last executing test programs: 4m50.377563564s ago: executing program 1 (id=738): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x18, 0x301, 0x270bd24, 0x25dfdbfa, {0xf}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4m50.376403814s ago: executing program 1 (id=740): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x3, 0x1}]}}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x7, 0x401}, @generic={0x5, 0xc, "97134cb6ce50e935f628"}, @md5sig={0x13, 0x12, "87bc7875c06531ac8010bbdf64bb797a"}, @exp_fastopen={0xfe, 0xf, 0xf989, "5d7d0438043979a6eef50c"}]}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) 4m50.287348551s ago: executing program 1 (id=741): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="58010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3a01330080000000ffffffffffff080211000000505050505050d63fdceb8e8391b8931000000000000100"], 0x158}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 4m50.286735682s ago: executing program 1 (id=743): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x8140, 0x2416f8ee72cd76cb) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001500010300000000000000000a00"], 0x14}, 0x1, 0x0, 0x0, 0x4008085}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x4000000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180), 0x4000, &(0x7f0000000200)={[{@metacopy_on}, {@xino_off}, {@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './bus'}}], [{@context={'context', 0x3d, 'user_u'}}]}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xe1) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x3, 0x1, &(0x7f0000000100)="81", 0x9, 0xb, 0x4f3, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) 4m50.047856846s ago: executing program 1 (id=747): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)}], 0x1}, 0x240480c3) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2c, 0x3}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) 4m49.608341415s ago: executing program 1 (id=752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="58010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3a01330080000000ffffffffffff080211000000505050505050d63fdceb8e8391b8931000000000000100dd"], 0x158}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 4m49.560079217s ago: executing program 32 (id=752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="58010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3a01330080000000ffffffffffff080211000000505050505050d63fdceb8e8391b8931000000000000100dd"], 0x158}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 3m21.613167036s ago: executing program 4 (id=1849): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000040)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffffffffffffff, "a0ab5e2e2b0d6d7dd63728aff562b127b9a30700a4bff31c4b35ac5317bec410", 0x0, 0x4, 0x1000, 0x1ff}, 0x3c) socket$igmp(0x2, 0x3, 0x2) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0xa) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x3, r0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000180)=0x7f, 0x4) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) socket$igmp(0x2, 0x3, 0x2) setxattr$incfs_id(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)={'0000000000000000000000000000000', 0x33}, 0x20, 0x2) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000340)={0x1000, 0x9000, 0x9, 0x1, 0x9}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000380)) getpeername$unix(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) write$input_event(r0, &(0x7f0000000480)={{0x0, 0xea60}, 0x1f, 0x1, 0xfffffff8}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x2b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x3) r5 = dup2(r1, r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe, 0x38}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000840)={'\x00', 0x8000, 0x1, 0xfffffff7, 0xfffffffffffffff9, 0x4, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x804) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000a40), r0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008805}, 0x20040000) 3m21.527585045s ago: executing program 4 (id=1850): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r2, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) syz_emit_vhci(&(0x7f0000003980)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc8}}}, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r3 = epoll_create1(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x2}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 3m20.597348083s ago: executing program 4 (id=1861): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620af3fef8ffffff71a400fe000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0a"], 0x0, 0x2}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffc72, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x28}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) 3m20.517537283s ago: executing program 4 (id=1863): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'ip6erspan0\x00', {0x2}, 0x8}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'macsec0\x00', {0x7}, 0x6}) 3m20.465565905s ago: executing program 4 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001280)={0x64, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x86c}, {0x8, 0xb, 0x7c91}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x10000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvmsg(r3, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x3) (async) recvmsg(r3, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x3) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000104a5bbe55059cbba842cf52e003f2cfa8010dcb668cad6f4a52d277ecc405eef3fed19f97b5c93151817e28f3512f67c05a403d2cff2f17acd848b273c6a0cea80b0e8abea34dc54ee9d70e5300abd13c0c45c6dee0715155c455f23a36e8b2c43ef902c2ccbd34392e8d0db6eef28b6f4111cd4c8e908e6d2f2032b9a19b6ddf73ce6ee83", @ANYRES32, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@gettaction={0x44, 0x32, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x84) 3m20.406348489s ago: executing program 4 (id=1868): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a3200005fd3c22fb965f409e2547e62bc000008000180fffffffc080001400000000014000000110001"], 0x7c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x33}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000000840)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0xb54, 0xffff070d}}], 0x20, 0xd0}], 0x1, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) inotify_init() write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 3m20.355114381s ago: executing program 33 (id=1868): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a3200005fd3c22fb965f409e2547e62bc000008000180fffffffc080001400000000014000000110001"], 0x7c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x33}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000000840)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0xb54, 0xffff070d}}], 0x20, 0xd0}], 0x1, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) inotify_init() write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m49.246624567s ago: executing program 2 (id=2253): ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x3}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x8}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x8}]}}}]}, 0x54}}, 0x0) 2m49.155193715s ago: executing program 2 (id=2254): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000084}, 0x40004) (async) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) timer_create(0x0, 0x0, &(0x7f0000000100)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x2000, 0x0, 0x2d}, 0x18) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x80a0000, 0x118000}) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) (async) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086201, &(0x7f0000000040)=0x6) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000300)={0xdddd0000, 0x107000, 0x1}) (async) r9 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) (async) ioctl$KVM_NMI(r11, 0xae9a) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2m49.046530701s ago: executing program 2 (id=2257): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00'}) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r2, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x80000000e) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1b, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x4}}]}, 0x24}}, 0x0) io_uring_enter(r0, 0x5f75, 0xd146, 0x24, &(0x7f0000000040)={[0x800]}, 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16, @ANYBLOB="05002abd70"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m48.995562992s ago: executing program 2 (id=2259): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'vxcan1\x00', {0x1}, 0x4}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e20, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0x401, 0x7f, 0x9, 0x6, 0x0, 0x4}, &(0x7f0000000180)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x1}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x200}) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x200}) r4 = accept(r0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000300)=0x80) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x16}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1162}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3c10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) accept4$packet(r4, 0x0, &(0x7f00000004c0), 0x0) (async) r5 = accept4$packet(r4, 0x0, &(0x7f00000004c0), 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000540)=0x2) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000580)={0x7, r0, 0x8, {0xffff, 0x8}, 0x49}, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f00000005c0)={@broadcast, @initdev={0xac, 0x1e, 0xf8, 0x0}, @empty}, 0xc) timer_create(0x7, &(0x7f0000000600), &(0x7f0000000640)) (async) timer_create(0x7, &(0x7f0000000600), &(0x7f0000000640)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000680)={0x3, 'veth1_macvtap\x00', {0x1ff}, 0x8}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000680)={0x3, 'veth1_macvtap\x00', {0x1ff}, 0x8}) r6 = fsopen(&(0x7f00000006c0)='sysv\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x18, 0x1409, 0x8, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x18, 0x1409, 0x8, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x138, 0xb, 0x6, 0x5, 0x0, 0x0, {0xe, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xdf1b}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x100000000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}]}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x581c}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xa18}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x138}, 0x1, 0x0, 0x0, 0xc810}, 0x20000010) (async) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x138, 0xb, 0x6, 0x5, 0x0, 0x0, {0xe, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xdf1b}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x100000000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}]}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x581c}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xa18}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x138}, 0x1, 0x0, 0x0, 0xc810}, 0x20000010) getsockopt$packet_buf(r4, 0x107, 0x1, &(0x7f0000000a00)=""/185, &(0x7f0000000ac0)=0xb9) (async) getsockopt$packet_buf(r4, 0x107, 0x1, &(0x7f0000000a00)=""/185, &(0x7f0000000ac0)=0xb9) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000b00), 0x40040, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000b40)={r6}) r8 = syz_open_dev$usbmon(&(0x7f0000000b80), 0x8000, 0xc00) ioctl$MON_IOCG_STATS(r8, 0x80089203, &(0x7f0000000bc0)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c00), 0x200000, 0x0) (async) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c00), 0x200000, 0x0) ioctl$CDROM_DISC_STATUS(r9, 0x5327) (async) ioctl$CDROM_DISC_STATUS(r9, 0x5327) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000c40)={0xffff8000, 0xfffffff8, 0x5}) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r10, 0x4008af00, &(0x7f0000000cc0)=0x8000000) socket(0xa, 0x3, 0x7) 2m48.917489152s ago: executing program 2 (id=2260): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x8aa01, 0x118) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000002540)={0x18, 0x1, 0x0, {0x5}}, 0x18) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r1, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0xa, 0x2, 0x1, 0xda, 0x0, 0x16, 0x23, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa1, 0x4}, 0xe) setgroups(0x41, 0xfffffffffffffffe) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2m48.790525666s ago: executing program 2 (id=2262): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x1c, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x141a82, 0x12) r6 = dup(r5) sendfile(r6, r5, 0x0, 0x8000fffffffe) sendfile(r3, r3, 0x0, 0x8000002) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000480)={0x2f}, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000200)={0x89}, 0x8) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="ad43000000003aaa1d7a13", @ANYRESHEX=r3, @ANYRES8=r2], 0x14}}, 0x40010) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f00000004c0)={0x7, @pix_mp={0x27, 0x7, 0x31435750, 0x0, 0x7, [{0x4, 0x7ff}, {0x8, 0xffffffff}, {0x58, 0xd}, {0xdde0, 0x10}, {0x674, 0xe8aa}, {0x0, 0x2}, {0x9, 0x8}, {0x7, 0x41a1}], 0x78, 0x5, 0x7}}) 2m33.883436547s ago: executing program 34 (id=2262): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x1c, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x141a82, 0x12) r6 = dup(r5) sendfile(r6, r5, 0x0, 0x8000fffffffe) sendfile(r3, r3, 0x0, 0x8000002) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000480)={0x2f}, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000200)={0x89}, 0x8) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="ad43000000003aaa1d7a13", @ANYRESHEX=r3, @ANYRES8=r2], 0x14}}, 0x40010) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f00000004c0)={0x7, @pix_mp={0x27, 0x7, 0x31435750, 0x0, 0x7, [{0x4, 0x7ff}, {0x8, 0xffffffff}, {0x58, 0xd}, {0xdde0, 0x10}, {0x674, 0xe8aa}, {0x0, 0x2}, {0x9, 0x8}, {0x7, 0x41a1}], 0x78, 0x5, 0x7}}) 2m10.246371888s ago: executing program 3 (id=2593): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb011552f436042a", 0x2a}], 0x1) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="d8decb840000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0xd462) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x10001, 0x8, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101602, 0x0) fallocate(r2, 0x1, 0x0, 0x140000804000004) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000200)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x2, 0x1, 0x2, 0x1}}, 0x26) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f00000002c0)='./file1\x00', 0xc001, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r7 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x20000) ioctl$IOC_PR_REGISTER(r7, 0x401870c8, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) sendmmsg$inet6(r6, &(0x7f0000001780)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x38}}, 0x1c, 0x0}}], 0x1, 0xc040) sendto$inet6(r6, 0x0, 0x0, 0x4000000, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 2m8.847258623s ago: executing program 3 (id=2602): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="834d2b68737e381f508580474667437afa6419d87a7b653dcddc108d8f9c2f823201d90f938d43db2df8edcc4f2cbfd5c5bdad337941fa17aedbe850a705b346053eb8a2984b35dff07511ee8bddaa1f05fe4ad553bf61f9ee6cc30a78e1300a8e6e77e13d7d24ff60aaa62d19e6111e425f42a59ab6610f2c3f18187c2be6", 0x7f}], 0x1}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010101}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x40}]}}}]}, 0x40}}, 0x0) 2m8.78706114s ago: executing program 3 (id=2603): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x6d, 0x0, 0xfd, 0xc, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x6d, 0x0, 0xfd, 0xc, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030043030302c757365725f69643d6592c23d98e65c84c4540a81202712ed9e0f1f34e400a303384f979bf4937112d751da3a42727f91f5222abc76783630b7911e7a1cb4b2a528f0a13e7cc7c8d35596afbd9b6228d36b175c83404006bfb59c373f737fd599edd7c2a8d97b8ff0b9f54ab6f80773eb2ae891adfc82f640b180b1e2d607730d4839b4519d5efcfc735ebadc568ac37737d21f4be3a3e3ede53b7b0000000000000000000000000000e312c9d0be246055feba8b2b8c74bc977fa8c07e6fe526049407a0cbd789363f97fbbd45b255886e93ceceadc9ffcd1846156e2c", @ANYBLOB="79157a566d75e7d61ff8a54a3bb235fb0de27070ec0bc70d33cecca5501fb67d324588d3e0a5862b819c6fdc8facea58772fffb338af0c969147bfe98366480a59157373a5047f176690c0d9fb855c777679b6ce8c5dff216d7d1fd43b96bacc223eada3", @ANYBLOB=',group_id=', @ANYRES16=r1]) syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000004c0)={0x50, 0x0, 0x4, {0x7, 0x29, 0x1, 0x10089080, 0xdd6, 0x400, 0x9, 0x20000c00, 0x0, 0x0, 0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000004c0)={0x50, 0x0, 0x4, {0x7, 0x29, 0x1, 0x10089080, 0xdd6, 0x400, 0x9, 0x20000c00, 0x0, 0x0, 0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x46c1c000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008000840000000000800174000000004050005000a000000050001000700000005000400000000000900020073513d31000000000d0003006c6973743a736574"], 0x5c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x6860, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x6860, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r7, r8, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000440)=[0x0]) keyctl$chown(0x4, 0x0, r7, r9) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x4}}, 0x30) 2m8.646978593s ago: executing program 3 (id=2604): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2m8.646667248s ago: executing program 3 (id=2605): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b40)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x38, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x8}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}, @TCA_RED_MAX_P={0x8, 0x3, 0x2}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000ac0)={0x1, 0x0, @raw_data=[0xdc, 0x8000, 0x7f, 0x3c000, 0x80, 0x2, 0x9, 0x2, 0x6d, 0x7, 0x97, 0x7fffffff, 0x1000, 0x604b, 0x2, 0x200000]}) (async) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f0000000340)=[{0x80000000}], 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000300)={r4, 0x0, 0x0}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000c40)={0x0, &(0x7f0000000a80)}, 0x10) (async, rerun: 64) r6 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x8, 0x101}}]}, {0x4}, {0x52, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x101c00, 0x0) socket$unix(0x1, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) (async) clock_gettime(0x0, &(0x7f0000000a00)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000980), 0x0, 0x10000, &(0x7f0000000a40)={r11, r12+10000000}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000ec0)={'gretap0\x00', &(0x7f0000000e40)={'syztnl1\x00', r8, 0x1, 0x8, 0x77fa, 0x6, {{0x10, 0x4, 0x1, 0x9, 0x40, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x2b, 0xae, [@private=0xa010100, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, @multicast1, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x44}, @empty, @empty]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000f40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000003300)=ANY=[@ANYBLOB="7c040000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="ec00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400070000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="8000028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000002000008000600", @ANYRES32=r8, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=r8, @ANYBLOB="fc00028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r8, @ANYBLOB="44000100240001006d6f6065000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r13, @ANYBLOB="b4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000f00000008000600", @ANYRES16=r5, @ANYBLOB="38000100240001006d636173745f7265006f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000038000100240001006d636173060000006a6f696e5f636f756e7400000000000000000000e2070d0a0500030003000000080004000002000008000100", @ANYRES32=r8, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES8=r5, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004001000000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000004000008000600", @ANYRES32=r13, @ANYBLOB], 0x47c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) mq_unlink(&(0x7f0000000a80)='$.