last executing test programs: 4.649951495s ago: executing program 0 (id=311): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000001c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00') (async) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff8100632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) (async) eventfd2(0x3, 0x800) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=r0) (async) statx(r1, 0x0, 0x1000, 0x6000, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = eventfd2(0xc, 0x1) write$eventfd(r4, &(0x7f00000002c0)=0x22, 0x8) (async) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0xb, 0xa4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe) 4.599304605s ago: executing program 0 (id=313): ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x10000, 0x3833, 0x80, 0x4, 0x7, "69df790646a0e7c6c95842451a7a5805dcc6a08af55043573ae151d5b24b6fe29bd66e6fbd171380ed198b44826f995d34afe4d883b554816b9c0073fdb48c9046a60b473086c788cd8e29e80bfc85b886e451753fd39a91d838897c79b8c7974a3d5524d6a411f7af44474f8fa3f4a08701abfaf74ec30411194d0011c1e3da"}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000014000000000000bf00396a3418a4bd75b1f3d224a8ddff000007c30c880b48b745000000e2518ff5658c084eff5d5c8b33a7bb095b7d0251b27348b713705e3afd215132a635624f8d8667e2f590948e77c5e6bca0819bf7046bbad8018884fc54bbd71a5ce7191703e8ab1b6bb753ead2ef99189540fbf079519c6b5778af6102da6d24ae997c8a13106382e16ea341f7f939ed59699897e1aa2d92099dcfe6d04f86ef804e74d9a8e3d7bc09acc977b65a4879a2d1e5844d3c420b87"], 0x48) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000340)={0x8, [0x7, 0x382, 0x6, 0x4, 0xff, 0xc, 0x3, 0x8]}, &(0x7f0000000380)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001200)={r2}, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6(0x10, 0x3, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3305) sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000001f04740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x58, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x43, @empty, 0x3}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0x3, @local, 0x7}]}, &(0x7f0000000140)=0x10) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) listen(r6, 0xfff) accept$inet6(r6, 0x0, 0x0) 3.999984639s ago: executing program 2 (id=327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xe, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x24044094) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup(0xffffffffffffffff) (async) r5 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) sendto$packet(r5, 0x0, 0x0, 0x4008095, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x22, &(0x7f0000000ac0), 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.87669925s ago: executing program 2 (id=330): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000730000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="051c28bd7000fddbdf251200000008000300", @ANYRES32=r4, @ANYBLOB="060028"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 3.876476684s ago: executing program 2 (id=331): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="000f0000010002406542d01d32491f50e3f7024998bb"], 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x8, 0x5, 0x2, 0x0, 0x5, '\x00', "037ec42b", "8000", "0100", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "006a9cc1f000", "cf6cce2296b3f853e224c4e0"]}) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f00000000c0)) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000040)={0xe0, 0x80000000, 0x7, 0xffff, 0x8, 0xe, "1efcff00", 0x0, 0x0, 0x0, 0xa, 0x7}) 3.698406066s ago: executing program 0 (id=335): r0 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x800) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000080)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000002a40), 0x4a0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000100)) 3.698114361s ago: executing program 1 (id=336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) 3.697495151s ago: executing program 1 (id=338): getpriority(0x0, 0xffffffffffffffff) open$dir(&(0x7f0000000180)='.\x00', 0xa0000, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0x12, 0x1, 0x0, 0x2, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000002060502000000000000000000000000140007800800114000000000050015000600000005000100060000e0050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c000000100001040800"/20, @ANYRESOCT=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r0, @ANYRES16=r4, @ANYBLOB="27fcfd73e827f651410bc6ef7224f5cfbd4867958497500a05e34765f039cb674cdd299405a08794041255038c6c899fcb03402e23e82cb9abc084ede06034528866036315c24f3aa758022d35179eb930d14c130769da6bead17ccb29b710e193655774d55b2155cc2e8dfcd751670f5730a97794536c9f6779d6d5332f8b7105f3e6c290f790918c405f21f17e5b917e2a4748f1c8111c3984168e070bc0a8ad6f5c2575fc4d697fef3ef4cf18345a887ebfe0263fd253a5b0d97effd2c7a58ab966f70b38bf22c60f8c51447e8cce809f630bcdbfa17e863c63c848b15aab5a04c85b42bbe45915564f2e"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) 3.695610026s ago: executing program 0 (id=339): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x3, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa}, 0x20) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.639896521s ago: executing program 1 (id=340): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e62, 0xfffffffe, @mcast2, 0x100}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000080000000d00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000be00"/28], 0x50) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x8eb, &(0x7f0000000140)={0x0, 0xe2ec, 0x400, 0xeffffffb, 0x330}, &(0x7f0000000080), &(0x7f0000ff4000)) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000480)={0x0, 0xfb8d, 0x1000, 0x10000001, 0xffdffffd}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x81}}) io_uring_enter(r6, 0x47f6, 0xffffffff, 0x4a, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r9, &(0x7f00000020c0)={0x2020}, 0x2020) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r9) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x34, r11, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x3e3c}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xa3e3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40010) pread64(r2, &(0x7f00000000c0)=""/138, 0x8a, 0x1) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000480)={r0, 0x0, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x12, 0x3, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) 3.540031593s ago: executing program 0 (id=341): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) (async) fcntl$lock(r0, 0x26, &(0x7f00000031c0)) (async) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x2cc, 0x1}) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3.159795605s ago: executing program 0 (id=348): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r1, &(0x7f0000000100)) setxattr(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=@known='system.advise\x00', &(0x7f0000000200)='\x00', 0x1, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"00141f6c9062ef46f07f0f042957449b", 0x0, 0x0, {0xfffffffffffff407, 0x2}, {0x5, 0x5}, 0xd8, [0x9, 0x7fb9, 0xfff, 0x5, 0xfffffffffffff741, 0x0, 0x9, 0x3ff, 0x3, 0x4, 0x2e3, 0x4, 0x3, 0x7, 0x3, 0x7]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000340)=r2) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x105000, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r3, &(0x7f00000003c0)="bf22e051548dda74de74e91c2270f8c323708aea04f58bafec120af584e2831566cb9247e5970743790f31b440c1bc28b8bdb955fd08543379ab00250be5e255699c75ec9c4226734e57bd142a14ca87ecb40dfd90b4b5ee9c981f1ad933e88fe77ed9c23ee9926d8eed51", &(0x7f0000000440)=""/179}, 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000540)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000580)={r4}) r5 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x7, 0x381200) close_range(r5, r0, 0x0) io_uring_enter(r3, 0x12a5, 0x143a, 0x11, &(0x7f0000000600)={[0xa69]}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000640)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000680)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000006c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02864c3, &(0x7f0000000740)={&(0x7f0000000700)=[r6, r7, 0x0, r8], 0xb826, 0x4, 0x2}) r9 = accept4$bt_l2cap(r3, &(0x7f0000000780)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x80000) pwritev(r9, &(0x7f0000000b80)=[{&(0x7f0000000800)="01d0ee0c93872fd2730e1880d2b694823d1f29a1a11efc9872ae9d93a456e5200ae1da59419433df059762d8c2164003b391febf1f674f56bf61929255e81aab29f88a12f6d84a90ea47510f56eb10352dea1449e80118d43a96a827935d84f275891e4354832f3e52d6ada289a7c6dab3bd69f8b97dcbf888e9b5a8bda648c4a70fe71efd3d707f5f4184351b8491c27dc3c4f7406e1205a1a49ad3e788ef8860820c672eb0f268ce", 0xa9}, {&(0x7f00000008c0)="b38fbde649f3868c60d990b98a294bdb6dfb61a057ba7c358f53cb849fbcfa08607d0d5404c3517e900c148cdbab4dc1fd91683a8695b458e26f832407146d91ba58866072863353992694099d649cd067bfc6bf6c53bbd24be06fe895dd9ca158d58b2423acd11417796a843c0f84051d15dc08d194dc3dcbb5e9838427bb9b24580cd3bda201f432747dc3c684702416aca8", 0x93}, {&(0x7f0000000980)="e27a50d24cb099edfc7885fd5663e1e0044e6203446ddd77cd44e37f0ae39347b45a8c577fc755bb4c4686fc59f7b04fba2b826e5f924cfe62bfb3ab15dee6027933aa10280e1d8bdbae7c784f304990ae7ccda4c6c134dfe5d16e7e27570844d0dab1bc35219ca2739780c5a61c90fdbcc70f67fa2662141543f924451fb67343c9bb47841fce70691fa2ecc040dc3b46a0327e5208f28e84ff7f905846594997", 0xa1}, {&(0x7f0000000a40)="68e53f8313cd60bb7b483e874a00f05c7d6ddb92ba5146311778a1760a56dde42680b27f3d2ecc4cbb060513c590f80a44e07a5b6dddd237028ca48a9f8f4a3895f3f1abb98793e2bcfdd30e54dcc82c988d662bdd1e96d5de80fc1bb6450525ab15cd500699e3919fec37afac022c10b06c93e548c9b076a75734d0ec98d691d6b77bf5f7a0fa", 0x87}, {&(0x7f0000000b00)="03bde8557988eff176f34ef09d6b1d64d98aa9fbbfb64d6429afd625d6f3aec970e4c2989bfa67e86faf1e309697237829d4a2a5541735b10985ee3bbc7fb454421d8eb8dcc990", 0x47}], 0x5, 0x3, 0x3) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000c00)={@local, @empty, @local}, &(0x7f0000000c40)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e80)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x5, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000cc0)='syzkaller\x00', 0x9, 0xca, &(0x7f0000000d00)=""/202, 0x20980, 0x2e, '\x00', 0x0, @xdp, r0, 0x8, &(0x7f0000000e00)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000e40)={0x2, 0xe, 0x3, 0x9}, 0x10, r10, r3, 0x4, &(0x7f0000000ec0)=[r3, r3, r3, r0, r0, r0], &(0x7f0000000f00)=[{0x1, 0x5, 0x6, 0x4}, {0x2, 0x2}, {0x0, 0x2, 0x1, 0x3}, {0x3, 0x1, 0xf, 0x7}], 0x10, 0x4}, 0x94) syz_open_dev$dmmidi(&(0x7f0000001000), 0xc9, 0x105003) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x10) syz_open_dev$sndpcmp(&(0x7f0000001040), 0x8, 0x80800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000001080)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x81, 0x3}, &(0x7f0000001140)=0x90) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001180)=@assoc_value={r11, 0x9}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000011c0)={0x0, 0x0, r3}) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000001200)=0x80, &(0x7f0000001240)=0x1) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f00000012c0)={&(0x7f0000001280)=[r12, r7, r12, r12], 0x6a, 0x4, 0x2}) 3.110673311s ago: executing program 32 (id=348): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r1, &(0x7f0000000100)) setxattr(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=@known='system.advise\x00', &(0x7f0000000200)='\x00', 0x1, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"00141f6c9062ef46f07f0f042957449b", 0x0, 0x0, {0xfffffffffffff407, 0x2}, {0x5, 0x5}, 0xd8, [0x9, 0x7fb9, 0xfff, 0x5, 0xfffffffffffff741, 0x0, 0x9, 0x3ff, 0x3, 0x4, 0x2e3, 0x4, 0x3, 0x7, 0x3, 0x7]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000340)=r2) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x105000, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r3, &(0x7f00000003c0)="bf22e051548dda74de74e91c2270f8c323708aea04f58bafec120af584e2831566cb9247e5970743790f31b440c1bc28b8bdb955fd08543379ab00250be5e255699c75ec9c4226734e57bd142a14ca87ecb40dfd90b4b5ee9c981f1ad933e88fe77ed9c23ee9926d8eed51", &(0x7f0000000440)=""/179}, 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000540)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000580)={r4}) r5 = syz_open_dev$sndpcmp(&(0x7f00000005c0), 0x7, 0x381200) close_range(r5, r0, 0x0) io_uring_enter(r3, 0x12a5, 0x143a, 0x11, &(0x7f0000000600)={[0xa69]}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000640)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000680)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f00000006c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r3, 0xc02864c3, &(0x7f0000000740)={&(0x7f0000000700)=[r6, r7, 0x0, r8], 0xb826, 0x4, 0x2}) r9 = accept4$bt_l2cap(r3, &(0x7f0000000780)={0x1f, 0x0, @none}, &(0x7f00000007c0)=0xe, 0x80000) pwritev(r9, &(0x7f0000000b80)=[{&(0x7f0000000800)="01d0ee0c93872fd2730e1880d2b694823d1f29a1a11efc9872ae9d93a456e5200ae1da59419433df059762d8c2164003b391febf1f674f56bf61929255e81aab29f88a12f6d84a90ea47510f56eb10352dea1449e80118d43a96a827935d84f275891e4354832f3e52d6ada289a7c6dab3bd69f8b97dcbf888e9b5a8bda648c4a70fe71efd3d707f5f4184351b8491c27dc3c4f7406e1205a1a49ad3e788ef8860820c672eb0f268ce", 0xa9}, {&(0x7f00000008c0)="b38fbde649f3868c60d990b98a294bdb6dfb61a057ba7c358f53cb849fbcfa08607d0d5404c3517e900c148cdbab4dc1fd91683a8695b458e26f832407146d91ba58866072863353992694099d649cd067bfc6bf6c53bbd24be06fe895dd9ca158d58b2423acd11417796a843c0f84051d15dc08d194dc3dcbb5e9838427bb9b24580cd3bda201f432747dc3c684702416aca8", 0x93}, {&(0x7f0000000980)="e27a50d24cb099edfc7885fd5663e1e0044e6203446ddd77cd44e37f0ae39347b45a8c577fc755bb4c4686fc59f7b04fba2b826e5f924cfe62bfb3ab15dee6027933aa10280e1d8bdbae7c784f304990ae7ccda4c6c134dfe5d16e7e27570844d0dab1bc35219ca2739780c5a61c90fdbcc70f67fa2662141543f924451fb67343c9bb47841fce70691fa2ecc040dc3b46a0327e5208f28e84ff7f905846594997", 0xa1}, {&(0x7f0000000a40)="68e53f8313cd60bb7b483e874a00f05c7d6ddb92ba5146311778a1760a56dde42680b27f3d2ecc4cbb060513c590f80a44e07a5b6dddd237028ca48a9f8f4a3895f3f1abb98793e2bcfdd30e54dcc82c988d662bdd1e96d5de80fc1bb6450525ab15cd500699e3919fec37afac022c10b06c93e548c9b076a75734d0ec98d691d6b77bf5f7a0fa", 0x87}, {&(0x7f0000000b00)="03bde8557988eff176f34ef09d6b1d64d98aa9fbbfb64d6429afd625d6f3aec970e4c2989bfa67e86faf1e309697237829d4a2a5541735b10985ee3bbc7fb454421d8eb8dcc990", 0x47}], 0x5, 0x3, 0x3) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000c00)={@local, @empty, @local}, &(0x7f0000000c40)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e80)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0x5, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000cc0)='syzkaller\x00', 