last executing test programs: 1m1.708974547s ago: executing program 0 (id=60): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f0000000800)=""/49}, {&(0x7f00000009c0)=""/222}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe5}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) close(0x3) 1m1.519973207s ago: executing program 0 (id=63): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) syz_emit_ethernet(0xfdef, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x4}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='xfs\x00', 0xa00000, &(0x7f0000000140)='grpquota') syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) 1m1.453738846s ago: executing program 0 (id=66): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x17, "eb1dd2b631dd77e7fffff703fa343600"}}) 1m1.403861911s ago: executing program 0 (id=68): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x2c93a000) ioctl$BSG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000040)) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x14, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x0, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x10000]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1m1.279647736s ago: executing program 0 (id=71): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = fsopen(&(0x7f0000001400)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000180)='iocharset', 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x300000, 0x800, 0x0, 0x3}, 0x1c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) close(r7) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 1m0.973132797s ago: executing program 0 (id=74): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socket$netlink(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r4, 0x89e2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) (async) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) 1m0.914432937s ago: executing program 32 (id=74): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socket$netlink(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r4, 0x89e2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) (async) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) 40.528733515s ago: executing program 4 (id=392): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e80", 0x3) write$char_usb(r1, &(0x7f0000002600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb", 0x91) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) write$usbip_server(r0, &(0x7f0000001600)=ANY=[@ANYBLOB="0000000300"], 0x11d1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 39.188269486s ago: executing program 4 (id=428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x60, r1, 0x5, 0x0, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xcf}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x51}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xc2}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x8000}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 39.137611606s ago: executing program 4 (id=430): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x103201, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000080)={0x23, &(0x7f0000000040)=""/35}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r1, 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xa}}, './file0\x00'}) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000180)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000001c0)={r2, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000200)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000240)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000280)={r5, r6, 0xf3, 0x1, 0x1}) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000340)={r7, 0x1, 0x7e6, 0xb, 0x9, 0xb5ea, 0x8}) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @private}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'gretap0\x00', r8, 0x80, 0x80, 0x2, 0x2, {{0x13, 0x4, 0x1, 0x0, 0x4c, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xdf, 0x3, 0x2, [{@rand_addr=0x64010100, 0x9}, {@multicast1, 0x8}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x770}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xb3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) close_range(r4, r4, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xffff) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d1d, &(0x7f00000004c0)=0x10) fchdir(r0) ioctl(r0, 0x8, &(0x7f0000000500)="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") r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'ip_vti0\x00', r9, 0x80, 0x40, 0x7, 0x0, {{0x26, 0x4, 0x3, 0x20, 0x98, 0x67, 0x0, 0x81, 0x4, 0x0, @local, @multicast1, {[@noop, @rr={0x7, 0x17, 0x17, [@dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @empty, @remote, @empty]}, @cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x6, 0xe, "ff73895d8444ec0c4eb64403"}, {0x6, 0x3, '}'}, {0x6, 0x11, "16af07ab51b8feb33ef5316a10b23b"}, {0x7, 0x2}]}, @timestamp={0x44, 0x14, 0x48, 0x0, 0x7, [0x2, 0x7, 0x6, 0xfffff801]}, @timestamp_addr={0x44, 0x2c, 0xc5, 0x1, 0x5, [{@loopback, 0x9}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0xb0}, {@rand_addr=0x64010102, 0x6}, {@private=0xa010100, 0x7}]}]}}}}}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000780)={@dev, @private, 0x0}, &(0x7f00000007c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'ip6_vti0\x00', r9, 0x4, 0x9, 0x6, 0x4, 0x10, @remote, @mcast2, 0x10, 0x20, 0xc, 0x1}}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000008c0)={@remote, @private, 0x0}, &(0x7f0000000900)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000bc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)={0x240, r10, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x801}, 0x40000) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) connect$inet(r3, &(0x7f0000000c00)={0x2, 0x4e23, @local}, 0x10) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000000cc0)={'system_u:object_r:iptables_exec_t:s0', 0x20, 'system_u:object_r:public_content_t:s0', 0x20, 0x7fff, 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, 0x8e) 39.136534497s ago: executing program 4 (id=432): r0 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x20) ioctl$TCGETA(r0, 0x5405, &(0x7f00000001c0)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000010000a94e329724a488be0010100000", @ANYRES32=0x1, @ANYBLOB="ff0100"/20, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0500000000000000000000000f00"/28], 0x50) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x800) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$FUSE_INIT(r6, &(0x7f0000003100)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x24152, 0x0, 0x0, 0x800000, 0x5, 0x0, 0x0, 0x20, 0x1}}, 0x50) tee(r5, r4, 0x8, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r3, &(0x7f0000000340), 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x80000, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc811"], 0xffe) 38.987229705s ago: executing program 4 (id=435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000170000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a3000f500000900030073797a32000000006b00030091abc12404d0c4c731b168"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) 38.712824593s ago: executing program 4 (id=444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a3000000000140003"], 0x60}}, 0xc000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4049000) 38.655809608s ago: executing program 33 (id=444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a3000000000140003"], 0x60}}, 0xc000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4049000) 38.244999698s ago: executing program 1 (id=455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000314000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001b00)="f4000900062b2b25fe80000004000000dc8b850f238466cc00007a000000ad6e911b5181e6a485d9", 0x28}], 0x1}, 0x0) 38.244549865s ago: executing program 1 (id=456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0, 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x2, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000000000003708"]) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="016f0800010027000000270000004518004000050772422850000000008490783fffffffac14000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba00000090781028090300050a00000000000007000008d58838068b91000000"], 0x4e) r6 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r6, 0x708, 0x6) r7 = socket$inet(0x2, 0x80001, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r9, 0x31e, &(0x7f0000000080)={0xe1, 0x3, 0xfe, 0x8}) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r8, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r8, 0x3) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r7, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) listen(r7, 0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, {0xffffffffffffffff}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x9, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000006000007000000000000008010fc0000", @ANYRES32, @ANYBLOB="f4ae31b64ddb237f8b4fede9601fb805f72481e8343b0b8b4631eaff1fbee8d92d5ff86d0c6fa4845e8e17b2b5db6aa83dc2a28007982bbd7c7aa04df927fa495a4fb547928016b123b0396b7936baa40106f8283ce5dd6375375cbc0d229c76491dd40f9db98b244c1dca2294e847a9e3e7142a16dd9c474ca1b2d33936e655ab07716551e197e3646ea0862c127c52ee49e76675d74d5128a6e70efb1a2605fbeb86af1ed0607c465f48a11976ba03f3f0e2a3c90277778077ceb784cf83750d0a2a394b59c4139425f390a2ab2ab72e5343f950ac28a29b328f42e4456767"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x39, &(0x7f0000000140)=""/57, 0x40f00, 0x20, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000180)={0x4a, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xf, 0x2, 0xa}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000200)=[{0x1, 0x4005, 0xf, 0x1}, {0x3, 0x2, 0xb, 0x2}, {0x2, 0x3, 0x1, 0x5}, {0x2, 0x5, 0xf, 0x2}, {0x0, 0x1, 0x10, 0x6}], 0x10, 0x120}, 0x94) 37.832750052s ago: executing program 1 (id=461): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x6) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x0, "fd7b44512b7e1b0420ec2a3ba53b31dd77e7ffffff0300151200000fff00"}}) 37.832351283s ago: executing program 1 (id=462): r0 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x20) ioctl$TCGETA(r0, 0x5405, &(0x7f00000001c0)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000010000a94e329724a488be0010100000", @ANYRES32=0x1, @ANYBLOB="ff0100"/20, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0500000000000000000000000f00"/28], 0x50) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x800) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$FUSE_INIT(r6, &(0x7f0000003100)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x24152, 0x0, 0x0, 0x800000, 0x5, 0x0, 0x0, 0x20, 0x1}}, 0x50) tee(r5, r4, 0x8, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r3, &(0x7f0000000340), 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x80000, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc811"], 0xffe) 37.683548989s ago: executing program 1 (id=464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000314000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001b00)="f4000900062b2b25fe80000000010000dc8b850f238466cc00007a000000ad6e911b5181e6a485d9", 0x28}], 0x1}, 0x0) 37.400897624s ago: executing program 1 (id=468): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x110, 0x4001046}], 0x1, 0x2400c841) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) accept$alg(r0, 0x0, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000002200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x110, 0x4001046}], 0x1, 0x2400c841) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) (async) 37.316758232s ago: executing program 34 (id=468): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x110, 0x4001046}], 0x1, 0x2400c841) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) accept$alg(r0, 0x0, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000002200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x110, 0x4001046}], 0x1, 0x2400c841) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) (async) 4.655814307s ago: executing program 3 (id=1056): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e0d1e"], 0x10) shmat(r2, &(0x7f0000ff6000/0x4000)=nil, 0x7000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) close(0x3) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, 0x0) 4.515503974s ago: executing program 3 (id=1061): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x13, 0x0, 0x3a0, "2f0eb3b3bcbca05db8622ca4ee44beb8ae9444"}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r1 = socket$nl_crypto(0x10, 0x3, 0x15) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff50000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) (async) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x400, 0x0) ioctl$COMEDI_SUBDINFO(r5, 0x80486402, &(0x7f0000000380)) (async) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000100)={0xf000, 0x1e000, 0x8}) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374721065626f673531322d67656e65726963"], 0xe0}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$BLKFINISHZONE(r7, 0x40101288, &(0x7f0000000400)={0x3, 0xb2}) listen(r6, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) (async) sendmmsg$inet6(r6, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) (async) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 4.455457657s ago: executing program 3 (id=1064): r0 = socket(0x26, 0x80000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000000)=r1, 0x4) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000001900)=0x10002, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xb25}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000001a40)=ANY=[@ANYBLOB="ffffffffffffaa00800000bb86dd601200b000303a0000000000000000000000000000000000ff020000000000000000000000000001a0009078000000006027738200000000fc01000000000000000000000000000020010000000000000000000000000001"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffe0) bind$netlink(r0, &(0x7f0000001940)={0x10, 0x0, 0x25dfdbfb, 0x60}, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000380)=""/173, 0xad}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/94, 0x5e}, {&(0x7f00000005c0)=""/124, 0x7c}, {&(0x7f0000000680)=""/74, 0x4a}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000001700)=""/157, 0x9d}], 0xa, &(0x7f0000001880)=""/73, 0x49}, 0x40000042) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x100) r7 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x10, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500"}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1}}) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) 3.494404866s ago: executing program 3 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "64f9ff", 0x20, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1={0xff, 0x3}}, @jumbo]}]}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x3c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}]}, 0x3c}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r3, 0x1, 0x0, 0x2000000, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x10, 0xa, '&}*&\'(^%\'\xa3@('}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x40050) r4 = inotify_init() readv(r4, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/185, 0xb9}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178004"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000170a0103000000000000000002000008090001"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) syz_emit_ethernet(0x1e0, &(0x7f0000000400)={@empty, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x5, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0xf8001}, {0x9, 0x0, 0x1}, {0x7}, {0xc, 0x0, 0x1}, {0x9}, {0x800}, {0x1}], @ipv4=@igmp={{0xe, 0x4, 0x0, 0x9, 0x1ae, 0x67, 0x0, 0x2, 0x2, 0x0, @private=0xa010101, @private=0xa010102, {[@timestamp_prespec={0x44, 0x24, 0x2b, 0x3, 0x0, [{@broadcast, 0x2}, {@broadcast, 0x7f2}, {@remote, 0x9}, {@remote, 0x3ff}]}]}}, {0x16, 0x3, 0x0, @multicast2, "bc4850aa63123443074c23526c453dc145893adac04b4e2fc8bbac05a14137b0f0a7d7262952de982610fe9ddf7b4e73d7cd3336baa6d2195acc6a5b0c0990a2d62c4199015bcdc8435f5bf7ea891d7437cb040b26a3c050ae7c67df1e53830b96543aaba7fd11f179bef00a1fb060cc4c3be82b4eefef078e14f31cf3c246ac10dc919ac61f6996397db663959815481bdf9f43c9d639bf57cd7617ce6a779531114a4dd0774d0e7b62de41b7ed8a9b8b39772cc21f60794503b92300e2ba65936a6fcbe3a7cd6f8b6a9e5b84a58b42565a54c33d85695d70b54105a2cbbebdc7d3c72041c7f161b6e5c019b691e80079dc5fa4c7a15722e5d082a9a32b0f6b554a119cd78857cf2905eb47238f381cbda576c5332558aba5b5c429845749bfaa634e884813d2af526f623d633e010a89f6d84b80c5fe0af752cd00ca354f7ae2498c618b40ce70d7299c26ffb443452399d592be8ae41ea7e13f36d979ea5eb4a394359c2d3c5d42c622d8e084"}}}}}}, &(0x7f0000000080)={0x1, 0x4, [0x9e9, 0x831, 0xdd9, 0xa02]}) 3.492943371s ago: executing program 6 (id=1073): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="f345e199f3a766baf80cb85957d68eef66bafc0cb0f1ee460f01cbc744240000000000c74424021bde0000c7442406000000000f011424c403e97d4c2300fc66baf80cb840d01f8def66bafc0c66ed660f3a42c8008fa938930dd14ce8ae66460f388188fc750856", 0x68}], 0x1, 0x3, 0x0, 0x0) (rerun: 32) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8a, 0x7fffffffffffe, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x6, 0x8, 0x10, 0x2, 0x3, 0x0, 0x3], 0x3000, 0x1011c4}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002340)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r4, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e230000050021"], 0x6c}}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYRESOCT=r5, @ANYRES16=r0]) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[], 0x15) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000190001001a848efa961fb2d82d"], 0x1c}}, 0x0) (async) read$FUSE(r9, &(0x7f0000000300)={0x2020}, 0x2020) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='btrfs_trigger_flush\x00', r8}, 0x18) (async, rerun: 32) r12 = socket$kcm(0x21, 0x2, 0x2) (rerun: 32) sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x57}, 0x4008084) (async) write$binfmt_aout(r7, &(0x7f0000000140)=ANY=[], 0xff2e) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') 3.303906672s ago: executing program 6 (id=1075): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x2, 0x1, 0x3}, 0xfd}, 0x18) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000040)=0xfe, 0x4) futex(0x0, 0x81, 0xfffffffb, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x448}, 0x1, 0x0, 0x0, 0x805}, 0x4000) 3.302797305s ago: executing program 6 (id=1076): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port=0']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xd7d2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x3}}}}}}, 0x0) 3.204309578s ago: executing program 6 (id=1077): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x7, 0x20000) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000003240), &(0x7f0000003280)=0x8) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r5 = getpid() capget(&(0x7f0000000000)={0x19980330, r5}, &(0x7f0000000040)={0xc, 0xd, 0x174, 0x0, 0x9, 0x6}) lstat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000002980)=[r2, 0x0, r2, r2, r2]) mount$afs(&(0x7f00000032c0)=@cell={0x25, 'syz0:', 'syz0', '.backup'}, &(0x7f0000003300)='./file0\x00', &(0x7f0000003340), 