\'}\'}\\]\x00') sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fddbdf2502000000080061000a000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x10) 2m8.357567475s ago: executing program 3 (id=2606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf251000000008003b000300000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x18, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@typed={0x4}]}, 0x18}}, 0x0) 2m8.327062234s ago: executing program 35 (id=2606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf251000000008003b000300000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x18, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@typed={0x4}]}, 0x18}}, 0x0) 5.667390978s ago: executing program 6 (id=3822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f00000001c0)=0x8, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES32=r1, @ANYRES16=r0, @ANYRESHEX], 0x7c}}, 0x0) r2 = gettid() mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0x560c89bb) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r9, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) write$binfmt_misc(r11, &(0x7f0000000980), 0xfdef) splice(r7, 0x0, r11, 0x0, 0x7, 0x4) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r12 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r12, 0x40044103, &(0x7f0000000000)=0x2) pipe2$watch_queue(0x0, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYRES32=r0], 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x20008000) 5.607542277s ago: executing program 0 (id=3825): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = syz_io_uring_setup(0xb7f, &(0x7f00000003c0)={0x0, 0x38ab, 0x0, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000000307010300000000000000000500000d090001"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4044010) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="84020201"], 0x18) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r6 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x82842) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r6, 0xb) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) shmctl$SHM_UNLOCK(r6, 0xc) r7 = syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) r9 = syz_io_uring_setup(0x28c, &(0x7f0000000300)={0x0, 0xee5c, 0x801, 0x0, 0x26, 0x0, r7}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r11, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f900f500140601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002fffe90780000ab6cfcf9c5dd980de8f6bcb6b8677d9395efe1e203"], 0x0) syz_io_uring_submit(r10, r8, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r9, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x40, &(0x7f0000000100)=0x40, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r3, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x4001}}) 5.547459743s ago: executing program 0 (id=3826): restart_syscall() restart_syscall() restart_syscall() restart_syscall() restart_syscall() r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl(r0, 0x571e, &(0x7f0000000040)="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") restart_syscall() r1 = syz_open_dev$audion(&(0x7f0000000140), 0x4ab0, 0x400) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x682401, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000200)={0x8, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000240)={r2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000280)={r2, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000002c0)={r4}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) recvmsg$can_raw(r1, &(0x7f0000002740)={&(0x7f0000000300)=@rc={0x1f, @none}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/218, 0xda}, {&(0x7f0000001480)=""/25, 0x19}, {&(0x7f00000014c0)=""/60, 0x3c}, {&(0x7f0000001500)=""/134, 0x86}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x6, &(0x7f0000002640)=""/245, 0xf5}, 0x2043) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000002780)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000027c0)) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002800)=[0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000002880)={0x0, r5, 0x8d89e9a09878eb51, 0x3, 0x8}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000028c0)=[@in6={0xa, 0x4e23, 0xca, @remote}, @in6={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffff0d6}, @in6={0xa, 0x4e24, 0x3d5, @loopback, 0x1}], 0x54) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000002940)={@in6={{0xa, 0x4e20, 0x96ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xea1d}}, 0x0, 0x0, 0x27, 0x0, "a45ca2653856a231138163fe3403e600a777c32456c195af4b43377b213a0cf29cc7319ff4e5f8d089583310cbc49f1b93cb17f6321ae4a13bb20edaee73cc3432d3d0368f2b9e1b4cc5d04b4be6d5ee"}, 0xd8) socket$nl_generic(0x10, 0x3, 0x10) restart_syscall() restart_syscall() sendmsg$netlink(r1, &(0x7f0000002ac0)={&(0x7f0000002a40)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc, &(0x7f0000002a80), 0x0, 0x0, 0x0, 0x20}, 0x2004c000) restart_syscall() restart_syscall() 5.547080424s ago: executing program 0 (id=3827): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8949, &(0x7f0000000100)={'vlan0\x00', @ifru_names='pim6reg1\x00'}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) syz_usb_disconnect(r0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x7, 0x1, 0x2, 0x6f, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x1, 0x6, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}}]}}]}}, &(0x7f0000000200)={0x4a, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0xef, 0x0}, {0x4, &(0x7f0000000280)=@lang_id={0x0, 0x3, 0x402}}, {0x0, &(0x7f0000000000)=@lang_id={0x0, 0x3, 0x42f}}, {0x0, &(0x7f00000000c0)=@lang_id={0x0, 0x3, 0x407}}, {0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003a3dbb54d66a3a41a675a026b36e06fd4cda35b0600bde2ceebcd574f1847226e16fdb8b59a4614bcdbb9a3623119a10a86fe25878ccdd68acf04ffe53c477239de9046bb92e6733d7f462e1168"]}, {0x0, &(0x7f0000000080)=@string={0x0, 0x3, "c2e1d50e8bf31a910c04514cd4f2f4b1cfd6311f"}}]}) 4.897822942s ago: executing program 5 (id=3834): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x80000, 0x8) read$char_usb(r2, &(0x7f0000000040)=""/169, 0xa9) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f00000023c0)={0x2, 0x4e24, @broadcast}, 0x10) r5 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r5, 0x81000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r6, 0x1, 0x3, 0x0, &(0x7f0000000640)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x7c, 0xffffffffffffffff, {0x200001040000002}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRES16=r3, @ANYRES32=r3, @ANYBLOB="d13a3134dddb7c10b68b431319f1216261ecde4ca648bb06ec35e32f466685a8443c1bb12c1e9ffed4ecd12210b8de9bb0b410dfd6d2dca47ed19de9c1aa4b40a565e15e356f7e5b03493f881547ad5d815d7c924b767c5980e621ff2104bd5e513b4c192eed961e0eb7e99ceb573812a2598cb587609fea5c6391731c49d66ec83f57a64a39f8845a5011cac761f177925245cfff08aba5ba2aaa0a791d7e1e75ac951b6b24edbc75f4f2a46b82ae2ac86999f0d6b9814311f92ffd28a7bebdf11fea4b1ba3208f1168058ed705f6749443ed35e0eed75457b5875e790fcba82f75ff775909e69667"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 4.891665139s ago: executing program 5 (id=3835): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xbd9e, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x3, 0x6000, 0x0, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x10248ca4, 0x40, 0x53, 0x0, 0x1, 0x0, 0x0, 0x10, 0x7fffffff}}, 0x50) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86) write$6lowpan_enable(r6, &(0x7f0000000100)='0', 0x1) accept4$unix(r6, &(0x7f0000000040)=@abs, &(0x7f00000002c0)=0x6e, 0x80800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r7, 0x40044d0e, 0x200000000005) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae00000066000000000000001600000000000026617662230f009500"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) listen(0xffffffffffffffff, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) 3.978286149s ago: executing program 5 (id=3839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000010800034000000014080002400000000208000440000000150900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x810}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x5) 3.977975333s ago: executing program 5 (id=3840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r6, 0x104, 0x4, &(0x7f0000000080)=0x3, 0x4) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000340)={0x53, 0x6, 0x106, 0x8, @buffer={0x0, 0x8d, &(0x7f0000000500)=""/141}, &(0x7f00000005c0)="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", 0x0, 0x2, 0x2, 0x4, 0x0}) pipe2$watch_queue(&(0x7f00000001c0), 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r2, 0xb01}, 0x14}}, 0x40810) 3.547533099s ago: executing program 7 (id=3846): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="00000000005f5e19b96683153670387100000080eb6f0200000000000000eaf072933bde1b10ec4ea1bbab0dbff1ff4108dffd"], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 9) 3.218841111s ago: executing program 7 (id=3847): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0x41}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x3) fremovexattr(r0, &(0x7f0000000080)=@known='trusted.syz\x00') 3.218583213s ago: executing program 0 (id=3848): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) pread64(r1, &(0x7f0000000240)=""/164, 0x131, 0x131) (async) pread64(r1, &(0x7f0000000240)=""/164, 0x131, 0x131) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002540)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="d306", 0x2}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x20040005) close_range(r0, 0xffffffffffffffff, 0x0) 3.211675992s ago: executing program 0 (id=3849): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000005c0)=[{0x802, 0xb810, 0x74, &(0x7f00000002c0)="0be2f950121a1a5b89f9ef0c0a4f72249b5fed3b74716ea6b0a3fe10c7800f269f3cfccc89d046b7d982db34d492c39ef4b0d4e1320ae9cacc35b77935612e0c3ff545e23115831c061bf13460cb466d56e675da59b8593080d763799c4d9dcdcd0d595e4df29bfe7216cf1f69c52299b256bb50"}, {0x86, 0xa400, 0x9d, &(0x7f0000000340)="6df339b9d77644fb56bb4fa5a4e44487c558dde1c99c32172740115e8e7297de4a3c9ab44b785aab0f8788c6590d00000000000000285aac9c89f8979db0c0b8814f9fb37019004e2ca40e34c7dc69e43eef28fb6fa9736c5a21cfedc73f49c115c60d40967eff5c4f87329a89630bb3a5ba6af844094aac2fae13ddda00a0bdcb2d7366f5116d9c9019d0ddaf3f4e8bb7824df3f871a154a239e27be4"}, {0x8001, 0x2000, 0xf5, &(0x7f0000000400)="34c5c763ec031c5272f673e5049b381e7818af84a2be44f4a3415e0a50cd39c6242445187bb53e463de83695614810834aa77415f2dc7aa23c91ba0df709b69f606f8e3ef17835688424de59f9a3c21206f60c51910b20a576045666b5d04815b009961620abd2beace834bf06c5503b4498771e954d238539127e13bff7450da1601f774a206104129fcae892310e7bd4a1d6f6fb3561c8e5e8e0f30f88d0beecf33d0d410914b1ef5d477cee3a82aad0849c169b83132a6bbc0909483c2bfed7bafdd22d7c7c8c079facde4bb446283b2d70c6dad89d958c2ce250877aee947ac530dddb4648292793ec4b7d85b8f88f70218138"}], 0x3}) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax=always') r2 = getpid() getpriority(0x1, r2) r3 = getpgid(r2) r4 = syz_pidfd_open(r3, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_setup(0x3, &(0x7f0000000240)) r6 = pidfd_getfd(r4, r4, 0x0) io_cancel(r5, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x3, 0x17a4, r4, &(0x7f0000001000), 0x0, 0x58, 0x0, 0x2, r6}, &(0x7f0000001080)) syz_usb_control_io$lan78xx(r0, &(0x7f0000000740)={0x14, &(0x7f0000000600)={0x40, 0x30, 0xc6, {0xc6, 0x23, "589f4af85d4048d565059ad57a54fdcc8ecd955eabde2738e1f229fd420213a142d211b922d32060d08e5e05bc2c7de25b5254b13839660f2d6a761eea3cc567ef26d5b865a1a05100f7e87dbcf3e8e1523b0dab7acf889afb12c4348cce63477eed68ae56feb5f1ff5dcca73414e24526884eca6420a1d0e725f826734862fbeb5db0419a181378887a501b9a6f59a5809ce52b9ff3e6d6f2dd1373d1b3f2581ca7c39939e2311f720c2bbe4b23f78ded8b5fbb7f95b85b9a8119cb78a2df9cebe829d5"}}, &(0x7f0000000700)={0x0, 0x3, 0x3, @string={0x3, 0x3, "bb"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000780)={0x20, 0x13, 0x2b, "f3a4bf0f7f3449c07226bc9a80997b68a0385c4d2478fdc024fa0936380d860b5dde13ed70d0244084a255"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xc9}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x41c}, &(0x7f0000000880)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "06ec2aaccf64614a6005e9f58710b502624a5bd983d733009a77f036cba75184314950e69a014cf80e5d85a7bbfbb2"}}) setns(r6, 0x66020000) setreuid(0xee01, 0xee01) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r7 = syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000240)={0x200, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2f}, &(0x7f00000000c0)=""/60, 0x3c, &(0x7f0000000100)=""/195, &(0x7f0000000200)=[r3, r3, r3, r3, r7], 0x5, {r6}}, 0x58) 3.211415122s ago: executing program 7 (id=3850): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}, 0x1, 0x4801000000000000}, 0x0) 3.097420579s ago: executing program 5 (id=3851): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$usbmon(r1, &(0x7f0000000140)=""/255, 0xff) unshare(0x4020400) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x109200) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000380)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x16, 0x0, 0x0, 0x5, 0xfffffffffffffedc, 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) unshare(0x4020400) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8000000000200001) 3.09696745s ago: executing program 7 (id=3852): r0 = socket$inet(0x2, 0xd0cd439dd32145d7, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8954, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf1"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, 0x0, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="09009e"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0xc000004) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000018c0)=[{{&(0x7f0000000540)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000200)="a332e061e20471d2d679bac57e90cb5f33c3db2772b29262363e8063144d038e015cf1bd6ecd00f4ce6f57f2e56a2e1fe4faa94a8c18d97ad39d7f8b920444d56ab8155448fcc095bec0adffdd5b6a8cd7f6dbd6ed1ad1a6ebfa269792770e4fc6d7627ba5a362927e1e86e752fccc9573e390bb3fbd4ff22c9ad4ccf27f53e795374dfcccafe84a", 0x88}, {&(0x7f0000000680)="786ef671f6a856531da5a7caa40e913ba795b841bd13db508510326d2471ba74fcb6c387300ba4c2cd44d7d1555e11ce2b4f0c9f723f921e4d2344600fb20638a7e6ae66bc88d65ae99f42dd01fad46fb814359abe29c3d28ba816b639972b9ff36cf98d61aab14bfc32aafc876ce4b58f018a7b42f8dcd2d71b96bb9cc4e8d226e65da6e3e407543b3196c8136123799ace71683698cc83f2e97a9f7fc3d42aaeb2f07f7ea0f97dc3be2c99ae9b577dc59d3ffe55c2b0e1328015b73129b376105f3e9efdec8dfd51b4ad4ed754ec06af5096fc7b5184eff1883498d4dd9f33b301f05a6ad410c7422759db23fa26e107cc9802fba702d60bb952e1e4a5d1fd05596c4776e8b2331af373412c3b0217394a29c41c1f4e032b5c875b5ed29775624ff7a704beeb34283e7fb8bccf5d945d4b3ea0ca41d25bff3ff353665163d21db26e837ab7bd206532e2996dfbbe69513382270263c2d7858ad2b92c71d64c3366a8181c9b15125f74ea47d03dd142235f60dc537180409b2871975e34b3c9ba036c7d20525f34e80a209dc951e785adf3b9a3d49bacdd4bddcca8af30135a9d931151e41d5180839fc7633d41b6ad69754c0825d68fbfad7c27d2b52978a805e0de0979cb92daedb74119763f1e9cd7eb3bc6412fcdeedf55258024510fb184401bf52f3e2dab61a41a97cf125e024700047e5bc7c6ce3610274ea9935218c771fab7e6f5504d632392cdb582245d900a4aa7000000000000b308ffece901f495b4b59b12fa24f1462e2e4758f92f08d95e466edb2067dacca01136da5545e75a17d414aed28e9abd8ee57f00252fc49c065518b205baed151b2c1e6b8f36d847a478cf59b7e07d2d5477c8bead7ee2eca7652cf7ec9b2291e10eb88bb2cdf8e6e690e8f7344d8473fac6f56f03de18c7a3debcb270ad582d6a2f50d08a8f6b5b59762babf5967d8ebacda383a0cb6ed32ed07ba8efdc289a5500fa69e0aa196202aeb3d7228cf25878af3e99de07aa8f5b2101559d69f58472dedd5f11448334921faa48830920751d38e148cbaa80f6a8528efcc22095dc439a5aa33c0cb53880831f5444898d63a9d6ea001017b50670507a97d782ce79dbc4f768f835bdcea89c2f3e2b4fbb29658b5debf298528b9130071f01ecad25de020be68bac30f933c91b7fa3638e34a8c40b5dbc5c127f5c127b1785dd47ed9e738a50fe2b8931e37c3ecbe620ad605647672082c981010cc0981e5de33c0589b24a5f3310ceda93ac24182c15daa1499ddd161f10183787b1d2ba53338c78c6601858422091874a1e967ad3d6df3bc6d82b0e3adbc2ed835cdaee837a205048e73f7ad0d33117eb4a6c91ba4f5012e1253ecbab03097a3f561f3318bdb563efd6e3f262990b160c7c73618a867415213c2fc5e4bf373dd866ba5726cfe6ec1ecd69f4a2683d91488c6fdf7c45bf5c3f81db1151a6810140a55aae14f205b4355eff63a916f8940fea1b0d71c43a0f9252041505d021f894e9cbfc2c0ba5e1a98adc6c9d77d86e80c16f35cb6391c8bcad146ae9d3ad35788f91e14dda73b68351575d7583ce0d374308cb65e801daba54f5afae8e35287394ab3cd26237606956335022775f35b7a7d393424e296b33d00b438e3ce92c200288457f07e27bb28078325b076a2f0b9c5fa449edf11b5d45613e8807bc97dc63d09b34c0ebfa67e543ba441223666652b691ce00a874c710a5edf8b2c0d97d1742592ddde032219ab1f098a4eaf00a274e53819d31af2ae446e6d17b60aef4c92fe40fe3b3de45710cb955501b91b30411afeda35ea0bac25109c0113b6c61c3345fbca5df155d39eabbbb6b0984aff37d7c3b064a7e6374f8de6b53a554b61140b9766748aded70b215598805b3183f324f054d81c21a8ad2a7161d6e80c10fbd31556040d462175151769f0b2db997e4d66ada3d1c8c6d5268752b8a3f5db2dbdf4e3362dd9eb2bceee46b5cdec4a2d2d78b8e8b9decc64226e97503f065bfc7d57fef74076d3fb796f0bf351df63c812ba80e3b8a3fbedd358f6e87c74287b3e58191da8f8fe7965f6a1238a0141a2eb7bce1214242cf05c684c5142f27fe7113740b053127116fd9fdc68c5486a1306e6e077f2ad0feb0d100b0dc71a1dce2a1870d15f70f423d89076202abcc8a4302baee1e7ab770804794183d9eed8ef2952a0ef4a688fa3c21ddf12926b6ce55efaf0db8c13b9c0596bfc5e548dacf27953af06a395547665a777669b2d02973cb3feb7d69e91c3696d591c5dd19d296591feb39a090837f750f54aeb60d31ef3a7615bd7f553d28a3f7f7a04cd31445f8c8708f737b8cd1fb7f6dbf992a78bf4ca38843f52fa2c7c2be0564f1c7909fffe2316f3527c833df9ec1e484b2d5f4923810b731b582a9a16a9df5adac871dce061cc4bfdc971c53b85e7bbf0a4b5319cd836b95e4849644ed9f3aac34bf570119f3428a987620273ee3fbcbd6fa91b3629e7639023254fe15e7f3ad560ee6af75508231ab49310cd86be0e80e01812b8e7829723c7181c690c3fadf0e9d2678c3a6e9865ffa2bc459b77ea4f1a31fc195d382bbb72de735d49dcba63ef82782cc8f40d95bec8d9d3baab5f0702923a8326b9f941e9c2e37d6d8245d7cff0e82aff3cac3dbf6d68be7f02279e12b8284fc7e8cf462e18d3f874bc0107a4291abdf562a1bb940f9e30e017c503f509181ff12eff2e7736a3c4f24c176ab6a3236b4eb353065e1b8214bc4b87c30fae0a44d63f389bffa7049fd0c42a5936f0649f279e51a4806d31f4076cbae44905e88a94339512d2e00917e439ed872e52aa24c30600947a1737bb04a7eff4f0797e38fa5902e50db9c099d41d4618a9dcf11a3d6a5e478bac945bd4a04e9ead73a8fbdb1dac2f0887ec07a6032236fc2e603bc6908b959d3d0ebd8c8640ff93d54e259e4e82b5665c0af8a6de6a6a362b794cd9a04a9cc2607e5fb61f151486e6796894bba11d80cbd8e4e171b57cd53caabb64762afd75b25359ad884f1e8c002c971ce6d81335b3d6aa3258e1007d4c1ad92f02515ee9f026b31b07176dfcf3140b9981765b7bed6b8a9f449572066e5cb71694c443a4ecde2b2b8d792a01e35722231551f4d9c788eb211a1d24fc653ff908703830d3f6f809eacc24fd782aa7d5eb0f83a5770aacb17e1c29ec38a8926f938b7b4ddfe2a7fff3edcc8513232ce2b90258fac0f633280143b4590ee077914fedab8f783ba3bcb81c586367e2f08225b075b66215b33e2b2f7b17107a540ab8270b6590cdc371ff61f3d6ec3dbb48628ffec3ef017be8b137599cf513e6ed69c6f81a1768cfe928539bda03516193243d307dc21241cccee0f475f2e1edce60c7d655a091995f92fff2a594e7f5924dfb99f205822b5f995b7938f0e38c56f5a54cd7b5f20962222c980b42796568014acdc42d6d4d708fc57b06f0651fed0f9727351455c11625ee4ba80430f183711fe6ae06886a3bbd7165391aea1e465ecf4311523275f7ed58a83fed24a507e1d7b66659a7ef7cb5ebd3c91682e89d489cbb27a5054b8cc943102ef540b8839e82b9e27483a79a4c0b488328469e6b961c08b716531aef639916b40709354dc07889ab267cdb7470d2758f63dc82281087650623a419ca9ad613c42cf8f4f84e4d49de5599e5b7abdce9123996528e5e632468db16cc8080913c4a06634cd1366cbbf5c3e802a3f66e7c35b7047baefd8284cc1a567e267d1d8f91e99bedc8dc1ce6eeed9ca93f52b526fec40523bc32c991372f043fa7e5da4b1d0e3f092aa5785ab323c0eab0409c86ce26bbc63f185be790249bcd038fa4e9f1fd69cdb4a8a0b4a800ed3aa297eb6b10d4befc55f9ac0d5c6059e217c3fc9fe14947712b3d36d288c538ecb840de59258bf80dd41a3326a066805afa73dd59c0cc3a8e722ecee83705109fdac16eb5169d51f7cf1862c65edf52bec327b5254a668f68b180f800e27eaf3e3bf980ce132937023dbe08b95d922e76b630a5dfedaa0ba27d27a42cdc00c06597d6c4c24c6cbf689873b99b29b10d89d99578520c4556791b80a76de56f1e3ecdd444fa3b2a8df48cced1fc24316794cab05ed1d428b786916f7338e6e1dd849945f824a00c4da6a5efd78277bcb11e9891568c133c7f5d864c219d7048aafcf0ef3f673020e51c62e19d82722bf3aa1313dc669a2f884efa6c58d9a9b276689bf4742aece3eb383e7c8f0655399a4ccd928a80f008ca513a51939e02ee8ba97b633d3580c4c5ae66c07a1e987adeab1ed4e8d99baee1601f1ed7f7541da3f0eacffee44a35ec178e1945f40c8cd636c5c90d16c9578ed578ef0f00dce7399e6c448cfe403484d5c770d4096324f4972b84a1c0bb47de4ee415747f1305719b3ca2146ee67082a8fb09d2cbd1e15c4d3edaf6e3b78d2543071b3dac0fad68a7d5e4edfb8a42d3c21f27995e744879fda266eaf8f1345fdbc505487d12a11cec15ad25de35b0badfa718c4795c8b0b982f7f69bc51a90135e4f339b5e8119268ba758a78c5b99f0dabf9609a7887052b8d821b797d936db652df9d93566a2e97a08180121d9e9b274c7ce114f400209cd5b974161488c1a4045b636df3f1d2c9af82c98955052c868403e2cacd172e338f55ae5a33cfddf043ef2b3d3259658eebab6bb700576510787b06682bffdab7809fb9e0d1b3f390c03ecdedf4e9b778cea1342deb7843d4cf14ec5b7126c9415268d47e3797b5a0030e535cde9c11ace7f9edc74cb355a259174c14d593607c1f09fbd53b210f04c7b9e219d0f271271e9d900d710984f46b69e19c8b625c2bcf8b1a386209bb855317387bdd1376a5f723350e2238469d99ddcea61f3127d32cbb7d1388416328074b45908a1cf0937ee431a629010199b9ae8e5376e5ab7c0e32c796be2c22aa8e436755f996b5d2ffc27c56a40b97ea7524cbc1d4be0ef947ff53644ac5252c96cfa5d806c194b9e2cdde1422622f6793ebdddb1aa5006b6b061eecc5c452b2c2b5a1530378141f12ceccee7b28ec30e1e171ad59260378a2c811f5d688965f8cd144b01a925876ac04ba96c4bcec321d4f4523179f36851b49323436b5c98e2652b2ff3a0cd034b49f9e55430d361c608d1cfbd7bd472081d0d389663e2364c1210e903289945b4c0dfe460b17488d1e0dbdee96a72946f01ba45964ffeefdd36a7abe73b500c8705c896a7ce6df730627109ba0c1ba923a98e3f05600772ab30e4cd1bb80cc5475312a63941aea5e21ea172781d65a2f7e65d7f9334e4408b4e74a9e00df9d7150ec3e41d981ee41c227a1eb9e63845849eacb7d8b03e75cefcda1ee62e1aa14967ddd9914f5a4cc455b3902630269b4394c8a3fbd33a8145acda1b5fcbd0dcae0f57ed49654d1febc334029da189391913e483a81e8df3f108f74c80787cda40a22ea2f8461bfe2dc7df638b03b3f3e20101adf2f8660f08d80bd3914fa68e607e4d28739533c5d82192d701668306f9a62e9d215110d8a0b9bba5f453d3c32cbed87d3d0db4e9befc7993a800d3114eaf5eecffa0eb808cbebfbb2d85e2fe7f824499fd1b8d4ae02bfb5ebe54d06532144cac0f22286e2815983ff37b27ea29c286030a3aba2c031ff2312652c0ceb6e61165584932fb20813f3e82a030d78bd1e734902c832af729673c5f06d0b5cfc6b24905b85174158fa938f0f15197b8b7ef8eda5c1a1712abe73b11f8ac4d6c0039155ea781dbc079afbc31f53a5d8a86af2a330cecd51b2e92118ab98291bfda88", 0x1000}, {&(0x7f0000000400)="8ff6042138939b09feb93541ccc45eac62063bc2b72fe2cb6b083a4770d30e1919e916195c6ea3f0006eb1b24d6e11438558d8e9daea40ca54cb19971397eb03e2b1631e386bce0a2369b1ae587fc30ec9ddce5bb8cfdd63520c0362652d7ed112e945eb039eb370c58901d990a02216e72fc999f60777ce43e12a22171b", 0x7e}], 0x3, &(0x7f0000001700)=ANY=[@ANYBLOB="7000000000000000110000000100010036d8724f4b99e46a28245fd0a44f521fc0e343d314efdf4dc5b5bc7ee1565c3ec26d1985b8c160f03236c30e82a77532e574164faf151ef6b8d39038548b5defadde36e6c773adb7d2477a3dce883dd19a59ca38ce630d55801000000000000018000000000000000100001c9670e2000800000059b370b00000000018010000000000000c01000003000000a0dce383ef76f9e556bac7ed300836fa1c66ec70143f1409f559bf97758e95cb7116ccd203dcfb6028a8f4349fd846167d848e1c60609ed54f78b01257bb985d591873b081d7879964450b9a754147f6f4eee2cfc548c7f6a902f41ebef3a17fa772570d4c64f961ec27d997973244e806435f184d782490d7721e83e43b289e54b5ed74dab2e4ffbb890890d9fc8c5cfd93a34916979f83bfa65beef0ab187f3ff179d34f8258e1f8b1ff02d66b32215cab44b301b07837106ac1aa975e3a1eb84b90f74092e7e863df160d96348c27e114874fbe046c95afb67ed2d8ac232434d46498bcc18917691c34dca30626ee055308b42fcb001d50d77c02c5a0749636d37ef0c16a3fd3474bc39fdd6be56054a1400000000000"], 