0x9, 0xca, &(0x7f0000000d00)=""/202, 0x20980, 0x2e, '\x00', 0x0, @xdp, r0, 0x8, &(0x7f0000000e00)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000e40)={0x2, 0xe, 0x3, 0x9}, 0x10, r10, r3, 0x4, &(0x7f0000000ec0)=[r3, r3, r3, r0, r0, r0], &(0x7f0000000f00)=[{0x1, 0x5, 0x6, 0x4}, {0x2, 0x2}, {0x0, 0x2, 0x1, 0x3}, {0x3, 0x1, 0xf, 0x7}], 0x10, 0x4}, 0x94) syz_open_dev$dmmidi(&(0x7f0000001000), 0xc9, 0x105003) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x10) syz_open_dev$sndpcmp(&(0x7f0000001040), 0x8, 0x80800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000001080)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x81, 0x3}, &(0x7f0000001140)=0x90) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001180)=@assoc_value={r11, 0x9}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000011c0)={0x0, 0x0, r3}) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000001200)=0x80, &(0x7f0000001240)=0x1) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f00000012c0)={&(0x7f0000001280)=[r12, r7, r12, r12], 0x6a, 0x4, 0x2}) 2.795447529s ago: executing program 1 (id=354): openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/2:0:0:0\x00', 0x185380, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0b45545, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80868c2594f913", 0x11}], 0x1}, 0x8001) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000f80000000000eaffffff00000600000008060000040001080c000180b41cbcfb4b09ed110d7f8559798704610fbc4a1351fc12d0613a9bbcf31d2231d139c3c81162ee944d66ff446a1c82892cc20c865bb40fe7aa57e415b092aef9b3b84ad5a953de321470f6c3315f56ede7330bf052a0d17533f1626d301754d73f227437a89f64c02d874bd4f56a1a5405"], 0x28}}, 0x84) 2.429246914s ago: executing program 3 (id=359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000000)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x40400) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000000)={0x80000000, 0x0, &(0x7f0000000040)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000200)={r5, 0x0, 0x0}) 2.329763944s ago: executing program 3 (id=360): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}]}, 0x34}}, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r0, 0x0, 0x7) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='virtiofs\x00', 0x0, 0x0) 2.269043093s ago: executing program 3 (id=361): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) connect$caif(r0, &(0x7f0000000480)=@util={0x25, "c3f6b53f2fd4026c3de2d218a3484cfa"}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5ce"]) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x1, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0x4, &(0x7f0000000a80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000580)="ddb6d048e9c35688177609b4ebd1", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000080)='ipvlan1\x00'}) r8 = semget$private(0x0, 0x4, 0x100) semctl$GETVAL(r8, 0x3, 0xc, 0x0) socket(0xa, 0x800, 0x8) socket$unix(0x1, 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf250c00000030000180080003000000000008000100", @ANYRES32, @ANYBLOB="08000300020064976d6d793000000000000021000000"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8b}]}}]}, 0x48}}, 0x0) 2.059955747s ago: executing program 2 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40) r7 = socket$can_raw(0x1d, 0x3, 0x1) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) (async) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000480)={{0x2, 0x4e23, @loopback}, {0x6, @multicast}, 0xe, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'geneve0\x00'}) (async) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) (async) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="05319db2b326342527a0a7f9eea0c8a4b67e49d02fb404dbda87ef84ab86398fa8022646b80a61b089bd5546c279e5a979fd1b7f6e8c151e0c0a8f8a7983cd472fcc0d1514c26485726136e9325888ad3907f647d2ba4a25ec64439e43803fabe3341a2d83bde0bf0e62001a9ee41196a61f4443afec1d2098184ff235f82538d681721f0ec88e12c73a9266eaa430decfaa5c54bc5ab2427de07f4f50088b2434c9d84dbe13", 0xa6}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000180)="a49bd853d2c029b79f0d8bd206f52f4594274641c111bbe20a8a45a4f2aa43aacf6cd8eb01227318505e30a5889392934215ba6ab274e9c6dae38cbe00f3de74e8bc82c0250fa7d053", 0x49}, {&(0x7f0000000200)="53478ecbc4e57807e44702cb4d0dd246203441b813c45f239d3f9c227ea2da179044c587316548ea260098a6d862134ea944cd97280787da92425d7e", 0x3c}, {&(0x7f0000000240)="6f54cdfb03fb8cca77fe6423f7138d368c50983a9300a84f68ffb3be6b46cd3e2b6a60d24d4faa799c55122dfbba", 0x2e}], 0x5, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x16}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @broadcast, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9c9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0xf0}, 0x0) (async, rerun: 64) setsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) (rerun: 64) 1.039937793s ago: executing program 2 (id=363): mkdir(&(0x7f00000004c0)='./file2\x00', 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="04140605c90092"], 0x9) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$bind(&(0x7f0000000480)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x119bc10, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x808, &(0x7f0000000140)={[{@xino_off}, {@verity_off}, {@xino_auto}, {@userxattr}, {@redirect_dir_follow}, {@verity_off}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file3\x00', 0x8000, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) (async) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) (async) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x109041) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_UNLOCK(r2, 0x6406) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) write(r0, &(0x7f0000000440)="1400000052004f010000007ee2ce2fb153330002e9def2dbfb502d27", 0x1c) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) (async) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x1, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x5]}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002740)={'geneve0\x00'}) 1.038707969s ago: executing program 3 (id=364): creat(&(0x7f0000000040)='./file0\x00', 0x140) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac']) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="5300000007000046009d40ed", @ANYRES64], 0x53) fanotify_init(0x0, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2ccfb7278f8da3b0ed416413744bc283e22198d8b5bcb1ec5b604f4ccebe2bec3983d3b3228da26ce73b8fcb65598c46190857d5492e136a3ec6dbdcaef8c0547ebfa5448c1d989fd4212e0fc48e03199ecb9c251806729abf03eb52"]) 1.038349989s ago: executing program 2 (id=365): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000040)=[r1], 0x1}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) listen(r3, 0x0) close(0x3) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x9, 0x8, 0xf, 0x9, 0x7, 0xf, 0x9, 0x3, 0x82aa, 0x2, 0x3, 0xeb10, 0xfffffffc, 0x8, 0xffffffff, 0x6, 0x1, 0xad4, 0x1, 0xe0, 0x9, 0x401, 0x7, 0x6, 0x9, 0x100, 0x83, 0xfffffffa, 0x7, 0x0, 0x3, 0x4]}) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0xe, 0x0, &(0x7f0000000900)) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x2}) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000380)={0x1, {{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}}, 0x1, 0x4, [{{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, {{0xa, 0x4e24, 0x1bc5, @mcast2, 0x7}}, {{0xa, 0x4e22, 0x8, @private0}}, {{0xa, 0x4e23, 0x7f, @local, 0x68}}]}, 0x290) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}}, 0x4000) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'das16m1\x00', [0x4f27, 0xd1, 0x7, 0x4, 0x5, 0x5, 0x8, 0x47, 0xa, 0x100, 0x2, 0x101, 0x1, 0x3, 0x6, 0x6fff, 0xb1f1, 0x1a449, 0x3, 0x2, 0x8b, 0xcaa7, 0x0, 0x20001e59, 0xb, 0xe69, 0x3b, 0xa, 0xa, 0x0, 0x4]}) 939.858857ms ago: executing program 3 (id=366): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) (async) ftruncate(r3, 0x8979) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000001f40)={'NETMAP\x00'}, &(0x7f0000006300)=0x1e) (async) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x1}, 0x40000102) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000005025647f761ad7f0a1d9ba49ada5c34d6e48ac54384a3407ceb78cec79860f1c60b702087ec0a73ae75b49bd71157bd786f4233689fa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="258c712a09539b0dca0a49a5cac437bc587e34f8c1863f8d947a822043b8fdc737b0778ef117ffbf2b455d72a2dc664909fdb2f70c07579b374c2bffce5d6ec87bc8637748b75ac4bcfcc144e97b37c8f23d0cf08ddb038d3daf6979b602b31f345875208cfb2945ea6a44b3758f3faf80f4b072f848231ec2ce72a450bb9ebd69b27b62e2bbdd65caf723ee6790b6ebc2265393762d0439970a6ccf9d83466ace8b8dd948be55066b0fdce7e6545c9be0805869b34b96fccca91bcb447ddc909ee1f762587fe5b7f67b1450a3c1d45155b5d85220ebabd4488c", 0xda) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet(r0, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="8b68de0bfdadcd6f8c55528ca5017c8e1e181cf4485c12024aa54ea64af9b7645008d8902344d3db06b597b73b304c9b088b85266c3c7410ad50c76e9412402ac49f0d3cc60717a88f05322e01846663c80108e7e338ed831113a0735d5b5282bbff29f9ff552d737a9e3997b24633155e9f457fc92b8418868ca06cb8bcbd862f99fbbb64a91413f03937478a70d47cc7f4ac94dcb8dd9896561c67b69fa807033fe478df43d6a81e13914e9365fa3bcf59b3ce455d88d4bdf68453a54adf8963295f092ea1ecd9b3b0cb5cbc36c58ef834d34e3050d7fab8fff8c3dc", 0xdd}, {&(0x7f0000000080)="4521e4e049bc810a9bdad4bcea95bb74241015a77677caa279fc6b8af3391478c33140d33e5389f4360da2656ea732bcdf11a26e51e06b558255", 0x3a}, {&(0x7f00000000c0)="e5ea1f4d8c354919290391a31ad842633fcbc6e1f8e03c4aa63f4a081f9184", 0x1f}], 0x3}}], 0x1, 0x8058) 809.864581ms ago: executing program 1 (id=367): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r2 = eventfd2(0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) write$eventfd(r2, &(0x7f00000000c0)=0x33482a89, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2, 0x79, 0x11, 0xb0}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x101000) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) 587.82692ms ago: executing program 1 (id=368): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x1) prctl$PR_SET_THP_DISABLE(0x41, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="1008040020100d0000006467655f736c617665000000000c190580050019000300"/44], 0x44}, 0x1, 0x0, 0x0, 0x48140}, 0x4) timer_create(0x3, 0x0, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_dev$media(&(0x7f0000000300), 0x4007, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x1000002, 0x2040) syz_io_uring_setup(0x74d, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f0000000200)) poll(&(0x7f00000000c0)=[{r3, 0x4}], 0x1, 0xfffffffb) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x1, 0x0, 0xb0b0b0b0}) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000380)="af0f22bd09a38d3eb1028dd854209246d73a8142973f4b4ae5ca935abc52b5aa5f589daf10b8977daf1925cacb2dd8b0e72b027aa687d0f1acd678242933cbe464161eb0241818a78d9dacb7cc07a8b28acfa6c79dee527da1fc9a6f1573454e54a8672a11c4") ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[r6], 0x1}) 121.620065ms ago: executing program 4 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xbd}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x98}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0'}, 0xb) r3 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) setresuid(0x0, r4, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x34, r1, 0x509, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}]}, 0x34}}, 0x4044000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x49e8648f) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r8, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r6, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000004, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r9, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x10}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xfffffff0}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xfa6e}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 59.671452ms ago: executing program 3 (id=369): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000040)={0x2, 0x0, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x81, r0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x5, r1, 0x25, r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x802, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4040050) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x63040810}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000000) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xab4, 0x4b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0xc0) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$KVM_RUN(r0, 0xae80, 0x0) connect(r5, &(0x7f0000000540)=@in={0x2, 0x4e23, @multicast2}, 0x80) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000005c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r1}, 0x14) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000600)={0x0, 0xe47}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f00000010c0)=[{{&(0x7f0000000640)={0xa, 0x4e20, 0x59, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000680)="9f9def710f6b4f0daee36dd36d667f73964877333aa6382e9ecc1bf56007faed42739f3da00903f3a1d9e0348805ff0ca588f906bd33939f3142c922ecf3a3130cb9395637993c7d543a5f06f5334b45545623c04cf692e7375801d5de374f599ad12bb74271bd8b0c5e6ccb2cec67a78a15b64b681af23606d14ed3d57302f23eb1eb43b5729915191d353f357c5643edd09ce9f03d1c03e557712a91722ba425a1", 0xa2}, {&(0x7f0000000740)="10aa396b1a906ce18f82abdccae40404e6a3782d694b73b3a5a8ba960c5c4744e83601a08f2b41bc92cc5e24a6b59eef", 0x30}, {&(0x7f0000000780)="76764066cc626be20af1aece241e667eee0acb397a4c7e3b8a4198a605b3357903d64e5ff1266e7806372cb5e593c98fc459723cd385c7d9161254a90d044049da9b562f4ae8b7e3048e7c5e45503a8755c32ced979ea3ff6c3019cd758f4f5bd59081e5eb13cc006e99eb5d4a7d99ed3ac9683e4e606e9afaf52b3c3c991a847dc63d18b1ed60", 0x87}, {&(0x7f0000000840)="031f9a9a1cad389976fbc0cd2280c64552f85a1a569e7422185151ffa86e4a49a10ce842d6d8cdaca68cec4a51f83d3666e545e258d76db0f6302bc5847b42798d0509d40ada7782d2a886ec8e64c445614b5914c527c6087ed54c7c263721d855443e9fd06ec40f9c44a7e054bfad8e048efee876c82893f5ae4624beb31cec8a73645ecee95ff8071da8cd9423b405e60d69340b09f74aeb246f536784f766e87344e08a50c42cd9d3ac1cbbc3f8a8d8ae9f4f2df975d76c857c9cde810e7e01a45fb370", 0xc5}, {&(0x7f0000000940)="90b9a206ad014ec8b9ab07fe7fed11845728", 0x12}, {&(0x7f0000000980)="079c656c32e395c223bb37aaa958458b4661b999ad76476db0a498bc3d8156030e38ea663ba88ca6c968eb9aab7f3061f72e32f83ec5d3c9bb7a548fd602baba65f36583f3015e0ef7775556a056500c4df744505f3f7ce1071a97cf937f8f5d5eb2768d9d7f825fad12cdb6eb63760bd9d2663adafc9cbc41327857b0dfd6452935effca3bc17a0d28632d3aac1b323b14cd823bd5e31d6d64013e372b7a9d3937199d1ba0097fd90e65dd32b2a9c67ab84b8d67ab08161b441d1229890d472bac5", 0xc2}], 