last executing test programs: 1m15.501563565s ago: executing program 3 (id=267): r0 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "0a92072159ab0fbeb5e67b804d1cf7382975a202eaa7b07c5a414337d40bb803fc93d356aea4d8caeea9cc85ad688e03e566ed55c6efaeed3cb57d4c51fb0235"}, 0x48, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r0, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000000)) 1m15.441098782s ago: executing program 3 (id=268): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0xbdeb7ee9b69b0ef6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xa}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x1326, &(0x7f00000000c0)={0x0, 0x1aad, 0x10000, 0xffffffff, 0x200}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180), &(0x7f0000000140)) 1m15.360723435s ago: executing program 3 (id=269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12) write$char_usb(r1, &(0x7f00000000c0)="73e92f33bd0b129635a0d3a57e0603b03206b6ea27235a981debabdb1d3a3aa994ba7c564e35dfc2b111999a3d2c3e98429d70121f1205ce17cc8e25598c27", 0x3f) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(r2, &(0x7f00000002c0)="eb", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r4, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x1, 0x2, 0x1c, 0x3, 0x1, 0x4, 0x2}, &(0x7f0000000080)=0x9c) 1m15.360152468s ago: executing program 3 (id=270): syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newlink={0xd4, 0x10, 0xe01, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x98, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x88, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xfffff801}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2f, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x3f5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xa46f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200800, 0xd47}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xda4229b7, 0xfffffc32}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x4}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_1\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x26}]}, 0xd4}}, 0x4000) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x2c, 0x80804, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) syz_usb_connect$printer(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x2, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x47, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0xf, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xf7, 0x7, 0x4}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x10, 0x4, 0x6, 0x3, 0x10, 0x9}, 0xc, &(0x7f0000000240)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x7, 0x2, 0x1}]}, 0x1, [{0x102, &(0x7f0000000500)=@string={0x102, 0x3, "4a8e36cb2e7707e8c37041e15e0c945bbf44dbbf0e5d791c44f58b3efe7955e2a2f1038df09912cec3b26deeafc7fde37282298f7d2212a978d971849ffc102581323c31fa440104b77af61f8217ea686811acfa5c6ec04a808618173269cee826a2ab862a6a207fdcd0c5e2f69c8ea046f6480dc0213c7d7c7ab8ab8fb7e399b14a61c665ca98709fe6a50f1e5880017cf0ec3dca802a55042c3fcd690d4f59699fb7c25f0d65717f7a204a11afed28c0969bc8912d2891020af8fc506373509174e932fb85ffbf5c7216c29fd53c3e2433f41d8bc744e99dd99908a1bfe6f488d9408cc4f813662e9370507f5753f72a06a3519690ba5213d069dcb8e82d70"}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) read$FUSE(r5, &(0x7f0000002440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r9 = dup(0xffffffffffffffff) write$FUSE_BMAP(r9, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r9, &(0x7f00000004c0)={0x18}, 0x18) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r9, &(0x7f00000005c0)={0xa0, 0x0, r11, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, r12, r13, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) sendmmsg$unix(r3, &(0x7f0000005d40)=[{{&(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000006c0)="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", 0x1000}], 0x1, &(0x7f0000001740)=[@rights={{0x1c, 0x1, 0x1, [r1, r5, r5]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8, r6}}}, @cred={{0x1c, 0x1, 0x2, {r8, r6, r7}}}, @rights={{0x24, 0x1, 0x1, [r1, r2, r1, r1, r5]}}, @rights={{0x2c, 0x1, 0x1, [r3, r2, r3, r3, r2, r5, r5]}}], 0xf0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001840)="dcb06f9fc685873ea17f0ee4368182eafbe4a0df0064cedf9d5f7130c3df5849e8e7fb47f87fa801814df4ec33251573c598a200dc4840c48c6fc6577f0259682a0b2e0cc4ebdc9ae078d80b42f8ceb394ca510e3c084e0b6a2eaf0eb354be5e358dfd3423bc3666d57bfd9c1f1db770a2efce5e8951", 0x76}, {&(0x7f00000018c0)="4470f0dd2104c5aa800c37242feb76c62f42b93ae9a06360fb1a7d07d2f565a5e33c50c3e3752348a8b8dd50f3dd5c70e10068004b6c4f37f63a1715d08e607cd64ef119aeb73ab5abf8756d2d993abf2fd401596db0b576ac43702134f5766b21c47825889a46eff2b1446f0e249d3d44abb1cea50da2747dd2c6899913bc3ca4909169e4978b19c3143f67", 0x8c}], 0x10000000000002cb, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r6, r7}}}], 0x20, 0x4000000}}, {{&(0x7f0000001a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001a80)="967d5c4f1e5ee2d7a0b38e9ef0e9f26e564be81604888c7472ddf774cca9c88fc313bd3fcb39e2313cd2c514b3bc54ab99f4db688140", 0x36}, {&(0x7f0000004480)="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", 0x1000}, {&(0x7f0000001ac0)="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", 0xfb}, {&(0x7f0000001bc0)="a94435865443509ba85a585768b503e0a7aa9cf3885617bfbc73408557124035b04fd9d0be288f12d6865a35c5d41dcdf947cf0b803f8726322f315eb61f043527679c0fed7a0e92144e8115758199828c6550592561a4fdd8a6b0daae9436c83d967004daf689fd8fda3c972081e8e71ed40a062c84d4b00c6c88e9343d85", 0x7f}, {&(0x7f0000001c40)="6cdfbc3e2e89a36e2378e74632bf165aaaf9410881f7b68d20fa5b9bc95c750e6a63bf2114a6368d67cf658c26e1a91b80d2e99e7f9a28c0a708f941948025b8336997ba58eef0f9f5acdc204fc65985a62eb2712bec9d425e139c46a0406fca6792841a8059c143c138ea2bc11e2028f3ca6a536b514cf29b6bf4e11374d1f4fa30ac5c38f18e00750c", 0x8a}], 0x5, &(0x7f0000001ec0)=[@cred={{0x1c, 0x1, 0x2, {r8, r6}}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r5, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x30, 0x1, 0x1, [r2, r5, r3, 0xffffffffffffffff, r5, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r6, r13}}}, @cred={{0x1c, 0x1, 0x2, {r8, r6, r7}}}], 0x118, 0x4000004}}, {{&(0x7f0000002000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005640)=[{&(0x7f0000002080)="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", 0xfc}, {&(0x7f0000002180)="6a8e191340014299a2c51f9dfc155b5d5245b733a2a8cea71b7878d59dcde9ff5b1236f6708538f0f12c73b9bb861c55cfa8180e3eb9cf997c353f1c33bfbcdf2c0634999dcb76eafffb04620a0f3067bd908df9b2ba757582231870294d244adf91a92058aa4d8fc8b4d8d6075175fc79985cf7593817064cca47a885cf0fb7d144351e212ab8eb0984ed29060e71f68f4886d84fe78641fadf425610fbf206131d24b649ed29aea7ab0e564fe0fd3d187ad1aa6daadc717432c5429896417c5ce5a252c15aa79efb1073d35e909c2991076120dad3b4e9858968386caeae078faea9636becf76a9ab13f925da046", 0xef}, {&(0x7f0000002280)="0d29fe5f3f442475615b50ff92718d7a92fb0ea87b60e936ee56fe454615a38c7f39dced3968abe1544642b9fe536923ab0014b3a391c2", 0x37}, {&(0x7f00000022c0)="2a7f020b6a846c66e86ed265048c4164d501b8cecccddaeca0c6c9f1bb6a0e1c503b50", 0x23}, {&(0x7f0000002300)="6836fb913fa8c927c2c5d337d62c37f43e48e3468d6d1dd1d129ae93b2ec3af37c0e1e6847c0ed9237fb58e93193482a2ba85ddb45bfd3bc41aaa4b339b920e6dfd7994ea90808717f318172a6e15d954833193be6281ed2bb917969be09a654df861bfa8a505291c42601ad9db261c89d4e88f80d834ef27ee7680c04bccfcf15b17f3523e1986c776843af129fc74dbfc791df2a0b2e53239ea38f3acbedf9b04961a08269a0a8067a2b0a7b4ef5040fcdc2e11068dd79d7475f67a448216d5009430a219d0e9916cca900fe632932f9428842bea21974730573ea97b1f07a1fc97d2050e1c42b03ee8bdb5e3abff76aaf23", 0xf3}, {&(0x7f0000005480)="5879174b7f614d6e4947b2e36ac1c9aa1a707462420f2abbdd9206a8383d2ae26ee8c5beda2f952872ef27e0f1b1eda9e696a66ef698920dfe71eaed93565839ec604bf282743e003b61386a612d75c1f513d97469619265bf557f7da20f39a8040dd48a40b2d96371eb8ffbed8fb1684c3743e4de9db39d9a50753831688a52042a67cb7776a9164abec0f6879fff594e969b04b778c3d60105ee37db37212c6585957e76b4a6a1e74e260eae172124eb71a9349a96954ee811affa368b4f2914afff565b284794c9c7ae7d789e", 0xce}, {&(0x7f0000005580)="a3bb6fdea1e3002ec4bf1263eba81dad816d755c452a8f6a8a53d4163c2c442c82ade0b422f126609ade8bb6748aeb9304bd608fd1fa6971cd21680e627d8c43bad4674b11d3dae9db43c08ce621b3e108c673a88824ce475dcce39672a5d5c3c32f0778d882fe4b1def3b949442af9ed3b9d0eef9a4fd926bd7d25b65bb5dc52ec521f43b430bce154dd9302a1e312c033029b0baaf0a58278b", 0x9a}], 0x7}}, {{&(0x7f00000056c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000005740)="7bfcce391e60f278918aee91175e94a0782978e53b26bfb5a80af14075661dd1cc5fd3158f413fb7f031e3bde1dc87858540299ee4b617f01d95043730813f4a95", 0x41}], 0x1, 0x0, 0x0, 0xcdc836f7602710a7}}, {{&(0x7f0000001d80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005980)=[{&(0x7f0000005840)}, {&(0x7f0000005880)="a85d661536758522a277198a247ce35db3d043753f4786cc418a25eab0256ee5f2dd2952e4b441485b974f21506fefeddf1f10e4402c38de2b93997ee96b0a20f06d809be34a1fca5a051b0233ceef5af5473ae587cbad832f4cf8d56f73a7ec4d00419f54255415bf4a37c9a3f20f8a73796be76c5ce47607dba1c145ac4c3364f5fc1afb0cc43314d6dd79448341a98c5280f9b89af9d539a1a1667238db768d9d5fd0c4b839c427ea9685acd7573f51017f9025232f25e265e08c568a0b9f885f7b04f1eaf8b116d9312ea934f3a9455279e0c84a478e55e6", 0xda}], 0x2, 0x0, 0x0, 0x4000}}, {{&(0x7f00000059c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005cc0)=[{&(0x7f0000005a40)="07efc62b6fcefbfd8c773a8be1c051f6398c1900c9337f14dfcc22a44c77ad0e24661d5c9cd675de7039131d419c40b95fb8be7b517768b331c620a46165cb10cc40043801fcd56533cc4183bbe6053dd6f0ce0a1acb7b61f2db93f0d911b29fe9b71bfd13829da464fdc18be0d5b2f088ba064c487274cb31b1ba6d31b59d36", 0x80}, {&(0x7f0000005ac0)="16b69151994141f7187dc5e435ea0d57f69de1e7cf090b98025116a6b6a4311665295d895077cfaa44c456571c93689641859ebcacb74268140efb5da9beea694366375d0f88eb199efe8559558a6ff0bb24ba", 0x53}, {&(0x7f0000005b40)="b61eb17a502f0832f4374e5f57a65677449e5223e477fe775ba05310f26978bb591618b4655055ae19c4b76d6150c1fe0b081a300ea9dcd8b623386cebcbca37aad72c03734a408851ebada0415df8f91bf2e259f5819e4f9acd3a2e693549f4ff7a53d531ce247740954600d7b79151167d37947efbcf47fcc14383963c155dd9cf6421148541e19e8899ffdca61d1ccbb093f4d2eb5bfc4fcc527398a4401b7d88e507c33365c0cc2f4693cf3fb555569b6b92a09a9014812b38caf7d9ad30916248", 0xc3}, {0xfffffffffffffffe}, {&(0x7f0000005c40)="faf19723d5bf1363a38a816d5b36972325ccfaaf4828e45692d1de13b3b04c63cd4d1e0c3321ebf9af17d888b5e7aba9008abd68bb4c1d59bfb4bc900e0fcccff5565d1809306eba6578645dc78393fd2e0e325a24", 0x55}], 0x5, 0x0, 0x0, 0x4}}], 0x7, 0x88) r14 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r14, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r14, 0x0, 0x4, 0x0, &(0x7f0000003d00)) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x14}}, 0x10) 1m14.741168654s ago: executing program 3 (id=281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x18) r2 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r2, &(0x7f00000017c0)=""/86, 0x56, 0x8000000000002001, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x28, r4, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002d40)=[@text16={0x10, 0x0}], 0x1, 0x54, &(0x7f0000002d80)=[@efer={0x2, 0x800}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x8080000, 0x4000, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m14.41002752s ago: executing program 3 (id=284): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) (async) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x10000, 0x4) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x200, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2}, &(0x7f00000001c0)=0x9c) 1m14.323743006s ago: executing program 32 (id=284): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) (async) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x10000, 0x4) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x200, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2}, &(0x7f00000001c0)=0x9c) 57.335069976s ago: executing program 0 (id=528): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3ff, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000648000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000002240)="0f01cabaf80c66b817de158366efbafc0cb0f2eeba420066b80038000066ef07650f35baf80c66b8ee733f8866efbafc0ced0fc73d2e0f01c40f01c9baf80c66b8b6ae488466efbafc0ced", 0x4b}], 0x1, 0x44, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 57.100382331s ago: executing program 0 (id=534): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f002, 0x6}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r4, &(0x7f000000ae80)={0x2020}, 0x2020) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000400), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x1, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x10, 0x3, 0x0, 0x0, 0x0, 0x1, 0x9}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8885}, 0x20008001) 56.790783235s ago: executing program 0 (id=535): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xa800}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000380)={0x9f, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x8, {0x0, 0x0, 0x8, 0xfa}}]}, 0x18) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000040)=0x2, 0x4) listen(r2, 0x9) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 56.71334989s ago: executing program 0 (id=536): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc40, &(0x7f0000000340)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x49, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) (async) socket$inet6(0xa, 0x0, 0x5) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x50) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0xe5dc, 0x8, 0x3, 0x2f0}, &(0x7f0000000180), &(0x7f0000002c00)) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x3, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0xa8f, @mcast1, 0x4}}}, 0x108) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/159, 0x9f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) (async) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) 56.605725344s ago: executing program 0 (id=538): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x183001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7, 0x0, 0x2], [0x0, 0x4, 0x2, 0x100000], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) 56.298366944s ago: executing program 0 (id=545): mknod$loop(&(0x7f0000001000)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) 56.23583625s ago: executing program 33 (id=545): mknod$loop(&(0x7f0000001000)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) 990.588419ms ago: executing program 4 (id=1820): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x2d}]}}}]}, 0x38}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/34, 0x22}], 0x1) 983.886202ms ago: executing program 4 (id=1823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xb, 0x1}}, './file0\x00'}) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0xa, 0x9, 0x7, 0xa, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d5, 0x2, 0x28, 0xea, 0x3, 0x20000000}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d3}, @sadb_lifetime={0x4, 0x2, 0xda65, 0x9ac, 0x9b6, 0x3}]}, 0x50}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 920.038646ms ago: executing program 1 (id=1825): r0 = syz_usb_connect$cdc_ncm(0x4, 0x8b, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x2, 0x1, 0x6, 0x90, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x98d, 0xfff7, 0x10, 0x3}, {0x6, 0x24, 0x1a, 0x8, 0x9}, [@obex={0x5, 0x24, 0x15, 0x4}, @dmm={0x7, 0x24, 0x14, 0x3, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x8, 0x3, 0x81, 0x460, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xa, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x43, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0xc6, 0x3}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x7, 0x8, 0x7c, 0x10, 0x4}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "c2ab447392addd3cafd884dbee4deff2"}]}, 0x4, [{0x8a, &(0x7f0000000380)=@string={0x8a, 0x3, "6234bf928da4c868c2e46be118297047aa6cb1e46615f4ae05e1e44f3d95fea6f12a823b3a7d0679e754e4137ee8f264bc0d847a59a469979d05a8f02ab3c7df1ab8ffa51123fd80efbf3c1cc715c794334e2781560028fb3e0b4702d15ed53c56e8589fd8f5b69161baa3a0e2b5e96cc66746126f72432e2ffe4274df2aea2e0a6c7bf1ef359a0b"}}, {0x75, &(0x7f0000000440)=@string={0x75, 0x3, "b50f857150acc8c935aee3df22f71d2b900d4ea677b490d9997f89946f059136266aadf52a3eb0985b31178f3469fdec3d28c14de1f69292ef4a5746c395a64f4fe04b755595c2c8f092abd4c00f008e4afa2980d408f079071d53274139f0c87560c5c8737cd7a9ed098f70ad5b640181ec89"}}, {0x8a, &(0x7f0000000600)=@string={0x8a, 0x3, "d153159e369929cf85a6e8701d6660ba1ca5c95c59bb62772f57f5675f4d400f792c2776c2dbb3323c73c2da7ade2a6b9fb838c66582ce36d8ef4e01f6137f3474fd4f1415729d3887c9c2509ec6fa428767fe09f4d73f4ca133b99f2a0eaaa7e1a958e74867136f7362da240b4990f96b4b421a50637d639175ab1c8fae3f90141b3ea1cef35de7"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40b}}]}) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) syz_emit_vhci(&(0x7f0000002640)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_SCAN_PARAM={{0x10}}}}, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff}, 0x38) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @rand_addr=0x64010103}, {0x306, @local}, 0x6f631b4376e74f1c, {0x2, 0x0, @rand_addr=0x440100fc}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x500, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x8b, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x2, 0x1, 0x6, 0x90, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x98d, 0xfff7, 0x10, 0x3}, {0x6, 0x24, 0x1a, 0x8, 0x9}, [@obex={0x5, 0x24, 0x15, 0x4}, @dmm={0x7, 0x24, 0x14, 0x3, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x8, 0x3, 0x81, 0x460, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xa, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x43, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0xc6, 0x3}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x7, 0x8, 0x7c, 0x10, 0x4}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "c2ab447392addd3cafd884dbee4deff2"}]}, 0x4, [{0x8a, &(0x7f0000000380)=@string={0x8a, 0x3, "6234bf928da4c868c2e46be118297047aa6cb1e46615f4ae05e1e44f3d95fea6f12a823b3a7d0679e754e4137ee8f264bc0d847a59a469979d05a8f02ab3c7df1ab8ffa51123fd80efbf3c1cc715c794334e2781560028fb3e0b4702d15ed53c56e8589fd8f5b69161baa3a0e2b5e96cc66746126f72432e2ffe4274df2aea2e0a6c7bf1ef359a0b"}}, {0x75, &(0x7f0000000440)=@string={0x75, 0x3, "b50f857150acc8c935aee3df22f71d2b900d4ea677b490d9997f89946f059136266aadf52a3eb0985b31178f3469fdec3d28c14de1f69292ef4a5746c395a64f4fe04b755595c2c8f092abd4c00f008e4afa2980d408f079071d53274139f0c87560c5c8737cd7a9ed098f70ad5b640181ec89"}}, {0x8a, &(0x7f0000000600)=@string={0x8a, 0x3, "d153159e369929cf85a6e8701d6660ba1ca5c95c59bb62772f57f5675f4d400f792c2776c2dbb3323c73c2da7ade2a6b9fb838c66582ce36d8ef4e01f6137f3474fd4f1415729d3887c9c2509ec6fa428767fe09f4d73f4ca133b99f2a0eaaa7e1a958e74867136f7362da240b4990f96b4b421a50637d639175ab1c8fae3f90141b3ea1cef35de7"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40b}}]}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) (async) syz_emit_vhci(&(0x7f0000002640)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_SCAN_PARAM={{0x10}}}}, 0x7) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff}, 0x38) (async) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @rand_addr=0x64010103}, {0x306, @local}, 0x6f631b4376e74f1c, {0x2, 0x0, @rand_addr=0x440100fc}}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) shutdown(r1, 0x0) (async) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x500, 0x0) (async) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r2, 0x3) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0) (async) 918.935103ms ago: executing program 4 (id=1826): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r3 = fanotify_init(0x0, 0x800) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) fanotify_mark(r3, 0x21, 0x8000038, r5, 0x0) fanotify_mark(r3, 0x22, 0x10, r5, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f0000000340)=0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x11) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd3a, 0x2c, 0x2, 0x76, 0x7, 0x6a, 0x4, 0x8, 0x80000000}}}}]}, 0x58}}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}}}, 0x24}}, 0x0) 810.486526ms ago: executing program 4 (id=1828): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x2002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) clock_nanosleep(0xb, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="cb00"]) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x4, 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1b) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0xeeee8000, 0x8, 0x5c, 0x4e6c, 0x0, [{0x7, 0x5, 0xa, '\x00', 0x2}, {0x5, 0x4, 0xb6, '\x00', 0x9}, {0x10, 0x75, 0xb3, '\x00', 0xd}, {0x3, 0x7, 0x80, '\x00', 0xf8}, {0x6, 0x0, 0xff, '\x00', 0x2}, {0x4, 0x2, 0xc2, '\x00', 0x10}, {0x9, 0x3, 0x0, '\x00', 0x9}, {0x10, 0x31, 0x1, '\x00', 0xb}, {0x1, 0x4, 0x9, '\x00', 0x3}, {0x2, 0xa, 0x40, '\x00', 0x3}, {0x2, 0xf, 0x4, '\x00', 0x3}, {0x4, 0x9, 0xa4, '\x00', 0x3}, {0xa, 0x7, 0x17, '\x00', 0x5}, {0x7, 0x2, 0x9, '\x00', 0x9}, {0x5, 0x8, 0xb2, '\x00', 0x2}, {0x2, 0xff, 0x27, '\x00', 0x7}, {0x71, 0x3, 0x7, '\x00', 