0x118040, &(0x7f0000003380)=ANY=[@ANYBLOB="666c6f636b3d7374726963742c666c6f636b3d6f70656e6166732c64796e2c666c6f636b3d6c6f63616c2c7375626a5f757325723d235e5b252c66736d616769633d3078303030303030303030303030306f6e746578743d757365725f752c003530231e"]) stat(&(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002f80)=0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000031c0), &(0x7f0000003200)=0x40) syz_fuse_handle_req(r4, &(0x7f00000005c0)="45e5b4685f1c9454642a96ec458b9fa19da2fc38b62f2fc9b01bff255ab9466cdfa4310357be9c84de24ca183662dfe08d77cc3e4b0cac0e3f5263426643f3f43b52b60d54e60dbffbb0e55df6775c420b165e0a500d1c4148d3626b180cb3fcd2447b8130f4c681bc86fefc940287e7583053c75cdda00eaa9b99a34d549671030b60a4874211cf6a207aa6993e3ee17b6cc078e9147c54ba0ed845befd284219b6c290a5a49d74239345b4eae803d9b0f98408edd159a3dc45efb93214529d65f06953dbc57e62c317eee6299cd11ad742ec41e25435cd60cd422d87a513bfc122b29694ab83445f5729713c8d728d8f097df4b5e2f3333c6bd3d24acfa9a24926a318d3e81064a8679252cadf72bd4bb66d5da27f0023e72b034d0d56d229ec3a7b364532cfa7f85a380f0ed8e486b0fb4dcc8de3752adf67560f344355167e345285542faf70bacb36a4c958c171c20be2a8624cfb333e969836d04025cbf15a578a83a5fd418379b6f697dc13b00da6d3db53ebb55c7af22a3c6bcb15e884d0d9a6f2322981e4beafeca01ffd7d32725410ffa16cd62f59f66818b8af04fa3cd825cdd93045bb25a2c0084e86cd9c4d82de423170c8f01a7fae6465f6629ed6e6dcd14dbf8ba071c5ef25e422e050bb36b4abb8b7309848dcb8a236ebcf46a97df3e74bcb7a16fa508a60c69917646e077a73587e167aec6a29df7956deb791e2b619551453dd407aa46923366ff6619e178e12700050a2bbfd669ef479f3f66a6dc82fdc60a54f4872d6261c6b1038a9738f3a51d3dc21774569f37cf45485c31c5e4a5ba041b713afb8c79e189a52ab125c2fc8b047b980208e27da0757777341c5f7a05f5ed583ddc170e2c26eee920eb9b26ead5d839f11b0de49f3553fa92a99f06f9481450b609f4baba25f500e24b29f4068d44801162f931438cfe87fa8f60d60688715b6eddf75fbba1b59472832ea1b79181d91bbccbc4a591117ceb2d309b32d4fee1613b0ec4c4f92f29d43ba715b69263a141243bb5626ebb15fbef6bc87225012ef76f7e118663c07216607649f8589ee400e888808b3cd26ffac1e10cda1aac0a15412e25307d83c99cf8873f9f199ccfaadb8bbc09b5f60b47adc0d7434183e89e59a37b8ccbcdf384dc2fefd3d2de87dcf17eae5dd8dc3cf3e1e137eb12b0593b4d2dc810bfdd27978fe517e970c158a5d7f626ae83f3d6b7efb6d937018da0c4b0000e426bec5d415c1c61a888b622291339499cefce924d841885a66089592aee99464f9eea20b370e0f1b4ffbd75540a3f4612ad6b2d663546210fb330aedca6ef005d744b291e2f4f1419efe1f4b872d0441ed1473e3cacd302c9ef2ce142997e06d58ffe5f3219d88652e20792b82dec6d4d11f6c989075e3f34027d626b532403988983fc15f5f6393b77b477a082fa6e612a3142cef4038a95bab2bae485c0f56a400500441de8fd8bdbb296f06ba0945f2ddbf196a1c47fe9a625ebc2091db9b105796156032933d0c7df5f72c1b8507ff763ad220988d7813387d73dd96b102494c953d42979c2af89e962f722e29bb399cdf8893ce12a55bd886b9f381b5d16149de55f9906c6ee313d3d773e9f47ad71d28329d449d26c0d7d3d4f9b74fffa906a65cb412925c368880dbfca16589b97fb1bf698269b05d060f870d07420dfc7c82c532921c1257b4b32b7bf148f85d4eb7f357d995519f7382fd0cf710c6afdba7829d7d3bde892192e0c407e1d4c297a9108d120c1de7742bd9cace8a6834222e914a30b54cc78829ec56494679097118e8b76cbfcc1bcc32345a7d2b61016cea3c5fda5bb1c1783ce77b05a76867bccf02d74a91bd27acd23d20f20758d7e47b02d3dc78b125d47771ffdbe80187c1b6540b1db9b68d1f6d6cef0d34eb430697a0da8438130101788cfb659e65d0704c415c52643ed4b93feb42558230937536af1106c7033e28d33372ae425131c2fe58310704a186229cb971aaa2c136b65576f49b42da53a854a2ece49c2d8d6cd5e47bc79043873c1b35add82371878bf92abdbb0000bc72906d066f712a4c3ae700c19f268d2b31c1fe2b7bd56fb62223cdb41df31ddc02961330a090dec3980080c325d7a2e61fb440c9596cdac265a3e11f9c2d5b18bec96b7dbe2fb53fe7f891e5ac40b080d275f35a464e1ebebb02fadda9ad5dcb3a17ba625fbe18757550b50a8f07faa4908c667f5c7200684daff19f60b0c0dda0d8541ce6c7d978447d0c77b7d0b8d9fbfa2ca34015709ac78316b36fb07131d599759b95f4478f583387e1122d94be2db0c1e90bbb436620758d20eb2a22fafe2846a54b9a740e538ea1cb590461669de4f3c54e4a53a8c7d75e8ac544111e7c1ac9d5f7b1a1377089750f82145513d01b32399de6e67a23aa187c18f189e11d6c8e63d7945c0e67148cf8d0605bd9422c84eebb40d2742a8fe1912d0d0aa0ff0934e820f5ad8cdf55c0125243b3f4b0d78fca80a03ae569f5b49355820e2b67fab0e12ee2255a74240d63894c8b622845d673bfcb2c32c1ac2b2402bf986534fdf1e5a33fac6c75af5ad472fa4dd14d3824b172266ef31df7ed33466d911c3670516d60303598115d3d03ac7d9734097aa222a64ffcfca7d5c73c2c04984102e75075eaba1ee2b2af3a82723bcb3d640af4f2c7f6f6b37a9592623dc4ef0cfb152cc79073230035224cd8b2a852cecc3b4939ada472598955627e440a2936dd0fe4cfad4fd2155f1be27c447bd2308ce809d609e3f5a8cf1163f9489516578b5d1797d802b657c665066ae056c5432109afe3e60728d144162593bfd49f84ac769e32300c71947382c0e896ce942d3db87bdf8ae12c63e1554a5b542d965c4953c37467ae2ea6bb4e717b2499094b479ca88905a06ab0539ee2c8638908fdf3954b45e5ea18661ac26eca4a8febca2633296cbb12f5ce8f426477c78fd74f676069c54251ea07f39dba130be854b1d0763aaad93bf29b3bf27dda31089656fd75f761525c8fe3f438bb747cdd846ab7f64297c40978dae5ad8ce32fd00606551e6c54b1df6c6b03309f226937687f996194883991db71b026c2ad897286f2a721572f01861db6d696cd1a4efde425300ab324e41eea999875cf522cb5ada7ca01849fcb50724edc56f37526dc5344074d4622531c68d6cc5485f2950251c36c67aefa7e5a167b60e5e27e98213a3d689f3cec7d84b5386bd20d862da8ed1048068d72912c189ced5764cc70a94067777b8c615b4e295151d3ca896dad7a27b8d500801d61aed1c5e096b229bf634b2a77830786b85f42f5fc549bd75530ead35b1b4962689ed4245054b6ba7b848726f72ae9667d3653fca83010951a14bbac8158698dff9567c049560626bc6abe9cd4e8b72d7e8e50901f5cbd341442b868a8dbe6d67075ee8a3f81ffdd7ca1533e79d0df7b1fd28963f163e68ffa549ef0eacef4b86f29edceed2a6e2a21a68f6c4944fe7ffd82c48b9ed2f91ee63ee60d817f9ddf03009c49d2f7428df8f311b1bff34b96c104ede36eb9303916e84f593314d795771c9ef9192d379be7d11dffb5a15c9ff0b4a0d0c2632689c257174c4c6eea3c4f9914544e4e5101ffd879f951dd965586d5e7ae5050ad628600cbc48e13646411a5efb6573dabe033f19c3067b9e6884532f2e8eb745687c8430fc2c8aab414f74cd2c5b6e4eb6a6c836da34e3aa62a8ecc80296eaca8e351d7cddaea6b92989524f1a26e2454a99f655b58540b5d09f8b0e905a312b9902fba5d53e71acda245e4a813feeaa74d20df69eb911496f9cc3f0530eeb6498eb4cc09b3a83e13306526c6271e046fcee3ab25152a95a82fab0b65e04cc75b77c077a40464aa965a0ee077fc46134fd7a251f6dd4f1944a758dee54ad6b6271293ff492f1e13a52b022c071d83902268a29582b0edbc4e6871e8ccc4bbc6b6a921d9783f56e5a2e3bca78b369ddcb2236de78821ff71530826e9318923a07a07aea7a37a7ef1a8e7c8d4b13ea1c67789b6ca08190ab06780cde871443c49d3ae31f75d03df6237419ec093d8ca6a0c77c105acaefeb52738c930b8a4d23c1293577dcb7431c1cbd3432ab9d78e3b1c5223b94f49674bc6e0c1e675c46df7910224c71e3059d428bfb7c975ca9c563b78f37ae4d4d6efa0860187daa4689ac2fc7e0ab2c507db76ff98a0645685a471c4123cf300de91a59067b8236e582e9989e29f57a66e9323a8c513cbae3652ee18e17e1378ed1cd715e95f719758044764195bb99eb835efb51d466824cbd593a4b4e73ec200fe8ec5fd8c8ff98169201dbc41866d7fe275bd925fb7baef2af0d750b146c28354649f658032290897fb986254f40aa19d505609c3320480652e73fac059626eca8769ebb5b820f7d1008d7205233b2de246df9c6be28a7173e5ba7f4ff613a43b0128f63e91553cf1f3cecfd952f81de8f277d1dd8407f2233e116cd1771c51c81652a82bd909283b9da252ef7edd5ccbafd885b19dcc0218d7c4f4c0f885ea3f5d6ef1aab1603ef2dd04bc023dad7e8b0398d3d34c908953042e7febae01ffae0605cb18cad2022e87c39cdf17dd6c702a3ab4585b9192add838ef3ef8acb1cc9c1b58af186ec1f0e21dd23fd2fb93bbbe1cf9917270810052674383474bb34f2ebcf5227756db15634870bd9be601132ff3ecc4b4aefdf03804c9e156b102281220c9f73f03824aa1b14ff5b6aa6c19af7280dd7d793c576e9de958314423e644a834ee0e09baa878c27244f0787514f58996f3d23cb11a3aa223f4b511f87c4ab8c769309d50271d0694f88e4cf8461fbdcf81752f32ef1561b658fa516970f119600366a8a86d2aecb90f4cf50ef9afdf275a697ad09fc5536c5b08898ec44c7dc1f6f5da16d5c609bb52c4d7e82181fb2f84837cca4a6a9e0a68b03b63a6c3ccc88b771ecd9be75cac4a5fdfc2cb814a2f84f0580e1f80aa7ceb297e293250ec21291dc88923b0fcff0d6e5181da8b54e5ce79b4c4fc69d598b714a9ea3341bfa4d436db0a43fcd072f5484f262a4ec75c5979fdfa4cd9768564be7978a6a396ac0f330ddd96791ba42188c54526d0d73394a6765571638330626ea4c7442e98d1f174d67e84bb88f9a3f7ea7a139c61ef9d13dade4e4c2ca9b006f07604d9f31626ec53a6d138f7e4aa6135f36d3adc177f241fc841ff6eb8daba11a15ce6843e02aa7ec72d8777b5ab629ceebac7fadc9308e70dd6e025ad1271bbc095639a94e07a614cd02d37599096366bd5a3e9e8a381674efb8f4658b1656913e94a773ac1dabf6dbe193a775c61ce24551d95aa4d936a420bad532e2367b1a7d91e2975088e1894abc1d39afac98549d90bd69ebef61fe161e8a4bdf8935891de497dfe972fb7a7a10025d7d5649334eecc1493f165c02f0e727cbb21f747fd2d2f1adf262c7c2b820f75569c422aeaa2e057ee08a1c5bab5cf69599cce3a91e24228874c036767378f36c2025e01608561282a4462f6d6d0ecff0b41eeaa3aa9cf918466f3eeef4297bdea44960803a5f8c5b7cad4e944dfd601d93b5b645d058d03d45783a76a69f24e646f85272a51ce6662bb7ce7d536cb71d0e7ef85823263fce9eb9cc28f859853699d8ae7cfb51ff98e671c2b7c8673502c0ea18fb2b68d6b521841d18e6b02233ee6fe5daf32a719f8aff00dae821fcf9272adca3e166e7e9911f53cd76df867627a1975ab57b84583df835eb85aff2e2ea28457499656cdcc94990cf4a86aa3f681cf7b7a12da78028114f90212400a8e8811c739f8bb95a00b0f325b166b1ec71b00b9137e775f9ecf7f3a9bac2c8b617f1a6b5d3b8f02810bd02ae96bb2cf77c8ee50151c3628f60001c764d00d27edd7ab4935a14505fc611f6c3ad2a05ff4539015d489702bebfd63ed3ac8b81c21a8be0fafa63ca5d5ead7b180befb7a236200a08b2dddc1977aced918cded22b0d2134c6b59e99f58d791fa6b91bec514c7d26a981f935299fcc57a11dcb24204708d01eca9a835207abac3fcb47e57fb8e4495fcec92a4eb77370a138edabbfef9f7a0ba96b7e61ca32db83a36fad57af50f9c8505114b11a1f80313b892a57ad435d90b0ef14c25fe40cf2fe59258bfc5d8ef2ced7f3f714dfbe70884eec2555ceae365c5891539dc4181b81b4cb866ef56361d578d66e23475513e096999412fcca89331a8ec682ce814e65c80c6862a05644568112dc1772bb28bd20f6fc70a217f2e5e9934bf25b8a96964f6e4fd526adf3701b6d8f761214e7bac4f5c80eb9b8d4204a3505218798f6f4a3e0fb863d2a9b190fe2aad76b0926750275517f19c9182cd56640e9ae23511a803af240ed373d2cd8113e4bacd67ca5891ca0603710c1368b018b98ceab4bda8999c869b7990a7e46f6000f464ffa2d2b5579256f3a29a8aef66fb6e1fa27405dc3e2a832022f188fc1aa1988a03ee06a7cabd6a7a92cee801fa36ad648889ab0cfc4304bc058e2a0880b44229bc56a236be6761558ba5b958d257b31f8a520aa82da954b99a160ddf82c42aeaf004d8ebdf2b14ba954d8bd52777d8704dbf3770cc135aa577ff4c772ccbeb8ba06ee68baf690a814ffa9c36dec15a831f5af57606f197869c9209d79bb6d31fbbbbaa6f846d0f1aa4d7f39657e406947d65e6cb167881a5af0cb963421fd253143c9cd69f8ed3ce2fe440927f367ea099fd19209e1e0541b2aeb9f54d650f6246051ecff187d057091517d37e750327083a6bb7851e9618469583939c151d7a257d75c4ba4445aa2837e389444bd8a6e5bd9e4dd8b993f77ecf784b87e1c948386f61288d103dd08c7cda2855f13392f695adcbbc928fd413b1623b9af6fb2875643bee116dd006a9af375f28fa6e062671d4fa314dabf65177385e43498fbd32182dc6a626a1f47330cef3fb25f2e22426ffae66d43ab03f9a5ed7e6c870db830651ddeaa14934b086f1999d2a0cbbba86013e4b7542faae3c79dba72bbc418ca448b8cb62dc7bec611c1e1078f855d8d60762d673c34637fb6559798b5a58d386ce800d45452939e0b4a6cb6e08e73971bd635cc993381498f66e53f761302b6c0d89e8a93f84701048eeb5731eb8ccabfb03cd43f1af8f0acbf0cae09652a2b48ac83871b9235b4a38d3e6b48fadea6fbc847d1d17ee5cb8360e36bafb6a0d36e4f364ca56247a4c26dd5922c4ff59e073114d9ce4b1a25afeee0c0fbf9b5d4e2677d1bf049be87b617bf427e1b0e51dfdd774ace661ad8d1e98601d5f6da9f9272c8d88404d91db679f5ab269313138f56bf02a47c4e5fc2de89493b0f6d12bceca6bd14ecc7f289c580d942cf8652f124e20ef5e4fc3da8e714ddf54c9115dbcbfa5accacd9f68944c335a4b4794974d76621f1c7792f9409ee33b62e85ab0c2e78dea2d5893c3d18cd051fca7170af79b9368eabc288557e172b7faa8561ffd6dcd674be233b0ced42fad7a818a21e2147b8030dc1679e7e3a48993d974761a7f70dd5e958783a123d4d17513b78980a040b917683015ae7af3b807a4e987455b1350ec46d29d4bb644b55b956827568311690b08d33341744369850a0478b065981df3edc6ba2d7c631036c7d6c906ac9568d84a316c0ffe9012a2062d5be2b81cba570f99901762e338c3442b474600e52080be1d0927ef8024faa1a19261827c2dfbd340c02582d9c826a68c7ef68b5cfaa6627de264374f09bda25da01d23bcf0f607fefa3ab76cbce67a3ae658ee0c51a21b45d8c7d896c2177e60c15df49c031490a760ec3cc4d61e870f5a5f29bbc89b6df3f29ab855402d80ad69e7e23cdd9c9b431a1ef40b7e72b52e575e48e20f61fa1ead8b7500ecee0726d3daad7757fb1d3e3298f85c9cdf6bb07cd8f0f334239591ecdc1baf2e29489a86098de685e35049e4bb79e9fc9f4116a6eba225a68900dfc90b9eada6e5870175b03e2d51ee7c191b21f7e7612251b5007b7da989cd83f892aaf85dfa62d97c60913f1e4f8c33956940f5b220bf8c76e9e05fd533a8b3c8cf9e4e1ddea3d17a0f3baaca3c45fa0a44e781114423548115a3ae1e61df9e2d3eaf3292996384f5b2f6c84a60968edddf5d595f31b9a2bf5b7892d0a252a3941c939ad4cb2a8f736112e5764d9f33f7ac77218afff449b6552d4d1ee3c8f98dd54981cf74ccefb2de24cafa0a951a95904ba84c823992afc0b807d29b2c5f75d28b6bd45f488412eb1604f4addc0162b3f9bed04b34839e73493ccd93ce8d167ed17b33bf85391c726366db208db7586279ad6cabd6415292219df5d1420bd6a1c62d31e4a5f6611313b80a7189bcb1ad9d3b4c282870a9e3892bbe5d2d05f501ffc6807a3a96c7d07feb5b071f54069ab57fc9d20d1a62fc01d2f835b8bc4843e434aebac4a814bc45f3b0c27a7b511386e30378740bf8d1934c14d645182d4cb82aea964f27cc317a3ccc124fa5585bbb1242c960394dfb5f8c3022abc7faeddeee6b0138e7fda113954c27b2eb33ac7e76d2981055d6b961f805f60bbc3d1e9cf84585a096dc18d7aa7b1ab708bab2572349f61a586ea96981c5a06c13fdf9c79ab209249633cde474f8c8a22a5aaf89f727bbda826a6bd9235596c921d9298b8f81e7ca9445fb67e640e22476ee03ba9552514694947b9b1e2f768d81a9f21aceee9a2c84aa3a745e7a916c8625f496d2aca399d34dbf5cf6c76b6ba8693d239d283b2f4f4483910083ba7a6c388ef95c625fe6eb12a0c172207e9cb141e3b564aef31aa8a06b89e758db8601a103bdce304efbda4fff5e6b9a39c259445cb2338ae8ff7580a80fc09e02525e344f449f8c0ce7052847af23c5999548370353180ca5a2dc99df3a7ddbbc5541313ae2900e2a8daed0dd01e8c8f4db7abbd2fa9c5575698a6411642c354bf11600249fad3d68d921ab80c7f50b5ab8e44769e4eabcad7b0f0b6472b4e25b2e4af25a5226cb6bace4f1ac5fb4174a6b3647ed495ec2514a4de47d505070f4cac0ce514b168e763181e9724986ca08dbb14b37858a091e41f972b8469629c4912311f59a6751282ddb44634146f9a7f0e258b15f6b32f427acbf64c450a3a46dce5b62fbf3e95cbecec28dc05f94524891ea090a2d1be799035d75079c93ad36f413bb91221084346c3ac2087fb99be75ca36731eeb2d5445ded63b768dc23f57407e298fe5cb259a9590ad4ce1dcc08475f3415c51ac6a3afd5a7330a2be5ee9ce2ed821cea1abf05d99ab233b394799e85166f914ad2d3a26a16d1b1ab43702c8d41b5fe14c980625cf75e78027a631f63b94f8a448c90a55326bc93075b001040027b26b31ce6c80b6af0a3d68e222938d049be270353aa860541acdcc9359fe3c6631cf7d3a62106467656477cb107df6a49909b2e0c0d99c01dc5a081119563a35acf812477afa3dc3a0b3696d78f1dd98f4c7175be60a928d73a0f9bd24b91e1a887260c779217998719e76dc547f8e7f17ddbb3f003ca2a740041b9c93695a59f5c7f617c2d7ef9943613212ee0e72e897fbd3c08dfa7af20831126210d513939dd924ca9911d4a5a7fd448cc5eb12a7fc0398c019d2cea0b5888983840d65990782500b1b54f961a5389c7962f809851300f04c25f7063820a0f3a961aa142e49fe046ad23a1c9816bea6d9db4893f753fe7143e010b6bb7fc7b54d8986ea858db972c92b8ed024a822d9da33713931a88cc55f980a846e8cc5f2ccf54641b6157e8b5b2248887ee0aa1b844f171de62b892615d0b336a72aca13893b22c7f1886f97450b88d60b6291f596658fe488d177cfc33821315901d6765e0caea6fff5bb81d59b00d08ddef847ad21938db406bd870595c1068e9f80eb22d949843fe7ff40c34da7613b13e091d6a156e1a30a87ac05befe6c58fbdfba54440d58296dba7ea184d42e8f61a2a020879bfb1a46bd2b9f969f5e19afe23421627c0ac1e691df85ac42bec4a9fabd129234ae087ab60bf030f2b5733ae01bfbcaaea11ba62b54371fd2179e23ca5f7973981d331977524a49b8758315e8fe0e1a497223ed1f240bd980bdf3ad5c8839c38cc846d72a23adb6760200d75671b3a852496b004a38b5ad21b5a7a9c60d9cb546ad3acac2abc571c3a5939994d11e4d13227dc768112c3b90391e374260558f76b7b095d138a1aa4de4af4be841f6aa65a7a6f413463c53fed04b867ab8a8e189b332e275f0cc7e0b54eb4bab9ba1ab6df9bf8373e7f9260a287be3175bfb90dffe2d49aae0119ce9a94d851bf1ab3ceb9c9e9b2ccf270fecb21d1c653d234611965cf0750664bc1751a2305b6fd4d9a5b6738cb774a4c10027dfb826be9890f0fb22af91d0efc24ef9fed8c587407bec8e93c070cdcec8209bf8e47cf309fa4d97491779ebd2318ac42fdf362c704e873bbb1c3e41eb6c1e5e1d705a65b3e93cf16e3785df4ddea821638c36d00c372925cfc927354f02bfe7b74963dfe4bbb1d76c7bf0866ebcb369e6589d6f6f36c974e728cf3d7e0f9e5bcc52407eac66e11a867c38bc014ce25bb8e5ec9ff9dc69fc357a189a54307a629cc225c27577e3a74033b962de36d86d6d018947bdef233fc8a16dd11305067a3585572fdab8b9442538a989c8ac5cb15335f6a0971e68c1769ce0fffb9a72e51bdf8ab2673b21646e066ae007483145b3e382b349d1ed119c08825aa1758c9530aa87f881685759cd3113bd1a65d78ec760934997d22530e321e0552e87337a0def6a9c38976d9f992b7c868cbd348997d89ec137075266f4f3962b70a6501a25c28f56a41c3991726837ddd88aba37fe0fb48bd83ff40ed800071b8b908d6cdb6e39497240e5319075c5176631b8232297655faa836ccd8d87c037a630d4518da0b816d307540c9e6e8b197726752171a5404e98f5d905079590449581fae609057e165376a4b0d36f9dc650da427b39e333e96ad7c14ea79a7c7f100ffc8007231f15fd048c5e0a9b4d3352e6aa9a03da66757cfdeb370b9d59c5b568d57ae8a5965c201dc6296747c5929a398f1230f421815cccd2c858714ca73406288ccc3e9c2b94d3851ff402094ed8acda67e0ec362993ef6206dd31290cd3149e4371debc8eea67c0528a8e0201f20830710f29e115c91433fc3ab5ea9386797f4195fd05c207489daf676a0a0ad78808024a7122542049c2bd2e29ececaed8a299e024be4d2cc93b26ae69e0f6ddca8a8c4590f589c56ecf78f2014393ef96dda1179f8a6f59e81ab5e50773a26921050430c3dd38555a330f18cca07675957492a1dc0af437c5e7473c8d74ee133db36e623fe58a5d7c9c647a0a94dcc910b1f9c49dc328951cbf2dbaa810db2bd369d2e8a4828e5cc6897386d9c8cb32e14266ec444912dc6e0861a344495b1297c49e50c53580389a1a0b937fe229c3049c1bd456b6a7094064230c11e42aee1c63859e55765a1ab8135dc161e31c43df271ffd480c10e25d33874f86caf1b93fc5e189787f53ad432946ef7b7e0d9c64fd4c5099dc4840ea88a20295a5f1ebc7bf333528a05f93f45a29a7e9b4bb70542d48acc279b3cc87a38ffe31e6f742766", 0x2000, &(0x7f0000003100)={&(0x7f00000004c0)={0x50, 0x0, 0x2, {0x7, 0x2b, 0xfffffffc, 0x48000, 0x5, 0x5, 0x5, 0x240000, 0x0, 0x0, 0x40, 0x3}}, &(0x7f0000000100)={0x18, 0x0, 0x1, {0x5f}}, &(0x7f0000000280)={0x18, 0x0, 0x1, {0x7}}, &(0x7f0000000300)={0x18, 0x0, 0x7, {0x102}}, &(0x7f0000000380)={0x18, 0x0, 0x498e, {0xffffffff}}, &(0x7f0000000540)={0x28, 0x0, 0x3, {{0x401, 0x3, 0x1, r5}}}, &(0x7f00000025c0)={0x60, 0xfffffffffffffff5, 0x800, {{0x8, 0xfff, 0x7fff, 0x6, 0x400, 0x4, 0x8, 0x7}}}, &(0x7f0000002640)={0x18, 0xffffffffffffffea, 0x7ff, {0x8}}, &(0x7f0000002680)={0x11, 0xfffffffffffffffe, 0x6, {'\x00'}}, &(0x7f00000026c0)={0x20, 0x0, 0x23, {0x0, 0x4}}, &(0x7f0000002700)={0x78, 0x0, 0x4, {0x0, 0x6, 0x0, {0x0, 0x5, 0x4, 0x7, 0xffffffff, 0x1, 0x2, 0x4, 0x9, 0xa000, 0x4, r1, r2, 0x8, 0x7}}}, &(0x7f0000002840)={0x90, 0x0, 0x5, {0x1, 0x0, 0x400000000000002, 0xf61, 0xfffffff7, 0x0, {0x0, 0xfe18, 0x4, 0x6, 0x7f, 0x200, 0x80, 0xf, 0x4, 0x6000, 0x7, r6, r2, 0x200, 0x9}}}, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000029c0)={0x3d0, 0x0, 0x1, [{{0x6, 0x0, 0x1ae, 0x8000, 0x1, 0x5, {0x2, 0x4, 0x9, 0x81, 0x8, 0x5, 0x6, 0x0, 0xe240, 0x6000, 0xfffff2f0, r1, 0x0, 0x2, 0x6}}, {0x4, 0x8, 0x1, 0x65f, ','}}, {{0x1, 0x3, 0x8, 0x4, 0x8, 0x6, {0x3, 0x3, 0x0, 0x5, 0x2, 0xc4, 0x8, 0x6, 0x8000, 0x6000, 0x6, r1, 0xee00, 0x2, 0x200000}}, {0x3, 0x0, 0xb, 0x3, '/dev/midi#\x00'}}, {{0x6, 0x1, 0x861b, 0x8, 0x80000001, 0x200, {0x4, 0x1, 0x8, 0x0, 0xd, 0x4, 0x6d, 0xf544, 0x2bb3, 0x2000, 0x10, r1, r2, 0x0, 0x8}}, {0x0, 0x8, 0x4, 0xfffff7c4, '\b\x02s\x00'}}, {{0x5, 0x1, 0x2, 0x4dbc605, 0x9, 0x3ff, {0x2, 0x46, 0x9, 0x3, 0x0, 0x400, 0xfffffbb5, 0x8, 0x4, 0x1000, 0xfffff9c6, r1, r2, 0x3}}, {0x5, 0x3, 0x0, 0x80000000}}, {{0x0, 0x0, 0x7, 0x7, 0x0, 0x3, {0x4, 0x1, 0xfffffffffffffff7, 0x2, 0x3, 0x101, 0x0, 0xffff, 0x5d188351, 0x8000, 0x3, r1, r2, 0x77, 0x1}}, {0x1, 0x1ff, 0x5, 0x1, 'TIPC\x00'}}, {{0x1, 0x3, 0xfffffffffffffffe, 0xc0, 0x2, 0xfff, {0x6, 0x0, 0x3, 0xa4c8, 0x40, 0x5, 0x0, 0x3, 0x6, 0x1000, 0x5, r1, r7, 0x81, 0x3}}, {0x3, 0xd, 0x1, 0x4, '\''}}]}, &(0x7f0000002e80)={0xa0, 0x0, 0xf24c, {{0x2, 0x1, 0x38, 0xfff, 0x7, 0xe176, {0x0, 0x6, 0xfffffffffffffffb, 0x1, 0x2, 0x40, 0xfffffffa, 0x7, 0x7ff, 0x4000, 0x10001, r1, r8, 0xf, 0xfffff6fa}}}}, &(0x7f0000002f40)={0x20, 0x0, 0x2, {0x7, 0x0, 0xfffffffc, 0x5}}, &(0x7f0000002fc0)={0x130, 0xffffffffffffffda, 0x7, {0x4138, 0x8001, 0x0, '\x00', {0x601, 0x1, 0x900000, 0x800, r9, r2, 0x4000, '\x00', 0x7fff, 0x9, 0xdf17, 0x6, {0x5, 0x7ff}, {0x0, 0xb7e}, {0x7, 0xfffff227}, {0x7f, 0x8}, 0x8001, 0x80000000, 0x81, 0x27}}}}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, r1, &(0x7f0000000440)) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) r11 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r12, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r12, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r13}], 0x2c, 0xffffffffffbffff8) dup2(r12, r13) fcntl$setown(r12, 0x8, r11) 2.633510991s ago: executing program 3 (id=1080): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff2000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x4, 0x0, &(0x7f00000003c0)) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x3, 0x818000, 0x0, 0x7ff, 0x1, 0x0, 0x0, 0x0, 0x20, 0xb}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.342996262s ago: executing program 6 (id=1085): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xd7d2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x3}}}}}}, 0x0) 2.102202942s ago: executing program 6 (id=1089): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0xfffc, @multicast2}, 0x2}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0xfffc, @multicast2}, 0x2}}, 0x2e) gettid() (async) gettid() socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000300000058000180440004001f0001000a000000000090040000000000000000000000000000000100000000100002000a00000000000000fe8000000000000000000000000000bb000000000d0001"], 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000300000058000180440004001f0001000a000000000090040000000000000000000000000000000100000000100002000a00000000000000fe8000000000000000000000000000bb000000000d0001"], 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_usbip_server_init(0x3) (async) r5 = syz_usbip_server_init(0x3) write$usbip_server(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x30) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000040000000300b6000800090002"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) 2.036139149s ago: executing program 35 (id=1089): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0xfffc, @multicast2}, 0x2}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0xfffc, @multicast2}, 0x2}}, 0x2e) gettid() (async) gettid() socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000300000058000180440004001f0001000a000000000090040000000000000000000000000000000100000000100002000a00000000000000fe8000000000000000000000000000bb000000000d0001"], 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000300000058000180440004001f0001000a000000000090040000000000000000000000000000000100000000100002000a00000000000000fe8000000000000000000000000000bb000000000d0001"], 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_usbip_server_init(0x3) (async) r5 = syz_usbip_server_init(0x3) write$usbip_server(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="070000023c646eb1161a46f3f2aaca682169fe9aa8633dcc3b92fd09a7fc31117558d9ccb2f8b242effd38ffe6d77ae557fd2b14e821930581e3a24c2009da0b5f5307a29312ed50be3dcfac143081b3c543971e8af4ad0057a12b7a0d16a5460db68880c5a94ff3b71dc31319d34c3376cc2e4f7ce70000f31f73671e2bf5db69e407d33955d9bee16cf65261db46f8bf4fa129b3f640512e836eaf4d21db1fc2b01dd2f1a3765bea4391768a31b2d1b8b801be83b920afd7a6ae651fc994a877921be260cb97c4abeb7d87470b0fa53bd7ef0bb1f14a7fd129b22b9567be83013cee8bc2fe02c9b573e64be996c69099f9bb281101c152673b089233392157755535916e704bbddce1cf114a737c8d7a41707f4fe6c19739a7f56752eed77d7fc0d386079dee528eecf7"], 0x30) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000040000000300b6000800090002"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) 1.812338126s ago: executing program 3 (id=1097): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r2 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x10000)=nil, 0x10000}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0x6805, 0x0) connect$pppoe(r3, &(0x7f0000000200)={0x18, 0x0, {0x3, @local, 'bridge0\x00'}}, 0x1e) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000300)={0x0, 0x3, 0x5, "9deb078ae1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000040)={0x1, 0x100, 0xf, 0x856a, 0x7, 0x5, 0x5, 0xfec, 0x8, 0x8, 0xfffff8a7, 0x7fffffff, 0xfffffff9, 0x8}) socket$inet6_udp(0xa, 0x2, 0x0) 1.668572507s ago: executing program 5 (id=1100): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5473a91f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="006e21ffcc0000000000b70b00000000000000006be862770000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2f, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x2, 0x8, 0xd, 0x27f0, 0x7ff}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0xa, 0xa, 0x2, 0xfffffffffffffffe, 0x4}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.581521955s ago: executing program 5 (id=1101): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.sectors_recursive\x00', 0x26e1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc9, 0x6, 0x8, 0x0, 0xd40c}}}}, 0xe) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20004080) sendmmsg$alg(r2, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x32}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.580576794s ago: executing program 5 (id=1102): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x18, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x101) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x61, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1a, 0x90, 0x9, [{{0x9, 0x4, 0x0, 0xf, 0x6, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x1eb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x20, 0x6, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x23, 0x3, 0x5c, 0xff, 0x6}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xa9, "b98301907e4f5dc4be5e7a9523f7ff21"}]}, 0x1, [{0xc0, &(0x7f0000000340)=@string={0xc0, 0x3, "5c5497ec04d19b446d694662d36aefa8bdc1ba3e27404a1bd22bd9a4b2feff867e6b3d70ffa6d7385da955ef0b526c6562edea1d565db504951b36236df804c4cf930a01bcef7d4a688abd1ed8e5fdb9c7c29f8e35391be8d34ed04ac7765d505c8542a5313c9a9cd1f9099e2d9c12c1c33ed2dca56eb716dcfd41b5075f3664fd5b880a15e70e55ac39e772c55df515fe7ed5c8d2a14b5f035535e9d15356cc77626e9bf188eb64a4d9a86cd48bbe6332c3c8e4c1dc1fd04c2265f5c56a"}}]}) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000240)={0x9, 0x8, 0x25c, 0x0, 0x38000}) 1.151892346s ago: executing program 2 (id=1107): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x3, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000ae0d42600000000000000", @ANYRES16, @ANYRESOCT, @ANYBLOB="00000000000000000001c0384100000300"/28], 0x48) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffbbbbbb99bbbb08004500003802a29a20e55ef800000000019078ac1e0001ac1414aa04009078e00000e0450000000000000000110000ac1414aa0000000017c1b7df60c70000"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f00000003c0)="00ea1c7c000700", 0x7, r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/8, 0x200000, 0x1400, 0x7, 0x2}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000580)=0x100020, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={r5, r6, r7, 0xe000000, 0x80400002, 0x10, 0x800, 0xffffffff, 0x8, 0xd, 0x20000}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="238adb33425573c45e74776f1c5601302a15d076c8fdf4e93f6384248b53bc352cbd9884f5c1a33e72add383370ede84c4dde384d547ead39e09dfffa23719c2f1a88804d17a6cd9214eae061a29eed52c7f60d51ded5864bffb3dc621b945b24521ee43e21f92d3d8e3fbb9d68fd4e0ad5165b49a31dad7843b8711efe77478829ca253a4a531efe899c09e26b8b7045e233320ba03a4c1d7bdd18e1e493b8820903080e412e66de46155a2c4c7862011e5482d25d42ef4eb1df0272e69d8af7cff11c6610c150b", @ANYRESHEX=r9, @ANYBLOB="ad43000000f45400000009"], 0x14}}, 0x0) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fchdir(r10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x28020480) 1.101923964s ago: executing program 2 (id=1108): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000440)={'veth1_to_batadv\x00', &(0x7f0000000240)=@ethtool_modinfo={0x42, 0x96, 0x3ff}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) r2 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r5, 0x0, 0x0, 0x0, 0x12001, 0x1}) io_uring_enter(r2, 0x5d66, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x286d, 0x4) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c010000", @ANYRES16, @ANYBLOB="000826bd7000fbdbdf25120000004c0002803400038008000200070000000800010001000000080002000000000008000100070000000800010007000000080002000200000008000200e50b00000c0003"], 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x80) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="14000100"], 0x70}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r10, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r11, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000040, 0x0) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1}, 0x4}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x2, 0x40010041, 0x0) 941.867174ms ago: executing program 2 (id=1109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c72ffffffffff0400f60000070000000a0001006f776e65720000000900010073797a30000000000900020073797a32", @ANYRES16=0x0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="3593dc98a97abd69d83b5afc265a399385bcd7738242d608cb42c605478839804c37bae930fc4e74dbdf0dd4d8e00adea9f64117a705cce623f15efe02f2fc78c90ca6848e1106043e66f888a44e5f1604765efdcaab45d9e18c1e5d226dce90de0f9f16ed166af592444c4decc6fdb4636722b8487336fe4e1f1ec52a89bd900f004e52097cdcfaf1f82718e2893d370e3628"], 0x98}}, 0x4048010) 940.990473ms ago: executing program 2 (id=1110): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r0, r0, 0x0, 0x6) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c0000000aaaaaaaaaaaa86dd6000000000183afffe800000000000000000000000000000ff02000000007a38571409dacf219e696b00ffca000000000000000000018800907808000000ff020000000000000000000000000001"], 0x0) r1 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400061400060069703667726530000000000000000000080007003a090000140002"], 0x58}, 0x1, 0xffffffff00000003}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc840}, 0xc010) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 850.83863ms ago: executing program 2 (id=1111): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000100)={r1, r2/1000+10000}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f0000000140)={{0x4, @addr=0x1d}, 0x8, 0x0, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="442926df9eea498bda763d000000250001040010", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000700ac14141308000a00", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 170.537658ms ago: executing program 7 (id=1118): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0xd, 0x4e23, 0x2, 0x2, 0x20, 0x0, 0x21}, {0x6, 0x794, 0x6, 0x80000000, 0xfffffffffffffffc, 0x1c000000, 0xfdcc, 0x5}, {0x16, 0x1ff, 0x0, 0x278}, 0x65, 0x6e6bc0, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d5, 0x3c}, 0x2, @in=@local, 0x34ff, 0x2, 0x3, 0x40, 0x2, 0x9, 0x4}}, 0xe8) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x20, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x3}}}}}}, 0x0) 170.390843ms ago: executing program 7 (id=1119): r0 = socket$kcm(0x10, 0x7, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}, {}]}) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hostfs\x00', 0x10808, &(0x7f00000000c0)='\x00') sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x4800) 110.94921ms ago: executing program 7 (id=1120): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x14}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0xfffe, 0x0, 0x0, 0x1, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffffffffffd}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f00004a0000/0x9000)=nil, 0x9000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/179, 0xb3, 0x1, &(0x7f0000000200)=""/140, 0x8c}, &(0x7f0000000300)=0x40) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x1}) unshare(0x2a020400) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3032, r4, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') 47.063154ms ago: executing program 5 (id=1121): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000000c0)={0x77359400}, 0x39) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) r2 = socket$pptp(0x18, 0x1, 0x2) getpeername(r2, 0x0, &(0x7f0000000080)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 46.955718ms ago: executing program 7 (id=1122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000170000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900031c73797a32000000006b00030091abc12404d0c4c731b168"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) 46.796206ms ago: executing program 5 (id=1123): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0}}, 0xf) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = openat$procfs(0xffffff9c, &(0x7f0000001080)='/proc/slabinfo\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000117c0)={0x14, 0x28, 0x9, 0x70bd2b, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x844) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r4, r4], &(0x7f0000000280)=[0x8a, 0xceea], 0x2}) 46.589682ms ago: executing program 7 (id=1124): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d6400000000000001c0007800c"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005280), r3) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f00000054c0)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005480)={&(0x7f0000000300)={0x50, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r6, &(0x7f0000002240)={0x2020}, 0x2020) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)="742bdc", 0x3}], 0x1) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x204, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffa3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda5a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x101}, 0x24000081) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000380)=0x3, 0x4) 890.643µs ago: executing program 2 (id=1125): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x12, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180300000000000000000000000000e2aaec3c88a8ef8aef6c172300", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000034030100ffffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c00058005001940"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x4048085) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) (async, rerun: 64) r4 = fcntl$dupfd(r3, 0x0, r3) (rerun: 64) ioctl$TCFLSH(r4, 0x400455c8, 0x1) (async, rerun: 32) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) (rerun: 32) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18827a0000000000000000003b007ee9ae5aa87200000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6}, 0x94) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) (async) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r10 = socket(0x11, 0xa, 0x5) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000080)=0x9e, 0x4) (async) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) socket$tipc(0x1e, 0x5, 0x0) sendto$inet(r10, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) r11 = dup(r9) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x15, &(0x7f0000000000)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0x0, 0x4, 0x8, 0xffffffffffffffff, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffeff}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x2e, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0x3, 0x6, 0x8000}, 0x10, r7, r11, 0x5, 0x0, &(0x7f0000000140)=[{0x0, 0x1, 0x6, 0xc}, {0x3, 0x1, 0x7, 0x2}, {0x4, 0x2, 0xd, 0xc}, {0x4, 0x4, 0x2, 0x1}, {0x2, 0x4, 0x3, 0x6}], 0x10, 0x80000001}, 0x94) 467.938µs ago: executing program 7 (id=1126): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xd7d2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x2000, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x3}}}}}}, 0x0) 0s ago: executing program 5 (id=1127): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000004165be97"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="01000000010d0000000000f8ff0242cda06d0b8d7de8915783710000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'pim6reg\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x3, {0x0, 0xf0, 0x4}, 0xff}, 0x18) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (async) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0xfd, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600, 0xb]}}], 0x1c) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r8, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) kernel console output (not intermixed with test programs): 2][ T6757] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.689151][ T6753] adutux: No device or device unplugged -19 [ 74.759008][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 74.759019][ T40] audit: type=1400 audit(1758324040.808:353): avc: denied { connect } for pid=6766 comm="syz.4.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.801322][ T68] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.812822][ T68] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.820860][ T68] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.822071][ T40] audit: type=1400 audit(1758324040.867:354): avc: denied { ioctl } for pid=6766 comm="syz.4.236" path="socket:[14680]" dev="sockfs" ino=14680 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.832656][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.236978][ T6771] netlink: 'syz.2.237': attribute type 4 has an invalid length. [ 75.239670][ T6771] netlink: 152 bytes leftover after parsing attributes in process `syz.2.237'. [ 75.247463][ T6771] : renamed from bond0 (while UP) [ 75.279214][ T40] audit: type=1400 audit(1758324041.316:355): avc: denied { setopt } for pid=6772 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.426628][ T9] usb 6-1: USB disconnect, device number 9 [ 75.522865][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.244'. [ 75.573235][ T40] audit: type=1400 audit(1758324041.609:356): avc: denied { write } for pid=6791 comm="syz.2.246" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 75.589511][ T6800] netlink: 232 bytes leftover after parsing attributes in process `syz.1.247'. [ 75.593653][ T6800] ksmbd: Unknown IPC event: 10, ignore. [ 75.635061][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 75.747258][ T6821] fuse: Bad value for 'fd' [ 75.784116][ T40] audit: type=1400 audit(1758324041.805:357): avc: denied { bind } for pid=6824 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.854712][ T40] audit: type=1400 audit(1758324041.873:358): avc: denied { read append } for pid=6833 comm="syz.1.257" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 75.859428][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 75.862970][ T40] audit: type=1400 audit(1758324041.873:359): avc: denied { open } for pid=6833 comm="syz.1.257" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 75.960952][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 76.353921][ T6858] FAULT_INJECTION: forcing a failure. [ 76.353921][ T6858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.358430][ T6858] CPU: 1 UID: 0 PID: 6858 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(full) [ 76.358444][ T6858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.358451][ T6858] Call Trace: [ 76.358454][ T6858] [ 76.358458][ T6858] dump_stack_lvl+0x16c/0x1f0 [ 76.358475][ T6858] should_fail_ex+0x512/0x640 [ 76.358491][ T6858] _copy_to_user+0x32/0xd0 [ 76.358508][ T6858] snd_pcm_oss_read2+0x294/0x410 [ 76.358519][ T6858] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 76.358527][ T6858] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 76.358539][ T6858] ? snd_pcm_oss_prepare+0x11e/0x220 [ 76.358556][ T6858] snd_pcm_oss_read+0x5d3/0x760 [ 76.358568][ T6858] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 76.358577][ T6858] vfs_read+0x1e4/0xcf0 [ 76.358591][ T6858] ? __pfx_vfs_read+0x10/0x10 [ 76.358600][ T6858] ? find_held_lock+0x2b/0x80 [ 76.358614][ T6858] ? __fget_files+0x204/0x3c0 [ 76.358627][ T6858] ? __fget_files+0x20e/0x3c0 [ 76.358642][ T6858] ksys_read+0x12a/0x250 [ 76.358652][ T6858] ? __pfx_ksys_read+0x10/0x10 [ 76.358662][ T6858] ? fput+0x9b/0xd0 [ 76.358678][ T6858] do_syscall_64+0xcd/0x4e0 [ 76.358692][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.358703][ T6858] RIP: 0033:0x7ff62e38eba9 [ 76.358711][ T6858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.358721][ T6858] RSP: 002b:00007ff62f137038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.358731][ T6858] RAX: ffffffffffffffda RBX: 00007ff62e5d5fa0 RCX: 00007ff62e38eba9 [ 76.358738][ T6858] RDX: 000000000000004f RSI: 0000200000000300 RDI: 0000000000000003 [ 76.358744][ T6858] RBP: 00007ff62f137090 R08: 0000000000000000 R09: 0000000000000000 [ 76.358749][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.358755][ T6858] R13: 00007ff62e5d6038 R14: 00007ff62e5d5fa0 R15: 00007fff40113a78 [ 76.358768][ T6858] [ 76.439550][ T40] audit: type=1400 audit(1758324042.460:360): avc: denied { create } for pid=6859 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.445590][ T40] audit: type=1400 audit(1758324042.460:361): avc: denied { write } for pid=6859 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.451916][ T40] audit: type=1400 audit(1758324042.460:362): avc: denied { mount } for pid=6859 comm="syz.1.268" name="/" dev="ramfs" ino=15559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 76.677169][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.276'. [ 76.680045][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 76.961624][ T6911] tipc: Started in network mode [ 76.963752][ T6911] tipc: Node identity ac1414aa, cluster identity 4711 [ 76.968101][ T6911] tipc: Enabled bearer , priority 10 [ 77.072227][ T1461] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 77.246474][ T1461] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.250202][ T1461] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.253278][ T1461] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.257874][ T1461] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.261426][ T1461] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.266488][ T1461] usb 7-1: config 0 descriptor?? [ 77.476175][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.479143][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.571259][ T6935] ptrace attach of "/syz-executor exec"[5971] was attempted by "/syz-executor exec"[6935] [ 77.686759][ T6942] FAULT_INJECTION: forcing a failure. [ 77.686759][ T6942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.691460][ T6942] CPU: 3 UID: 0 PID: 6942 Comm: syz.3.300 Not tainted syzkaller #0 PREEMPT(full) [ 77.691486][ T6942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.691495][ T6942] Call Trace: [ 77.691502][ T6942] [ 77.691510][ T6942] dump_stack_lvl+0x16c/0x1f0 [ 77.691552][ T6942] should_fail_ex+0x512/0x640 [ 77.691578][ T6942] _copy_to_user+0x32/0xd0 [ 77.691605][ T6942] snd_pcm_oss_read2+0x294/0x410 [ 77.691624][ T6942] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 77.691640][ T6942] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 77.691679][ T6942] ? snd_pcm_oss_prepare+0x11e/0x220 [ 77.691708][ T6942] snd_pcm_oss_read+0x5d3/0x760 [ 77.691729][ T6942] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 77.691747][ T6942] vfs_read+0x1e4/0xcf0 [ 77.691770][ T6942] ? __pfx_vfs_read+0x10/0x10 [ 77.691786][ T6942] ? find_held_lock+0x2b/0x80 [ 77.691808][ T6942] ? __fget_files+0x204/0x3c0 [ 77.691832][ T6942] ? __fget_files+0x20e/0x3c0 [ 77.691857][ T6942] ksys_read+0x12a/0x250 [ 77.691876][ T6942] ? __pfx_ksys_read+0x10/0x10 [ 77.691893][ T6942] ? fput+0x9b/0xd0 [ 77.691919][ T6942] do_syscall_64+0xcd/0x4e0 [ 77.691944][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.691961][ T6942] RIP: 0033:0x7f4c1a98eba9 [ 77.691976][ T6942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.691991][ T6942] RSP: 