0x1a0}}], 0x1, 0x4044) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x80000) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00002b3000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r9 = dup(r2) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c46074d017a0300000000000000ae79060002000000a0030000000000004000000000000000bd03000000000000040000000f0038000100ff010900b300000000700e000000bb03000000000000000000000000000009000000006c6128ff4842835d1ed100000006000000000000001a7a0000000000000200000000000000"], 0x78) 2.616903393s ago: executing program 6 (id=3853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0xf9b}, 0x8) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000140), &(0x7f0000000240), 0x2, 0x0) 2.616659485s ago: executing program 6 (id=3854): mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x208000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x24, r2, 0xdac7a804b810efff, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}]}]}]}, 0x24}}, 0x0) lstat(&(0x7f00000021c0)='./cgroup\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) clock_gettime(0x0, &(0x7f00000023c0)={0x0, 0x0}) ppoll(&(0x7f0000002380)=[{r1, 0x202}], 0x1, &(0x7f0000002400)={r8, r9+60000000}, &(0x7f0000002440)={[0x90f]}, 0x8) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="2e67450fc77eb7b9e60a00000f323e66460f38806fca48b8a1ae00000000000066410f3880200f21f835c00000000f23f8660f3881143126430f01c2440f01cb8080430000c0c03235010000000f3066b8cd008ee0", 0x55}], 0x1, 0x43, 0x0, 0x0) getgroups(0x3, &(0x7f0000000c80)=[0xee01, 0xee00, 0xffffffffffffffff]) setresgid(r13, r11, r12) setresgid(r13, r13, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x7, 0x3, 0x2, 0x8005, 0x800000009, 0x6b, 0x200, 0x401, 0x8000000000100001, 0x8000000000008005, 0xfffffffffffffff7, 0xf4, 0x2, 0x80253, 0x20], 0x6000}) ioctl$KVM_RUN(r10, 0xae80, 0x0) mount$9p_rdma(&(0x7f0000000040), &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x40040, &(0x7f0000002280)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532332c74696d656f75743d3078303030303030303030303030303030332c73713d3078303030303030303030303030303030622c66756e633d4b455845435f494e495452414d46535fc34845434b2c736d61636b6673666c6f6f723d2f6465762f6c62642c61707072616973652c61707072616973652c657569643c", @ANYRESDEC=r0, @ANYBLOB=',subj_type=exfat\x00,smackfsroot=/dev/nbd,async,euid<', @ANYRESDEC=r5, @ANYBLOB=',\x00']) 2.368004828s ago: executing program 6 (id=3855): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="00000000005f5e19b96683153670387100000080eb6f0200000000000000eaf072933bde1b10ec4ea1bbab0dbff1ff4108dffd"], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 10) 2.057546141s ago: executing program 6 (id=3856): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0x8400, 0x1}) r1 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0xc6d8097681965380, 0x6000, @fd=r0, 0x9, 0x3, 0xd4, 0x13, 0x0, {0x1, r4}}) io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000100)={0xf0f004, 0x1}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f000003f000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000100)="67f30fc7fc0f01cb0f011e04000f78acf5ff82662000baf80c66b8d479d88266efbafc0cb80000ef0f20e06635004000000f22e0d8310f011a0f20e06635002000000f22e0", 0x45}], 0x1, 0x49, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000240), 0xc053, 0x0) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101500, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000100)={0x4, "2679a9ecf23e11a469efea56b0369ac5109b3a6a7760c1aeebc38fb78c358a3c"}) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000280)=@req3={0x9, 0xfffffffe, 0x6, 0x2, 0x1ff, 0x1ff, 0x3}, 0x1c) poll(&(0x7f0000000300)=[{r11, 0x500}], 0x1, 0x5d6fb72d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='f2fs\x00', 0x0, &(0x7f00000035c0)='quota') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={&(0x7f0000000180)="226249dda663dbb57ddd93e1c0688f02998c3b7679a66899787ddaab219ddd2bf2a1969e873ab3bf97e7551f53211eeb646fa2116a5ec46c2cc54e7ebb6fb7621d2f8a96bc5104a746113852b9db2b45d5d8e63c4367696463fe53119301b9045492d1213592b624f2c2f046335313aa2b0921d26fb9b80f", &(0x7f0000000340)=""/201, &(0x7f0000000440)="2d997233038cab689d87059dfcd7d29338f06b17e57b7338f60d12a71315d8be178bd335ad042c5ab61e7234b6e027c695cfd3c27132047094f6899bfa6b7a5adf4b66f236f393c5db543a3a8ea44620aff72b12124dcc99810633021a28fb31e3e206e0233312cec7fcb4650e4956eaf817fa401d", &(0x7f00000004c0)="6055ae4f245c34bfbc34795cd9545e0db6c68ecdb348c97b8435f037d45a6700eab64995699b53cb1c19840e1a9a680f76ff18aa095309958dd64f0af836f73921e96307c9a0b622699a8469ebd12d065dedc50d71d7ce45430cd93587bb4d20ae98ee7e66121f947d345ab21776f91f4d194ff91551349f3cf516174c4561fda325526176a51483322afe4ca5aa0907a64223adb989ea84d5334f377d83011af816ec42d94ecb2e3c180eb3bbbc1fc948ae2bde567a3de318aa004ff554d9c9af902bc853c48ce387bd8106a2f3eebaa536a17b7eaf88b692b7107337bcb1bfd0c55deac7dfa622df6a03161d2ad66f376b2bee", 0xfff, r6, 0x4}, 0x38) mmap(&(0x7f000003f000/0x3000)=nil, 0x3000, 0x8, 0x12, r8, 0x39029000) 1.437000918s ago: executing program 0 (id=3857): r0 = syz_usb_connect(0x5, 0x239, &(0x7f00000020c0)=ANY=[@ANYBLOB="12010000e388d640697a01006ba801020301090227"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000880)=ANY=[], 0x0) syz_open_dev$rtc(0x0, 0x6, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) dup(0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.160214854s ago: executing program 6 (id=3858): r0 = syz_usb_connect(0x5, 0x239, &(0x7f00000020c0)=ANY=[@ANYBLOB="12010000e388d640697a01006ba801020301090227"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000880)=ANY=[], 0x0) syz_open_dev$rtc(0x0, 0x6, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) dup(0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 70.514791ms ago: executing program 5 (id=3859): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0xff04, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x80001, {0x200003, 0x180, 0x20fe, 0x0, 0x84, 0xd615, 0x10000009, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) sendfile(r2, r2, 0x0, 0x80000000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r4, r5, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r6, r6) read$FUSE(r2, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee00}}, '.\x00'}) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x4}, [{0x2, 0x7, r4}, {0x2, 0x2, r6}, {0x2, 0x2, r7}, {0x2, 0x6, r8}], {0x4, 0x6}, [{0x8, 0x0, r9}], {}, {0x20, 0x4}}, 0x4c, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001600350b27bd7000fcdbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='gfs2\x00', 0x0, &(0x7f0000000380)='acl') ioctl$KDGKBENT(r2, 0x4b46, &(0x7f00000000c0)={0xa, 0x9, 0x3ff}) 68.403718ms ago: executing program 7 (id=3860): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16], 0x48) 0s ago: executing program 7 (id=3861): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="00000000005f5e19b96683153670387100000080eb6f0200000000000000eaf072933bde1b10ec4ea1bbab0dbff1ff4108dffd"], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000780)={&(0x7f00000006c0)=[0x0], 0x0, r4, 0x0, '\x00', 0x1}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ppoll(&(0x7f0000000040)=[{r6, 0x12c2}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) kernel console output (not intermixed with test programs): yz.0.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 329.924626][ T5937] Bluetooth: hci2: command 0x0419 tx timeout [ 329.980473][ T7852] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 330.028824][ T7852] usb 11-1: USB disconnect, device number 17 [ 330.184511][T21591] xt_nat: multiple ranges no longer supported [ 330.198626][T21592] snd_dummy snd_dummy.0: control 1:-1:-8:syz1:32 is already present [ 330.220127][ T5998] usb 12-1: USB disconnect, device number 17 [ 330.554103][ T7852] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 330.717833][ T7852] usb 11-1: Using ep0 maxpacket: 32 [ 330.737679][ T7852] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 330.741917][ T7852] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 330.746856][ T7852] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 203, changing to 11 [ 330.751298][ T7852] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 42652, setting to 1024 [ 330.756209][ T7852] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 330.763696][ T7852] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 330.767544][ T7852] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.770870][ T7852] usb 11-1: Product: syz [ 330.772800][ T7852] usb 11-1: Manufacturer: syz [ 330.775191][ T7852] usb 11-1: SerialNumber: syz [ 330.794993][T21573] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 330.799706][ C2] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 330.805416][ T7852] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input33 [ 331.005330][T21573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.009814][T21573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.389204][ T7852] imon:send_packet: packet tx failed (-71) [ 331.403665][ T7852] imon 11-1:155.0: panel buttons/knobs setup failed [ 331.405890][ T7852] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 331.409005][ T7852] (id 0x00) [ 331.454339][ T7852] rc_core: IR keymap rc-imon-pad not found [ 331.456281][ T7852] Registered IR keymap rc-empty [ 331.459803][ T7852] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 331.463149][ T7852] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 331.466532][ T7852] imon:send_packet: packet tx failed (-71) [ 331.483660][ T7852] imon 11-1:155.0: remote input dev register failed [ 331.486604][ T7852] imon 11-1:155.0: imon_init_intf0: rc device setup failed [ 331.502025][ T7852] imon 11-1:155.0: unable to initialize intf0, err 0 [ 331.513118][ T7852] imon:imon_probe: failed to initialize context! [ 331.516173][ T7852] imon 11-1:155.0: unable to register, err -19 [ 331.531003][ T7852] usb 11-1: USB disconnect, device number 18 [ 331.677327][T21668] program syz.5.3220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.888162][T21696] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3221'. [ 331.920606][T21701] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3226'. [ 331.990818][T21714] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 332.003364][ T5937] Bluetooth: hci2: command 0x0419 tx timeout [ 332.034963][ T6015] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 332.193326][ T6015] usb 12-1: Using ep0 maxpacket: 16 [ 332.196548][ T6015] usb 12-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 332.200018][ T6015] usb 12-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 332.204804][ T6015] usb 12-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.209240][ T6015] usb 12-1: config 1 interface 0 has no altsetting 0 [ 332.214568][ T6015] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 332.217484][ T6015] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.220028][ T6015] usb 12-1: Product: syz [ 332.221397][ T6015] usb 12-1: Manufacturer: syz [ 332.222951][ T6015] usb 12-1: SerialNumber: syz [ 332.284488][T21735] overlayfs: upper fs does not support file handles, falling back to index=off. [ 332.289220][T21735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21735 comm=syz.5.3233 [ 332.296540][ T40] audit: type=1400 audit(2000000133.894:850): avc: denied { ioctl } for pid=21736 comm="syz.6.3234" path="socket:[67869]" dev="sockfs" ino=67869 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 332.389181][T21730] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 332.391427][T21730] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 332.393698][T21730] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 332.395831][T21730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 332.437390][ T6015] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 332.455053][T12120] udevd[12120]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 332.455698][T21741] netlink: 'syz.5.3235': attribute type 16 has an invalid length. [ 332.461865][T21741] netlink: 'syz.5.3235': attribute type 2 has an invalid length. [ 332.465946][T21741] netlink: 64102 bytes leftover after parsing attributes in process `syz.5.3235'. [ 332.529993][ T40] audit: type=1400 audit(2000000134.124:851): avc: denied { ioctl } for pid=21751 comm="syz.5.3237" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 332.612153][T21771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3242'. [ 332.705855][T21783] overlayfs: upper fs does not support file handles, falling back to index=off. [ 332.710047][T21783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21783 comm=syz.5.3243 [ 332.811123][T21776] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 332.813465][T21776] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 332.815778][T21776] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 332.817857][T21776] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 332.932406][ T40] audit: type=1400 audit(2000000134.524:852): avc: denied { write } for pid=21793 comm="syz.0.3246" name="ptype" dev="proc" ino=4026533645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 332.981119][ T40] audit: type=1400 audit(2000000134.574:853): avc: denied { shutdown } for pid=21807 comm="syz.6.3250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 333.013873][ T7852] usb 12-1: USB disconnect, device number 18 [ 333.020934][ T7852] usblp0: removed [ 333.234587][T21834] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3253'. [ 333.294361][T21836] overlayfs: upper fs does not support file handles, falling back to index=off. [ 333.299389][T21836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21836 comm=syz.6.3253 [ 333.387577][T21834] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.390009][T21834] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.392388][T21834] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 333.394682][T21834] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 333.629840][T21843] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3255'. [ 333.874389][T21865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3259'. [ 333.991682][T21879] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3262'. [ 334.052445][T21884] overlayfs: upper fs does not support file handles, falling back to index=off. [ 334.057411][T21884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21884 comm=syz.7.3262 [ 334.096672][T21885] netlink: 'syz.0.3261': attribute type 5 has an invalid length. [ 334.143836][T21879] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.145989][T21879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.148036][T21879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 334.150016][T21879] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.288826][T21895] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 334.354244][T21905] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3268'. [ 334.366059][T21908] netlink: 'syz.6.3269': attribute type 62 has an invalid length. [ 334.406735][T21914] i2c i2c-1: Invalid block write size 34 [ 334.407778][T21915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3267'. [ 334.438814][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 334.438824][ T40] audit: type=1400 audit(2000000136.035:855): avc: denied { write } for pid=21919 comm="syz.6.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 334.457192][T21918] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 334.460245][T21918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3272'. [ 334.494026][T21926] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3274'. [ 334.526197][T21920] team0: Device gtp0 is up. Set it down before adding it as a team port [ 334.550343][T21921] team0: Device gtp0 is up. Set it down before adding it as a team port [ 334.618525][ T40] audit: type=1400 audit(2000000136.215:856): avc: denied { map } for pid=21999 comm="syz.7.3275" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 334.850935][T22027] block device autoloading is deprecated and will be removed. [ 334.855383][ T40] audit: type=1400 audit(2000000136.455:857): avc: denied { accept } for pid=22025 comm="syz.7.3280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 335.052478][T22051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.057237][T22041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.121833][T22069] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 335.127824][T22071] netlink: 'syz.6.3287': attribute type 21 has an invalid length. [ 335.175718][T22069] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 335.180080][T22069] overlayfs: failed to look up (tracing) for ino (-66) [ 335.214308][ T40] audit: type=1400 audit(2000000136.815:858): avc: denied { unmount } for pid=16411 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 335.221428][T22078] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 335.221428][T22078] program syz.6.3287 not setting count and/or reply_len properly [ 335.255779][T22080] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 335.362566][T22103] IPVS: set_ctl: invalid protocol: 60 172.20.20.42:20003 [ 335.439690][T22112] XFS (nbd5): SB validate failed with error -5. [ 335.705676][T22132] xt_hashlimit: size too large, truncated to 1048576 [ 335.795768][T22142] syz.5.3300 (22142): attempted to duplicate a private mapping with mremap. This is not supported. [ 335.801564][T22142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=22142 comm=syz.5.3300 [ 335.952693][T22151] program syz.5.3302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.046660][T14494] nci: nci_ntf_packet: unknown ntf opcode 0x100 [ 336.092372][ T5937] Bluetooth: hci3: command 0x041b tx timeout [ 336.161452][ T64] Bluetooth: hci2: command 0x0419 tx timeout [ 336.163604][ T5937] Bluetooth: hci0: command 0x041b tx timeout [ 336.171301][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout [ 336.391182][ T5998] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 336.552333][ T5998] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.555686][ T5998] usb 11-1: config 0 has no interfaces? [ 336.558916][ T5998] usb 11-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 336.562278][ T5998] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.565043][ T5998] usb 11-1: Product: syz [ 336.566569][ T5998] usb 11-1: Manufacturer: syz [ 336.568111][ T5998] usb 11-1: SerialNumber: syz [ 336.571184][ T5998] usb 11-1: config 0 descriptor?? [ 337.130321][T22179] syz_tun: entered allmulticast mode [ 337.138755][T22179] dvmrp6: entered allmulticast mode [ 337.147540][T22179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.151454][T22179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.157200][T22179] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 337.160238][T22179] mroute: pending queue full, dropping entries [ 337.322982][T22185] program syz.0.3306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.981665][T22157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.089776][T22205] XFS (nullb0): Invalid superblock magic number [ 339.167214][T12682] usb 11-1: USB disconnect, device number 19 [ 339.268992][T22235] 9p: Bad value for 'rfdno' [ 339.348227][T22248] __nla_validate_parse: 4 callbacks suppressed [ 339.348239][T22248] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3315'. [ 339.399742][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 339.462101][T22248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.465038][T22249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.550874][T22278] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 339.554759][T22278] overlayfs: missing 'lowerdir' [ 339.570523][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 339.580233][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.583966][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.588535][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.592735][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.595572][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.598962][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.603838][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.606638][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.609982][ T5998] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 339.613106][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.615887][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.618704][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.622909][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.625704][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.628517][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.632378][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.635212][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.638015][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.641635][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.644461][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.647290][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.650931][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.653763][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 339.656618][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 339.660384][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.663810][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 339.666679][ T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 339.669293][ T24] usb 5-1: Product: syz [ 339.670956][ T24] usb 5-1: Manufacturer: syz [ 339.672476][ T24] usb 5-1: SerialNumber: syz [ 339.675544][ T24] usb 5-1: config 0 descriptor?? [ 339.688078][ T24] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 339.736251][T14497] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.739164][T14497] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.760015][ T5998] usb 12-1: Using ep0 maxpacket: 16 [ 