0x7}, {0x7d, 0x2, 0x8, '\x00', 0x7}, {0xcb, 0x4, 0x9, '\x00', 0x8}, {0x75, 0x80, 0x8, '\x00', 0x4}, {0x7, 0xff, 0x5, '\x00', 0x1}, {0x0, 0x2, 0x2, '\x00', 0x6}, {0x9f, 0x7, 0x8, '\x00', 0x7}, {0x7, 0x2, 0xc, '\x00', 0x1}]}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="74f1697c9e4f"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r9], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$FBIOPAN_DISPLAY(r11, 0x4606, &(0x7f0000000700)={0x80, 0x2000, 0x2000, 0x478b27d189243d75, 0x6, 0x7, 0x10, 0x1, {0x40, 0x2}, {0x0, 0xc, 0x1}, {0x0, 0x6, 0x1}, {0x8, 0x400}, 0x1, 0x1, 0xcf, 0x1ff, 0x0, 0x4, 0x5, 0x200, 0xa740000, 0x10000, 0x1, 0x6, 0x21, 0x100, 0x3, 0x3}) r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r12, 0x4068aea3, &(0x7f00000001c0)={0xc4, 0x0, 0x1}) faccessat2(r7, &(0x7f0000000080)='./file0/../file0\x00', 0x40, 0x200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 740.443727ms ago: executing program 2 (id=1829): r0 = socket$inet(0x2, 0x3, 0x6) capget(&(0x7f00000001c0), 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_GET_TSC_KHZ_vm(r1, 0xaea3) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x800) sendmsg$alg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000380)="80fd01fff140", 0x6}], 0x1, 0x2, 0x3) ioctl$KVM_CAP_X86_GUEST_MODE(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1=0xe0000308}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) 739.190453ms ago: executing program 4 (id=1830): ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) munmap(&(0x7f0000456000/0x2000)=nil, 0x2000) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000680)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r0, 0x1) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x1010c1, 0x11cc148dc5a2477d, 0x14}, 0x18) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x40, 0x8000, 0x246, 0x5, {{0xb, 0x4, 0x0, 0x2, 0x2c, 0x66, 0x0, 0xff, 0x4, 0x0, @loopback, @rand_addr=0x64010101, {[@generic={0x89, 0x7, "34c24488f0"}, @generic={0x88, 0x11, "8d1cf0444755142ab0695d012f8c5b"}]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000a80)={'sit0\x00', r10, 0x0, 0x0, 0x0, 0x0, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, {[@end, @rr={0x7, 0x17, 0x31, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x43}]}, @timestamp_addr={0x44, 0x34, 0x33, 0x1, 0x7, [{@private=0xa010101, 0x1}, {@remote}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast1, 0x5}, {@rand_addr=0x64010100, 0x9}]}, @timestamp_prespec={0x44, 0x4, 0x86, 0x3, 0xa}, @noop, @generic={0x83, 0xd, "d15b7f688fbb4682c1cc5e"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x700, 0x8, 0x7134d018, 0xf215, {{0xc, 0x4, 0x3, 0x36, 0x30, 0x68, 0x0, 0x5, 0x6, 0x0, @remote, @empty, {[@cipso={0x86, 0x1b, 0x1, [{0x2, 0xf, "42c18463ebbd71c30e896c7fb1"}, {0x2, 0x6, "6d8b3780"}]}]}}}}}) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000300)={@dev, 0x0}, &(0x7f0000000480)=0xff7a) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r6, 0x100, 0x4, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004080) 659.661443ms ago: executing program 2 (id=1831): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080)) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/178, 0xb2}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/29, 0x1d}], 0x5, &(0x7f0000000640)=""/237, 0xed}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000440)=""/13, 0xd}, {&(0x7f0000000740)}, {&(0x7f0000000780)=""/121, 0x79}, {&(0x7f0000000800)=""/211, 0xd3}, {&(0x7f0000000900)=""/58, 0x3a}, {&(0x7f0000000940)=""/85, 0x55}, {&(0x7f00000009c0)=""/81, 0x51}, {&(0x7f0000000a40)=""/76, 0x4c}, {&(0x7f0000000ac0)=""/90, 0x5a}, {&(0x7f0000000b40)=""/69, 0x45}], 0xa, &(0x7f0000000c80)=""/11, 0xb}, 0x800000}], 0x2, 0x40000022, &(0x7f0000000d40)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) close(0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd25, 0xffffffff, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x3, 0x3, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) r9 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x80) openat$cgroup(r10, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$poke(0x5, r11, &(0x7f0000000080), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r10, r4, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=[0x41aa, 0x3, 0x7, 0x4], 0x0, 0xfff, 0x4, 0x0, r11}}, 0x40) 590.042339ms ago: executing program 2 (id=1832): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100000004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5aa}], 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r5, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) r6 = socket(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x80, 0x7, 0x401, 0x6, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa0104fe, @multicast2}}}}) r7 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 589.761851ms ago: executing program 4 (id=1833): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38, 0x65]}}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r1, &(0x7f00000004c0)=""/57, 0x39) r2 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v1={0x2, "2d37eac542f82411d9132e975c8a7b33ea4d"}, 0x13, 0x4) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000804) inotify_rm_watch(r3, r4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000240)={0x2, 'veth1_virt_wifi\x00', 0x1}, 0x18) 470.698641ms ago: executing program 2 (id=1834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x59, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000000000008004"]) (async) r3 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='source\xb5\xe3\x19c\xfcr\xc7\xfb%c\x91\xcc4\x16\xacr\x81\xda\xbc$T\xca\xd9\xf2\x9a\xe1\x97z=!\xdc\xbd%\xb1\xde\xa1\x82K\xad\xbf\xd1\xed\xd1\x81\x13b\xb5\xf0\xb8,ow\n\xb0\x03\xd7\xad\xca\x90\xb1d\xff\xceT\xb6\fq\xd1\xdf\xffB\xcdu\x96\x17~\xfe\xd3\xfd\xa0\x81\xe89\xddu\xb54q\x83\xf4\x7f\x8b\xf5\xb1\x8f\xfd\xbf\x06\x1a\xb540\xa2\x00\x0e\xa4\x11\xb3j@\x91\xdd\xb7\xb5\x7f\xbf\xef\xe0\xcc\x91fR\x7fO\x80v\x9bv\"\xa2\n\xc0\x8b\xa5Z\x8cq \x99\xfa\xd3\x04#K\xe3\xdb\xc6h;\xd0m\x16\xb1\xd2\x9d\x00UB\xe3\xac\xeb}\xaf\xff\xcc\fF', &(0x7f0000000040)='c:::\x00', 0x0) (async, rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (rerun: 32) 330.786212ms ago: executing program 5 (id=1835): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x2) close(0x3) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 328.394921ms ago: executing program 5 (id=1836): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x12}}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000004240), 0x2000, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f0000004280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) pwrite64(r1, &(0x7f0000000140)="ec4cc63cc77bea2ea10b633f95805db8cc77b1fa3469327a1a7d35b4dffdd34af2c38cd4c6910df8dac3dcd2948421a77386476a0d5909f76a54c7e764aa9ee41ed701225dab186f1d758095e36f217ee9", 0x51, 0x7) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'dt2817\x00', [0x3, 0x200, 0xfffffffd, 0x13, 0x2, 0x5, 0x8, 0x3, 0xb, 0xfd, 0x1081, 0x801, 0xbffffffa, 0x7, 0x6, 0x101, 0xf7fffffe, 0x800007f, 0x3, 0x40000003, 0x8c, 0xca9f, 0x0, 0x20001e58, 0xb, 0x5, 0x3, 0x8, 0x4084, 0xfffffffc]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000c00)={0x0, 0xff, "7daa4d", 0xb, 0x3}) 326.916787ms ago: executing program 1 (id=1837): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) r3 = geteuid() mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x4000, &(0x7f0000000b00)={[{@nfs_export_on}, {@index_off}], [{@pcr={'pcr', 0x3d, 0x3e}}, {@fowner_eq={'fowner', 0x3d, r3}}]}) (async) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x40012122) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) close(0x4) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) (async) r6 = accept4$unix(r1, &(0x7f00000004c0), &(0x7f0000000540)=0x6e, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xdb0890038a23e817, 0x0, 0x7, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) timer_create(0x3, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) recvmmsg$unix(r6, &(0x7f0000000440)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000640)=""/247, 0xf7}, {&(0x7f0000000740)=""/170, 0xaa}, {&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000008c0)=""/153, 0x99}, {&(0x7f0000000980)=""/250, 0xfa}], 0x7, &(0x7f0000000b00)}}], 0x1, 0x12060, &(0x7f0000000c00)={r4, r5+60000000}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=ANY=[@ANYBLOB="600100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 326.540413ms ago: executing program 2 (id=1838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000000)="5e63b0e18f808a5d8f2d906ffb1eb7c46432707ac891ea2b3a14d296465c7337b77614165ba510a33fc9573ea64aa3040c325a28e2a2926aab58808756222ee188b635982b495abaf6b3ba1cb0c5f8784716ad0ad4cbf84c2c1163d642cd646ecc03559401f4d5754b1f5227ec012dea2087850239148f59076a03dfd8b1cbae4d152acba71e578419c72652e9616c766897", &(0x7f0000000280)=""/91}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 270.448074ms ago: executing program 5 (id=1839): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) write(r0, &(0x7f00000003c0)="6d76cb31796309629e1b96652fe58cbcf91d8d983b4ae81919c7c3a1fa003befb7a60ef0bc0e944c5a52617e33284cc12c0c7f1f70f6679ea146c41ee3846e934670bef199347060bf238661845ff657c8b33a9647c5a71257f78f0527ce4a1188861e918c82b508839cdc4370dc6811dc781dae870acffe60d5c82ee74c02fce5f44fbd1cb6e2a7e4d7264d9a01e55254f11007ec28932160b07b1fd2ae705b9df4703fa117d134cc36dd6ff7d653829a", 0xb1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) r3 = syz_socket_connect_nvme_tcp() ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000002c0)={r3, r1, 0x0, 0x67, &(0x7f00000000c0)="c989552f8189850b754ce9c70361bfe97dcb5058a5473f1f93a61816c28e0144723c337dd29bee9a088fcaf4c3da949a7a5d2ac8b2728fc368fe108932843afd49ea5a4579d44b87ec219370b4e3c85f6ab026e9be8a11dc0e33585346bff0daa577c82c2e792b", 0x7, 0x0, 0x2, 0x2, 0x401, 0x1, 0x9, 'syz0\x00'}) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='file_check_and_advance_wb_err\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000380)={0x0, 0x8, 0xa}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x10) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) 269.859106ms ago: executing program 1 (id=1840): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x400) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x30, r4, 0x9, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 269.622158ms ago: executing program 5 (id=1841): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x2400c044) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}, [@ldst={0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x27}], {0x95, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0x80de02bd3ca0bfdb}, 0x14}}, 0x800) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 190.577773ms ago: executing program 5 (id=1842): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100000004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5aa}], 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r5, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) r6 = socket(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x80, 0x7, 0x401, 0x6, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa0104fe, @multicast2}}}}) r7 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 190.182134ms ago: executing program 1 (id=1843): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) (async, rerun: 64) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) (async) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async, rerun: 32) r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) sendmmsg$inet6(r3, &(0x7f0000005f80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x33}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x8, @empty, 0x925f}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000029000000390000031b"], 0x18}}], 0x2, 0x40c0) (async, rerun: 64) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000001600)={0x1, 0x0, {0x10d, 0x80000000, 0x5011, 0x1, 0xb, 0x1}}) (rerun: 64) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000001580)=ANY=[@ANYBLOB="f00700000500000079c8e7d6232b045a70a5f24f3b2e2474324805b18b14ed244a7f6b5d38f0a3b49b92bb1aa4edfb285807facd1005000000000000002768960b99e3d8d8ed6614f7e9ec7f"]) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001480)={0xffffffffffffffff, 0xf, 0x4, 0x1}) sendmsg$netlink(r1, &(0x7f0000001540)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)=[{&(0x7f00000002c0)={0x115c, 0x1c, 0x800, 0x70bd29, 0x25dfdbfd, "", [@nested={0x42, 0x24, 0x0, 0x1, [@generic="99823cb982821633e2c094f26c4c5f9cde78862e8fd85b80ad6147f6151d42aa61d6ebc7240e0f219b2f07a24d7f8288187e8011ef47efc39366197c606a"]}, @nested={0xc, 0x7c, 0x0, 0x1, [@typed={0x8, 0xf9, 0x0, 0x0, @u32=0x3}]}, @typed={0x8, 0xbe, 0x0, 0x0, @fd=r2}, @nested={0x103c, 0x109, 0x0, 0x1, [@typed={0x8, 0x71, 0x0, 0x0, @uid=r4}, @nested={0x4, 0xea}, @typed={0x12, 0x75, 0x0, 0x0, @binary="2d1d21ebcaeb1887d5bb4213a311"}, @typed={0xc, 0x41, 0x0, 0x0, @u64=0x7}, @generic="e7e883900bb8f55e112430e3047221cf963921b13ea00ab0fa6b03706ce192e65c72892fe98a2ced8d26beeb2dac99a61991aeb3ceb4b0861b5a453012ad5cff02bc4e0c05844f21044f85640f12cc19b9ac4840832e83d970c40a41bbe1e44afeb4abbb3cf26f675222089f0580c5e71e330936c65cced88e2d58a9921804b10866b04559fc3c98c974e9cd05664a49f6cab657094c07c8340b8bfc3fcbaf16c5bdb750d0076ef0003082386d27849e331071cb81db6e633b41fed09c46ce8b568d53b3b7d83c80513916aac9b93d36b627b4b57da3f2053f75ee3d59d49af004930d6faf6d47f2461675c2d8aaf182887e956017cb2b8bc4e38202f8c662f2700dac504a2a1b31487dfc6d784d31de10502e95f621116488d17f62787d8ff491525996aba3182a17dc0c2df9733d477075c383dc21c9a440c04320f9d10aa03ed3a7bccb786b8f746fb678c1abf43e24b33eb23fc1e8db768b6fa4b21fad1eb42009e116d7f3e2444d4e9840fc7f1ec8f925722d7876776b20ecfefc3e0828b9feac8ecfca05330cb111bf8d7b15424b8aa26ac7dc136f7b8a08db3951c5e7276f51e4e7e1a88876955282115d0d59779ca87f75de168f8c30372585ecaa0cb6b29082bac8cb32f7a15b7b31063b0e743c7412b8fe9f2a01828d7e1c6d8d963bfa094ce5e0e74c441c76e520c336d85d6b83f37a9f9d1480b1a764b973fdd95f3129ec582d55beeb553d923a8ee45765affd134fdf3a4a677709ec3640c4c396e2f9312a45edf5725509b0c11dd86920a4cd4ef4ce2a4abe26092a4fe53e2860f74a7ec6efc5dace59e13ba1db391c7b4c4e141210431d8ba2b09425d155dc27a7444a6a3420faffa76f7417d4ee4357d6d247812188ee4d47bdba79d2e3dc9052280efd5a65039e290c1aab96e422b968b27a437f50208d52e2236de97a17ff9a97a8ef17fe17bf00ef18ed056a7f9470afd5136abb184c80d70e63f5a70b0e2357e571e44568b194cf3da54ad4c83fc0e956df88a1595f504bed9335b844752581ce0ef597689feb5092e467b68361f2521298eda81b58d019b5b0d0dafc9615bc54fae9909e4503ea158c3d1131e9d0fcabc8c7919100e926d9d8081a3be4b962b5eb8c608c847d21d2a573777beb4b9876d51c4b2c6a619262855c0edcfc2d137dbc3cc0716033e8e2d44167c7a7f657624af27b89be515cd90204ceaa2a289c993f2e418c9a881029e156b0652c553c3b6b7c99a8cb7f09e8f1a6c87f96b16d7deb9a4c9fca5a75b72eb71a535153d5042fc6fea6c4e24905ecb53723f661247df2af0ec49044caa3ce62289ecb3e4cd66ad7f275a32fa5a2379a241fa09d51c5ac064d00669a19170be31470043396855de85cb0889e93cc7bae728ec7ec4fb821e4bcae0b700fd969a87804cf189049aa226513f3a7c689e4aa4edef3b2d73af441751eb0aa522a12be2a52983f95313210781cce7d296f01364ac8e37a53b77493f988335c6557e014178f7758cb1bb48bb7620e12fc3e40320ab276f5977e57bc698f49e046b326bb356b4780218e1c5a5041220798a155d21ac7f8d0e2b08f9fb166defbe39668e65b3359273bec797979a903a4744669a61a47482686668058710bfed430cb05c90fe9246300614c16e40bc5d484c59c6cdf7b4a9cd29bf3f4a1cc00a51debe025d2b26f4476378d36cc9a6740d9f075243e4f450f88b70b8ad2f21c12a3bc7626de7cf673e4d3e735f49b48245593eaeebfa4c22d4193dfc3ebfada95b83e635fd02cf67966923772054a00ed947dc3e3c0779e66c07f60a8392414e2c0b48f4e2ae24ea287eaa4b059c19f87b9b620bac93875f024061577782ab19dbacebad6fe8988ccd1334015ed58d87e4af88c99588db5f926da114bf4564d5ea5e1a6f6b66ba5c807306bffd7c1606296f78401b7cb8004d41b77acf896440c1c24df66030497f57caa782031b15005d5bc9f83213fedbcdc2679da05fd2725771ab9e0210692e09c5b83cc84dc6d9137b52713a50c1638e0bc9e0c87443eaeb6590604338771a2ff1c8d6e7e5f1d5c7f1fefafcffcda0cddb565cfc367237769ba4626896ba5824af333a4339d7126fb94633fa6742d63f0d06d34d5bff6bedc844a054111f898327159de69b0dc239aa4f39a82c68e1bf659414637958fcb9162dfeb818cb6ea3d2a57521ddd53b985f84fb46eca80a06834f1f2b0c05cb89fc49a342bce6b0c7582ef722801c94469357d2c64c676d885f218fcc3f9c9e857b3a1049d28a54543d1fc765ee7fe14e8898bf4d5a91d7c02fc71e01e886cb38ca9b5ae53500a1635062cf0c8c7136d7c1e5a292ee67eebacf03e71a9640db55cb5d0b6129998b9d890b1303c140f2363b74cc39397fb295ff317ec5bcdbcb3455e705c7fed8c38c6fd17ee4daa4cd74f0b2b21cb2c5854528ebc3fd55d5b01f2e7064ae3292316f9562fde79c70b98bdd361616dd2912ce9cb4ca5b03272a1f1005d7328cad82ec43ce6513f9b937b8378f12a808caeca332566fbab6956fa0f7bcac64df20b045284900ee19ed568bb07861d3bc79c3ea149b529443aeff776fb1e2d30643d65734f6ae68ef8e4b24c8ab259d9edfbad9f5545db6c02978182cd944d595b3fdc6bbd651d47c4e75d651a96627c3b8f66c4a37a369b73cabec878d8b6d7234ca567a7accaa2bd102569ad637fe6c9402f1d4b7ea41b7965cd3c36f559b3b7b34f1eec062bca82e257aee84f2944c793bf93e9dca5868a73b40409ae032e3960025acaf3efaebc2f52abc95f282800f161533ea9108592b669fb2f722f256321d4ffcbafedf0256230bd916a2889d0e5003c723035dba0ec82b277b48267ffb32e886c97d1811dc3a9571814037f3f02b9eb62496d967d4949d48a7d24b1f22eade6c194e45ac9c5d51afe2a9ac228ffe8bab854537504153f23022d1089e14ae732d5ede9c7b660ea8bd93bc4a25ec72e35e0843fa584b6c036968ff46ad1852d1ef933ae8b4926312676671714e7763636ad039cb2d68f79c0440618ef3225cc901cf69813ef2c4fb6172c478057c3b4da589a5c8bfe76afea03e28e4d52d5b5b10cbea7a6e4becf02b9635a202990384236e9ca24946a3a0b50edec51e90dd690905f3b8d849e5c3e90fe83ad4cb663fecbaa11771a6fbcfb6078b379331627687f2e72d7980033885659a016a34ecec53d3c5951fedabee68d487dc1228abd91eea36d49ebc45039fe3a471a622912229f59f39f3dd00808c87594f10c77c9b602519617e255985500ab49510946813ca2006941b6cab7bd20480dc3e63ef83fe996cd1a809dd31284639be31b0d33b27f7a9d1b3a5851ebe94d638f7a8c8c6b1b32c3da38ff3a3927c01080199cb95385f4df18e14335adf13db40a1fecc9bbc6bbe53b873e4a80466242e08b70c71546463bd203e6a34bd5445cabbebc3704443f28556fb1c23a9d5dbc7c49ff750bf6e72ba93d66419c9707bcb55f06fbf5a853308e0bf1d055a1b26927e04fd1790ac7faae574366d41646d6a6f9f21d0aaa964dcf8740d96a5fe05f7cb9623373e7244aeb3c653c697db00c58c9f36dbacb6907db345689a735b78c4555e11da76e9429f7bda0c859e70269817b6584dc168f07afcf907cd267f09e94e26dcb075f12d728ce4c50c7c72fd0ad73de454cec90f18fa3e788492848d2dea9e77b6a6f1e726e06034f4ac607ca9b9649959f4a50fbbadee4af6a00eccca3913477efb489c8412382d4c4b74c7202aec6827be8694fa9ddb75e33d88bffdc0908a6810f1931ea51c6624cae57ec232a72a39d032f0df132ee717d869ae7bb73edf2188883e4ac0b30e759c991c88e01771e6e3fa57274d06f8db803af1ca42c963ca9f94405061e85b1155cbaa19b4dade0ee70a2daeadba7f97e005dc72d6aaecc76a507214c46372adc4ced2db1526f143f318ecb2eaa0c67f6ccd7d036e80236a3a3968e9b466f61d994220975522b72ae06a922ae9619de59586ab0b637de644f872806211f8b8cdd4a1a69d1aa0ad64a36d1e96f2801d4a721674674fc41a3838945e1ef6962cd1691a60af56867786a0edc685e32573d4e850e222cc5a86c35f83def398be7ec77e094ddd91a5aea79414ba1ab96bcd7d56f009e7c493003257c52ab057395757e7ce54ee61b02479018dd34b28724d9e6b0493a07315d252217a04a474984d95acaea29624700590e4a4b5d1dac45690f1ada11e12abbcba3631ebd54b8051c7ef5b8b93c90f6510365df808d456905f8789e9a2d0c15c32634ab75ddd07ef3cfc35d0986eaa1b210b5cd5c91fd0971c73a086a77b1c87a0b265c380895eba8fffd898d303de4f8def7d3259a8d17c4028cfe4aeac524a57d7501577af1fdedf49f2e11aaa854e90fe6d5f78e61f8f6ecbda9972333dd7ebd6f80bd26d4656b51582dc00f6869fc6fec90211645f20903cd1deb60d6860ee6fe37d425fefbb02450ef8f9d92498582c400edbeca07b953687e28c047e662498c187470f7e7849e053fae115a8f7cefb56de14eecfbde9dc74fc4f8cd966db7ae8a4b3bb5d66f9fed7ae4d151c7fd6f72135a292bf8eeda47978dbb96bff00e97138c80a0800a215c8cdcc0a8ad36b30db2c79b0b1639f409f595c3443677601d96c9d154a7b6b35064c2c49fb0b2c656419ca8cc41fb7a69aa187c74ddb93a939a7a68c1e5623a5902976ceecf36b9b099d1087822a3acae192dbac67a8df223fcda431f3e2c21bc2d9a9797a612152050eb3321eb7bed51665c7b5875cb8e1607213ec58cd542daea5ae992471db04b3aaf67323c5b37292964a8129e0ca0057a2c6886a7cb9d26d7933d8b4834159020e66a3fdc54098f01a5c67cf6980daacb210c4a57e4036ed24fd3cb1d30981b76889d71cb8ea5064bb4aa53fd120535975d4bb1ba126f43d2442c5f46007b9417e87d92f324f5ae0fa7a97abdfcf6ac624ce6111870cf6e2570a8168039315a39be223c77557921fa0826f0abd2b306b8b73b308095b6da58dbb0c58cc6903d514950f62d8d66fd8a6bf321c4d2ca66a189e62ca59cc664920c5f7dcdeb0486f1b726ae2bf47c156be3c127b9739ad86eed890d94a198646855bdb0187df3d1a38a1fac2437a4bf575ba7ad5bcd46c1952ebcb114bb3e4a5bed471d0b86815c73981e4736540f4b44610cb10d52440d83434453db3c59c0b75aa28d0b7d03732a15b97f4aa9589c70c1586131c5aa17e89ad8682cd0f437a0ab4e1b66057ee2a25983044043a1ac05f583b14ada9f18d99c5c02dd1de7d3c65b1c134f6cff9556aea33ebabedf8c2f331bb36d2cffb3683ce779431775e43ead39f2003fc1f69a2017edca6bd84d96e6b78e78cac54acea9b509c0165bb9d00c62b56d9b8820e807a3370e1e5d069f50a8463343751b898cff2765cd7be1e25bbcba1f3345ddc1cab5df1b7fe45df24ea31f6ddc8317127257a7b84c5108f12b8c6e5e6d814ca009f9a04789ab8df92c9af427789a8a9b74dec762d88709811bfa575f2123885d3dfafead8e24e962d76124d6451a1bd7db5a03a971ad11e2b050dce8c703ddde8bbb67f687ea72ee71211c1bfda0004e6e34f7ac6c6685360759ff7447e5fa031bbcc4e31a225a941c03c3e7f41b8604e01e0fd9831d8c07ef88cbcefa26dac741cf995e154611376f6dbb20ef7279c2bf344a0a58e4b7206dbe64e883bd2099d37bc3cd4ca7768a0429308b0dea8d17a66b6ed2cedaaa9d6ab1d5bf10e63bd26b1b8198651ca66d7a5f60", @nested={0x4, 