002b:00007f4c1b8c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.692008][ T6942] RAX: ffffffffffffffda RBX: 00007f4c1abd5fa0 RCX: 00007f4c1a98eba9 [ 77.692018][ T6942] RDX: 000000000000004f RSI: 0000200000000300 RDI: 0000000000000003 [ 77.692028][ T6942] RBP: 00007f4c1b8c6090 R08: 0000000000000000 R09: 0000000000000000 [ 77.692038][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.692056][ T6942] R13: 00007f4c1abd6038 R14: 00007f4c1abd5fa0 R15: 00007ffdfa7d0538 [ 77.692080][ T6942] [ 77.694344][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.777629][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.785752][ T1461] usbhid 7-1:0.0: can't add hid device: -71 [ 77.788296][ T1461] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 77.791707][ T1461] usb 7-1: USB disconnect, device number 6 [ 77.818360][ T6951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.302'. [ 78.114213][ T1461] tipc: Node number set to 2886997162 [ 78.149164][ T6979] fuse: Unknown parameter '' [ 78.192073][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 78.362837][ T6996] netlink: 124 bytes leftover after parsing attributes in process `syz.2.314'. [ 78.367132][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 78.374708][ T6996] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 78.708166][ T7007] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 78.839231][ T7036] netlink: 'syz.2.320': attribute type 4 has an invalid length. [ 79.310454][ T7088] ip6gre1: entered allmulticast mode [ 79.335953][ T7090] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 79.338776][ T7090] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.342729][ T7090] vhci_hcd vhci_hcd.0: Device attached [ 79.487788][ T29] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 79.528534][ T840] vhci_hcd: vhci_device speed not set [ 79.589721][ T840] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 79.592390][ T1028] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 79.663394][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.667583][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.671891][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.676646][ T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.679914][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.685014][ T29] usb 9-1: config 0 descriptor?? [ 79.732140][ T1028] usb 6-1: device descriptor read/64, error -71 [ 79.824344][ T7112] use of bytesused == 0 is deprecated and will be removed in the future, [ 79.827138][ T7112] use the actual size instead. [ 79.986622][ T1028] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 80.050027][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 80.056078][ T7125] netlink: zone id is out of range [ 80.058021][ T7125] netlink: zone id is out of range [ 80.060048][ T7125] netlink: zone id is out of range [ 80.062799][ T7125] netlink: zone id is out of range [ 80.067883][ T7125] netlink: zone id is out of range [ 80.069516][ T7125] netlink: zone id is out of range [ 80.071235][ T7125] netlink: zone id is out of range [ 80.079865][ T7125] netlink: set zone limit has 4 unknown bytes [ 80.129152][ T1028] usb 6-1: device descriptor read/64, error -71 [ 80.147034][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 80.147050][ T40] audit: type=1400 audit(1758324046.090:379): avc: denied { ioctl } for pid=7128 comm="syz.3.345" path="socket:[14996]" dev="sockfs" ino=14996 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 80.150225][ T5974] Bluetooth: hci1: connection err: -111 [ 80.207483][ T40] audit: type=1400 audit(1758324046.149:380): avc: denied { read write } for pid=7131 comm="syz.3.346" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.207855][ T7132] program syz.3.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.217169][ T40] audit: type=1400 audit(1758324046.149:381): avc: denied { ioctl } for pid=7131 comm="syz.3.346" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.231574][ T40] audit: type=1400 audit(1758324046.169:382): avc: denied { getopt } for pid=7080 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.251290][ T1028] usb usb6-port1: attempt power cycle [ 80.256114][ T7136] netlink: 2 bytes leftover after parsing attributes in process `syz.3.347'. [ 80.606702][ T1028] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 80.627066][ T6041] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 80.627760][ T1028] usb 6-1: device descriptor read/8, error -71 [ 80.739101][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 80.791384][ T6041] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.796320][ T6041] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.801057][ T6041] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 80.805399][ T6041] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.810877][ T6041] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.814564][ T6041] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.820299][ T6041] usb 8-1: config 0 descriptor?? [ 80.872959][ T1028] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 80.893929][ T1028] usb 6-1: device descriptor read/8, error -71 [ 80.902884][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 81.006791][ T1028] usb usb6-port1: unable to enumerate USB device [ 81.244181][ T6041] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 81.440945][ T7142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.443793][ T7142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.748143][ T839] cfg80211: failed to load regulatory.db [ 82.049512][ T7178] FAULT_INJECTION: forcing a failure. [ 82.049512][ T7178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.053842][ T7178] CPU: 0 UID: 0 PID: 7178 Comm: syz.2.364 Not tainted syzkaller #0 PREEMPT(full) [ 82.053857][ T7178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.053864][ T7178] Call Trace: [ 82.053867][ T7178] [ 82.053872][ T7178] dump_stack_lvl+0x16c/0x1f0 [ 82.053888][ T7178] should_fail_ex+0x512/0x640 [ 82.053904][ T7178] _copy_to_user+0x32/0xd0 [ 82.053920][ T7178] snd_pcm_oss_read2+0x294/0x410 [ 82.053930][ T7178] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 82.053939][ T7178] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 82.053951][ T7178] ? snd_pcm_oss_prepare+0x11e/0x220 [ 82.053967][ T7178] snd_pcm_oss_read+0x5d3/0x760 [ 82.053979][ T7178] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 82.053989][ T7178] vfs_read+0x1e4/0xcf0 [ 82.054002][ T7178] ? __pfx_vfs_read+0x10/0x10 [ 82.054011][ T7178] ? find_held_lock+0x2b/0x80 [ 82.054024][ T7178] ? __fget_files+0x204/0x3c0 [ 82.054044][ T7178] ? __fget_files+0x20e/0x3c0 [ 82.054059][ T7178] ksys_read+0x12a/0x250 [ 82.054068][ T7178] ? __pfx_ksys_read+0x10/0x10 [ 82.054079][ T7178] ? fput+0x9b/0xd0 [ 82.054094][ T7178] do_syscall_64+0xcd/0x4e0 [ 82.054109][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.054119][ T7178] RIP: 0033:0x7f129658eba9 [ 82.054128][ T7178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.054138][ T7178] RSP: 002b:00007f1297475038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.054149][ T7178] RAX: ffffffffffffffda RBX: 00007f12967d5fa0 RCX: 00007f129658eba9 [ 82.054155][ T7178] RDX: 000000000000004f RSI: 0000200000000300 RDI: 0000000000000003 [ 82.054161][ T7178] RBP: 00007f1297475090 R08: 0000000000000000 R09: 0000000000000000 [ 82.054167][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.054172][ T7178] R13: 00007f12967d6038 R14: 00007f12967d5fa0 R15: 00007ffeb3fc80a8 [ 82.054185][ T7178] [ 82.163087][ T7180] capability: warning: `syz.2.365' uses deprecated v2 capabilities in a way that may be insecure [ 82.195912][ T7182] fuse: Bad value for 'user_id' [ 82.198048][ T7182] fuse: Bad value for 'user_id' [ 82.322454][ T29] usbhid 9-1:0.0: can't add hid device: -71 [ 82.324825][ T29] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 82.330217][ T29] usb 9-1: USB disconnect, device number 4 [ 82.392460][ T7091] vhci_hcd: connection reset by peer [ 82.396763][ T46] vhci_hcd: stop threads [ 82.398150][ T46] vhci_hcd: release socket [ 82.400351][ T46] vhci_hcd: disconnect device [ 82.429994][ T7196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7196 comm=syz.4.372 [ 82.542638][ T7211] binder: 7209:7211 ioctl c0306201 2000000003c0 returned -14 [ 82.546351][ T7211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.378'. [ 82.583280][ T7216] fuse: Unknown parameter '' [ 82.586839][ T7216] netlink: 'syz.2.380': attribute type 1 has an invalid length. [ 82.608184][ T7216] bond0: (slave geneve2): making interface the new active one [ 82.611194][ T7216] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 82.614007][ T1148] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.617080][ T1148] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.618040][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.380'. [ 82.621526][ T1148] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.626545][ T1148] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 82.631588][ T7216] bond0: entered promiscuous mode [ 82.633261][ T7216] geneve2: entered promiscuous mode [ 82.635028][ T7216] bond0: entered allmulticast mode [ 82.636686][ T7216] geneve2: entered allmulticast mode [ 82.639555][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.643916][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 82.669540][ T7221] netlink: 536 bytes leftover after parsing attributes in process `syz.2.381'. [ 82.672868][ T7221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.381'. [ 83.446854][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.387'. [ 83.504280][ T6063] usb 8-1: USB disconnect, device number 3 [ 83.575364][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 83.587168][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 83.590695][ T7246] netlink: 'syz.4.390': attribute type 20 has an invalid length. [ 83.595542][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 83.598745][ T7246] netlink: 'syz.4.390': attribute type 20 has an invalid length. [ 83.605884][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 83.654799][ T7255] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 83.657708][ T7255] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 83.664399][ T7255] vhci_hcd vhci_hcd.0: Device attached [ 83.711290][ T7264] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 83.878221][ T6038] vhci_hcd: vhci_device speed not set [ 83.935956][ T839] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 83.939791][ T6038] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 84.101959][ T839] usb 9-1: config 0 has no interfaces? [ 84.104548][ T839] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 84.109173][ T839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.120531][ T839] usb 9-1: config 0 descriptor?? [ 84.390227][ T40] audit: type=1400 audit(1758324050.267:383): avc: denied { setattr } for pid=7294 comm="syz.1.407" name="ALG" dev="sockfs" ino=16816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.399113][ T7256] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 84.400913][ T40] audit: type=1400 audit(1758324050.267:384): avc: denied { connect } for pid=7296 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.410759][ T40] audit: type=1400 audit(1758324050.267:385): avc: denied { setopt } for pid=7296 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.418312][ T1148] vhci_hcd: stop threads [ 84.418391][ T40] audit: type=1400 audit(1758324050.267:386): avc: denied { bind } for pid=7296 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.421527][ T839] usb 9-1: USB disconnect, device number 5 [ 84.430132][ T1148] vhci_hcd: release socket [ 84.431245][ T40] audit: type=1400 audit(1758324050.267:387): avc: denied { write } for pid=7296 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.432031][ T1148] vhci_hcd: disconnect device [ 84.438167][ T40] audit: type=1400 audit(1758324050.297:388): avc: denied { create } for pid=7296 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 84.456265][ T1028] hid-generic 0005:15C2:5505.0004: unknown main item tag 0x0 [ 84.459432][ T1028] hid-generic 0005:15C2:5505.0004: unknown main item tag 0x0 [ 84.465047][ T1028] hid-generic 0005:15C2:5505.0004: hidraw1: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 84.678834][ T7315] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.685167][ T7315] netlink: 'syz.1.414': attribute type 21 has an invalid length. [ 84.756467][ T61] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 84.817185][ T840] vhci_hcd: vhci_device speed not set [ 84.854253][ T7337] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 84.931132][ T61] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.936105][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 84.942401][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 84.945559][ T61] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.950092][ T7346] tmpfs: Bad value for 'mpol' [ 84.961646][ T61] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.965576][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.972045][ T61] usb 7-1: config 0 descriptor?? [ 85.250463][ T7371] warning: `syz.1.437' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.281020][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 85.281030][ T40] audit: type=1400 audit(1758324051.146:393): avc: denied { ioctl } for pid=7372 comm="syz.3.439" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 85.291438][ T40] audit: type=1400 audit(1758324051.156:394): avc: denied { write } for pid=7372 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.322148][ T40] audit: type=1400 audit(1758324051.186:395): avc: denied { remount } for pid=7378 comm="syz.3.441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.331541][ T40] audit: type=1400 audit(1758324051.196:396): avc: denied { connect } for pid=7378 comm="syz.3.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 85.379091][ T40] audit: type=1400 audit(1758324051.245:397): avc: denied { write } for pid=7378 comm="syz.3.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 85.408209][ T61] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 85.411851][ T7386] fuse: Unknown parameter '9ÙÊ' [ 85.425115][ T40] audit: type=1400 audit(1758324051.295:398): avc: denied { ioctl } for pid=7385 comm="syz.1.443" path="socket:[16156]" dev="sockfs" ino=16156 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 85.504995][ T40] audit: type=1400 audit(1758324051.364:399): avc: denied { execute } for pid=7388 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 85.512599][ T40] audit: type=1400 audit(1758324051.364:400): avc: denied { execute_no_trans } for pid=7388 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 85.645848][ T5981] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.650543][ T5981] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.654283][ T5981] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.659223][ T5981] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.663396][ T5981] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.718133][ T5974] Bluetooth: hci2: command tx timeout [ 85.755060][ T7394] mmap: syz.1.447 (7394) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.798102][ T7395] chnl_net:caif_netlink_parms(): no params data found [ 85.907273][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.910438][ T7395] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.912890][ T7395] bridge_slave_0: entered allmulticast mode [ 85.916013][ T7395] bridge_slave_0: entered promiscuous mode [ 85.919096][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.921550][ T7395] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.923891][ T7395] bridge_slave_1: entered allmulticast mode [ 85.926856][ T7395] bridge_slave_1: entered promiscuous mode [ 85.981854][ T7395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.988672][ T7395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.994929][ T40] audit: type=1400 audit(1758324051.858:401): avc: denied { sqpoll } for pid=7424 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.005271][ T7423] SELinux: truncated policydb string identifier [ 86.005452][ T40] audit: type=1400 audit(1758324051.868:402): avc: denied { load_policy } for pid=7304 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 86.007700][ T7423] SELinux: failed to load policy [ 86.061656][ T7395] team0: Port device team_slave_0 added [ 86.066699][ T7395] team0: Port device team_slave_1 added [ 86.105062][ T7395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.107244][ T7395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.115486][ T7395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.120568][ T7395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.122758][ T7395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.130842][ T7395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.182772][ T7395] hsr_slave_0: entered promiscuous mode [ 86.185247][ T7395] hsr_slave_1: entered promiscuous mode [ 86.229023][ T6041] usb 7-1: USB disconnect, device number 7 [ 86.381747][ T7395] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.389116][ T7395] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.394990][ T7395] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.400713][ T7395] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.425106][ T7449] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 86.429322][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.432328][ T7395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.435175][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.437424][ T7395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.471630][ T7395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.483195][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.488786][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.525795][ T7395] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.542220][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.544582][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.550851][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.553298][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.595713][ T7459] FAULT_INJECTION: forcing a failure. [ 86.595713][ T7459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.601548][ T7459] CPU: 3 UID: 0 PID: 7459 Comm: syz.3.466 Not tainted syzkaller #0 PREEMPT(full) [ 86.601572][ T7459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.601583][ T7459] Call Trace: [ 86.601589][ T7459] [ 86.601596][ T7459] dump_stack_lvl+0x16c/0x1f0 [ 86.601621][ T7459] should_fail_ex+0x512/0x640 [ 86.601648][ T7459] _copy_from_iter+0x29f/0x1720 [ 86.601673][ T7459] ? __alloc_skb+0x200/0x380 [ 86.601693][ T7459] ? __pfx__copy_from_iter+0x10/0x10 [ 86.601719][ T7459] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 86.601749][ T7459] netlink_sendmsg+0x829/0xdd0 [ 86.601776][ T7459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.601806][ T7459] ____sys_sendmsg+0xa95/0xc70 [ 86.601832][ T7459] ? copy_msghdr_from_user+0x10a/0x160 [ 86.601853][ T7459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.601889][ T7459] ___sys_sendmsg+0x134/0x1d0 [ 86.601909][ T7459] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.601956][ T7459] __sys_sendmsg+0x16d/0x220 [ 86.601976][ T7459] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.602003][ T7459] ? fput+0x9b/0xd0 [ 86.602028][ T7459] do_syscall_64+0xcd/0x4e0 [ 86.602049][ T7459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.602071][ T7459] RIP: 0033:0x7f4c1a98eba9 [ 86.602083][ T7459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.602099][ T7459] RSP: 002b:00007f4c1b8c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.602114][ T7459] RAX: ffffffffffffffda RBX: 00007f4c1abd5fa0 RCX: 00007f4c1a98eba9 [ 86.602123][ T7459] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 86.602133][ T7459] RBP: 00007f4c1b8c6090 R08: 0000000000000000 R09: 0000000000000000 [ 86.602142][ T7459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.602151][ T7459] R13: 00007f4c1abd6038 R14: 00007f4c1abd5fa0 R15: 00007ffdfa7d0538 [ 86.602172][ T7459] [ 86.682903][ T7395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.767027][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.875755][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.920175][ T7395] veth0_vlan: entered promiscuous mode [ 86.929777][ T7395] veth1_vlan: entered promiscuous mode [ 86.961220][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.967897][ T5981] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.973395][ T5981] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.977441][ T5981] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.980950][ T5981] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.983957][ T5981] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.992332][ T7395] veth0_macvtap: entered promiscuous mode [ 87.004822][ T7395] veth1_macvtap: entered promiscuous mode [ 87.048579][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.070829][ T7395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.075821][ T7487] FAULT_INJECTION: forcing a failure. [ 87.075821][ T7487] name failslab, interval 1, probability 0, space 0, times 0 [ 87.079909][ T7487] CPU: 3 UID: 0 PID: 7487 Comm: syz.3.474 Not tainted syzkaller #0 PREEMPT(full) [ 87.079924][ T7487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.079930][ T7487] Call Trace: [ 87.079933][ T7487] [ 87.079937][ T7487] dump_stack_lvl+0x16c/0x1f0 [ 87.079955][ T7487] should_fail_ex+0x512/0x640 [ 87.079971][ T7487] should_failslab+0xc2/0x120 [ 87.079984][ T7487] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 87.079995][ T7487] ? skb_clone+0x190/0x3f0 [ 87.080010][ T7487] skb_clone+0x190/0x3f0 [ 87.080023][ T7487] netlink_deliver_tap+0xabd/0xd30 [ 87.080040][ T7487] netlink_unicast+0x64c/0x870 [ 87.080055][ T7487] ? __pfx_netlink_unicast+0x10/0x10 [ 87.080069][ T7487] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 87.080086][ T7487] netlink_sendmsg+0x8d1/0xdd0 [ 87.080101][ T7487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.080119][ T7487] ____sys_sendmsg+0xa95/0xc70 [ 87.080136][ T7487] ? copy_msghdr_from_user+0x10a/0x160 [ 87.080148][ T7487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.080169][ T7487] ___sys_sendmsg+0x134/0x1d0 [ 87.080182][ T7487] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.080210][ T7487] __sys_sendmsg+0x16d/0x220 [ 87.080223][ T7487] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.080243][ T7487] do_syscall_64+0xcd/0x4e0 [ 87.080263][ T7487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.080273][ T7487] RIP: 0033:0x7f4c1a98eba9 [ 87.080282][ T7487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.080292][ T7487] RSP: 002b:00007f4c1b8c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.080302][ T7487] RAX: ffffffffffffffda RBX: 00007f4c1abd5fa0 RCX: 00007f4c1a98eba9 [ 87.080309][ T7487] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 87.080315][ T7487] RBP: 00007f4c1b8c6090 R08: 0000000000000000 R09: 0000000000000000 [ 87.080321][ T7487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.080326][ T7487] R13: 00007f4c1abd6038 R14: 00007f4c1abd5fa0 R15: 00007ffdfa7d0538 [ 87.080339][ T7487] [ 87.109190][ T7395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.183750][ T1146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.187700][ T1146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.204554][ T1146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.207857][ T1146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.214780][ T7497] random: crng reseeded on system resumption [ 87.240282][ T7481] chnl_net:caif_netlink_parms(): no params data found [ 87.409974][ T7481] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.412186][ T7481] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.414430][ T7481] bridge_slave_0: entered allmulticast mode [ 87.417794][ T7481] bridge_slave_0: entered promiscuous mode [ 87.427313][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.429913][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.434393][ T68] bridge_slave_1: left allmulticast mode [ 87.436234][ T68] bridge_slave_1: left promiscuous mode [ 87.438297][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.442696][ T68] bridge_slave_0: left allmulticast mode [ 87.444736][ T68] bridge_slave_0: left promiscuous mode [ 87.447001][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.533807][ T7511] netlink: 'syz.2.480': attribute type 64 has an invalid length. [ 87.536225][ T7511] netlink: 'syz.2.480': attribute type 4 has an invalid length. [ 87.699863][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.704017][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.707479][ T68] bond0 (unregistering): Released all slaves [ 87.713303][ T7481] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.715606][ T7481] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.717913][ T7481] bridge_slave_1: entered allmulticast mode [ 87.721498][ T7481] bridge_slave_1: entered promiscuous mode [ 87.750919][ T5981] Bluetooth: hci0: command tx timeout [ 87.784094][ T7481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.790480][ T7481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.790568][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.797884][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.841635][ T68] tipc: Disabling bearer [ 87.844235][ T68] tipc: Left network mode [ 87.885485][ T7530] __nla_validate_parse: 12 callbacks suppressed [ 87.885496][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 87.890610][ T7481] team0: Port device team_slave_0 added [ 87.899146][ T7481] team0: Port device team_slave_1 added [ 87.914189][ T5981] Bluetooth: hci1: command tx timeout [ 87.961378][ T7481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.964619][ T7481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.977609][ T7481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.982251][ T7481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.985192][ T7481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.993162][ T7481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.095716][ T7481] hsr_slave_0: entered promiscuous mode [ 88.098821][ T7481] hsr_slave_1: entered promiscuous mode [ 88.101715][ T7481] debugfs: 'hsr0' already exists in 'hsr' [ 88.105287][ T7481] Cannot create hsr debugfs directory [ 88.144425][ T68] hsr_slave_0: left promiscuous mode [ 88.146842][ T68] hsr_slave_1: left promiscuous mode [ 88.148957][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.151438][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.154287][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.157123][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.183932][ T68] veth1_macvtap: left promiscuous mode [ 88.186656][ T68] veth0_macvtap: left promiscuous mode [ 88.190097][ T68] veth1_vlan: left promiscuous mode [ 88.192357][ T68] veth0_vlan: left promiscuous mode [ 88.762770][ T68] team0 (unregistering): Port device team_slave_1 removed [ 88.820044][ T68] team0 (unregistering): Port device team_slave_0 removed [ 89.033578][ T5981] Bluetooth: hci3: command tx timeout [ 89.106457][ T6038] vhci_hcd: vhci_device speed not set [ 89.386054][ T7581] 9pnet_virtio: no channels available for device 127.0.0.1 [ 89.390319][ T7581] 9pnet_virtio: no channels available for device 127.0.0.1 [ 89.488792][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.500'. [ 89.530999][ T7592] netlink: 'syz.5.502': attribute type 1 has an invalid length. [ 89.531869][ T7481] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 89.540684][ T7481] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 89.542274][ T7592] netlink: 36 bytes leftover after parsing attributes in process `syz.5.502'. [ 89.559796][ T7481] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 89.576286][ T7481] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 89.630776][ T7481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.642505][ T7481] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.651104][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.653436][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.667437][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.670100][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.819856][ T7481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.974870][ T7481] veth0_vlan: entered promiscuous mode [ 89.979668][ T7481] veth1_vlan: entered promiscuous mode [ 89.994477][ T7481] veth0_macvtap: entered promiscuous mode [ 89.998607][ T7481] veth1_macvtap: entered promiscuous mode [ 90.002479][ T5981] Bluetooth: hci1: command tx timeout [ 90.003340][ T7639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1812 sclass=netlink_route_socket pid=7639 comm=syz.2.509 [ 90.011840][ T7481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.013802][ T7634] netlink: 112 bytes leftover after parsing attributes in process `syz.2.509'. [ 90.018992][ T7481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.026002][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.029878][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.033599][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.038570][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.082258][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.085165][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.100494][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.103101][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.150606][ T7645] netlink: 'syz.6.470': attribute type 4 has an invalid length. [ 90.157067][ T7643] netlink: 'syz.6.470': attribute type 4 has an invalid length. [ 90.166243][ T7644] loop6: detected capacity change from 0 to 7 [ 90.397547][ T7650] sd 0:0:0:0: PR command failed: 1026 [ 90.399692][ T7650] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 90.402594][ T7650] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 90.505256][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 90.505267][ T40] audit: type=1400 audit(1758324056.322:414): avc: denied { add_name } for pid=7658 comm="syz.6.515" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.514725][ T40] audit: type=1400 audit(1758324056.322:415): avc: denied { create } for pid=7658 comm="syz.6.515" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.522311][ T40] audit: type=1400 audit(1758324056.322:416): avc: denied { associate } for pid=7658 comm="syz.6.515" name="cpuacct.usage_sys" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.530329][ T40] audit: type=1400 audit(1758324056.352:417): avc: denied { read append open } for pid=7658 comm="syz.6.515" path="/3/file0/cpuacct.usage_sys" dev="9p" ino=72614217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.538184][ T40] audit: type=1400 audit(1758324056.352:418): avc: denied { map } for pid=7658 comm="syz.6.515" path="/3/file0/cpuacct.usage_sys" dev="9p" ino=72614217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.547162][ T54] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 90.556931][ T40] audit: type=1400 audit(1758324056.372:419): avc: denied { unmount } for pid=7481 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.652026][ T40] audit: type=1400 audit(1758324056.471:420): avc: denied { create } for pid=7663 comm="syz.6.517" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.654932][ T7664] fuse: Bad value for 'user_id' [ 90.660611][ T40] audit: type=1400 audit(1758324056.471:421): avc: denied { mounton } for pid=7663 comm="syz.6.517" path="/4/file0" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.662054][ T7664] fuse: Bad value for 'user_id' [ 90.676798][ T7664] blk_print_req_error: 2 callbacks suppressed [ 90.676808][ T7664] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.682121][ T7664] FAT-fs (loop13): unable to read boot sector [ 90.687606][ T7664] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.692395][ T7664] FAT-fs (loop13): unable to read boot sector [ 90.704798][ T40] audit: type=1400 audit(1758324056.521:422): avc: denied { unlink } for pid=7481 comm="syz-executor" name="file0" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 90.716110][ T54] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.719791][ T54] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 90.724250][ T54] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 90.728140][ T54] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.738815][ T54] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.741794][ T54] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.746953][ T54] usb 10-1: config 0 descriptor?? [ 90.828003][ T7684] ip6gre1: entered allmulticast mode [ 90.854177][ T7688] netlink: 75 bytes leftover after parsing attributes in process `syz.6.526'. [ 91.032083][ T7696] block nbd1: server does not support multiple connections per device. [ 91.037624][ T7696] block nbd1: shutting down sockets [ 91.046861][ T40] audit: type=1400 audit(1758324056.858:423): avc: denied { bind } for pid=7702 comm="syz.2.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 91.120970][ T7710] netlink: 60 bytes leftover after parsing attributes in process `syz.3.532'. [ 91.132536][ T5981] Bluetooth: hci3: command tx timeout [ 91.165820][ T54] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 91.336750][ T7719] orangefs_devreq_write_iter: total:8: must be at least:8240: [ 91.374195][ T5981] Bluetooth: hci0: command tx timeout [ 91.551324][ T7725] overlayfs: missing 'workdir' [ 91.842304][ T5981] Bluetooth: to_multiplier 54284 > 3200 [ 91.923343][ T7744] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 91.926731][ T7744] netlink: 17 bytes leftover after parsing attributes in process `syz.2.544'. [ 92.003994][ T6041] usb 10-1: USB disconnect, device number 2 [ 92.007135][ T5981] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 92.100161][ T5981] Bluetooth: hci1: command tx timeout [ 92.120170][ T61] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 92.221037][ T6038] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 92.291628][ T61] usb 11-1: Using ep0 maxpacket: 16 [ 92.295468][ T61] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.299863][ T61] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.303835][ T61] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 92.307891][ T61] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 92.311781][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.315671][ T61] usb 11-1: config 0 descriptor?? [ 92.372486][ T6038] usb 7-1: Using ep0 maxpacket: 8 [ 92.376678][ T6038] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 92.379266][ T6038] usb 7-1: config 179 has no interface number 0 [ 92.381539][ T6038] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 92.385433][ T6038] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 92.389034][ T6038] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.392600][ T6038] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 92.395772][ T6038] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 92.399781][ T6038] usb 7-1: config 179 interface 65 has no altsetting 0 [ 92.401890][ T6038] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 92.405001][ T6038] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.418114][ T6038] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input13 [ 92.536702][ T7757] netlink: 'syz.5.549': attribute type 13 has an invalid length. [ 92.554403][ T7757] gretap0: refused to change device tx_queue_len [ 92.556476][ T7757] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 92.572313][ T7757] mkiss: ax0: crc mode is auto. [ 92.650771][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 92.710066][ T7753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.547'. [ 92.790265][ T7781] netlink: 'syz.3.556': attribute type 2 has an invalid length. [ 92.809262][ T29] usb 7-1: USB disconnect, device number 8 [ 92.809363][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 92.926752][ T61] usbhid 11-1:0.0: can't add hid device: -71 [ 92.928682][ T61] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 92.931976][ T61] usb 11-1: USB disconnect, device number 2 [ 93.087629][ T6038] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 93.107907][ T7103] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 93.228619][ T5981] Bluetooth: hci3: command tx timeout [ 93.241562][ T6038] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.246644][ T6038] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 93.251450][ T6038] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 93.255481][ T6038] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.260330][ T7103] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.261242][ T6038] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.264591][ T7103] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 93.268347][ T6038] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.271900][ T7103] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 93.278106][ T7103] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.278816][ T6038] usb 10-1: config 0 descriptor?? [ 93.282240][ T7103] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.286933][ T7103] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.290609][ T7103] usb 8-1: config 0 descriptor?? [ 93.372981][ T7792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7792 comm=syz.2.561 [ 93.471729][ T5981] Bluetooth: hci0: command tx timeout [ 93.515429][ T7805] overlayfs: failed to set uuid (15/file0, err=-1); falling back to uuid=null. [ 93.518285][ T7805] overlayfs: failed to verify upper root origin [ 93.580832][ T7810] netlink: 'syz.6.568': attribute type 10 has an invalid length. [ 93.753508][ T7788] Invalid logical block size (257) [ 93.775002][ T6038] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 93.904987][ T5981] Bluetooth: to_multiplier 54284 > 3200 [ 93.976512][ T7790] binder: 7789:7790 ioctl 3b87 200000000140 returned -22 [ 93.980897][ T7103] usbhid 8-1:0.0: can't add hid device: -71 [ 93.982809][ T7103] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 93.987006][ T7103] usb 8-1: USB disconnect, device number 4 [ 94.195493][ T5981] Bluetooth: hci1: command tx timeout [ 94.208437][ T7855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.584'. [ 94.243453][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.250542][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.263812][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 94.489714][ T7886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7886 comm=syz.2.590 [ 94.565535][ T7898] gfs2: gfs2 mount does not exist [ 94.626515][ T7904] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 94.653424][ T7913] netlink: 80 bytes leftover after parsing attributes in process `syz.2.597'. [ 94.669818][ T7916] netlink: 'syz.6.598': attribute type 1 has an invalid length. [ 94.701790][ T7916] bond1: (slave geneve2): making interface the new active one [ 94.704751][ T7916] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 94.707901][ T7917] lo: entered promiscuous mode [ 94.740594][ T7922] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 94.742666][ T7922] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 94.745126][ T7922] vhci_hcd vhci_hcd.0: Device attached [ 94.935080][ T7103] vhci_hcd: vhci_device speed not set [ 94.991024][ T1028] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 94.994884][ T7103] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 95.042149][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 95.062490][ T840] usb 10-1: reset high-speed USB device number 3 using dummy_hcd [ 95.116019][ T7948] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.609'. [ 95.154935][ T1028] usb 11-1: config 0 has no interfaces? [ 95.157603][ T1028] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 95.161492][ T1028] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.168958][ T1028] usb 11-1: config 0 descriptor?? [ 95.176005][ T7951] input: syz1 as /devices/virtual/input/input15 [ 95.323363][ T5981] Bluetooth: hci3: command tx timeout [ 95.375518][ T7923] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 95.377648][ T6041] usb 11-1: USB disconnect, device number 3 [ 95.380120][ T1185] vhci_hcd: stop threads [ 95.381885][ T1185] vhci_hcd: release socket [ 95.384328][ T1185] vhci_hcd: disconnect device [ 95.571428][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.613'. [ 95.969290][ T54] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 96.047042][ T7986] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value [ 96.055264][ T7986] input: syz1 as /devices/virtual/input/input16 [ 96.129540][ T54] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.133205][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.136928][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 96.140505][ T54] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.144613][ T54] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.148323][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.152323][ T54] usb 7-1: config 0 descriptor?? [ 96.173089][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 96.173103][ T40] audit: type=1400 audit(1758324061.951:447): avc: denied { mount } for pid=7992 comm="syz.5.626" name="/" dev="autofs" ino=20992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 96.491285][ T840] usb 10-1: device descriptor read/64, error -71 [ 96.571993][ T54] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 96.741706][ T840] usb 10-1: reset high-speed USB device number 3 using dummy_hcd [ 96.903602][ T840] usb 10-1: device firmware changed [ 96.908799][ T7095] usb 10-1: USB disconnect, device number 3 [ 96.916386][ T7999] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 96.919215][ T7999] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 96.924286][ T7999] vhci_hcd vhci_hcd.0: Device attached [ 96.930836][ T7999] netlink: 24 bytes leftover after parsing attributes in process `syz.6.627'. [ 96.938675][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 96.941369][ T29] usb 8-1: too many configurations: 247, using maximum allowed: 8 [ 96.948070][ T29] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 96.950583][ T29] usb 8-1: can't read configurations, error -71 [ 97.053350][ T7095] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 97.215493][ T7095] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.219188][ T7095] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.222338][ T7095] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.225467][ T7095] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.231585][ T7993] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 97.236084][ T7095] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.254764][ T6041] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 97.407321][ T6041] usb 11-1: config 0 has no interfaces? [ 97.409750][ T6041] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 97.413585][ T6041] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.415609][ T5981] Bluetooth: hci3: command tx timeout [ 97.419202][ T6041] usb 11-1: config 0 descriptor?? [ 97.441047][ T7095] usb 10-1: USB disconnect, device number 4 [ 97.624370][ T8000] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 97.627859][ T1148] vhci_hcd: stop threads [ 97.629579][ T1148] vhci_hcd: release socket [ 97.630384][ T40] audit: type=1400 audit(1758324063.393:448): avc: denied { listen } for pid=7998 comm="syz.6.