 236.329066][T12312] bond1 (unregistering): Released all slaves [ 236.338496][T12312] bond2 (unregistering): Released all slaves [ 236.400077][T12552] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 236.434519][ T56] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 236.449668][T12312] tipc: Disabling bearer [ 236.459048][T12312] tipc: Left network mode [ 236.685666][ T40] audit: type=1400 audit(237.556:1888): avc: denied { read } for pid=12569 comm="syz.5.1871" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 236.686068][T12570] deleting an unspecified loop device is not supported. [ 236.694596][ T40] audit: type=1400 audit(237.556:1889): avc: denied { open } for pid=12569 comm="syz.5.1871" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 236.705136][ T40] audit: type=1400 audit(237.556:1890): avc: denied { ioctl } for pid=12569 comm="syz.5.1871" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 236.718544][ T53] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 236.802202][ T5985] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.810408][ T5985] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.814738][ T5985] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.821070][ T5985] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.831759][ T5985] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.893615][T12577] lo speed is unknown, defaulting to 1000 [ 236.912550][T12312] hsr_slave_0: left promiscuous mode [ 236.915515][T12312] hsr_slave_1: left promiscuous mode [ 236.919829][T12312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.922977][T12312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.927843][T12312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.930857][T12312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.969227][T12312] veth1_macvtap: left promiscuous mode [ 236.971291][T12312] veth0_macvtap: left promiscuous mode [ 236.973117][T12312] veth1_vlan: left promiscuous mode [ 236.974869][T12312] veth0_vlan: left promiscuous mode [ 237.727070][ T40] audit: type=1400 audit(238.596:1891): avc: denied { write } for pid=12586 comm="syz.5.1873" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 238.038311][T12312] team0 (unregistering): Port device team_slave_1 removed [ 238.158910][T12312] team0 (unregistering): Port device team_slave_0 removed [ 238.513348][ T56] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 238.515976][ T56] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 238.519663][ T56] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 238.521971][ T56] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 238.542400][ T56] usb 6-1: USB disconnect, device number 10 [ 238.546075][ T56] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 238.813970][ T2137] usb 12-1: USB disconnect, device number 7 [ 238.897444][ T5985] Bluetooth: hci5: command tx timeout [ 239.014079][T12577] lo speed is unknown, defaulting to 1000 [ 239.028835][T12626] __nla_validate_parse: 5 callbacks suppressed [ 239.028849][T12626] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1875'. [ 239.113040][ T40] audit: type=1400 audit(239.986:1892): avc: denied { bind } for pid=12633 comm="syz.7.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 239.126396][ T56] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 239.158755][ T40] audit: type=1400 audit(240.026:1893): avc: denied { setopt } for pid=12637 comm="syz.5.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.165052][ T40] audit: type=1400 audit(240.026:1894): avc: denied { getopt } for pid=12637 comm="syz.5.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.189065][T12577] chnl_net:caif_netlink_parms(): no params data found [ 239.247173][ T5985] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 239.332257][T12577] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.334747][T12577] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.336378][ T40] audit: type=1400 audit(240.206:1895): avc: denied { create } for pid=12656 comm="syz.1.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 239.337239][T12577] bridge_slave_0: entered allmulticast mode [ 239.338977][T12654] openvswitch: netlink: Message has 24 unknown bytes. [ 239.343882][ T40] audit: type=1400 audit(240.216:1896): avc: denied { write } for pid=12656 comm="syz.1.