339.777108][ T5998] usb 12-1: unable to get BOS descriptor or descriptor too short [ 339.781263][ T5998] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 339.784504][ T5998] usb 12-1: can't read configurations, error -71 [ 339.996088][ T34] usb 5-1: USB disconnect, device number 56 [ 340.003802][ T34] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 340.051151][ T2296] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 340.200804][ T2296] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.204055][ T2296] usb 10-1: config 0 has no interfaces? [ 340.207283][ T2296] usb 10-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 340.210393][ T2296] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.212947][ T2296] usb 10-1: Product: syz [ 340.214291][ T2296] usb 10-1: Manufacturer: syz [ 340.215805][ T2296] usb 10-1: SerialNumber: syz [ 340.219245][ T2296] usb 10-1: config 0 descriptor?? [ 340.356551][T22341] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 340.401903][T22341] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 512 [ 340.495653][T22347] netlink: 'syz.7.3325': attribute type 2 has an invalid length. [ 340.498797][T22347] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3325'. [ 340.754114][T22369] overlayfs: upper fs does not support file handles, falling back to index=off. [ 340.759299][T22369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22369 comm=syz.0.3329 [ 340.776447][T22370] syz_tun: entered allmulticast mode [ 340.783424][T22370] dvmrp6: entered allmulticast mode [ 340.853414][T22367] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 340.856372][T22367] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 340.859083][T22367] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 340.861254][T22367] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 340.864112][T22370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.868312][T22370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.873437][T22370] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 340.877111][T22370] mroute: pending queue full, dropping entries [ 340.902490][T22376] VFS: Mount too revealing [ 340.904564][T22376] VFS: Mount too revealing [ 340.971912][T22379] can0: slcan on ttyS3. [ 341.050684][T22378] can0 (unregistered): slcan off ttyS3. [ 342.392935][T22416] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 342.393128][T22417] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 342.454594][T22424] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3338'. [ 342.475602][T22428] bpf: Bad value for 'mode' [ 342.481893][T22428] trusted_key: encrypted_key: insufficient parameters specified [ 342.511699][T22429] overlayfs: upper fs does not support file handles, falling back to index=off. [ 342.516303][T22429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22429 comm=syz.7.3338 [ 342.611071][T22424] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.613393][T22424] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 342.616393][T22424] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 342.621014][T22424] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 342.832788][ T34] usb 10-1: USB disconnect, device number 27 [ 342.863806][ T40] audit: type=1400 audit(2000000144.469:859): avc: denied { listen } for pid=22470 comm="syz.5.3346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.878241][T12682] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 342.967043][ T40] audit: type=1400 audit(2000000144.569:860): avc: denied { write } for pid=22482 comm="syz.5.3349" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 343.051814][T12682] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 343.055467][T12682] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 343.060436][T12682] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 343.064310][T12682] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 343.067913][T12682] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 343.073024][T12682] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 343.076360][T12682] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 343.080488][T12682] usb 5-1: Product: syz [ 343.082449][T12682] usb 5-1: Manufacturer: syz [ 343.092797][T22488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.096738][T22488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.096740][T12682] cdc_wdm 5-1:1.0: skipping garbage [ 343.102427][T12682] cdc_wdm 5-1:1.0: skipping garbage [ 343.106775][T12682] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 343.109611][T12682] cdc_wdm 5-1:1.0: Unknown control protocol [ 343.327703][ T34] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 343.343604][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 343.344450][ T24] usb 5-1: USB disconnect, device number 57 [ 343.345703][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 343.349880][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 343.354681][T22428] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 343.480244][ T34] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 343.483185][ T34] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 343.486429][ T34] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 343.489819][ T34] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 343.493354][ T34] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 343.498758][ T34] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 343.502075][ T34] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 343.504982][ T34] usb 12-1: Product: syz [ 343.506440][ T34] usb 12-1: Manufacturer: syz [ 343.513198][ T34] cdc_wdm 12-1:1.0: skipping garbage [ 343.515014][ T34] cdc_wdm 12-1:1.0: skipping garbage [ 343.517573][ T34] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 343.520122][ T34] cdc_wdm 12-1:1.0: Unknown control protocol [ 343.564246][T22524] serio: Serial port ptm0 [ 343.688940][T22548] 9p: Unknown Cache mode or invalid value fs [ 343.714480][ T5998] usb 12-1: USB disconnect, device number 22 [ 343.715951][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3356'. [ 343.720623][T22545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3356'. [ 343.723826][T22545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3356'. [ 343.923006][T22574] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3359'. [ 344.083269][T22609] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3360'. [ 344.088079][T22609] FAULT_INJECTION: forcing a failure. [ 344.088079][T22609] name failslab, interval 1, probability 0, space 0, times 0 [ 344.093419][T22609] CPU: 1 UID: 0 PID: 22609 Comm: syz.6.3360 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.093447][T22609] Tainted: [L]=SOFTLOCKUP [ 344.093454][T22609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 344.093464][T22609] Call Trace: [ 344.093471][T22609] [ 344.093476][T22609] dump_stack_lvl+0x100/0x190 [ 344.093505][T22609] should_fail_ex.cold+0x5/0xa [ 344.093526][T22609] should_failslab+0xc2/0x120 [ 344.093550][T22609] kmem_cache_alloc_noprof+0x83/0x780 [ 344.093572][T22609] ? getname_flags.part.0+0x4c/0x540 [ 344.093602][T22609] ? getname_flags.part.0+0x4c/0x540 [ 344.093626][T22609] getname_flags.part.0+0x4c/0x540 [ 344.093659][T22609] getname_flags+0x93/0xf0 [ 344.093679][T22609] do_sys_openat2+0xc5/0x220 [ 344.093706][T22609] ? __pfx_do_sys_openat2+0x10/0x10 [ 344.093729][T22609] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 344.093755][T22609] ? __fget_files+0x21f/0x3d0 [ 344.093782][T22609] __x64_sys_openat+0x12d/0x210 [ 344.093805][T22609] ? __pfx___x64_sys_openat+0x10/0x10 [ 344.093827][T22609] ? ksys_write+0x1ac/0x250 [ 344.093855][T22609] do_syscall_64+0xc9/0xf80 [ 344.093875][T22609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.093893][T22609] RIP: 0033:0x7fcdcfd9aeb9 [ 344.093908][T22609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.093925][T22609] RSP: 002b:00007fcdd0ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 344.093941][T22609] RAX: ffffffffffffffda RBX: 00007fcdd0015fa0 RCX: 00007fcdcfd9aeb9 [ 344.093954][T22609] RDX: 0000000000047e00 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 344.093966][T22609] RBP: 00007fcdd0ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 344.093977][T22609] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000001 [ 344.093988][T22609] R13: 00007fcdd0016038 R14: 00007fcdd0015fa0 R15: 00007ffd343fcc58 [ 344.094010][T22609] [ 344.185056][T22638] netlink: 'syz.6.3360': attribute type 4 has an invalid length. [ 344.185127][T22609] overlayfs: upper fs does not support file handles, falling back to index=off. [ 344.198213][T22638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22638 comm=syz.6.3360 [ 344.248925][T22642] netlink: 'syz.6.3363': attribute type 3 has an invalid length. [ 344.557079][ T5937] Bluetooth: hci3: command 0x041b tx timeout [ 344.563818][T22662] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 344.601316][ T40] audit: type=1400 audit(2000000146.200:861): avc: denied { accept } for pid=22663 comm="syz.6.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 344.602683][T22664] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3369'. [ 344.614558][ T40] audit: type=1400 audit(2000000146.200:862): avc: denied { watch watch_reads } for pid=22663 comm="syz.6.3369" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 344.647222][ T5937] Bluetooth: hci2: command 0x0419 tx timeout [ 344.647245][ T64] Bluetooth: hci0: command 0x041b tx timeout [ 344.649172][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout [ 344.650741][T22673] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3370'. [ 344.663048][T22676] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3371'. [ 344.666512][T22676] FAULT_INJECTION: forcing a failure. [ 344.666512][T22676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.671091][T22676] CPU: 3 UID: 0 PID: 22676 Comm: syz.6.3371 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.671108][T22676] Tainted: [L]=SOFTLOCKUP [ 344.671112][T22676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 344.671118][T22676] Call Trace: [ 344.671122][T22676] [ 344.671127][T22676] dump_stack_lvl+0x100/0x190 [ 344.671145][T22676] should_fail_ex.cold+0x5/0xa [ 344.671158][T22676] strncpy_from_user+0x3b/0x2d0 [ 344.671173][T22676] getname_flags.part.0+0x8f/0x540 [ 344.671192][T22676] getname_flags+0x93/0xf0 [ 344.671203][T22676] do_sys_openat2+0xc5/0x220 [ 344.671219][T22676] ? __pfx_do_sys_openat2+0x10/0x10 [ 344.671234][T22676] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 344.671250][T22676] ? __fget_files+0x21f/0x3d0 [ 344.671265][T22676] __x64_sys_openat+0x12d/0x210 [ 344.671281][T22676] ? __pfx___x64_sys_openat+0x10/0x10 [ 344.671297][T22676] ? ksys_write+0x1ac/0x250 [ 344.671313][T22676] do_syscall_64+0xc9/0xf80 [ 344.671326][T22676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.671343][T22676] RIP: 0033:0x7fcdcfd9aeb9 [ 344.671353][T22676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.671364][T22676] RSP: 002b:00007fcdd0ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 344.671374][T22676] RAX: ffffffffffffffda RBX: 00007fcdd0015fa0 RCX: 00007fcdcfd9aeb9 [ 344.671381][T22676] RDX: 0000000000047e00 RSI: 0000200000000680 RDI: ffffffffffffff9c [ 344.671388][T22676] RBP: 00007fcdd0ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 344.671394][T22676] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000001 [ 344.671401][T22676] R13: 00007fcdd0016038 R14: 00007fcdd0015fa0 R15: 00007ffd343fcc58 [ 344.671414][T22676] [ 344.673320][T22676] overlayfs: upper fs does not support file handles, falling back to index=off. [ 344.710464][T22678] overlayfs: upper fs does not support file handles, falling back to index=off. [ 344.717588][T22676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22676 comm=syz.6.3371 [ 344.723651][T22678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22678 comm=syz.7.3370 [ 344.800283][T22680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22680 comm=syz.0.3372 [ 344.806055][T22683] binder: BINDER_SET_CONTEXT_MGR already set [ 344.808303][T22683] binder: 22682:22683 ioctl 4018620d 200000000040 returned -16 [ 344.811181][T22683] binder: 22682:22683 ioctl c0306201 2000000003c0 returned -14 [ 344.813878][T22683] binder: 22682:22683 ioctl c0306201 2000000001c0 returned -14 [ 344.828177][T22673] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 344.830252][T22673] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 344.832225][T22673] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 344.834351][T22673] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 344.893190][T22684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22684 comm=syz.0.3372 [ 344.925348][T22680] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 344.927693][T22680] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 344.930257][T22680] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 344.936958][T22680] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.011228][T22705] tmpfs: Bad value for 'mpol' [ 345.073335][T22704] binder: 22703:22704 ioctl 8010640b 200000000000 returned -22 [ 345.116737][T22718] hpfs: hpfs_map_sector(): read error [ 345.118040][T22720] netlink: 'syz.6.3382': attribute type 30 has an invalid length. [ 345.244265][T22768] netlink: 'syz.6.3384': attribute type 1 has an invalid length. [ 345.264449][T22768] bond2: entered promiscuous mode [ 345.266884][T22768] 8021q: adding VLAN 0 to HW filter on device bond2 [ 345.281518][T22768] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 345.286520][T22768] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 345.290743][T22768] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 345.406676][ T7852] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 345.422774][T22807] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3385'. [ 345.482264][T22809] overlayfs: upper fs does not support file handles, falling back to index=off. [ 345.488033][T22809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22809 comm=syz.6.3385 [ 345.572549][T22807] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 345.576183][T22807] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 345.577843][ T7852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.579437][T22807] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 345.582247][ T7852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.584188][T22807] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.587910][ T7852] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 345.594423][ T7852] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 345.597943][ T7852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.603125][ T7852] usb 5-1: config 0 descriptor?? [ 345.874715][T22826] input: syz1 as /devices/virtual/input/input35 [ 346.042848][ T7852] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 346.128747][T22853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.221334][ T40] audit: type=1326 audit(2000000147.821:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22758 comm="syz.0.3383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7181f9aeb9 code=0x7ffc0000 [ 346.231359][ T40] audit: type=1326 audit(2000000147.821:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22758 comm="syz.0.3383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7181f9aeb9 code=0x7ffc0000 [ 346.240904][ T40] audit: type=1326 audit(2000000147.821:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22758 comm="syz.0.3383" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f7181f9aeb9 code=0x7ffc0000 [ 346.250673][ T40] audit: type=1326 audit(2000000147.821:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22758 comm="syz.0.3383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7181f9aeb9 code=0x7ffc0000 [ 346.260865][ T40] audit: type=1326 audit(2000000147.821:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22758 comm="syz.0.3383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7181f9aeb9 code=0x7ffc0000 [ 346.268486][ T40] audit: type=1326 audit(2000000147.821:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22758 comm="syz.0.3383" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7181f5b78e code=0x7ffc0000 [ 346.277180][T22870] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3394'. [ 347.229578][T22892] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3397'. [ 347.317640][ C3] plantronics 0003:047F:FFFF.0009: usb_submit_urb(ctrl) failed: -1 [ 347.474728][T22917] netlink: 'syz.5.3400': attribute type 10 has an invalid length. [ 347.482777][T22917] syzkaller1: entered promiscuous mode [ 347.485140][T22917] syzkaller1: entered allmulticast mode [ 347.490253][T22917] netlink: 'syz.5.3400': attribute type 10 has an invalid length. [ 347.525633][ T64] Bluetooth: hci3: command 0x041b tx timeout [ 347.595574][ T64] Bluetooth: hci2: command 0x0419 tx timeout [ 347.595623][ T5292] Bluetooth: hci0: command 0x041b tx timeout [ 347.597633][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout [ 347.605542][T19300] usb 11-1: new full-speed USB device number 20 using dummy_hcd [ 347.756685][T19300] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.759835][T19300] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.764021][T19300] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 347.767132][T19300] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.898308][T22927] netlink: 'syz.0.3402': attribute type 1 has an invalid length. [ 347.932138][T22927] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 347.952618][T22691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.981394][T19300] usb 11-1: usb_control_msg returned -32 [ 347.982927][T22927] veth3: entered promiscuous mode [ 347.983284][T19300] usbtmc 11-1:16.0: can't read capabilities [ 347.998907][T22927] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 348.038214][T23031] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3403'. [ 348.041550][T23031] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3403'. [ 348.097845][T12682] usb 5-1: USB disconnect, device number 58 [ 348.243120][T23034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 348.246373][T23034] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 348.249042][T23034] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 348.251591][T23034] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 348.368514][T23055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3406'. [ 348.485125][ T7852] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 348.573711][T23106] openvswitch: netlink: Unknown key attributes 2 [ 348.581447][T23105] rtc_cmos 00:05: Alarms can be up to one day in the future [ 348.668700][ T7852] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.675458][ T7852] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 348.678257][ T7852] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 348.680823][ T7852] usb 12-1: Product: syz [ 348.681617][T23117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3412'. [ 348.682196][ T7852] usb 12-1: Manufacturer: syz [ 348.688536][ T7852] usb 12-1: SerialNumber: syz [ 348.898285][ T7852] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 348.911206][T23034] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 348.915004][T23034] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 348.918160][T23034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6424 sclass=netlink_route_socket pid=23034 comm=syz.7.3405 [ 349.003274][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 349.003290][ T40] audit: type=1400 audit(2000000150.602:873): avc: denied { ioctl } for pid=23143 comm="syz.5.3416" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 349.049795][T23147] netlink: 'syz.5.3417': attribute type 1 has an invalid length. [ 349.067166][T23148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=23148 comm=syz.5.3417 [ 349.070356][ T34] usb 12-1: USB disconnect, device number 23 [ 349.071828][T23182] bond5: entered promiscuous mode [ 349.077411][T23182] bond5: entered allmulticast mode [ 349.079842][T23182] 8021q: adding VLAN 0 to HW filter on device bond5 [ 349.080205][ T34] usblp0: removed [ 349.228719][ T40] audit: type=1804 audit(2000000150.832:874): pid=23193 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.3418" name="/newroot/433/file1" dev="fuse" ino=1 res=1 errno=0 [ 349.238146][ T40] audit: type=1800 audit(2000000150.832:875): pid=23193 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3418" name="/" dev="fuse" ino=1 res=0 errno=0 [ 349.247039][ T40] audit: type=1800 audit(2000000150.832:876): pid=23193 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3418" name="/" dev="fuse" ino=1 res=0 errno=0 [ 349.436018][T23220] mkiss: ax0: crc mode is auto. [ 349.456633][T12682] rtc_cmos 00:05: Alarms can be up to one day in the future [ 349.461168][T12682] rtc_cmos 00:05: Alarms can be up to one day in the future [ 349.466687][T12682] rtc_cmos 00:05: Alarms can be up to one day in the future [ 349.470684][T12682] rtc_cmos 00:05: Alarms can be up to one day in the future [ 349.476704][T23246] binder: 23245:23246 ioctl c018620c 200000000300 returned -22 [ 349.482364][T12682] rtc rtc0: __rtc_set_alarm: err=-22 [ 349.486362][T23247] overlayfs: upper fs does not support file handles, falling back to index=off. [ 349.491760][T23247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23247 comm=syz.5.3423 [ 349.565049][T23218] Bluetooth: hci3: no memory for command (opcode 0x0c1a) [ 349.568062][T23218] Bluetooth: hci3: Opcode 0x0c1a failed: -12 [ 349.588431][T23218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 349.591010][T23218] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 349.592993][T23218] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 349.844434][T12682] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 349.884422][T19300] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 349.995898][T12682] usb 5-1: config 0 has no interfaces? [ 350.000478][T12682] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 350.004462][T12682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.007875][T12682] usb 5-1: Product: syz [ 350.009669][T12682] usb 5-1: Manufacturer: syz [ 350.011665][T12682] usb 5-1: SerialNumber: syz [ 350.016102][T12682] usb 5-1: config 0 descriptor?? [ 350.046445][T19300] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.051124][T19300] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.055664][T19300] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 350.061094][T19300] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 350.065295][T19300] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.070943][T19300] usb 10-1: config 0 descriptor?? [ 350.226844][ T5998] usb 5-1: USB disconnect, device number 59 [ 350.369963][ T2296] usb 11-1: USB disconnect, device number 20 [ 350.476045][T19300] hid_parser_main: 1 callbacks suppressed [ 350.476058][T19300] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 350.480229][T19300] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 350.483128][T19300] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 350.485815][T19300] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 350.488196][T19300] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 350.488324][T23316] netlink: 'syz.7.3430': attribute type 21 has an invalid length. [ 350.490549][T19300] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 350.495856][T19300] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 350.498197][T19300] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 350.500550][T19300] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 350.502894][T19300] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 350.512876][T19300] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 350.606937][T23336] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20003 [ 350.648082][T23343] SELinux: policydb string length 0 does not match expected length 8 [ 350.650626][T23343] SELinux: failed to load policy [ 350.659908][T23341] __nla_validate_parse: 2 callbacks suppressed [ 350.659924][T23341] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3435'. [ 350.721513][T23347] overlayfs: upper fs does not support file handles, falling back to index=off. [ 350.726552][T23347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23347 comm=syz.7.3435 [ 350.727491][T23348] netlink: 'syz.5.3427': attribute type 23 has an invalid length. [ 350.816911][T23341] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 350.819623][T23341] Bluetooth: hci1: no memory for command (opcode 0x0c1a) [ 350.822601][T23341] Bluetooth: hci1: Opcode 0x0c1a failed: -12 [ 350.825736][T23341] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 350.828444][T23341] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 350.896320][ T2296] usb 10-1: USB disconnect, device number 28 [ 350.980986][T23367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3440'. [ 350.985016][T23372] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3440'. [ 351.068470][ T40] audit: type=1400 audit(2000000152.673:877): avc: denied { read } for pid=23395 comm="syz.7.