last executing test programs: 1m22.420377326s ago: executing program 1 (id=30): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x18, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, {[@ssrr={0x89, 0x7, 0xce, [@broadcast]}, @timestamp_prespec={0x44, 0x44, 0x95, 0x3, 0x3, [{@empty, 0x9d}, {@loopback, 0x512}, {@multicast1, 0x1ff}, {@loopback, 0x9}, {@broadcast, 0x200}, {@multicast1, 0x9}, {@loopback, 0x5}, {@private=0xa010101, 0x7}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x1}}}}}}, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x18, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, {[@ssrr={0x89, 0x7, 0xce, [@broadcast]}, @timestamp_prespec={0x44, 0x44, 0x95, 0x3, 0x3, [{@empty, 0x9d}, {@loopback, 0x512}, {@multicast1, 0x1ff}, {@loopback, 0x9}, {@broadcast, 0x200}, {@multicast1, 0x9}, {@loopback, 0x5}, {@private=0xa010101, 0x7}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x1}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000010) r2 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040)=0x5, 0x4) 1m22.414800268s ago: executing program 1 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) sysfs$2(0x2, 0x800, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x21, &(0x7f0000000000)=ANY=[@ANYBLOB='usrquota_block_hardlimit=9732\x00\x00']) 1m22.330462119s ago: executing program 1 (id=32): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000040)=0x12) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000000)={"dfa674ff", 0xb54, 0xe, 0x0, 0x233f8000, 0xd, "8fbe0e768b6cfb5c4e688896cc5045", "a5b6fa0f", "de6d11ed", "6fe9f2e2", ["2feab25bb22d96238f06c1be", "1fc6b8067f42d381d433107c", "0af9aeb3e3ff3062eec374f6", "03a4772860660df1e3d10e58"]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m22.130133964s ago: executing program 1 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000021000100000000000000000002002000000000000d000000080002"], 0x44}}, 0x20000040) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='overlay\x00', 0x2808002, &(0x7f0000000400)='workdir') r2 = syz_open_dev$dri(&(0x7f0000000200), 0x1ff, 0x680000) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x84, 0x40000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000440)=[0x0], 0x1}) syz_emit_ethernet(0xda, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2a1c99", 0x7, 0x11, 0x0, @empty, @mcast2, {[@srh], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "b0575c7b4df2bddabab59df4a56afe54ba6a5d5d0d170fca692c777338468608", "29accf2af44c0e1aaaaf532417a91cadd9e65f82310f80cf64f46c761191fda0a250498ce1b5c603debf9e05d8de03dc", "3d73abde0da6c68c8d2dab5346224f905b3b904310b3bd00975f0a9f", {"6cde9c5018586db672628c1415233979", "ba3df3d8a8490bce9cafc2ab6acde477"}}}}}}}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_io_uring_setup(0x117b, &(0x7f00000000c0)={0x0, 0x29f4, 0x10100, 0x3, 0x35f}, &(0x7f0000000140)=0x0, &(0x7f0000000440)=0x0) r10 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r10, 0x0, 0x0, 0x56, 0x200440c0, 0x1}) io_uring_enter(r7, 0x27e2, 0x0, 0x0, 0x0, 0x0) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x13b850, r0, 0x8000000) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x30, 0xffffffffffffffff, 0x10000000) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r13}}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000011c0)={&(0x7f0000001180)=[0x0], 0x1, r5, r6, 0x3, 0x0, 0x2, 0x802, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x49, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x3ff}) r14 = syz_clone(0x40000, &(0x7f0000000300)="bf2bee494ab911cead6748bd48765b041bd0375399605a287475e018cbbfb64c4cb57e4325a965a145de5451ac0d1b6370becbb1612bf555bca5561084ea79fe5b3771ede639452b45364cc14a0e3bac77319f2aae55e47ebeb8b0238c15472fbbc1e8adf8f663b7d906fa5c38da9a5184b5b570003f6804ba9902e96e47f8", 0x7f, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000500)="79a17c44f30598ed2742916216737097e17314c896d8ab7bb7f913f54d37e21a7065b30fb41775b98202177c235aecf00ca8f78a36871500e3dd82553780c01ee289fe476d258fd04d0f97bf972fd74618ecbe345f8707c633b51b4bac862dee4f94024ebb4ae267187bc6ed63076db2b66de1e838f7ee290a9b47c65b211acfd9dfa9a5ccf2e75184cc3fceb729f1e3ee75916a8d172b7d2a6a201371a89872cd182075d4477ca763cf3a4d1319d4d47a8a19d9b5") move_pages(r14, 0x0, &(0x7f0000000480), &(0x7f0000000480)=[0x0, 0x1, 0x809e, 0x9, 0x2, 0x617, 0x3, 0x8], &(0x7f0000000600)=[0x0], 0x4) 1m21.260575786s ago: executing program 1 (id=43): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r1, 0x400) r3 = dup3(r2, r1, 0x80000) read(r3, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r3, &(0x7f0000001d40)=""/4095, 0xfdef) (async) read$watch_queue(r3, &(0x7f0000001d40)=""/4095, 0xfdef) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1m19.989469704s ago: executing program 1 (id=60): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x8, @empty, 0x1}, @in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}, 0x47d9}], 0x38) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async) r3 = dup(r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x7, 0x1, 0xf06, 0x3, 0x34, 0x80, 0xb}, 0x9c) sendmsg$inet6(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000740)="bb", 0x1}], 0x1}, 0x20004000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x1, 0x26, 0xffffffb9, 0x1b}, 0x9c) (async) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000880), 0x280, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000ec0)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0x6540000000, 0xfffffffffffffff5, 0x0, 0x2, 0x11, 0xc, "41d0bc8a658635a8284faa9680ffd8ae1019e683c9ce1688599c2ff36e163e643155b04f99c6db5bd97b4f1bea35f631cef2ac8b956accb93fee1f23d23b9b13", "a5a73aead9c30def9d7a4f89f914b4db341dcea6d8b4891ff5d146d20c0c01e52888e45349ab782e88e7058a9b58c0dfc9a9a292430cbafef2b4fb3b37edcbb7", "cfa2d9dcf3ad287122b02c9325d08d6d0064568342802135bf2c187fa989e6d9", [0xe44, 0x3d2b]}}) mkdirat(r4, &(0x7f0000000000)='./file0\x00', 0x1e0) 1m19.897021904s ago: executing program 32 (id=60): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x8, @empty, 0x1}, @in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}, 0x47d9}], 0x38) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async) r3 = dup(r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x7, 0x1, 0xf06, 0x3, 0x34, 0x80, 0xb}, 0x9c) sendmsg$inet6(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000740)="bb", 0x1}], 0x1}, 0x20004000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x1, 0x26, 0xffffffb9, 0x1b}, 0x9c) (async) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000880), 0x280, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000ec0)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0x6540000000, 0xfffffffffffffff5, 0x0, 0x2, 0x11, 0xc, "41d0bc8a658635a8284faa9680ffd8ae1019e683c9ce1688599c2ff36e163e643155b04f99c6db5bd97b4f1bea35f631cef2ac8b956accb93fee1f23d23b9b13", "a5a73aead9c30def9d7a4f89f914b4db341dcea6d8b4891ff5d146d20c0c01e52888e45349ab782e88e7058a9b58c0dfc9a9a292430cbafef2b4fb3b37edcbb7", "cfa2d9dcf3ad287122b02c9325d08d6d0064568342802135bf2c187fa989e6d9", [0xe44, 0x3d2b]}}) mkdirat(r4, &(0x7f0000000000)='./file0\x00', 0x1e0) 51.209777791s ago: executing program 0 (id=412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaac3f, 0x14, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 51.037812346s ago: executing program 0 (id=415): r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedreceive(r0, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a0104000000000000007e49365789d34e94b8fd8c60a533dea7000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e86f469eb08000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 51.037397437s ago: executing program 0 (id=416): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x4, 0x6, 0x0, @remote, @local}, {0x1, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfe}}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2000000000000008, 0x5, 0x3) syz_clone3(&(0x7f0000000080)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/113, 0x71}], 0x1) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x64, 0x19, 0x1, 0x70bd29, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0xf, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @fd=r1}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804) 50.905355272s ago: executing program 0 (id=418): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0xe, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYBLOB="347fbdfa8b96485c46a298746fda952b1a75"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x26}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000000)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x0, r4}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x27}}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000000400)=""/4096, 0x1000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=r9], 0x18}}, 0x0) write$binfmt_script(r6, &(0x7f00000017c0)={'#! ', './bus', [{0x20, '-'}, {0x20, '\xc7\x9f\xd7\xb0A\x00m\x99\x15\xff\xf9\xaal\xd5\xa2g+\x83\xcc\xe0\xe6\x93\xea\xc4\xf1\xf8-\x82\xea\x0f!4\t\xe3\fhxd(:\x85%\v(\xd9\xc0\x91\a\xa7Hb\'\xc7\xd6LXA\xc4\xa8\xff\xeb\xc1\xc7\xa0\xf4\xa2\xcf\x9b\x95\xcc]\xc1\xc2\xdfq\x84,L\x92\x06t\xa0c8\xb0b>\xe3\x9b\x87*\xe8D\v\xb0\xde\xe5p[\xc5\xbf\xda1\x84\x0e|\x19\xa0\xccx\xd4C\xea\xdaV\xae2j\xe8\xf4\xce\xb3\xaf\xb0\f\x14h78\xd2\xb0k\xf0\x9c\xa7\bv\xaf1v\x15p\x1e\xc4\xb4\xcc\xc0\xdd\x01a0\xdc\x89\\yN\xd6w/LO\xea\tG\ai\xcd\xd6.\xb9~\xac\xfc|\xd0qE\x9di\xa5d\xe3L\xa1u-\x01\x12Ilo\x12\x00'/205}, {0x20, '#!@'}, {0x20, 'workdir'}], 0xa, "64b9d3b4525f828c6bc37fd141330ce7f6ae1e9f9e01dc5da0ae50c8521b0c6d3591c2c621b28c1a4112d24de653b8a8d0985f307e5764b0c5b209f1632bb246c5a089a17a42b72f5303f9976b8ad610d3da463513b634538a909fb581c7b5e51d0ae804decc59bccbd1d2bb86bccf665f5256e6357869fd1faa9f1082f08b240d20dcce45c1bef17692ac6e74caf147f80741cbc836076cfe790437ae157569f028316f1ecb8d1108907d96c563f0c0eccf241b20dcd3a9b01f98c654cdae3827d9deedf79d063317547edf21a9e1451d4f801cd753865888ef27cd12b7075373d2e7253c700c100876e11030cfa114"}, 0x1d5) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x4, 0xeee8f002, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 50.699263538s ago: executing program 0 (id=421): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x40080c0) 50.212912585s ago: executing program 0 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x7c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x22, 0x4, "adf3f9aadf6ed3c05b99ddf168d58b01e9e215cc9e1e1a5850b79d3085b4"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x7c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x22, 0x4, "adf3f9aadf6ed3c05b99ddf168d58b01e9e215cc9e1e1a5850b79d3085b4"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 50.1289919s ago: executing program 33 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x7c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x22, 0x4, "adf3f9aadf6ed3c05b99ddf168d58b01e9e215cc9e1e1a5850b79d3085b4"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x7c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x22, 0x4, "adf3f9aadf6ed3c05b99ddf168d58b01e9e215cc9e1e1a5850b79d3085b4"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 19.690247101s ago: executing program 5 (id=905): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x80, 0x15) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, 0x0) 19.689610876s ago: executing program 5 (id=906): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x1b1203, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0x4, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0082006c325f64726f7073000000000500870000000000"], 0x4c}}, 0x8) 19.669921796s ago: executing program 5 (id=907): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x122) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x80044d0d, &(0x7f0000000040)={'syztnl1\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000001010400000a000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800a000100482e3234558c62e98a4093a6ec186d7887c78e4d94841a1750b80889e153a9546665d5ce4644c22f5d1bdb827066457439b6d9b3b5eed26373f65335ae16c7bef35428a77847c92ab2e175fe361d6a682203cf36a938b2d890fa6d4365ec31f6059ac04f2cf8de28882d9fe408ae306cc80ce0225c8b0c0e02d3d7be5fb271e940d63329c141658d371327cd824db496fb1905818ffa59f41d7e3677721b717f3575b96af965532a090e0846e9f461999df6cd7b1763abe70456fc82aa4d464291b0d2c310a7197271fd5fc1baf8ea0087f171d0edc4d286dd29e4216a871bc3c1fdef29a44d70ba6a35db3313feeb65c87c237bb5a6"], 0x48}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000001c0)={0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) ioctl$SIOCX25SCUDMATCHLEN(r11, 0x89e7, &(0x7f0000000140)={0x32}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r10, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 19.429506732s ago: executing program 5 (id=909): r0 = socket$packet(0x11, 0x2, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000300)=[{&(0x7f0000000940)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/227, 0xe3}], 0x1, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r2, &(0x7f0000000440)="11", 0x1, 0x2400d011, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x6, 0x6, @broadcast}, 0x14) socket$packet(0x11, 0x2, 0x300) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munlockall() (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) (async) gettid() (async) process_vm_writev(r1, &(0x7f0000000300)=[{&(0x7f0000000940)=""/248, 0xf8}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/227, 0xe3}], 0x1, 0x0) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) sendto$packet(r2, &(0x7f0000000440)="11", 0x1, 0x2400d011, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x6, 0x6, @broadcast}, 0x14) (async) 19.309626893s ago: executing program 5 (id=911): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffffff}]}}]}, 0x44}}, 0x2000c800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) pwrite64(r2, &(0x7f0000000800)="5b8529ae2468f4df9c", 0x9, 0x7) r6 = syz_open_dev$I2C(&(0x7f0000000380), 0x98, 0x8000) ioctl$I2C_RETRIES(r6, 0x701, 0x3) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r8, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r9, &(0x7f0000000100)={{0x3, @bcast, 0x10000006}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8014) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e1d, 0x5, @remote, 0x6}, 0x1c) sendto$inet6(r10, &(0x7f0000000400)="80006466d3805699", 0x8, 0x20050008, &(0x7f0000000000)={0xa, 0x6e26, 0x805, @mcast1, 0x43}, 0x1c) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r10, 0x8010671f, &(0x7f0000000200)={&(0x7f00000002c0)=""/186, 0xba}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@delqdisc={0x240, 0x25, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {0x2, 0x9}, {0xfff1, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfb8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x2, 0xf8}}, @TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xc, 0x81, 0x10, 0x1, 0x7, 0xfff, 0x9}}, {0x16, 0x2, [0x9, 0x8, 0x5, 0x3, 0x0, 0x80, 0xa, 0x100, 0xfee9]}}, {{0x1c, 0x1, {0x3, 0x5, 0xec9, 0x0, 0x0, 0x7, 0x0, 0x7}}, {0x12, 0x2, [0x2, 0x38ca, 0x4, 0xfff7, 0x300, 0x2, 0x8]}}, {{0x1c, 0x1, {0x0, 0x7, 0x8, 0x1ff, 0x1, 0x0, 0x4, 0x4}}, {0xc, 0x2, [0x2, 0x5, 0x7, 0x6]}}, {{0x1c, 0x1, {0x40, 0x27, 0x31, 0x7, 0x2, 0xb146, 0xfffff801, 0x9}}, {0x16, 0x2, [0x6, 0x94b, 0x8d7d, 0xf, 0x3, 0x8, 0xfff, 0x8000, 0xa]}}, {{0x1c, 0x1, {0x2c, 0xfe, 0x8, 0x7fff, 0x1, 0x1000, 0x7fff, 0x2}}, {0x8, 0x2, [0x4, 0xfffa]}}]}, @TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x4, 0x9, 0x80000001, 0x1, 0xdc, 0x2, 0x2}}, {0x8, 0x2, [0x2, 0x8]}}, {{0x1c, 0x1, {0x5, 0x0, 0x0, 0xfe000000, 0x0, 0x200, 0x0, 0x5}}, {0xe, 0x2, [0xd, 0x4, 0x900, 0x8, 0x6]}}, {{0x1c, 0x1, {0x2, 0xc0, 0xb, 0x1, 0x1, 0x5, 0x2, 0x3}}, {0xa, 0x2, [0x0, 0xa, 0x1]}}, {{0x1c, 0x1, {0x9, 0xfd, 0x311, 0x2, 0x0, 0x6, 0x6, 0x7}}, {0x12, 0x2, [0xfff7, 0x3, 0x43a, 0x200e, 0xffff, 0xa000, 0x9]}}, {{0x1c, 0x1, {0x40, 0x3, 0x5, 0x6, 0x2, 0x0, 0x800, 0x3}}, {0xa, 0x2, [0x1ff, 0x8000, 0x8000]}}]}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xdc51}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xfffffffe}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 15.999517132s ago: executing program 5 (id=971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x6804, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x6805, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000002c0)={0x0, 0x4, 0x1000, 0x4, 0x2, [], [0x2a, 0xffff, 0xfffffffd, 0x7d0], [0x9, 0xd5, 0x2, 0xfe41], [0x9, 0xffffffff, 