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 239.346788][T12577] bridge_slave_0: entered promiscuous mode [ 239.359042][T12577] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.362186][T12577] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.365196][T12577] bridge_slave_1: entered allmulticast mode [ 239.369612][T12577] bridge_slave_1: entered promiscuous mode [ 239.386898][ T2137] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 239.415663][T12577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.422897][T12577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.429293][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1882'. [ 239.433068][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1882'. [ 239.471270][T12666] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 239.473190][T12577] team0: Port device team_slave_0 added [ 239.473246][T12312] IPVS: stop unused estimator thread 0... [ 239.480851][T12577] team0: Port device team_slave_1 added [ 239.516795][ T2137] usb 10-1: device descriptor read/64, error -71 [ 239.527844][T12670] batadv_slave_0: entered promiscuous mode [ 239.531801][T12670] batadv_slave_0: left promiscuous mode [ 239.539522][T12577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.541847][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.551138][T12577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.558550][T12577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.561407][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.571130][T12577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.628302][T12577] hsr_slave_0: entered promiscuous mode [ 239.631144][T12577] hsr_slave_1: entered promiscuous mode [ 239.633601][T12577] debugfs: 'hsr0' already exists in 'hsr' [ 239.635497][T12577] Cannot create hsr debugfs directory [ 239.730993][T12679] netlink: 195584 bytes leftover after parsing attributes in process `syz.7.1887'. [ 239.777350][ T2137] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 239.803628][T12577] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 239.806463][ T5976] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 239.818064][T12577] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 239.823484][T12577] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 239.829295][T12577] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 239.851422][T12577] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.853684][T12577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.856371][T12577] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.858775][T12577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.886178][T12700] hfsplus: unable to find HFS+ superblock [ 239.896055][T12577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.900452][T12698] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 239.906629][ T2137] usb 10-1: device descriptor read/64, error -71 [ 239.912249][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.919504][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.939485][T12577] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.950219][T12317] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.952517][T12317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.960208][T12312] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.962709][T12312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.027024][ T2137] usb usb10-port1: attempt power cycle [ 240.271750][ T5976] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 240.386584][ T2137] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 240.407934][ T2137] usb 10-1: device descriptor read/8, error -71 [ 240.646480][ T2137] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 240.666847][ T2137] usb 10-1: device descriptor read/8, error -71 [ 240.791181][ T2137] usb usb10-port1: unable to enumerate USB device [ 240.980615][ T5985] Bluetooth: hci5: command tx timeout [ 241.184370][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 241.184386][ T40] audit: type=1400 audit(242.056:1904): avc: denied { bind } for pid=12738 comm="syz.1.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 241.863847][T12577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.031779][T12577] veth0_vlan: entered promiscuous mode [ 242.040433][T12577] veth1_vlan: entered promiscuous mode [ 242.061572][T12577] veth0_macvtap: entered promiscuous mode [ 242.065807][T12577] veth1_macvtap: entered promiscuous mode [ 242.076141][T12577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.083906][T12577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.090981][T12315] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.093879][T12315] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.099093][T12315] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.107534][T12315] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.139421][T12315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.142283][T12315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.164970][T12312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.171171][T12312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.220502][ T40] audit: type=1400 audit(243.096:1905): avc: denied { setopt } for pid=12765 comm="syz.8.