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 351.304511][T23408] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 351.452236][T23414] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3448'. [ 351.512167][T23419] xt_hashlimit: size too large, truncated to 1048576 [ 351.514953][T23420] overlayfs: upper fs does not support file handles, falling back to index=off. [ 351.596230][T23414] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 351.598435][T23414] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 351.600587][T23414] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 351.602657][T23414] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 351.698758][T23434] veth1_to_team: entered promiscuous mode [ 351.701965][T23434] veth1_to_team: left promiscuous mode [ 351.716910][T23436] overlayfs: upper fs does not support file handles, falling back to index=off. [ 351.723296][T23436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23436 comm=syz.5.3450 [ 351.734174][T23438] fuse: Bad value for 'fd' [ 351.742474][T23439] netlink: 'syz.7.3455': attribute type 29 has an invalid length. [ 351.745979][T23439] netlink: 'syz.7.3455': attribute type 3 has an invalid length. [ 351.749240][T23439] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3455'. [ 351.805887][T23426] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 351.807983][T23426] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 351.809080][T23450] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 351.810239][T23426] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 351.816163][T23450] romfs: unable to set blocksize [ 351.816163][T23450] [ 351.818685][T23426] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 352.040704][T23474] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3452'. [ 352.045184][T23474] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3452'. [ 352.048510][T23474] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3452'. [ 352.051047][T23466] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 352.054209][T23466] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 352.056541][T23466] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 352.058861][T23466] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 352.239883][T23492] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 352.292663][T23493] overlayfs: upper fs does not support file handles, falling back to index=off. [ 352.297069][T23493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23493 comm=syz.5.3467 [ 354.072564][ T64] Bluetooth: hci2: command 0x0419 tx timeout [ 354.072730][ T5937] Bluetooth: hci0: command 0x041b tx timeout [ 354.073496][ T5292] Bluetooth: hci1: command 0x0c1a tx timeout [ 354.242337][T23478] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 354.242372][ T5937] Bluetooth: hci3: command 0x041b tx timeout [ 355.115875][T23478] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 355.118080][T23478] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 355.120709][T23478] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 355.158510][ T40] audit: type=1400 audit(2000000156.765:878): avc: denied { shutdown } for pid=23501 comm="syz.6.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 355.254568][T23553] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3472'. [ 355.265122][T23553] overlayfs: upper fs does not support file handles, falling back to index=off. [ 355.322981][T23556] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3470'. [ 355.337495][T23504] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 355.340289][T23504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 355.343857][T23504] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 355.346663][T23504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 355.492789][ T40] audit: type=1400 audit(2000000157.105:879): avc: denied { map } for pid=23578 comm="syz.5.3480" path="socket:[70571]" dev="sockfs" ino=70571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 355.582353][T19300] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 355.586576][T23587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.687879][T23596] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3482'. [ 355.742013][T19300] usb 5-1: Using ep0 maxpacket: 8 [ 355.747487][T19300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 355.752247][T19300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 355.755896][T19300] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 355.769437][T19300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.787408][T19300] usb 5-1: config 0 descriptor?? [ 355.876911][T23652] netlink: 'syz.5.3489': attribute type 3 has an invalid length. [ 355.880095][T23652] netlink: 'syz.5.3489': attribute type 1 has an invalid length. [ 355.883627][T23652] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3489'. [ 355.886477][T23652] NCSI netlink: No device for ifindex 0 [ 355.891182][T23652] ieee802154 phy0 wpan0: encryption failed: -22 [ 355.996105][T19300] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 356.083197][T23688] netlink: 'syz.7.3496': attribute type 2 has an invalid length. [ 356.084875][ T40] audit: type=1400 audit(2000000157.696:880): avc: denied { accept } for pid=23689 comm="syz.6.3495" path="socket:[71427]" dev="sockfs" ino=71427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 356.086450][T23688] netlink: 'syz.7.3496': attribute type 1 has an invalid length. [ 356.127212][T23700] i2c i2c-1: Invalid block write size 34 [ 356.204382][ T40] audit: type=1400 audit(2000000157.806:881): avc: denied { remount } for pid=23549 comm="syz.0.3474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 356.249312][T23715] overlayfs: upper fs does not support file handles, falling back to index=off. [ 356.255723][T23715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23715 comm=syz.5.3499 [ 356.266903][T23719] comedi comedi4: bad chanlist[0]=0x04000008 chan=8 range length=2 [ 356.275608][T23719] netlink: 'syz.6.3500': attribute type 1 has an invalid length. [ 356.304896][T23719] bond3: entered promiscuous mode [ 356.307488][T23719] 8021q: adding VLAN 0 to HW filter on device bond3 [ 356.317895][T23753] fuse: Bad value for 'fd' [ 356.348384][T23707] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 356.350569][T23707] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 356.353024][T23707] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 356.355236][T23707] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 356.358342][T23550] fuse: Unknown parameter 'grou00000000000000000000' [ 356.377650][T23550] iowarrior 5-1:0.0: Error -90 while submitting URB [ 356.384339][ T2296] usb 5-1: USB disconnect, device number 60 [ 356.475957][T23769] program syz.6.3504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.667332][T23800] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 356.667487][T23798] IPVS: stopping backup sync thread 23800 ... [ 356.743485][T23803] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3512'. [ 356.753157][T23787] i2c i2c-1: Invalid block write size 34 [ 356.804350][T23807] overlayfs: upper fs does not support file handles, falling back to index=off. [ 356.902548][T23803] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 356.904757][T23803] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 356.906857][T23803] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 356.911011][T23803] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 356.986126][T23821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3515'. [ 356.989077][T23821] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3515'. [ 356.992244][T23821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3515'. [ 356.995310][T23821] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3515'. [ 356.998081][T23821] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3515'. [ 357.033481][T23826] netlink: 'syz.7.3517': attribute type 33 has an invalid length. [ 357.036803][T23826] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3517'. [ 357.045997][T23826] ufs: You didn't specify the type of your ufs filesystem [ 357.045997][T23826] [ 357.045997][T23826] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 357.045997][T23826] [ 357.045997][T23826] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 357.057434][T23829] can: request_module (can-proto-0) failed. [ 357.060879][T23826] ufs: failed to set blocksize [ 357.067282][T23829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3518'. [ 357.112727][T23829] veth5: entered promiscuous mode [ 357.114413][T23829] veth5: entered allmulticast mode [ 357.115710][ T40] audit: type=1400 audit(2000000158.726:882): avc: denied { ioctl } for pid=23882 comm="syz.7.3519" path="socket:[69630]" dev="sockfs" ino=69630 ioctlcmd=0x64a2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 357.588406][T23936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23936 comm=syz.0.3525 [ 357.592859][T23936] netlink: 'syz.0.3525': attribute type 1 has an invalid length. [ 357.618611][T23936] bond3: entered promiscuous mode [ 357.621041][T23936] 8021q: adding VLAN 0 to HW filter on device bond3 [ 357.643426][T23936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23936 comm=syz.0.3525 [ 357.689731][ T40] audit: type=1400 audit(2000000159.296:883): avc: denied { create } for pid=23982 comm="syz.5.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 357.792155][ T34] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 357.792675][T24009] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 357.802490][T24009] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 357.807274][T24009] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 357.826647][T24011] overlayfs: failed to decode file handle (len=6, type=8440, flags=0, err=-22) [ 357.960455][T19300] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 357.961902][ T34] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 357.966465][ T34] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 357.969542][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 357.973635][ T34] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 357.976880][ T34] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 357.979550][ T34] usb 11-1: Product: syz [ 357.981378][ T34] usb 11-1: Manufacturer: syz [ 357.982968][ T34] usb 11-1: SerialNumber: syz [ 357.986004][ T34] usb 11-1: config 0 descriptor?? [ 357.989230][ T34] hub 11-1:0.0: bad descriptor, ignoring hub [ 357.992049][ T34] hub 11-1:0.0: probe with driver hub failed with error -5 [ 357.995781][ T34] usb 11-1: selecting invalid altsetting 0 [ 358.002973][T24016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.120287][T19300] usb 5-1: Using ep0 maxpacket: 8 [ 358.124503][T19300] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 358.128157][T19300] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.132739][T19300] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.136923][T19300] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.141360][T19300] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.146997][T19300] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 358.150993][T19300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.361630][T19300] usb 5-1: GET_CAPABILITIES returned 0 [ 358.363488][T19300] usbtmc 5-1:16.0: can't read capabilities [ 358.559892][T24043] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 358.564042][T24043] SELinux: failed to load policy [ 358.569616][ T5998] usb 5-1: USB disconnect, device number 61 [ 358.613074][T24055] netlink: 'syz.5.3536': attribute type 2 has an invalid length. [ 358.616760][T24055] overlayfs: regular lower layers cannot follow data lower layers [ 358.870016][ T5937] Bluetooth: hci3: command 0x041b tx timeout [ 358.949988][ T5937] Bluetooth: hci2: command 0x0419 tx timeout [ 358.952210][ T64] Bluetooth: hci0: command 0x041b tx timeout [ 358.952234][ T5292] Bluetooth: hci1: command 0x0c1a tx timeout [ 358.974831][ T40] audit: type=1400 audit(2000000160.587:884): avc: denied { setopt } for pid=24064 comm="syz.5.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 358.999816][ T40] audit: type=1400 audit(2000000160.587:885): avc: denied { getopt } for pid=24064 comm="syz.5.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 359.027103][ T40] audit: type=1400 audit(2000000160.637:886): avc: denied { nlmsg_read } for pid=24072 comm="syz.5.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 359.059587][ T40] audit: type=1400 audit(2000000160.667:887): avc: denied { cmd } for pid=24078 comm="syz.5.3543" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=io_uring permissive=1 [ 359.162387][T24097] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 359.242162][T24112] netlink: 'syz.0.3549': attribute type 21 has an invalid length. [ 359.245383][T24112] openvswitch: netlink: Flow key attr not present in new flow. [ 359.328060][T24118] netlink: 'syz.5.3552': attribute type 3 has an invalid length. [ 359.355192][T24122] netlink: zone id is out of range [ 359.781233][T24177] tmpfs: Bad value for 'mpol' [ 360.597590][T24241] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 360.766112][T24259] __nla_validate_parse: 77 callbacks suppressed [ 360.766124][T24259] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3576'. [ 360.826686][T24267] overlayfs: upper fs does not support file handles, falling back to index=off. [ 360.831221][T24267] tmpfs: Bad value for 'mpol' [ 360.833862][T24267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24267 comm=syz.7.3576 [ 360.919789][T24259] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 360.922357][T24259] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 360.925145][T24259] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 360.927853][T24259] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 360.965522][T24271] validate_nla: 4 callbacks suppressed [ 360.965533][T24271] netlink: 'syz.7.3579': attribute type 64 has an invalid length. [ 360.970527][T24271] netlink: 'syz.7.3579': attribute type 4 has an invalid length. [ 360.973045][T24271] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3579'. [ 361.043993][ T40] audit: type=1400 audit(2000000162.658:888): avc: denied { write } for pid=24276 comm="syz.0.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 361.221226][T24294] netlink: 'syz.5.3582': attribute type 1 has an invalid length. [ 361.224429][T24294] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3582'. [ 361.228304][T24294] netlink: 'syz.5.3582': attribute type 1 has an invalid length. [ 361.231887][T24294] netlink: 'syz.5.3582': attribute type 8 has an invalid length. [ 361.235108][T24294] netlink: 606 bytes leftover after parsing attributes in process `syz.5.3582'. [ 361.238549][T24294] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3582'. [ 361.245548][ T40] audit: type=1400 audit(2000000162.858:889): avc: denied { create } for pid=24292 comm="syz.0.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 361.259608][ T40] audit: type=1400 audit(2000000162.858:890): avc: denied { connect } for pid=24292 comm="syz.0.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 361.276923][T24298] syzkaller1: entered promiscuous mode [ 361.279725][T24298] syzkaller1: entered allmulticast mode [ 361.382486][T24308] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3585'. [ 361.488071][T24319] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3587'. [ 361.501743][T24310] syzkaller1: left promiscuous mode [ 361.503866][T24310] syzkaller1: left allmulticast mode [ 361.523059][ T34] usb 11-1: USB disconnect, device number 21 [ 361.579959][T24340] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3590'. [ 361.600694][T24344] nfs4: Bad value for 'source' [ 361.683981][T24365] netlink: 'syz.5.3594': attribute type 12 has an invalid length. [ 361.687164][T24365] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3594'. [ 361.698289][T24365] SQUASHFS error: Failed to read block 0x0: -5 [ 361.703717][T24365] unable to read squashfs_super_block [ 361.757578][T24370] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3595'. [ 361.855308][T24380] jffs2: Unknown parameter '^Ly]wBP (m"H(~N' [ 361.861757][ T7852] libceph: connect (1)[c::]:6789 error -101 [ 361.864396][ T7852] libceph: mon0 (1)[c::]:6789 connect error [ 361.922068][T19300] libceph: connect (1)[c::]:6789 error -101 [ 361.924325][T19300] libceph: mon0 (1)[c::]:6789 connect error [ 362.132437][ T7852] libceph: connect (1)[c::]:6789 error -101 [ 362.134923][ T7852] libceph: mon0 (1)[c::]:6789 connect error [ 362.188933][T19300] libceph: connect (1)[c::]:6789 error -101 [ 362.191273][T19300] libceph: mon0 (1)[c::]:6789 connect error [ 362.378353][ T5998] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 362.538066][ T5998] usb 12-1: Using ep0 maxpacket: 16 [ 362.542507][ T5998] usb 12-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 362.545809][ T5998] usb 12-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 362.549205][ T5998] usb 12-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.553362][ T5998] usb 12-1: config 1 interface 0 has no altsetting 0 [ 362.557345][ T5998] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 362.561060][ T5998] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.564278][ T5998] usb 12-1: Product: syz [ 362.565648][ T5998] usb 12-1: Manufacturer: syz [ 362.567428][ T5998] usb 12-1: SerialNumber: syz [ 362.639732][ T7852] libceph: connect (1)[c::]:6789 error -101 [ 362.641779][ T7852] libceph: mon0 (1)[c::]:6789 connect error [ 362.682167][T24377] ceph: No mds server is up or the cluster is laggy [ 362.682330][T24382] ceph: No mds server is up or the cluster is laggy [ 362.705952][T24419] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 362.708880][T24419] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 362.711935][T24419] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 362.714441][T24419] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 362.788499][ T5998] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 362.868294][ T5292] Bluetooth: hci3: command 0x041b tx timeout [ 362.947931][ T5292] Bluetooth: hci2: command 0x0419 tx timeout [ 362.947955][ T5937] Bluetooth: hci0: command 0x041b tx timeout [ 362.950004][ T5292] Bluetooth: hci1: command 0x0c1a tx timeout [ 362.985401][T24444] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 363.067520][ T7852] usb 12-1: USB disconnect, device number 24 [ 363.076139][ T7852] usblp0: removed [ 363.158126][T24482] netlink: 'syz.0.3611': attribute type 39 has an invalid length. [ 363.598707][ T40] audit: type=1326 audit(2000000165.219:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24492 comm="syz.0.3614" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7181f9aeb9 code=0x0 [ 363.639772][T24497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24497 