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 97.631579][ T1148] vhci_hcd: disconnect device [ 97.632306][ T6011] usb 11-1: USB disconnect, device number 4 [ 97.886606][ T8013] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 97.888959][ T8013] PKCS7: Only support pkcs7_signedData type [ 97.966274][ T40] audit: type=1400 audit(1758324063.731:449): avc: denied { map } for pid=8016 comm="syz.3.633" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.013542][ T8020] SELinux: policydb version 1270918415 does not match my version range 15-35 [ 98.017467][ T8020] SELinux: failed to load policy [ 98.159907][ T40] audit: type=1400 audit(1758324063.930:450): avc: denied { unmount } for pid=7395 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 98.276266][ T8029] kvm: MWAIT instruction emulated as NOP! [ 98.310278][ T29] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 98.388876][ T5981] Bluetooth: to_multiplier 54284 > 3200 [ 98.444992][ T40] audit: type=1400 audit(1758324064.208:451): avc: denied { read } for pid=8044 comm="syz.6.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.476569][ T29] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.481980][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.485550][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 98.488626][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.492887][ T29] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.496755][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.502107][ T29] usb 8-1: config 0 descriptor?? [ 98.710426][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.636'. [ 98.748263][ T61] usb 7-1: USB disconnect, device number 9 [ 98.815067][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.649'. [ 98.853141][ T6011] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 98.935775][ T29] usbhid 8-1:0.0: can't add hid device: -71 [ 98.937724][ T29] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 98.942159][ T29] usb 8-1: USB disconnect, device number 7 [ 99.036014][ T6011] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.041991][ T6011] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 99.048040][ T6011] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 99.051990][ T6011] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.057741][ T6011] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.061688][ T6011] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.066369][ T40] audit: type=1400 audit(1758324064.825:452): avc: denied { create } for pid=8082 comm="syz.6.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 99.075841][ T6011] usb 10-1: config 0 descriptor?? [ 99.079866][ T40] audit: type=1400 audit(1758324064.825:453): avc: denied { write } for pid=8082 comm="syz.6.657" path="socket:[21153]" dev="sockfs" ino=21153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 99.088642][ T40] audit: type=1400 audit(1758324064.825:454): avc: denied { append } for pid=8082 comm="syz.6.657" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 99.221240][ T8089] hfs: unable to load iocharset "io#harset" [ 99.222916][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 99.363974][ T8102] netlink: 40 bytes leftover after parsing attributes in process `syz.6.663'. [ 99.414329][ T8104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.496818][ T40] audit: type=1400 audit(1758324065.253:455): avc: denied { bind } for pid=8118 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.506459][ T5981] Bluetooth: hci3: command tx timeout [ 99.508750][ T40] audit: type=1400 audit(1758324065.263:456): avc: denied { create } for pid=8120 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 99.526621][ T8057] Invalid logical block size (257) [ 99.543928][ T6011] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 99.610658][ T8130] netlink: 132 bytes leftover after parsing attributes in process `syz.3.672'. [ 99.622328][ T8132] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 99.624739][ T8132] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 99.633980][ T8132] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 99.729276][ T8142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.678'. [ 99.765738][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 99.877088][ T5981] Bluetooth: to_multiplier 54284 > 3200 [ 99.972489][ T8165] kvm: user requested TSC rate below hardware speed [ 100.097887][ T8178] netlink: 40 bytes leftover after parsing attributes in process `syz.6.689'. [ 100.159693][ T7103] vhci_hcd: vhci_device speed not set [ 100.361326][ T1477] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 100.423691][ T8194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.521191][ T1477] usb 11-1: Using ep0 maxpacket: 8 [ 100.524686][ T1477] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.530931][ T1477] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.536839][ T1477] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 100.540280][ T1477] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 100.544274][ T1477] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.548326][ T1477] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.551800][ T1477] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.759212][ T1477] usb 11-1: GET_CAPABILITIES returned 0 [ 100.761173][ T1477] usbtmc 11-1:16.0: can't read capabilities [ 100.960690][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 100.966373][ T1477] usb 11-1: USB disconnect, device number 5 [ 101.579869][ T5981] Bluetooth: to_multiplier 54284 > 3200 [ 101.596172][ T5981] Bluetooth: hci3: command tx timeout [ 101.758246][ T5981] Bluetooth: hci2: command tx timeout [ 101.849453][ T8241] netlink: 284 bytes leftover after parsing attributes in process `syz.5.707'. [ 101.893792][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.708'. [ 101.999082][ T6011] usb 10-1: USB disconnect, device number 5 [ 102.002974][ T8220] overlayfs: statfs failed on './file0' [ 102.095504][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 102.095523][ T40] audit: type=1400 audit(1758324067.801:467): avc: denied { execmem } for pid=8251 comm="syz.3.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 102.280683][ T40] audit: type=1400 audit(1758324068.030:468): avc: denied { mount } for pid=8264 comm="syz.3.714" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 102.293997][ T40] audit: type=1400 audit(1758324068.040:469): avc: denied { unmount } for pid=8264 comm="syz.3.714" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 102.303069][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 102.320993][ T40] audit: type=1400 audit(1758324068.070:470): avc: denied { map } for pid=8264 comm="syz.3.714" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.331725][ T40] audit: type=1400 audit(1758324068.070:471): avc: denied { execute } for pid=8264 comm="syz.3.714" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.345066][ T40] audit: type=1400 audit(1758324068.090:472): avc: denied { read } for pid=8269 comm="syz.5.716" laddr=fe80::b lport=39465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.450433][ T8230] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 102.602435][ T40] audit: type=1400 audit(1758324068.349:473): avc: denied { getopt } for pid=8286 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 102.750679][ T8291] kvm: kvm [8290]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 102.755532][ T8291] kvm: kvm [8290]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 102.774439][ T8291] kvm: kvm [8290]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 102.802565][ T8291] kvm: kvm [8290]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 102.806315][ T8291] kvm: kvm [8290]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 102.823094][ T8291] kvm_intel: kvm [8290]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 102.891190][ T54] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 102.951277][ T8310] : (slave bond_slave_0): Releasing backup interface [ 102.960666][ T8310] : (slave bond_slave_1): Releasing backup interface [ 102.977291][ T8310] team0: Port device team_slave_0 removed [ 102.984524][ T8310] team0: Port device team_slave_1 removed [ 102.986772][ T8310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.989157][ T8310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.997816][ T8310] batman_adv: batadv0: Interface deactivated: gretap1 [ 103.000036][ T8310] batman_adv: batadv0: Removing interface: gretap1 [ 103.003918][ T8310] bond0: (slave geneve2): Releasing active interface [ 103.006083][ T8310] geneve2: left promiscuous mode [ 103.007824][ T8310] geneve2: left allmulticast mode [ 103.015370][ T8312] netlink: 'syz.6.731': attribute type 5 has an invalid length. [ 103.032403][ T1185] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.036184][ T1185] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.039631][ T1185] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.045605][ T1185] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.053432][ T54] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.057021][ T54] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.060574][ T54] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.064325][ T54] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.069533][ T54] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.072985][ T54] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.081736][ T54] usb 10-1: config 0 descriptor?? [ 103.500438][ T54] plantronics 0003:047F:FFFF.000A: global environment stack underflow [ 103.502977][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 103.503748][ T54] plantronics 0003:047F:FFFF.000A: item 0 2 1 11 parsing failed [ 103.503879][ T6011] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 103.512760][ T54] plantronics 0003:047F:FFFF.000A: parse failed [ 103.515184][ T54] plantronics 0003:047F:FFFF.000A: probe with driver plantronics failed with error -22 [ 103.608179][ T40] audit: type=1400 audit(1758324069.345:474): avc: denied { mounton } for pid=8338 comm="syz.3.741" path="/221/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 103.608209][ T8339] overlay: Unknown parameter '/' [ 103.665539][ T6011] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.668723][ T6011] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.671902][ T6011] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.677867][ T6011] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 103.680932][ T6011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 103.683692][ T6011] usb 7-1: Product: syz [ 103.685128][ T5981] Bluetooth: hci3: command tx timeout [ 103.687438][ T6011] usb 7-1: Manufacturer: syz [ 103.689191][ T6011] usb 7-1: SerialNumber: syz [ 103.792127][ T8350] netlink: 'syz.3.745': attribute type 64 has an invalid length. [ 103.795198][ T8350] netlink: 'syz.3.745': attribute type 4 has an invalid length. [ 103.809139][ T8350] ======================================================= [ 103.809139][ T8350] WARNING: The mand mount option has been deprecated and [ 103.809139][ T8350] and is ignored by this kernel. Remove the mand [ 103.809139][ T8350] option from the mount to silence this warning. [ 103.809139][ T8350] ======================================================= [ 103.821042][ T8350] new mount options do not match the existing superblock, will be ignored [ 103.825380][ T40] audit: type=1400 audit(1758324069.564:475): avc: denied { remount } for pid=8349 comm="syz.3.745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 103.826831][ T8350] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 103.847092][ T40] audit: type=1400 audit(1758324069.584:476): avc: denied { unmount } for pid=5971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 103.902201][ T6011] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 104.104628][ T840] usb 7-1: USB disconnect, device number 10 [ 104.109270][ T840] usblp0: removed [ 104.113677][ T8327] [U] zÍ»´iœùÊý®Ò[27| [ 104.115601][ T8327] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 104.120449][ T8327] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 104.123512][ T8327] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 104.138252][ T8327] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 104.140898][ T8327] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 104.144033][ T8327] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 104.146926][ T8327] [U] ‰ϼcEv‹û @ý [ 104.148538][ T8327] [U] aÆ„% [ 104.149855][ T8327] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 104.156789][ T8327] [U] éf1Ïp±3 [ 104.158220][ T8327] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 104.160247][ T8327] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 104.184850][ T8326] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡n [ 104.300788][ T8367] overlayfs: missing 'lowerdir' [ 104.793400][ T8379] netlink: 'syz.2.756': attribute type 21 has an invalid length. [ 104.796352][ T8379] __nla_validate_parse: 36 callbacks suppressed [ 104.796365][ T8379] netlink: 132 bytes leftover after parsing attributes in process `syz.2.756'. [ 105.357493][ T840] usb 10-1: USB disconnect, device number 6 [ 105.480547][ T839] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 105.632347][ T839] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.636604][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.640552][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 105.645042][ T839] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.649422][ T839] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.652477][ T839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.657027][ T839] usb 8-1: config 0 descriptor?? [ 105.771627][ T5981] Bluetooth: hci3: command tx timeout [ 105.846161][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.765'. [ 106.013993][ T8411] random: crng reseeded on system resumption [ 106.027162][ T8413] vlan1: entered promiscuous mode [ 106.029617][ T8413] vlan1: entered allmulticast mode [ 106.031700][ T8413] veth0_vlan: entered allmulticast mode [ 106.040289][ T8413] libceph: resolve ' [ 106.040289][ T8413] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 106.040289][ T8413] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 106.077916][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.769'. [ 106.114098][ T8394] Invalid logical block size (257) [ 106.123248][ T839] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 106.171802][ T8432] netlink: 72 bytes leftover after parsing attributes in process `syz.2.770'. [ 106.176245][ T8432] nbd_handle_cmd: 2 callbacks suppressed [ 106.176257][ T8432] block nbd2: Attempted send on invalid socket [ 106.180279][ T8432] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.181554][ T5981] Bluetooth: to_multiplier 54284 > 3200 [ 106.183642][ T8432] exFAT-fs (nbd2): unable to read boot sector [ 106.183662][ T8432] exFAT-fs (nbd2): failed to read boot sector [ 106.183667][ T8432] exFAT-fs (nbd2): failed to recognize exfat type [ 106.249732][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 106.252506][ T8441] netlink: 244 bytes leftover after parsing attributes in process `syz.2.774'. [ 106.330876][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.776'. [ 106.339886][ T8453] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 106.339886][ T8453] The task syz.5.775 (8453) triggered the difference, watch for misbehavior. [ 106.541748][ T5981] Bluetooth: to_multiplier 54284 > 3200 [ 106.645943][ T8467] sd 0:0:0:0: PR command failed: 1026 [ 106.648237][ T8467] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 106.650949][ T8467] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 106.658551][ T8467] overlay: filesystem on ./file1 not supported [ 106.842786][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.6.787'. [ 106.978466][ T8485] geneve3: entered allmulticast mode [ 107.023472][ T8492] tipc: Started in network mode [ 107.025756][ T8492] tipc: Node identity 4, cluster identity 4711 [ 107.028463][ T8492] tipc: Node number set to 4 [ 107.033449][ T8492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=8492 comm=syz.6.791 [ 107.130519][ T8503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.793'. [ 107.183897][ T8510] tmpfs: Unknown parameter 'mpÁ ' [ 107.229836][ T8509] program syz.5.795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.235530][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 107.235546][ T40] audit: type=1400 audit(1758324072.953:487): avc: denied { accept } for pid=8506 comm="syz.5.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 107.575779][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.808'. [ 107.641958][ T8563] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 107.695097][ T40] audit: type=1400 audit(1758324073.422:488): avc: denied { getopt } for pid=8566 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.763693][ T8571] sctp: [Deprecated]: syz.5.813 (pid 8571) Use of int in max_burst socket option deprecated. [ 107.763693][ T8571] Use struct sctp_assoc_value instead [ 107.788997][ T40] audit: type=1400 audit(1758324073.521:489): avc: denied { ioctl } for pid=8573 comm="syz.2.814" path="socket:[23168]" dev="sockfs" ino=23168 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 107.800821][ T8579] block nbd5: Attempted send on invalid socket [ 107.803309][ T8579] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.806757][ T8579] block nbd5: Attempted send on invalid socket [ 107.809993][ T8579] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.812915][ T8579] Mount JFS Failure: -5 [ 107.814589][ T8579] jfs_mount failed w/return code = -5 [ 107.820155][ T40] audit: type=1400 audit(1758324073.551:490): avc: denied { write } for pid=8578 comm="syz.5.815" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 108.259113][ T5981] Bluetooth: hci3: command tx timeout [ 108.541662][ T6011] usb 8-1: USB disconnect, device number 8 [ 108.581722][ T40] audit: type=1400 audit(1758324074.309:491): avc: denied { read } for pid=8625 comm="syz.3.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 108.624690][ T6680] udevd[6680]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 108.651409][ T40] audit: type=1400 audit(1758324074.379:492): avc: denied { block_suspend } for pid=8631 comm="syz.2.837" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.665393][ T40] audit: type=1400 audit(1758324074.389:493): avc: denied { write } for pid=8634 comm="syz.3.838" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 108.712460][ T40] audit: type=1400 audit(1758324074.439:494): avc: denied { write } for pid=8636 comm="syz.2.839" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 108.714655][ T8639] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20004 [ 109.073048][ T40] audit: type=1400 audit(1758324074.798:495): avc: denied { create } for pid=8666 comm="syz.6.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 109.083638][ T40] audit: type=1400 audit(1758324074.798:496): avc: denied { bind } for pid=8666 comm="syz.6.