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 242.274309][ T40] audit: type=1400 audit(243.146:1906): avc: denied { read } for pid=12768 comm="syz.8.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 242.288106][ T7111] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 242.299940][ T40] audit: type=1400 audit(243.176:1907): avc: denied { getopt } for pid=12771 comm="syz.1.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 242.375787][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1911'. [ 242.380490][T12778] bridge_slave_0: default FDB implementation only supports local addresses [ 242.459987][ T7111] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 242.463906][ T7111] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 242.469112][ T7111] usb 12-1: config 0 interface 0 has no altsetting 0 [ 242.473511][T12787] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 242.474431][ T7111] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 242.478413][T12787] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 242.480909][ T7111] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 242.487493][ T7111] usb 12-1: Product: syz [ 242.490322][ T7111] usb 12-1: Manufacturer: syz [ 242.493371][ T7111] usb 12-1: SerialNumber: syz [ 242.496852][ T7111] usb 12-1: config 0 descriptor?? [ 242.500961][ T7111] hub 12-1:0.0: bad descriptor, ignoring hub [ 242.503028][ T7111] hub 12-1:0.0: probe with driver hub failed with error -5 [ 242.510235][ T7111] usb 12-1: selecting invalid altsetting 0 [ 242.607870][ T40] audit: type=1400 audit(243.486:1908): avc: denied { map } for pid=12793 comm="syz.8.1916" path="socket:[52851]" dev="sockfs" ino=52851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.619313][ T40] audit: type=1400 audit(243.486:1909): avc: denied { read } for pid=12793 comm="syz.8.1916" path="socket:[52851]" dev="sockfs" ino=52851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.646935][T12797] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1917'. [ 242.657085][T12798] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1917'. [ 242.739057][T12807] erspan0: entered promiscuous mode [ 242.877437][ T9] usb 12-1: USB disconnect, device number 8 [ 243.056489][ T5985] Bluetooth: hci5: command tx timeout [ 243.407253][ T40] audit: type=1400 audit(244.276:1910): avc: denied { setopt } for pid=12842 comm="syz.1.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 243.476182][T12843] could not allocate digest TFM handle cryptd(blake2b-160) [ 243.479362][T12854] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1929'. [ 243.480252][ T40] audit: type=1400 audit(244.356:1911): avc: denied { getopt } for pid=12853 comm="syz.7.1929" lport=49764 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 243.600183][T12862] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 243.603396][T12862] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 243.875764][ T40] audit: type=1400 audit(244.746:1912): avc: denied { setopt } for pid=12871 comm="syz.7.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 243.902413][ T40] audit: type=1400 audit(244.776:1913): avc: denied { ioctl } for pid=12875 comm="syz.7.1937" path="socket:[51981]" dev="sockfs" ino=51981 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 243.933771][T12880] netlink: 10 bytes leftover after parsing attributes in process `syz.7.1938'. [ 243.949741][ T5985] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 244.362146][T12892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.767206][T12914] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 245.046449][ T840] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 245.146654][ T5985] Bluetooth: hci5: command tx timeout [ 245.179598][T12936] devpts: Unknown parameter '00000000000000000000' [ 245.211561][ T840] usb 12-1: config 1 has an invalid interface number: 7 but max is 0 [ 245.214805][ T840] usb 12-1: config 1 has no interface number 0 [ 245.217294][ T840] usb 12-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 245.221311][ T840] usb 12-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 245.224737][ T840] usb 12-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.232164][ T840] usb 12-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 245.235382][ T840] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.238476][ T840] usb 12-1: Product: syz [ 245.240094][ T840] usb 12-1: Manufacturer: syz [ 245.241785][ T840] usb 12-1: SerialNumber: syz [ 245.246915][T12917] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 245.420530][T12943] FAULT_INJECTION: forcing a