0x115}, @typed={0x8, 0x19, 0x0, 0x0, @pid}]}, @generic="15e0a72aa7dccd4feaee0ace9b6424589f36bcd535aecffd326e4b11181c384111743904db3a7a36fe640368aaf226bbb7b6ecd3ec6b0c54c9d61174743dbf2a2a87c4124469a09b73f3b7f6c2552f0fdbcc0bd3fe8985f8268618f5a4d80a4f829f72cb689950088feb53c8ab21399a0ecf448b6e1a592e512bbee0ddb5b4ccba087b28bfcdd17f22657d48db3a0f4968518e1f22285563e8cf61ee13a1951e1207a91d0c94aad5b7d6fe6bdafd783824639d8f7b3e7f"]}, 0x115c}], 0x1, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r5, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff]}}], 0x60, 0x8d0}, 0x4040) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000000)={@private=0xa010101, 0x1, 0x0, 0x50, 0x0, [{@broadcast}, {@multicast1}, {@broadcast}, {@multicast2}, {@remote}]}}) (rerun: 64) r7 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @local}, {0x1, @remote}, 0x16, {0x2, 0x4e24, @rand_addr=0x64010101}, 'bridge0\x00'}) (async) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x67, 0xcc7, 0x9, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x1, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xb, 0x8, 0x3c, 0x8, 0xff, 0x10000, 0xfffffff8, 0x4]}) 120.582306ms ago: executing program 1 (id=1844): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x8400, 0x4) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_io_uring_setup(0x3670, &(0x7f0000000000)={0x0, 0x83ff, 0x4000, 0x2, 0xcd}, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000014c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r0, 0x0, &(0x7f0000001480)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @mcast2, 0x80000000, 0x4}, 0x80, &(0x7f0000001240)=[{&(0x7f00000001c0)="c14d622a2e1ab4fa2530a8a43cbe5d02f3746e0fc41ed5ecc46c40cc643ab945a802ce9e205fef860581ffe217b9833859e23c01e975070b9ffff8996e2d6ef4edfada44c184e1e63f575c8375853be52d9606045f1555e8f7558a6dc43ccfe312fc26ccce93847cf9f5a25c65e82f54b045880b", 0x74}, {&(0x7f0000000240)="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", 0x1000}], 0x2, &(0x7f0000001280)=[{0xe0, 0x113, 0x10, "69483313e1222b9da2c9b4c5e55d245f4ad0a3cfe54370a2a23f83877824cb9d9247d06804eb916f6c482525f4cdc19b6e3c798437a39079b7b6c7f00615d4e39c6874b5cfe539689738fc3f7bae1ce4c51261bd1cfa2e930213272d634e83104c6101ea95cba058c9d3f3ba5e688a606e2b14adc2676b8d92a3296ad9c735edba3bf6f2519611633aad0a9575612f900c78f914ec556cd4ca1c1bb6c9ede21bb241028fad4ccd092d9f1a3f0a70b793b139826078926c80091bf959499496ef1fc8e73d75cc9434ac8293d4df5fd3df"}, {0xb0, 0x10e, 0x5, "5fab2fd53410a051fd160ce30256fd07205f34280fdc19502a03b16857161a427012f4645e8f1c91c9a36705172b1a87974752053c77643b7164dccf0162fad3da04c72b2ca2eee9f96f4be692e13f99f3bdee53013a6705d10578356a993e90a1e79f4ee4758f5fac4c16f387ecdc9e3e3a3a69695a2bc2159c76091161a1c496112987e56e3db9dad8d891939369d455725a62ab8ed1b0a7770f4e"}, {0x70, 0x3a, 0x315, "0a2cfda32b00ea26425bc48c72905a2302a68fba9cd55f044fdff84c19f6e9b75b7cadea749f008cf013940bff1f147b9f019f0e5e49b348a5df3e9cf6e9c46e4bce8064a4ba757688ce1b1169cb6a1a0da18f1702db383876181a585f6054"}], 0x200}, 0x0, 0x8060000, 0x1, {0x0, r4}}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) 120.338583ms ago: executing program 1 (id=1845): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x2f, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@arp={0x806, @generic={0x339, 0x6558, 0x6, 0x9, 0x7, @local, "4a7e1ce34d8648c5bc", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, "5254f405"}}}}, 0x0) (async) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x12020, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 64) syz_clone(0x45008600, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) 392.139µs ago: executing program 2 (id=1846): socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="620427003c0200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a622a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0bea0", 0xbf}, {&(0x7f0000000840)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a8049d2a44ce42557b2e72e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c5301001ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f5d6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e54908000000a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90", 0xf6}], 0x3}, 0x8001) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) (async) ioctl$VIDIOC_G_DV_TIMINGS(r5, 0xc0845658, &(0x7f0000000300)={0x0, @bt={0x3, 0x2, 0x1, 0x3, 0xef81, 0xffffffff, 0x5, 0x2f89, 0x6, 0x0, 0x8, 0x8, 0xbe6, 0x6, 0x2, 0x20, {0x7, 0x1000}, 0x1, 0x6}}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = msgget$private(0x0, 0x285) msgsnd(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgrcv(r7, 0x0, 0x0, 0x3, 0x3800) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x7, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xa, 0x6, 0x6, 0x5, 0x8, 0x4, 0xf, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=1847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x10010, r0, 0x4954c000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x8000000000000, 0x1, 0x0, 0x2, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x1, 0x5], 0x8000000, 0x49340}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_route_sched(r4, 0xfffffffffffffffd, 0x20004800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000001c0)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r9) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) syz_open_procfs$pagemap(r5, &(0x7f0000000080)) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000000c0)=0x8, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): : entered promiscuous mode [ 94.283803][ T7833] nbd0: detected capacity change from 0 to 127 [ 94.294518][ T5969] block nbd0: Receive control failed (result -104) [ 94.338268][ T7846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.523'. [ 94.341069][ T7846] netem: change failed [ 94.636519][ T7872] binder: 7871:7872 ioctl c0306201 200000000640 returned -22 [ 94.683376][ T29] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 94.793442][ T1341] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 94.843500][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 94.849051][ T29] usb 7-1: config 1 interface 0 altsetting 241 endpoint 0x81 has an invalid bInterval 206, changing to 11 [ 94.855685][ T29] usb 7-1: config 1 interface 0 altsetting 241 endpoint 0x2 has invalid maxpacket 2039, setting to 1024 [ 94.861642][ T29] usb 7-1: config 1 interface 0 altsetting 241 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 94.868724][ T29] usb 7-1: config 1 interface 0 has no altsetting 0 [ 94.877357][ T29] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40 [ 94.882781][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.887585][ T29] usb 7-1: Product: ┧䷮ïŠï²¢ã›¿ä„¡íŸé—¾ë²ƒìŠ…ì‹Âµæ°¶î³¿ìŸ¶î…쉲ìﰡ탥㑣åšã’§é„¦ê½ˆç˜žå«¿ç•î‚”ᨪꎠå¤ã¸£ï®ï˜—굇雘㫦æˆà´‚凳閗↷瘝잇઎狲쓡줖ퟅⷌ◗å«â› ç«›â·ºí¶ã“㌒朎쳎텛멲蛺ﳗ툕倩⡗뭬‭ꮇ꘴䫭㜲쌉ä‚蛭砯銴⼰âƒå˜åš¨á•™æ‡ˆèˆï¾°ë憩뚰탖᜞㵒빰䘨âºêµ¦ç½„墒ã¸ì°­ëƒæ•ˆíˆ‰ [ 94.908480][ T29] usb 7-1: Manufacturer: 셌ç¦ë³¾è½’榥氪ꉮ౯Ṅﲌ銑굣뻢婢ì“⑟㺅呮堓äºã‡€ç‡°åŠµêž¡ç¥ªãššä®ï€œì±³é ¢ä»’ᨰ틼à¦í‡¥â§­í„뼺䲎䅧騮壟㋵ã£è½ä±Ÿêšä­¡ [ 94.919302][ T29] usb 7-1: SerialNumber: Б [ 94.926464][ T7863] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.933775][ T1341] usb 9-1: device descriptor read/64, error -71 [ 95.195312][ T1341] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 95.334308][ T1341] usb 9-1: device descriptor read/64, error -71 [ 95.340280][ T7863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.344570][ T7863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.444520][ T1341] usb usb9-port1: attempt power cycle [ 95.450248][ T7908] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.544'. [ 95.454733][ T7908] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 95.460194][ T29] usbhid 7-1:1.0: can't add hid device: -71 [ 95.462253][ T29] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 95.468816][ T29] usb 7-1: USB disconnect, device number 6 [ 95.659088][ T5978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.663149][ T5978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.665980][ T5978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.670422][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.674777][ T5978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.779714][ T7914] chnl_net:caif_netlink_parms(): no params data found [ 95.803379][ T1341] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 95.823999][ T1341] usb 9-1: device descriptor read/8, error -71 [ 95.847640][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.850330][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.852642][ T7914] bridge_slave_0: entered allmulticast mode [ 95.855533][ T7914] bridge_slave_0: entered promiscuous mode [ 95.858760][ T7914] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.861003][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.865426][ T7914] bridge_slave_1: entered allmulticast mode [ 95.868146][ T7914] bridge_slave_1: entered promiscuous mode [ 95.900273][ T7914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.905165][ T7914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.939925][ T7914] team0: Port device team_slave_0 added [ 95.944835][ T7914] team0: Port device team_slave_1 added [ 95.976583][ T7923] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 95.993469][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.995859][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.004359][ T7914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.009212][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.011784][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.021088][ T7914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.063394][ T1341] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 96.063454][ T7914] hsr_slave_0: entered promiscuous mode [ 96.068059][ T7914] hsr_slave_1: entered promiscuous mode [ 96.070302][ T7914] debugfs: 'hsr0' already exists in 'hsr' [ 96.072311][ T7914] Cannot create hsr debugfs directory [ 96.075413][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 96.075422][ T40] audit: type=1400 audit(1757614692.468:28231): avc: denied { listen } for pid=7924 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 96.085237][ T1341] usb 9-1: device descriptor read/8, error -71 [ 96.195270][ T1341] usb usb9-port1: unable to enumerate USB device [ 96.222801][ T7914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.230156][ T7914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.234311][ T7914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.238470][ T7914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.253507][ T7914] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.255832][ T7914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.258491][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.260756][ T7914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.267072][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.271797][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.297058][ T40] audit: type=1400 audit(1757614692.688:28232): avc: denied { connect } for pid=7937 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.316538][ T7914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.329503][ T7914] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.337499][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.340570][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.346018][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.349114][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.459408][ T7914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.467174][ T40] audit: type=1400 audit(1757614692.858:28233): avc: denied { getattr } for pid=7950 comm="syz.2.558" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=21784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 96.507753][ T7969] CIFS mount error: No usable UNC path provided in device string! [ 96.507753][ T7969] [ 96.510958][ T7969] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 96.543400][ T40] audit: type=1400 audit(1757614692.928:28234): avc: denied { create } for pid=7974 comm="syz.1.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 96.553104][ T40] audit: type=1400 audit(1757614692.928:28235): avc: denied { write } for pid=7974 comm="syz.1.563" path="socket:[20884]" dev="sockfs" ino=20884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 96.629524][ T7914] veth0_vlan: entered promiscuous mode [ 96.637115][ T7914] veth1_vlan: entered promiscuous mode [ 96.652164][ T7914] veth0_macvtap: entered promiscuous mode [ 96.661501][ T7914] veth1_macvtap: entered promiscuous mode [ 96.677365][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.685531][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.699931][ T1188] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.702923][ T1188] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.715262][ T1188] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.718604][ T1188] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.745249][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.748048][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.761469][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.765249][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.910822][ T40] audit: type=1400 audit(1757614693.298:28236): avc: denied { append } for pid=8014 comm="syz.2.575" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 96.921713][ T40] audit: type=1400 audit(1757614693.298:28237): avc: denied { read } for pid=8014 comm="syz.2.575" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.931922][ T40] audit: type=1400 audit(1757614693.298:28238): avc: denied { open } for pid=8014 comm="syz.2.575" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.941687][ T40] audit: type=1400 audit(1757614693.318:28239): avc: denied { ioctl } for pid=8014 comm="syz.2.575" path="socket:[23579]" dev="sockfs" ino=23579 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.189491][ T8054] process 'syz.5.584' launched './file1' with NULL argv: empty string added [ 97.194698][ T40] audit: type=1400 audit(1757614693.588:28240): avc: denied { execute_no_trans } for pid=8053 comm="syz.5.584" path="/5/file1" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.196903][ T8054] nfs: Bad value for 'source' [ 97.208675][ T8054] program syz.5.584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.330230][ T8064] io-wq is not configured for unbound workers [ 97.492614][ T8076] smc: net device bond0 applied user defined pnetid SYZ2 [ 97.498866][ T8076] netlink: 14 bytes leftover after parsing attributes in process `syz.5.592'. [ 97.569101][ T8076] smc: removing net device bond0 with user defined pnetid SYZ2 [ 97.575757][ T8076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.584525][ T8076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.591635][ T8076] bond0 (unregistering): Released all slaves [ 97.601063][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 97.614579][ T8084] macvlan2: entered allmulticast mode [ 97.616432][ T8084] veth1_vlan: entered allmulticast mode [ 97.744958][ T5978] Bluetooth: hci2: command tx timeout [ 97.983411][ T1341] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 98.143563][ T1341] usb 9-1: Using ep0 maxpacket: 16 [ 98.146959][ T1341] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 98.150521][ T1341] usb 9-1: config 0 has no interface number 0 [ 98.155962][ T1341] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 98.159798][ T1341] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.162877][ T1341] usb 9-1: Product: syz [ 98.164842][ T1341] usb 9-1: Manufacturer: syz [ 98.166801][ T1341] usb 9-1: SerialNumber: syz [ 98.170541][ T1341] usb 9-1: config 0 descriptor?? [ 98.174046][ T1341] hub 9-1:0.132: bad descriptor, ignoring hub [ 98.176008][ T1341] hub 9-1:0.132: probe with driver hub failed with error -5 [ 98.181164][ T1341] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.132/input/input7 [ 98.225528][ T5969] Bluetooth: hci3: command 0x0419 tx timeout [ 98.358079][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 98.361758][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 98.375943][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 98.376601][ T1145] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.379678][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 98.385690][ T1145] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.389393][ T1145] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.395312][ T1145] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.448574][ T8099] 9pnet_fd: Insufficient options for proto=fd [ 98.619874][ T8111] kvm: MWAIT instruction emulated as NOP! [ 98.805056][ T8125] netlink: 72 bytes leftover after parsing attributes in process `syz.1.607'. [ 98.812573][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.608'. [ 98.851006][ T8131] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 98.907954][ T8136] netlink: 348 bytes leftover after parsing attributes in process `syz.1.612'. [ 98.907954][ T8135] netlink: 348 bytes leftover after parsing attributes in process `syz.1.612'. [ 99.516499][ T8169] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 99.564620][ T8195] netlink: 165 bytes leftover after parsing attributes in process `syz.4.627'. [ 99.568722][ T8194] netlink: 165 bytes leftover after parsing attributes in process `syz.4.627'. [ 99.758068][ T8217] batadv_slave_1: entered promiscuous mode [ 99.813583][ T5969] Bluetooth: hci2: command tx timeout [ 99.825178][ T8223] netlink: 'syz.4.637': attribute type 1 has an invalid length. [ 99.831125][ T8215] batadv_slave_1: left promiscuous mode [ 99.863362][ T8229] binder: 8228:8229 unknown command 0 [ 99.865748][ T8229] binder: 8228:8229 ioctl c0306201 200000000080 returned -22 [ 100.040116][ T8266] netlink: 'syz.4.650': attribute type 178 has an invalid length. [ 100.263524][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 100.304617][ T5969] Bluetooth: hci3: command 0x0419 tx timeout [ 100.421666][ T8197] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 100.436897][ T9] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 100.440711][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.444406][ T9] usb 10-1: Product: syz [ 100.446322][ T9] usb 10-1: Manufacturer: syz [ 100.448213][ T9] usb 10-1: SerialNumber: syz [ 100.461029][ T9] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 100.495057][ T838] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 100.564702][ T8319] veth0: entered promiscuous mode [ 100.568859][ T8318] veth0: left promiscuous mode [ 100.613015][ T8326] capability: warning: `syz.1.676' uses 32-bit capabilities (legacy support in use) [ 100.705318][ T9] usb 10-1: USB disconnect, device number 2 [ 100.734859][ T8335] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 89f1, magic 89 != 6b] [ 100.740933][ T8335] netlink: 'syz.2.679': attribute type 1 has an invalid length. [ 100.852458][ T8344] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.864232][ T8356] binder: 8355:8356 ioctl c0306201 200000000540 returned -22 [ 100.935454][ T8344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.944140][ T8344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.036168][ T8344] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 101.044061][ T1146] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.047471][ T1146] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.050277][ T1146] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.053037][ T1146] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.057789][ T1146] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.061507][ T1146] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.065397][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.068707][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.117735][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 101.117752][ T40] audit: type=1400 audit(1757614697.508:28270): avc: denied { setopt } for pid=8367 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.129136][ T40] audit: type=1400 audit(1757614697.508:28271): avc: denied { getopt } for pid=8367 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.140414][ T40] audit: type=1400 audit(1757614697.528:28272): avc: denied { setopt } for pid=8374 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.163667][ T8379] qnx4: no qnx4 filesystem (no root dir). [ 101.174457][ T8384] netlink: 'syz.1.693': attribute type 30 has an invalid length. [ 101.220626][ T8389] bridge0: entered promiscuous mode [ 101.222506][ T8389] macsec1: entered promiscuous mode [ 101.226224][ T8389] bridge0: port 3(macsec1) entered blocking state [ 101.228356][ T8389] bridge0: port 3(macsec1) entered disabled state [ 101.230456][ T8389] macsec1: entered allmulticast mode [ 101.232113][ T8389] bridge0: entered allmulticast mode [ 101.236925][ T8389] macsec1: left allmulticast mode [ 101.239073][ T8389] bridge0: left allmulticast mode [ 101.242529][ T8389] bridge0: left promiscuous mode [ 101.285692][ T8395] CUSE: unknown device info "" [ 101.287341][ T8395] CUSE: zero length info key specified [ 101.369444][ T8398] can: request_module (can-proto-0) failed. [ 101.374474][ T40] audit: type=1400 audit(1757614697.768:28273): avc: denied { write } for pid=8396 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.441299][ T40] audit: type=1400 audit(1757614697.828:28274): avc: denied { execmem } for pid=8402 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 101.577713][ T8414] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 101.584234][ T838] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 101.587430][ T838] ath9k_htc: Failed to initialize the device [ 101.592191][ T9] usb 10-1: ath9k_htc: USB layer deinitialized [ 101.893616][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 101.893631][ T5969] Bluetooth: hci2: command tx timeout [ 101.927134][ T1028] usb 9-1: USB disconnect, device number 8 [ 102.073463][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 102.077043][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.080554][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.083864][ T10] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 102.086802][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.093944][ T10] usb 7-1: config 0 descriptor?? [ 102.302343][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 102.304400][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 102.308044][ T10] usb 7-1: USB disconnect, device number 7 [ 102.452043][ T8434] vivid-000: ================= START STATUS ================= [ 102.455472][ T8434] vivid-000: Test Pattern: 75% Colorbar [ 102.457457][ T8434] vivid-000: Fill Percentage of Frame: 100 [ 102.459382][ T8434] vivid-000: Horizontal Movement: Move Right Fast [ 102.461477][ T8434] vivid-000: Vertical Movement: No Movement [ 102.463461][ T8434] vivid-000: OSD Text Mode: All [ 102.465078][ T8434] vivid-000: Show Border: false [ 102.466695][ T8434] vivid-000: Show Square: false [ 102.468256][ T8434] vivid-000: Sensor Flipped Horizontally: false [ 102.470292][ T8434] vivid-000: Sensor Flipped Vertically: false [ 102.472256][ T8434] vivid-000: Insert SAV Code in Image: false [ 102.476833][ T8434] vivid-000: Insert EAV Code in Image: false [ 102.478776][ T8434] vivid-000: Insert Video Guard Band: false [ 102.480701][ T8434] vivid-000: Reduced Framerate: false [ 102.482462][ T8434] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 102.487342][ T8434] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 102.489919][ T8434] vivid-000: Enable Capture Cropping: true [ 102.491832][ T8434] vivid-000: Enable Capture Composing: true [ 102.494180][ T8434] vivid-000: Enable Capture Scaler: true [ 102.496028][ T8434] vivid-000: Timestamp Source: End of Frame [ 102.497963][ T8434] vivid-000: Colorspace: Rec. 709 [ 102.499566][ T8434] vivid-000: Transfer Function: Default [ 102.501585][ T8434] vivid-000: Y'CbCr Encoding: Default [ 102.504344][ T8434] vivid-000: HSV Encoding: Hue 0-179 [ 102.506551][ T8434] vivid-000: Quantization: Default [ 102.508173][ T8434] vivid-000: Apply Alpha To Red Only: false [ 102.510115][ T8434] vivid-000: Standard Aspect Ratio: 4x3 [ 102.512555][ T8434] vivid-000: DV Timings Signal Mode: Current DV Timings [ 102.516518][ T8434] vivid-000: DV Timings: 640x480p59 inactive [ 102.518411][ T8434] vivid-000: DV Timings Aspect Ratio: 4x3 [ 102.520262][ T8434] vivid-000: Maximum EDID Blocks: 2 [ 102.521911][ T8434] vivid-000: Limited RGB Range (16-235): true [ 102.523980][ T8434] vivid-000: Rx RGB Quantization Range: Automatic [ 102.526702][ T8434] vivid-000: Power Present: 0x00000001 [ 102.528986][ T8434] tpg source WxH: 1280x720 (Y'CbCr) [ 102.531172][ T8434] tpg field: 1 [ 102.532684][ T8434] tpg crop: (0,0)/1280x720 [ 102.535212][ T8434] tpg compose: (0,0)/1280x720 [ 102.538919][ T8434] tpg colorspace: 3 [ 102.540203][ T8434] tpg transfer function: 0/2 [ 102.541666][ T8434] tpg Y'CbCr encoding: 0/1 [ 102.543065][ T8434] tpg quantization: 0/2 [ 102.544458][ T8434] tpg RGB range: 0/1 [ 102.545696][ T8434] vivid-000: ================== END STATUS ================== [ 102.803468][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 102.963356][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 102.966343][ T10] usb 9-1: config 0 has no interfaces? [ 102.969530][ T10] usb 9-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 102.973119][ T10] usb 9-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 102.976914][ T10] usb 9-1: Product: syz [ 102.978750][ T10] usb 9-1: Manufacturer: syz [ 102.982909][ T10] usb 9-1: config 0 descriptor?? [ 103.288151][ T8456] IPv6: addrconf: prefix option has invalid lifetime [ 103.387846][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.391526][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.396448][ T6019] usb 9-1: USB disconnect, device number 9 [ 103.436825][ T8472] netlink: 'syz.1.719': attribute type 4 has an invalid length. [ 103.564515][ T8488] overlay: ./file0 is not a directory [ 103.569527][ T8488] __nla_validate_parse: 4 callbacks suppressed [ 103.569535][ T8488] netlink: 56 bytes leftover after parsing attributes in process `syz.5.720'. [ 103.830654][ T8507] FAULT_INJECTION: forcing a failure. [ 103.830654][ T8507] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.836120][ T8507] CPU: 3 UID: 0 PID: 8507 Comm: syz.2.729 Not tainted syzkaller #0 PREEMPT(full) [ 103.836135][ T8507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.836141][ T8507] Call Trace: [ 103.836145][ T8507] [ 103.836149][ T8507] dump_stack_lvl+0x16c/0x1f0 [ 103.836203][ T8507] should_fail_ex+0x512/0x640 [ 103.836240][ T8507] _copy_to_user+0x32/0xd0 [ 103.836257][ T8507] simple_read_from_buffer+0xcb/0x170 [ 103.836269][ T8507] proc_fail_nth_read+0x197/0x240 [ 103.836283][ T8507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.836308][ T8507] ? rw_verify_area+0xcf/0x6c0 [ 103.836324][ T8507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.836336][ T8507] vfs_read+0x1e4/0xcf0 [ 103.836349][ T8507] ? __pfx___mutex_lock+0x10/0x10 [ 103.836363][ T8507] ? __pfx_vfs_read+0x10/0x10 [ 103.836377][ T8507] ? __fget_files+0x20e/0x3c0 [ 103.836392][ T8507] ksys_read+0x12a/0x250 [ 103.836403][ T8507] ? __pfx_ksys_read+0x10/0x10 [ 103.836417][ T8507] do_syscall_64+0xcd/0x4e0 [ 103.836432][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.836443][ T8507] RIP: 0033:0x7f72bdd8d5bc [ 103.836452][ T8507] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 103.836462][ T8507] RSP: 002b:00007f72bebd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.836472][ T8507] RAX: ffffffffffffffda RBX: 00007f72bdfd5fa0 RCX: 00007f72bdd8d5bc [ 103.836479][ T8507] RDX: 000000000000000f RSI: 00007f72bebd70a0 RDI: 0000000000000004 [ 103.836485][ T8507] RBP: 00007f72bebd7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.836491][ T8507] R10: e8ce25b3ffff0000 R11: 0000000000000246 R12: 0000000000000001 [ 103.836497][ T8507] R13: 00007f72bdfd6038 R14: 00007f72bdfd5fa0 R15: 00007ffd0c844b58 [ 103.836510][ T8507] [ 103.973496][ T5969] Bluetooth: hci2: command tx timeout [ 104.122768][ T8522] netlink: 40 bytes leftover after parsing attributes in process `syz.4.733'. [ 104.128221][ T8522] netlink: 'syz.4.733': attribute type 13 has an invalid length. [ 104.233432][ T8535] syz.1.738 (8535) used greatest stack depth: 19736 bytes left [ 104.327294][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.740'. [ 104.331312][ T40] audit: type=1400 audit(1757614700.718:28275): avc: denied { ioctl } for pid=8541 comm="syz.5.740" path="socket:[24599]" dev="sockfs" ino=24599 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.332062][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.740'. [ 104.559814][ T8547] kvm: user requested TSC rate below hardware speed [ 105.588271][ T40] audit: type=1400 audit(1757614701.978:28276): avc: denied { name_bind } for pid=8585 comm="syz.4.754" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 105.709291][ T40] audit: type=1400 audit(1757614702.098:28277): avc: denied { read write } for pid=8598 comm="syz.4.759" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.717449][ T40] audit: type=1400 audit(1757614702.108:28278): avc: denied { open } for pid=8598 comm="syz.4.759" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.794664][ T8617] FAT-fs (nullb0): bogus number of reserved sectors [ 105.796869][ T8617] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 105.803452][ T8618] vlan2: entered promiscuous mode [ 105.805616][ T8618] bridge0: entered promiscuous mode [ 105.851353][ T8625] usb usb9: usbfs: process 8625 (syz.5.767) did not claim interface 0 before use [ 105.877115][ T8623] kvm: emulating exchange as write [ 105.919553][ T40] audit: type=1400 audit(1757614702.308:28279): avc: denied { create } for pid=8632 comm="syz.5.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 105.932271][ T8637] tmpfs: Unknown parameter 'RáFZH‚ÂwLË‚pDׄ' [ 106.080335][ T8656] vlan2: entered promiscuous mode [ 106.083228][ T8656] bridge0: entered promiscuous mode [ 106.172580][ T8667] netlink: 24 bytes leftover after parsing attributes in process `syz.5.778'. [ 106.178701][ T8669] overlayfs: missing 'workdir' [ 106.180953][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 106.180962][ T40] audit: type=1400 audit(1757614702.568:28281): avc: denied { bind } for pid=8668 comm="syz.1.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.189173][ T40] audit: type=1326 audit(1757614702.568:28282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.1.779" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f379db8eba9 code=0x0 [ 106.338039][ T8687] block device autoloading is deprecated and will be removed. [ 106.415861][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.784'. [ 106.485466][ T40] audit: type=1400 audit(1757614702.878:28283): avc: denied { map } for pid=8697 comm="syz.5.789" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 106.546425][ T40] audit: type=1400 audit(1757614702.938:28284): avc: denied { append } for pid=8703 comm="syz.5.791" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.553474][ T40] audit: type=1400 audit(1757614702.938:28285): avc: denied { open } for pid=8703 comm="syz.5.791" path="/43/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.703395][ T6053] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 106.707665][ T40] audit: type=1400 audit(1757614703.098:28286): avc: denied { setopt } for pid=8709 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 106.716980][ T40] audit: type=1400 audit(1757614703.108:28287): avc: denied { ioctl } for pid=8709 comm="syz.2.794" path="socket:[24885]" dev="sockfs" ino=24885 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 106.806622][ T40] audit: type=1400 audit(1757614703.198:28288): avc: denied { write } for pid=8718 comm="syz.5.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.856837][ T6053] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 106.861444][ T40] audit: type=1400 audit(1757614703.248:28289): avc: denied { read } for pid=5364 comm="acpid" name="event4" dev="devtmpfs" ino=2927 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 106.861727][ T6053] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 106.861834][ T8726] fuse: Bad value for 'user_id' [ 106.861844][ T8726] fuse: Bad value for 'user_id' [ 106.870668][ T40] audit: type=1400 audit(1757614703.248:28290): avc: denied { open } for pid=5364 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2927 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 106.873783][ T6053] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 106.876183][ T6053] usb 9-1: string descriptor 0 read error: -22 [ 106.889724][ T6053] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.892547][ T6053] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.897592][ T8731] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 106.898882][ T8696] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 107.042620][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 107.061896][ T8737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.065576][ T8737] IPv6: NLM_F_CREATE should be set when creating new route [ 107.071341][ T8737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.075211][ T8737] IPv6: NLM_F_CREATE should be set when creating new route [ 107.084486][ T8737] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.804'. [ 107.165756][ T8747] 9pnet_fd: Insufficient options for proto=fd [ 107.179887][ T8747] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.788'. [ 107.184892][ T8747] netlink: zone id is out of range [ 107.187479][ T8747] netlink: zone id is out of range [ 107.188460][ T8754] IPVS: length: 249 != 8 [ 107.190099][ T8747] netlink: zone id is out of range [ 107.194490][ T8747] netlink: get zone limit has 8 unknown bytes [ 107.223933][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.809'. [ 107.653912][ T5969] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 108.054982][ T8784] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 108.287797][ T8796] 9pnet: Could not find request transport: vi [ 108.288278][ T8791] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 108.377958][ T8807] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 108.562677][ T8815] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 108.565347][ T8815] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.568576][ T8815] vhci_hcd vhci_hcd.0: Device attached [ 108.637413][ T8816] vhci_hcd: connection closed [ 108.638466][ T13] vhci_hcd: stop threads [ 108.642143][ T13] vhci_hcd: release socket [ 108.644824][ T13] vhci_hcd: disconnect device [ 108.785860][ T8838] netlink: 'syz.2.836': attribute type 1 has an invalid length. [ 108.808281][ T8838] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 108.814394][ T7725] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 108.814645][ T8838] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.923457][ T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 108.984042][ T8853] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.143599][ T6048] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 109.294975][ T6048] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 109.298197][ T6048] usb 10-1: config 0 interface 0 has no altsetting 0 [ 109.301959][ T6048] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 109.305120][ T6048] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 109.307728][ T6048] usb 10-1: Product: syz [ 109.309105][ T6048] usb 10-1: Manufacturer: syz [ 109.310636][ T6048] usb 10-1: SerialNumber: syz [ 109.313503][ T6048] usb 10-1: config 0 descriptor?? [ 109.319021][ T6048] usb 10-1: selecting invalid altsetting 0 [ 109.491939][ T6053] cdc_ncm 9-1:1.0: bind() failure [ 109.496512][ T6053] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 109.498625][ T6053] cdc_ncm 9-1:1.1: bind() failure [ 109.502379][ T6053] usb 9-1: USB disconnect, device number 10 [ 109.568898][ T8878] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 109.572283][ T8878] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 109.578629][ T8878] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 109.581089][ T8878] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 109.748974][ T8890] nfs4: Bad value for 'source' [ 110.345150][ T8872] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.349093][ T8872] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.351886][ T8872] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.358987][ T8872] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.363418][ T8872] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.366446][ T8872] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.370773][ T8872] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.375700][ T8872] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.378909][ T8872] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.383766][ T8872] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.847475][ T8922] __nla_validate_parse: 3 callbacks suppressed [ 110.847485][ T8922] netlink: 14 bytes leftover after parsing attributes in process `syz.1.862'. [ 110.923053][ T8922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.931446][ T8922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.937108][ T8922] bond0 (unregistering): Released all slaves [ 111.027746][ T8926] netlink: 32 bytes leftover after parsing attributes in process `syz.1.863'. [ 111.813976][ T53] usb 10-1: USB disconnect, device number 3 [ 111.870920][ T8957] netlink: 'syz.5.871': attribute type 12 has an invalid length. [ 111.920840][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 111.920877][ T40] audit: type=1400 audit(1757614708.308:28304): avc: denied { write } for pid=8961 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 111.935538][ T40] audit: type=1400 audit(1757614708.318:28305): avc: denied { read } for pid=8961 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 112.006060][ T8968] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.874'. [ 112.009199][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.5.874'. [ 112.117611][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'. [ 112.128917][ T8974] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 112.373446][ T5969] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.376056][ T5978] Bluetooth: hci3: command 0x0419 tx timeout [ 112.380346][ T40] audit: type=1400 audit(1757614708.768:28306): avc: denied { setopt } for pid=8997 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 112.424779][ T9004] 9pnet_fd: Insufficient options for proto=fd [ 112.455346][ T5969] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.505666][ T40] audit: type=1400 audit(1757614708.898:28307): avc: denied { bind } for pid=9010 comm="syz.4.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.513441][ T5969] Bluetooth: hci1: unexpected event 0x3c length: 6 < 7 [ 112.518988][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 112.522566][ T9014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 112.526672][ T9014] netlink: 'syz.1.891': attribute type 6 has an invalid length. [ 112.548555][ T9011] netlink: 64 bytes leftover after parsing attributes in process `syz.4.890'. [ 112.592364][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 112.598716][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.894'. [ 112.682540][ T40] audit: type=1400 audit(1757614709.068:28308): avc: denied { create } for pid=9041 comm="syz.2.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 112.682572][ T1145] tipc: Subscription rejected, illegal request [ 112.690462][ T40] audit: type=1400 audit(1757614709.078:28309): avc: denied { map } for pid=9041 comm="syz.2.901" path="/dev/swradio4" dev="devtmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.789736][ T40] audit: type=1400 audit(1757614709.178:28310): avc: denied { mounton } for pid=9059 comm="syz.2.907" path="/211/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 112.810425][ T40] audit: type=1400 audit(1757614709.198:28311): avc: denied { bind } for pid=9061 comm="syz.1.