0x6, &(0x7f0000000b00)=[@rthdrdstopts={{0x60, 0x29, 0x37, {0x2b, 0x8, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0xb5, 0x4, [0x7fffffffffffffff, 0x3, 0x1]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x80, 0x7, [0x80]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3c, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @jumbo, @jumbo={0xc2, 0x4, 0x40}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fff}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x3b, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x0, 0x100, [0x8, 0x2, 0x80000001, 0x3, 0xf]}}]}}}], 0x108}}, {{&(0x7f0000000c40)={0xa, 0x4e24, 0x2, @empty, 0x5}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000c80)="7d02570c6e88e857be13b515f49f8324aa69226efbeee5", 0x17}, {&(0x7f0000000cc0)="09a383e7a0cfbc09a210cad77f179c596f6b40dc8dfef1af18aa2512bddf4fba5bd9361379a9851f383600264c252ce23b337fa1", 0x34}], 0x2, &(0x7f0000000d40)=[@rthdrdstopts={{0x1d8, 0x29, 0x37, {0x0, 0x37, '\x00', [@generic={0x9, 0x54, "466dcd1484e0d3e3ed050d9e79617f4f5f4dd6fc17efb337824e6f229ae0f008222ab0329cbdd90aff12d57774b7e3022d25dc0b56b332a950537168d2f2d2dc43b88a8ab63a553b0ece6e394b0a779d512ca0cb"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @generic={0x40, 0xea, "4038632d3f56983c0ded6da3d6cf494837ac578c023f168e4575751b32a293884068b235809018e24b8a0fb58dc05774f7fd6242ba195b56dd636fc80efb64983abc8bf897144ca83ed4c5496a8076d238674a71f27beab5cc0b2d6a4a3fda75b7b619b24c4e2588e13b243b527a205e1a6754875775ff99fb068238f7c8f175fc88ea115fecba7c0bfc8d518dc35980ca486e26fcca093cccb4c165524c1fb66d8d75f83f627eda63019731abc90bf04061851eb28de485029d85d734aa79fbb58181cfc52de803af23636c038999f69c6bf79d89f027137f4c9afb6eb1b61f23205a321e1f0338ac29"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x58, {0x1, 0x14, 0xc, 0x100, [0x7, 0x9, 0x589b7e36, 0x1000, 0x8d, 0xe, 0x38, 0x6, 0x5, 0x7d]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @dstopts={{0x18, 0x29, 0x37, {0x2b}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x10}}, @hopopts={{0x20, 0x29, 0x36, {0x88, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x21, 0xe, 0x1, 0xf, 0x0, [@empty, @local, @remote, @loopback, @private2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x2c, 0xc, 0x1, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @loopback, @mcast1, @mcast1, @loopback]}}}], 0x370}}], 0x2, 0x880) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000001140)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, r1}, 0x14) r7 = accept$packet(r0, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000011c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001200)={'vxcan1\x00'}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001280), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, r8, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x49}}]}, 0x60}}, 0x4800) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x50, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040000) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x4c, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80, 0x5a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2c}, @NL80211_ATTR_PMKID={0x14, 0x55, "60e55f54f4f3b9a1e51afd0f396cb0c8"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xcb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) recvfrom(r6, &(0x7f0000001640)=""/29, 0x1d, 0x41, &(0x7f0000001680)=@qipcrtr={0x2a, 0x0, 0x7ffe}, 0x80) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001700)={0xa, @vbi={0x0, 0x9, 0x8, 0x31384142, [0x6d824bb3, 0x800], [0x401, 0x4027], 0x13a}}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000001800)=[@in={0x2, 0x4e21, @private=0xa010102}, @in6={0xa, 0x4e20, 0x3, @loopback, 0x6}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x2, @private1, 0x3d8a}, @in6={0xa, 0x4e21, 0x42756dee, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}, @in={0x2, 0x4e22, @broadcast}], 0x94) 0s ago: executing program 4 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008f0000/0x400000)=nil) r2 = syz_kvm_add_vcpu$x86(r1, &(0x7f0000000040)={0x0, &(0x7f0000000840)=ANY=[@ANYRESHEX=r0], 0x75}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x2, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) (async) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) (async) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc40) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 38.139617][ T40] audit: type=1400 audit(1752966086.402:61): avc: denied { siginh } for pid=5854 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:55154' (ED25519) to the list of known hosts. [ 39.006350][ T40] audit: type=1400 audit(1752966087.302:62): avc: denied { name_bind } for pid=5861 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.036040][ T40] audit: type=1400 audit(1752966087.332:63): avc: denied { write } for pid=5862 comm="sh" path="pipe:[7302]" dev="pipefs" ino=7302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.056624][ T40] audit: type=1400 audit(1752966087.352:64): avc: denied { execute } for pid=5862 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.063260][ T40] audit: type=1400 audit(1752966087.352:65): avc: denied { execute_no_trans } for pid=5862 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.005365][ T40] audit: type=1400 audit(1752966089.302:66): avc: denied { mounton } for pid=5862 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.008788][ T5862] cgroup: Unknown subsys name 'net' [ 41.189245][ T5862] cgroup: Unknown subsys name 'cpuset' [ 41.195713][ T5862] cgroup: Unknown subsys name 'rlimit' [ 41.456886][ T5890] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.122824][ T5862] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.290854][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.290868][ T40] audit: type=1400 audit(1752966093.582:80): avc: denied { execmem } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.577432][ T40] audit: type=1400 audit(1752966093.872:81): avc: denied { create } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.583459][ T40] audit: type=1400 audit(1752966093.872:82): avc: denied { read write } for pid=5945 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.595098][ T40] audit: type=1400 audit(1752966093.872:83): avc: denied { open } for pid=5945 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.602112][ T40] audit: type=1400 audit(1752966093.882:84): avc: denied { ioctl } for pid=5945 comm="syz-executor" path="socket:[6417]" dev="sockfs" ino=6417 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.621445][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.624388][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.627663][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.628201][ T5958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.631107][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.632989][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.635107][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.637466][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.639682][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.643957][ T5958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.646474][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.646824][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.648091][ T40] audit: type=1400 audit(1752966093.942:85): avc: denied { read } for pid=5945 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.648118][ T40] audit: type=1400 audit(1752966093.942:86): avc: denied { open } for pid=5945 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.648138][ T40] audit: type=1400 audit(1752966093.942:87): avc: denied { mounton } for pid=5945 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.649572][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.652369][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.663241][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.665398][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.671485][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.674044][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.675596][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.677405][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.836080][ T40] audit: type=1400 audit(1752966094.132:88): avc: denied { module_request } for pid=5945 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.870500][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 45.927921][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 46.014819][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.017985][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.020338][ T5945] bridge_slave_0: entered allmulticast mode [ 46.022911][ T5945] bridge_slave_0: entered promiscuous mode [ 46.028565][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.030784][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.032997][ T5945] bridge_slave_1: entered allmulticast mode [ 46.035708][ T5945] bridge_slave_1: entered promiscuous mode [ 46.100512][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 46.142278][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.176371][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.178691][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.180928][ T5949] bridge_slave_0: entered allmulticast mode [ 46.183639][ T5949] bridge_slave_0: entered promiscuous mode [ 46.189350][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.191825][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.196889][ T5949] bridge_slave_1: entered allmulticast mode [ 46.200415][ T5949] bridge_slave_1: entered promiscuous mode [ 46.204823][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.222522][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 46.316813][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.324570][ T5945] team0: Port device team_slave_0 added [ 46.354353][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.358805][ T5945] team0: Port device team_slave_1 added [ 46.390268][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.392656][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.395174][ T5954] bridge_slave_0: entered allmulticast mode [ 46.397787][ T5954] bridge_slave_0: entered promiscuous mode [ 46.463530][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.466769][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.469004][ T5954] bridge_slave_1: entered allmulticast mode [ 46.471544][ T5954] bridge_slave_1: entered promiscuous mode [ 46.499013][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.501240][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.510100][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.533885][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.540841][ T5949] team0: Port device team_slave_0 added [ 46.544026][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.547086][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.556792][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.571796][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.599882][ T5949] team0: Port device team_slave_1 added [ 46.632551][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.635164][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.637795][ T5959] bridge_slave_0: entered allmulticast mode [ 46.640740][ T5959] bridge_slave_0: entered promiscuous mode [ 46.662678][ T5954] team0: Port device team_slave_0 added [ 46.692781][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.695200][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.703035][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.707617][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.709909][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.712679][ T5959] bridge_slave_1: entered allmulticast mode [ 46.716536][ T5959] bridge_slave_1: entered promiscuous mode [ 46.719897][ T5954] team0: Port device team_slave_1 added [ 46.734651][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.736851][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.744694][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.791980][ T5945] hsr_slave_0: entered promiscuous mode [ 46.794162][ T5945] hsr_slave_1: entered promiscuous mode [ 46.815731][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.848604][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.874142][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.877344][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.887940][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.967231][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.969932][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.979991][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.987815][ T5949] hsr_slave_0: entered promiscuous mode [ 46.990766][ T5949] hsr_slave_1: entered promiscuous mode [ 46.993573][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.997501][ T5949] Cannot create hsr debugfs directory [ 47.019256][ T5959] team0: Port device team_slave_0 added [ 47.050139][ T5959] team0: Port device team_slave_1 added [ 47.139797][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.142662][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.155393][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.210011][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.212101][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.219951][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.258446][ T5954] hsr_slave_0: entered promiscuous mode [ 47.261541][ T5954] hsr_slave_1: entered promiscuous mode [ 47.264530][ T5954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.267630][ T5954] Cannot create hsr debugfs directory [ 47.363016][ T5959] hsr_slave_0: entered promiscuous mode [ 47.365675][ T5959] hsr_slave_1: entered promiscuous mode [ 47.367707][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.370061][ T5959] Cannot create hsr debugfs directory [ 47.496473][ T5945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.507527][ T5945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.537248][ T5945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.541703][ T5945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.598466][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.612010][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.620612][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.629355][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.655250][ T5960] Bluetooth: hci0: command tx timeout [ 47.655254][ T5950] Bluetooth: hci1: command tx timeout [ 47.669458][ T5954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.687165][ T5954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.692333][ T5954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.707875][ T5954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.735281][ T5960] Bluetooth: hci3: command tx timeout [ 47.737823][ T5960] Bluetooth: hci2: command tx timeout [ 47.755259][ T5959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.761733][ T5959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.771644][ T5959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.775884][ T5959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.796224][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.829418][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.842091][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.845193][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.855590][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.875163][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.877344][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.883468][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.895544][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.911350][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.915708][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.918683][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.932067][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.934849][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.939382][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.942162][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.953730][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.956581][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.981549][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.006355][ T40] audit: type=1400 audit(1752966096.302:89): avc: denied { sys_module } for pid=5945 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.016109][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.032482][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.034764][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.053391][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.055684][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.084012][ T5959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.094964][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.121229][ T5945] veth0_vlan: entered promiscuous mode [ 48.139415][ T5945] veth1_vlan: entered promiscuous mode [ 48.151278][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.165683][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.203736][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.208758][ T5954] veth0_vlan: entered promiscuous mode [ 48.213402][ T5945] veth0_macvtap: entered promiscuous mode [ 48.220706][ T5945] veth1_macvtap: entered promiscuous mode [ 48.226108][ T5954] veth1_vlan: entered promiscuous mode [ 48.237516][ T5949] veth0_vlan: entered promiscuous mode [ 48.249371][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.259973][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.264065][ T5949] veth1_vlan: entered promiscuous mode [ 48.270957][ T5945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.273752][ T5945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.276921][ T5945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.279603][ T5945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.288583][ T5959] veth0_vlan: entered promiscuous mode [ 48.290724][ T5954] veth0_macvtap: entered promiscuous mode [ 48.297155][ T5954] veth1_macvtap: entered promiscuous mode [ 48.308242][ T5959] veth1_vlan: entered promiscuous mode [ 48.322862][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.333651][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.338965][ T5954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.341674][ T5954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.344359][ T5954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.347420][ T5954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.362490][ T5949] veth0_macvtap: entered promiscuous mode [ 48.367589][ T5949] veth1_macvtap: entered promiscuous mode [ 48.369180][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.372323][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.394909][ T5959] veth0_macvtap: entered promiscuous mode [ 48.403105][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.406758][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.407910][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.410984][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.427452][ T5959] veth1_macvtap: entered promiscuous mode [ 48.431639][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.434077][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.439734][ T5949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.442184][ T5949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.444946][ T5949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.447394][ T5949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.452734][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.463259][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.471813][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.484406][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.488600][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.492334][ T5959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.495657][ T5959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.498399][ T5959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.501107][ T5959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.534786][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.537274][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.562573][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.568033][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.584330][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.587061][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.615186][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.619544][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.690334][ T6056] 9pnet_fd: p9_fd_create_tcp (6056): problem connecting socket to 127.0.0.1 [ 49.734664][ T5960] Bluetooth: hci0: command tx timeout [ 49.745442][ T5960] Bluetooth: hci1: command tx timeout [ 49.814911][ T5960] Bluetooth: hci3: command tx timeout [ 49.824636][ T5960] Bluetooth: hci2: command tx timeout [ 51.814653][ T5960] Bluetooth: hci1: command tx timeout [ 51.815073][ T5950] Bluetooth: hci0: command tx timeout [ 51.895374][ T5950] Bluetooth: hci2: command tx timeout [ 51.895492][ T5960] Bluetooth: hci3: command tx timeout [ 53.904658][ T5960] Bluetooth: hci1: command tx timeout [ 53.904774][ T5950] Bluetooth: hci0: command tx timeout [ 53.975372][ T5950] Bluetooth: hci3: command tx timeout [ 53.975458][ T5960] Bluetooth: hci2: command tx timeout [ 59.264344][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 59.264362][ T40] audit: type=1400 audit(1752966107.552:134): avc: denied { create } for pid=6066 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.264368][ T6068] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.266673][ T40] audit: type=1400 audit(1752966107.562:135): avc: denied { create } for pid=6067 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 59.278776][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'. [ 59.285873][ T40] audit: type=1400 audit(1752966107.562:136): avc: denied { create } for pid=6067 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.289920][ T6068] xt_hashlimit: max too large, truncated to 1048576 [ 59.295565][ T6070] Zero length message leads to an empty skb [ 59.297578][ T40] audit: type=1400 audit(1752966107.562:137): avc: denied { bind } for pid=6067 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.309268][ T40] audit: type=1400 audit(1752966107.562:138): avc: denied { bind } for pid=6067 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 59.317338][ T40] audit: type=1400 audit(1752966107.562:139): avc: denied { read } for pid=6069 comm="syz.1.10" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.324580][ T40] audit: type=1400 audit(1752966107.562:140): avc: denied { open } for pid=6069 comm="syz.1.10" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.334182][ T40] audit: type=1400 audit(1752966107.562:141): avc: denied { ioctl } for pid=6069 comm="syz.1.10" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.341718][ T40] audit: type=1400 audit(1752966107.562:142): avc: denied { ioctl } for pid=6066 comm="syz.0.9" path="socket:[7761]" dev="sockfs" ino=7761 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.349791][ T40] audit: type=1400 audit(1752966107.572:143): avc: denied { ioctl } for pid=6066 comm="syz.0.9" path="socket:[7760]" dev="sockfs" ino=7760 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.368011][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 59.508004][ T6108] syz.0.22: attempt to access beyond end of device [ 59.508004][ T6108] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 59.512875][ T6108] EXT4-fs (nbd0): unable to read superblock [ 59.696801][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 59.730839][ T6139] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.794892][ T5988] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 59.839801][ T6139] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 59.946785][ T5988] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.949972][ T5988] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.954074][ T5988] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 59.958567][ T5988] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.166788][ T5988] usb 7-1: GET_CAPABILITIES returned 0 [ 60.169117][ T5988] usbtmc 7-1:16.0: can't read capabilities [ 60.190437][ T10] usb 7-1: USB disconnect, device number 2 [ 60.221049][ T6181] Invalid source name [ 60.222368][ T6181] UBIFS error (pid: 6181): cannot open "./file0", error -22 [ 60.230092][ T6181] vlan2: entered promiscuous mode [ 60.234127][ T6181] bridge0: entered promiscuous mode [ 60.449328][ T6189] Bluetooth: MGMT ver 1.23 [ 60.455502][ T5988] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.517844][ T5988] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 60.534055][ T6194] netlink: 328 bytes leftover after parsing attributes in process `syz.3.33'. [ 60.553449][ T6192] fido_id[6192]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 60.579528][ T6196] process 'syz.3.34' launched './file1' with NULL argv: empty string added [ 60.590445][ T6198] misc userio: The device must be registered before sending interrupts [ 60.614630][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.619463][ T6204] netlink: 35 bytes leftover after parsing attributes in process `syz.3.37'. [ 60.661691][ T6215] random: crng reseeded on system resumption [ 60.666815][ T6215] Unrecognized hibernate image header format! [ 60.668787][ T6215] PM: hibernation: Image mismatch: architecture specific data [ 60.675245][ T6214] netlink: 32 bytes leftover after parsing attributes in process `syz.0.39'. [ 60.681611][ T6218] overlayfs: failed to resolve './file1/file0': -2 [ 60.683882][ T6214] netlink: 32 bytes leftover after parsing attributes in process `syz.0.39'. [ 60.730384][ T6224] netlink: 'syz.1.42': attribute type 1 has an invalid length. [ 60.750359][ T6226] capability: warning: `syz.0.43' uses deprecated v2 capabilities in a way that may be insecure [ 60.754038][ T6226] syz.0.43 uses obsolete (PF_INET,SOCK_PACKET) [ 60.766415][ T10] usb 7-1: config 0 has no interfaces? [ 60.768760][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.772639][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.780613][ T10] usb 7-1: config 0 descriptor?? [ 60.892562][ T6244] mmap: syz.3.50 (6244) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.942924][ T6253] ipvlan2: entered promiscuous mode [ 60.983052][ T6256] syzkaller1: entered promiscuous mode [ 60.985241][ T6256] syzkaller1: entered allmulticast mode [ 61.056977][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30'. [ 61.066609][ T6259] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.069484][ T6259] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.072197][ T6259] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.074944][ T6259] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.078240][ T6259] vxlan0: entered promiscuous mode [ 61.162597][ T6266] program syz.0.56 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.193024][ T6272] random: crng reseeded on system resumption [ 61.199183][ T6271] netlink: 57 bytes leftover after parsing attributes in process `syz.3.57'. [ 61.319955][ T6288] netlink: 32 bytes leftover after parsing attributes in process `syz.0.62'. [ 61.421461][ T6297] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 61.806352][ T6317] No such timeout policy "syz1" [ 61.837818][ T6319] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 61.840306][ T6319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.841264][ T6321] netlink: 'syz.3.72': attribute type 5 has an invalid length. [ 61.847963][ T6321] warning: `syz.3.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.989380][ T6338] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 61.993682][ T6338] Error validating options; rc = [-22] [ 62.407396][ T6358] sp0: Synchronizing with TNC [ 62.681876][ T6400] netdevsim netdevsim0: Direct firmware load for . [ 62.681876][ T6400] failed with error -2 [ 62.690835][ T6400] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 62.690835][ T6400] [ 63.272472][ T9] usb 7-1: USB disconnect, device number 3 [ 63.648433][ T6496] ======================================================= [ 63.648433][ T6496] WARNING: The mand mount option has been deprecated and [ 63.648433][ T6496] and is ignored by this kernel. Remove the mand [ 63.648433][ T6496] option from the mount to silence this warning. [ 63.648433][ T6496] ======================================================= [ 63.824904][ T1466] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.954585][ T1466] usb 6-1: device descriptor read/64, error -71 [ 64.113361][ T6531] cifs: Unknown parameter 'g !