failure. [ 245.420530][T12943] name failslab, interval 1, probability 0, space 0, times 0 [ 245.425625][T12943] CPU: 1 UID: 0 PID: 12943 Comm: syz.1.1955 Not tainted syzkaller #0 PREEMPT(full) [ 245.425650][T12943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.425662][T12943] Call Trace: [ 245.425669][T12943] [ 245.425677][T12943] dump_stack_lvl+0x16c/0x1f0 [ 245.425733][T12943] should_fail_ex+0x512/0x640 [ 245.425761][T12943] ? fs_reclaim_acquire+0xae/0x150 [ 245.425785][T12943] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 245.425808][T12943] should_failslab+0xc2/0x120 [ 245.425829][T12943] __kmalloc_noprof+0xd2/0x510 [ 245.425854][T12943] tomoyo_realpath_from_path+0xc2/0x6e0 [ 245.425881][T12943] ? tomoyo_profile+0x47/0x60 [ 245.425903][T12943] tomoyo_path_number_perm+0x245/0x580 [ 245.425923][T12943] ? tomoyo_path_number_perm+0x237/0x580 [ 245.425947][T12943] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 245.425977][T12943] ? find_held_lock+0x2b/0x80 [ 245.426017][T12943] ? find_held_lock+0x2b/0x80 [ 245.426036][T12943] ? hook_file_ioctl_common+0x145/0x410 [ 245.426057][T12943] ? __fget_files+0x20e/0x3c0 [ 245.426079][T12943] security_file_ioctl+0x9b/0x240 [ 245.426103][T12943] __x64_sys_ioctl+0xb7/0x210 [ 245.426129][T12943] do_syscall_64+0xcd/0x4c0 [ 245.426149][T12943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.426165][T12943] RIP: 0033:0x7fc98078ebe9 [ 245.426179][T12943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.426194][T12943] RSP: 002b:00007fc981510038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.426210][T12943] RAX: ffffffffffffffda RBX: 00007fc9809b6090 RCX: 00007fc98078ebe9 [ 245.426221][T12943] RDX: 0000200000000000 RSI: 0000000000005411 RDI: 0000000000000004 [ 245.426244][T12943] RBP: 00007fc981510090 R08: 0000000000000000 R09: 0000000000000000 [ 245.426256][T12943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.426265][T12943] R13: 00007fc9809b6128 R14: 00007fc9809b6090 R15: 00007ffcd3e885b8 [ 245.426288][T12943] [ 245.451884][T12917] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 245.454060][T12943] ERROR: Out of memory at tomoyo_realpath_from_path. [ 245.665881][ T840] sierra_net 12-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.7-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:03:07 [ 245.869989][ T840] sierra_net 12-1:1.7 wwan0: Submit SYNC failed -71 [ 245.872158][ T840] sierra_net 12-1:1.7 wwan0: Send SYNC failed, status -71 [ 245.874614][ T840] sierra_net 12-1:1.7 wwan0: Submit SYNC failed -71 [ 245.877007][ T840] sierra_net 12-1:1.7 wwan0: Send SYNC failed, status -71 [ 245.880927][ T840] usb 12-1: USB disconnect, device number 9 [ 245.884093][ T840] sierra_net 12-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.7-1, Sierra Wireless USB-to-WWAN Modem [ 245.938128][ T840] sierra_net 12-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 246.395046][T12959] .: renamed from bond0 [ 246.414580][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 246.414592][ T40] audit: type=1400 audit(247.286:1919): avc: denied { associate } for pid=12960 comm="syz.7.1962" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 246.465706][T12967] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 246.471193][ T40] audit: type=1400 audit(247.346:1920): avc: denied { relabelto } for pid=12966 comm="syz.5.1963" name="301" dev="tmpfs" ino=1630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 246.481646][ T40] audit: type=1400 audit(247.346:1921): avc: denied { associate } for pid=12966 comm="syz.5.1963" name="301" dev="tmpfs" ino=1630 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 246.508350][ T40] audit: type=1400 audit(247.386:1922): avc: denied { read } for pid=12968 comm="syz.7.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 246.520251][T12970] FAULT_INJECTION: forcing a failure. [ 246.520251][T12970] name failslab, interval 1, probability 0, space 0, times 0 [ 246.525210][T12970] CPU: 3 UID: 0 PID: 12970 Comm: syz.8.1965 Not tainted syzkaller #0 PREEMPT(full) [ 246.525226][T12970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.525233][T12970] Call Trace: [ 246.525237][T12970] [ 246.525241][T12970] dump_stack_lvl+0x16c/0x1f0 [ 246.525259][T12970] should_fail_ex+0x512/0x640 [ 246.525272][T12970] ? fs_reclaim_acquire+0xae/0x150 [ 246.525288][T12970] ? tomoyo_encode2+0x100/0x3e0 [ 246.525304][T12970] should_failslab+0xc2/0x120 [ 246.525317][T12970] __kmalloc_noprof+0xd2/0x510 [ 246.525330][T12970] ? d_absolute_path+0x136/0x1a0 [ 246.525362][T12970] tomoyo_encode2+0x100/0x3e0 [ 246.525381][T12970] tomoyo_encode+0x29/0x50 [ 246.525396][T12970] tomoyo_realpath_from_path+0x18f/0x6e0 [ 246.525417][T12970] tomoyo_path_number_perm+0x245/0x580 [ 246.525431][T12970] ? tomoyo_path_number_perm+0x237/0x580 [ 246.525446][T12970] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 246.525461][T12970] ? find_held_lock+0x2b/0x80 [ 246.525489][T12970] ? find_held_lock+0x2b/0x80 [ 246.525501][T12970] ? hook_file_ioctl_common+0x145/0x410 [ 246.525516][T12970] ? __fget_files+0x20e/0x3c0 [ 246.525531][T12970] security_file_ioctl+0x9b/0x240 [ 246.525549][T12970] __x64_sys_ioctl+0xb7/0x210 [ 246.525567][T12970] do_syscall_64+0xcd/0x4c0 [ 246.525581][T12970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.525592][T12970] RIP: 0033:0x7f7c75d8ebe9 [ 246.525602][T12970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.525613][T12970] RSP: 002b:00007f7c76be1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.525623][T12970] RAX: ffffffffffffffda RBX: 00007f7c75fb6090 RCX: 00007f7c75d8ebe9 [ 246.525630][T12970] RDX: 0000200000000000 RSI: 0000000000005411 RDI: 0000000000000004 [ 246.525637][T12970] RBP: 00007f7c76be1090 R08: 0000000000000000 R09: 0000000000000000 [ 246.525643][T12970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.525649][T12970] R13: 00007f7c75fb6128 R14: 00007f7c75fb6090 R15: 00007ffcd2140778 [ 246.525663][T12970] [ 246.525707][T12970] ERROR: Out of memory at tomoyo_realpath_from_path. [ 246.577232][ T40] audit: type=1326 audit(247.456:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.7.1966" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ba2b8ebe9 code=0x0 [ 246.631461][ T40] audit: type=1400 audit(247.506:1924): avc: denied { remove_name } for pid=9189 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 246.643174][ T40] audit: type=1400 audit(247.506:1925): avc: denied { rmdir } for pid=9189 comm="syz-executor" name="301" dev="tmpfs" ino=1630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 246.809194][T12975] overlayfs: failed to resolve 'verity=require': -2 [ 247.391176][ T56] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 247.414138][T12990] team0: Port device vlan0 removed [ 247.422647][T12314] tipc: Resetting bearer [ 247.567092][ T56] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 247.569817][ T56] usb 6-1: config 1 has no interface number 0 [ 247.575780][ T40] audit: type=1400 audit(248.446:1926): avc: denied { read append } for pid=12999 comm="syz.7.1977" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 247.582430][ T56] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 247.588892][ T40] audit: type=1400 audit(248.446:1927): avc: denied { open } for pid=12999 comm="syz.7.1977" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 247.596896][ T56] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 247.606680][ T56] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.624318][ T56] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 247.633072][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.636112][ T56] usb 6-1: Product: syz [ 247.638207][ T56] usb 6-1: Manufacturer: syz [ 247.640261][ T56] usb 6-1: SerialNumber: syz [ 247.644767][T12983] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 247.651901][T13005] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1979'. [ 247.658485][T13005] openvswitch: netlink: Duplicate or invalid key (type 0). [ 247.661339][T13005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.776706][ T5985] Bluetooth: hci5: command tx timeout [ 247.809522][T13011] macsec0: entered promiscuous mode [ 247.811977][T13011] macsec0: entered allmulticast mode [ 247.813844][T13011] veth1_macvtap: entered allmulticast mode [ 247.851095][T12983] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 248.062821][ T56] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:04:07 [ 248.523276][T13019] FAULT_INJECTION: forcing a failure. [ 248.523276][T13019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.530155][T13019] CPU: 2 UID: 0 PID: 13019 Comm: syz.5.1981 Not tainted syzkaller #0 PREEMPT(full) [ 248.530183][T13019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.530194][T13019] Call Trace: [ 248.530200][T13019] [ 248.530208][T13019] dump_stack_lvl+0x16c/0x1f0 [ 248.530234][T13019] should_fail_ex+0x512/0x640 [ 248.530259][T13019] _copy_to_user+0x32/0xd0 [ 248.530286][T13019] simple_read_from_buffer+0xcb/0x170 [ 248.530310][T13019] proc_fail_nth_read+0x197/0x240 [ 248.530333][T13019] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.530357][T13019] ? rw_verify_area+0xcf/0x6c0 [ 248.530385][T13019] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.530406][T13019] vfs_read+0x1e4/0xcf0 [ 248.530429][T13019] ? __pfx___mutex_lock+0x10/0x10 [ 248.530467][T13019] ? __pfx_vfs_read+0x10/0x10 [ 248.530492][T13019] ? __fget_files+0x20e/0x3c0 [ 248.530520][T13019] ksys_read+0x12a/0x250 [ 248.530538][T13019] ? __pfx_ksys_read+0x10/0x10 [ 248.530558][T13019] ? fput+0x9b/0xd0 [ 248.530587][T13019] do_syscall_64+0xcd/0x4c0 [ 248.530610][T13019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.530628][T13019] RIP: 0033:0x7f585598d5fc [ 248.530644][T13019] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 248.530660][T13019] RSP: 002b:00007f585678a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.530678][T13019] RAX: ffffffffffffffda RBX: 00007f5855bb6090 RCX: 00007f585598d5fc [ 248.530691][T13019] RDX: 000000000000000f RSI: 00007f585678a0a0 RDI: 0000000000000005 [ 248.530701][T13019] RBP: 00007f585678a090 R08: 0000000000000000 R09: 0000000000000000 [ 248.530744][T13019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.530755][T13019] R13: 00007f5855bb6128 R14: 00007f5855bb6090 R15: 00007ffe5ca1b7b8 [ 248.530782][T13019] [ 248.828822][T13036] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1986'. [ 249.039976][ T40] audit: type=1400 audit(249.916:1928): avc: denied { accept } for pid=13038 comm="syz.7.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 249.181900][ T5985] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 250.038114][T13065] ================================================================== [ 250.038124][T13065] BUG: KASAN: global-out-of-bounds in bit_putcs+0xa63/0xde0 [ 250.038141][T13065] Read of size 1 at addr ffffffff8c18fa20 by task syz.8.1994/13065 [ 250.038151][T13065] [ 250.038157][T13065] CPU: 3 UID: 0 PID: 13065 Comm: syz.8.1994 Not tainted syzkaller #0 PREEMPT(full) [ 250.038170][T13065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.038178][T13065] Call Trace: [ 250.038182][T13065] [ 250.038187][T13065] dump_stack_lvl+0x116/0x1f0 [ 250.038216][T13065] print_report+0xcd/0x630 [ 250.038233][T13065] ? __virt_addr_valid+0x81/0x610 [ 250.038249][T13065] ? __phys_addr+0xe8/0x180 [ 250.038264][T13065] ? bit_putcs+0xa63/0xde0 [ 250.038276][T13065] kasan_report+0xe0/0x110 [ 250.038289][T13065] ? bit_putcs+0xa63/0xde0 [ 250.038302][T13065] bit_putcs+0xa63/0xde0 [ 250.038318][T13065] ? __pfx_bit_putcs+0x10/0x10 [ 250.038332][T13065] ? fb_get_color_depth+0x120/0x250 [ 250.038343][T13065] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.038357][T13065] ? __pfx_bit_putcs+0x10/0x10 [ 250.038367][T13065] fbcon_putcs+0x384/0x4a0 [ 250.038385][T13065] do_update_region+0x1f8/0x3f0 [ 250.038401][T13065] update_region+0xc1/0x160 [ 250.038418][T13065] vcs_write+0x7c7/0xdb0 [ 250.038436][T13065] ? __pfx_vcs_write+0x10/0x10 [ 250.038452][T13065] ? bpf_lsm_file_permission+0x9/0x10 [ 250.038467][T13065] ? security_file_permission+0x71/0x210 [ 250.038484][T13065] ? rw_verify_area+0xcf/0x6c0 [ 250.038502][T13065] ? __pfx_vcs_write+0x10/0x10 [ 250.038517][T13065] vfs_write+0x29d/0x11d0 [ 250.038529][T13065] ? __pfx_vfs_write+0x10/0x10 [ 250.038539][T13065] ? find_held_lock+0x2b/0x80 [ 250.038553][T13065] ? __fget_files+0x204/0x3c0 [ 250.038566][T13065] ? __fget_files+0x20e/0x3c0 [ 250.038579][T13065] ksys_write+0x12a/0x250 [ 250.038589][T13065] ? __pfx_ksys_write+0x10/0x10 [ 250.038602][T13065] do_syscall_64+0xcd/0x4c0 [ 250.038615][T13065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.038626][T13065] RIP: 0033:0x7f7c75d8ebe9 [ 250.038635][T13065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.038646][T13065] RSP: 002b:00007f7c76c02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.038657][T13065] RAX: ffffffffffffffda RBX: 00007f7c75fb5fa0 RCX: 00007f7c75d8ebe9 [ 250.038665][T13065] RDX: 0000000000000018 RSI: 0000200000000580 RDI: 0000000000000007 [ 250.038671][T13065] RBP: 00007f7c75e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 250.038678][T13065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.038684][T13065] R13: 00007f7c75fb6038 R14: 00007f7c75fb5fa0 R15: 00007ffcd2140778 [ 250.038694][T13065] [ 250.038719][T13065] [ 250.038723][T13065] The buggy address belongs to the variable: [ 250.038727][T13065] type_check_kinds+0x900/0xcc0 [ 250.038745][T13065] [ 250.038748][T13065] The buggy address belongs to the physical page: [ 250.038754][T13065] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xc18f [ 250.038766][T13065] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 250.038783][T13065] raw: 00fff00000002000 ffffea00003063c8 ffffea00003063c8 0000000000000000 [ 250.038795][T13065] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 250.038802][T13065] page dumped because: kasan: bad access detected [ 250.038807][T13065] page_owner info is not present (never set?) [ 250.038811][T13065] [ 250.038814][T13065] Memory state around the buggy address: [ 250.038819][T13065] ffffffff8c18f900: f9 f9 f9 f9 00 00 00 00 06 f9 f9 f9 f9 f9 f9 f9 [ 