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 109.227018][ T8684] netlink: zone id is out of range [ 109.228957][ T8684] netlink: del zone limit has 4 unknown bytes [ 109.264839][ T8681] /dev/sr0: Can't open blockdev [ 109.519443][ T8696] netlink: 'syz.6.855': attribute type 13 has an invalid length. [ 109.522512][ T8696] netlink: 'syz.6.855': attribute type 17 has an invalid length. [ 109.525754][ T8696] lo: left promiscuous mode [ 109.561466][ T8696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.781562][ T8721] kAFS: No cell specified [ 109.975554][ T7103] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 110.030059][ T8740] __nla_validate_parse: 3 callbacks suppressed [ 110.030070][ T8740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.875'. [ 110.072658][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.876'. [ 110.145164][ T7103] usb 11-1: Using ep0 maxpacket: 16 [ 110.155189][ T7103] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 110.161163][ T7103] usb 11-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.166988][ T7103] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.170159][ T7103] usb 11-1: Product: syz [ 110.171922][ T7103] usb 11-1: Manufacturer: syz [ 110.175456][ T7103] usb 11-1: SerialNumber: syz [ 110.179838][ T7103] usb 11-1: config 0 descriptor?? [ 110.191559][ T7103] em28xx 11-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 110.194996][ T7103] em28xx 11-1:0.0: DVB interface 0 found: bulk [ 110.223422][ T8751] ALSA: mixer_oss: invalid index 100000 [ 110.344485][ T5981] Bluetooth: hci3: command tx timeout [ 110.421678][ T8775] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.434772][ T5981] Bluetooth: hci2: command tx timeout [ 110.455060][ T7103] em28xx 11-1:0.0: unknown em28xx chip ID (0) [ 110.509815][ T8784] netlink: 120 bytes leftover after parsing attributes in process `syz.2.889'. [ 110.520643][ T7103] em28xx 11-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 110.523821][ T7103] em28xx 11-1:0.0: board has no eeprom [ 110.555080][ T54] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 110.585144][ T7103] em28xx 11-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 110.587642][ T7103] em28xx 11-1:0.0: dvb set to bulk mode. [ 110.591747][ T840] em28xx 11-1:0.0: Binding DVB extension [ 110.597209][ T7103] usb 11-1: USB disconnect, device number 6 [ 110.599753][ T7103] em28xx 11-1:0.0: Disconnecting em28xx [ 110.622400][ T840] em28xx 11-1:0.0: Registering input extension [ 110.625510][ T7103] em28xx 11-1:0.0: Closing input extension [ 110.647648][ T7103] em28xx 11-1:0.0: Freeing device [ 110.706916][ T54] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 110.709833][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 110.714543][ T54] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.719365][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 110.723794][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 110.728989][ T54] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 110.731689][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 110.735469][ T54] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.740333][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 110.744550][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 110.749223][ T54] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 110.751904][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 110.755400][ T54] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.759261][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 110.763102][ T54] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 110.769034][ T54] usb 10-1: string descriptor 0 read error: -22 [ 110.771628][ T54] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 110.774537][ T54] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.784001][ T54] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 110.906000][ T5981] Bluetooth: hci1: command tx timeout [ 110.945900][ T7103] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 110.992996][ T54] usb 10-1: USB disconnect, device number 7 [ 110.998047][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.884'. [ 111.098958][ T7103] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 111.103198][ T7103] usb 11-1: config 0 interface 0 has no altsetting 0 [ 111.111715][ T7103] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.115975][ T7103] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 111.119587][ T7103] usb 11-1: Product: syz [ 111.121377][ T7103] usb 11-1: Manufacturer: syz [ 111.123384][ T7103] usb 11-1: SerialNumber: syz [ 111.129345][ T7103] usb 11-1: config 0 descriptor?? [ 111.137905][ T7103] usb 11-1: selecting invalid altsetting 0 [ 111.164084][ T8800] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.167855][ T8800] netlink: 56 bytes leftover after parsing attributes in process `syz.3.894'. [ 111.324304][ T8806] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 111.329603][ T8807] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 111.341228][ T54] usb 11-1: USB disconnect, device number 7 [ 111.468066][ T8812] netlink: 120 bytes leftover after parsing attributes in process `syz.3.898'. [ 111.583753][ T8834] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 111.790658][ T8850] netlink: 'syz.3.913': attribute type 7 has an invalid length. [ 111.837941][ T7103] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 111.945182][ T840] libceph: connect (1)[c::]:6789 error -101 [ 111.947529][ T840] libceph: mon0 (1)[c::]:6789 connect error [ 111.981939][ T8882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.918'. [ 111.989645][ T54] libceph: connect (1)[c::]:6789 error -101 [ 111.991592][ T7103] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.991741][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 111.995369][ T7103] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.002340][ T7103] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 112.006440][ T7103] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.014179][ T7103] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.017998][ T7103] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.023201][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.923'. [ 112.027189][ T7103] usb 7-1: config 0 descriptor?? [ 112.037411][ T8874] ceph: No mds server is up or the cluster is laggy [ 112.037827][ T8876] ceph: No mds server is up or the cluster is laggy [ 112.098537][ T8892] netlink: 'syz.5.924': attribute type 3 has an invalid length. [ 112.101251][ T8892] netlink: 'syz.5.924': attribute type 1 has an invalid length. [ 112.104073][ T8892] netlink: 216 bytes leftover after parsing attributes in process `syz.5.924'. [ 112.107743][ T8892] NCSI netlink: No device for ifindex 33022 [ 112.192045][ T8900] netlink: 'syz.5.928': attribute type 13 has an invalid length. [ 112.201149][ T8900] dvmrp17: entered allmulticast mode [ 112.204582][ T8900] dvmrp17: left allmulticast mode [ 112.429256][ T5981] Bluetooth: hci3: command tx timeout [ 112.444935][ T7103] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 112.509525][ T5981] Bluetooth: hci2: command tx timeout [ 112.699870][ T6011] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 112.860130][ T6011] usb 10-1: Using ep0 maxpacket: 8 [ 112.864072][ T6011] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 112.866700][ T6011] usb 10-1: config 0 has no interface number 0 [ 112.868670][ T6011] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.873705][ T6011] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 112.877433][ T6011] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.881351][ T6011] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.885788][ T6011] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 112.888765][ T6011] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.892897][ T6011] usb 10-1: config 0 descriptor?? [ 112.893669][ T8910] overlayfs: failed to resolve '/': -2 [ 112.899229][ T6011] ldusb 10-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 112.990377][ T5981] Bluetooth: hci1: command tx timeout [ 113.100668][ T8906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.105422][ T8906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.110123][ T29] usb 10-1: USB disconnect, device number 8 [ 113.114080][ T29] ldusb 10-1:0.55: LD USB Device #1 now disconnected [ 113.332905][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 113.332921][ T40] audit: type=1400 audit(1758324079.048:501): avc: denied { ioctl } for pid=8921 comm="syz.3.936" path="socket:[24104]" dev="sockfs" ino=24104 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 113.333377][ T8922] netlink: 56 bytes leftover after parsing attributes in process `syz.3.936'. [ 113.644448][ T40] audit: type=1400 audit(1758324079.357:502): avc: denied { map } for pid=8941 comm="syz.5.944" path="/proc/214/pagemap" dev="proc" ino=24112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 113.651984][ T40] audit: type=1400 audit(1758324079.357:503): avc: denied { execute } for pid=8941 comm="syz.5.944" path="/proc/214/pagemap" dev="proc" ino=24112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 113.687000][ T8949] netlink: 'syz.5.945': attribute type 5 has an invalid length. [ 113.781693][ T8953] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 113.786626][ T8953] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 113.988270][ T8969] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 114.061688][ T40] audit: type=1400 audit(1758324079.767:504): avc: denied { ioctl } for pid=8972 comm="syz.3.954" path="socket:[25850]" dev="sockfs" ino=25850 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.246489][ T40] audit: type=1400 audit(1758324079.956:505): avc: denied { getopt } for pid=8986 comm="syz.5.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.247770][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.259574][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.264547][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.269773][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.273413][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.276651][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.279989][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.286096][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.289221][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.293041][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.297340][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.304764][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.309510][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.312781][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.313533][ T40] audit: type=1400 audit(1758324080.026:506): avc: denied { getopt } for pid=8996 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.322315][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.338778][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.342380][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.346564][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.350363][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.355849][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.359516][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.363146][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.367188][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.371814][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.375196][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.378482][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.382550][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.387375][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.391951][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.398283][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.402472][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.408889][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.411496][ T9002] netlink: 'syz.3.964': attribute type 11 has an invalid length. [ 114.417226][ T9002] netlink: 'syz.3.964': attribute type 10 has an invalid length. [ 114.417589][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 114.420115][ T9002] dummy0: entered promiscuous mode [ 114.426935][ T9002] bridge0: port 3(dummy0) entered blocking state [ 114.429417][ T9002] bridge0: port 3(dummy0) entered disabled state [ 114.431939][ T9002] dummy0: entered allmulticast mode [ 114.436277][ T9002] bridge0: port 3(dummy0) entered blocking state [ 114.438777][ T9002] bridge0: port 3(dummy0) entered forwarding state [ 114.564923][ T9017] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 114.567372][ T9017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.576667][ T40] audit: type=1400 audit(1758324080.286:507): avc: denied { setopt } for pid=9018 comm="syz.3.972" lport=46875 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 114.656246][ C2] vcan0: j1939_session_tx_dat: 0xffff8880534e0400: queue data error: -100 [ 114.665113][ T40] audit: type=1400 audit(1758324080.375:508): avc: denied { read } for pid=5365 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 114.680077][ T40] audit: type=1400 audit(1758324080.375:509): avc: denied { search } for pid=5365 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.686774][ T40] audit: type=1400 audit(1758324080.375:510): avc: denied { search } for pid=5365 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.876315][ T6081] usb 7-1: USB disconnect, device number 11 [ 115.146171][ T9075] __nla_validate_parse: 9 callbacks suppressed [ 115.146182][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 115.152013][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 115.194553][ T7103] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 115.288208][ T9094] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 115.348269][ T7103] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.352801][ T7103] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.357567][ T7103] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 115.357763][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1002'. [ 115.360825][ T7103] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.368204][ T7103] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.371139][ T7103] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.375699][ T7103] usb 10-1: config 0 descriptor?? [ 115.565934][ T6011] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 115.737979][ T6011] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.743404][ T6011] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.746932][ T6011] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 115.749937][ T6011] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.753942][ T6011] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.757002][ T6011] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.760898][ T6011] usb 11-1: config 0 descriptor?? [ 115.792735][ T7103] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 115.869637][ T9121] overlayfs: failed to resolve './file1': -2 [ 115.965959][ T5981] Bluetooth: hci1: command tx timeout [ 116.097267][ T9135] tmpfs: Bad value for 'mpol' [ 116.221016][ T9139] vlan2: entered allmulticast mode [ 116.222682][ T9139] bond0: entered allmulticast mode [ 116.224380][ T9139] bond_slave_0: entered allmulticast mode [ 116.226178][ T9139] bond_slave_1: entered allmulticast mode [ 116.238683][ T6011] plantronics 0003:047F:FFFF.000E: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 116.240938][ T7103] libceph: connect (1)[c::]:6789 error -101 [ 116.242536][ T9098] Invalid logical block size (257) [ 116.247379][ T7103] libceph: mon0 (1)[c::]:6789 connect error [ 116.420965][ T9152] usb usb8: usbfs: process 9152 (syz.3.1014) did not claim interface 0 before use [ 116.520786][ T7103] libceph: connect (1)[c::]:6789 error -101 [ 116.523585][ T7103] libceph: mon0 (1)[c::]:6789 connect error [ 116.529688][ T9161] netlink: 'syz.3.1017': attribute type 7 has an invalid length. [ 116.529988][ T9162] netlink: 'syz.3.1017': attribute type 7 has an invalid length. [ 116.544163][ T9161] : entered promiscuous mode [ 116.721719][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 117.030062][ T7103] libceph: connect (1)[c::]:6789 error -101 [ 117.032174][ T7103] libceph: mon0 (1)[c::]:6789 connect error [ 117.053320][ T9143] ceph: No mds server is up or the cluster is laggy [ 117.318102][ T5974] Bluetooth: hci2: command tx timeout [ 117.353843][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a8c4400: rx timeout, send abort [ 117.854642][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a8c4800: rx timeout, send abort [ 117.859575][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a8c4400: abort rx timeout. Force session deactivation [ 117.892177][ T9181] overlayfs: failed to resolve './file1/file0': -2 [ 118.070943][ T9191] netlink: 'syz.5.1025': attribute type 1 has an invalid length. [ 118.073567][ T9191] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1025'. [ 118.250370][ T6035] usb 10-1: USB disconnect, device number 9 [ 118.329454][ T6011] usb 11-1: USB disconnect, device number 8 [ 118.358957][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a8c4800: abort rx timeout. Force session deactivation [ 118.395800][ T9208] openvswitch: netlink: Missing key (keys=100040, expected=80) [ 118.414102][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 118.414117][ T40] audit: type=1400 audit(1758324084.119:522): avc: denied { listen } for pid=9207 comm="syz.6.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 118.423625][ T40] audit: type=1400 audit(1758324084.119:523): avc: denied { accept } for pid=9207 comm="syz.6.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 118.425545][ T9208] xfrm0 speed is unknown, defaulting to 1000 [ 118.435496][ T9208] xfrm0 speed is unknown, defaulting to 1000 [ 118.442502][ T9208] xfrm0 speed is unknown, defaulting to 1000 [ 118.451145][ T9208] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.461216][ T9208] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 118.491951][ T9208] xfrm0 speed is unknown, defaulting to 1000 [ 118.496715][ T9208] xfrm0 speed is unknown, defaulting to 1000 [ 118.501940][ T9208] xfrm0 speed is unknown, defaulting to 1000 [ 118.505660][ T9208] xfrm0 speed is unknown, defaulting to 1000 [ 118.509288][ T9208] xfrm0 speed is unknown, defaulting to 1000 [ 118.580117][ T839] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 118.645445][ T9214] binder: 9213:9214 ioctl c0306201 200000000080 returned -14 [ 118.648619][ T9214] binder: 9213:9214 ioctl c0306201 200000000180 returned -22 [ 118.652365][ T9214] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1035'. [ 118.656214][ T9214] 0ªX¹¦À: renamed from caif0 [ 118.662769][ T9214] 0ªX¹¦À: entered allmulticast mode [ 118.664988][ T9214] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 118.730291][ T839] usb 7-1: Using ep0 maxpacket: 8 [ 118.733136][ T839] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 118.735673][ T839] usb 7-1: config 179 has no interface number 0 [ 118.737643][ T839] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 118.741920][ T839] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 118.745544][ T839] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 118.749007][ T839] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 118.752305][ T839] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 118.756351][ T839] usb 7-1: config 179 interface 65 has no altsetting 0 [ 118.758525][ T839] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 118.761637][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.761789][ T5974] Bluetooth: hci4: command 0x1003 tx timeout [ 118.768849][ T5981] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 118.776876][ T839] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input24 [ 118.812479][ T9220] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.815144][ T9220] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 118.817889][ T9220] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.822032][ T9220] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 118.835088][ T9219] netlink: 'syz.3.1037': attribute type 1 has an invalid length. [ 118.852114][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 118.950025][ T40] audit: type=1400 audit(1758324084.649:524): avc: denied { create } for pid=9229 comm="syz.5.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 118.950580][ T6011] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 118.957559][ T9230] tmpfs: Invalid uid '0x00000000ffffffff' [ 118.961887][ T40] audit: type=1400 audit(1758324084.659:525): avc: denied { getopt } for pid=9229 comm="syz.5.