comm=syz.7.3615 [ 363.649641][T24494] binder: binder_mmap: 24492 200000ffd000-200000fff000 bad vm_flags failed -1 [ 363.654110][T24498] netlink: 'syz.0.3614': attribute type 1 has an invalid length. [ 363.658034][T24498] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 363.799815][T24523] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 363.806466][T24523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 363.814965][T24523] vhci_hcd vhci_hcd.0: Device attached [ 363.819543][T24524] vhci_hcd: unknown pdu 1 [ 363.821685][ T1147] vhci_hcd vhci_hcd.6: stop threads [ 363.823501][ T1147] vhci_hcd vhci_hcd.6: release socket [ 363.825233][ T1147] vhci_hcd vhci_hcd.6: disconnect device [ 363.831060][T24530] xt_hashlimit: size too large, truncated to 1048576 [ 363.874809][ T40] audit: type=1400 audit(2000000165.489:892): avc: denied { mounton } for pid=24517 comm="syz.7.3619" path="/226/file0/file0" dev="9p" ino=72613993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 363.883136][ T5998] hid_parser_main: 5 callbacks suppressed [ 363.883149][ T5998] hid-generic 0005:0006:0009.000B: unknown main item tag 0x0 [ 363.895420][ T5998] hid-generic 0005:0006:0009.000B: unknown main item tag 0x0 [ 363.898039][ T5998] hid-generic 0005:0006:0009.000B: unknown main item tag 0x0 [ 363.900606][ T5998] hid-generic 0005:0006:0009.000B: unknown main item tag 0x0 [ 363.903148][ T5998] hid-generic 0005:0006:0009.000B: unknown main item tag 0x0 [ 363.905701][ T5998] hid-generic 0005:0006:0009.000B: unknown main item tag 0x0 [ 363.908789][ T5998] hid-generic 0005:0006:0009.000B: unknown main item tag 0x0 [ 363.911096][ T40] audit: type=1400 audit(2000000165.530:893): avc: denied { ioctl } for pid=24517 comm="syz.7.3619" path="/226/file0/file1" dev="9p" ino=72614239 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 363.911536][ T5998] hid-generic 0005:0006:0009.000B: unknown main item tag 0x0 [ 363.922264][ T5998] hid-generic 0005:0006:0009.000B: unknown main item tag 0x0 [ 363.924829][ T5998] hid-generic 0005:0006:0009.000B: unknown main item tag 0x0 [ 363.927869][ T40] audit: type=1400 audit(2000000165.540:894): avc: denied { setattr } for pid=24517 comm="syz.7.3619" name="file0" dev="9p" ino=72613993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 363.956362][ T5998] hid-generic 0005:0006:0009.000B: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz1] on syz0 [ 364.368285][ T5998] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 364.394601][T24579] netlink: 'syz.6.3628': attribute type 3 has an invalid length. [ 364.397861][T24579] netlink: 'syz.6.3628': attribute type 1 has an invalid length. [ 364.400809][T24579] NCSI netlink: No device for ifindex 0 [ 364.517169][ T5998] usb 12-1: Using ep0 maxpacket: 16 [ 364.520743][ T5998] usb 12-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 364.523892][ T5998] usb 12-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 364.527325][ T5998] usb 12-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.531438][ T5998] usb 12-1: config 1 interface 0 has no altsetting 0 [ 364.535046][ T5998] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 364.537989][ T5998] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.540646][ T5998] usb 12-1: Product: syz [ 364.542059][ T5998] usb 12-1: Manufacturer: syz [ 364.543573][ T5998] usb 12-1: SerialNumber: syz [ 364.607267][ T2296] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 364.766009][ T5998] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 364.780357][ T2296] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 364.785019][ T2296] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x82 is Bulk; changing to Interrupt [ 364.789355][ T2296] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x3 is Bulk; changing to Interrupt [ 364.793165][ T2296] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 364.797100][ T2296] usb 5-1: config 1 interface 0 has no altsetting 0 [ 364.801513][ T2296] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 364.805051][ T2296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.808899][ T2296] usb 5-1: Product: Е [ 364.810573][ T2296] usb 5-1: Manufacturer: 頣℡㻈鄧ퟭ䢟紹틷쿼枲빦䵹볌 [ 364.813818][ T2296] usb 5-1: SerialNumber: ሐヨ뾰ਾ⯅ә䨛隧퉊藏돦搥懍㢳௦ڄ䝺攌뱄此罕⽜삹變뻀唜骄ㄜ귤ᣬ䍍姲䲿ⲹᅦ뒸㟺꾃岙᧡ঐ磷絧ݚ⹫谨㬈滛ℏ髍๰䕃ᴽ䦓갟樳ꘅ쮨敽┤ℸ傰䒽䕺刍❨뭄ほꓒ檕忝昍䴷숞顓躢붔晵몙改햣섮側逌휿焲瞦豅့ᝥ咮哩 [ 364.841008][T24573] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 364.844060][T24573] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 365.041441][ T5998] usb 12-1: USB disconnect, device number 25 [ 365.045051][ T5998] usblp0: removed [ 365.197203][ T34] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 365.347474][ T34] usb 11-1: device descriptor read/64, error -71 [ 365.372416][T24640] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 365.586613][ T34] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 365.654945][T19300] hid-generic 0005:00B6:0009.000C: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 365.688586][T24654] fido_id[24654]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 365.721730][T24657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8217 sclass=netlink_route_socket pid=24657 comm=syz.7.3636 [ 365.726474][ T34] usb 11-1: device descriptor read/64, error -71 [ 365.836664][ T34] usb usb11-port1: attempt power cycle [ 365.896419][T19300] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 366.186421][ T34] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 366.217250][ T34] usb 11-1: device descriptor read/8, error -71 [ 366.466160][ T34] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 366.486127][ T5998] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 366.486497][ T34] usb 11-1: device descriptor read/8, error -71 [ 366.596267][ T34] usb usb11-port1: unable to enumerate USB device [ 366.665985][ T5998] usb 12-1: Using ep0 maxpacket: 16 [ 366.669763][ T5998] usb 12-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 366.672960][ T5998] usb 12-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 366.676777][ T5998] usb 12-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.681071][ T5998] usb 12-1: config 1 interface 0 has no altsetting 0 [ 366.687783][ T5998] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 366.690748][ T5998] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.693361][ T5998] usb 12-1: Product: syz [ 366.694775][ T5998] usb 12-1: Manufacturer: syz [ 366.696531][ T5998] usb 12-1: SerialNumber: syz [ 366.920995][ T5998] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 367.195440][T19300] usb 12-1: USB disconnect, device number 26 [ 367.199235][T19300] usblp0: removed [ 367.396556][ T2296] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 367.412027][ T2296] usb 5-1: USB disconnect, device number 62 [ 367.426790][T24727] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.429264][T24727] tmpfs: Too small a size for current use [ 367.479663][T24731] __nla_validate_parse: 3 callbacks suppressed [ 367.479676][T24731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3648'. [ 367.488768][T24731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3648'. [ 367.525915][T24733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.693112][T24737] sctp: [Deprecated]: syz.0.3650 (pid 24737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.693112][T24737] Use struct sctp_sack_info instead [ 367.974291][T24770] kAFS: unparsable volume name [ 367.976610][T24770] kAFS: unparsable volume name [ 368.050402][T24778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.505285][ T2296] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 368.586602][ T5998] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 368.637863][ T40] audit: type=1804 audit(2000000170.252:895): pid=24810 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.3661" name="/newroot/178/file0/bus" dev="9p" ino=72614215 res=1 errno=0 [ 368.656689][ T2296] usb 10-1: Using ep0 maxpacket: 8 [ 368.660437][ T2296] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 368.663900][ T2296] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.668020][ T2296] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 368.671823][ T2296] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 368.676093][ T2296] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 368.679870][ T2296] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.685170][ T2296] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 368.689016][ T2296] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.696639][ T2296] usbtmc 10-1:16.0: probe with driver usbtmc failed with error -22 [ 368.735140][ T5998] usb 11-1: Using ep0 maxpacket: 16 [ 368.738748][ T5998] usb 11-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 368.742764][ T5998] usb 11-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 368.747525][ T5998] usb 11-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.752738][ T5998] usb 11-1: config 1 interface 0 has no altsetting 0 [ 368.757581][ T5998] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 368.761368][ T5998] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.764664][ T5998] usb 11-1: Product: syz [ 368.766863][ T5998] usb 11-1: Manufacturer: syz [ 368.768809][ T5998] usb 11-1: SerialNumber: syz [ 368.899833][T24830] sctp: [Deprecated]: syz.0.3664 (pid 24830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.899833][T24830] Use struct sctp_sack_info instead [ 368.987381][ T5998] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 369.024880][ T5937] Bluetooth: hci2: command 0x0419 tx timeout [ 369.256708][ T7852] usb 11-1: USB disconnect, device number 26 [ 369.265600][ T7852] usblp0: removed [ 369.484758][T19300] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 369.694572][T19300] usb 12-1: Using ep0 maxpacket: 16 [ 369.697736][T19300] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 369.700957][T19300] usb 12-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.704767][T19300] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 369.708322][T19300] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 369.711424][T19300] usb 12-1: config 0 interface 0 has no altsetting 0 [ 369.715517][T19300] usb 12-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 369.718523][T19300] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.721162][T19300] usb 12-1: Product: syz [ 369.722643][T19300] usb 12-1: Manufacturer: syz [ 369.724193][T19300] usb 12-1: SerialNumber: syz [ 369.727608][T19300] usb 12-1: config 0 descriptor?? [ 369.935537][T19300] input: syz syz as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input38 [ 369.940047][ T5326] synaptics_usb 12-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 369.944577][ T5326] synaptics_usb 12-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 369.950095][ T5326] synaptics_usb 12-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 369.958100][ T5326] synaptics_usb 12-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 369.996040][T12120] synaptics_usb 12-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 370.000249][ T5326] synaptics_usb 12-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 370.005954][ T5326] synaptics_usb 12-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 370.020032][ T5326] synaptics_usb 12-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 370.024683][ T5326] synaptics_usb 12-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 370.186942][T24868] synaptics_usb 12-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 370.207865][T24868] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.3671'. [ 370.213606][T24868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.224374][T24868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.244898][ T34] usb 12-1: USB disconnect, device number 27 [ 370.513934][T24951] netlink: 'syz.0.3682': attribute type 30 has an invalid length. [ 370.514159][T24952] netlink: 'syz.0.3682': attribute type 30 has an invalid length. [ 370.564845][T24961] netlink: 'syz.0.3682': attribute type 30 has an invalid length. [ 371.003812][ T5998] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 371.142090][T24979] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3685'. [ 371.147582][T24979] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3685'. [ 371.150685][T24980] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3685'. [ 371.154586][ T5998] usb 5-1: Using ep0 maxpacket: 16 [ 371.158806][ T5998] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 371.163249][ T5998] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 371.174275][ T5998] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.180523][ T5998] usb 5-1: config 1 interface 0 has no altsetting 0 [ 371.181464][T19300] usb 10-1: USB disconnect, device number 29 [ 371.195702][ T5998] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 371.199447][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.201849][ T5998] usb 5-1: Product: syz [ 371.203088][ T5998] usb 5-1: Manufacturer: syz [ 371.213845][ T5998] usb 5-1: SerialNumber: syz [ 371.423177][ T5998] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 63 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 371.595627][T25025] overlayfs: failed to resolve './file0': -2 [ 371.695399][ T5998] usb 5-1: USB disconnect, device number 63 [ 371.702672][ T5998] usblp0: removed [ 372.277849][T25054] usb usb1: usbfs: process 25054 (syz.0.3694) did not claim interface 2 before use [ 372.564307][ T7852] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 372.613179][T25081] overlay: Unknown parameter './bus' [ 372.725907][ T7852] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.729255][ T7852] usb 5-1: config 0 has no interfaces? [ 372.734472][ T7852] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 372.737455][ T7852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.740109][ T7852] usb 5-1: Product: syz [ 372.741603][ T7852] usb 5-1: Manufacturer: syz [ 372.744872][ T7852] usb 5-1: SerialNumber: syz [ 372.748307][ T7852] usb 5-1: config 0 descriptor?? [ 373.222750][ T5998] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 373.306748][T25127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.309693][T25127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.313178][T25127] lo: entered allmulticast mode [ 373.318489][T25127] dvmrp6: entered allmulticast mode [ 373.322785][T25127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.325812][T25127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.388533][ T5998] usb 12-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 373.391914][ T5998] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 373.395860][ T5998] usb 12-1: Product: syz [ 373.397329][ T5998] usb 12-1: Manufacturer: syz [ 373.398905][ T5998] usb 12-1: SerialNumber: syz [ 373.402468][ T5998] usb 12-1: config 0 descriptor?? [ 373.407157][ T5998] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 373.409940][ T5998] dvb-usb: bulk message failed: -22 (2/0) [ 373.421074][ T5998] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 373.426449][ T5998] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 373.429695][ T5998] usb 12-1: media controller created [ 373.441615][ T5998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 373.607809][T25106] cxusb: i2c rd: len=80 is too big! [ 373.607809][T25106] [ 373.712575][T19300] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 373.862567][T19300] usb 11-1: Using ep0 maxpacket: 16 [ 373.866396][T19300] usb 11-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 373.870551][T19300] usb 11-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 373.874810][T19300] usb 11-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.880268][T19300] usb 11-1: config 1 interface 0 has no altsetting 0 [ 373.885254][T19300] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 373.889476][T19300] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.892818][T19300] usb 11-1: Product: syz [ 373.894754][T19300] usb 11-1: Manufacturer: syz [ 373.896791][T19300] usb 11-1: SerialNumber: syz [ 374.105740][T19300] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 374.503338][T15136] usb 11-1: USB disconnect, device number 27 [ 374.512850][T15136] usblp0: removed [ 375.131391][T25189] Cannot find del_set index 2 as target [ 375.163550][T25191] netlink: 'syz.6.3707': attribute type 14 has an invalid length. [ 375.184164][T25191] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3707'. [ 375.323410][T25195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3708'. [ 375.338934][T19300] usb 5-1: USB disconnect, device number 64 [ 375.645303][T25210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25210 comm=syz.0.3710 [ 375.650849][T25210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25210 comm=syz.0.3710 [ 375.656443][T25210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25210 comm=syz.0.3710 [ 375.660793][T25210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25210 comm=syz.0.3710 [ 375.665959][T25210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25210 comm=syz.0.3710 [ 375.671975][T25210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25210 comm=syz.0.3710 [ 375.986010][T25149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.989258][T25193] netlink: 'syz.6.3708': attribute type 1 has an invalid length. [ 376.014151][ T5998] cxusb: set interface failed [ 376.015693][ T5998] dvb-usb: bulk message failed: -22 (1/0) [ 376.032990][ T5998] DVB: Unable to find symbol mt352_attach() [ 376.035249][ T5998] dvb-usb: bulk message failed: -22 (5/0) [ 376.037788][ T5998] zl10353_read_register: readreg error (reg=127, ret==-121) [ 376.040116][ T5998] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 376.062603][T25227] openvswitch: netlink: Flow actions attr not present in new flow. [ 376.062802][T25226] SET target dimension over the limit! [ 376.091309][ T5998] rc_core: IR keymap rc-dvico-mce not found [ 376.093367][ T5998] Registered IR keymap rc-empty [ 376.101671][ T5998] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 376.107653][ T5998] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input39 [ 376.113645][ T5998] dvb-usb: schedule remote query interval to 100 msecs. [ 376.115902][ T5998] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 376.135044][ T5998] usb 12-1: USB disconnect, device number 28 [ 376.138987][ T40] audit: type=1400 audit(2000000177.756:896): avc: denied { setopt } for pid=25241 comm="syz.7.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 376.160405][ T5998] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 376.207649][T25261] i2c i2c-1: Invalid block write size 34 [ 376.304115][ T7852] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 376.336405][T25266] xt_cgroup: path and classid specified [ 376.481069][ T7852] usb 11-1: Using ep0 maxpacket: 16 [ 376.484055][ T7852] usb 11-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 376.487408][ T7852] usb 11-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 376.490642][ T7852] usb 11-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.495061][ T7852] usb 11-1: config 1 interface 0 has no altsetting 0 [ 376.500832][ T7852] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 376.505075][ T7852] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.508807][ T7852] usb 11-1: Product: syz [ 376.510695][ T7852] usb 11-1: Manufacturer: syz [ 376.513340][ T7852] usb 11-1: SerialNumber: syz [ 376.591763][ T40] audit: type=1400 audit(2000000178.216:897): avc: denied { setopt } for pid=25299 comm="syz.5.3724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 376.631438][ T40] audit: type=1326 audit(2000000178.256:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25309 comm="syz.0.3726" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7181f9aeb9 code=0x0 [ 376.725736][ T7852] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 376.862722][T25321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3729'. [ 377.014967][T25364] netlink: 'syz.0.3738': attribute type 39 has an invalid length. [ 377.112543][ T7852] usb 11-1: USB disconnect, device number 28 [ 377.121058][ T7852] usblp0: removed [ 377.786770][T25400] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3744'. [ 377.930690][T25409] netlink: 'syz.0.3745': attribute type 1 has an invalid length. [ 377.934158][T25409] netlink: 'syz.0.3745': attribute type 2 has an invalid length. [ 377.937586][T25410] netlink: 'syz.0.3745': attribute type 1 has an invalid length. [ 377.941086][T25410] netlink: 'syz.0.3745': attribute type 2 has an invalid length. [ 377.956906][T25408] MTD: Couldn't look up './bus': -15 [ 378.002981][T25414] netlink: 'syz.7.3747': attribute type 4 has an invalid length. [ 378.025109][T25414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3747'. [ 378.029670][T25414] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 378.410165][T19300] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 378.580959][T19300] usb 12-1: Using ep0 maxpacket: 16 [ 378.581021][T25464] overlay: Bad value for 'workdir' [ 378.586818][T19300] usb 12-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 378.590027][T19300] usb 12-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 378.594246][T19300] usb 12-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.598523][T19300] usb 12-1: config 1 interface 0 has no altsetting 0 [ 378.602968][T19300] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 378.605889][T19300] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.608518][T19300] usb 12-1: Product: syz [ 378.609893][T19300] usb 12-1: Manufacturer: syz [ 378.614146][T19300] usb 12-1: SerialNumber: syz [ 378.670299][T25467] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3754'. [ 378.691891][T25467] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3754'. [ 378.825177][T19300] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 379.222639][ T5998] usb 12-1: USB disconnect, device number 29 [ 379.230730][ T5998] usblp0: removed [ 379.544400][ T40] audit: type=1400 audit(2000000181.167:899): avc: denied { mounton } for pid=25521 comm="syz.6.3760" path="/315/file1" dev="autofs" ino=78011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 379.553056][T25523] autofs: Unknown parameter '' [ 379.715432][ T40] audit: type=1400 audit(2000000181.337:900): avc: denied { append } for pid=25535 comm="syz.6.3764" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 379.726698][T25536] netlink: 540 bytes leftover after parsing attributes in process `syz.6.3764'. [ 379.784991][T25541] netlink: 212324 bytes leftover after parsing attributes in process `syz.7.3765'. [ 379.858793][ T40] audit: type=1400 audit(2000000181.477:901): avc: denied { setattr } for pid=25552 comm="syz.6.3768" name="NETLINK" dev="sockfs" ino=77307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.908677][ T40] audit: type=1400 audit(2000000181.528:902): avc: denied { accept } for pid=25557 comm="syz.6.