0xfffffffffffffffd, 0x6]}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0x9, 0x4, 0xf, 0x1}, {0x5, 0x7, 0x1, 0xffffffff}, {0x7, 0x1, 0x0, 0x6041}, {0xb4, 0x6, 0x6, 0xe000}]}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xfc, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x20001b, 0x0) close(r0) 12.159298681s ago: executing program 2 (id=1029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000000000000b00000000030014"], 0x28}}, 0x0) 11.239727145s ago: executing program 2 (id=1045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_STATUS_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0xb05, &(0x7f0000000480)={0x0, 0xa795, 0x0, 0x0, 0x2f5}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0}) (async, rerun: 32) io_uring_enter(r2, 0x47be, 0x1, 0x0, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async, rerun: 32) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2002}], 0x1, 0x7f) (async) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000009c0), 0x4) 11.056941947s ago: executing program 2 (id=1047): r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='attr/current\x00') read$eventfd(r0, 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES8=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) syz_fuse_handle_req(r1, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000340)={0x50, 0x0, 0x40, {0x7, 0x28, 0x7f, 0x9010, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x10001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x2b, 0x3, 0x300900, 0x0, 0x3, 0xb8, 0x7f, 0x0, 0x0, 0x4, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000003c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="58010000100001000000000000000000fc0100000000000000000000000000000000000000000000000000000000000008000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa000000000000000000000000030000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000989d159c000000000000000000000000000000000000000000000000000a000000cd000000000000001c0017000000000000000000000000000000000000000000000000004c001400636d6163286165732900"/272], 0x158}, 0x1, 0x0, 0x0, 0x10}, 0x0) 11.05516289s ago: executing program 2 (id=1050): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e21, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9aa3}, @in={0x2, 0x4e24, @remote}], 0x4c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r4, &(0x7f0000000780)}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffe01}, 0x1c) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000140)={0x10, 0x3, &(0x7f00000002c0)="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"}) 11.043872213s ago: executing program 2 (id=1052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="f93c5df4176a"}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004904}, 0x88c8) 11.001698621s ago: executing program 2 (id=1054): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000580)='block_bio_remap\x00', r0, 0x0, 0x4b}, 0xb) sync() recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x3, &(0x7f00000001c0)=""/95, 0x5f}, 0x40000101) 5.289626467s ago: executing program 4 (id=1121): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{}, 0x82, 0x4, 0x7}) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x681, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x681, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000000c0)=@x86={0x7, 0x7, 0xfc, 0x0, 0x4, 0x8, 0x9, 0xb, 0xac, 0xd, 0xff, 0x2, 0x0, 0x3, 0x9, 0x1, 0x0, 0x3, 0x99, '\x00', 0x9, 0x8}) (async) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000000c0)=@x86={0x7, 0x7, 0xfc, 0x0, 0x4, 0x8, 0x9, 0xb, 0xac, 0xd, 0xff, 0x2, 0x0, 0x3, 0x9, 0x1, 0x0, 0x3, 0x99, '\x00', 0x9, 0x8}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000100)={0x3, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x2, 0x1ff, 0x20, @mcast1, @dev={0xfe, 0x80, '\x00', 0x16}, 0x80, 0x8, 0x200}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x81, 0x36a5, 0x1, @private2, @loopback, 0x8, 0x40, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24040041}, 0x4044094) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x2, 0x6, 0xa03, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x8000) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x2, 0x6, 0xa03, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x8000) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000006c0)=0x20, 0x4) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000700)={@dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010102}, 0x8) syz_open_dev$dri(&(0x7f0000000740), 0x2, 0x840) (async) syz_open_dev$dri(&(0x7f0000000740), 0x2, 0x840) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x198, r7, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x168, 0x3, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x91, 0x2, "00ee8311b035b237d25c1a56055df2e09d5bace150fadf94e194fb4005dfafeae5084d233f251247932543779afbde61bcabb4bc4b0d6c48fd8b0f0449ad73b38eb8fa791163647c4a3860d060c477792b56fca73afd374fdc75ae743d2969601c5a0e90e59932b3c1e7de29318186e2d533395261de3fd7e425581fa6e1b26289e9bfc2cc6986086577dfb9e4"}}, {0xcc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc7, 0x2, "e1f307ebadcced19ad06b6f3e12b196d876caab702262341aa3af328c2799088f50dd9768d9d7db2d90e4cf4df2042f3ed42e62c67cbf2f1a157a846de1d66cce2d122711151bd98bc2d1a828e3d155188fb64c0f3f252494f9caf8d5f647b82752f88225625ada22b2511f5823553c6ba2a56d9637b515293ebdc7b17d199de390cc4474b5c987310cfbbe4a2b5a395315cd75eb093cd0b77f4bef191ab47c43ec9046d3e7096185462e7467f1024b1044bdd11045e28e87439ddf4669ae4596c894f"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x198}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, 0x2, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0xf}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3b, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8000) syz_usbip_server_init(0x5) (async) r9 = syz_usbip_server_init(0x5) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) syz_emit_ethernet(0x371, &(0x7f0000000c00)={@local, @empty, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x5}}, {@mpls_mc={0x8848, {[{0x1000}, {0xc455, 0x0, 0x1}, {0x2}], @ipv6=@icmpv6={0x1, 0x6, "37f79a", 0x327, 0x3a, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@routing={0x87, 0x2, 0x0, 0x10, 0x0, [@mcast1]}, @routing={0x2b, 0xc, 0x0, 0x6, 0x0, [@empty, @loopback, @dev={0xfe, 0x80, '\x00', 0x35}, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @routing={0x6, 0x6, 0x1, 0x9, 0x0, [@private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x39}]}], @param_prob={0x4, 0x0, 0x0, 0x8, {0x4, 0x6, "acebbc", 0x0, 0x32, 0x0, @remote, @mcast1, [@dstopts={0x33, 0x4, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0xf001, [0xfffffffffffffff8]}}, @enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0x8, 0x18, '\x00', [@calipso={0x7, 0x58, {0x1, 0x14, 0xfc, 0x84f, [0x8000000000000001, 0x0, 0x1, 0x100000000, 0x153, 0x811, 0xffffffffffffff6a, 0x0, 0x1, 0xc]}}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x58, {0x3, 0x14, 0x7f, 0xfffe, [0x9, 0x8000000000000000, 0x2, 0x80000000, 0xcb, 0x2, 0x7, 0x1, 0xffffffffffff7fbe, 0x2]}}, @jumbo={0xc2, 0x4, 0xffffffff}]}, @srh={0x4, 0xe, 0x4, 0x7, 0x7, 0x40, 0x7, [@loopback, @rand_addr=' \x01\x00', @empty, @empty, @mcast2, @remote, @loopback]}], "a067f4afc1b21c53aeaddb74b598f4463b46a0b6baabc6ee3355502964317117be3ca17a5c891d50e82a8dc9779c8f0773942242890fec35e74d5bb8fc41fa80d8e895185145d2ea93a73837443897b0fade45e7ed7ce3711ac3e1f3070647ae3059fb1b5a9a32113131691f26667a4f99f631855f626ee7b4c78f1375f1ed005c1df53201bbdd733e220e58af06a2bffe4fdd76c5394c439bb049735d1b0eef0097bacb035025103ecb175967135eabebee0bd3e3fb107675f6cf157c02845efee6c15747e5ee"}}}}}}}}, &(0x7f0000000f80)={0x1, 0x1, [0xba0, 0xca1, 0x691, 0xdf8]}) setsockopt$ax25_SO_BINDTODEVICE(r10, 0x101, 0x19, &(0x7f0000000fc0)=@rose={'rose', 0x0}, 0x10) timerfd_create(0x2, 0x80800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000), 0x484400, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000), 0x484400, 0x0) getpeername$l2tp(r10, &(0x7f0000001040)={0x2, 0x0, @local}, &(0x7f0000001080)=0x10) (async) getpeername$l2tp(r10, &(0x7f0000001040)={0x2, 0x0, @local}, &(0x7f0000001080)=0x10) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000014c0)={0x1, 0x4b, "986e78fd2a00ec083bbedfddd1f0deaeb3f88bdc125dc669841ce2ec83cac09394ba5b0f6853b012f0411ec970b3aa9ecdd18af123ed1f10bea2d96229975d48c5ed5210196198dd43adc5"}) 4.709583813s ago: executing program 4 (id=1122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) (async) r4 = socket(0x10, 0x803, 0x0) (async) r5 = syz_open_dev$vbi(&(0x7f0000000980), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000009c0)={0x4, @raw_data="fb388b746a26349507a674e9ef69f7aa53906d8b12fb7baa1bf45426fe178803b2a131113fcedf4d1661cb56032aef30649b98eb309b8ce5bf1f1e7c7c14c2affa408ee421732b58804fb9f940ba369da4ef81c8d3db45575c4770b5a4c3e01f3f0bb5069bdb53536849724e93088039c103b46a689f55414a5dbc942c8f5620b7b9f471751c57aa5fb527fca1784d0687a5f921fe72fa53dfee8b205d2ae04c9cf9a99d1d2d1f10a11b7c1f1a05caf05e9033b69356e66c036c5cf9ca636cfa8e247faaf584efaf"}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {}, {0xffff, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000240)={0x3, &(0x7f00000000c0)=[{0x1, 0x1, 0x6, 0xffff}, {0xb1a, 0x6, 0x8, 0x7fffffff}, {0x4, 0x3, 0x4, 0x6}]}, 0x10) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r11 = fcntl$dupfd(r10, 0x406, r10) write$binfmt_script(r11, &(0x7f0000000100), 0xfffffd9d) sendto$rxrpc(r7, &(0x7f00000005c0)="cd05ebab0996bcfd9696105adf26f2de3482141a54346f5184586db7b6cf576e4af2ceee3a92641b7e359d3e120b79ec1b361ff6f5c563e642960f9732b8574a56e163518bfe1ae7be8c88249b21cb1752383f0dda578ecd5c23bf8daf42deb86d46ca3ab87f7fd3b51b89f424e39e70366a6ec10136dbc7884dd970cc891a5ce28ff7f5fcf22208c14670b9b1f9564c7f65d75bcd9c81d0fc60fdc235e4b40c8b355918a50a1b8c5b092bdab96644f860efebf962bdf83826ad75ed0fac30f1ae42003c0c0e583c7c559adefcda93e87832028e94da10d1a1188feafb1edc", 0xdf, 0x20008091, &(0x7f00000002c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010101}}, 0x24) write$P9_RXATTRWALK(r11, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80) close_range(r9, 0xffffffffffffffff, 0x0) socket(0xf, 0xa, 0x5) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x9, 0x11, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 4.569729072s ago: executing program 4 (id=1123): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) r1 = syz_usb_connect(0x4, 0x1187, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x98, 0xdd, 0xf7, 0xff, 0x1b3d, 0x9303, 0xf31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1175, 0x4, 0x2, 0x6, 0xd0, 0x2, [{{0x9, 0x4, 0x61, 0x7, 0xe, 0xed, 0x60, 0x42, 0xff, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "8dd3acf9957c"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xfffc, 0x3, 0xba}, {0x6, 0x24, 0x1a, 0x3, 0x13}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x2, 0xae}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x2, 0xc1, 0x6}, @dmm={0x7, 0x24, 0x14, 0xd, 0xd776}]}], [{{0x9, 0x5, 0x0, 0x4, 0x40, 0x7, 0x9, 0x7, [@generic={0x5, 0x6, "12d007"}, @generic={0x11, 0x22, "990bae28e22f1ae94ddf17f7da8ef5"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x20, 0x0, 0x4, [@generic={0x2e, 0x5, "231df28b9877633f23f1249362abc3c1e98ac0fb1d0e3a34e85e0bffc61085b7c69ee5cf0293ee9ed7aed6a5"}, @generic={0x63, 0x22, "4dc52b8de19faaaf89d88188ecd920493449344e518d955685aae554931b36e2d9b8063189a257e76728771cc50047e524de1aad7fd5647df59f8bd90cbf9c57337091b122117f0dbc52635b376e0676eaf93e1032aafb01eedaeb47ae7a4f285f"}]}}, {{0x9, 0x5, 0xd, 0x11, 0x50, 0xf4, 0x5, 0xc5, [@generic={0x16, 0x8d543ebc7f594173, "4949bf9c15aed56937bdbe9eea6e0d680ac392b4"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x7, 0x7f, 0x11, [@generic={0x1f, 0x30, "076a0e967b51b937ee690c884aae2992585bca1ad70c6740b34eaf99bc"}, @generic={0x11, 0xb, "1067695894e011265e2a4d207168c3"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x1, 0x2, 0xe, [@generic={0x7c, 0xe, "e9df57008c9b2b3b3ff6be79a2393205e6f2b78758b62c21adaae5b6bce8a4d822fa43c21d36a338baf36ce810bec984fc74ffe921b5ef928c9d32c7a4a624ddfed52176f9f983c9c351c691e3415ffa3cddbda7b5999911635ba0a1a85afd8512dd4658ef1bd3a0c8536ea9c474fcc2dcc3382298acf0005fc7"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xfa, 0x6}]}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0xfd, 0x1, 0x4, [@generic={0x2a, 0x1, "ad41a9a932cfe7f6353afd59e7dba61a7720ac50fd2f65b942d5708fe0f5298ade82ea6c8b3b8ad7"}]}}, {{0x9, 0x5, 0x88, 0x0, 0x3df, 0x3, 0x8, 0x4, [@generic={0x68, 0x3f, "1edf073bebd08d047eaf42006a60a23c38f458dd1d7a24672dda11dbd31188da8f84445924c83c626e67f11a2767307f319d9a2c54e78aaba6db435f82e4479c97684353a7a1f3aacbbc5e5c8e7b94a2ab006206a6e79b184085cdbb73d2ef14455064577e4a"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x56, 0xd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x1000}]}}, {{0x9, 0x5, 0x2, 0x4, 0x0, 0xde, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xffff}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x81, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xffff}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x1, 0x0, 0x9, [@generic={0xaf, 0x2, "02ed7125ff794536975c986810f49ab9ef12c5ea9d99bd02bb164c83891fcaac5ece155775a11519761f6dc4a6432423dc8bd4d334f1b6cb329c7310b9504e7933397a366c98639d36cdbe1f4c43319dca7063a85fe4f7f4bc90d3dde62d647191af6f63f36940deb3741a0690bb095aac281ff9ffa173b31468e4d5c87e851db0bdec9606423a3c48d0a2271470cc39f8f328e22b3ac4ce72d9bdf083e906d7639d996276692940d9ae09539a"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x2, 0x4, 0xc6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x7ff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x81, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x92ac}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x5, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2e, 0x101}]}}]}}, {{0x9, 0x4, 0x7f, 0x6, 0x10, 0xca, 0xa, 0x79, 0x2, [@generic={0x73, 0x0, "2cf854137416b696a8e22787bfcbcdb6fe5cb97997182776173eecbe67db3b59283c203ad505653b7a2bc24ff8bb7355201a689661f1f5c568a4c6ba1546a328ad343a20fdcf055a8b5232fed3e31d6a47c5e2b841b9d3dc0145473db6f5a812e22dad3fe01c3564356202acc2a0d4cd61"}], [{{0x9, 0x5, 0x8, 0x0, 0x8, 0xff, 0x5, 0x8, [@generic={0x65, 0x0, "37b3568cb960b85d172f445fac388101ac3c644a49c3c00963af05bac3f39801021c9e74012f26872b75c346347f015366d7d73295ab87e05db5c69f90f49ff453f168b4976740cd387e9c0ce6dc6d97a1da4da9e9670b52fee42f5f5d58c4114a17cf"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0xd, 0xf4, 0x9, [@generic={0xd5, 0x24, "28661f0f505433872bed60b4d8a9c122f188dcb15beae633d37a92f0cdd8686fdbe01ac75e8dba3e7dca989d957d8647e317386784889a30088090f8ea969b0ab0dc89930814550c29368561293f3173867cefc85a11b172cba4c828cb438b7615eed4f2380e5e1f02ff2fb2ec52740d6be939ef585ba3b484ac44f863dca6728c8e7c1be46a71ac4ab49b8bf322e6a21e1d9cbc6a08839f01e3ac3a2932a488b4c3168d7a876321a58c15007f1f0edfe4daa781014d3a4e8b1a21a0df712bdb05f6070f6378888977d0f9916ab541a7b6c85e"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x3, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x3, 0x2, 0x8d, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x8, 0x5, 0x0, [@generic={0x37, 0xf, "1616ad46d08a77c4fefecc36093d889a0054e56ba3f56c01981735191d7310552aa90f10fe76f737c0c4ddd3535ed4252344884cfa"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x9, 0xf, 0xc6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x6}]}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0xd, 0x0, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xcd, 0x3}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x47, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x5}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x5, 0x7, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x16, 0xff1}]}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x9, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x3, 0x7, 0x3, [@generic={0xaa, 0xd, "218da33b6773dec35606c9c4e34ea58dd93dfadd25999b7931ea9aa3996b6b779ada0a016cf1d69299e31f506a60098a662f40f09a00f50425bafbccf318712974dbc5dee37dbbcc2de90a393a5bee72e32714fd283c7dc8f338b77d46bf1ef440d0f237c3b2278aa217a43fd695e3eb6793f5fd369109f4ec87945061724ce6c7a4fa18ed07d4c85433aa11d87a8009fb0bce6d9c78b104560e201d4927f7445cb398fbb694b8cd"}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x1, 0x2}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x3, 0xe, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6}, @generic={0xff, 0x6, "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"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0x8, 