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 118.962606][ T9230] overlayfs: failed to resolve './file2': -2 [ 118.967663][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 118.980626][ T9202] sp0: Synchronizing with TNC [ 119.025582][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1043'. [ 119.114963][ T6011] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.118671][ T6011] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.122408][ T6011] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 119.125530][ T6011] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.130382][ T6011] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.135006][ T6011] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.139908][ T6011] usb 11-1: config 0 descriptor?? [ 119.274509][ T40] audit: type=1400 audit(1758324084.978:526): avc: denied { mount } for pid=9255 comm="syz.3.1048" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 119.286280][ T9263] netlink: 'syz.5.1049': attribute type 1 has an invalid length. [ 119.289660][ T9263] netlink: 'syz.5.1049': attribute type 2 has an invalid length. [ 119.295742][ T40] audit: type=1400 audit(1758324084.998:527): avc: denied { bind } for pid=9262 comm="syz.5.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.372410][ T9266] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 119.411119][ T5981] Bluetooth: hci2: command tx timeout [ 119.569656][ T6063] IPVS: starting estimator thread 0... [ 119.622798][ T9294] program syz.3.1061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.671540][ T9289] IPVS: using max 45 ests per chain, 108000 per kthread [ 119.964653][ T6011] usbhid 11-1:0.0: can't add hid device: -71 [ 119.966683][ T6011] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 119.970494][ T6011] usb 11-1: USB disconnect, device number 9 [ 120.531809][ T40] audit: type=1400 audit(1758324086.226:528): avc: denied { getopt } for pid=9312 comm="syz.5.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.590421][ T9319] vivid-002: disconnect [ 120.592546][ T9319] vivid-002: reconnect [ 120.603208][ T5974] Bluetooth: hci3: command tx timeout [ 120.685428][ T9324] openvswitch: netlink: Duplicate or invalid key (type 0). [ 120.689114][ T9324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.721906][ T29] libceph: connect (1)[c::]:6789 error -101 [ 120.724722][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 120.768277][ T29] libceph: connect (1)[b::]:6789 error -101 [ 120.771069][ T29] libceph: mon0 (1)[b::]:6789 connect error [ 120.872620][ T9345] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 120.883706][ T9345] CIFS mount error: No usable UNC path provided in device string! [ 120.883706][ T9345] [ 120.888058][ T9345] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 120.983936][ T29] libceph: connect (1)[c::]:6789 error -101 [ 120.985954][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 121.033555][ T29] libceph: connect (1)[b::]:6789 error -101 [ 121.035581][ T29] libceph: mon0 (1)[b::]:6789 connect error [ 121.358355][ T6041] usb 7-1: USB disconnect, device number 12 [ 121.358444][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 121.494355][ T29] libceph: connect (1)[c::]:6789 error -101 [ 121.497143][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 121.535426][ T9332] ceph: No mds server is up or the cluster is laggy [ 121.535512][ T9339] ceph: No mds server is up or the cluster is laggy [ 121.544755][ T40] audit: type=1400 audit(1758324087.235:529): avc: denied { create } for pid=9353 comm="syz.3.1080" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=chr_file permissive=1 [ 121.549778][ T29] libceph: connect (1)[b::]:6789 error -101 [ 121.556123][ T29] libceph: mon0 (1)[b::]:6789 connect error [ 121.604439][ T9357] netlink: 'syz.5.1081': attribute type 11 has an invalid length. [ 121.794975][ T6041] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 121.821311][ T9368] binder: BINDER_SET_CONTEXT_MGR already set [ 121.823582][ T9368] binder: 9366:9368 ioctl 4018620d 200000000100 returned -16 [ 121.828559][ T40] audit: type=1400 audit(1758324087.525:530): avc: denied { kexec_image_load } for pid=9366 comm="syz.5.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 121.830178][ T9367] binder: BINDER_SET_CONTEXT_MGR already set [ 121.835406][ T40] audit: type=1400 audit(1758324087.525:531): avc: denied { map } for pid=9366 comm="syz.5.1084" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.844769][ T9367] binder: 9366:9367 ioctl 4018620d 200000004a80 returned -16 [ 121.957459][ T6041] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.960193][ T6041] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 121.963404][ T6041] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 121.966712][ T6041] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 121.970174][ T6041] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 121.976268][ T6041] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 121.979179][ T6041] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.981682][ T6041] usb 7-1: Product: syz [ 121.983045][ T6041] usb 7-1: Manufacturer: syz [ 121.989102][ T6041] cdc_wdm 7-1:1.0: skipping garbage [ 121.990788][ T6041] cdc_wdm 7-1:1.0: skipping garbage [ 121.993421][ T6041] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 121.997174][ T9376] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.997286][ T6041] cdc_wdm 7-1:1.0: Unknown control protocol [ 122.199003][ T6081] usb 7-1: USB disconnect, device number 13 [ 122.263370][ T9395] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 122.266989][ T5981] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.268915][ T9395] overlayfs: overlapping lowerdir path [ 122.273188][ T5981] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.277461][ T5981] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.284307][ T5981] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 122.290274][ T5981] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.318737][ T9396] xfrm0 speed is unknown, defaulting to 1000 [ 122.418374][ T9396] chnl_net:caif_netlink_parms(): no params data found [ 122.473009][ T9409] overlayfs: failed to resolve './file1': -2 [ 122.540326][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.543504][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.548299][ T9396] bridge_slave_0: entered allmulticast mode [ 122.552326][ T9396] bridge_slave_0: entered promiscuous mode [ 122.557337][ T9396] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.560362][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.563426][ T9396] bridge_slave_1: entered allmulticast mode [ 122.567840][ T9396] bridge_slave_1: entered promiscuous mode [ 122.585712][ T839] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 122.613614][ T9396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.619466][ T9396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.663009][ T9396] team0: Port device team_slave_0 added [ 122.668386][ T9396] team0: Port device team_slave_1 added [ 122.728978][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.731971][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.744203][ T9396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.751106][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.754059][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.767876][ T839] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.769415][ T9396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.772659][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.780667][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 122.784664][ T839] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.790289][ T839] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.794123][ T839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.800082][ T839] usb 8-1: config 0 descriptor?? [ 122.835543][ T6081] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 122.843120][ T9396] hsr_slave_0: entered promiscuous mode [ 122.845537][ T9396] hsr_slave_1: entered promiscuous mode [ 122.847627][ T9396] debugfs: 'hsr0' already exists in 'hsr' [ 122.849550][ T9396] Cannot create hsr debugfs directory [ 122.977169][ T9431] dns_resolver: Unsupported content type (234) [ 122.999045][ T6081] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.003109][ T6081] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 123.006999][ T6081] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 123.010908][ T6081] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.017421][ T6081] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.020543][ T6081] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.032065][ T6081] usb 10-1: config 0 descriptor?? [ 123.057826][ T9396] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 123.063125][ T9396] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 123.069274][ T9396] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 123.074184][ T9396] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 123.123010][ T9396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.135196][ T9396] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.147397][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.150567][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.161037][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.164310][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.232969][ T839] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 123.309942][ T9396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.455393][ T9396] veth0_vlan: entered promiscuous mode [ 123.460699][ T9396] veth1_vlan: entered promiscuous mode [ 123.475391][ T9396] veth0_macvtap: entered promiscuous mode [ 123.479184][ T9396] veth1_macvtap: entered promiscuous mode [ 123.486377][ T9420] Invalid logical block size (257) [ 123.489494][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.495787][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.502122][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.505101][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.508858][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.511854][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.549361][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.550970][ T6081] usbhid 10-1:0.0: can't add hid device: -71 [ 123.551857][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.556914][ T6081] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 123.560710][ T6081] usb 10-1: USB disconnect, device number 10 [ 123.570693][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.573456][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.628231][ T9464] Invalid source name [ 123.725300][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 123.725311][ T40] audit: type=1400 audit(1758324089.413:542): avc: denied { mount } for pid=9467 comm="syz.7.1113" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 123.798243][ T9473] loop2: detected capacity change from 0 to 7 [ 123.804581][ T6680] Dev loop2: unable to read RDB block 7 [ 123.807286][ T6680] loop2: unable to read partition table [ 123.809605][ T6680] loop2: partition table beyond EOD, truncated [ 123.816879][ T9473] Dev loop2: unable to read RDB block 7 [ 123.819181][ T9473] loop2: unable to read partition table [ 123.821703][ T9473] loop2: partition table beyond EOD, truncated [ 123.824350][ T9473] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 123.982161][ T9481] cgroup: none used incorrectly [ 124.104957][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1123'. [ 124.111209][ T9490] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 124.114536][ T9490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.116129][ T9492] nbd: socks must be embedded in a SOCK_ITEM attr [ 124.130572][ T9490] ksmbd: Unknown IPC event: 1, ignore. [ 124.156316][ T9497] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 124.161534][ T9497] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 124.166653][ T9497] CPU: 1 UID: 0 PID: 9497 Comm: syz.2.1125 Not tainted syzkaller #0 PREEMPT(full) [ 124.170537][ T9497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.174995][ T9497] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 124.177236][ T9497] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 6a b7 40 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 124.184286][ T40] audit: type=1400 audit(1758324089.882:543): avc: denied { getopt } for pid=9505 comm="syz.7.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 124.185468][ T9497] RSP: 0018:ffffc90003e7fbf0 EFLAGS: 00010293 [ 124.190001][ T9501] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1127'. [ 124.197921][ T9497] [ 124.198684][ T9497] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887ae71a [ 124.201904][ T9497] RDX: ffff888031314880 RSI: ffffffff887ae766 RDI: 0000000000000005 [ 124.205167][ T9497] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 124.208105][ T9497] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90003e7fd88 [ 124.211214][ T9497] R13: ffffc90003e7fd88 R14: 0000000000000001 R15: ffff888037ae4800 [ 124.213796][ T9497] FS: 00007f12974336c0(0000) GS:ffff8880d67b4000(0000) knlGS:0000000000000000 [ 124.216924][ T9497] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.218981][ T9497] CR2: 00007f1297432f98 CR3: 00000000623b9000 CR4: 0000000000352ef0 [ 124.221261][ T9497] Call Trace: [ 124.222483][ T9497] [ 124.223690][ T9497] ? __pfx_bcsp_recv+0x10/0x10 [ 124.225628][ T9497] hci_uart_tty_receive+0x254/0x7e0 [ 124.227708][ T9497] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 124.229918][ T9497] tty_ioctl+0x580/0x1680 [ 124.231706][ T9497] ? __pfx_tty_ioctl+0x10/0x10 [ 124.233705][ T9497] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 124.236198][ T9497] ? hook_file_ioctl_common+0x145/0x410 [ 124.237892][ T9497] ? selinux_file_ioctl+0x180/0x270 [ 124.239551][ T9497] ? selinux_file_ioctl+0xb4/0x270 [ 124.241599][ T9497] ? __pfx_tty_ioctl+0x10/0x10 [ 124.243600][ T9497] __x64_sys_ioctl+0x18e/0x210 [ 124.245481][ T9497] do_syscall_64+0xcd/0x4e0 [ 124.247322][ T9497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.249685][ T9497] RIP: 0033:0x7f129658eba9 [ 124.251531][ T9497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.259059][ T9497] RSP: 002b:00007f1297433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.262315][ T9497] RAX: ffffffffffffffda RBX: 00007f12967d6180 RCX: 00007f129658eba9 [ 124.265055][ T9497] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000006 [ 124.268089][ T9497] RBP: 00007f1296611e19 R08: 0000000000000000 R09: 0000000000000000 [ 124.270535][ T9497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.273130][ T9497] R13: 00007f12967d6218 R14: 00007f12967d6180 R15: 00007ffeb3fc80a8 [ 124.276346][ T9497] [ 124.277662][ T9497] Modules linked in: [ 124.280210][ T9497] ---[ end trace 0000000000000000 ]--- [ 124.282626][ T9497] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 124.284674][ T9497] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 6a b7 40 f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 124.291879][ T9497] RSP: 0018:ffffc90003e7fbf0 EFLAGS: 00010293 [ 124.293895][ T9497] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff887ae71a SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 124.296455][ T9497] RDX: ffff888031314880 RSI: ffffffff887ae766 RDI: 0000000000000005 [ 124.299719][ T9497] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 124.302210][ T9497] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90003e7fd88 [ 124.304672][ T9497] R13: ffffc90003e7fd88 R14: 0000000000000001 R15: ffff888037ae4800 [ 124.308387][ T9497] FS: 00007f12974336c0(0000) GS:ffff8880d68b4000(0000) knlGS:0000000000000000 [ 124.311175][ T9497] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.313087][ T9497] CR2: 00007fefd6d72960 CR3: 00000000623b9000 CR4: 0000000000352ef0 [ 124.315267][ T9497] Kernel panic - not syncing: Fatal exception [ 124.317908][ T9497] Kernel Offset: disabled [ 124.319249][ T9497] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:43:22 Registers: info registers vcpu 0 CPU#0 RAX=ffff88810005fb80 RBX=ffff88810005fb80 RCX=0000000000070005 RDX=0000000000070006 RSI=ffff88802e98a200 RDI=ffffc90003d2f7e0 RBP=ffffc90003d2f810 RSP=ffffc90003d2f760 R8 =0000000000000001 R9 =ffffffff822211d8 R10=0000000000000000 R11=0000000000000000 R12=ffff88802e98e600 R13=ffffea0000ba6200 R14=0000000000000000 R15=0000000000070005 RIP=ffffffff8217180c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f53c7019880 ffffffff 00c00000 GS =0000 ffff8880d66b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c33bfc1 CR3=00000000219a3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000818181f8 Opmask01=00000000003fffff Opmask02=0000000003bfffff Opmask03=0000000020400004 Opmask04=00000000fffffffe Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584321a39c0 00005584321a39c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055843218ee30 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f53c69f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326f7416bf483 737326f21ac56559 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f7f0abdbe80032a1 737373762b3052e0 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003078 303d4e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d45 0d004e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002c1 0000000000000050 30302e464646463a 463700302e303a31 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558432189a00 00005584321985a8 0000000000000051 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3061722c3332 322c3232322c3132 322c3032322c4533 312c4433312c4333 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c4233312c4133 312c3733312c3633 312c3433312c3333 312c3133312c3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 316b2c35312c332c 312c30652d303030 3065343030307042 4132317633303030 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564b875 RDI=ffffffff9b1160e0 RBP=ffffffff9b1160a0 RSP=ffffc90003e7f5f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b1160a0 R15=ffffffff8564b810 RIP=ffffffff8564b89f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f12974336c0 ffffffff 00c00000 GS =0000 ffff8880d67b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1297432f98 CR3=00000000623b9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb3fc85b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb3fc85b6 00007ffeb3fc85bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1296612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1296612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1296612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1296612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1296612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1296612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12967a74a8 00007f12967a74a0 00007f12967a7498 00007f12967a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f129730d100 00007f12967a7460 00007f12967a7478 00007f12967a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f12967a74b8 00007f12967a74b0 00007f12967a74a8 00007f12967a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffea00016b8100 RCX=ffffffff820e0efc RDX=1ffffd40002d7021 RSI=ffffffff820e0f2a RDI=ffffea00016b8108 RBP=ffffea00016b8100 RSP=ffffc90003cdf7a8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=1ffff11004afe512 R12=0000000000000001 R13=0000000000000000 R14=ffffea00016b8100 R15=0000000000000000 RIP=ffffffff820e0f4f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa36fac1f98 CR3=000000004f1c3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000fcf802fe Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfa7d08c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfa7d0a46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdfa7d0a46 00007ffdfa7d0a4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c1aa12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c1aa12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c1aa12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c1aa12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c1aa12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c1aa12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff8221fcbb RBX=ffffc90004277748 RCX=ffffffff914f7a01 RDX=1ffff9200084eef2 RSI=ffffffff8221fcbb RDI=ffffffff8221fcbb RBP=ffffc900042777d8 RSP=ffffc90004277748 R8 =ffffffff914f7a9e R9 =0000000000000000 R10=ffffc90004277748 R11=00000000000121c8 R12=ffffffff81a6edc0 R13=ffffc90004277808 R14=0000000000000000 R15=ffff88802957a440 RIP=ffffffff8161efa9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f08f3acb440 CR3=000000004a332000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 766c6f7365726269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00322e6f732e766c 6f73657262696c2f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000