\[~'o gX/kr*4~|៎3|]uG⁺X^Rc^6}$ *Eɭ' [ 64.153556][ T6533] xt_nat: multiple ranges no longer supported [ 64.157600][ T6533] tipc: Started in network mode [ 64.159521][ T6533] tipc: Node identity ac1414aa, cluster identity 4711 [ 64.162811][ T6533] tipc: Enabled bearer , priority 10 [ 64.166690][ T6533] tipc: Enabled bearer , priority 0 [ 64.220351][ T1466] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 64.266568][ T40] kauditd_printk_skb: 166 callbacks suppressed [ 64.266579][ T40] audit: type=1400 audit(1752966112.562:310): avc: denied { read } for pid=6549 comm="syz.2.115" name="nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.277766][ T40] audit: type=1400 audit(1752966112.562:311): avc: denied { open } for pid=6549 comm="syz.2.115" path="/dev/nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.344945][ T1466] usb 6-1: device descriptor read/64, error -71 [ 64.347667][ T40] audit: type=1400 audit(1752966112.632:312): avc: denied { execute } for pid=6557 comm="syz.2.117" dev="tmpfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.354210][ T40] audit: type=1400 audit(1752966112.632:313): avc: denied { execute_no_trans } for pid=6557 comm="syz.2.117" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.461724][ T6567] program syz.3.121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.491493][ T40] audit: type=1400 audit(1752966112.782:314): avc: denied { write } for pid=6568 comm="syz.3.122" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.501638][ T1466] usb usb6-port1: attempt power cycle [ 64.649126][ T40] audit: type=1400 audit(1752966112.942:315): avc: denied { ioctl } for pid=6563 comm="syz.2.120" path="socket:[10813]" dev="sockfs" ino=10813 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.735898][ T837] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.775118][ T40] audit: type=1400 audit(1752966113.072:316): avc: denied { ioctl } for pid=6574 comm="syz.0.123" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.778630][ T6575] rtc_cmos 00:05: Alarms can be up to one day in the future [ 64.788780][ T6575] capability: warning: `syz.0.123' uses 32-bit capabilities (legacy support in use) [ 64.825216][ T40] audit: type=1400 audit(1752966113.122:317): avc: denied { map } for pid=6576 comm="syz.0.124" path="socket:[9964]" dev="sockfs" ino=9964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.832543][ T40] audit: type=1400 audit(1752966113.122:318): avc: denied { read } for pid=6576 comm="syz.0.124" path="socket:[9964]" dev="sockfs" ino=9964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.866151][ T1466] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.875251][ T837] usb 8-1: device descriptor read/64, error -71 [ 64.892567][ T1466] usb 6-1: device descriptor read/8, error -71 [ 64.908430][ T40] audit: type=1400 audit(1752966113.202:319): avc: denied { setopt } for pid=6582 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 65.060424][ T6014] rtc_cmos 00:05: Alarms can be up to one day in the future [ 65.063517][ T6014] rtc_cmos 00:05: Alarms can be up to one day in the future [ 65.067278][ T6014] rtc_cmos 00:05: Alarms can be up to one day in the future [ 65.070283][ T6014] rtc_cmos 00:05: Alarms can be up to one day in the future [ 65.072560][ T6014] rtc rtc0: __rtc_set_alarm: err=-22 [ 65.115081][ T837] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 65.134647][ T1466] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 65.165824][ T9] tipc: Node number set to 2886997162 [ 65.184733][ T1466] usb 6-1: device descriptor read/8, error -71 [ 65.244592][ T837] usb 8-1: device descriptor read/64, error -71 [ 65.288914][ T6588] 9pnet_fd: p9_fd_create_unix (6588): problem connecting socket: ./file0: -111 [ 65.288944][ T6589] 9pnet_fd: p9_fd_create_unix (6589): problem connecting socket: ./file0: -111 [ 65.302761][ T6589] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 65.304692][ T1466] usb usb6-port1: unable to enumerate USB device [ 65.305159][ T6589] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 65.309575][ T6588] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 65.311718][ T6588] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 65.315104][ T6589] vhci_hcd vhci_hcd.0: Device attached [ 65.316130][ T6588] vhci_hcd vhci_hcd.0: Device attached [ 65.317842][ T6591] vhci_hcd: connection closed [ 65.319587][ T6590] vhci_hcd: connection closed [ 65.322188][ T101] vhci_hcd: stop threads [ 65.323222][ T24] kernel write not supported for file /register (pid: 24 comm: kworker/2:0) [ 65.323690][ T101] vhci_hcd: release socket [ 65.323717][ T101] vhci_hcd: disconnect device [ 65.331725][ T101] vhci_hcd: stop threads [ 65.333322][ T101] vhci_hcd: release socket [ 65.335514][ T101] vhci_hcd: disconnect device [ 65.365795][ T837] usb usb8-port1: attempt power cycle [ 65.704606][ T837] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 65.725547][ T837] usb 8-1: device descriptor read/8, error -71 [ 65.856372][ T6596] nfs: Unknown parameter '+' [ 65.886638][ T6598] all: renamed from wg2 (while UP) [ 65.964513][ T837] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 65.985970][ T837] usb 8-1: device descriptor read/8, error -71 [ 66.095254][ T837] usb usb8-port1: unable to enumerate USB device [ 66.474517][ T5988] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 66.615473][ T5988] usb 8-1: device descriptor read/64, error -71 [ 66.622726][ T6606] program syz.1.131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.637218][ T6606] netlink: 'syz.1.131': attribute type 4 has an invalid length. [ 66.837518][ T6614] cdrom: dropping to single frame dma [ 66.856061][ T5988] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 66.860888][ T6617] __nla_validate_parse: 12 callbacks suppressed [ 66.860897][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.136'. [ 66.984601][ T5988] usb 8-1: device descriptor read/64, error -71 [ 67.104809][ T5988] usb usb8-port1: attempt power cycle [ 67.446896][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.450257][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.462750][ T6654] usb usb9: usbfs: process 6654 (syz.1.147) did not claim interface 15 before use [ 67.464569][ T5988] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 67.468260][ T6656] usb usb9: usbfs: process 6656 (syz.1.147) did not claim interface 15 before use [ 67.485032][ T5988] usb 8-1: device descriptor read/8, error -71 [ 67.576780][ T6660] 9pnet: Could not find request transport: V_4 Lvirtih [ 67.576961][ T6661] 9pnet: Could not find request transport: V_4 Lvirtih [ 67.584413][ T6660] trusted_key: syz.3.149 sent an empty control message without MSG_MORE. [ 67.678598][ T6667] kvm: user requested TSC rate below hardware speed [ 67.704575][ T53] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 67.844812][ T53] usb 6-1: device descriptor read/64, error -71 [ 67.844905][ T6676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.850984][ T837] libceph: connect (1)[c::]:6789 error -101 [ 67.855444][ T837] libceph: mon0 (1)[c::]:6789 connect error [ 67.891753][ T6680] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 68.084736][ T53] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 68.117567][ T837] libceph: connect (1)[c::]:6789 error -101 [ 68.119675][ T837] libceph: mon0 (1)[c::]:6789 connect error [ 68.214528][ T53] usb 6-1: device descriptor read/64, error -71 [ 68.320659][ T6705] max out of range [ 68.324845][ T53] usb usb6-port1: attempt power cycle [ 68.478189][ T6713] ISOFS: Unable to identify CD-ROM format. [ 68.634805][ T837] libceph: connect (1)[c::]:6789 error -101 [ 68.636816][ T837] libceph: mon0 (1)[c::]:6789 connect error [ 68.664565][ T53] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 68.671947][ T6674] ceph: No mds server is up or the cluster is laggy [ 68.685162][ T53] usb 6-1: device descriptor read/8, error -71 [ 68.894864][ T6727] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 68.896919][ T6727] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 68.899286][ T6727] vhci_hcd vhci_hcd.0: Device attached [ 68.924535][ T53] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 68.944912][ T53] usb 6-1: device descriptor read/8, error -71 [ 69.055905][ T53] usb usb6-port1: unable to enumerate USB device [ 69.134544][ T1466] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 69.438704][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 69.438714][ T40] audit: type=1400 audit(1752966117.732:363): avc: denied { watch } for pid=6734 comm="syz.0.174" path="/55/file0" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.448265][ T40] audit: type=1400 audit(1752966117.732:364): avc: denied { watch_sb watch_reads } for pid=6734 comm="syz.0.174" path="/55/file0" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.485855][ T6740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6740 comm=syz.0.175 [ 69.490142][ T6739] netlink: 'syz.0.175': attribute type 1 has an invalid length. [ 69.511313][ T6739] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.514930][ T6739] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.518347][ T6739] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.521747][ T6739] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.527029][ T6739] bond1: (slave geneve2): making interface the new active one [ 69.530032][ T6739] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 69.671149][ T6728] vhci_hcd: connection reset by peer [ 69.676157][ T46] vhci_hcd: stop threads [ 69.678153][ T46] vhci_hcd: release socket [ 69.681018][ T46] vhci_hcd: disconnect device [ 69.783285][ T40] audit: type=1400 audit(1752966118.072:365): avc: denied { read } for pid=5344 comm="acpid" name="event4" dev="devtmpfs" ino=2864 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 69.791353][ T40] audit: type=1400 audit(1752966118.072:366): avc: denied { open } for pid=5344 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2864 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 69.798393][ T40] audit: type=1400 audit(1752966118.072:367): avc: denied { ioctl } for pid=5344 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2864 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 69.838370][ T6770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.183'. [ 69.906991][ T6782] netlink: 'syz.0.186': attribute type 3 has an invalid length. [ 69.911329][ T6782] netlink: 220 bytes leftover after parsing attributes in process `syz.0.186'. [ 69.913593][ T6786] nftables ruleset with unbound chain [ 69.914988][ T40] audit: type=1400 audit(1752966118.202:368): avc: denied { create } for pid=6785 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.925590][ T40] audit: type=1400 audit(1752966118.212:369): avc: denied { connect } for pid=6785 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.931474][ T40] audit: type=1400 audit(1752966118.212:370): avc: denied { write } for pid=6781 comm="syz.0.186" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.951307][ T6795] random: crng reseeded on system resumption [ 69.983860][ T6795] pimreg: entered allmulticast mode [ 70.020680][ T40] audit: type=1400 audit(1752966118.312:371): avc: denied { read } for pid=6801 comm="syz.3.190" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.029281][ T40] audit: type=1400 audit(1752966118.312:372): avc: denied { open } for pid=6801 comm="syz.3.190" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.088476][ T6806] netlink: 'syz.3.191': attribute type 2 has an invalid length. [ 70.115697][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.192'. [ 70.334575][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 70.352054][ T6834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6834 comm=syz.2.201 [ 70.391366][ T6838] macsec1: entered promiscuous mode [ 70.393183][ T6838] macsec1: entered allmulticast mode [ 70.396400][ T6838] bridge0: entered allmulticast mode [ 70.399647][ T6838] bridge0: port 3(macsec1) entered blocking state [ 70.401803][ T6838] bridge0: port 3(macsec1) entered disabled state [ 70.405761][ T6838] bridge0: left allmulticast mode [ 70.419407][ T6839] macsec1: entered promiscuous mode [ 70.421176][ T6839] macsec1: entered allmulticast mode [ 70.422853][ T6839] bridge0: entered allmulticast mode [ 70.426123][ T6839] bridge0: port 3(macsec1) entered blocking state [ 70.428221][ T6839] bridge0: port 3(macsec1) entered disabled state [ 70.431842][ T6839] bridge0: left allmulticast mode [ 70.549390][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 70.580524][ T6846] mkiss: ax0: crc mode is auto. [ 70.645988][ T6853] netlink: 'syz.1.208': attribute type 11 has an invalid length. [ 70.649115][ T6853] netlink: 'syz.1.208': attribute type 11 has an invalid length. [ 70.652239][ T6853] netlink: 224 bytes leftover after parsing attributes in process `syz.1.208'. [ 70.675467][ T6854] netlink: 'syz.1.208': attribute type 11 has an invalid length. [ 70.678175][ T6854] netlink: 'syz.1.208': attribute type 11 has an invalid length. [ 70.680712][ T6854] netlink: 224 bytes leftover after parsing attributes in process `syz.1.208'. [ 70.870474][ T6885] vivid-001: ================= START STATUS ================= [ 70.873067][ T6885] vivid-001: RDS Tx I/O Mode: Controls [ 70.875530][ T6885] vivid-001: RDS Program ID: 32904 [ 70.877766][ T6885] vivid-001: RDS Program Type: 3 [ 70.879335][ T6885] vivid-001: RDS PS Name: VIVID-TX [ 70.880988][ T6885] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 70.884136][ T6885] vivid-001: RDS Stereo: true [ 70.887178][ T6885] vivid-001: RDS Artificial Head: false [ 70.888977][ T6885] vivid-001: RDS Compressed: false [ 70.890589][ T6885] vivid-001: RDS Dynamic PTY: false [ 70.892240][ T6885] vivid-001: RDS Traffic Announcement: false [ 70.894131][ T6885] vivid-001: RDS Traffic Program: true [ 70.896346][ T6885] vivid-001: RDS Music: true [ 70.897869][ T6885] vivid-001: ================== END STATUS ================== [ 70.925211][ T6890] cgroup: fork rejected by pids controller in /syz0 [ 70.929705][ T6890] netlink: 'syz.0.215': attribute type 4 has an invalid length. [ 71.074525][ T5988] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 71.098477][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.100547][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.195409][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.199472][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 71.236536][ T5988] usb 6-1: config 8 has an invalid interface number: 123 but max is 0 [ 71.239709][ T5988] usb 6-1: config 8 has an invalid interface number: 199 but max is 0 [ 71.242832][ T5988] usb 6-1: config 8 has an invalid interface number: 4 but max is 0 [ 71.246233][ T5988] usb 6-1: config 8 has 3 interfaces, different from the descriptor's value: 1 [ 71.249012][ T5988] usb 6-1: config 8 has no interface number 0 [ 71.250899][ T5988] usb 6-1: config 8 has no interface number 1 [ 71.252824][ T5988] usb 6-1: config 8 has no interface number 2 [ 71.255086][ T5988] usb 6-1: config 8 interface 123 altsetting 10 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 71.258491][ T5988] usb 6-1: config 8 interface 123 altsetting 10 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 71.261855][ T5988] usb 6-1: config 8 interface 123 altsetting 10 bulk endpoint 0x9 has invalid maxpacket 16 [ 71.265158][ T5988] usb 6-1: config 8 interface 123 altsetting 10 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 71.269236][ T5988] usb 6-1: too many endpoints for config 8 interface 199 