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.819761][ T40] audit: type=1400 audit(1757614709.198:28312): avc: denied { node_bind } for pid=9061 comm="syz.1.908" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 112.827532][ T40] audit: type=1400 audit(1757614709.198:28313): avc: denied { setopt } for pid=9061 comm="syz.1.908" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.844078][ T9069] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 112.847036][ T9069] NCSI netlink: No device for ifindex 196628 [ 112.916595][ T9082] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 112.956554][ T9088] dlm: no local IP address has been set [ 112.959283][ T9088] dlm: cannot start dlm midcomms -107 [ 113.030585][ T9102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.090045][ T9102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.134876][ T9118] dlm: non-version read from control device 0 [ 113.137815][ T9116] delete_channel: no stack [ 113.183803][ T9099] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.186857][ T9099] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.191508][ T9123] netlink: 'syz.2.927': attribute type 27 has an invalid length. [ 113.195522][ T9123] netlink: 'syz.2.927': attribute type 10 has an invalid length. [ 113.236880][ T9099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.243976][ T9099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.312246][ T9099] veth1_vlan: left allmulticast mode [ 113.346519][ T9123] dummy0: entered promiscuous mode [ 113.352691][ T9123] bridge0: port 3(dummy0) entered blocking state [ 113.356596][ T9123] bridge0: port 3(dummy0) entered disabled state [ 113.359318][ T9123] dummy0: entered allmulticast mode [ 113.363606][ T1146] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.367363][ T1146] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.371020][ T1146] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.390956][ T1146] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.423253][ T9137] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 113.615848][ T5969] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 113.773765][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 113.930021][ T9191] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 113.957509][ T10] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 113.961331][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.964752][ T10] usb 7-1: Product: syz [ 113.966579][ T10] usb 7-1: Manufacturer: syz [ 113.968555][ T10] usb 7-1: SerialNumber: syz [ 113.978663][ T10] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 113.995699][ T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 114.204637][ T9155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.208241][ T9155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.463425][ T5969] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.465570][ T5969] Bluetooth: hci3: command 0x0419 tx timeout [ 114.533545][ T5969] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.613686][ T13] wlan1: Trigger new scan to find an IBSS to join [ 114.749332][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.013349][ T10] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 115.015722][ T10] ath9k_htc: Failed to initialize the device [ 115.041152][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 115.168431][ T9247] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 115.203516][ T53] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 115.296022][ T9251] validate_nla: 1 callbacks suppressed [ 115.296034][ T9251] netlink: 'syz.1.972': attribute type 39 has an invalid length. [ 115.356161][ T53] usb 9-1: config 1 interface 0 altsetting 167 bulk endpoint 0x3 has invalid maxpacket 64 [ 115.359727][ T53] usb 9-1: config 1 interface 0 has no altsetting 0 [ 115.364739][ T53] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.368541][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.371852][ T53] usb 9-1: Product: syz [ 115.373764][ T53] usb 9-1: Manufacturer: Ї [ 115.375698][ T53] usb 9-1: SerialNumber: syz [ 115.380731][ T9235] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 115.498245][ T9256] netlink: 'syz.1.973': attribute type 10 has an invalid length. [ 115.503235][ T9256] team0: Device hsr_slave_0 failed to register rx_handler [ 115.589966][ T53] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 115.594622][ T53] usb 9-1: USB disconnect, device number 11 [ 115.682480][ T9267] fuse: Unknown parameter 'fowner>00000000000000000000' [ 115.686774][ T9267] dns_resolver: Unsupported content type (234) [ 115.758970][ T9275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=9275 comm=syz.5.978 [ 115.853210][ T9284] fuse: Bad value for 'fd' [ 115.909731][ T9285] __nla_validate_parse: 16 callbacks suppressed [ 115.909745][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 116.076569][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.987'. [ 116.127320][ T9297] openvswitch: netlink: IP tunnel TTL not specified. [ 116.298671][ T9316] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 116.301843][ T9316] SELinux: failed to load policy [ 116.377495][ T9324] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1001'. [ 116.470954][ T9330] syz_tun: entered allmulticast mode [ 116.472152][ T9331] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1004'. [ 116.475659][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 116.534203][ T5969] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.542693][ T9339] trusted_key: syz.4.1006 sent an empty control message without MSG_MORE. [ 116.543424][ T5969] Bluetooth: hci3: command 0x0419 tx timeout [ 116.550630][ T6053] usb 7-1: USB disconnect, device number 8 [ 116.574584][ T9343] Can't find a SQUASHFS superblock on nullb0 [ 116.584579][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 116.587381][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 116.613753][ T5969] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.619000][ T9350] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 116.680697][ T9360] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 116.681952][ T9350] md: md2 stopped. [ 116.714920][ T9350] md2: using deprecated bitmap file support [ 116.716943][ T9350] md2: error: bitmap file must be a regular file [ 116.721089][ T9342] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !tmode=00000000000000000040000, [ 116.731778][ T9368] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 116.736212][ T9368] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 116.753971][ T9368] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1014'. [ 116.758408][ T9368] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 116.761383][ T9366] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 116.802766][ T9377] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 116.868689][ T9370] binder: BC_ATTEMPT_ACQUIRE not supported [ 116.870588][ T9370] binder: 9369:9370 ioctl c0306201 200000000300 returned -22 [ 116.874407][ T9370] program syz.4.1015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.896671][ T9395] netlink: 'syz.2.1022': attribute type 6 has an invalid length. [ 116.899108][ T9395] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1022'. [ 116.939339][ T9400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1023'. [ 116.945926][ T9400] IPv6: sit1: Disabled Multicast RS [ 116.948417][ T9400] sit1: entered allmulticast mode [ 116.995999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.031974][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 117.046151][ T9408] netlink: 'syz.5.1024': attribute type 10 has an invalid length. [ 117.048851][ T9408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.053924][ T9408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.071749][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 117.071759][ T40] audit: type=1400 audit(1757614713.458:28330): avc: denied { mount } for pid=9424 comm="syz.2.1031" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 117.085002][ T40] audit: type=1400 audit(1757614713.468:28331): avc: denied { setattr } for pid=9424 comm="syz.2.1031" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 117.097079][ T9429] program syz.4.1032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.101588][ T40] audit: type=1400 audit(1757614713.488:28332): avc: denied { unmount } for pid=5975 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 117.131154][ T9432] vivid-003: ================= START STATUS ================= [ 117.134667][ T9432] vivid-003: Radio HW Seek Mode: Bounded [ 117.137278][ T9432] vivid-003: Radio Programmable HW Seek: false [ 117.139707][ T9432] vivid-003: RDS Rx I/O Mode: Block I/O [ 117.141916][ T9432] vivid-003: Generate RBDS Instead of RDS: false [ 117.149551][ T9432] vivid-003: RDS Reception: true [ 117.151591][ T9432] vivid-003: RDS Program Type: 0 inactive [ 117.154400][ T9432] vivid-003: RDS PS Name: inactive [ 117.156622][ T9432] vivid-003: RDS Radio Text: inactive [ 117.158849][ T9432] vivid-003: RDS Traffic Announcement: false inactive [ 117.161559][ T9432] vivid-003: RDS Traffic Program: false inactive [ 117.164923][ T9432] vivid-003: RDS Music: false inactive [ 117.167036][ T9432] vivid-003: ================== END STATUS ================== [ 117.236345][ T40] audit: type=1326 audit(1757614713.628:28333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9437 comm="syz.2.1033" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72bdd8eba9 code=0x0 [ 117.505468][ T40] audit: type=1400 audit(1757614713.898:28334): avc: denied { mount } for pid=9458 comm="syz.4.1040" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 117.584474][ T1146] wlan1: Trigger new scan to find an IBSS to join [ 117.619242][ T40] audit: type=1400 audit(1757614714.008:28335): avc: denied { ioctl } for pid=9467 comm="syz.2.1043" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 117.636842][ T40] audit: type=1400 audit(1757614714.008:28336): avc: denied { map } for pid=9467 comm="syz.2.1043" path="socket:[28351]" dev="sockfs" ino=28351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.644325][ T40] audit: type=1400 audit(1757614714.008:28337): avc: denied { read } for pid=9467 comm="syz.2.1043" path="socket:[28351]" dev="sockfs" ino=28351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.651601][ T40] audit: type=1400 audit(1757614714.008:28338): avc: denied { ioctl } for pid=9467 comm="syz.2.1043" path="socket:[28352]" dev="sockfs" ino=28352 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 117.659692][ T9472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9472 comm=syz.1.1045 [ 117.660611][ T9474] dlm: no local IP address has been set [ 117.668338][ T9474] dlm: cannot start dlm midcomms -107 [ 117.682452][ T40] audit: type=1400 audit(1757614714.068:28339): avc: denied { watch watch_reads } for pid=9473 comm="syz.5.1046" path="/101/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 117.691556][ T9479] binder: 9478:9479 ioctl c0306201 200000000080 returned -14 [ 117.694508][ T9482] binder: BINDER_SET_CONTEXT_MGR already set [ 117.697429][ T9482] binder: 9478:9482 ioctl 4018620d 200000000040 returned -16 [ 117.708425][ T9479] binder: 9478:9479 unknown command 5001287 [ 117.711227][ T9479] binder: 9478:9479 ioctl c0306201 200000000180 returned -22 [ 117.904771][ T9498] netlink: 'syz.4.1049': attribute type 7 has an invalid length. [ 117.920482][ T9501] dummy0: entered promiscuous mode [ 117.981831][ T9512] pim6reg13: entered allmulticast mode [ 118.031469][ T9518] netlink: 'syz.5.1060': attribute type 10 has an invalid length. [ 118.198170][ T9516] mmap: syz.1.1059 (9516) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.296763][ T9533] ip6erspan0: entered allmulticast mode [ 118.352975][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.356046][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.480148][ T9547] delete_channel: no stack [ 118.529413][ T9553] netlink: 'syz.5.1071': attribute type 12 has an invalid length. [ 118.533722][ T9553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9553 comm=syz.5.1071 [ 118.541367][ T9553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9553 comm=syz.5.1071 [ 118.546101][ T9553] tmpfs: Bad value for 'huge' [ 118.559053][ T9558] overlayfs: failed to clone upperpath [ 118.696350][ T5969] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 119.012581][ T9605] random: crng reseeded on system resumption [ 119.080522][ T9612] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 119.488017][ T9632] tmpfs: Unknown parameter 'srquota' [ 119.741503][ T9651] overlayfs: upper fs does not support tmpfile. [ 119.938057][ T9664] pimreg3: entered allmulticast mode [ 120.057725][ T9679] binder: Unknown parameter 'norecovery ' [ 120.474024][ T1125] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 120.477309][ T1125] sr 2:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 120.479763][ T1125] sr 2:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 120.482615][ T1125] sr 2:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 120.486149][ T1125] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 120.490879][ T1125] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 120.614311][ T7725] wlan1: Trigger new scan to find an IBSS to join [ 120.752155][ T9708] netlink: 'syz.5.1119': attribute type 5 has an invalid length. [ 120.762932][ T9711] No source specified [ 120.777304][ T9708] SELinux: ebitmap: truncated map [ 120.787022][ T9708] SELinux: failed to load policy [ 120.860647][ T9717] tmpfs: Cannot disable swap on remount [ 120.950575][ T9717] mkiss: ax0: crc mode is auto. [ 121.171382][ T9726] __nla_validate_parse: 23 callbacks suppressed [ 121.171398][ T9726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1126'. [ 121.310830][ T9737] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1129'. [ 121.413381][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 121.502078][ T9745] overlayfs: missing 'lowerdir' [ 121.514495][ T13] wlan1: Creating new IBSS network, BSSID 5e:04:7b:a7:3b:e5 [ 121.697706][ T9756] ptrace attach of "/syz-executor exec"[7914] was attempted by "/syz-executor exec"[9756] [ 121.698397][ T9755] ptrace attach of "/syz-executor exec"[7914] was attempted by "/syz-executor exec"[9755] [ 121.755535][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1139'. [ 121.758340][ T9764] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 122.102657][ T9775] program syz.2.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.365994][ T6019] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 122.384721][ T9788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9788 comm=syz.4.1147 [ 122.389632][ T9788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9788 comm=syz.4.1147 [ 122.424041][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 122.424052][ T40] audit: type=1400 audit(1757614718.818:28359): avc: denied { ioctl } for pid=9791 comm="syz.4.1148" path="socket:[30899]" dev="sockfs" ino=30899 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.478543][ T9797] block nbd4: Attempted send on invalid socket [ 122.481897][ T9797] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.485823][ T9797] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 122.535628][ T6019] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.539698][ T6019] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.542858][ T6019] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 122.545786][ T6019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.549373][ T6019] usb 7-1: config 0 descriptor?? [ 122.651385][ T9813] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 122.755197][ T40] audit: type=1400 audit(1757614719.148:28360): avc: denied { append } for pid=9774 comm="syz.2.1143" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 122.777082][ T6019] usbhid 7-1:0.0: can't add hid device: -71 [ 122.779033][ T6019] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 122.785865][ T6019] usb 7-1: USB disconnect, device number 9 [ 122.819885][ T9834] lo: entered allmulticast mode [ 123.139923][ T9844] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1162'. [ 123.172988][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1163'. [ 123.347008][ T9803] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 123.543450][ T1028] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 123.660945][ T9862] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82 [ 123.714872][ T1028] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 123.718200][ T1028] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.722639][ T1028] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.727707][ T1028] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.732052][ T1028] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 123.739328][ T1028] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 123.741684][ T1028] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.745311][ T1028] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.748953][ T1028] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.752593][ T1028] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 123.759443][ T1028] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 123.761912][ T1028] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.765729][ T1028] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.769380][ T1028] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.772790][ T1028] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 123.779017][ T1028] usb 10-1: string descriptor 0 read error: -22 [ 123.781066][ T1028] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 123.781689][ T40] audit: type=1400 audit(1757614720.168:28361): avc: denied { read } for pid=9873 comm="syz.2.1172" name="msr" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 123.784201][ T1028] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.794146][ T40] audit: type=1400 audit(1757614720.168:28362): avc: denied { open } for pid=9873 comm="syz.2.1172" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 123.805232][ T1028] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 123.890749][ T9882] netlink: 75 bytes leftover after parsing attributes in process `syz.1.1176'. [ 123.925085][ T40] audit: type=1400 audit(1757614720.318:28363): avc: denied { map } for pid=9888 comm="syz.4.1177" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.959373][ T40] audit: type=1400 audit(1757614720.348:28364): avc: denied { getattr } for pid=9891 comm="syz.2.1178" name="/" dev="9p" ino=35913871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 124.005485][ T40] audit: type=1400 audit(1757614720.398:28365): avc: denied { watch watch_reads } for pid=9849 comm="syz.5.1165" path="pipe:[31862]" dev="pipefs" ino=31862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 124.047561][ T40] audit: type=1400 audit(1757614720.438:28366): avc: denied { accept } for pid=9895 comm="syz.4.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 124.055392][ T40] audit: type=1400 audit(1757614720.438:28367): avc: denied { ioctl } for pid=9895 comm="syz.4.1181" path="socket:[29439]" dev="sockfs" ino=29439 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 124.058566][ T9850] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 124.064391][ T9902] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 124.070835][ T10] usb 10-1: USB disconnect, device number 4 [ 124.074166][ T9903] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30228 sclass=netlink_xfrm_socket pid=9903 comm=syz.2.1179 [ 124.074267][ T9904] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30228 sclass=netlink_xfrm_socket pid=9904 comm=syz.2.1179 [ 124.145092][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'. [ 124.157010][ T40] audit: type=1400 audit(1757614720.548:28368): avc: denied { mount } for pid=9914 comm="syz.2.1185" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 124.160781][ T9915] devtmpfs: Unknown parameter 'ª [ 124.160781][ T9915] ¨ß£ãÐõbusrquota_inode_+haˆ–Þ¡8F¶ÜáÀyÆtbDoòkƒèý13¹½ÝnJâKi&7qÿ *v¼ÄfîEDÝÈL²' [ 124.176136][ T9915] SELinux: Context system_u:object_r:crack_exec_t:s0 is not valid (left unmapped). [ 124.302117][ T67] block nbd0: Possible stuck request ffff888027e75080: control (read@0,1024B). Runtime 30 seconds [ 124.307081][ T67] block nbd0: Possible stuck request ffff888027e75240: control (read@1024,1024B). Runtime 30 seconds [ 124.311953][ T67] block nbd0: Possible stuck request ffff888027e75400: control (read@2048,1024B). Runtime 30 seconds [ 124.317498][ T67] block nbd0: Possible stuck request ffff888027e755c0: control (read@3072,1024B). Runtime 30 seconds [ 124.391912][ T9930] sctp: [Deprecated]: syz.2.1191 (pid 9930) Use of int in max_burst socket option. [ 124.391912][ T9930] Use struct sctp_assoc_value instead [ 124.533553][ T5969] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.720384][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1195'. [ 124.969115][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 125.000936][ T9963] .: renamed from bond0 [ 125.046025][ T9972] cgroup: Invalid name [ 125.050050][ T9972] gfs2: gfs2 mount does not exist [ 125.093465][ T9976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.188659][ T9986] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.375738][ T9991] netlink: 'syz.5.1207': attribute type 5 has an invalid length. [ 125.489890][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1211'. [ 125.928483][T10013] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 126.267140][T10024] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 126.299131][T10024] SELinux: failed to load policy [ 126.651162][T10037] syz_tun: entered allmulticast mode [ 126.685399][T10041] netlink: 'syz.5.1223': attribute type 5 has an invalid length. [ 126.921407][T10052] __nla_validate_parse: 1 callbacks suppressed [ 126.921418][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1227'. [ 126.926569][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1227'. [ 127.024194][T10066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.493993][ T5978] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.674155][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 127.674170][ T40] audit: type=1400 audit(1757614724.068:28398): avc: denied { append } for pid=10101 comm="syz.5.1244" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.681191][T10102] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 127.686593][ T40] audit: type=1400 audit(1757614724.068:28399): avc: denied { map } for pid=10101 comm="syz.5.1244" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.690076][T10102] overlayfs: failed to set xattr on upper [ 127.701345][T10102] overlayfs: ...falling back to redirect_dir=nofollow. [ 127.704163][T10102] overlayfs: ...falling back to index=off. [ 127.706529][T10102] overlayfs: ...falling back to uuid=null. [ 127.721946][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1244'. [ 127.780622][T10103] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 127.792539][T10102] team0: Port device team_slave_0 removed [ 127.829891][ T40] audit: type=1326 audit(1757614724.218:28400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bdd8eba9 code=0x7ffc0000 [ 127.831322][T10107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1246'. [ 127.831778][T10109] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.833019][T10106] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 