0x5c, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x4d}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x40, 0xe0, 0x1, [@generic={0x6, 0x24, "d44f454a"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x5, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd9, 0x5}]}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0x7, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x101}]}}]}}, {{0x9, 0x4, 0xef, 0x0, 0x1, 0x85, 0xc4, 0x9b, 0x23, [@generic={0xc3, 0x7, "333ed38f9beb9c0db16f446f77bd7e09a586522fbc356722190a446cbb5eda703465ff2a18495cfc6c8db4a738abe5ba26245988b037190bc0391f32fc1cf0ef6a6b511dcf5a0e68dae29e228f2f7dea49ab83061627b5798d8cb93606e74c2eac05d43a8bd2e113e7b69b1222dff4c828420ff1ac24c3af6cfe8dcf344a678c79cd0e084c91b1ad6dce5ea243622c5d8265b851a086b07b16d3d6bf4dfce24a2e7f06d00a179cf1413e91e6d6f8f6166d650bc07f5b80ceb7ae4082a8d1874486"}], [{{0x9, 0x5, 0x2, 0x4, 0x0, 0x9, 0xa, 0x1, [@generic={0xeb, 0x22, "5c5132551cce1efa482b2ad35e7e33b835abbc92f1fd60b57712e4709fafb101665a563996a97f06db7f4b357151951d7c3910ba97e8fe39355d860b9d7a68ed0356e7cb76a43bb00ec0ad66dc18e44fb2ecb08fd27942459f10b75c37075b5c65c7240755553bfeb32ac7ffce50ac207615e3f390a47491086deec32cc2f85fbc626ad422454743c20156fe6706dfd9c1e3ee43b933d621a96c9e091c8615f7f9262b8e753c30ffa6a04b095de1f6f5b488c4ecc69652f6a3d26af70d0b17b975cfebbc665f5b698ded0c40570b3dc6e5e33683dac87413b53283312dc35bbc65da8a101084266c32"}, @generic={0x9f, 0x24, "67d1dbcc621c7503509038f973adafbc9a96ec4222babcdfee095eac5e0a2232c62f85f40ff8443602a2808ec9bf4d9f9d63a534bc601ac3580aa6a4289b7a6452cbc9f0f4eb249e0135d9b5575b692598c04b68764105cf54359f92f74619c698a4275fad63da20cb4d56eb257fb22da4803a0d0baa40882c90db4d60e9737fd89a8dd6c831bfb734a926330d233cbc62b2f0a500e8e409c6ecf768b2"}]}}]}}, {{0x9, 0x4, 0xb7, 0xa, 0xc, 0xff, 0x5, 0x7b, 0x2, [@hid_hid={0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x235}}, @hid_hid={0x9, 0x21, 0x7fc3, 0xa, 0x1, {0x22, 0xc70}}], [{{0x9, 0x5, 0x4, 0x1, 0x40, 0x7c, 0x0, 0xe, [@generic={0xa2, 0x4, "5970d34d698a9d3a7c0e11f5a17cc3c7b824ee6367e2187e499bc0beb9657dedbb5f2bff50434a120316f87a0adbd1548d2b64da2d4a6321c632a1de1b2ef9b9edf3d480ccfa1e325ce2fde3c294e04e2d6f34b863947cf7d4408627608f3bf0c3b3f69c574e2b608c2d73ba0be5d75e8994f7a36bf9eec0f67da7ab064a9facd51eddb45de93771376ec022526c9d308afe6150cdd512313755cf0c3e02691b"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x5, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc3, 0xd583}, @generic={0x55, 0xe, "8c89ad0f8dc3c25f8a20e9a92aa80227d13b3a3de274957c183a194b803b71a7ab9137dc93c673a141cc35a05b40fb7e7c41b20df3d39f43d16f67cc7394181276ac0eb895ec8621a9af19a2ec2bcfdf159b91"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x5, 0x5, 0x6, [@generic={0x6f, 0x23, "7c49b03a5a560a2fb6824e2f3ffed4372e8989852034704859f0b68a77f1c835647163b236ee3b6d8247e952a8144484bc94b72a699b7ee3d0eec2ddaea8cb2d75946b7c52c18f6b2d9889847a5c1341592679c6a2999f0225227a6e0e74db1f73d2325038361885c01ba90972"}, @generic={0xb1, 0xd, "232b1ced9603fd63c30473de5dc9495d76dca71d0f3214b41fecfee94afe1c1c005a0e5dbd48644336eaf56dad5da60bdc99a827ba1f4303cf6cfe2f2d62353d4bc85fd4354637fd6f8ca76e48d526aa9b2babc565bf0b61452ccf84b10c10fdb3cb67c1d20f0a7b2727faeadcc4deb1835895874a101835e1799e4486efe93d54a149a48bf0effba15109853f43430284ad38ce4dc27bed37eab9974f971ac5f790873ec878f0ab03c58d5c1dedf0"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x5a, 0x0, 0x4, [@generic={0x76, 0xd, "de0ca762b9214a14387771f3eb4e2a7b4c195bab41b08ddfdc5a1f907343ab4adafd4a659ed2696f899e6397a5b233d5b4ef4ad5b8f7785b5660a0e4229a95420948036fd992bc12273395e81415de318480524f77fd4b9accf22e3192642cca8766ac5262be974dd3742827724b61d861d3d459"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x8, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8204}]}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x5, 0x8, 0x7a, [@generic={0x79, 0x11, "92d5bbdf9f84fe032a7a805ab54f8c7bbc29ff1c0aaede0a07344c800edd32246e3c76bfd91c3618c854767d40934d7fd655ae313feff532729d0300280a4aa2c89ca16a2e47420aa6805ccadd7c6ccede03d2846f8e82a0aa6e9d5abb4aed92daca3912ff11ca68e964f936c2cbc57fc910351ba678d9"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x75, 0xa, 0xe, [@generic={0x5, 0x9, "9493a9"}, @generic={0xe7, 0x7, "b5de9ad8fc41cbc535f0e785098cade78df56b4bd70238da96bb36f703651879918caf317fe8f807c888d45f43a4ebcb9fcf65a16d0a12b8d6593e12723844a51539d225d3b934f45f787a91ca205cd2e4f0058bc2f9ca8ebe3a930fbbed0ed082221364f34116b1dbabe28a3bafa9c88f3a8cbcfb7c5cff6d350f19bd7945cbd94457fc35042c0e4b0055715c75cc9f13648eb3220debc45d45976f94913fd7fe8ef3fcca5b542707dfe46db2f47bd9f442d8b7156726652e9aec4a661f09de72e68d05be107aeff7b72a7a38c4834c03136825b6aa49145980e8112878185594ad90b4f8"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x5, 0xf, 0x90, [@generic={0xa5, 0xc, "f6057403ffb8982261e09e2ea57a86e8a132601b63a95a95acbb3053f2129697e887b20ed396f734eec28bc3dbb008f42bb901aad153e6f3bd81100471263141a4caa8d1dfc138d1261bf38cac4cefbaf292a833bd51d8601bd79a5d041bcd0a46e996824fdef7ea1cacd53cdc77aacfe94046197c88aad0c908b72163a8ed4f05d1363abae1263bbcb647e2d1efdc25079f9d619c581b7e819ec4222fb5bc1e90dd1b"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x4, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x7}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x71, 0x5, 0x5, [@generic={0xed, 0x7, "66a07d497d6537c4e06a6e39c1845ea22bf0d34a4bf360baba1efda1e1728d643e08def5b704751b9d980f81c3490c65d3308afc4099cbf54165a00d7d347a87661f8716af8cc373fc80866cb8be7a9deb51e37332567c68d9209d9e0929da99f56e5594fc1f3323c07a2332815de0e224755e103bba4fbbb5e0167e1ef6b4e282df1160761b2594aae6700cdfb5df6fb015c05d63bafc81d9848d66281a14490f5dfeb53f70aa2c61603dc6ca05ea82bdcad5c471ba18147dae30e70cf3a4a0909085746463146d3cff8282ef2a6e64f1cab8bb28eebd7df0a13c513376095efadee35af954694632e944"}, @generic={0xbd, 0x23, "048a9ecfd67649e5cea9d01f12cc216c11fe59e43b54f90379a0a245e4895d58a8c3b52abb11e47dd65f782ea7b78571bc5c736b780f4fcb8e55daa392e2f0c5710d49b298b5c4754b005c5ed9b803b3c0ac16767945818e8a8984c050ca9d9ddb830c83c8e8ff803f05db1f5b3c1af65ef91af7aec9f58446f99fd595c94961672a9407bbd5ce4eb929b54ba26ee7500e1930e608bc5fb16a6412b335f387513791b7c0f03c7cc53245b1dbfb623dc20c4c1dac8f290d42df3f89"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0xb, 0x6, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x6}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x7, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x2}]}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x6, 0x0, 0x4, 0x40, 0xff}, 0x4b, &(0x7f0000000100)={0x5, 0xf, 0x4b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x12, 0xf8, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x6, 0xc0}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "149ea83e196c9fb0a453e54f1102351b"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "c3e97ef0c04fc74c46b0f462c88685b0"}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1809}}, {0xe5, &(0x7f00000014c0)=@string={0xe5, 0x3, "0ee61530789e97460cb60ae207befb5938721548af45bf3f8d68116a49874713cc15839a18879a983a6c32fe6195cfcee2a8b866b080fc070521d24d09c24446a69fad195cdf7e6ab0516b58ba850ad19cfcb7a4d19b8ef0d3e7a6d074c1940609fb01dc23533c768e54ab3dd7adf1f659d0269848dc30a98e29d40986fda9014072b5764221a6399db306984f1c3e5c50217b600022fd8f7317efb5ff6a19e1f69aabbd1505d7a88449f0a9cf6a76e247b02d97baf30b35d0bdcbc1b5bdd2e4019854ec405c18e604641a4c621e386569c8304f6e600fd42386b98fa61e5e6ba9fce7"}}]}) syz_usb_control_io(r1, &(0x7f00000017c0)={0x2c, &(0x7f00000015c0)={0x0, 0x4, 0x98, {0x98, 0xf, "101c8be142a5aa0f59774f7b340da5ebdeafec75bba12bf2407143465c9f3fe6c440052e5cc52412edc6b8b8eadc795b637bb2c7dea0a222097784909248c94bf382fcd5fc787e1c0e25f8dc2487f7efe66ce074673b5598c056072956ba6bcd7e76d664579eda995ede6668c7b549818e48e6a2c7150784dda8397dc45ea9070b78e84a2afc448acd0a0b489765924b408453c69dc2"}}, &(0x7f0000001d00)={0x0, 0x3, 0x45, @string={0x45, 0x3, "5653670651800796caaa6ab49e79afccfb456cff5278113af9eefc7f27bbf1afed838b066ddc41640076a301c8bf0f122476ccd600dc6ebc2e0f5e56c2f4ff5b6f357b"}}, &(0x7f0000001700)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x1, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2d3f6d331cf49dc56fa7e9d38520ac9d"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xfe, 0x3, 0x0, 0x181e, 0xe4}]}}, &(0x7f0000001740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x1, 0xf, "86f1db47", "bf88708f"}}, &(0x7f0000001780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x14, 0x0, 0x7, 0xb, 0x5, 0x40, 0x7}}}, &(0x7f0000001c40)={0x84, &(0x7f0000001800)={0x20, 0x10, 0x84, "295ed9599becb301fe15134747897498ebcbaf66b2ebaa94a9258af25ab8744add6ef89974a707e58dd00ddc52384667b09e5e70d07f8e63bfb7e3d11058c744d50a8d0fcc7cd9dd44cadd9912327a84e9765cce855573045d7da0e6ef96ffeeab6483f2a576958d81fa5639c025d3a2902caa8615128f488384acc07b0a699d47dd0052"}, &(0x7f00000018c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001900)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000001980)={0x20, 0x0, 0x4, {0x160, 0x8}}, &(0x7f00000019c0)={0x40, 0x7, 0x2, 0x7ffd}, &(0x7f0000001a00)={0x40, 0x9, 0x1}, &(0x7f0000001a40)={0x40, 0xb, 0x2, "8858"}, &(0x7f0000001a80)={0x40, 0xf, 0x2, 0x611}, &(0x7f0000001ac0)={0x40, 0x13, 0x6, @local}, &(0x7f0000001b00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001b40)={0x40, 0x19, 0x2, "e730"}, &(0x7f0000001b80)={0x40, 0x1a, 0x2, 0xa85}, &(0x7f0000001bc0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001c00)={0x40, 0x1e, 0x1, 0x7}, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000003e1100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) 3.869715879s ago: executing program 4 (id=1124): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x1, 0x20000006, 0x0, 0x0, 0xc}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389ee8f8d9776159aa63668d3114", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a000000000000950000000000000026e1cd0bef5dc2eec87f979f205a355188cc0dc897cbb266b0cdc6429a84d7f00c11821f92cb581543330650512f0cd0183ef42629a2f5dcf115c230f8d5637385ab7cafcf94abdd29f1a1c82f41ea62464d442c83400ff6fadf22d1d25b9f63f3b5945c6258b59319d9282e0ab499d7914801fcd4a00e00"/163], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xb5d5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x23) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 3.869159913s ago: executing program 4 (id=1125): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000680), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) openat$incfs(r1, &(0x7f0000000040)='.log\x00', 0x111800, 0x180) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f00000029c0)=0x2, 0x4) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x13f, 0x0) 3.807677803s ago: executing program 4 (id=1126): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x0, 0x2c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0xc, @mcast1, 0xf7fffffe}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) write$binfmt_misc(r8, &(0x7f0000000980), 0xfdef) splice(r5, 0x0, r8, 0x0, 0x81, 0x2) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x5}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r12, 0x0, 0xffffff4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x31) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x802, 0x2003) 2.391483979s ago: executing program 3 (id=1129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10100, 0xfffffffd, 0xd5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x72}, 0x2c) io_uring_enter(r2, 0x27e2, 0x0, 0x7, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x84) 2.319822855s ago: executing program 3 (id=1130): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) 2.318854162s ago: executing program 3 (id=1131): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x43bce, 0x10100, 0x3, 0x2ef}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="d8", 0x1}], 0x1}}], 0x1, 0x20000010) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x10000) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x800046f3, 0x4, 0x40, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 2.317465578s ago: executing program 3 (id=1132): r0 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1, 0xb, 0x0, "fbda6b21f1d7479797795318a9b4b19471c838f51ef5dfaee256e99c476c937d", 0x2036315a}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x14) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f00000003c0)=[@rdmsr={0x66, 0x18}, @out_dx={0x6a, 0x28, {0xaea5, 0x1, 0x6000}}, @cpuid={0x64, 0x18, {0x0, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xec, 0x2}}, @set_irq_handler={0xc8, 0x20, {0x67, 0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x68c}}, @wr_drn={0x68, 0x20, {0x0, 0x2}}, @wr_crn={0x67, 0x20, {0x0, 0x3}}, @set_irq_handler={0xc8, 0x20, {0x83, 0x1}}], 0x118}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000540)="66baf80cb8ee09d887ef66bafc0c66ed2e420f611c48c402791ecfb8010000000f01d966baf80cb8301a7b84ef66bafc0ced67f2a7c74424007d000000c744240219f9f5a7c7442406000000000f011c240f01c4b9800000c00f3235001000000f30460f794829", 0x67}], 0x1, 0x2, &(0x7f0000000600)=[@cstype3={0x5, 0xc}], 0x1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@gettfilter={0x5c, 0x2e, 0x0, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x1, 0xe}, {0x3, 0x1e}, {0xfff1}}, [{0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0xac}, {0x8, 0xb, 0xf1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x180) getsockopt$sock_buf(r4, 0x1, 0x3d, &(0x7f0000000280)=""/165, &(0x7f0000000200)=0xa5) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 2.159971948s ago: executing program 3 (id=1133): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18, 0x40001}}], 0x4000000000002b3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x9, 0x80800) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000900)={0x4002, 0x0, 0x1, r6, 0x1}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000080)={0x4002, 0x0, 0x1, r6, 0x5}) close(0x3) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f00000002c0)=0x30) 2.019845608s ago: executing program 3 (id=1134): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lseek(r1, 0x9, 0x0) read$msr(r1, &(0x7f0000019540)=""/102400, 0x19000) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000c, 0x810, r2, 0x74234000) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$sierra_net(0x7, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xa, 0x2, 0x10, 0x8, 0x0, 0xc}, {0x9, 0x5, 0x0, 0x2, 0x20, 0x4, 0x3, 0x4f}, {0x9, 0x5, 0x0, 0x3, 0x40, 0x2, 0x9, 0x3}}}}}}]}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="932100004bccb89db165a6fc0b0001006272696467980000040002800800290041f9ffeb"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) ioctl$EVIOCRMFF(r4, 0x83c0550b, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000540)=@newtaction={0xe0, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_vlan={0xc8, 0x18, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x91, 0x6, "2c850ca5491dc62df6f97ddd9114f5802e192248e95eddf389f35f5fed0f8a7f7862c8c10cf0f1e85530a9ab4ba822b132a6de91a0260707ed17a1fe11c7bb59bf7f89d40f033c41bc37993c66b01ceebec115cc679191444d8b4a9b79819d33e78a46018ba9fffc14505a157f316b6d10aaa2da6389bddee3544efd852fbbff790da2fef4c7a4d02ac77f8573"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000055}, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000140)=0x12) close_range(r2, r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) close_range(r6, r2, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000004c0)={r7, 0x1}, &(0x7f0000000500)=0x8) 0s ago: executing program 34 (id=971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x6804, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x6805, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000002c0)={0x0, 0x4, 0x1000, 0x4, 0x2, [], [0x2a, 0xffff, 0xfffffffd, 0x7d0], [0x9, 0xd5, 0x2, 0xfe41], [0x9, 0xffffffff, 0xfffffffffffffffd, 0x6]}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0x9, 0x4, 0xf, 0x1}, {0x5, 0x7, 0x1, 0xffffffff}, {0x7, 0x1, 0x0, 0x6041}, {0xb4, 0x6, 0x6, 0xe000}]}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xfc, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x20001b, 0x0) close(r0) kernel console output (not intermixed with test programs): ion failed: -22 [ 76.209951][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.212553][ T6026] usb 5-1: device descriptor read/64, error -71 [ 76.450767][ T6026] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 76.580844][ T6026] usb 5-1: device descriptor read/64, error -71 [ 76.691092][ T6026] usb usb5-port1: attempt power