altsetting 38: 181, using maximum allowed: 30 [ 71.272595][ T5988] usb 6-1: config 8 interface 199 altsetting 38 has a duplicate endpoint with address 0xB, skipping [ 71.276655][ T5988] usb 6-1: config 8 interface 199 altsetting 38 has a duplicate endpoint with address 0x9, skipping [ 71.280950][ T5988] usb 6-1: config 8 interface 199 altsetting 38 has 3 endpoint descriptors, different from the interface descriptor's value: 181 [ 71.289410][ T5988] usb 6-1: too many endpoints for config 8 interface 4 altsetting 165: 99, using maximum allowed: 30 [ 71.293927][ T5988] usb 6-1: config 8 interface 4 altsetting 165 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 71.299358][ T5988] usb 6-1: config 8 interface 123 has no altsetting 0 [ 71.301959][ T5988] usb 6-1: config 8 interface 199 has no altsetting 0 [ 71.304718][ T5988] usb 6-1: config 8 interface 4 has no altsetting 0 [ 71.306898][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.309297][ T5988] usb 6-1: New USB device found, idVendor=0ac8, idProduct=c002, bcdDevice=e6.4e [ 71.311599][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 71.315140][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.315152][ T5988] usb 6-1: Product: ె [ 71.315160][ T5988] usb 6-1: Manufacturer: љ [ 71.315168][ T5988] usb 6-1: SerialNumber: ␁ [ 71.317806][ T6875] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 71.394205][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.398309][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 71.421446][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.425177][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.428440][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.431852][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.435698][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.489543][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.492758][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 71.542377][ T5988] usb 6-1: USB disconnect, device number 10 [ 71.566897][ T6897] chnl_net:caif_netlink_parms(): no params data found [ 71.670959][ T6897] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.673284][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.676940][ T6897] bridge_slave_0: entered allmulticast mode [ 71.679745][ T6897] bridge_slave_0: entered promiscuous mode [ 71.698299][ T6897] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.700593][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.702816][ T6897] bridge_slave_1: entered allmulticast mode [ 71.705834][ T6897] bridge_slave_1: entered promiscuous mode [ 71.753818][ T6897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.759629][ T6897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.762610][ T46] bridge_slave_1: left allmulticast mode [ 71.764685][ T46] bridge_slave_1: left promiscuous mode [ 71.767022][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.771482][ T46] bridge_slave_0: left allmulticast mode [ 71.773270][ T46] bridge_slave_0: left promiscuous mode [ 71.776064][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.865071][ T46] bond1 (unregistering): (slave geneve2): Releasing active interface [ 72.002717][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.006999][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.010396][ T46] bond0 (unregistering): Released all slaves [ 72.016430][ T46] bond1 (unregistering): Released all slaves [ 72.071210][ T6897] team0: Port device team_slave_0 added [ 72.077514][ T6897] team0: Port device team_slave_1 added [ 72.112727][ T6897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.114992][ T6897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.122890][ T6897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.127038][ T6897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.129303][ T6897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.138803][ T6924] block device autoloading is deprecated and will be removed. [ 72.138950][ T6897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.220702][ T6897] hsr_slave_0: entered promiscuous mode [ 72.226104][ T6897] hsr_slave_1: entered promiscuous mode [ 72.228278][ T6897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.230924][ T6897] Cannot create hsr debugfs directory [ 72.342895][ T46] hsr_slave_0: left promiscuous mode [ 72.346129][ T46] hsr_slave_1: left promiscuous mode [ 72.348187][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.350481][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.353464][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.356272][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.374325][ T46] veth1_macvtap: left promiscuous mode [ 72.376790][ T46] veth0_macvtap: left promiscuous mode [ 72.378576][ T46] veth1_vlan: left promiscuous mode [ 72.380399][ T46] veth0_vlan: left promiscuous mode [ 72.590196][ T6943] xt_socket: unknown flags 0x8 [ 72.800614][ T6958] netlink: 'syz.3.227': attribute type 21 has an invalid length. [ 72.803179][ T6958] netlink: 128 bytes leftover after parsing attributes in process `syz.3.227'. [ 72.915712][ T46] team0 (unregistering): Port device team_slave_1 removed [ 72.962490][ T46] team0 (unregistering): Port device team_slave_0 removed [ 73.366375][ T6958] netlink: 'syz.3.227': attribute type 4 has an invalid length. [ 73.368901][ T6958] netlink: 'syz.3.227': attribute type 5 has an invalid length. [ 73.371308][ T6958] netlink: 3 bytes leftover after parsing attributes in process `syz.3.227'. [ 73.470645][ T6976] team0: Port device ip6gretap1 added [ 73.491807][ T6976] : entered promiscuous mode [ 73.494635][ T5950] Bluetooth: hci0: command tx timeout [ 73.598026][ T6990] overlayfs: failed to resolve './file1': -2 [ 73.649314][ T6995] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 73.653507][ T6995] SELinux: failed to load policy [ 73.877516][ T6897] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.881944][ T7001] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 73.884260][ T7001] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.886494][ T6897] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.892892][ T7001] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 73.900463][ T6897] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.908619][ T7001] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 73.910613][ T7001] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.915803][ T6897] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.918250][ T7001] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 73.928383][ T7001] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.930370][ T7001] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.934560][ T7001] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.940858][ T7001] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 73.943195][ T7001] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.948981][ T7001] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 74.052806][ T6897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.063614][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 74.068007][ T6897] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.073347][ T7033] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.239'. [ 74.078827][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.081061][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.084127][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.086445][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.236487][ T6897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.273050][ T6897] veth0_vlan: entered promiscuous mode [ 74.285505][ T6897] veth1_vlan: entered promiscuous mode [ 74.295891][ T1466] vhci_hcd: vhci_device speed not set [ 74.310869][ T6897] veth0_macvtap: entered promiscuous mode [ 74.319071][ T6897] veth1_macvtap: entered promiscuous mode [ 74.332092][ T6897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.340507][ T6897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.347571][ T6897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.351336][ T6897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.354288][ T6897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.357239][ T6897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.442546][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.445903][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.475051][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.477527][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.489634][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 74.489643][ T40] audit: type=1400 audit(1752966122.782:401): avc: denied { mounton } for pid=6897 comm="syz-executor" path="/syzkaller.jaUB7b/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.540220][ T40] audit: type=1400 audit(1752966122.832:402): avc: denied { create } for pid=7051 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 74.546818][ T40] audit: type=1400 audit(1752966122.842:403): avc: denied { ioctl } for pid=7051 comm="syz.3.240" path="socket:[13727]" dev="sockfs" ino=13727 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 74.660396][ T40] audit: type=1400 audit(1752966122.952:404): avc: denied { getopt } for pid=7057 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.716666][ T40] audit: type=1400 audit(1752966123.012:405): avc: denied { setopt } for pid=7068 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 74.717603][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'. [ 74.722554][ T40] audit: type=1400 audit(1752966123.012:406): avc: denied { ioctl } for pid=7068 comm="syz.2.246" path="socket:[15224]" dev="sockfs" ino=15224 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.740666][ T40] audit: type=1400 audit(1752966123.032:407): avc: denied { write } for pid=7065 comm="syz.3.245" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.758960][ T7069] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.776912][ T40] audit: type=1400 audit(1752966123.072:408): avc: denied { mounton } for pid=7073 comm="syz.3.247" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 74.778078][ T7074] syz.3.247: attempt to access beyond end of device [ 74.778078][ T7074] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 74.789909][ T7074] MINIX-fs: unable to read superblock [ 74.822437][ T6898] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 74.825829][ T7077] netlink: 'syz.3.248': attribute type 13 has an invalid length. [ 74.829344][ T40] audit: type=1400 audit(1752966123.122:409): avc: denied { create } for pid=7075 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 74.982855][ T7087] netlink: 168 bytes leftover after parsing attributes in process `syz.3.249'. [ 74.985774][ T7087] netlink: 168 bytes leftover after parsing attributes in process `syz.3.249'. [ 75.481846][ T7091] netlink: 'syz.0.252': attribute type 10 has an invalid length. [ 75.485579][ T7091] hsr_slave_0: entered allmulticast mode [ 75.488594][ T7091] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 75.560820][ T40] audit: type=1400 audit(1752966123.852:410): avc: denied { append } for pid=7095 comm="syz.1.254" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.746372][ T7104] netlink: 'syz.0.258': attribute type 4 has an invalid length. [ 75.748867][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'. [ 75.755853][ T7104] netlink: 'syz.0.258': attribute type 4 has an invalid length. [ 75.758863][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'. [ 75.767006][ T7116] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 75.812184][ T7119] Bluetooth: MGMT ver 1.23 [ 75.830356][ T7119] tmpfs: Bad value for 'mpol' [ 75.839048][ T7124] overlayfs: failed to get inode (-116) [ 75.841645][ T7124] overlayfs: failed to get inode (-116) [ 75.859317][ T7126] 9p: Unknown Cache mode or invalid value fs [ 75.894720][ T5960] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.959894][ T7133] netlink: 129704 bytes leftover after parsing attributes in process `syz.3.269'. [ 75.984778][ T5960] Bluetooth: hci0: command 0x040f tx timeout [ 75.984811][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.987434][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.990990][ T6917] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 76.001571][ T7135] kvm: MONITOR instruction emulated as NOP! [ 76.011841][ T7139] tmpfs: Unknown parameter 'usrquos\)m ta_b|ock_hardlimit' [ 76.165786][ T6917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.169664][ T6917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.172610][ T6917] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.184536][ T6917] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.187360][ T6917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.195190][ T6917] usb 7-1: config 0 descriptor?? [ 76.340931][ T7148] block nbd1: shutting down sockets [ 76.518536][ T7162] ip6t_rpfilter: unknown options [ 76.609126][ T6917] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 76.774402][ T7181] netlink: 'syz.0.284': attribute type 8 has an invalid length. [ 76.774631][ T7182] netlink: 'syz.0.284': attribute type 8 has an invalid length. [ 76.865858][ T7114] No source specified [ 76.873261][ T5988] usb 7-1: USB disconnect, device number 4 [ 77.227261][ T7203] netlink: 'syz.0.290': attribute type 4 has an invalid length. [ 77.356633][ T7206] openvswitch: netlink: IP tunnel TTL not specified. [ 77.359045][ T7206] binder: 7205:7206 ioctl 81f8943c 200000000480 returned -22 [ 77.361508][ T7206] binder: BINDER_SET_CONTEXT_MGR already set [ 77.363585][ T7206] binder: 7205:7206 ioctl 4018620d 200000000040 returned -16 [ 77.366078][ T7206] binder: 7205:7206 unknown command 0 [ 77.367770][ T7206] binder: 7205:7206 ioctl c0306201 200000000180 returned -22 [ 77.865973][ T7239] tipc: Started in network mode [ 77.867585][ T7239] tipc: Node identity 4a3ebd0873ed, cluster identity 4711 [ 77.870468][ T7239] tipc: Enabled bearer , priority 0 [ 77.874164][ T7239] syzkaller0: MTU too low for tipc bearer [ 77.876155][ T7239] tipc: Disabling bearer [ 77.882571][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 77.888297][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 77.891050][ T7239] netlink: 'syz.2.301': attribute type 18 has an invalid length. [ 77.974556][ T5960] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.060085][ T5960] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.062540][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.064544][ T5960] Bluetooth: hci0: command 0x040f tx timeout [ 78.238981][ T7250] syz.2.305: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 78.243507][ T7250] CPU: 1 UID: 0 PID: 7250 Comm: syz.2.305 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 78.243521][ T7250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.243528][ T7250] Call Trace: [ 78.243532][ T7250] [ 78.243536][ T7250] dump_stack_lvl+0x16c/0x1f0 [ 78.243558][ T7250] warn_alloc+0x248/0x3a0 [ 78.243576][ T7250] ? __pfx_warn_alloc+0x10/0x10 [ 78.243592][ T7250] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 78.243610][ T7250] ? stack_depot_save_flags+0x3e0/0xa40 [ 78.243631][ T7250] ? kasan_save_stack+0x42/0x60 [ 78.243647][ T7250] ? kasan_save_stack+0x33/0x60 [ 78.243662][ T7250] ? kasan_save_track+0x14/0x30 [ 78.243678][ T7250] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 78.243691][ T7250] ? __vb2_queue_alloc+0x8c9/0x1280 [ 78.243702][ T7250] ? vb2_core_create_bufs+0x559/0xab0 [ 78.243720][ T7250] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 78.243733][ T7250] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 78.243753][ T7250] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 78.243769][ T7250] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 78.243788][ T7250] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 78.243801][ T7250] vmalloc_user_noprof+0x9e/0xe0 [ 78.243815][ T7250] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 78.243828][ T7250] vb2_vmalloc_alloc+0x135/0x3f0 [ 78.243842][ T7250] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 78.243856][ T7250] __vb2_queue_alloc+0x8c9/0x1280 [ 78.243875][ T7250] vb2_core_create_bufs+0x559/0xab0 [ 78.243891][ T7250] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 78.243910][ T7250] vb2_create_bufs+0x5e8/0x840 [ 78.243924][ T7250] ? __pfx_vb2_create_bufs+0x10/0x10 [ 78.243935][ T7250] ? v4l_sanitize_colorspace+0x213/0x400 [ 78.243955][ T7250] vb2_ioctl_create_bufs+0x244/0x3e0 [ 78.243967][ T7250] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.243981][ T7250] vidioc_create_bufs+0x7d/0xf0 [ 78.243994][ T7250] v4l_create_bufs+0x156/0x270 [ 78.244010][ T7250] __video_do_ioctl+0xb3d/0xfc0 [ 78.244028][ T7250] ? __might_fault+0xe3/0x190 [ 78.244044][ T7250] ? __pfx___video_do_ioctl+0x10/0x10 [ 78.244065][ T7250] video_usercopy+0x4cd/0x1720 [ 78.244083][ T7250] ? __pfx___video_do_ioctl+0x10/0x10 [ 78.244099][ T7250] ? selinux_kernel_read_file+0xc0/0x130 [ 78.244116][ T7250] ? __pfx_video_usercopy+0x10/0x10 [ 78.244142][ T7250] v4l2_ioctl+0x1bd/0x250 [ 78.244157][ T7250] ? __pfx_v4l2_ioctl+0x10/0x10 [ 78.244173][ T7250] __x64_sys_ioctl+0x18e/0x210 [ 78.244188][ T7250] do_syscall_64+0xcd/0x4c0 [ 78.244200][ T7250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.244211][ T7250] RIP: 0033:0x7f33ef38e9a9 [ 78.244219][ T7250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.244229][ T7250] RSP: 002b:00007f33f027a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.244240][ T7250] RAX: ffffffffffffffda RBX: 00007f33ef5b5fa0 RCX: 00007f33ef38e9a9 [ 78.244246][ T7250] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000009 [ 78.244253][ T7250] RBP: 00007f33ef410d69 R08: 0000000000000000 R09: 0000000000000000 [ 78.244259][ T7250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.244265][ T7250] R13: 0000000000000000 R14: 00007f33ef5b5fa0 R15: 00007ffe302a6618 [ 78.244279][ T7250] [ 78.244283][ T7250] Mem-Info: [ 78.350134][ T7250] active_anon:8903 inactive_anon:15 isolated_anon:0 [ 78.350134][ T7250] active_file:12629 inactive_file:40592 isolated_file:0 [ 78.350134][ T7250] unevictable:1768 dirty:63 writeback:0 [ 78.350134][ T7250] slab_reclaimable:11521 slab_unreclaimable:72649 [ 78.350134][ T7250] mapped:24492 shmem:2462 pagetables:1236 [ 78.350134][ T7250] sec_pagetables:302 bounce:0 [ 78.350134][ T7250] kernel_misc_reclaimable:0 [ 78.350134][ T7250] free:445831 free_pcp:24014 free_cma:0 [ 78.365072][ T7250] Node 0 active_anon:37596kB inactive_anon:60kB active_file:50516kB inactive_file:162164kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99952kB dirty:244kB writeback:0kB shmem:8296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12496kB pagetables:4744kB sec_pagetables:1208kB all_unreclaimable? no Balloon:0kB [ 78.393907][ T7250] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 78.429623][ T7250] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 78.439535][ T7250] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 78.441591][ T7250] Node 0 DMA32 free:159068kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46400kB inactive_anon:60kB active_file:50516kB inactive_file:162164kB unevictable:3536kB writepending:180kB present:2080628kB managed:1264296kB mlocked:0kB bounce:0kB free_pcp:68572kB local_pcp:32392kB free_cma:0kB [ 78.456875][ T7250] lowmem_reserve[]: 0 0 0 0 0 [ 78.458643][ T7250] Node 1 Normal free:1608648kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:14992kB local_pcp:3648kB free_cma:0kB [ 78.490661][ T7250] lowmem_reserve[]: 0 0 0 0 0 [ 78.492211][ T7250] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 78.497794][ T7250] Node 0 DMA32: 761*4kB (ME) 280*8kB (M) 274*16kB (M) 201*32kB (UM) 146*64kB (UM) 18*128kB (UME) 15*256kB (UM) 7*512kB (ME) 7*1024kB (UM) 1*2048kB (U) 26*4096kB (M) = 150884kB [ 78.503454][ T7250] Node 1 Normal: 6*4kB (UME) 28*8kB (UME) 25*16kB (UME) 22*32kB (UME) 20*64kB (UME) 15*128kB (UME) 4*256kB (UE) 3*512kB (M) 2*1024kB (UE) 1*2048kB (M) 390*4096kB (M) = 1608648kB [ 78.510702][ T7250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.518245][ T7277] netlink: 96 bytes leftover after parsing attributes in process `syz.0.313'. [ 78.522074][ T7277] sctp: [Deprecated]: syz.0.313 (pid 7277) Use of int in max_burst socket option. [ 78.522074][ T7277] Use struct sctp_assoc_value instead [ 78.531977][ T7250] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.537158][ T7250] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.540414][ T7250] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.543308][ T7250] 60067 total pagecache pages [ 78.545971][ T7250] 0 pages in swap cache [ 78.547310][ T7250] Free swap = 124996kB [ 78.549190][ T7250] Total swap = 124996kB [ 78.550510][ T7250] 1048443 pages RAM [ 78.551734][ T7250] 0 pages HighMem/MovableOnly [ 78.553207][ T7250] 283040 pages reserved [ 78.555915][ T7250] 0 pages cma reserved [ 78.616714][ T7287] netlink: 504 bytes leftover after parsing attributes in process `syz.1.315'. [ 78.686708][ T7289] exFAT-fs (nullb0): invalid boot record signature [ 78.689015][ T7289] exFAT-fs (nullb0): failed to read boot sector [ 78.691033][ T7289] exFAT-fs (nullb0): failed to recognize exfat type [ 78.734671][ T7298] ntfs3(sr0): Primary boot signature is not NTFS. [ 78.737453][ T7298] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 78.769970][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 79.030204][ T7314] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 79.032760][ T7314] overlayfs: failed to set xattr on upper [ 79.036121][ T7314] overlayfs: ...falling back to redirect_dir=nofollow. [ 79.039354][ T7314] overlayfs: ...falling back to index=off. [ 79.041257][ T7314] overlayfs: ...falling back to uuid=null. [ 79.043138][ T7314] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 79.083177][ T7318] loop6: detected capacity change from 0 to 2560 [ 79.088564][ T7318] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.094818][ T7318] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.097367][ T7318] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.099640][ T7321] netlink: 72 bytes leftover after parsing attributes in process `syz.3.326'. [ 79.099944][ T7318] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.105955][ T7318] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.108613][ T7318] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.111519][ T7318] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.114349][ T7318] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.117472][ T7318] ldm_validate_partition_table(): Disk read failed. [ 79.119904][ T7318] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.127358][ T7318] Buffer I/O error on dev loop6, logical block 0, async page read [ 79.136207][ T7318] Dev loop6: unable to read RDB block 0 [ 79.138196][ T7318] loop6: unable to read partition table [ 79.140095][ T7318] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 79.154800][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 79.228293][ T7330] macsec0: entered promiscuous mode [ 79.230067][ T7330] macsec0: entered allmulticast mode [ 79.231731][ T7330] veth1_macvtap: entered allmulticast mode [ 79.423707][ T7349] netlink: 92 bytes leftover after parsing attributes in process `syz.1.338'. [ 79.475882][ T7351] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 79.496898][ T7351] evm: overlay not supported [ 79.501382][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 79.501391][ T40] audit: type=1400 audit(1752966127.792:453): avc: denied { write } for pid=7350 comm="syz.0.339" name="file0" dev="overlay" ino=36047845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.512403][ T6036] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 79.515314][ T40] audit: type=1400 audit(1752966127.792:454): avc: denied { open } for pid=7350 comm="syz.0.339" name="file0" dev="overlay" ino=36047845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.523415][ T40] audit: type=1400 audit(1752966127.812:455): avc: denied { setattr } for pid=7350 comm="syz.0.339" name="#128" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.531794][ T40] audit: type=1400 audit(1752966127.812:456): avc: denied { read } for pid=7350 comm="syz.0.339" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.540324][ T40] audit: type=1400 audit(1752966127.812:457): avc: denied { link } for pid=7350 comm="syz.0.339" name="#128" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.548552][ T40] audit: type=1400 audit(1752966127.812:458): avc: denied { ioctl } for pid=7344 comm="syz.3.337" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 79.564562][ T40] audit: type=1400 audit(1752966127.852:459): avc: denied { unlink } for pid=6897 comm="syz-executor" name="file1" dev="overlay" ino=36047859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.584506][ T40] audit: type=1400 audit(1752966127.872:460): avc: denied { remove_name } for pid=6897 comm="syz-executor" name="file0" dev="overlay" ino=36047868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.594881][ T40] audit: type=1400 audit(1752966127.872:461): avc: denied { create } for pid=6897 comm="syz-executor" name="#16" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.601139][ T40] audit: type=1400 audit(1752966127.872:462): avc: denied { associate } for pid=6897 comm="syz-executor" name="#16" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.618700][ T7358] support for cryptoloop has been removed. Use dm-crypt instead. [ 79.674748][ T6036] usb 7-1: Using ep0 maxpacket: 8 [ 79.679200][ T6036] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 79.682267][ T6036] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.685849][ T6036] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.688667][ T7370] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 79.688888][ T6036] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.696464][ T6036] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.700947][ T6036] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.703796][ T6036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.722621][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.887419][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.914175][ T6036] usb 7-1: usb_control_msg returned -32 [ 79.916788][ T6036] usbtmc 7-1:16.0: can't read capabilities [ 79.967359][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.013772][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.055920][ T5960] Bluetooth: hci1: command 0x0c1a tx timeout [ 80.126633][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.145084][ T5950] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.147150][ T5960] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.168425][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.172177][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.176157][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.179423][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.182051][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.285366][ T7395] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 80.337317][ T60] bridge_slave_1: left allmulticast mode [ 80.339089][ T60] bridge_slave_1: left promiscuous mode [ 80.345532][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.375739][ T60] bridge_slave_0: left allmulticast mode [ 80.377505][ T60] bridge_slave_0: left promiscuous mode [ 80.379360][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.493493][ T6036] usb 7-1: USB disconnect, device number 5 [ 80.581602][ T5960] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 80.620309][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.624335][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.628856][ T60] bond0 (unregistering): Released all slaves [ 80.652520][ T7392] chnl_net:caif_netlink_parms(): no params data found [ 80.790359][ T7431] virtio-fs: tag not found [ 80.808306][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.810607][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.812857][ T7392] bridge_slave_0: entered allmulticast mode [ 80.820240][ T7392] bridge_slave_0: entered promiscuous mode [ 80.857186][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.859489][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.861768][ T7392] bridge_slave_1: entered allmulticast mode [ 80.864658][ T7392] bridge_slave_1: entered promiscuous mode [ 80.922021][ T7392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.927262][ T7392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.965298][ T7392] team0: Port device team_slave_0 added [ 80.969142][ T7392] team0: Port device team_slave_1 added [ 80.997057][ T60] hsr_slave_0: left promiscuous mode [ 81.004718][ T60] hsr_slave_1: left promiscuous mode [ 81.006891][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.009261][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.012983][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.016919][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.025184][ T7435] selinux_netlink_send: 1 callbacks suppressed [ 81.025198][ T7435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7435 comm=syz.3.361 [ 81.044080][ T60] veth1_macvtap: left promiscuous mode [ 81.046206][ T60] veth0_macvtap: left promiscuous mode [ 81.048078][ T60] veth1_vlan: left promiscuous mode [ 81.049829][ T60] veth0_vlan: left promiscuous mode [ 81.336428][ T884] cfg80211: failed to load regulatory.db [ 81.546153][ T60] team0 (unregistering): Port device team_slave_1 removed [ 81.600523][ T60] team0 (unregistering): Port device team_slave_0 removed [ 