127.837123][ T40] audit: type=1326 audit(1757614724.218:28401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bdd8eba9 code=0x7ffc0000 [ 127.839874][T10107] netlink: 'syz.2.1246': attribute type 7 has an invalid length. [ 127.841743][ T40] audit: type=1326 audit(1757614724.218:28402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72bdd8eba9 code=0x7ffc0000 [ 127.844909][T10107] netlink: 'syz.2.1246': attribute type 8 has an invalid length. [ 127.844920][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 127.849238][T10107] erspan0: entered promiscuous mode [ 127.852471][ T40] audit: type=1326 audit(1757614724.218:28403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bdd8eba9 code=0x7ffc0000 [ 127.855925][T10107] batadv_slave_1: entered promiscuous mode [ 127.862165][ T40] audit: type=1326 audit(1757614724.218:28404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bdd8eba9 code=0x7ffc0000 [ 127.866665][T10107] batadv_slave_1: left promiscuous mode [ 127.869568][ T40] audit: type=1326 audit(1757614724.218:28405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72bdd8eba9 code=0x7ffc0000 [ 127.894654][ T40] audit: type=1326 audit(1757614724.218:28406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bdd8eba9 code=0x7ffc0000 [ 127.894696][T10107] erspan0: left promiscuous mode [ 127.901656][ T40] audit: type=1326 audit(1757614724.218:28407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.2.1246" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72bdd8eba9 code=0x7ffc0000 [ 128.031889][T10124] hugetlbfs: Bad value 'e' for mount option 'size' [ 128.031889][T10124] [ 128.038667][T10126] netlink: 'syz.2.1254': attribute type 4 has an invalid length. [ 128.135014][T10134] netlink: 'syz.2.1258': attribute type 13 has an invalid length. [ 128.333536][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 128.394166][T10150] FAULT_INJECTION: forcing a failure. [ 128.394166][T10150] name failslab, interval 1, probability 0, space 0, times 1 [ 128.398776][T10150] CPU: 2 UID: 0 PID: 10150 Comm: syz.4.1265 Not tainted syzkaller #0 PREEMPT(full) [ 128.398790][T10150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.398796][T10150] Call Trace: [ 128.398800][T10150] [ 128.398805][T10150] dump_stack_lvl+0x16c/0x1f0 [ 128.398837][T10150] should_fail_ex+0x512/0x640 [ 128.398856][T10150] ? fs_reclaim_acquire+0xae/0x150 [ 128.398871][T10150] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 128.398887][T10150] should_failslab+0xc2/0x120 [ 128.398900][T10150] __kmalloc_noprof+0xd2/0x510 [ 128.398914][T10150] tomoyo_realpath_from_path+0xc2/0x6e0 [ 128.398931][T10150] ? tomoyo_profile+0x47/0x60 [ 128.398943][T10150] tomoyo_path_number_perm+0x245/0x580 [ 128.398956][T10150] ? tomoyo_path_number_perm+0x237/0x580 [ 128.398971][T10150] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 128.398985][T10150] ? find_held_lock+0x2b/0x80 [ 128.399010][T10150] ? find_held_lock+0x2b/0x80 [ 128.399022][T10150] ? hook_file_ioctl_common+0x145/0x410 [ 128.399036][T10150] ? __fget_files+0x20e/0x3c0 [ 128.399050][T10150] security_file_ioctl+0x9b/0x240 [ 128.399066][T10150] __x64_sys_ioctl+0xb7/0x210 [ 128.399084][T10150] do_syscall_64+0xcd/0x4e0 [ 128.399103][T10150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.399114][T10150] RIP: 0033:0x7efed578eba9 [ 128.399122][T10150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.399134][T10150] RSP: 002b:00007efed66b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.399144][T10150] RAX: ffffffffffffffda RBX: 00007efed59d5fa0 RCX: 00007efed578eba9 [ 128.399150][T10150] RDX: 0000200000000100 RSI: 00000000c00c642e RDI: 0000000000000003 [ 128.399156][T10150] RBP: 00007efed66b5090 R08: 0000000000000000 R09: 0000000000000000 [ 128.399162][T10150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.399168][T10150] R13: 00007efed59d6038 R14: 00007efed59d5fa0 R15: 00007ffd57dcbbc8 [ 128.399183][T10150] [ 128.399187][T10150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 128.426397][T10148] sd 0:0:0:0: PR command failed: 1026 [ 128.471748][T10148] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 128.473961][T10148] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 128.503487][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 128.511421][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.516935][ T9] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 128.519823][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.522420][ T9] usb 10-1: Product: syz [ 128.523808][ T9] usb 10-1: Manufacturer: syz [ 128.525424][ T9] usb 10-1: SerialNumber: syz [ 128.529880][ T9] usb 10-1: config 0 descriptor?? [ 128.535722][ T9] hub 10-1:0.0: bad descriptor, ignoring hub [ 128.537699][ T9] hub 10-1:0.0: probe with driver hub failed with error -5 [ 128.541422][ T9] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input11 [ 128.755548][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1278'. [ 128.788004][T10193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.791373][T10193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.792142][T10197] futex_wake_op: syz.1.1279 tries to shift op by -1; fix this program [ 128.797260][T10197] futex_wake_op: syz.1.1279 tries to shift op by -1; fix this program [ 128.799862][T10197] futex_wake_op: syz.1.1279 tries to shift op by -1; fix this program [ 128.802665][T10197] futex_wake_op: syz.1.1279 tries to shift op by -1; fix this program [ 128.805881][T10197] futex_wake_op: syz.1.1279 tries to shift op by -1; fix this program [ 128.808434][T10197] futex_wake_op: syz.1.1279 tries to shift op by -1; fix this program [ 128.810962][T10197] futex_wake_op: syz.1.1279 tries to shift op by -1; fix this program [ 128.813904][T10197] futex_wake_op: syz.1.1279 tries to shift op by -1; fix this program [ 128.816457][T10197] futex_wake_op: syz.1.1279 tries to shift op by -1; fix this program [ 128.818923][T10197] futex_wake_op: syz.1.1279 tries to shift op by -1; fix this program [ 128.894345][ T29] usb 10-1: USB disconnect, device number 5 [ 128.928660][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1283'. [ 128.958993][T10212] fuse: Bad value for 'group_id' [ 128.960586][T10212] fuse: Bad value for 'group_id' [ 129.150518][T10242] FAULT_INJECTION: forcing a failure. [ 129.150518][T10242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.155328][T10242] CPU: 3 UID: 0 PID: 10242 Comm: syz.5.1290 Not tainted syzkaller #0 PREEMPT(full) [ 129.155343][T10242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.155349][T10242] Call Trace: [ 129.155353][T10242] [ 129.155357][T10242] dump_stack_lvl+0x16c/0x1f0 [ 129.155388][T10242] should_fail_ex+0x512/0x640 [ 129.155409][T10242] _copy_from_user+0x2e/0xd0 [ 129.155425][T10242] drm_ioctl+0x4fb/0xc30 [ 129.155442][T10242] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 129.155455][T10242] ? __pfx_drm_ioctl+0x10/0x10 [ 129.155475][T10242] ? selinux_file_ioctl+0x180/0x270 [ 129.155490][T10242] ? selinux_file_ioctl+0xb4/0x270 [ 129.155506][T10242] ? __pfx_drm_ioctl+0x10/0x10 [ 129.155521][T10242] __x64_sys_ioctl+0x18e/0x210 [ 129.155538][T10242] do_syscall_64+0xcd/0x4e0 [ 129.155558][T10242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.155568][T10242] RIP: 0033:0x7f457518eba9 [ 129.155577][T10242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.155587][T10242] RSP: 002b:00007f45760c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.155597][T10242] RAX: ffffffffffffffda RBX: 00007f45753d5fa0 RCX: 00007f457518eba9 [ 129.155604][T10242] RDX: 0000200000000100 RSI: 00000000c00c642e RDI: 0000000000000003 [ 129.155610][T10242] RBP: 00007f45760c9090 R08: 0000000000000000 R09: 0000000000000000 [ 129.155616][T10242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.155621][T10242] R13: 00007f45753d6038 R14: 00007f45753d5fa0 R15: 00007ffe3525ac68 [ 129.155635][T10242] [ 129.236094][T10251] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1293'. [ 129.245728][ T5969] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 129.267948][T10257] block nbd4: Attempted send on invalid socket [ 129.270460][T10257] I/O error, dev nbd4, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 129.274224][T10257] gfs2: error -5 reading superblock [ 129.490468][ T5969] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 129.535410][T10273] 9pnet_fd: Insufficient options for proto=fd [ 129.560727][T10279] netlink: 'syz.2.1301': attribute type 4 has an invalid length. [ 129.563099][T10279] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1301'. [ 129.610171][T10286] binder: 10285:10286 ioctl 4018620d 0 returned -22 [ 129.616561][T10288] netlink: 'syz.1.1304': attribute type 11 has an invalid length. [ 129.620289][T10288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1304'. [ 130.063444][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 130.373693][ T1028] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 130.506075][T10332] netlink: 'syz.1.1319': attribute type 3 has an invalid length. [ 130.538388][ T1028] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.542554][ T1028] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 130.546134][ T1028] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 130.548916][ T1028] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.552421][ T1028] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.555183][ T1028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.558712][ T1028] usb 9-1: config 0 descriptor?? [ 130.560811][T10334] bridge0: port 3(dummy0) entered blocking state [ 130.563609][T10334] bridge0: port 3(dummy0) entered forwarding state [ 130.570901][T10334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.574896][T10334] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.580959][T10334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.596478][T10335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.605604][ T102] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 130.609771][ T102] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 130.613910][ T102] bond0: now running without any active interface! [ 130.764697][T10373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10373 comm=syz.1.1336 [ 130.970688][ T1028] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.973427][ T1028] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.976670][ T1028] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.979168][ T1028] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.981436][ T1028] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.984229][ T1028] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.986504][ T1028] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.988892][ T1028] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.991189][ T1028] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 130.993715][ T1028] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 131.004576][ T1028] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 131.046377][T10403] team0: Device gtp0 is of different type [ 131.113667][ T6053] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 131.195460][T10408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.263476][ T6053] usb 10-1: Using ep0 maxpacket: 8 [ 131.267258][ T6053] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 131.270186][ T6053] usb 10-1: config 179 has no interface number 0 [ 131.272510][ T6053] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 131.279901][ T6053] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 131.285188][ T6053] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.289860][ T6053] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 131.296639][ T6053] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 131.302166][ T6053] usb 10-1: config 179 interface 65 has no altsetting 0 [ 131.306678][ T6053] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 131.310182][ T6053] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.327563][ T6053] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:179.65/input/input12 [ 131.522744][T10394] block nbd5: Attempted send on invalid socket [ 131.525626][T10394] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 131.528920][T10394] EXT4-fs (nbd5): unable to read superblock [ 131.535801][ T9] usb 10-1: USB disconnect, device number 6 [ 131.535906][ C3] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 132.063526][T10463] netlink: 'syz.5.1362': attribute type 11 has an invalid length. [ 132.065977][T10463] __nla_validate_parse: 39 callbacks suppressed [ 132.065984][T10463] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1362'. [ 132.441729][T10490] netlink: 'syz.1.1369': attribute type 1 has an invalid length. [ 132.460790][T10490] 8021q: adding VLAN 0 to HW filter on device bond5 [ 132.609011][T10499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.616519][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.619038][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.633493][ T29] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 132.673349][ T6053] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 132.729343][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 132.729358][ T40] audit: type=1400 audit(1757614729.118:28432): avc: denied { execute } for pid=10502 comm="syz.4.1374" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 132.740143][T10503] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1374'. [ 132.784756][ T29] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.788339][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.791957][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 132.795127][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.800199][ T29] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.805977][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.811844][ T29] usb 10-1: config 0 descriptor?? [ 132.835361][ T6053] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 132.840527][ T6053] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.843641][ T6053] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.846223][ T6053] usb 7-1: Product: ç› è“馯篚훮ᕉì«ë¡˜á¹å¯ é£±ê®²î¿‚펠踈⡖㽵﮴갿ᮩ [ 132.849081][ T6053] usb 7-1: SerialNumber: æ¾îƒ‘ [ 132.853848][T10491] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 132.979009][ T9] usb 9-1: USB disconnect, device number 13 [ 133.062567][ T6053] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 133.067760][ T6053] usb 7-1: USB disconnect, device number 10 [ 133.223178][ T29] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 133.417308][ T40] audit: type=1400 audit(1757614729.808:28433): avc: denied { append } for pid=10481 comm="syz.5.1366" name="hiddev0" dev="devtmpfs" ino=2977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 133.475148][T10482] netlink: 'syz.5.1366': attribute type 1 has an invalid length. [ 133.477789][T10482] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1366'. [ 133.486697][ T53] usb 10-1: USB disconnect, device number 7 [ 133.641700][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 133.748356][T10519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1381'. [ 133.882213][T10539] netlink: 730 bytes leftover after parsing attributes in process `syz.4.1387'. [ 133.987634][ T40] audit: type=1400 audit(1757614730.378:28434): avc: denied { shutdown } for pid=10549 comm="syz.4.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.015510][T10552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1392'. [ 134.015978][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1391'. [ 134.023126][T10550] openvswitch: netlink: Flow actions attr not present in new flow. [ 134.051031][ T40] audit: type=1400 audit(1757614730.438:28435): avc: denied { ioctl } for pid=10556 comm="syz.5.1393" path="socket:[33115]" dev="sockfs" ino=33115 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 134.120977][T10564] geneve1: entered allmulticast mode [ 134.234265][ T40] audit: type=1400 audit(1757614730.618:28436): avc: denied { rename } for pid=10579 comm="syz.4.1404" name="file0" dev="9p" ino=35913982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 134.245209][ T40] audit: type=1400 audit(1757614730.618:28437): avc: denied { unlink } for pid=10579 comm="syz.4.1404" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=35913882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.257541][T10581] overlay: ./file1 is not a directory [ 134.286246][ T40] audit: type=1400 audit(1757614730.678:28438): avc: denied { read } for pid=10584 comm="syz.5.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 134.381700][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1407'. [ 134.574245][T10644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1425'. [ 134.721189][ T40] audit: type=1400 audit(1757614731.108:28439): avc: denied { map } for pid=10678 comm="syz.5.1437" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 134.728966][ T40] audit: type=1400 audit(1757614731.108:28440): avc: denied { execute } for pid=10678 comm="syz.5.1437" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 134.774484][T10697] geneve2: entered promiscuous mode [ 134.776210][T10697] geneve2: entered allmulticast mode [ 134.778952][ T1146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.781772][ T1146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.787452][ T1146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.790221][ T1146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.801531][T10690] openvswitch: netlink: IP tunnel dst address not specified [ 134.827013][T10703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.870166][ T40] audit: type=1400 audit(1757614731.258:28441): avc: denied { read } for pid=10714 comm="syz.4.1444" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 134.901701][T10719] bridge3: entered allmulticast mode [ 134.963985][T10721] netlink: 'syz.4.1447': attribute type 3 has an invalid length. [ 135.072799][ T5969] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 135.082790][T10733] mkiss: ax0: crc mode is auto. [ 135.330899][T10742] binder: Binderfs stats mode cannot be changed during a remount [ 135.364552][T10751] random: crng reseeded on system resumption [ 135.775864][T10554] syz_tun (unregistering): left allmulticast mode [ 136.097477][T10794] macvlan2: entered promiscuous mode [ 136.099181][T10794] macvlan2: entered allmulticast mode [ 136.101070][T10794] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 136.172800][ T5978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.179546][ T5978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.182142][T10805] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 136.182880][ T5978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.189026][T10805] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 136.189215][ T5978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.195185][ T5978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.324502][T10801] chnl_net:caif_netlink_parms(): no params data found [ 136.418839][T10801] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.421160][T10801] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.423575][T10801] bridge_slave_0: entered allmulticast mode [ 136.426213][T10801] bridge_slave_0: entered promiscuous mode [ 136.430636][T10801] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.432929][T10801] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.435396][T10801] bridge_slave_1: entered allmulticast mode [ 136.438011][T10801] bridge_slave_1: entered promiscuous mode [ 136.439167][T10840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10840 comm=syz.5.1474 [ 136.474437][T10801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.481851][T10801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.521468][T10801] team0: Port device team_slave_0 added [ 136.525377][T10801] team0: Port device team_slave_1 added [ 136.624589][T10801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.626870][T10801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.635832][T10801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.659797][T10848] netlink: 'syz.2.1477': attribute type 2 has an invalid length. [ 136.660767][T10801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.666749][T10801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.677459][T10801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.742808][ T1145] bridge_slave_1: left allmulticast mode [ 136.746176][ T1145] bridge_slave_1: left promiscuous mode [ 136.748943][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.757378][ T1145] bridge_slave_0: left allmulticast mode [ 136.759929][ T1145] bridge_slave_0: left promiscuous mode [ 136.767714][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.043710][ T5978] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 137.232203][ T1145] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.235850][ T1145] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.239022][ T1145] . (unregistering): Released all slaves [ 137.269511][T10801] hsr_slave_0: entered promiscuous mode [ 137.272380][T10801] hsr_slave_1: entered promiscuous mode [ 137.274928][T10801] debugfs: 'hsr0' already exists in 'hsr' [ 137.277327][T10801] Cannot create hsr debugfs