250.038826][T13065] ffffffff8c18f980: 00 00 00 00 00 00 01 f9 f9 f9 f9 f9 00 00 00 00 [ 250.038834][T13065] >ffffffff8c18fa00: 00 00 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 f9 f9 [ 250.038840][T13065] ^ [ 250.038845][T13065] ffffffff8c18fa80: f9 f9 f9 f9 05 f9 f9 f9 f9 f9 f9 f9 00 00 00 02 [ 250.038852][T13065] ffffffff8c18fb00: f9 f9 f9 f9 00 01 f9 f9 f9 f9 f9 f9 00 00 07 f9 [ 250.038858][T13065] ================================================================== [ 250.038902][T13065] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 250.038910][T13065] CPU: 3 UID: 0 PID: 13065 Comm: syz.8.1994 Not tainted syzkaller #0 PREEMPT(full) [ 250.038925][T13065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.038933][T13065] Call Trace: [ 250.038937][T13065] [ 250.038941][T13065] dump_stack_lvl+0x3d/0x1f0 [ 250.038955][T13065] vpanic+0x6e8/0x7a0 [ 250.038973][T13065] ? __pfx_vpanic+0x10/0x10 [ 250.038991][T13065] ? bit_putcs+0xa63/0xde0 [ 250.039002][T13065] panic+0xca/0xd0 [ 250.039031][T13065] ? __pfx_panic+0x10/0x10 [ 250.039051][T13065] check_panic_on_warn+0xab/0xb0 [ 250.039061][T13065] end_report+0x107/0x170 [ 250.039074][T13065] kasan_report+0xee/0x110 [ 250.039087][T13065] ? bit_putcs+0xa63/0xde0 [ 250.039099][T13065] bit_putcs+0xa63/0xde0 [ 250.039115][T13065] ? __pfx_bit_putcs+0x10/0x10 [ 250.039128][T13065] ? fb_get_color_depth+0x120/0x250 [ 250.039139][T13065] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.039152][T13065] ? __pfx_bit_putcs+0x10/0x10 [ 250.039164][T13065] fbcon_putcs+0x384/0x4a0 [ 250.039214][T13065] do_update_region+0x1f8/0x3f0 [ 250.039233][T13065] update_region+0xc1/0x160 [ 250.039250][T13065] vcs_write+0x7c7/0xdb0 [ 250.039271][T13065] ? __pfx_vcs_write+0x10/0x10 [ 250.039288][T13065] ? bpf_lsm_file_permission+0x9/0x10 [ 250.039304][T13065] ? security_file_permission+0x71/0x210 [ 250.039322][T13065] ? rw_verify_area+0xcf/0x6c0 [ 250.039339][T13065] ? __pfx_vcs_write+0x10/0x10 [ 250.039355][T13065] vfs_write+0x29d/0x11d0 [ 250.039367][T13065] ? __pfx_vfs_write+0x10/0x10 [ 250.039377][T13065] ? find_held_lock+0x2b/0x80 [ 250.039390][T13065] ? __fget_files+0x204/0x3c0 [ 250.039403][T13065] ? __fget_files+0x20e/0x3c0 [ 250.039417][T13065] ksys_write+0x12a/0x250 [ 250.039427][T13065] ? __pfx_ksys_write+0x10/0x10 [ 250.039440][T13065] do_syscall_64+0xcd/0x4c0 [ 250.039453][T13065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.039464][T13065] RIP: 0033:0x7f7c75d8ebe9 [ 250.039472][T13065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.039483][T13065] RSP: 002b:00007f7c76c02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.039494][T13065] RAX: ffffffffffffffda RBX: 00007f7c75fb5fa0 RCX: 00007f7c75d8ebe9 [ 250.039501][T13065] RDX: 0000000000000018 RSI: 0000200000000580 RDI: 0000000000000007 [ 250.039508][T13065] RBP: 00007f7c75e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 250.039515][T13065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.039521][T13065] R13: 00007f7c75fb6038 R14: 00007f7c75fb5fa0 R15: 00007ffcd2140778 [ 250.039532][T13065] [ 250.040410][T13065] Kernel Offset: disabled VM DIAGNOSIS: 15:04:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608c60 RDX=ffff88802817a440 RSI=ffffffff81608ca8 RDI=ffffffff93db8fe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b71fc R10=ffffffff93db8fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608ca9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3ba38e56c0 CR3=0000000054d67000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd3e88ac6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd3e88ac6 00007ffcd3e88acc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc980812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc980812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc980812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc980812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc980812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc980812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9809874a8 00007fc9809874a0 00007fc980987498 00007fc980987470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9814ed100 00007fc980987460 00007fc980980004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc9809874b8 00007fc9809874b0 00007fc9809874a8 00007fc9809874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010101 RBX=0000000000000000 RCX=ffffffff81608c60 RDX=ffff88802c5f0000 RSI=ffffffff81608ca8 RDI=ffffffff93db8fe0 RBP=0000000000000001 RSP=ffffc900006a0a08 R8 =0000000000000001 R9 =fffffbfff27b71fc R10=ffffffff93db8fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608ca9 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f216d7c3300 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0063ff0000 