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 380.027159][T25571] syzkaller1: entered promiscuous mode [ 380.029058][T25571] syzkaller1: entered allmulticast mode [ 380.265600][T25615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3776'. [ 380.419354][ T5998] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 380.579150][ T5998] usb 12-1: Using ep0 maxpacket: 16 [ 380.582289][ T5998] usb 12-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 380.585619][ T5998] usb 12-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 380.589028][ T5998] usb 12-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.594031][ T5998] usb 12-1: config 1 interface 0 has no altsetting 0 [ 380.598340][ T5998] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 380.602109][ T5998] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.604966][ T5998] usb 12-1: Product: syz [ 380.606388][ T5998] usb 12-1: Manufacturer: syz [ 380.607956][ T5998] usb 12-1: SerialNumber: syz [ 380.637801][T25646] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3781'. [ 380.647524][T25646] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 380.685818][T25650] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 380.754926][T25558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.757478][T25558] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 380.822539][ T5998] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 380.833029][T25558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.835074][T25558] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 380.903326][T25558] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.905378][T25558] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 380.945353][T25558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.947463][T25558] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 381.242081][T19300] usb 12-1: USB disconnect, device number 30 [ 381.247017][T19300] usblp0: removed [ 381.247117][T25737] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3790'. [ 381.259942][T25737] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 381.267853][T25737] overlayfs: failed to resolve '/': -2 [ 381.576034][T25786] qnx6: unable to read the first superblock [ 381.578383][T25786] qnx6: unable to read the first superblock [ 381.583118][T25786] qnx6: unable to read the first superblock [ 381.738760][T19300] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 381.836184][T25800] No source specified [ 381.893598][T19300] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 381.899839][T19300] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 381.902930][T19300] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.905495][T19300] usb 10-1: Product: syz [ 381.907073][T19300] usb 10-1: Manufacturer: syz [ 381.909115][T19300] usb 10-1: SerialNumber: syz [ 381.913737][T19300] usb 10-1: config 0 descriptor?? [ 381.951754][T19300] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 381.982752][T12115] udevd[12115]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.342323][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.500461][T16853] usb 10-1: USB disconnect, device number 30 [ 395.993077][T25835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3805'. [ 395.995925][T25835] bridge_slave_1: left allmulticast mode [ 395.997731][T25835] bridge_slave_1: left promiscuous mode [ 396.006832][T25835] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.013183][T25840] netlink: 'syz.7.3806': attribute type 1 has an invalid length. [ 396.013272][T25835] bridge_slave_0: left allmulticast mode [ 396.018305][T25835] bridge_slave_0: left promiscuous mode [ 396.020225][T25835] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.113051][T25848] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 396.116374][T25848] bond4: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 396.120847][T25848] bond4: (slave vxcan3): making interface the new active one [ 396.124227][T25848] bond4: (slave vxcan3): Enslaving as an active interface with an up link [ 396.129351][T25838] sysfs: cannot create duplicate filename '/class/ieee80211/4π!FVluc'f`ކ;1x%MF-I' [ 396.135694][T25838] CPU: 1 UID: 0 PID: 25838 Comm: syz.5.3804 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.135722][T25838] Tainted: [L]=SOFTLOCKUP [ 396.135729][T25838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 396.135739][T25838] Call Trace: [ 396.135746][T25838] [ 396.135754][T25838] dump_stack_lvl+0x100/0x190 [ 396.135800][T25838] sysfs_warn_dup.cold+0x1c/0x28 [ 396.135825][T25838] sysfs_do_create_link_sd+0x113/0x140 [ 396.135851][T25838] sysfs_create_link+0x61/0xc0 [ 396.135874][T25838] device_add+0x675/0x1950 [ 396.135906][T25838] ? __pfx_device_add+0x10/0x10 [ 396.135934][T25838] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 396.135961][T25838] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 396.135996][T25838] wiphy_register+0x1e58/0x2d30 [ 396.136019][T25838] ? __rtnl_unlock+0xb9/0xf0 [ 396.136049][T25838] ? __pfx_wiphy_register+0x10/0x10 [ 396.136072][T25838] ? __asan_memset+0x23/0x50 [ 396.136090][T25838] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 396.136120][T25838] ieee80211_register_hw+0x2c11/0x4040 [ 396.136153][T25838] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 396.136175][T25838] ? __pfx___debug_object_init+0x10/0x10 [ 396.136198][T25838] ? find_held_lock+0x2b/0x80 [ 396.136218][T25838] ? net_generic+0xea/0x2a0 [ 396.136235][T25838] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 396.136261][T25838] ? __hrtimer_setup+0x178/0x280 [ 396.136284][T25838] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 396.136321][T25838] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 396.136343][T25838] ? __asan_memcpy+0x3c/0x60 [ 396.136362][T25838] hwsim_new_radio_nl+0xc1f/0x1340 [ 396.136381][T25838] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 396.136402][T25838] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 396.136430][T25838] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 396.136446][T25838] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 396.136467][T25838] genl_family_rcv_msg_doit+0x214/0x300 [ 396.136485][T25838] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 396.136509][T25838] ? bpf_lsm_capable+0x9/0x10 [ 396.136531][T25838] ? security_capable+0x80/0x260 [ 396.136556][T25838] ? ns_capable+0xd2/0xf0 [ 396.136579][T25838] genl_rcv_msg+0x560/0x800 [ 396.136592][T25838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.136603][T25838] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 396.136618][T25838] ? __lock_acquire+0x4a5/0x2630 [ 396.136632][T25838] netlink_rcv_skb+0x159/0x420 [ 396.136648][T25838] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.136659][T25838] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 396.136681][T25838] ? netlink_deliver_tap+0x1ae/0xcc0 [ 396.136717][T25838] genl_rcv+0x28/0x40 [ 396.136733][T25838] netlink_unicast+0x5aa/0x870 [ 396.136753][T25838] ? __pfx_netlink_unicast+0x10/0x10 [ 396.136776][T25838] netlink_sendmsg+0x8b0/0xda0 [ 396.136796][T25838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.136812][T25838] ? __might_fault+0x10/0x140 [ 396.136832][T25838] ____sys_sendmsg+0xa54/0xc30 [ 396.136845][T25838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.136855][T25838] ? __pfx___futex_wait+0x10/0x10 [ 396.136872][T25838] ? __pfx_futex_wake_mark+0x10/0x10 [ 396.136889][T25838] ___sys_sendmsg+0x190/0x1e0 [ 396.136901][T25838] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.136925][T25838] ? find_held_lock+0x2b/0x80 [ 396.136949][T25838] __sys_sendmsg+0x170/0x220 [ 396.136965][T25838] ? __pfx___sys_sendmsg+0x10/0x10 [ 396.136980][T25838] ? __x64_sys_futex+0x34f/0x4d0 [ 396.137003][T25838] do_syscall_64+0xc9/0xf80 [ 396.137018][T25838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.137030][T25838] RIP: 0033:0x7fd576f9aeb9 [ 396.137041][T25838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.137052][T25838] RSP: 002b:00007fd577f0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.137063][T25838] RAX: ffffffffffffffda RBX: 00007fd577215fa0 RCX: 00007fd576f9aeb9 [ 396.137070][T25838] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 396.137077][T25838] RBP: 00007fd577008c1f R08: 0000000000000000 R09: 0000000000000000 [ 396.137084][T25838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.137092][T25838] R13: 00007fd577216038 R14: 00007fd577215fa0 R15: 00007ffc4de7dfb8 [ 396.137108][T25838] [ 396.161004][T25840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3806'. [ 396.461210][ T34] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 396.584522][T25932] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3811'. [ 396.621368][ T34] usb 10-1: Using ep0 maxpacket: 16 [ 396.633037][ T34] usb 10-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 396.637054][ T34] usb 10-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 396.641926][ T34] usb 10-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.647228][ T34] usb 10-1: config 1 interface 0 has no altsetting 0 [ 396.652220][ T34] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 396.655982][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.659312][ T34] usb 10-1: Product: syz [ 396.665628][ T34] usb 10-1: Manufacturer: syz [ 396.667641][ T34] usb 10-1: SerialNumber: syz [ 396.894929][ T40] audit: type=1400 audit(2000000198.526:903): avc: denied { accept } for pid=25963 comm="syz.6.3818" lport=62823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 396.918142][T25973] netlink: 'syz.0.3819': attribute type 1 has an invalid length. [ 396.925817][T25972] netlink: 'syz.0.3819': attribute type 1 has an invalid length. [ 396.949642][T25972] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.983690][T25973] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 396.994082][T25973] netlink: 'syz.0.3819': attribute type 29 has an invalid length. [ 396.997993][T25973] netlink: 'syz.0.3819': attribute type 29 has an invalid length. [ 397.002627][T25973] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3819'. [ 397.005694][T25973] unsupported nla_type 58 [ 397.011037][T25972] netlink: 'syz.0.3819': attribute type 29 has an invalid length. [ 397.048503][T26018] netlink: 'syz.0.3823': attribute type 9 has an invalid length. [ 397.054027][T26018] netlink: 'syz.0.3823': attribute type 11 has an invalid length. [ 397.056519][T26018] netlink: 'syz.0.3823': attribute type 12 has an invalid length. [ 397.059079][T26018] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.3823'. [ 397.065004][T26018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3823'. [ 397.106976][ T40] audit: type=1800 audit(2000000198.736:904): pid=26026 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3825" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 397.135038][ T34] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 397.160800][ T34] usb 10-1: USB disconnect, device number 31 [ 397.164989][ T34] usblp0: removed [ 397.267933][T26050] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 397.329136][T26054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=26054 comm=syz.7.3828 [ 397.440806][T16853] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 397.478637][T26061] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3830'. [ 397.592118][T16853] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 397.595438][T16853] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 397.599379][T16853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 397.604434][T16853] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 397.608149][T16853] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 397.611647][T16853] usb 5-1: Product: syz [ 397.613384][T16853] usb 5-1: Manufacturer: syz [ 397.615309][T16853] usb 5-1: SerialNumber: syz [ 397.620614][T16853] usb 5-1: config 0 descriptor?? [ 397.624794][T16853] hub 5-1:0.0: bad descriptor, ignoring hub [ 397.627357][T16853] hub 5-1:0.0: probe with driver hub failed with error -5 [ 397.633249][T16853] usb 5-1: selecting invalid altsetting 0 [ 397.707541][T26078] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 397.741781][T26081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26081 comm=syz.5.3832 [ 397.800993][ T40] audit: type=1400 audit(2000000199.426:905): avc: denied { name_bind } for pid=26088 comm="syz.5.3834" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 398.230230][T26044] usb 5-1: reset high-speed USB device number 65 using dummy_hcd [ 398.343580][T26104] netlink: 'syz.7.3836': attribute type 58 has an invalid length. [ 398.383279][T26044] usb 5-1: device firmware changed [ 398.386674][ T5998] usb 5-1: USB disconnect, device number 65 [ 398.459171][T26106] FAULT_INJECTION: forcing a failure. [ 398.459171][T26106] name failslab, interval 1, probability 0, space 0, times 0 [ 398.463748][T26106] CPU: 2 UID: 0 PID: 26106 Comm: syz.7.3837 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.463766][T26106] Tainted: [L]=SOFTLOCKUP [ 398.463770][T26106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 398.463776][T26106] Call Trace: [ 398.463780][T26106] [ 398.463785][T26106] dump_stack_lvl+0x100/0x190 [ 398.463819][T26106] should_fail_ex.cold+0x5/0xa [ 398.463831][T26106] should_failslab+0xc2/0x120 [ 398.463845][T26106] kmem_cache_alloc_noprof+0x83/0x780 [ 398.463859][T26106] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 398.463871][T26106] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 398.463886][T26106] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 398.463899][T26106] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 398.463915][T26106] mmu_topup_memory_caches+0x25/0x170 [ 398.463935][T26106] kvm_mmu_load+0xd6/0x23e0 [ 398.463950][T26106] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 398.463960][T26106] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 398.463970][T26106] ? kvm_msr_allowed+0x47/0x450 [ 398.464000][T26106] ? __pfx_kvm_mmu_load+0x10/0x10 [ 398.464013][T26106] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 398.464026][T26106] ? kvm_check_and_inject_events+0x961/0x10c0 [ 398.464044][T26106] vcpu_run+0x39ee/0x5ca0 [ 398.464062][T26106] ? __lock_acquire+0x4a5/0x2630 [ 398.464075][T26106] ? __pfx_vcpu_run+0x10/0x10 [ 398.464096][T26106] ? rcu_is_watching+0x12/0xc0 [ 398.464112][T26106] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 398.464127][T26106] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 398.464147][T26106] kvm_vcpu_ioctl+0x730/0x16d0 [ 398.464159][T26106] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 398.464171][T26106] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 398.464188][T26106] ? do_vfs_ioctl+0x226/0x13e0 [ 398.464200][T26106] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 398.464209][T26106] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 398.464230][T26106] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 398.464251][T26106] ? selinux_file_ioctl+0x139/0x290 [ 398.464261][T26106] ? selinux_file_ioctl+0xb4/0x290 [ 398.464273][T26106] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 398.464285][T26106] __x64_sys_ioctl+0x18e/0x210 [ 398.464297][T26106] do_syscall_64+0xc9/0xf80 [ 398.464315][T26106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.464327][T26106] RIP: 0033:0x7fc68139aeb9 [ 398.464336][T26106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.464347][T26106] RSP: 002b:00007fc6821e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.464358][T26106] RAX: ffffffffffffffda RBX: 00007fc681615fa0 RCX: 00007fc68139aeb9 [ 398.464365][T26106] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 398.464371][T26106] RBP: 00007fc6821e3090 R08: 0000000000000000 R09: 0000000000000000 [ 398.464377][T26106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.464383][T26106] R13: 00007fc681616038 R14: 00007fc681615fa0 R15: 00007ffd444ed908 [ 398.464397][T26106] [ 398.590056][ T5998] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 398.678722][T26122] geneve3: entered promiscuous mode [ 398.680843][T26122] geneve3: entered allmulticast mode [ 398.742288][ T5998] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 398.745360][ T5998] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 398.748588][ T5998] usb 5-1: config 0 interface 0 has no altsetting 0 [ 398.754725][ T5998] usb 5-1: string descriptor 0 read error: -22 [ 398.757216][ T5998] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 398.760923][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 398.766220][ T5998] usb 5-1: config 0 descriptor?? [ 398.769712][ T5998] hub 5-1:0.0: bad descriptor, ignoring hub [ 398.772365][ T5998] hub 5-1:0.0: probe with driver hub failed with error -5 [ 398.776577][ T5998] usb 5-1: selecting invalid altsetting 0 [ 398.832391][T26151] vcan1: entered allmulticast mode [ 398.915050][ T40] audit: type=1400 audit(2000000200.547:906): avc: denied { remount } for pid=26154 comm="syz.7.3842" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 398.917531][T26157] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.3842'. [ 398.926026][T26155] syz.7.3842 (26155): drop_caches: 2 [ 399.080221][T16853] usb 5-1: USB disconnect, device number 66 [ 399.127107][T26181] tmpfs: Invalid gid '0x00000000ffffffff' [ 399.270061][T26187] FAULT_INJECTION: forcing a failure. [ 399.270061][T26187] name failslab, interval 1, probability 0, space 0, times 0 [ 399.274212][T26187] CPU: 0 UID: 0 PID: 26187 Comm: syz.7.3846 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.274229][T26187] Tainted: [L]=SOFTLOCKUP [ 399.274233][T26187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 399.274239][T26187] Call Trace: [ 399.274244][T26187] [ 399.274250][T26187] dump_stack_lvl+0x100/0x190 [ 399.274268][T26187] should_fail_ex.cold+0x5/0xa [ 399.274281][T26187] should_failslab+0xc2/0x120 [ 399.274295][T26187] kmem_cache_alloc_noprof+0x83/0x780 [ 399.274309][T26187] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 399.274322][T26187] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 399.274337][T26187] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 399.274349][T26187] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 399.274366][T26187] mmu_topup_memory_caches+0x25/0x170 [ 399.274382][T26187] kvm_mmu_load+0xd6/0x23e0 [ 399.274396][T26187] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 399.274407][T26187] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 399.274417][T26187] ? kvm_msr_allowed+0x47/0x450 [ 399.274433][T26187] ? __pfx_kvm_mmu_load+0x10/0x10 [ 399.274447][T26187] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 399.274460][T26187] ? kvm_check_and_inject_events+0x961/0x10c0 [ 399.274483][T26187] vcpu_run+0x39ee/0x5ca0 [ 399.274507][T26187] ? __lock_acquire+0x4a5/0x2630 [ 399.274530][T26187] ? __pfx_vcpu_run+0x10/0x10 [ 399.274560][T26187] ? rcu_is_watching+0x12/0xc0 [ 399.274587][T26187] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 399.274603][T26187] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 399.274622][T26187] kvm_vcpu_ioctl+0x730/0x16d0 [ 399.274635][T26187] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 399.274647][T26187] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 399.274679][T26187] ? do_vfs_ioctl+0x226/0x13e0 [ 399.274690][T26187] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 399.274700][T26187] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 399.274713][T26187] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 399.274735][T26187] ? selinux_file_ioctl+0x139/0x290 [ 399.274745][T26187] ? selinux_file_ioctl+0xb4/0x290 [ 399.274757][T26187] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 399.274769][T26187] __x64_sys_ioctl+0x18e/0x210 [ 399.274781][T26187] do_syscall_64+0xc9/0xf80 [ 399.274795][T26187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.274806][T26187] RIP: 0033:0x7fc68139aeb9 [ 399.274816][T26187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.274828][T26187] RSP: 002b:00007fc6821e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.274839][T26187] RAX: ffffffffffffffda RBX: 00007fc681615fa0 RCX: 00007fc68139aeb9 [ 399.274845][T26187] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 399.274851][T26187] RBP: 00007fc6821e3090 R08: 0000000000000000 R09: 0000000000000000 [ 399.274857][T26187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.274867][T26187] R13: 00007fc681616038 R14: 00007fc681615fa0 R15: 00007ffd444ed908 [ 399.274881][T26187] [ 399.789482][ T5998] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 399.849443][T16853] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 399.889437][ T34] usb 12-1: new full-speed USB device number 31 using dummy_hcd [ 399.945815][ T5998] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 399.949736][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 399.953187][ T5998] usb 5-1: Product: syz [ 399.954981][ T5998] usb 5-1: Manufacturer: syz [ 399.956973][ T5998] usb 5-1: SerialNumber: syz [ 399.962242][ T5998] usb 5-1: config 0 descriptor?? [ 399.970615][ T5998] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 399.973089][ T5998] dvb-usb: bulk message failed: -22 (2/0) [ 399.977362][ T5998] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 399.980827][ T5998] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 399.983377][ T5998] usb 5-1: media controller created [ 399.989778][ T5998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.999419][T16853] usb 10-1: Using ep0 maxpacket: 16 [ 400.001436][T16853] usb 10-1: too many configurations: 123, using maximum allowed: 8 [ 400.004619][T16853] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.008330][T16853] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.012110][T16853] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.016369][T16853] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.020529][T16853] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.024192][T16853] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.027843][T16853] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.032503][T16853] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.036728][T16853] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 400.039497][T16853] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 400.041957][T16853] usb 10-1: SerialNumber: syz [ 400.046107][T16853] usb 10-1: config 0 descriptor?? [ 400.050949][T16853] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input42 [ 400.060361][ T34] usb 12-1: config 0 has an invalid interface number: 205 but max is 0 [ 400.063187][ T34] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.066339][ T34] usb 12-1: config 0 has no interface number 0 [ 400.068308][ T34] usb 12-1: config 0 interface 205 has no altsetting 0 [ 400.072143][ T34] usb 12-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 400.075288][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.077797][ T34] usb 12-1: Product: syz [ 400.079183][ T34] usb 12-1: Manufacturer: syz [ 400.081214][ T34] usb 12-1: SerialNumber: syz [ 400.086456][ T34] usb 12-1: config 0 descriptor?? [ 400.087690][ T40] audit: type=1400 audit(2000000201.718:907): avc: denied { setattr } for pid=26229 comm="syz.6.3853" name="SCTPv6" dev="sockfs" ino=80438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 400.089729][ T34] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 400.101537][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 400.118323][T26234] exFAT-fs (nbd6): unable to read boot sector [ 400.121239][T26234] exFAT-fs (nbd6): failed to read boot sector [ 400.125230][T26234] exFAT-fs (nbd6): failed to recognize exfat type [ 400.125273][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 400.132480][ T34] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 400.136932][ T34] usb 12-1: media controller created [ 400.139815][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 400.148523][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 400.151008][ T34] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 400.157259][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb12/12-1/input/input43 [ 400.178936][T26198] No source specified [ 400.184740][ T5998] dvb-usb: bulk message failed: -22 (1/0) [ 400.212318][ T5998] DVB: Unable to find symbol mt352_attach() [ 400.214475][ T5998] dvb-usb: bulk message failed: -22 (5/0) [ 400.217701][ T5998] zl10353_read_register: readreg error (reg=127, ret==-121) [ 400.220291][ T5998] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 400.279410][ T5998] rc_core: IR keymap rc-dvico-mce not found [ 400.281387][ T5998] Registered IR keymap rc-empty [ 400.284097][ T5998] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 400.288725][ T5998] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input44 [ 400.424699][T26249] FAULT_INJECTION: forcing a failure. [ 400.424699][T26249] name failslab, interval 1, probability 0, space 0, times 0 [ 400.428989][T26249] CPU: 0 UID: 0 PID: 26249 Comm: syz.6.3855 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.429006][T26249] Tainted: [L]=SOFTLOCKUP [ 400.429010][T26249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 400.429029][T26249] Call Trace: [ 400.429033][T26249] [ 400.429038][T26249] dump_stack_lvl+0x100/0x190 [ 400.429057][T26249] should_fail_ex.cold+0x5/0xa [ 400.429069][T26249] should_failslab+0xc2/0x120 [ 400.429084][T26249] kmem_cache_alloc_noprof+0x83/0x780 [ 400.429098][T26249] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 400.429122][T26249] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 400.429140][T26249] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 400.429152][T26249] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 400.429169][T26249] mmu_topup_memory_caches+0x25/0x170 [ 400.429185][T26249] kvm_mmu_load+0xd6/0x23e0 [ 400.429200][T26249] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 400.429210][T26249] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 400.429220][T26249] ? kvm_msr_allowed+0x47/0x450 [ 400.429236][T26249] ? __pfx_kvm_mmu_load+0x10/0x10 [ 400.429249][T26249] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 400.429262][T26249] ? kvm_check_and_inject_events+0x961/0x10c0 [ 400.429280][T26249] vcpu_run+0x39ee/0x5ca0 [ 400.429297][T26249] ? __lock_acquire+0x4a5/0x2630 [ 400.429310][T26249] ? __pfx_vcpu_run+0x10/0x10 [ 400.429331][T26249] ? rcu_is_watching+0x12/0xc0 [ 400.429347][T26249] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 400.429362][T26249] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 400.429382][T26249] kvm_vcpu_ioctl+0x730/0x16d0 [ 400.429395][T26249] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 400.429407][T26249] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 400.429424][T26249] ? do_vfs_ioctl+0x226/0x13e0 [ 400.429435][T26249] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 400.429444][T26249] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 400.429458][T26249] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 400.429479][T26249] ? selinux_file_ioctl+0x139/0x290 [ 400.429490][T26249] ? selinux_file_ioctl+0xb4/0x290 [ 400.429501][T26249] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 400.429514][T26249] __x64_sys_ioctl+0x18e/0x210 [ 400.429525][T26249] do_syscall_64+0xc9/0xf80 [ 400.429539][T26249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.429550][T26249] RIP: 0033:0x7fcdcfd9aeb9 [ 400.429559][T26249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.429570][T26249] RSP: 002b:00007fcdd0ce6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.429580][T26249] RAX: ffffffffffffffda RBX: 00007fcdd0015fa0 RCX: 00007fcdcfd9aeb9 [ 400.429587][T26249] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 400.429593][T26249] RBP: 00007fcdd0ce6090 R08: 0000000000000000 R09: 0000000000000000 [ 400.429599][T26249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.429605][T26249] R13: 00007fcdd0016038 R14: 00007fcdd0015fa0 R15: 00007ffd343fcc58 [ 400.429619][T26249] [ 401.778491][T19300] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 401.929966][T19300] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.934349][T19300] usb 11-1: config 0 has no interfaces? [ 401.943027][T19300] usb 11-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 401.946968][T19300] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.950676][T19300] usb 11-1: Product: syz [ 401.952524][T19300] usb 11-1: Manufacturer: syz [ 401.954514][T19300] usb 11-1: SerialNumber: syz [ 401.959062][T19300] usb 11-1: config 0 descriptor?? [ 402.521342][T26298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.525399][T26298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.617833][ T5326] bcm5974 10-1:0.0: could not read from device [ 402.627814][ T5326] bcm5974 10-1:0.0: could not read from device [ 402.635944][ T5326] bcm5974 10-1:0.0: could not read from device [ 402.640991][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 402.641044][T16853] usb 10-1: USB disconnect, device number 32 [ 402.645502][ T5998] dvb-usb: schedule remote query interval to 100 msecs. [ 402.647722][ T5998] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 402.649145][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 402.657370][ T5326] bcm5974 10-1:0.0: could not read from device [ 402.659647][ T5998] usb 5-1: USB disconnect, device number 67 [ 402.678048][ T34] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 402.691441][ T34] usb 12-1: USB disconnect, device number 31 [ 402.725490][ T5998] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 402.730601][ T34] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 402.787825][T26357] ================================================================== [ 402.790537][T26357] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x209a/0x4160 [ 402.793226][T26357] Write of size 5120 at addr ffffc900032f6000 by task vivid-000-vid-c/26357 [ 402.797026][T26357] [ 402.798463][T26357] CPU: 1 UID: 0 PID: 26357 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 402.798480][T26357] Tainted: [L]=SOFTLOCKUP [ 402.798484][T26357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.798491][T26357] Call Trace: [ 402.798496][T26357] [ 402.798500][T26357] dump_stack_lvl+0x100/0x190 [ 402.798518][T26357] print_report+0x156/0x4c9 [ 402.798533][T26357] ? __virt_addr_valid+0x81/0x620 [ 402.798544][T26357] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 402.798556][T26357] kasan_report+0xdf/0x1a0 [ 402.798571][T26357] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 402.798585][T26357] kasan_check_range+0x10f/0x1e0 [ 402.798601][T26357] __asan_memcpy+0x3c/0x60 [ 402.798612][T26357] tpg_fill_plane_buffer+0x209a/0x4160 [ 402.798630][T26357] ? tpg_calc_text_basep+0x22d/0x2c0 [ 402.798643][T26357] vivid_fillbuff+0x95d/0x3ed0 [ 402.798658][T26357] ? __lock_acquire+0x4a5/0x2630 [ 402.798671][T26357] ? __lock_acquire+0x4a5/0x2630 [ 402.798685][T26357] ? __pfx_vivid_fillbuff+0x10/0x10 [ 402.798700][T26357] ? __lock_acquire+0x4a5/0x2630 [ 402.798714][T26357] ? v4l2_ctrl_request_setup+0x45a/0xa60 [ 402.798729][T26357] ? lockdep_hardirqs_on+0x78/0x100 [ 402.798743][T26357] ? vivid_thread_vid_cap_tick+0x81b/0x1470 [ 402.798758][T26357] vivid_thread_vid_cap_tick+0x81b/0x1470 [ 402.798776][T26357] vivid_thread_vid_cap+0x454/0xd70 [ 402.798793][T26357] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 402.798810][T26357] ? do_raw_spin_lock+0x128/0x260 [ 402.798823][T26357] ? find_held_lock+0x2b/0x80 [ 402.798842][T26357] ? __kthread_parkme+0xbb/0x230 [ 402.798863][T26357] ? __kthread_parkme+0xbb/0x230 [ 402.798879][T26357] ? rcu_is_watching+0x12/0xc0 [ 402.798895][T26357] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 402.798907][T26357] ? lockdep_hardirqs_on+0x78/0x100 [ 402.798919][T26357] ? __kthread_parkme+0x18c/0x230 [ 402.798936][T26357] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 402.798951][T26357] kthread+0x3b3/0x730 [ 402.798962][T26357] ? __pfx_kthread+0x10/0x10 [ 402.798972][T26357] ? ret_from_fork+0x79/0xaf0 [ 402.798984][T26357] ? ret_from_fork+0x79/0xaf0 [ 402.798996][T26357] ? rcu_is_watching+0x12/0xc0 [ 402.799010][T26357] ? __pfx_kthread+0x10/0x10 [ 402.799021][T26357] ret_from_fork+0x754/0xaf0 [ 402.799033][T26357] ? __pfx_ret_from_fork+0x10/0x10 [ 402.799046][T26357] ? __switch_to+0x7b9/0x10c0 [ 402.799060][T26357] ? __pfx_kthread+0x10/0x10 [ 402.799071][T26357] ret_from_fork_asm+0x1a/0x30 [ 402.799084][T26357] [ 402.799089][T26357] [ 402.880038][T26357] The buggy address belongs to a 1-page vmalloc region starting at 0xffffc900032f6000 allocated at vb2_vmalloc_alloc+0x135/0x410 [ 402.884122][T26357] The buggy address belongs to the physical page: [ 402.886131][T26357] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x13059 [ 402.888782][T26357] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 402.891103][T26357] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 402.893717][T26357] raw: 0000000000000004 0000000000000000 00000001ffffffff 0000000000000000 [ 402.896322][T26357] page dumped because: kasan: bad access detected [ 402.898304][T26357] page_owner tracks the page as allocated [ 402.900053][T26357] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26334, tgid 26332 (syz.7.3861), ts 402782996672, free_ts 402782976262 [ 402.905813][T26357] post_alloc_hook+0x1e1/0x250 [ 402.907306][T26357] get_page_from_freelist+0xe3d/0x2e10 [ 402.908955][T26357] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 402.910798][T26357] alloc_pages_bulk_noprof+0x777/0x1500 [ 402.912532][T26357] alloc_pages_bulk_mempolicy_noprof+0x250/0x1270 [ 402.914553][T26357] __vmalloc_node_range_noprof+0x54b/0x1530 [ 402.916390][T26357] vmalloc_user_noprof+0x9e/0xe0 [ 402.917958][T26357] vb2_vmalloc_alloc+0x135/0x410 [ 402.919502][T26357] __vb2_queue_alloc+0x8cc/0x1150 [ 402.921085][T26357] vb2_core_reqbufs+0x899/0xf30 [ 402.922661][T26357] __vb2_init_fileio+0x32d/0xff0 [ 402.924200][T26357] vb2_core_poll+0x611/0x740 [ 402.925658][T26357] vb2_poll+0x4b/0xe0 [ 402.926935][T26357] vb2_fop_poll+0x10e/0x350 [ 402.928354][T26357] v4l2_poll+0x15f/0x220 [ 402.929658][T26357] do_sys_poll+0x6e5/0xeb0 [ 402.931020][T26357] page last free pid 26334 tgid 26332 stack trace: [ 402.932977][T26357] __free_frozen_pages+0x822/0x1130 [ 402.934599][T26357] __kasan_populate_vmalloc+0x1ea/0x210 [ 402.936309][T26357] alloc_vmap_area+0x935/0x2a00 [ 402.937797][T26357] __get_vm_area_node+0x1ca/0x330 [ 402.939431][T26357] __vmalloc_node_range_noprof+0x213/0x1530 [ 402.941248][T26357] vmalloc_user_noprof+0x9e/0xe0 [ 402.942804][T26357] vb2_vmalloc_alloc+0x135/0x410 [ 402.944293][T26357] __vb2_queue_alloc+0x8cc/0x1150 [ 402.945815][T26357] vb2_core_reqbufs+0x899/0xf30 [ 402.947323][T26357] __vb2_init_fileio+0x32d/0xff0 [ 402.948860][T26357] vb2_core_poll+0x611/0x740 [ 402.950331][T26357] vb2_poll+0x4b/0xe0 [ 402.951598][T26357] vb2_fop_poll+0x10e/0x350 [ 402.953049][T26357] v4l2_poll+0x15f/0x220 [ 402.954391][T26357] do_sys_poll+0x6e5/0xeb0 [ 402.955788][T26357] __x64_sys_ppoll+0x2b5/0x350 [ 402.957327][T26357] [ 402.958091][T26357] Memory state around the buggy address: [ 402.959830][T26357] ffffc900032f6f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.962305][T26357] ffffc900032f6f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 402.964799][T26357] >ffffc900032f7000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 402.967251][T26357] ^ [ 402.968484][T26357] ffffc900032f7080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 402.970922][T26357] ffffc900032f7100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 402.973468][T26357] ================================================================== [ 402.977612][T26357] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 402.979897][T26357] CPU: 1 UID: 0 PID: 26357 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 402.983402][T26357] Tainted: [L]=SOFTLOCKUP [ 402.984727][T26357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.987747][T26357] Call Trace: [ 402.988841][T26357] [ 402.989746][T26357] dump_stack_lvl+0x100/0x190 [ 402.991172][T26357] vpanic+0x20d/0x630 [ 402.992435][T26357] panic+0xd1/0xd1 [ 402.993599][T26357] ? __pfx_panic+0x10/0x10 [ 402.994974][T26357] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 402.996691][T26357] ? preempt_schedule_common+0x42/0xc0 [ 402.998324][T26357] ? check_panic_on_warn+0x1f/0x90 [ 402.999903][T26357] check_panic_on_warn.cold+0x19/0x34 [ 403.001549][T26357] end_report.part.0+0x3a/0x90 [ 403.003081][T26357] kasan_report.cold+0xe/0x18 [ 403.004567][T26357] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 403.006315][T26357] kasan_check_range+0x10f/0x1e0 [ 403.007887][T26357] __asan_memcpy+0x3c/0x60 [ 403.009266][T26357] tpg_fill_plane_buffer+0x209a/0x4160 [ 403.010940][T26357] ? tpg_calc_text_basep+0x22d/0x2c0 [ 403.012545][T26357] vivid_fillbuff+0x95d/0x3ed0 [ 403.014045][T26357] ? __lock_acquire+0x4a5/0x2630 [ 403.015623][T26357] ? __lock_acquire+0x4a5/0x2630 [ 403.017206][T26357] ? __pfx_vivid_fillbuff+0x10/0x10 [ 403.018846][T26357] ? __lock_acquire+0x4a5/0x2630 [ 403.020377][T26357] ? v4l2_ctrl_request_setup+0x45a/0xa60 [ 403.022103][T26357] ? lockdep_hardirqs_on+0x78/0x100 [ 403.023732][T26357] ? vivid_thread_vid_cap_tick+0x81b/0x1470 [ 403.025537][T26357] vivid_thread_vid_cap_tick+0x81b/0x1470 [ 403.027342][T26357] vivid_thread_vid_cap+0x454/0xd70 [ 403.028899][T26357] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 403.030622][T26357] ? do_raw_spin_lock+0x128/0x260 [ 403.032191][T26357] ? find_held_lock+0x2b/0x80 [ 403.033673][T26357] ? __kthread_parkme+0xbb/0x230 [ 403.035210][T26357] ? __kthread_parkme+0xbb/0x230 [ 403.036696][T26357] ? rcu_is_watching+0x12/0xc0 [ 403.038173][T26357] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 403.039956][T26357] ? lockdep_hardirqs_on+0x78/0x100 [ 403.041557][T26357] ? __kthread_parkme+0x18c/0x230 [ 403.043129][T26357] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 403.044874][T26357] kthread+0x3b3/0x730 [ 403.046147][T26357] ? __pfx_kthread+0x10/0x10 [ 403.047557][T26357] ? ret_from_fork+0x79/0xaf0 [ 403.048985][T26357] ? ret_from_fork+0x79/0xaf0 [ 403.050446][T26357] ? rcu_is_watching+0x12/0xc0 [ 403.051953][T26357] ? __pfx_kthread+0x10/0x10 [ 403.053453][T26357] ret_from_fork+0x754/0xaf0 [ 403.054911][T26357] ? __pfx_ret_from_fork+0x10/0x10 [ 403.056471][T26357] ? __switch_to+0x7b9/0x10c0 [ 403.057927][T26357] ? __pfx_kthread+0x10/0x10 [ 403.059336][T26357] ret_from_fork_asm+0x1a/0x30 [ 403.060860][T26357] [ 403.062668][T26357] Kernel Offset: disabled [ 403.063994][T26357] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:52:11 Registers: info registers vcpu 0 CPU#0 RAX=0000000000b90637 RBX=ffffffff8e297ac0 RCX=ffffffff8b76d4b5 RDX=0000000000000000 RSI=ffffffff8dc45b24 RDI=ffffffff8bfa3620 RBP=0000000000000000 RSP=ffffffff8e207e00 R8 =0000000000000001 R9 =ffffed100d48673d R10=ffff88806a4339eb R11=0000000000000000 R12=fffffbfff1c52f58 R13=0000000000000000 R14=ffffffff90b749d0 R15=0000000000000000 RIP=ffffffff8b76be1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d65d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000020c0 CR3=0000000062c66000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff00 Opmask01=0000000000000000 Opmask02=0000000002fefce0 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4de7e4a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4de7e4a6 00007ffc4de7e4ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd577008704 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd577008750 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5770086c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd577008742 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8569b2b5 RDI=ffffffff9b209c00 RBP=ffffffff9b209bc0 RSP=ffffc90003eb7110 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=000000000000002d R14=0000000000000010 R15=ffffffff8569b250 RIP=ffffffff8569b2df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000069f000 CR3=00000000351ae000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff00 Opmask01=0000000000000000 Opmask02=00000000fefcf800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd343fd146 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd343fd146 00007ffd343fd14c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdcfe08704 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdcfe08750 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdcfe086c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdcfe08742 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000003e642f RBX=ffff88801e2d4980 RCX=ffffffff8b76d4b5 RDX=0000000000000000 RSI=ffffffff8dc45b24 RDI=ffffffff8bfa3620 RBP=0000000000000002 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c673d R10=ffff88806a6339eb R11=0000000000000000 R12=ffffed1003c5a930 R13=0000000000000002 R14=ffffffff90b749d0 R15=0000000000000000 RIP=ffffffff8b76be1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000006000 CR3=0000000052f21000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff81b8668d ffffffff81ac9bb0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813f7b1e ffffffff81ac9bb0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd343fd146 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd343fd146 00007ffd343fd14c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdcfe08704 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdcfe08750 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdcfe086c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdcfe08742 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b3cfc480597b166 d8f764926ef01dee 1128e4ef971645d8 e674b2586c3f8a02 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff828e7fa7 ffffffff828e7f8a ffffffff828e7e2f ffffffff828e7e03 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff888056dac330 RCX=ffffffff8b278f65 RDX=0000000000000001 RSI=0000000000000004 RDI=ffff888056dac338 RBP=0000000000000000 RSP=ffffc900039af3d8 R8 =0000000000000001 R9 =ffffed100adb5867 R10=ffff888056dac33b R11=0000000000000000 R12=ffff888056dac338 R13=0000000000000000 R14=ffff88806a7398e8 R15=ffff888056dac3c0 RIP=ffffffff8b278f65 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd577f0a6c0 ffffffff 00c00000 GS =0000 ffff8880d68d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd576fe8600 CR3=000000005fe80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0225dfdbfc0070bd 270b350016000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4de7e4a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4de7e4a6 00007ffc4de7e4ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd577008704 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd577008750 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5770086c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd577008742 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 149b66b99c2189d6 e8842398016df983 dedffd720a68b3f0 933aa876fe4f532e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5771e4498 00007fd5771e4468 00007fd5771e44a0 00007fd5771e4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000