directory [ 137.390483][T10875] __nla_validate_parse: 7 callbacks suppressed [ 137.390557][T10875] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1483'. [ 137.398622][T10875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1483'. [ 137.528412][T10897] kAFS: unparsable volume name [ 137.531754][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1488'. [ 137.542187][T10900] overlayfs: failed to resolve './bus': -2 [ 137.580049][ T1145] hsr_slave_0: left promiscuous mode [ 137.589020][ T1145] hsr_slave_1: left promiscuous mode [ 137.590891][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.596301][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.148672][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 138.217668][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 138.304551][ T5978] Bluetooth: hci1: command tx timeout [ 138.867141][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1501'. [ 138.887065][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 138.887080][ T40] audit: type=1326 audit(1757614735.278:28451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10950 comm="syz.2.1503" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72bdd8eba9 code=0x0 [ 138.989783][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1503'. [ 139.004028][T10968] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1508'. [ 139.066812][T10971] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.070770][T10971] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.095443][T10977] netlink: 'syz.1.1509': attribute type 1 has an invalid length. [ 139.124220][T10801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.128701][T10801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.132464][T10801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.142224][T10801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.175847][T10971] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.179225][T10971] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.212961][T10801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.226571][T10801] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.231600][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.234006][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.241476][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.244059][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.263817][T10971] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.267788][T10971] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.346886][T10971] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.351236][T10971] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.405093][T10801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.438680][ T1146] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.441603][ T1146] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.449238][ T1146] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.451878][ T1146] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.460329][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.463938][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.477970][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.480536][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.512488][T11005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4122 sclass=netlink_route_socket pid=11005 comm=syz.1.1511 [ 139.517446][ T40] audit: type=1326 audit(1757614735.908:28452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11004 comm="syz.1.1511" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f379db8eba9 code=0x0 [ 139.562161][T10801] veth0_vlan: entered promiscuous mode [ 139.572166][T10801] veth1_vlan: entered promiscuous mode [ 139.591787][T10801] veth0_macvtap: entered promiscuous mode [ 139.596440][T10801] veth1_macvtap: entered promiscuous mode [ 139.608462][T10801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.617470][T10801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.625324][ T1146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.628786][ T1146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.641597][ T1145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.646412][ T1145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.688216][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.691896][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.707268][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.709959][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.715021][ T6053] IPVS: starting estimator thread 0... [ 139.715580][T11024] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1517'. [ 139.795217][T11031] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1519'. [ 139.798535][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'. [ 139.803644][T11025] IPVS: using max 45 ests per chain, 108000 per kthread [ 139.835171][T11044] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1523'. [ 140.060140][ T40] audit: type=1400 audit(1757614736.448:28453): avc: denied { read } for pid=11074 comm="syz.4.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.064108][T11077] tmpfs: Unknown parameter 'usrr>' [ 140.144558][ T40] audit: type=1400 audit(1757614736.538:28454): avc: denied { create } for pid=11081 comm="syz.1.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 140.300091][T11111] binder: 11109:11111 ioctl c0306201 200000000080 returned -14 [ 140.308960][ T40] audit: type=1400 audit(1757614736.698:28455): avc: denied { call } for pid=11109 comm="syz.2.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 140.322925][ T40] audit: type=1400 audit(1757614736.698:28456): avc: denied { transfer } for pid=11109 comm="syz.2.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 140.373570][ T5978] Bluetooth: hci1: command tx timeout [ 140.488808][T11147] netlink: 'syz.1.1559': attribute type 21 has an invalid length. [ 140.491296][T11147] netlink: 'syz.1.1559': attribute type 6 has an invalid length. [ 140.863401][ T6053] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 140.908220][T11183] overlayfs: failed to clone upperpath [ 140.993344][ T6053] usb 7-1: device descriptor read/64, error -71 [ 141.197066][T11214] openvswitch: netlink: IP tunnel dst address not specified [ 141.233471][ T6053] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 141.365513][T11156] ceph: No mds server is up or the cluster is laggy [ 141.366838][ T6053] usb 7-1: device descriptor read/64, error -71 [ 141.368138][T11165] ceph: No mds server is up or the cluster is laggy [ 141.473494][ T6053] usb usb7-port1: attempt power cycle [ 141.560892][ T40] audit: type=1400 audit(1757614737.948:28457): avc: denied { mounton } for pid=11234 comm="syz.1.1584" path="/489/file0" dev="tmpfs" ino=2641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.570518][ T40] audit: type=1400 audit(1757614737.948:28458): avc: denied { ioctl } for pid=11234 comm="syz.1.1584" path="/489/file0" dev="tmpfs" ino=2641 ioctlcmd=0x541e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.793125][ T40] audit: type=1400 audit(1757614738.178:28459): avc: denied { map } for pid=11239 comm="syz.1.1587" path="socket:[40665]" dev="sockfs" ino=40665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 141.813457][ T6053] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 141.833972][ T6053] usb 7-1: device descriptor read/8, error -71 [ 142.027195][T11277] 9pnet: Unknown protocol version 9p20\++} [ 142.073500][ T6053] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 142.093841][ T6053] usb 7-1: device descriptor read/8, error -71 [ 142.114681][T11289] netlink: 'syz.5.1602': attribute type 32 has an invalid length. [ 142.204480][ T6053] usb usb7-port1: unable to enumerate USB device [ 142.325686][T11217] syz.4.1580: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 142.331722][T11217] CPU: 0 UID: 0 PID: 11217 Comm: syz.4.1580 Not tainted syzkaller #0 PREEMPT(full) [ 142.331736][T11217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.331743][T11217] Call Trace: [ 142.331747][T11217] [ 142.331752][T11217] dump_stack_lvl+0x16c/0x1f0 [ 142.331776][T11217] warn_alloc+0x248/0x3a0 [ 142.331793][T11217] ? __pfx_warn_alloc+0x10/0x10 [ 142.331809][T11217] ? hash_netport4_resize+0x1d8/0x1c50 [ 142.331823][T11217] ? __vmalloc_node_noprof+0xad/0xf0 [ 142.331840][T11217] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 142.331860][T11217] ? hash_netport4_resize+0x1d8/0x1c50 [ 142.331873][T11217] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.331891][T11217] ? ___kmalloc_large_node+0xed/0x160 [ 142.331907][T11217] __kvmalloc_node_noprof+0x30a/0x620 [ 142.331918][T11217] ? hash_netport4_resize+0x1d8/0x1c50 [ 142.331928][T11217] ? __kmalloc_noprof+0x242/0x510 [ 142.331937][T11217] ? hash_netport4_resize+0x1d8/0x1c50 [ 142.331950][T11217] ? hash_netport4_resize+0x1d8/0x1c50 [ 142.331959][T11217] hash_netport4_resize+0x1d8/0x1c50 [ 142.331970][T11217] ? __pfx_hash_netport4_add+0x10/0x10 [ 142.331980][T11217] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 142.332000][T11217] ? __pfx___mutex_lock+0x10/0x10 [ 142.332020][T11217] ? __pfx_hash_netport4_resize+0x10/0x10 [ 142.332033][T11217] call_ad.constprop.0+0x36d/0x940 [ 142.332044][T11217] ? __pfx_hash_netport4_resize+0x10/0x10 [ 142.332055][T11217] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 142.332065][T11217] ? __pfx___nla_validate_parse+0x10/0x10 [ 142.332088][T11217] ? __nla_parse+0x40/0x60 [ 142.332098][T11217] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 142.332112][T11217] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 142.332124][T11217] ? call_rcu_tasks_generic+0x400/0x920 [ 142.332152][T11217] ? find_held_lock+0x2b/0x80 [ 142.332168][T11217] nfnetlink_rcv_msg+0x9fc/0x1200 [ 142.332185][T11217] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 142.332196][T11217] ? __lock_acquire+0x62e/0x1ce0 [ 142.332224][T11217] ? avc_has_perm_noaudit+0x149/0x3b0 [ 142.332240][T11217] netlink_rcv_skb+0x155/0x420 [ 142.332254][T11217] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 142.332265][T11217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.332285][T11217] ? ns_capable+0xd7/0x110 [ 142.332299][T11217] nfnetlink_rcv+0x1b3/0x430 [ 142.332309][T11217] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 142.332319][T11217] ? netlink_deliver_tap+0x1ae/0xd30 [ 142.332334][T11217] netlink_unicast+0x5aa/0x870 [ 142.332350][T11217] ? __pfx_netlink_unicast+0x10/0x10 [ 142.332364][T11217] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 142.332382][T11217] netlink_sendmsg+0x8d1/0xdd0 [ 142.332398][T11217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.332417][T11217] ____sys_sendmsg+0xa98/0xc70 [ 142.332434][T11217] ? copy_msghdr_from_user+0x10a/0x160 [ 142.332447][T11217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.332466][T11217] ? __pfx_futex_wake_mark+0x10/0x10 [ 142.332480][T11217] ___sys_sendmsg+0x134/0x1d0 [ 142.332494][T11217] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.332523][T11217] __sys_sendmsg+0x16d/0x220 [ 142.332537][T11217] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.332549][T11217] ? __x64_sys_futex+0x1e0/0x4c0 [ 142.332566][T11217] do_syscall_64+0xcd/0x4e0 [ 142.332601][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.332612][T11217] RIP: 0033:0x7facaa58eba9 [ 142.332621][T11217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.332631][T11217] RSP: 002b:00007faca87f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.332641][T11217] RAX: ffffffffffffffda RBX: 00007facaa7d6090 RCX: 00007facaa58eba9 [ 142.332648][T11217] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000047 [ 142.332655][T11217] RBP: 00007facaa611e19 R08: 0000000000000000 R09: 0000000000000000 [ 142.332661][T11217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.332667][T11217] R13: 00007facaa7d6128 R14: 00007facaa7d6090 R15: 00007ffd1bf7ab38 [ 142.332680][T11217] [ 142.332684][T11217] Mem-Info: [ 142.454847][ T5978] Bluetooth: hci1: command tx timeout [ 142.466320][T11217] active_anon:33806 inactive_anon:15323 isolated_anon:0 [ 142.466320][T11217] active_file:3021 inactive_file:52514 isolated_file:0 [ 142.466320][T11217] unevictable:1768 dirty:320 writeback:0 [ 142.466320][T11217] slab_reclaimable:10137 slab_unreclaimable:88063 [ 142.466320][T11217] mapped:25649 shmem:39243 pagetables:1632 [ 142.466320][T11217] sec_pagetables:310 bounce:0 [ 142.466320][T11217] kernel_misc_reclaimable:0 [ 142.466320][T11217] free:381131 free_pcp:19169 free_cma:0 [ 142.481607][T11217] Node 0 active_anon:106740kB inactive_anon:61292kB active_file:12084kB inactive_file:209812kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:102596kB dirty:1276kB writeback:0kB shmem:127060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13776kB pagetables:6108kB sec_pagetables:1240kB all_unreclaimable? no Balloon:0kB [ 142.496771][T11217] Node 1 active_anon:28484kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:29912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:272kB pagetables:420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 142.507742][T11217] Node 0 DMA free:5348kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:264kB local_pcp:32kB free_cma:0kB [ 142.519096][T11217] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 142.521323][T11217] Node 0 DMA32 free:35952kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:105204kB inactive_anon:61292kB active_file:12084kB inactive_file:209812kB unevictable:3536kB writepending:1276kB present:2080628kB managed:1263436kB mlocked:0kB bounce:0kB free_pcp:31156kB local_pcp:8156kB free_cma:0kB [ 142.535637][T11217] lowmem_reserve[]: 0 0 0 0 0 [ 142.537708][T11217] Node 1 Normal free:1483160kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28528kB inactive_anon:0kB active_file:0kB inactive_file:244kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:45188kB local_pcp:9252kB free_cma:0kB [ 142.550667][T11217] lowmem_reserve[]: 0 0 0 0 0 [ 142.552719][T11217] Node 0 DMA: 1*4kB (M) 0*8kB 0*16kB 3*32kB (UM) 2*64kB (UM) 2*128kB (U) 1*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 1*4096kB (M) = 5348kB [ 142.559100][T11217] Node 0 DMA32: 953*4kB (UME) 386*8kB (UME) 75*16kB (UME) 73*32kB (UME) 34*64kB (UME) 31*128kB (UME) 13*256kB (ME) 15*512kB (UME) 6*1024kB (UM) 1*2048kB (M) 0*4096kB = 35780kB [ 142.566511][T11217] Node 1 Normal: 186*4kB (UME) 23*8kB (ME) 19*16kB (ME) 28*32kB (ME) 24*64kB (UME) 22*128kB (UME) 12*256kB (UME) 10*512kB (ME) 10*1024kB (UME) 4*2048kB (UME) 354*4096kB (UM) = 1483088kB [ 142.573815][T11217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.577275][T11217] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 142.581027][T11217] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.585107][T11217] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 142.588880][T11217] 94797 total pagecache pages [ 142.590835][T11217] 1 pages in swap cache [ 142.592593][T11217] Free swap = 124996kB [ 142.594470][T11217] Total swap = 124996kB [ 142.596286][T11217] 1048443 pages RAM [ 142.597908][T11217] 0 pages HighMem/MovableOnly [ 142.599872][T11217] 283271 pages reserved [ 142.601634][T11217] 0 pages cma reserved [ 142.672994][T11343] netlink: 'syz.4.1616': attribute type 1 has an invalid length. [ 142.691178][T11347] __nla_validate_parse: 11 callbacks suppressed [ 142.691189][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 142.697546][ T40] audit: type=1400 audit(1757614739.088:28460): avc: denied { execute } for pid=11349 comm="syz.5.1619" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 142.759050][T11356] fuse: Invalid rootmode [ 142.761842][T11356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1621'. [ 142.790764][T11362] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1623'. [ 142.850302][T11373] /dev/sg0: Can't lookup blockdev [ 142.916733][T11380] sctp: [Deprecated]: syz.4.1629 (pid 11380) Use of int in max_burst socket option deprecated. [ 142.916733][T11380] Use struct sctp_assoc_value instead [ 142.921898][T11380] sctp: [Deprecated]: syz.4.1629 (pid 11380) Use of int in max_burst socket option deprecated. [ 142.921898][T11380] Use struct sctp_assoc_value instead [ 142.930967][T11380] sctp: [Deprecated]: syz.4.1629 (pid 11380) Use of int in max_burst socket option deprecated. [ 142.930967][T11380] Use struct sctp_assoc_value instead [ 142.937198][T11380] sctp: [Deprecated]: syz.4.1629 (pid 11380) Use of int in max_burst socket option deprecated. [ 142.937198][T11380] Use struct sctp_assoc_value instead [ 142.942348][T11380] sctp: [Deprecated]: syz.4.1629 (pid 11380) Use of int in max_burst socket option deprecated. [ 142.942348][T11380] Use struct sctp_assoc_value instead [ 143.102313][T11375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 143.105891][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 143.546980][T11410] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1636'. [ 143.681925][T11433] delete_channel: no stack [ 143.683784][T11433] delete_channel: no stack [ 143.706609][T11439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1645'. [ 143.930539][T11474] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1654'. [ 143.966509][ T6053] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 143.995379][T11482] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1656'. [ 144.000857][T11482] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1656'. [ 144.114645][ T6053] usb 7-1: config 0 has no interfaces? [ 144.118013][ T6053] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 144.121040][ T6053] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.123795][ T6053] usb 7-1: Product: syz [ 144.125240][ T6053] usb 7-1: Manufacturer: syz [ 144.126806][ T6053] usb 7-1: SerialNumber: syz [ 144.129890][ T6053] usb 7-1: config 0 descriptor?? [ 144.337122][ T6053] usb 7-1: USB disconnect, device number 15 [ 144.788306][T11507] block nbd4: Attempted send on invalid socket [ 144.791697][T11507] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.797701][T11507] (syz.4.1663,11507,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 144.800306][T11507] (syz.4.1663,11507,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 144.802621][T11507] (syz.4.1663,11507,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 144.806267][T11507] (syz.4.1663,11507,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 144.870222][T11510] batman_adv: batadv0: Adding interface: ipvlan3 [ 144.872247][T11510] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.880861][T11510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.885546][T11510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.889620][T11510] batman_adv: batadv0: Interface activated: ipvlan3 [ 144.916571][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 144.916587][ T40] audit: type=1400 audit(1757614741.308:28462): avc: denied { read } for pid=11513 comm="syz.2.1665" name="cpu.stat" dev="9p" ino=35913970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 144.931119][ T40] audit: type=1400 audit(1757614741.318:28463): avc: denied { write } for pid=11513 comm="syz.2.1665" name="cpu.stat" dev="9p" ino=35913970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 144.995280][T11514] netfs: Couldn't get user pages (rc=-14) [ 145.067037][ T40] audit: type=1400 audit(1757614741.458:28464): avc: denied { ioctl } for pid=11528 comm="syz.4.1670" path="socket:[43105]" dev="sockfs" ino=43105 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.127098][T11535] fuse: root generation should be zero [ 145.134118][T11529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.178823][T11529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.206257][ T40] audit: type=1400 audit(1757614741.598:28465): avc: denied { map } for pid=11539 comm="syz.2.1674" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 145.249757][T11535] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 145.293663][ T40] audit: type=1400 audit(1757614741.688:28466): avc: denied { getopt } for pid=11547 comm="syz.1.1676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 145.300702][T11548] tmpfs: Invalid uid '0x00000000ffffffff' [ 145.385839][T11569] I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.388979][T11569] qnx4: unable to read the superblock [ 145.477422][T11583] gre0: entered allmulticast mode [ 145.654319][ T1188] wlan1: Trigger new scan to find an IBSS to join [ 146.480808][ T5978] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 146.486146][T11644] dvmrp1: entered allmulticast mode [ 146.706803][T11670] overlayfs: failed to clone upperpath [ 146.714022][ T40] audit: type=1400 audit(1757614743.108:28467): avc: denied { map } for pid=11664 comm="syz.2.1714" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 146.716470][T11671] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 146.724807][T11671] [U] J"—e:ÀÆ" [ 146.742903][T11673] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 146.807862][ T5978] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 147.844361][T11707] netlink: 'syz.4.1729': attribute type 2 has an invalid length. [ 147.847133][T11707] __nla_validate_parse: 12 callbacks suppressed [ 147.847142][T11707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'. [ 