CR3=000000002a61a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2515000000000000 0000000000000030 00d5000000000800 0000ffffffff8615 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2515000000000000 0000000000000030 00d6000000000800 0000ffffffff8615 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2515000000000000 0000000000000030 00d7000000000800 0000ffffffff8615 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2515000000000000 0000000000000030 00db000000000800 0000ffffffff8615 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2515000000000000 0000000000000030 00da000000000800 0000ffffffff8615 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2515000000000000 0000000000000030 00d9000000000800 0000ffffffff8615 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2515000000000000 0000000000000030 00d8000000000800 0000ffffffff8615 ZMM24=f830877ef830877e f830877ef830877e f830877ef830877e f830877ef830877e f830877ef830877e f830877ef830877e f830877ef830877e f830877ef830877e ZMM25=788330fd788330fd 788330fd788330fd 788330fd788330fd 788330fd788330fd 788330fd788330fd 788330fd788330fd 788330fd788330fd 788330fd788330fd ZMM26=e1cf7720e1cf7720 e1cf7720e1cf7720 e1cf7720e1cf7720 e1cf7720e1cf7720 e1cf7720e1cf7720 e1cf7720e1cf7720 e1cf7720e1cf7720 e1cf7720e1cf7720 ZMM27=5478764a5478764a 5478764a5478764a 5478764a5478764a 5478764a5478764a 5478764a5478764a 5478764a5478764a 5478764a5478764a 5478764a5478764a ZMM28=000001900000018f 0000018e0000018d 0000018c0000018b 0000018a00000189 0000018800000187 0000018600000185 0000018400000183 0000018200000181 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=da0c0000da0c0000 da0c0000da0c0000 da0c0000da0c0000 da0c0000da0c0000 da0c0000da0c0000 da0c0000da0c0000 da0c0000da0c0000 da0c0000da0c0000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608c60 RDX=ffff888025428000 RSI=ffffffff81608ca8 RDI=ffffffff93db8fe0 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27b71fc R10=ffffffff93db8fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608ca9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007feaf7994880 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7c75fb7dac CR3=0000000026e43000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000029 Opmask02=00000000ffffffff Opmask03=0000000082000020 Opmask04=00000000ffdfffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd9a906920 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ec1da06b80 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ec1d9f0900 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feaf73f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff0000000000ff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c99844c6823 73730c99844c6823 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737332 7373269f6eedfb73 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 347570632f302f71 6d2f37706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 0000000000003475 70632f302f716d2f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d362f366273752f 312e6463685f796d 6d75642f6d726f66 74616c702f736563 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001c1 6c2f007365007974 000034746e003400 317761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3139312c3039312c 4638312c4538312c 4238312c3938312c 3838312c3538312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3438312c3138312c 3937312c3737312c 3437312c4436312c 4336312c3636312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643cf5 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc9000760f3f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=000000000000005b R14=ffffffff9b111060 R15=ffffffff85643c90 RIP=ffffffff85643d1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7c76c026c0 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c39c1e5 CR3=000000002b303000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd2140c86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd2140c86 00007ffcd2140c8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c75e12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c75e12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c75e12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c75e12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c75e12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c75e12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c75f874a8 00007f7c75f874a0 00007f7c75f87498 00007f7c75f87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c76aed100 00007f7c75f87460 00007f7c75f87478 00007f7c75f874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c75f874b8 00007f7c75f874b0 00007f7c75f874a8 00007f7c75f874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000