82.004009][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.006945][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.016564][ T7392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.027613][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.030475][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.062065][ T7392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.081267][ T7452] 9pnet: p9_errstr2errno: server reported unknown error @ [ 82.109556][ T7455] comedi comedi0: comedi_config --init_data is deprecated [ 82.161918][ T7392] hsr_slave_0: entered promiscuous mode [ 82.164108][ T7392] hsr_slave_1: entered promiscuous mode [ 82.225277][ T5960] Bluetooth: hci0: command tx timeout [ 82.354618][ T5988] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 82.361111][ T7392] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.366191][ T7392] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.370568][ T7392] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.377915][ T7392] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.434058][ T7392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.443399][ T7392] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.453162][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.455466][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.462731][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.465337][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.511095][ T7478] netlink: 36 bytes leftover after parsing attributes in process `syz.1.368'. [ 82.513109][ T7392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.517102][ T5988] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.522177][ T5988] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.525998][ T5988] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.528358][ T7478] netlink: 36 bytes leftover after parsing attributes in process `syz.1.368'. [ 82.530526][ T5988] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.538951][ T5988] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.543092][ T5988] usb 7-1: config 0 descriptor?? [ 82.629154][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.781727][ T7392] veth0_vlan: entered promiscuous mode [ 82.793959][ T7392] veth1_vlan: entered promiscuous mode [ 82.812002][ T7392] veth0_macvtap: entered promiscuous mode [ 82.817029][ T7392] veth1_macvtap: entered promiscuous mode [ 82.831701][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.842119][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.848193][ T7392] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.851693][ T7392] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.855881][ T7392] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.859223][ T7392] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.911713][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.917041][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.940905][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.943479][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.954100][ T5988] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 82.971570][ T5988] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 83.208548][ T7455] ------------[ cut here ]------------ [ 83.210367][ T7455] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/das16m1.c:525:9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 83.212959][ T7455] shift exponent 209 is too large for 32-bit type 'int' [ 83.218403][ T7455] CPU: 2 UID: 0 PID: 7455 Comm: syz.2.365 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 83.218418][ T7455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.218425][ T7455] Call Trace: [ 83.218429][ T7455] [ 83.218434][ T7455] dump_stack_lvl+0x16c/0x1f0 [ 83.218456][ T7455] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 83.218477][ T7455] das16m1_attach.cold+0x19/0x1e [ 83.218492][ T7455] comedi_device_attach+0x3b0/0x900 [ 83.218513][ T7455] do_devconfig_ioctl+0x1a7/0x580 [ 83.218526][ T7455] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 83.218547][ T7455] ? find_held_lock+0x2b/0x80 [ 83.218563][ T7455] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 83.218578][ T7455] ? do_raw_spin_unlock+0xb4/0x230 [ 83.218592][ T7455] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.218606][ T7455] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 83.218621][ T7455] ? do_vfs_ioctl+0x523/0x1a60 [ 83.218637][ T7455] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 83.218654][ T7455] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 83.218673][ T7455] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 83.218693][ T7455] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 83.218715][ T7455] ? hook_file_ioctl_common+0x145/0x410 [ 83.218732][ T7455] ? selinux_file_ioctl+0x180/0x270 [ 83.218759][ T7455] ? selinux_file_ioctl+0xb4/0x270 [ 83.218777][ T7455] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 83.218794][ T7455] __x64_sys_ioctl+0x18e/0x210 [ 83.218809][ T7455] do_syscall_64+0xcd/0x4c0 [ 83.218821][ T7455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.218833][ T7455] RIP: 0033:0x7f33ef38e9a9 [ 83.218843][ T7455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.218854][ T7455] RSP: 002b:00007f33f027a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.218865][ T7455] RAX: ffffffffffffffda RBX: 00007f33ef5b5fa0 RCX: 00007f33ef38e9a9 [ 83.218872][ T7455] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 0000000000000004 [ 83.218878][ T7455] RBP: 00007f33ef410d69 R08: 0000000000000000 R09: 0000000000000000 [ 83.218884][ T7455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.218890][ T7455] R13: 0000000000000000 R14: 00007f33ef5b5fa0 R15: 00007ffe302a6618 [ 83.218903][ T7455] [ 83.218907][ T7455] ---[ end trace ]--- [ 83.334499][ T7455] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 83.336757][ T7455] CPU: 2 UID: 0 PID: 7455 Comm: syz.2.365 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 83.340345][ T7455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.343625][ T7455] Call Trace: [ 83.344691][ T7455] [ 83.345627][ T7455] dump_stack_lvl+0x3d/0x1f0 [ 83.347110][ T7455] panic+0x71c/0x800 [ 83.348365][ T7455] ? __pfx_panic+0x10/0x10 [ 83.349777][ T7455] ? __pfx__printk+0x10/0x10 [ 83.351222][ T7455] check_panic_on_warn+0xab/0xb0 [ 83.352769][ T7455] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 83.354752][ T7455] das16m1_attach.cold+0x19/0x1e [ 83.356299][ T7455] comedi_device_attach+0x3b0/0x900 [ 83.357928][ T7455] do_devconfig_ioctl+0x1a7/0x580 [ 83.359502][ T7455] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 83.361226][ T7455] ? find_held_lock+0x2b/0x80 [ 83.362702][ T7455] comedi_unlocked_ioctl+0x15bb/0x2e90 [ 83.364410][ T7455] ? do_raw_spin_unlock+0xb4/0x230 [ 83.366007][ T7455] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 83.367851][ T7455] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 83.369674][ T7455] ? do_vfs_ioctl+0x523/0x1a60 [ 83.371176][ T7455] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 83.372758][ T7455] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 83.374778][ T7455] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 83.376796][ T7455] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 83.378910][ T7455] ? hook_file_ioctl_common+0x145/0x410 [ 83.380638][ T7455] ? selinux_file_ioctl+0x180/0x270 [ 83.382255][ T7455] ? selinux_file_ioctl+0xb4/0x270 [ 83.383850][ T7455] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 83.385696][ T7455] __x64_sys_ioctl+0x18e/0x210 [ 83.387196][ T7455] do_syscall_64+0xcd/0x4c0 [ 83.388635][ T7455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.390464][ T7455] RIP: 0033:0x7f33ef38e9a9 [ 83.391859][ T7455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.398017][ T7455] RSP: 002b:00007f33f027a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.400553][ T7455] RAX: ffffffffffffffda RBX: 00007f33ef5b5fa0 RCX: 00007f33ef38e9a9 [ 83.402942][ T7455] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 0000000000000004 [ 83.405395][ T7455] RBP: 00007f33ef410d69 R08: 0000000000000000 R09: 0000000000000000 [ 83.407835][ T7455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.410285][ T7455] R13: 0000000000000000 R14: 00007f33ef5b5fa0 R15: 00007ffe302a6618 [ 83.412739][ T7455] [ 83.414373][ T7455] Kernel Offset: disabled [ 83.415817][ T7455] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:02:11 Registers: info registers vcpu 0 CPU#0 RAX=00000000000000d3 RBX=ffffc900069c3818 RCX=ffffffff86a7ad89 RDX=1ffff11004ad9d33 RSI=ffffffff86a7ad96 RDI=ffff8880256ce9aa RBP=00000000000000d3 RSP=ffffc900041f6e90 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=00000000ab10007c R13=dffffc0000000000 R14=ffff88802a230000 R15=ffff8880256ce980 RIP=ffffffff86a7ae2b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f24f61b8300 ffffffff 00c00000 GS =0000 ffff8880d6722000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffd44b9cbc CR3=0000000035729000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=4d6ca299ecb32196 08c4c4c419c184fe 4d6ca299ecb32196 08c4c4c419c184fe 4d6ca299ecb32196 08c4c4c419c184fe 4d6ca299ecb32196 08c4c4c419c184fe ZMM18=b5943e55449bbaee 1c7ab8a0c50d9117 b5943e55449bbaee 1c7ab8a0c50d9117 b5943e55449bbaee 1c7ab8a0c50d9117 b5943e55449bbaee 1c7ab8a0c50d9117 ZMM19=b704000000000000 0000000000000005 b704000000000000 0000000000000004 b704000000000000 0000000000000003 b704000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646e732f7665642f 01ffffffffffffff ffdb080880030004 004080808080a088 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82080005800401c7 1000080243e2006f 696475612f766564 2f01ffffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffe90805800301 80040880a2d4e408 0001000000080606 0124fa0008000180 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a980310808080 8a08000a90030e10 000a80030c100009 f0030880100009e0 ZMM25=1c7ab8a01c7ab8a0 1c7ab8a01c7ab8a0 1c7ab8a01c7ab8a0 1c7ab8a01c7ab8a0 1c7ab8a01c7ab8a0 1c7ab8a01c7ab8a0 1c7ab8a01c7ab8a0 1c7ab8a01c7ab8a0 ZMM26=449bbaee449bbaee 449bbaee449bbaee 449bbaee449bbaee 449bbaee449bbaee 449bbaee449bbaee 449bbaee449bbaee 449bbaee449bbaee 449bbaee449bbaee ZMM27=b5943e55b5943e55 b5943e55b5943e55 b5943e55b5943e55 b5943e55b5943e55 b5943e55b5943e55 b5943e55b5943e55 b5943e55b5943e55 b5943e55b5943e55 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b5040000b5040000 b5040000b5040000 b5040000b5040000 b5040000b5040000 b5040000b5040000 b5040000b5040000 b5040000b5040000 b5040000b5040000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a642080 RCX=ffffffff81afd43d RDX=ffff888024b1c880 RSI=ffffffff81afd419 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90003cdf518 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4c8411 R15=ffff88806a53b580 RIP=ffffffff81afd41b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6822000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb7f06e7d60 CR3=0000000026362000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7efb866a3 00007fb7efb866a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4ee02ee0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558330fa21 000055558330f890 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555583315d14 0000555583315d10 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558330c498 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558331dd2a 000055558331d8a0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0030fffffffffff ff0402a003000800 0290030fffffffff ffff0402800307f0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005ba8008 0001000004080606 011f8600100005ba 8008000100000a08 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0606011f8607f180 1000028004010000 0e0806060168c800 02000700080002e0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0330100002d003dc 020803a003020800 03980304a0080003 9003301000038003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03800402c0030010 0002b0030fffffff ffffff0402a00300 08000290030fffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a4125 RDI=ffffffff9b0b7e60 RBP=ffffffff9b0b7e20 RSP=ffffc9000330f4e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0b7e20 R15=ffffffff855a40c0 RIP=ffffffff855a414f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f33f027a6c0 ffffffff 00c00000 GS =0000 ffff8880d6922000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c31fc4a CR3=000000004c7d9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040002 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33f0277f70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33ef411d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33ef411d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33ef411d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33ef411d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33ef411de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33ef411ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d4552555341454d 5f434c00454e4f48 50454c45545f434c 0053534552444441 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f434c00454d414e 5f434c0052455041 505f434c00534547 415353454d5f434c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000063 RCX=ffffffff8499f00a RDX=ffff888029ea8000 RSI=ffffffff8499ef9d RDI=0000000000000001 RBP=ffff8880265e8ff1 RSP=ffffc900038cf700 R8 =0000000000000001 R9 =000000000000005c R10=0000000000000063 R11=0000000000000001 R12=000000000000001c R13=0000000000000010 R14=0000000000000010 R15=dffffc0000000000 RIP=ffffffff81bbe908 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd90d10dc80 ffffffff 00c00000 GS =0000 ffff8880d6a22000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055fbad09f528 CR3=000000003349d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffffe Opmask01=0000000000000000 Opmask02=00000000efffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0202020202020202 0202020202020202 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 00007fd90d26ed48 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fbad09ddb0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd90d4b86b0 00007ffe52e8c970 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000003f 00007fd90d3a7ac0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe52e8ce40 ffffffffffffffc0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fb8ec3bd98 00007fd90d4b7000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd90d1e8c58 00007fd90d26fa32 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000000000 000000000000002f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6974706f206c6167 656c6c6900732520 3a7265626d756e20 6c6167656c6c4900 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54494d521d515c5a 58515154004e181d 074f585f5048531d 515c5a5851514900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000