147.900076][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1733'. [ 147.973387][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 148.005750][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1738'. [ 148.009840][T11736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1738'. [ 148.016276][T11736] netlink: 'syz.1.1738': attribute type 30 has an invalid length. [ 148.099634][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1741'. [ 148.103527][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1741'. [ 148.173625][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1747'. [ 148.179415][T11762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1748'. [ 148.226193][T11772] 9pnet_virtio: no channels available for device syz [ 148.228816][T11773] 9pnet: Found fid 0 not clunked [ 148.323105][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1749'. [ 148.332812][T11779] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 148.410184][T11784] Illegal XDP return value 2070647634 on prog (id 181) dev N/A, expect packet loss! [ 148.417068][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1756'. [ 148.595418][ T40] audit: type=1326 audit(1757614744.988:28468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11808 comm="syz.5.1762" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457518eba9 code=0x7ffc0000 [ 148.606537][ T40] audit: type=1326 audit(1757614744.988:28469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11808 comm="syz.5.1762" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457518eba9 code=0x7ffc0000 [ 148.617457][ T40] audit: type=1326 audit(1757614744.988:28470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11808 comm="syz.5.1762" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f457518eba9 code=0x7ffc0000 [ 148.626871][ T40] audit: type=1326 audit(1757614744.988:28471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11808 comm="syz.5.1762" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457518eba9 code=0x7ffc0000 [ 148.674735][T11806] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 148.712686][T11814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11814 comm=syz.5.1763 [ 149.354411][T11925] netlink: 'syz.2.1782': attribute type 4 has an invalid length. [ 149.463557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 149.466216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 149.643439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 149.656635][ T5978] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 149.667076][T11947] Invalid option length (1048180) for dns_resolver key [ 149.693533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 149.713652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 149.803555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 149.908458][T11967] QAT: Device 74 not found [ 150.229815][T12001] geneve2: entered allmulticast mode [ 150.286205][T12008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12008 comm=syz.5.1808 [ 150.372469][T12019] fuse: Bad value for 'fd' [ 150.378232][T12019] fuse: Bad value for 'fd' [ 150.380593][T12019] fuse: Bad value for 'fd' [ 150.385096][T12019] fuse: Bad value for 'fd' [ 150.388930][T12019] fuse: Bad value for 'fd' [ 150.396014][T12019] fuse: Bad value for 'fd' [ 150.397705][T12019] fuse: Bad value for 'fd' [ 150.399329][T12019] fuse: Bad value for 'fd' [ 150.400977][T12019] fuse: Bad value for 'fd' [ 150.402553][T12019] fuse: Bad value for 'fd' [ 150.404639][T12019] fuse: Bad value for 'fd' [ 150.406272][T12019] fuse: Bad value for 'fd' [ 150.408419][T12019] fuse: Bad value for 'fd' [ 150.415759][T12019] fuse: Bad value for 'fd' [ 150.417823][T12019] fuse: Bad value for 'fd' [ 150.419472][T12019] fuse: Bad value for 'fd' [ 150.421175][T12019] fuse: Bad value for 'fd' [ 150.424945][T12019] fuse: Bad value for 'fd' [ 150.426562][T12019] fuse: Bad value for 'fd' [ 150.428440][T12019] fuse: Bad value for 'fd' [ 150.430023][T12019] fuse: Bad value for 'fd' [ 150.433809][T12019] fuse: Bad value for 'fd' [ 150.435419][T12019] fuse: Bad value for 'fd' [ 150.436972][T12019] fuse: Bad value for 'fd' [ 150.438533][T12019] fuse: Bad value for 'fd' [ 150.440056][T12019] fuse: Bad value for 'fd' [ 150.441628][T12019] fuse: Bad value for 'fd' [ 150.443153][T12019] fuse: Bad value for 'fd' [ 150.446752][T12019] fuse: Bad value for 'fd' [ 150.448454][T12019] fuse: Bad value for 'fd' [ 150.450706][T12019] fuse: Bad value for 'fd' [ 150.452844][T12019] fuse: Bad value for 'fd' [ 150.455197][T12019] fuse: Bad value for 'fd' [ 150.538180][T12030] tmpfs: Bad value for 'mpol' [ 150.571011][T12032] netlink: 'syz.1.1817': attribute type 62 has an invalid length. [ 150.613738][T11872] wlan1: Trigger new scan to find an IBSS to join [ 150.740139][T12042] overlayfs: failed to clone upperpath [ 150.877580][ T5978] Bluetooth: hci0: unexpected event for opcode 0x200b [ 150.895085][ T5978] Bluetooth: hci0: unexpected event for opcode 0x200b [ 150.983246][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 150.988894][ T40] audit: type=1400 audit(1757614747.368:28506): avc: denied { accept } for pid=12058 comm="syz.2.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.492513][T12090] netlink: 'syz.1.1840': attribute type 10 has an invalid length. [ 151.500738][T12090] netlink: 'syz.1.1840': attribute type 10 has an invalid length. [ 151.601649][T12101] sock: sock_timestamping_bind_phc: sock not bind to device [ 151.756285][ T12] wlan1: Creating new IBSS network, BSSID 3e:ea:1e:5a:6e:0b [ 151.786580][T12112] tipc: Started in network mode [ 151.793950][T12112] tipc: Node identity 080211000001, cluster identity 4711 [ 151.812864][T12112] tipc: Enabled bearer , priority 0 [ 151.861428][ C1] ------------[ cut here ]------------ [ 151.863476][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 151.866794][ C1] WARNING: CPU: 1 PID: 6075 at net/mac80211/rate.c:398 __rate_control_send_low+0x661/0x780 [ 151.869869][ C1] Modules linked in: [ 151.871200][ C1] CPU: 1 UID: 0 PID: 6075 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 151.875987][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.879306][ C1] Workqueue: events debugfs_reap_work [ 151.881125][ C1] RIP: 0010:__rate_control_send_low+0x661/0x780 [ 151.883056][ C1] Code: a4 a0 d4 00 00 00 e8 5e 97 b1 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 80 02 09 8d e8 60 3a 70 f6 90 <0f> 0b 90 90 e9 26 fd ff ff 48 8b 3c 24 e8 6d f6 17 f7 e9 fb fc ff [ 151.889083][ C1] RSP: 0018:ffffc900006a0930 EFLAGS: 00010282 [ 151.890986][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 151.893492][ C1] RDX: ffff88802665c880 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 151.895968][ C1] RBP: ffff8880319b7a68 R08: 0000000000000001 R09: 0000000000000000 [ 151.898424][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 151.900887][ C1] R13: 0000000000000000 R14: 000000000000000c R15: ffff8880319b7a70 [ 151.903368][ C1] FS: 0000000000000000(0000) GS:ffff8880d67b3000(0000) knlGS:0000000000000000 [ 151.906206][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.908254][ C1] CR2: 00007ffd52045f6f CR3: 0000000048160000 CR4: 0000000000352ef0 [ 151.910715][ C1] Call Trace: [ 151.911775][ C1] [ 151.912711][ C1] rate_control_send_low+0x29a/0x820 [ 151.914409][ C1] ? trace_kmem_cache_alloc+0x28/0xc0 [ 151.916121][ C1] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 151.918022][ C1] rate_control_get_rate+0x1be/0x5e0 [ 151.919673][ C1] ieee80211_beacon_get_finish+0x467/0x670 [ 151.921505][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 151.923524][ C1] __ieee80211_beacon_get+0xc56/0x1e40 [ 151.925260][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 151.926818][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 151.928546][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 151.930483][ C1] mac80211_hwsim_beacon_tx+0x4d9/0xa40 [ 151.932222][ C1] __iterate_interfaces+0x2e2/0x650 [ 151.933921][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 151.935789][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 151.937667][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 151.939449][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 151.941606][ C1] mac80211_hwsim_beacon+0x105/0x200 [ 151.943246][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 151.945042][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 151.946788][ C1] ? read_tsc+0x9/0x20 [ 151.948101][ C1] hrtimer_run_softirq+0x17d/0x350 [ 151.949699][ C1] handle_softirqs+0x219/0x8e0 [ 151.951157][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 151.952813][ C1] __irq_exit_rcu+0x109/0x170 [ 151.954305][ C1] irq_exit_rcu+0x9/0x30 [ 151.955683][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 151.957451][ C1] [ 151.958395][ C1] [ 151.959327][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 151.961219][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 151.962847][ C1] Code: f6 3e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 99 13 0f 0f 82 74 02 00 00 8b 35 da ca 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 79 f6 3e 12 0f 85 c7 02 00 00 48 83 c4 [ 151.968865][ C1] RSP: 0018:ffffc90003ed79f0 EFLAGS: 00000206 [ 151.970780][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c15a0 RCX: 000000007657733e [ 151.973317][ C1] RDX: 0000000000000000 RSI: ffffffff8de2d658 RDI: ffffffff8c163000 [ 151.975807][ C1] RBP: 0000000000000002 R08: 2d0c4f44341cb26c R09: 0000000000000000 [ 151.978309][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 151.980783][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.983344][ C1] ? __bpf_trace_cfg80211_assoc_comeback+0xe6/0x140 [ 151.985449][ C1] mntput_no_expire+0xa7/0xd30 [ 151.986961][ C1] ? mntput_no_expire+0x93/0xd30 [ 151.988528][ C1] ? __pfx_mntput_no_expire+0x10/0x10 [ 151.990210][ C1] ? find_held_lock+0x2b/0x80 [ 151.991723][ C1] mntput+0x6b/0x90 [ 151.992955][ C1] __simple_recursive_removal+0x158/0x610 [ 151.994793][ C1] ? __pfx_remove_one+0x10/0x10 [ 151.996398][ C1] debugfs_remove+0x5d/0x80 [ 151.997846][ C1] debugfs_reap_work+0xc3/0x1f0 [ 151.999394][ C1] ? __pfx_debugfs_reap_work+0x10/0x10 [ 152.001119][ C1] ? rcu_is_watching+0x12/0xc0 [ 152.002640][ C1] process_one_work+0x9cc/0x1b70 [ 152.004270][ C1] ? __pfx_process_one_work+0x10/0x10 [ 152.006000][ C1] ? assign_work+0x1a0/0x250 [ 152.007467][ C1] worker_thread+0x6c8/0xf10 [ 152.008944][ C1] ? __kthread_parkme+0x19e/0x250 [ 152.010528][ C1] ? __pfx_worker_thread+0x10/0x10 [ 152.012143][ C1] kthread+0x3c2/0x780 [ 152.013505][ C1] ? __pfx_kthread+0x10/0x10 [ 152.014969][ C1] ? rcu_is_watching+0x12/0xc0 [ 152.016520][ C1] ? __pfx_kthread+0x10/0x10 [ 152.017996][ C1] ret_from_fork+0x56a/0x730 [ 152.019463][ C1] ? __pfx_kthread+0x10/0x10 [ 152.020937][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.022459][ C1] [ 152.023508][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 152.025785][ C1] CPU: 1 UID: 0 PID: 6075 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 152.028670][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.031991][ C1] Workqueue: events debugfs_reap_work [ 152.033697][ C1] Call Trace: [ 152.034762][ C1] [ 152.035715][ C1] dump_stack_lvl+0x3d/0x1f0 [ 152.037197][ C1] vpanic+0x6e8/0x7a0 [ 152.038464][ C1] ? __pfx_vpanic+0x10/0x10 [ 152.039897][ C1] ? __rate_control_send_low+0x661/0x780 [ 152.041660][ C1] panic+0xca/0xd0 [ 152.042852][ C1] ? __pfx_panic+0x10/0x10 [ 152.044272][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 152.045957][ C1] check_panic_on_warn+0xab/0xb0 [ 152.047514][ C1] __warn+0xf6/0x3c0 [ 152.048757][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 152.050337][ C1] ? __rate_control_send_low+0x661/0x780 [ 152.052096][ C1] report_bug+0x3c3/0x580 [ 152.053468][ C1] ? __rate_control_send_low+0x661/0x780 [ 152.055224][ C1] handle_bug+0x184/0x210 [ 152.056600][ C1] exc_invalid_op+0x17/0x50 [ 152.058055][ C1] asm_exc_invalid_op+0x1a/0x20 [ 152.059582][ C1] RIP: 0010:__rate_control_send_low+0x661/0x780 [ 152.061536][ C1] Code: a4 a0 d4 00 00 00 e8 5e 97 b1 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 80 02 09 8d e8 60 3a 70 f6 90 <0f> 0b 90 90 e9 26 fd ff ff 48 8b 3c 24 e8 6d f6 17 f7 e9 fb fc ff [ 152.067516][ C1] RSP: 0018:ffffc900006a0930 EFLAGS: 00010282 [ 152.069636][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 152.072100][ C1] RDX: ffff88802665c880 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 152.074564][ C1] RBP: ffff8880319b7a68 R08: 0000000000000001 R09: 0000000000000000 [ 152.077063][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 152.079520][ C1] R13: 0000000000000000 R14: 000000000000000c R15: ffff8880319b7a70 [ 152.082031][ C1] ? __warn_printk+0x198/0x350 [ 152.083540][ C1] ? __warn_printk+0x1a5/0x350 [ 152.085109][ C1] rate_control_send_low+0x29a/0x820 [ 152.086890][ C1] ? trace_kmem_cache_alloc+0x28/0xc0 [ 152.088591][ C1] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 152.090484][ C1] rate_control_get_rate+0x1be/0x5e0 [ 152.092149][ C1] ieee80211_beacon_get_finish+0x467/0x670 [ 152.094011][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 152.096049][ C1] __ieee80211_beacon_get+0xc56/0x1e40 [ 152.097764][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 152.099330][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 152.101053][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 152.102981][ C1] mac80211_hwsim_beacon_tx+0x4d9/0xa40 [ 152.104739][ C1] __iterate_interfaces+0x2e2/0x650 [ 152.106380][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.108306][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 152.110253][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 152.112107][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 152.114292][ C1] mac80211_hwsim_beacon+0x105/0x200 [ 152.115997][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 152.117644][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 152.119423][ C1] ? read_tsc+0x9/0x20 [ 152.120727][ C1] hrtimer_run_softirq+0x17d/0x350 [ 152.122412][ C1] handle_softirqs+0x219/0x8e0 [ 152.124314][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 152.126102][ C1] __irq_exit_rcu+0x109/0x170 [ 152.127582][ C1] irq_exit_rcu+0x9/0x30 [ 152.128947][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 152.130703][ C1] [ 152.131649][ C1] [ 152.132605][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 152.134473][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 152.136147][ C1] Code: f6 3e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 99 13 0f 0f 82 74 02 00 00 8b 35 da ca 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 79 f6 3e 12 0f 85 c7 02 00 00 48 83 c4 [ 152.142790][ C1] RSP: 0018:ffffc90003ed79f0 EFLAGS: 00000206 [ 152.144695][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c15a0 RCX: 000000007657733e [ 152.147165][ C1] RDX: 0000000000000000 RSI: ffffffff8de2d658 RDI: ffffffff8c163000 [ 152.149632][ C1] RBP: 0000000000000002 R08: 2d0c4f44341cb26c R09: 0000000000000000 [ 152.152099][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 152.154558][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.157069][ C1] ? __bpf_trace_cfg80211_assoc_comeback+0xe6/0x140 [ 152.159121][ C1] mntput_no_expire+0xa7/0xd30 [ 152.160630][ C1] ? mntput_no_expire+0x93/0xd30 [ 152.162188][ C1] ? __pfx_mntput_no_expire+0x10/0x10 [ 152.163856][ C1] ? find_held_lock+0x2b/0x80 [ 152.165346][ C1] mntput+0x6b/0x90 [ 152.166555][ C1] __simple_recursive_removal+0x158/0x610 [ 152.168332][ C1] ? __pfx_remove_one+0x10/0x10 [ 152.169897][ C1] debugfs_remove+0x5d/0x80 [ 152.171335][ C1] debugfs_reap_work+0xc3/0x1f0 [ 152.172885][ C1] ? __pfx_debugfs_reap_work+0x10/0x10 [ 152.174599][ C1] ? rcu_is_watching+0x12/0xc0 [ 152.176136][ C1] process_one_work+0x9cc/0x1b70 [ 152.177707][ C1] ? __pfx_process_one_work+0x10/0x10 [ 152.179396][ C1] ? assign_work+0x1a0/0x250 [ 152.180863][ C1] worker_thread+0x6c8/0xf10 [ 152.182332][ C1] ? __kthread_parkme+0x19e/0x250 [ 152.183923][ C1] ? __pfx_worker_thread+0x10/0x10 [ 152.185550][ C1] kthread+0x3c2/0x780 [ 152.186842][ C1] ? __pfx_kthread+0x10/0x10 [ 152.188312][ C1] ? rcu_is_watching+0x12/0xc0 [ 152.189827][ C1] ? __pfx_kthread+0x10/0x10 [ 152.191292][ C1] ret_from_fork+0x56a/0x730 [ 152.192760][ C1] ? __pfx_kthread+0x10/0x10 [ 152.194221][ C1] ret_from_fork_asm+0x1a/0x30 [ 152.195778][ C1] [ 152.197639][ C1] Kernel Offset: disabled [ 152.199158][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:19:08 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff88802b4d9580 RCX=1ffffffff215748a RDX=1ffff1100569b3b0 RSI=ffffffff815e9201 RDI=ffff88802b4d9d80 RBP=0000000000000000 RSP=ffffc9000367e918 R8 =0000000000000000 R9 =ffffed100569b3c6 R10=ffff88802b4d9e33 R11=0000000000000000 R12=ffff8880372ba9a0 R13=ffff88803f018558 R14=ffff88806a43a300 R15=0000000000000000 RIP=ffffffff815e9253 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f379e95e6c0 ffffffff 00c00000 GS =0000 ffff8880d66b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f379e97eff8 CR3=000000002d4a6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd52043ce6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd52043ce6 00007ffd52043cec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dc12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dc12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dc12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dc12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dc12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dc12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dda74a8 00007f379dda74a0 00007f379dda7498 00007f379dda7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379e90d100 00007f379dda7460 00007f379dda7478 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dda74b8 00007f379dda74b0 00007f379dda74a8 00007f379dda74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85648ef5 RDI=ffffffff9b1170a0 RBP=ffffffff9b117060 RSP=ffffc900006a02a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000074 R14=ffffffff9b117060 R15=ffffffff85648e90 RIP=ffffffff85648f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd52045f6f CR3=0000000048160000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1bf7aec0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1bf7b046 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1bf7b046 00007ffd1bf7b04c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facaa612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facaa612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facaa612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facaa612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facaa612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facaa612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=dffffc0000000000 RCX=ffffffff8df61e90 RDX=1ffff110056dc416 RSI=1ffffffff1bec3d2 RDI=ffffffff8df61e90 RBP=0000000000000002 RSP=ffffc90003f97330 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000003 R11=0000000000000000 R12=0000607e25dd5d00 R13=0000000000000002 R14=0000607e25dd5d00 R15=1ffffffff2156e4d RIP=ffffffff822a5876 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002280 CR3=00000000573fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00696669775f7472 69765f3168746576 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1bf7b046 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1bf7b046 00007ffd1bf7b04c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facaa612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facaa612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facaa612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facaa612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facaa612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007facaa612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffffffffffff RBX=00007f379ddd5fa0 RCX=ffffffffffffffa8 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=00007f379dc11e19 RSP=00007f379e97eff0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000246 R12=0000000000000000 R13=00007f379ddd6038 R14=00007f379ddd5fa0 R15=00007ffd520437d8 RIP=00007f379da548f6 RFL=00000286 [--S--P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f379e97f6c0 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f72beb056c0 CR3=00000000471a3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000e0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd52043ce6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd52043ce6 00007ffd52043cec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dc12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dc12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dc12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dc12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dc12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dc12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dda74a8 00007f379dda74a0 00007f379dda7498 00007f379dda7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379e90d100 00007f379dda7460 00007f379dda7478 00007f379dda74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f379dda74b8 00007f379dda74b0 00007f379dda74a8 00007f379dda74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000