cycle [ 77.030849][ T6026] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.051255][ T6026] usb 5-1: device descriptor read/8, error -71 [ 77.290758][ T6026] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 77.311814][ T6026] usb 5-1: device descriptor read/8, error -71 [ 77.421167][ T6026] usb usb5-port1: unable to enumerate USB device [ 79.096865][ T40] audit: type=1400 audit(1766333691.623:417): avc: denied { write } for pid=6926 comm="syz.0.257" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.308148][ T40] audit: type=1400 audit(1766333691.833:418): avc: denied { mounton } for pid=6930 comm="syz.0.258" path="/proc/232" dev="proc" ino=16502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 79.933995][ T40] audit: type=1400 audit(1766333692.463:419): avc: denied { write } for pid=6940 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.978811][ T40] audit: type=1400 audit(1766333692.503:420): avc: denied { bind } for pid=6942 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.990769][ T40] audit: type=1400 audit(1766333692.503:421): avc: denied { node_bind } for pid=6942 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 80.007590][ T6945] PKCS8: Unsupported PKCS#8 version [ 80.041050][ T6666] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 80.068227][ T53] usb 8-1: USB disconnect, device number 4 [ 80.100585][ T6947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 80.102770][ T6952] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 80.153828][ T6959] netlink: 180 bytes leftover after parsing attributes in process `syz.3.266'. [ 80.157407][ T6959] netlink: 3 bytes leftover after parsing attributes in process `syz.3.266'. [ 80.188273][ T40] audit: type=1400 audit(1766333692.713:422): avc: denied { bind } for pid=6961 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.222895][ T40] audit: type=1400 audit(1766333692.753:423): avc: denied { remount } for pid=6964 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 80.243963][ T6968] veth1_to_bond: entered allmulticast mode [ 80.246598][ T6967] veth1_to_bond: left allmulticast mode [ 80.267595][ T6975] netem: incorrect ge model size [ 80.269289][ T6975] netem: change failed [ 80.288437][ T40] audit: type=1400 audit(1766333692.813:424): avc: denied { ioctl } for pid=6961 comm="syz.4.268" path="socket:[15773]" dev="sockfs" ino=15773 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.365879][ T6983] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 80.374033][ T6985] tmpfs: Bad value for 'mpol' [ 80.376178][ T40] audit: type=1400 audit(1766333692.903:425): avc: denied { read } for pid=6984 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.454134][ T6988] netlink: 64 bytes leftover after parsing attributes in process `syz.2.277'. [ 80.463054][ T6988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.277'. [ 80.465773][ T6988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.277'. [ 80.478197][ T6989] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 80.482315][ T6989] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 80.484794][ T6989] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 80.486968][ T6989] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 80.557897][ T6997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.278'. [ 80.626327][ T40] audit: type=1400 audit(1766333693.153:426): avc: denied { open } for pid=6996 comm="syz.2.278" path="/dev/ptyq9" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 80.638318][ T7005] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7005 comm=syz.2.278 [ 80.850524][ T7012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.283'. [ 81.172698][ T7029] overlayfs: missing 'workdir' [ 81.184154][ T7029] ISOFS: Unable to identify CD-ROM format. [ 81.330559][ T7035] capability: warning: `syz.2.291' uses 32-bit capabilities (legacy support in use) [ 82.249033][ T7047] mmap: syz.2.297 (7047) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.295213][ T7052] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 82.298504][ T7052] netlink: 'syz.3.298': attribute type 2 has an invalid length. [ 82.302069][ T7052] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 82.305535][ T7052] netlink: 'syz.3.298': attribute type 3 has an invalid length. [ 82.308218][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 82.491779][ T7062] ipt_REJECT: ECHOREPLY no longer supported. [ 83.354792][ T6983] overlayfs: statfs failed on './file0' [ 83.354866][ T6989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.462163][ T7073] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.306'. [ 83.482728][ T7076] input: syz1 as /devices/virtual/input/input7 [ 83.516323][ T4626] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.523812][ T7079] IPVS: set_ctl: invalid protocol: 136 172.30.1.3:20001 [ 83.546065][ T7081] trusted_key: syz.3.309 sent an empty control message without MSG_MORE. [ 83.613678][ T53] libceph: connect (1)[c::]:6789 error -101 [ 83.616490][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 83.780976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.876115][ T53] libceph: connect (1)[c::]:6789 error -101 [ 83.878940][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 84.114083][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 84.114097][ T40] audit: type=1400 audit(1766333696.643:441): avc: denied { bind } for pid=7120 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 84.126634][ T40] audit: type=1400 audit(1766333696.643:442): avc: denied { getopt } for pid=7122 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.401198][ T53] libceph: connect (1)[c::]:6789 error -101 [ 84.403718][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 84.412447][ T7086] ceph: No mds server is up or the cluster is laggy [ 84.486498][ T40] audit: type=1400 audit(1766333697.013:443): avc: denied { write } for pid=7146 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.494071][ T40] audit: type=1400 audit(1766333697.023:444): avc: denied { setopt } for pid=7146 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.509084][ T40] audit: type=1400 audit(1766333697.033:445): avc: denied { mounton } for pid=7146 comm="syz.3.328" path="/73/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 84.532034][ T40] audit: type=1400 audit(1766333697.063:446): avc: denied { read } for pid=7146 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.560937][ T40] audit: type=1400 audit(1766333697.093:447): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 84.695606][ T7184] program syz.3.333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.700169][ T7184] netlink: 'syz.3.333': attribute type 5 has an invalid length. [ 84.839951][ T40] audit: type=1400 audit(1766333697.353:448): avc: denied { read } for pid=7204 comm="syz.2.340" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.873803][ T40] audit: type=1400 audit(1766333697.353:449): avc: denied { open } for pid=7204 comm="syz.2.340" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.884511][ T40] audit: type=1400 audit(1766333697.363:450): avc: denied { ioctl } for pid=7204 comm="syz.2.340" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.996635][ T7224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.208870][ T7240] bond1: entered allmulticast mode [ 85.211077][ T7240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.453370][ T7260] nfs: Unknown parameter 'barrier' [ 85.537057][ T7266] __nla_validate_parse: 4 callbacks suppressed [ 85.537067][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 85.608867][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'. [ 85.639521][ T7274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.644202][ T7274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.665448][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.360'. [ 85.672497][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.360'. [ 85.717962][ T7282] vlan2: entered promiscuous mode [ 85.719892][ T7282] bridge0: entered promiscuous mode [ 85.961138][ T7303] 9p: Could not find request transport: vyrtio [ 85.989674][ T7313] netlink: 108 bytes leftover after parsing attributes in process `syz.4.370'. [ 86.240907][ T53] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 86.333819][ T7345] netlink: 44 bytes leftover after parsing attributes in process `syz.2.375'. [ 86.345238][ T7345] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 86.346060][ T7345] @0Ù: renamed from bond_slave_1 (while UP) [ 86.401061][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 86.419836][ T53] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.423893][ T53] usb 8-1: config 0 has no interface number 0 [ 86.426919][ T53] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.435678][ T53] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 86.439409][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.453023][ T53] usb 8-1: config 0 descriptor?? [ 86.471582][ T53] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 86.488197][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 86.492376][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 86.496030][ T7357] netlink: 'syz.2.378': attribute type 18 has an invalid length. [ 86.499360][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 86.646320][ T7370] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 86.650323][ T7370] overlayfs: overlapping lowerdir path [ 86.717103][ T7369] netlink: 'syz.0.383': attribute type 3 has an invalid length. [ 86.721893][ T7378] netlink: 104 bytes leftover after parsing attributes in process `syz.3.368'. [ 86.786578][ T7383] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 86.797844][ T7383] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 86.805144][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.815755][ T7386] bond0: entered allmulticast mode [ 86.817973][ T7386] bond_slave_0: entered allmulticast mode [ 86.820464][ T7386] bond_slave_1: entered allmulticast mode [ 86.832769][ T7386] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 86.879085][ T7390] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd0": -EINTR [ 86.883700][ T7391] efs: device does not support 512 byte blocks [ 86.900740][ T7391] device does not support 512 byte blocks [ 86.900740][ T7391] [ 86.963824][ T7397] unsupported nlmsg_type 40 [ 87.213948][ T7411] xt_l2tp: invalid flags combination: 8 [ 87.221073][ T7411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7411 comm=syz.0.394 [ 87.717160][ T53] usb 8-1: USB disconnect, device number 5 [ 88.034486][ T7449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39098 sclass=netlink_route_socket pid=7449 comm=syz.2.402 [ 89.235840][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 89.235850][ T40] audit: type=1400 audit(1766333701.763:471): avc: denied { watch watch_reads } for pid=7525 comm="syz.4.426" path="/dev/dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.291627][ T7527] 9pnet_virtio: no channels available for device syz [ 89.299477][ T40] audit: type=1400 audit(1766333701.823:472): avc: denied { ioctl } for pid=7531 comm="syz.2.427" path="socket:[19591]" dev="sockfs" ino=19591 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.311571][ T40] audit: type=1400 audit(1766333701.823:473): avc: denied { ioctl } for pid=7531 comm="syz.2.427" path="socket:[19592]" dev="sockfs" ino=19592 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.499662][ T7189] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.595201][ T7189] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.640776][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.641053][ T7556] overlayfs: missing 'lowerdir' [ 89.644299][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.647941][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.654978][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.657407][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.675587][ T7189] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.681698][ T7553] tmpfs: Bad value for 'mpol' [ 89.746227][ T7189] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.809062][ T7554] chnl_net:caif_netlink_parms(): no params data found [ 89.848888][ T40] audit: type=1400 audit(1766333702.373:474): avc: denied { create } for pid=7576 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.856885][ T40] audit: type=1400 audit(1766333702.383:475): avc: denied { map } for pid=7576 comm="syz.2.438" path="socket:[19645]" dev="sockfs" ino=19645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 89.866743][ T40] audit: type=1400 audit(1766333702.383:476): avc: denied { read } for pid=7576 comm="syz.2.438" path="socket:[19645]" dev="sockfs" ino=19645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 89.877338][ T40] audit: type=1400 audit(1766333702.383:477): avc: denied { getopt } for pid=7576 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.901327][ T6026] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 89.921319][ T40] audit: type=1400 audit(1766333702.443:478): avc: denied { setattr } for pid=7581 comm="syz.2.439" name="XDP" dev="sockfs" ino=19651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.931639][ T7554] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.933927][ T40] audit: type=1400 audit(1766333702.463:479): avc: denied { create } for pid=7581 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 89.934823][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.941151][ T40] audit: type=1400 audit(1766333702.463:480): avc: denied { ioctl } for pid=7581 comm="syz.2.439" path="socket:[19654]" dev="sockfs" ino=19654 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 89.954990][ T7554] bridge_slave_0: entered allmulticast mode [ 89.958806][ T7554] bridge_slave_0: entered promiscuous mode [ 89.973035][ T7589] nfs4: Bad value for 'source' [ 89.974098][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.977944][ T7554] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.981215][ T7554] bridge_slave_1: entered allmulticast mode [ 89.985469][ T7554] bridge_slave_1: entered promiscuous mode [ 90.006172][ T7189] bridge_slave_0: left allmulticast mode [ 90.008694][ T7189] bridge_slave_0: left promiscuous mode [ 90.011167][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.031442][ T6026] usb 9-1: device descriptor read/64, error -71 [ 90.270967][ T6026] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 90.319055][ T7605] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.354966][ T7189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.360130][ T7189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.365511][ T7189] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 90.369621][ T7189] bond0 (unregistering): Released all slaves [ 90.422152][ T6026] usb 9-1: device descriptor read/64, error -71 [ 90.440254][ T7189] bond1 (unregistering): Released all slaves [ 90.465461][ T7554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.471793][ T7554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.491426][ T7554] team0: Port device team_slave_0 added [ 90.495572][ T7554] team0: Port device team_slave_1 added [ 90.513229][ T7554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.515668][ T7554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.526500][ T7554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.534472][ T7554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.537406][ T7554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.541408][ T6026] usb usb9-port1: attempt power cycle [ 90.549052][ T7554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.603797][ T7554] hsr_slave_0: entered promiscuous mode [ 90.606942][ T7554] hsr_slave_1: entered promiscuous mode [ 90.610031][ T7554] debugfs: 'hsr0' already exists in 'hsr' [ 90.612685][ T7554] Cannot create hsr debugfs directory [ 90.778765][ T7554] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 90.794045][ T7189] hsr_slave_0: left promiscuous mode [ 90.797403][ T7189] hsr_slave_1: left promiscuous mode [ 90.800189][ T7189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.804534][ T7189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.808236][ T7189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.810569][ T7189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.821679][ T7189] veth1_macvtap: left promiscuous mode [ 90.823563][ T7189] veth0_macvtap: left promiscuous mode [ 90.825857][ T7189] veth1_vlan: left promiscuous mode [ 90.827989][ T7189] veth0_vlan: left promiscuous mode [ 90.891054][ T6026] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 90.911531][ T6026] usb 9-1: device descriptor read/8, error -71 [ 91.102777][ T7189] team0 (unregistering): Port device team_slave_1 removed [ 91.130009][ T7189] team0 (unregistering): Port device team_slave_0 removed [ 91.150913][ T6026] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 91.171815][ T6026] usb 9-1: device descriptor read/8, error -71 [ 91.281286][ T6026] usb usb9-port1: unable to enumerate USB device [ 91.418482][ T7554] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.428464][ T7554] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 91.434836][ T7554] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 91.512190][ T7554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.528558][ T7554] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.535433][ T7188] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.538365][ T7188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.551414][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.554400][ T4626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.676105][ T7554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.710883][ T5949] Bluetooth: hci1: command tx timeout [ 91.770327][ T7189] IPVS: stop unused estimator thread 0... [ 91.849874][ T7554] veth0_vlan: entered promiscuous mode [ 91.858074][ T7554] veth1_vlan: entered promiscuous mode [ 91.885985][ T7554] veth0_macvtap: entered promiscuous mode [ 91.894117][ T7554] veth1_macvtap: entered promiscuous mode [ 91.908179][ T7554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.917444][ T7554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.924402][ T7189] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.927337][ T7189] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.931698][ T7189] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.934488][ T7189] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.987397][ T7180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.990951][ T7180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.011581][ T7188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.014171][ T7188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.350860][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 92.461298][ T6026] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 92.616738][ T7669] __nla_validate_parse: 11 callbacks suppressed [ 92.616752][ T7669] netlink: 116 bytes leftover after parsing attributes in process `syz.3.451'. [ 92.624907][ T7670] netlink: 116 bytes leftover after parsing attributes in process `syz.3.451'. [ 92.627360][ T6026] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 92.642083][ T6026] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.645778][ T6026] usb 10-1: Product: syz [ 92.647682][ T6026] usb 10-1: Manufacturer: syz [ 92.649679][ T6026] usb 10-1: SerialNumber: syz [ 92.675551][ T6026] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 92.704596][ T9] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 92.754977][ T7679] veth0_to_bridge: entered promiscuous mode [ 92.760998][ T7679] netlink: 36 bytes leftover after parsing attributes in process `syz.2.455'. [ 92.797891][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 92.810631][ T7187] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.815271][ T7187] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.818897][ T7187] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.822527][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 92.825760][ T7187] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.892572][ T7679] configfs: Unknown parameter 'acl' [ 92.915765][ T6026] usb 10-1: USB disconnect, device number 2 [ 92.973172][ T7678] veth0_to_bridge: left promiscuous mode [ 93.494198][ T7716] (syz.2.464,7716,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 93.498142][ T7716] (syz.2.464,7716,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 93.503432][ T7716] (syz.2.464,7716,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 93.506953][ T7716] (syz.2.464,7716,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 93.515740][ T7716] IPv6: sit1: Disabled Multicast RS [ 93.681524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.784427][ T7718] support for the xor transformation has been removed. [ 93.791264][ T9] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 93.794227][ T9] ath9k_htc: Failed to initialize the device [ 93.798272][ T6026] usb 10-1: ath9k_htc: USB layer deinitialized [ 93.800798][ T5942] Bluetooth: hci1: command tx timeout [ 93.815997][ T7736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.822497][ T7738] bridge0: port 3(syz_tun) entered blocking state [ 93.827256][ T7738] bridge0: port 3(syz_tun) entered disabled state [ 93.833643][ T7738] syz_tun: entered allmulticast mode [ 93.839759][ T7738] syz_tun: entered promiscuous mode [ 93.844238][ T7738] bridge0: port 3(syz_tun) entered blocking state [ 93.846410][ T7738] bridge0: port 3(syz_tun) entered forwarding state [ 93.913485][ T7742] use of bytesused == 0 is deprecated and will be removed in the future, [ 93.917187][ T7742] use the actual size instead. [ 94.011682][ T7752] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 94.015537][ T7752] SELinux: failed to load policy [ 94.095115][ T7757] team0 (unregistering): Port device team_slave_0 removed [ 94.101141][ T7757] team0 (unregistering): Port device team_slave_1 removed [ 94.741368][ T7769] team0 (unregistering): Port device team_slave_0 removed [ 94.745805][ T7769] team0 (unregistering): Port device team_slave_1 removed [ 94.778936][ T7774] cgroup: Name too long [ 94.782208][ T7775] overlay: ./file0 is not a directory [ 94.820431][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 94.820446][ T40] audit: type=1400 audit(1766333707.343:489): avc: denied { listen } for pid=7770 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 94.842992][ T40] audit: type=1400 audit(1766333707.343:490): avc: denied { accept } for pid=7770 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 94.888620][ T7782] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 94.900825][ T7782] netlink: 224 bytes leftover after parsing attributes in process `syz.2.482'. [ 94.904955][ T7782] NCSI netlink: No device for ifindex 0 [ 94.944461][ T40] audit: type=1400 audit(1766333707.473:491): avc: denied { create } for pid=7783 comm="syz.4.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 94.963028][ T6005] libceph: connect (1)[c::]:6789 error -101 [ 94.965655][ T6005] libceph: mon0 (1)[c::]:6789 connect error [ 94.971057][ T40] audit: type=1400 audit(1766333707.473:492): avc: denied { shutdown } for pid=7783 comm="syz.4.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.005530][ T7784] ceph: No mds server is up or the cluster is laggy [ 95.163948][ T40] audit: type=1326 audit(1766333707.693:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7787 comm="syz.2.484" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2fd38f7c9 code=0x0 [ 95.309306][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.487'. [ 95.368549][ T7810] FAULT_INJECTION: forcing a failure. [ 95.368549][ T7810] name failslab, interval 1, probability 0, space 0, times 1 [ 95.374517][ T7810] CPU: 3 UID: 0 PID: 7810 Comm: syz.4.488 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.374548][ T7810] Tainted: [L]=SOFTLOCKUP [ 95.374554][ T7810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.374563][ T7810] Call Trace: [ 95.374570][ T7810] [ 95.374576][ T7810] dump_stack_lvl+0x16c/0x1f0 [ 95.374621][ T7810] should_fail_ex+0x512/0x640 [ 95.374651][ T7810] ? fs_reclaim_acquire+0xae/0x150 [ 95.374682][ T7810] should_failslab+0xc2/0x120 [ 95.374704][ T7810] __kmalloc_noprof+0xeb/0x910 [ 95.374730][ T7810] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 95.374758][ T7810] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 95.374779][ T7810] tomoyo_realpath_from_path+0xc2/0x6e0 [ 95.374804][ T7810] ? tomoyo_profile+0x47/0x60 [ 95.374830][ T7810] tomoyo_path_number_perm+0x245/0x580 [ 95.374848][ T7810] ? tomoyo_path_number_perm+0x237/0x580 [ 95.374869][ T7810] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.374891][ T7810] ? find_held_lock+0x2b/0x80 [ 95.374936][ T7810] ? find_held_lock+0x2b/0x80 [ 95.374961][ T7810] ? hook_file_ioctl_common+0x144/0x410 [ 95.374990][ T7810] ? __fget_files+0x20e/0x3c0 [ 95.375016][ T7810] security_file_ioctl+0x9b/0x240 [ 95.375039][ T7810] __x64_sys_ioctl+0xb7/0x210 [ 95.375060][ T7810] do_syscall_64+0xcd/0xf80 [ 95.375083][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.375100][ T7810] RIP: 0033:0x7f5fa0b8f7c9 [ 95.375115][ T7810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.375130][ T7810] RSP: 002b:00007f5fa19ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.375147][ T7810] RAX: ffffffffffffffda RBX: 00007f5fa0de5fa0 RCX: 00007f5fa0b8f7c9 [ 95.375158][ T7810] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 95.375167][ T7810] RBP: 00007f5fa19ed090 R08: 0000000000000000 R09: 0000000000000000 [ 95.375176][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.375213][ T7810] R13: 00007f5fa0de6038 R14: 00007f5fa0de5fa0 R15: 00007ffd0d094ed8 [ 95.375239][ T7810] [ 95.375247][ T7810] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.871077][ T5942] Bluetooth: hci1: command tx timeout [ 95.953189][ T7844] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd5": -EINTR [ 95.984723][ T7843] FAULT_INJECTION: forcing a failure. [ 95.984723][ T7843] name failslab, interval 1, probability 0, space 0, times 0 [ 95.994445][ T7843] CPU: 0 UID: 0 PID: 7843 Comm: syz.3.500 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.994473][ T7843] Tainted: [L]=SOFTLOCKUP [ 95.994479][ T7843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.994488][ T7843] Call Trace: [ 95.994494][ T7843] [ 95.994501][ T7843] dump_stack_lvl+0x16c/0x1f0 [ 95.994526][ T7843] should_fail_ex+0x512/0x640 [ 95.994548][ T7843] ? fs_reclaim_acquire+0xae/0x150 [ 95.994572][ T7843] should_failslab+0xc2/0x120 [ 95.994591][ T7843] __kmalloc_noprof+0xeb/0x910 [ 95.994615][ T7843] ? tomoyo_encode2+0x100/0x3e0 [ 95.994640][ T7843] ? tomoyo_encode2+0x100/0x3e0 [ 95.994658][ T7843] tomoyo_encode2+0x100/0x3e0 [ 95.994682][ T7843] tomoyo_encode+0x29/0x50 [ 95.994700][ T7843] tomoyo_realpath_from_path+0x18f/0x6e0 [ 95.994722][ T7843] ? tomoyo_profile+0x47/0x60 [ 95.994745][ T7843] tomoyo_path_number_perm+0x245/0x580 [ 95.994761][ T7843] ? tomoyo_path_number_perm+0x237/0x580 [ 95.994781][ T7843] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.994800][ T7843] ? find_held_lock+0x2b/0x80 [ 95.994844][ T7843] ? find_held_lock+0x2b/0x80 [ 95.994867][ T7843] ? hook_file_ioctl_common+0x144/0x410 [ 95.994896][ T7843] ? __fget_files+0x20e/0x3c0 [ 95.994919][ T7843] security_file_ioctl+0x9b/0x240 [ 95.994939][ T7843] __x64_sys_ioctl+0xb7/0x210 [ 95.994957][ T7843] do_syscall_64+0xcd/0xf80 [ 95.994978][ T7843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.994993][ T7843] RIP: 0033:0x7f0075b8f7c9 [ 95.995005][ T7843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.995019][ T7843] RSP: 002b:00007f0076a73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.995034][ T7843] RAX: ffffffffffffffda RBX: 00007f0075de5fa0 RCX: 00007f0075b8f7c9 [ 95.995044][ T7843] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 95.995053][ T7843] RBP: 00007f0076a73090 R08: 0000000000000000 R09: 0000000000000000 [ 95.995061][ T7843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.995070][ T7843] R13: 00007f0075de6038 R14: 00007f0075de5fa0 R15: 00007ffc5b7a8f78 [ 95.995091][ T7843] [ 95.995108][ T7843] ERROR: Out of memory at tomoyo_realpath_from_path. [ 96.225797][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 96.306481][ T40] audit: type=1400 audit(1766333708.833:494): avc: denied { read } for pid=7869 comm="syz.5.507" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.326769][ T40] audit: type=1400 audit(1766333708.833:495): avc: denied { open } for pid=7869 comm="syz.5.507" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.337834][ T40] audit: type=1400 audit(1766333708.833:496): avc: denied { ioctl } for pid=7869 comm="syz.5.507" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.366676][ T6101] hid-generic 0005:0C45:1010.0003: item fetching failed at offset 0/1 [ 96.371476][ T6101] hid-generic 0005:0C45:1010.0003: probe with driver hid-generic failed with error -22 [ 96.411283][ T53] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 96.458567][ T40] audit: type=1400 audit(1766333964.990:497): avc: denied { ioctl } for pid=7884 comm="syz.5.509" path="socket:[23197]" dev="sockfs" ino=23197 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.498438][ T7888] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.511'. [ 96.542743][ T40] audit: type=1400 audit(1766333965.070:498): avc: denied { map } for pid=7889 comm="syz.5.512" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.569028][ T7890] comedi comedi4: comedi_config --init_data is deprecated [ 96.591145][ T53] usb 9-1: Using ep0 maxpacket: 32 [ 96.594417][ T53] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 96.598281][ T53] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 96.603266][ T53] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.608100][ T53] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 96.616382][ T53] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 96.624163][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.627472][ T53] usb 9-1: Product: syz [ 96.629086][ T53] usb 9-1: Manufacturer: syz [ 96.630553][ T53] usb 9-1: SerialNumber: syz [ 96.645358][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 96.650305][ T53] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input9 [ 96.700893][ T5938] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 96.740727][ T7893] netlink: 'syz.5.513': attribute type 64 has an invalid length. [ 96.743256][ T7893] netlink: 'syz.5.513': attribute type 4 has an invalid length. [ 96.745857][ T7893] netlink: 152 bytes leftover after parsing attributes in process `syz.5.513'. [ 96.749335][ T7893] delete_channel: no stack [ 96.860761][ T5938] usb 7-1: Using ep0 maxpacket: 32 [ 96.864168][ T5938] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.867301][ T5938] usb 7-1: config 0 has no interface number 0 [ 96.872757][ T5938] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 96.876338][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.879872][ T5938] usb 7-1: Product: syz [ 96.881711][ T5938] usb 7-1: Manufacturer: syz [ 96.883591][ T5938] usb 7-1: SerialNumber: syz [ 96.887720][ T5938] usb 7-1: config 0 descriptor?? [ 96.889681][ T7860] XFS (nbd4): SB validate failed with error -5. [ 96.901496][ T5938] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 96.906892][ T5938] usb 7-1: selecting invalid altsetting 1 [ 96.908742][ T5938] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 96.932830][ T5938] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 96.936252][ T5938] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 96.938517][ T5938] usb 7-1: media controller created [ 96.948953][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.970780][ T53] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 96.974255][ T53] (id 0x00) [ 96.978653][ T7909] netdevsim netdevsim5: Direct firmware load for / failed with error -2 [ 96.984525][ T7909] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 97.041282][ T53] rc_core: IR keymap rc-imon-pad not found [ 97.044249][ T53] Registered IR keymap rc-empty [ 97.046631][ T53] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 97.049956][ T53] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 97.092174][ T5938] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 97.095874][ T5938] zl10353_read_register: readreg error (reg=127, ret==-32) [ 97.137926][ T3328] libceph: connect (1)[c::]:6789 error -101 [ 97.139966][ T3328] libceph: mon0 (1)[c::]:6789 connect error [ 97.187719][ T53] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 97.192015][ T53] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input10 [ 97.198699][ T53] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:13> initialized [ 97.248858][ T7923] veth0_to_bond: entered allmulticast mode [ 97.359428][ T53] usb 9-1: USB disconnect, device number 13 [ 97.362114][ T7927] block nbd0: not configured, cannot reconfigure [ 97.412501][ T3328] libceph: connect (1)[c::]:6789 error -101 [ 97.414497][ T3328] libceph: mon0 (1)[c::]:6789 connect error [ 97.538428][ T7934] 9pnet_fd: p9_fd_create_unix (7934): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 97.637388][ T7942] netlink: 'syz.3.523': attribute type 39 has an invalid length. [ 97.900125][ T7917] ceph: No mds server is up or the cluster is laggy [ 97.951199][ T5942] Bluetooth: hci1: command tx timeout [ 97.966569][ T7948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7948 comm=syz.4.526 [ 97.970294][ T7948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7948 comm=syz.4.526 [ 98.129953][ T7958] No control pipe specified [ 98.159097][ T7962] __nla_validate_parse: 2 callbacks suppressed [ 98.159108][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 98.237352][ T7966] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 98.237352][ T7966] program syz.5.532 not setting count and/or reply_len properly [ 98.279981][ T7966] smc: net device bond0 applied user defined pnetid SYZ2 [ 98.679982][ T7984] netlink: 'syz.5.538': attribute type 10 has an invalid length. [ 98.684097][ T7984] netlink: 224 bytes leftover after parsing attributes in process `syz.5.538'. [ 98.729046][ T7986] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 99.209461][ T7997] xt_l2tp: missing protocol rule (udp|l2tpip) [ 99.356283][ T8008] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 99.359140][ T8008] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.364834][ T8008] vhci_hcd vhci_hcd.0: Device attached [ 99.378730][ T8009] vhci_hcd: connection closed [ 99.379939][ T7185] vhci_hcd vhci_hcd.4: stop threads [ 99.385776][ T7185] vhci_hcd vhci_hcd.4: release socket [ 99.387617][ T7185] vhci_hcd vhci_hcd.4: disconnect device [ 99.471675][ T5938] usb 7-1: USB disconnect, device number 4 [ 99.517037][ T8016] FAULT_INJECTION: forcing a failure. [ 99.517037][ T8016] name failslab, interval 1, probability 0, space 0, times 0 [ 99.524754][ T8016] CPU: 0 UID: 0 PID: 8016 Comm: syz.2.549 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.524781][ T8016] Tainted: [L]=SOFTLOCKUP [ 99.524786][ T8016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.524795][ T8016] Call Trace: [ 99.524801][ T8016] [ 99.524808][ T8016] dump_stack_lvl+0x16c/0x1f0 [ 99.524851][ T8016] should_fail_ex+0x512/0x640 [ 99.524880][ T8016] ? __kvmalloc_node_noprof+0x129/0xa40 [ 99.524902][ T8016] should_failslab+0xc2/0x120 [ 99.524924][ T8016] __kvmalloc_node_noprof+0x14a/0xa40 [ 99.524944][ T8016] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 99.524970][ T8016] ? __lock_acquire+0x436/0x2890 [ 99.524993][ T8016] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 99.525016][ T8016] __kvm_mmu_topup_memory_cache+0x455/0x600 [ 99.525048][ T8016] mmu_topup_memory_caches+0x25/0x170 [ 99.525070][ T8016] kvm_mmu_load+0xd6/0x2390 [ 99.525087][ T8016] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 99.525111][ T8016] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 99.525138][ T8016] ? __pfx_kvm_mmu_load+0x10/0x10 [ 99.525155][ T8016] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 99.525182][ T8016] ? kvm_check_and_inject_events+0x63d/0x1050 [ 99.525213][ T8016] vcpu_run+0x39d2/0x5a80 [ 99.525245][ T8016] ? __pfx_vcpu_run+0x10/0x10 [ 99.525274][ T8016] ? rcu_is_watching+0x12/0xc0 [ 99.525294][ T8016] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 99.525313][ T8016] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 99.525340][ T8016] kvm_vcpu_ioctl+0x76d/0x16d0 [ 99.525368][ T8016] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 99.525392][ T8016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.525413][ T8016] ? do_vfs_ioctl+0x128/0x14f0 [ 99.525433][ T8016] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 99.525450][ T8016] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 99.525481][ T8016] ? hook_file_ioctl_common+0x144/0x410 [ 99.525512][ T8016] ? selinux_file_ioctl+0x180/0x270 [ 99.525532][ T8016] ? selinux_file_ioctl+0xb4/0x270 [ 99.525553][ T8016] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 99.525578][ T8016] __x64_sys_ioctl+0x18e/0x210 [ 99.525598][ T8016] do_syscall_64+0xcd/0xf80 [ 99.525621][ T8016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.525637][ T8016] RIP: 0033:0x7fd2fd38f7c9 [ 99.525653][ T8016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.525667][ T8016] RSP: 002b:00007fd2fe1b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.525684][ T8016] RAX: ffffffffffffffda RBX: 00007fd2fd5e5fa0 RCX: 00007fd2fd38f7c9 [ 99.525694][ T8016] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 99.525702][ T8016] RBP: 00007fd2fe1b1090 R08: 0000000000000000 R09: 0000000000000000 [ 99.525711][ T8016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.525720][ T8016] R13: 00007fd2fd5e6038 R14: 00007fd2fd5e5fa0 R15: 00007ffe7774ac98 [ 99.525745][ T8016] [ 99.866557][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 99.866572][ T40] audit: type=1326 audit(1766333968.390:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8037 comm="syz.5.556" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f377158f7c9 code=0x0 [ 99.912226][ T8042] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8042 comm=syz.3.557 [ 99.917419][ T8042] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2580 sclass=netlink_tcpdiag_socket pid=8042 comm=syz.3.557 [ 99.924754][ T8042] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2584 sclass=netlink_tcpdiag_socket pid=8042 comm=syz.3.557 [ 99.929821][ T8042] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2562 sclass=netlink_tcpdiag_socket pid=8042 comm=syz.3.557 [ 99.936119][ T8042] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8042 comm=syz.3.557 [ 99.942296][ T8048] netlink: 44 bytes leftover after parsing attributes in process `syz.5.559'. [ 100.122806][ T8073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8073 comm=syz.4.568 [ 100.162489][ T8075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.570'. [ 100.176956][ T8075] netlink: 32 bytes leftover after parsing attributes in process `syz.4.570'. [ 100.188424][ T8075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.570'. [ 100.350033][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 100.385365][ T8086] netlink: 40 bytes leftover after parsing attributes in process `syz.3.573'. [ 100.451168][ T5938] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 100.470811][ T61] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 100.486559][ T40] audit: type=1400 audit(1766333969.010:511): avc: denied { read write } for pid=8090 comm="syz.3.574" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 100.496155][ T40] audit: type=1400 audit(1766333969.010:512): avc: denied { open } for pid=8090 comm="syz.3.574" path="/121/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 100.505387][ T40] audit: type=1400 audit(1766333969.020:513): avc: denied { ioctl } for pid=8090 comm="syz.3.574" path="/121/file0/file0" dev="fuse" ino=64 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 100.600905][ T5938] usb 9-1: Using ep0 maxpacket: 16 [ 100.604896][ T5938] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 100.608561][ T5938] usb 9-1: config 0 has no interface number 0 [ 100.613150][ T5938] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 100.616884][ T5938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.620333][ T5938] usb 9-1: Product: syz [ 100.622375][ T5938] usb 9-1: Manufacturer: syz [ 100.624757][ T5938] usb 9-1: SerialNumber: syz [ 100.627472][ T61] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 100.632162][ T61] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 100.636941][ T5938] usb 9-1: config 0 descriptor?? [ 100.639195][ T61] usb 10-1: config 0 interface 0 has no altsetting 0 [ 100.644726][ T61] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.648826][ T61] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 100.652799][ T5938] hub 9-1:0.132: bad descriptor, ignoring hub [ 100.655491][ T5938] hub 9-1:0.132: probe with driver hub failed with error -5 [ 100.661540][ T61] usb 10-1: Product: syz [ 100.663421][ T61] usb 10-1: Manufacturer: syz [ 100.665433][ T61] usb 10-1: SerialNumber: syz [ 100.669307][ T5938] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.132/input/input12 [ 100.670803][ T40] audit: type=1400 audit(1766333969.190:514): avc: denied { read } for pid=8093 comm="syz.3.575" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 100.678352][ T61] usb 10-1: config 0 descriptor?? [ 100.686882][ T40] audit: type=1400 audit(1766333969.190:515): avc: denied { open } for pid=8093 comm="syz.3.575" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 100.687131][ T61] hub 10-1:0.0: bad descriptor, ignoring hub [ 100.698957][ T61] hub 10-1:0.0: probe with driver hub failed with error -5 [ 100.706539][ T61] usb 10-1: selecting invalid altsetting 0 [ 100.716752][ T40] audit: type=1400 audit(1766333969.240:516): avc: granted { setsecparam } for pid=8093 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 100.846520][ T40] audit: type=1400 audit(1766333969.370:517): avc: denied { read } for pid=8076 comm="syz.4.571" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 100.853933][ T40] audit: type=1400 audit(1766333969.370:518): avc: denied { open } for pid=8076 comm="syz.4.571" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 100.885855][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.890045][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.896184][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.900034][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.905759][ T8103] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 100.908824][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.909331][ T8103] overlayfs: overlapping lowerdir path [ 100.913335][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.919573][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.927118][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.931738][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.935396][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.063089][ T61] usb 10-1: USB disconnect, device number 3 [ 101.147095][ T3328] usb 9-1: USB disconnect, device number 14 [ 101.236082][ T8126] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 101.409727][ T40] audit: type=1326 audit(1766333969.930:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.5.585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377158f7c9 code=0x7ffc0000 [ 101.529637][ T8147] FAULT_INJECTION: forcing a failure. [ 101.529637][ T8147] name failslab, interval 1, probability 0, space 0, times 0 [ 101.534831][ T8147] CPU: 2 UID: 0 PID: 8147 Comm: syz.5.586 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.534855][ T8147] Tainted: [L]=SOFTLOCKUP [ 101.534860][ T8147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.534869][ T8147] Call Trace: [ 101.534874][ T8147] [ 101.534881][ T8147] dump_stack_lvl+0x16c/0x1f0 [ 101.534903][ T8147] should_fail_ex+0x512/0x640 [ 101.534925][ T8147] ? kmem_cache_alloc_noprof+0x62/0x770 [ 101.534944][ T8147] should_failslab+0xc2/0x120 [ 101.534964][ T8147] kmem_cache_alloc_noprof+0x83/0x770 [ 101.534979][ T8147] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 101.535002][ T8147] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 101.535029][ T8147] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 101.535052][ T8147] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 101.535082][ T8147] mmu_topup_memory_caches+0x25/0x170 [ 101.535102][ T8147] kvm_mmu_load+0xd6/0x2390 [ 101.535119][ T8147] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 101.535160][ T8147] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 101.535184][ T8147] ? __pfx_kvm_mmu_load+0x10/0x10 [ 101.535200][ T8147] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 101.535224][ T8147] ? kvm_check_and_inject_events+0x63d/0x1050 [ 101.535248][ T8147] vcpu_run+0x39d2/0x5a80 [ 101.535277][ T8147] ? __pfx_vcpu_run+0x10/0x10 [ 101.535304][ T8147] ? rcu_is_watching+0x12/0xc0 [ 101.535321][ T8147] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 101.535339][ T8147] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 101.535364][ T8147] kvm_vcpu_ioctl+0x76d/0x16d0 [ 101.535389][ T8147] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.535417][ T8147] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.535435][ T8147] ? do_vfs_ioctl+0x128/0x14f0 [ 101.535453][ T8147] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 101.535470][ T8147] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 101.535498][ T8147] ? hook_file_ioctl_common+0x144/0x410 [ 101.535529][ T8147] ? selinux_file_ioctl+0x180/0x270 [ 101.535547][ T8147] ? selinux_file_ioctl+0xb4/0x270 [ 101.535566][ T8147] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.535589][ T8147] __x64_sys_ioctl+0x18e/0x210 [ 101.535608][ T8147] do_syscall_64+0xcd/0xf80 [ 101.535629][ T8147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.535644][ T8147] RIP: 0033:0x7f377158f7c9 [ 101.535657][ T8147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.535671][ T8147] RSP: 002b:00007f3772453038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.535686][ T8147] RAX: ffffffffffffffda RBX: 00007f37717e5fa0 RCX: 00007f377158f7c9 [ 101.535696][ T8147] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 101.535705][ T8147] RBP: 00007f3772453090 R08: 0000000000000000 R09: 0000000000000000 [ 101.535714][ T8147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.535722][ T8147] R13: 00007f37717e6038 R14: 00007f37717e5fa0 R15: 00007ffd59aa2458 [ 101.535745][ T8147] [ 101.853605][ T8173] netlink: 360 bytes leftover after parsing attributes in process `syz.5.592'. [ 101.883058][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.888196][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.947736][ T8181] nvme_fabrics: missing parameter 'transport=%s' [ 101.951742][ T8181] nvme_fabrics: missing parameter 'nqn=%s' [ 101.984630][ T8186] netlink: 'syz.5.596': attribute type 10 has an invalid length. [ 101.988113][ T8186] bridge0: port 3(syz_tun) entered disabled state [ 101.990331][ T8186] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.993307][ T8186] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.002707][ T8186] bridge0: port 3(syz_tun) entered blocking state [ 102.005050][ T8186] bridge0: port 3(syz_tun) entered forwarding state [ 102.007941][ T8186] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.010995][ T8186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.014162][ T8186] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.017068][ T8186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.024050][ T8186] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 102.103670][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.106498][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.112049][ T8178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.594'. [ 102.120751][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 102.205368][ T3328] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 102.270832][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 102.340799][ T3328] usb 9-1: device descriptor read/64, error -71 [ 102.344919][ T9] usb 8-1: device descriptor read/all, error -71 [ 102.590858][ T3328] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 102.733716][ T3328] usb 9-1: device descriptor read/64, error -71 [ 102.841064][ T3328] usb usb9-port1: attempt power cycle [ 102.866746][ T8243] FAULT_INJECTION: forcing a failure. [ 102.866746][ T8243] name failslab, interval 1, probability 0, space 0, times 0 [ 102.872898][ T8243] CPU: 2 UID: 0 PID: 8243 Comm: syz.3.611 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.872924][ T8243] Tainted: [L]=SOFTLOCKUP [ 102.872930][ T8243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.872940][ T8243] Call Trace: [ 102.872946][ T8243] [ 102.872953][ T8243] dump_stack_lvl+0x16c/0x1f0 [ 102.872979][ T8243] should_fail_ex+0x512/0x640 [ 102.873004][ T8243] ? kmem_cache_alloc_noprof+0x62/0x770 [ 102.873025][ T8243] should_failslab+0xc2/0x120 [ 102.873049][ T8243] kmem_cache_alloc_noprof+0x83/0x770 [ 102.873066][ T8243] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 102.873092][ T8243] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 102.873123][ T8243] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 102.873149][ T8243] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 102.873180][ T8243] mmu_topup_memory_caches+0x25/0x170 [ 102.873203][ T8243] kvm_mmu_load+0xd6/0x2390 [ 102.873222][ T8243] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 102.873246][ T8243] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 102.873274][ T8243] ? __pfx_kvm_mmu_load+0x10/0x10 [ 102.873291][ T8243] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 102.873318][ T8243] ? kvm_check_and_inject_events+0x63d/0x1050 [ 102.873344][ T8243] vcpu_run+0x39d2/0x5a80 [ 102.873376][ T8243] ? __pfx_vcpu_run+0x10/0x10 [ 102.873405][ T8243] ? rcu_is_watching+0x12/0xc0 [ 102.873432][ T8243] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 102.873465][ T8243] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 102.873494][ T8243] kvm_vcpu_ioctl+0x76d/0x16d0 [ 102.873522][ T8243] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 102.873547][ T8243] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.873568][ T8243] ? do_vfs_ioctl+0x128/0x14f0 [ 102.873588][ T8243] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 102.873608][ T8243] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 102.873640][ T8243] ? hook_file_ioctl_common+0x144/0x410 [ 102.873671][ T8243] ? selinux_file_ioctl+0x180/0x270 [ 102.873692][ T8243] ? selinux_file_ioctl+0xb4/0x270 [ 102.873714][ T8243] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 102.873740][ T8243] __x64_sys_ioctl+0x18e/0x210 [ 102.873761][ T8243] do_syscall_64+0xcd/0xf80 [ 102.873785][ T8243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.873801][ T8243] RIP: 0033:0x7f0075b8f7c9 [ 102.873815][ T8243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.873831][ T8243] RSP: 002b:00007f0076a73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.873848][ T8243] RAX: ffffffffffffffda RBX: 00007f0075de5fa0 RCX: 00007f0075b8f7c9 [ 102.873859][ T8243] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 102.873869][ T8243] RBP: 00007f0076a73090 R08: 0000000000000000 R09: 0000000000000000 [ 102.873878][ T8243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.873887][ T8243] R13: 00007f0075de6038 R14: 00007f0075de5fa0 R15: 00007ffc5b7a8f78 [ 102.873913][ T8243] [ 103.260921][ T3328] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 103.291224][ T3328] usb 9-1: device descriptor read/8, error -71 [ 103.363284][ T8267] overlayfs: failed to resolve './file0/file0': -2 [ 103.496950][ T8227] orangefs_mount: mount request failed with -4 [ 103.530849][ T3328] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 103.561746][ T3328] usb 9-1: device descriptor read/8, error -71 [ 103.636175][ T8280] FAULT_INJECTION: forcing a failure. [ 103.636175][ T8280] name failslab, interval 1, probability 0, space 0, times 0 [ 103.640567][ T8280] CPU: 0 UID: 0 PID: 8280 Comm: syz.5.621 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.640584][ T8280] Tainted: [L]=SOFTLOCKUP [ 103.640588][ T8280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.640594][ T8280] Call Trace: [ 103.640598][ T8280] [ 103.640603][ T8280] dump_stack_lvl+0x16c/0x1f0 [ 103.640621][ T8280] should_fail_ex+0x512/0x640 [ 103.640637][ T8280] ? kmem_cache_alloc_noprof+0x62/0x770 [ 103.640649][ T8280] should_failslab+0xc2/0x120 [ 103.640678][ T8280] kmem_cache_alloc_noprof+0x83/0x770 [ 103.640688][ T8280] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 103.640704][ T8280] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 103.640724][ T8280] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 103.640740][ T8280] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 103.640761][ T8280] mmu_topup_memory_caches+0x25/0x170 [ 103.640775][ T8280] kvm_mmu_load+0xd6/0x2390 [ 103.640787][ T8280] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 103.640802][ T8280] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 103.640819][ T8280] ? __pfx_kvm_mmu_load+0x10/0x10 [ 103.640830][ T8280] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 103.640847][ T8280] ? kvm_check_and_inject_events+0x63d/0x1050 [ 103.640865][ T8280] vcpu_run+0x39d2/0x5a80 [ 103.640891][ T8280] ? __pfx_vcpu_run+0x10/0x10 [ 103.640931][ T8280] ? rcu_is_watching+0x12/0xc0 [ 103.640951][ T8280] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 103.640969][ T8280] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 103.640995][ T8280] kvm_vcpu_ioctl+0x76d/0x16d0 [ 103.641021][ T8280] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 103.641046][ T8280] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.641066][ T8280] ? do_vfs_ioctl+0x128/0x14f0 [ 103.641085][ T8280] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 103.641103][ T8280] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 103.641132][ T8280] ? hook_file_ioctl_common+0x144/0x410 [ 103.641162][ T8280] ? selinux_file_ioctl+0x180/0x270 [ 103.641181][ T8280] ? selinux_file_ioctl+0xb4/0x270 [ 103.641201][ T8280] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 103.641226][ T8280] __x64_sys_ioctl+0x18e/0x210 [ 103.641247][ T8280] do_syscall_64+0xcd/0xf80 [ 103.641271][ T8280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.641287][ T8280] RIP: 0033:0x7f377158f7c9 [ 103.641301][ T8280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.641316][ T8280] RSP: 002b:00007f3772453038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.641332][ T8280] RAX: ffffffffffffffda RBX: 00007f37717e5fa0 RCX: 00007f377158f7c9 [ 103.641343][ T8280] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 103.641352][ T8280] RBP: 00007f3772453090 R08: 0000000000000000 R09: 0000000000000000 [ 103.641362][ T8280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.641371][ T8280] R13: 00007f37717e6038 R14: 00007f37717e5fa0 R15: 00007ffd59aa2458 [ 103.641402][ T8280] [ 103.671339][ T3328] usb usb9-port1: unable to enumerate USB device [ 103.850992][ T8284] nbd: couldn't find device at index 1177878532 [ 103.881316][ T3328] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 104.010773][ T3328] usb 9-1: device descriptor read/64, error -71 [ 104.021442][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 104.089130][ T8266] orangefs_mount: mount request failed with -4 [ 104.173055][ T9] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 104.176552][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.181698][ T9] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 104.185455][ T9] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 104.188649][ T9] usb 7-1: Manufacturer: syz [ 104.196003][ T9] usb 7-1: config 0 descriptor?? [ 104.250964][ T9] rc_core: IR keymap rc-hauppauge not found [ 104.253604][ T9] Registered IR keymap rc-empty [ 104.256326][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 104.256653][ T3328] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 104.263129][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input13 [ 104.390757][ T3328] usb 9-1: device descriptor read/64, error -71 [ 104.410931][ T6360] usb 7-1: USB disconnect, device number 5 [ 104.466669][ T8315] syzkaller0: entered promiscuous mode [ 104.469136][ T8315] syzkaller0: entered allmulticast mode [ 104.501601][ T3328] usb usb9-port1: attempt power cycle [ 104.840843][ T3328] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 104.968863][ T8322] FAULT_INJECTION: forcing a failure. [ 104.968863][ T8322] name failslab, interval 1, probability 0, space 0, times 0 [ 104.973078][ T8322] CPU: 2 UID: 0 PID: 8322 Comm: syz.2.630 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.973094][ T8322] Tainted: [L]=SOFTLOCKUP [ 104.973102][ T8322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.973109][ T8322] Call Trace: [ 104.973112][ T8322] [ 104.973116][ T8322] dump_stack_lvl+0x16c/0x1f0 [ 104.973135][ T8322] should_fail_ex+0x512/0x640 [ 104.973151][ T8322] ? kmem_cache_alloc_noprof+0x62/0x770 [ 104.973163][ T8322] should_failslab+0xc2/0x120 [ 104.973177][ T8322] kmem_cache_alloc_noprof+0x83/0x770 [ 104.973187][ T8322] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 104.973205][ T8322] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 104.973225][ T8322] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 104.973241][ T8322] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 104.973262][ T8322] mmu_topup_memory_caches+0x25/0x170 [ 104.973276][ T8322] kvm_mmu_load+0xd6/0x2390 [ 104.973287][ T8322] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 104.973303][ T8322] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 104.973320][ T8322] ? __pfx_kvm_mmu_load+0x10/0x10 [ 104.973331][ T8322] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 104.973349][ T8322] ? kvm_check_and_inject_events+0x63d/0x1050 [ 104.973366][ T8322] vcpu_run+0x39d2/0x5a80 [ 104.973384][ T8322] ? __pfx_vcpu_run+0x10/0x10 [ 104.973402][ T8322] ? rcu_is_watching+0x12/0xc0 [ 104.973414][ T8322] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 104.973426][ T8322] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 104.973442][ T8322] kvm_vcpu_ioctl+0x76d/0x16d0 [ 104.973460][ T8322] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 104.973476][ T8322] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.973489][ T8322] ? do_vfs_ioctl+0x128/0x14f0 [ 104.973501][ T8322] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 104.973513][ T8322] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 104.973531][ T8322] ? hook_file_ioctl_common+0x144/0x410 [ 104.973551][ T8322] ? selinux_file_ioctl+0x180/0x270 [ 104.973564][ T8322] ? selinux_file_ioctl+0xb4/0x270 [ 104.973578][ T8322] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 104.973594][ T8322] __x64_sys_ioctl+0x18e/0x210 [ 104.973607][ T8322] do_syscall_64+0xcd/0xf80 [ 104.973621][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.973631][ T8322] RIP: 0033:0x7fd2fd38f7c9 [ 104.973640][ T8322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.973650][ T8322] RSP: 002b:00007fd2fe1b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.973660][ T8322] RAX: ffffffffffffffda RBX: 00007fd2fd5e5fa0 RCX: 00007fd2fd38f7c9 [ 104.973666][ T8322] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 104.973672][ T8322] RBP: 00007fd2fe1b1090 R08: 0000000000000000 R09: 0000000000000000 [ 104.973678][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.973683][ T8322] R13: 00007fd2fd5e6038 R14: 00007fd2fd5e5fa0 R15: 00007ffe7774ac98 [ 104.973697][ T8322] [ 105.080904][ T3328] usb 9-1: device not accepting address 21, error -71 [ 105.152051][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 105.154838][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.631'. [ 105.204362][ T8326] delete_channel: no stack [ 105.228345][ T8329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.633'. [ 105.233165][ T8329] netlink: 'syz.2.633': attribute type 1 has an invalid length. [ 105.244901][ T8329] bond1 (unregistering): Released all slaves [ 105.263174][ T8330] bond1 (unregistering): Released all slaves [ 105.352683][ T8343] batadv_slave_1: entered promiscuous mode [ 105.354980][ T8341] batadv_slave_1: left promiscuous mode [ 105.383408][ T8348] netlink: 40 bytes leftover after parsing attributes in process `syz.5.637'. [ 105.426780][ T8350] FAULT_INJECTION: forcing a failure. [ 105.426780][ T8350] name failslab, interval 1, probability 0, space 0, times 0 [ 105.431959][ T8350] CPU: 3 UID: 0 PID: 8350 Comm: syz.5.639 Tainted: G L syzkaller #0 PREEMPT(full) [ 105.431976][ T8350] Tainted: [L]=SOFTLOCKUP [ 105.431979][ T8350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.431985][ T8350] Call Trace: [ 105.431989][ T8350] [ 105.431993][ T8350] dump_stack_lvl+0x16c/0x1f0 [ 105.432011][ T8350] should_fail_ex+0x512/0x640 [ 105.432026][ T8350] ? kmem_cache_alloc_noprof+0x62/0x770 [ 105.432038][ T8350] should_failslab+0xc2/0x120 [ 105.432052][ T8350] kmem_cache_alloc_noprof+0x83/0x770 [ 105.432062][ T8350] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 105.432079][ T8350] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 105.432099][ T8350] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 105.432115][ T8350] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 105.432136][ T8350] mmu_topup_memory_caches+0x25/0x170 [ 105.432150][ T8350] kvm_mmu_load+0xd6/0x2390 [ 105.432161][ T8350] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 105.432177][ T8350] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 105.432194][ T8350] ? __pfx_kvm_mmu_load+0x10/0x10 [ 105.432205][ T8350] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 105.432222][ T8350] ? kvm_check_and_inject_events+0x63d/0x1050 [ 105.432237][ T8350] vcpu_run+0x39d2/0x5a80 [ 105.432255][ T8350] ? __pfx_vcpu_run+0x10/0x10 [ 105.432273][ T8350] ? rcu_is_watching+0x12/0xc0 [ 105.432285][ T8350] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 105.432297][ T8350] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 105.432313][ T8350] kvm_vcpu_ioctl+0x76d/0x16d0 [ 105.432330][ T8350] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 105.432347][ T8350] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.432360][ T8350] ? do_vfs_ioctl+0x128/0x14f0 [ 105.432372][ T8350] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 105.432384][ T8350] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 105.432408][ T8350] ? hook_file_ioctl_common+0x144/0x410 [ 105.432428][ T8350] ? selinux_file_ioctl+0x180/0x270 [ 105.432441][ T8350] ? selinux_file_ioctl+0xb4/0x270 [ 105.432454][ T8350] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 105.432471][ T8350] __x64_sys_ioctl+0x18e/0x210 [ 105.432483][ T8350] do_syscall_64+0xcd/0xf80 [ 105.432498][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.432508][ T8350] RIP: 0033:0x7f377158f7c9 [ 105.432516][ T8350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.432526][ T8350] RSP: 002b:00007f3772453038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.432536][ T8350] RAX: ffffffffffffffda RBX: 00007f37717e5fa0 RCX: 00007f377158f7c9 [ 105.432543][ T8350] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 105.432549][ T8350] RBP: 00007f3772453090 R08: 0000000000000000 R09: 0000000000000000 [ 105.432554][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.432560][ T8350] R13: 00007f37717e6038 R14: 00007f37717e5fa0 R15: 00007ffd59aa2458 [ 105.432573][ T8350] [ 105.676142][ T8364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=8364 comm=syz.5.642 [ 105.682838][ T8364] program syz.5.642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.288277][ T8378] pim6reg: entered allmulticast mode [ 106.314219][ T8378] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3777069093 (241732421952 ns) > initial count (76906774528 ns). Using initial count to start timer. [ 106.326135][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 106.326145][ T40] audit: type=1400 audit(1766333974.850:591): avc: denied { bpf } for pid=8377 comm="syz.3.647" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.336380][ T40] audit: type=1400 audit(1766333974.850:592): avc: denied { perfmon } for pid=8377 comm="syz.3.647" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.454507][ T40] audit: type=1400 audit(1766333974.980:593): avc: denied { setopt } for pid=8380 comm="syz.3.648" lport=55925 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 106.499542][ T8383] affs: No valid root block on device nullb0 [ 106.507869][ T40] audit: type=1400 audit(1766333975.030:594): avc: denied { set_context_mgr } for pid=8382 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 106.540801][ T8356] comedi comedi0: reset error (fatal) [ 106.713695][ T8395] orangefs_mount: mount request failed with -4 [ 106.756842][ T40] audit: type=1400 audit(1766333975.280:595): avc: denied { read } for pid=8404 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.813618][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 106.817655][ T8409] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.820010][ T8409] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.074503][ T40] audit: type=1400 audit(1766333975.600:596): avc: denied { append } for pid=8432 comm="syz.3.663" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 107.076159][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.086078][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.160115][ T40] audit: type=1400 audit(1766333975.680:597): avc: denied { setopt } for pid=8438 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.188490][ T40] audit: type=1400 audit(1766333975.710:598): avc: denied { execute } for pid=8444 comm="syz.4.667" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.212658][ T8449] /dev/nullb0: Can't open blockdev [ 107.215052][ T8449] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 107.256942][ T40] audit: type=1400 audit(1766333975.780:599): avc: denied { module_request } for pid=8450 comm="syz.3.670" kmod="crypto-cts(cbc(twofish))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 107.473114][ T40] audit: type=1400 audit(1766333976.000:600): avc: denied { append } for pid=8471 comm="syz.4.675" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.546788][ T8478] can0: slcan on pty26. [ 107.595893][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 107.599590][ T8484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.679'. [ 107.641444][ T8477] can0 (unregistered): slcan off pty26. [ 107.663758][ T8493] netlink: 32 bytes leftover after parsing attributes in process `syz.2.682'. [ 107.674364][ T8493] fuse: Bad value for 'fd' [ 107.681303][ T8493] overlay: Unknown parameter 'euid' [ 107.694212][ T8493] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 107.696241][ T8497] Mount JFS Failure: -22 [ 107.696980][ T8493] /dev/nullb0: Can't open blockdev [ 107.744707][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'. [ 107.746201][ T8493] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 107.747613][ T8506] netlink: 'syz.3.686': attribute type 30 has an invalid length. [ 107.747624][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 108.123674][ T8531] affs: No valid root block on device nullb0 [ 108.159768][ T8531] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 108.574370][ T8562] xt_ipcomp: unknown flags 1D [ 108.579315][ T8563] xt_ipcomp: unknown flags 1D [ 108.671377][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 108.727034][ T8576] Bluetooth: MGMT ver 1.23 [ 108.820812][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 108.824916][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 108.828781][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.841777][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 108.844163][ T8585] fuse: Bad value for 'group_id' [ 108.844788][ T9] pvrusb2: ********** [ 108.846340][ T8585] fuse: Bad value for 'group_id' [ 108.849371][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 108.853334][ T9] pvrusb2: Important functionality might not be entirely working. [ 108.855775][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 108.859460][ T9] pvrusb2: ********** [ 108.872879][ T8587] netlink: 'syz.4.708': attribute type 1 has an invalid length. [ 108.885408][ T8587] bond1: entered promiscuous mode [ 108.887773][ T8587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.900140][ T8587] bond1: (slave bridge2): making interface the new active one [ 108.902630][ T8587] bridge2: entered promiscuous mode [ 108.904884][ T8587] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 109.020786][ T5938] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 109.024614][ T8598] ubi8: attaching mtd0 [ 109.027147][ T8598] ubi8: scanning is finished [ 109.028677][ T8598] ubi8: empty MTD device detected [ 109.030354][ T8598] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 109.039870][ T2487] pvrusb2: Invalid write control endpoint [ 109.061684][ T2487] pvrusb2: Invalid write control endpoint [ 109.065265][ T2487] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 109.068208][ T2487] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 109.070575][ T2487] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 109.075343][ T2487] pvrusb2: Device being rendered inoperable [ 109.077264][ T2487] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 109.079577][ T2487] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 109.079618][ T8597] input: syz1 as /devices/virtual/input/input14 [ 109.082606][ T2487] pvrusb2: Attached sub-driver cx25840 [ 109.086860][ T2487] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 109.093391][ T2487] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 109.100341][ T8598] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 109.182627][ T5938] usb 10-1: Using ep0 maxpacket: 16 [ 109.187145][ T5938] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 109.190970][ T5938] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 109.195104][ T5938] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.201329][ T5938] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.205050][ T5938] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.208229][ T5938] usb 10-1: Product: 酋ꫜ彡࿦àªê–‰ã¯±æ¼ºãžœíšá¸˜è«ºïš£äˆµãŒ®à©ƒäµ¸æŒ¸Ü›æ·¥ç‚¢ç°¢äŽ«ê„‹î›€åœ·ïŽŸæ¯ˆÊ•ã¡§ë°‘ëˆ·é“‘êŸ³é¿‰ä¾¹é¢™áš³ç¦°ç˜µë‡¬æ›µåŽ‚ëš—éº¦ê‘ƒçºê„±ç³‹ [ 109.213872][ T5938] usb 10-1: Manufacturer: ᖙ厽臧贵ᓦԡꑸᰱ濛쪮䌇䤡쀚â™Ô®é†Žë¢ƒä§Ÿç¯Ÿê¼®æ¬Œéˆ†ã‘ƒï²€ç¸îšà²ŒáŠŒè­„â¢“ [ 109.217778][ T5938] usb 10-1: SerialNumber: á Š [ 109.231369][ T8603] block nbd0: server does not support multiple connections per device. [ 109.238015][ T8603] block nbd0: shutting down sockets [ 109.243125][ T8604] serio: Serial port ptm0 [ 109.245639][ T8554] pvrusb2: Attempted to execute control transfer when device not ok [ 109.252360][ T8554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.255854][ T8554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.274995][ T3328] usb 8-1: USB disconnect, device number 8 [ 109.343515][ T8610] block device autoloading is deprecated and will be removed. [ 109.408759][ T8613] delete_channel: no stack [ 109.424268][ T8612] 9p: Could not find request transport: v!oÊÐíirtio [ 109.459923][ T5938] usb 10-1: 0:2 : does not exist [ 109.479130][ T5938] usb 10-1: USB disconnect, device number 4 [ 109.840990][ T8637] nbd: must specify an index to disconnect [ 110.061449][ T8645] tmpfs: Bad value for 'mpol' [ 110.679329][ T8658] __nla_validate_parse: 1 callbacks suppressed [ 110.679344][ T8658] netlink: 27 bytes leftover after parsing attributes in process `syz.3.727'. [ 110.760750][ T8663] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 110.809003][ T8665] netlink: 48 bytes leftover after parsing attributes in process `syz.3.730'. [ 110.816534][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 110.969640][ T8680] netlink: 5892 bytes leftover after parsing attributes in process `syz.3.734'. [ 111.008476][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.732'. [ 111.054141][ T8687] netlink: 'syz.4.736': attribute type 1 has an invalid length. [ 111.143419][ T8698] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 111.151877][ T8698] fuse: Bad value for 'group_id' [ 111.154013][ T8698] fuse: Bad value for 'group_id' [ 111.156487][ T8687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.736'. [ 111.213969][ T8701] Malformed UNC in devname [ 111.213969][ T8701] [ 111.217382][ T8701] CIFS: VFS: Malformed UNC in devname [ 111.336000][ T8713] netlink: 'syz.4.744': attribute type 3 has an invalid length. [ 111.336176][ T8714] netlink: 'syz.4.744': attribute type 3 has an invalid length. [ 111.339309][ T8713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.744'. [ 111.346440][ T8714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.744'. [ 111.478627][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 111.683205][ T8726] ip6t_REJECT: ECHOREPLY is not supported [ 111.737774][ T8732] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 111.788884][ T8745] loop4: detected capacity change from 0 to 7 [ 111.793869][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 111.797211][ T8745] Dev loop4: unable to read RDB block 7 [ 111.804415][ T8745] loop4: AHDI p1 p2 p3 [ 111.805801][ T8745] loop4: partition table partially beyond EOD, truncated [ 111.808299][ T8745] loop4: p1 start 1601398130 is beyond EOD, truncated [ 111.810576][ T8745] loop4: p2 start 1702059890 is beyond EOD, truncated [ 111.920936][ T8754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8754 comm=syz.5.755 [ 111.958001][ T8761] netlink: zone id is out of range [ 112.113675][ T8778] geneve2: entered promiscuous mode [ 112.114529][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 112.114539][ T40] audit: type=1326 audit(1766333980.640:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8775 comm="syz.4.761" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fa0b8f7c9 code=0x0 [ 112.115903][ T8778] geneve2: entered allmulticast mode [ 112.235424][ T8785] SELinux: policydb magic number 0xa55a98be does not match expected magic number 0xf97cff8c [ 112.239812][ T8785] SELinux: failed to load policy [ 112.360518][ T8791] kvm: kvm [8790]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 112.365367][ T8791] kvm: kvm [8790]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 112.404472][ T40] audit: type=1400 audit(1766333980.930:617): avc: denied { module_load } for pid=8790 comm="syz.5.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 112.413098][ T8800] CIFS mount error: No usable UNC path provided in device string! [ 112.413098][ T8800] [ 112.416511][ T8800] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 112.518440][ T40] audit: type=1400 audit(1766333981.040:618): avc: denied { name_bind } for pid=8811 comm="syz.4.771" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 112.597110][ T40] audit: type=1400 audit(1766333981.120:619): avc: denied { lock } for pid=8818 comm="syz.4.772" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 112.668994][ T40] audit: type=1400 audit(1766333981.190:620): avc: denied { accept } for pid=8828 comm="syz.2.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 112.669501][ T8832] ipt_ECN: cannot use operation on non-tcp rule [ 112.681849][ T40] audit: type=1400 audit(1766333981.210:621): avc: denied { name_bind } for pid=8834 comm="syz.4.778" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 112.728859][ T40] audit: type=1800 audit(1766333981.250:622): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.780" name="file0" dev="9p" ino=71827799 res=0 errno=0 [ 112.787061][ T40] audit: type=1804 audit(1766333981.310:623): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.780" name="/newroot/217/file0/file0" dev="9p" ino=71827799 res=1 errno=0 [ 112.811141][ T40] audit: type=1400 audit(1766333981.340:624): avc: denied { listen } for pid=8843 comm="syz.5.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.851702][ T8847] 9pnet_virtio: no channels available for device syz [ 112.926631][ T8848] 9pnet_virtio: no channels available for device syz [ 112.971820][ T60] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 112.972435][ T8852] netlink: 'syz.5.783': attribute type 10 has an invalid length. [ 112.979673][ T8852] netlink: 'syz.5.783': attribute type 10 has an invalid length. [ 112.986526][ T8852] bridge0: port 3(syz_tun) entered disabled state [ 112.989692][ T8852] syz_tun: left allmulticast mode [ 112.992130][ T8852] syz_tun: left promiscuous mode [ 112.994492][ T8852] bridge0: port 3(syz_tun) entered disabled state [ 113.002774][ T8852] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 113.130942][ T60] usb 9-1: Using ep0 maxpacket: 16 [ 113.147315][ T60] usb 9-1: unable to get BOS descriptor or descriptor too short [ 113.151995][ T60] usb 9-1: config 9 has an invalid interface number: 129 but max is 0 [ 113.154817][ T60] usb 9-1: config 9 has no interface number 0 [ 113.157284][ T60] usb 9-1: config 9 interface 129 has no altsetting 0 [ 113.165736][ T5953] udevd[5953]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 113.173759][ T60] usb 9-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 113.177214][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.180589][ T60] usb 9-1: Product: syz [ 113.189975][ T60] usb 9-1: Manufacturer: syz [ 113.193850][ T60] usb 9-1: SerialNumber: syz [ 113.239180][ T8868] ieee802154 phy0 wpan0: encryption failed: -126 [ 113.269615][ T8872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=8872 comm=syz.5.790 [ 113.274246][ T8872] netlink: 'syz.5.790': attribute type 15 has an invalid length. [ 113.281492][ T8872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8872 comm=syz.5.790 [ 113.401306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.467313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 113.469081][ T60] usb 9-1: bad CDC descriptors [ 113.475056][ T60] usb 9-1: USB disconnect, device number 23 [ 113.661145][ T8888] nbd5: detected capacity change from 0 to 549764202496 [ 113.669016][ T5942] block nbd5: Receive control failed (result -104) [ 113.850788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.120732][ T60] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 114.282915][ T60] usb 10-1: Using ep0 maxpacket: 8 [ 114.285813][ T60] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.289140][ T60] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.292715][ T60] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.296044][ T60] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.300149][ T60] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.303862][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.330037][ T8905] support for the xor transformation has been removed. [ 114.333690][ T40] audit: type=1400 audit(1766333982.860:625): avc: denied { setopt } for pid=8903 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 114.374707][ T8907] netlink: 'syz.4.802': attribute type 1 has an invalid length. [ 114.394970][ T8907] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.412619][ T8907] vlan2: entered promiscuous mode [ 114.414837][ T8907] bond4: entered promiscuous mode [ 114.432734][ T8907] gretap2: entered promiscuous mode [ 114.437448][ T8907] bond4: (slave gretap2): making interface the new active one [ 114.440582][ T8907] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 114.513273][ T60] usb 10-1: GET_CAPABILITIES returned 0 [ 114.515176][ T60] usbtmc 10-1:16.0: can't read capabilities [ 114.522071][ T8916] sctp: [Deprecated]: syz.4.804 (pid 8916) Use of int in max_burst socket option. [ 114.522071][ T8916] Use struct sctp_assoc_value instead [ 114.718591][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.722169][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.725705][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.729336][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.733044][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.736715][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.740434][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.744128][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.747835][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.753245][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.757019][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.760808][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.764538][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.768134][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.773129][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.776801][ C3] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 114.783696][ T53] usb 10-1: USB disconnect, device number 5 [ 115.368922][ T8943] netlink: 'syz.5.812': attribute type 21 has an invalid length. [ 115.371730][ T8943] netlink: 'syz.5.812': attribute type 6 has an invalid length. [ 115.437598][ T8949] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 115.497814][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.501608][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.740802][ T6026] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 115.913614][ T6026] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 115.916390][ T6026] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.918914][ T6026] usb 8-1: Product: syz [ 115.920110][ T6026] usb 8-1: Manufacturer: syz [ 115.922127][ T6026] usb 8-1: SerialNumber: syz [ 115.932838][ T8979] netlink: 'syz.2.824': attribute type 10 has an invalid length. [ 115.942364][ T8979] team0: Cannot enslave team device to itself [ 116.137272][ T8983] futex_wake_op: syz.2.826 tries to shift op by -1; fix this program [ 116.182606][ T8985] __nla_validate_parse: 12 callbacks suppressed [ 116.182617][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 116.187763][ T8985] Unknown options in mask b7f2 [ 116.502010][ T9007] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 116.505270][ T9007] overlayfs: failed to set xattr on upper [ 116.507961][ T9007] overlayfs: ...falling back to redirect_dir=nofollow. [ 116.510507][ T9007] overlayfs: ...falling back to index=off. [ 116.514062][ T9007] overlayfs: ...falling back to uuid=null. [ 116.516108][ T9007] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 116.523432][ T8995] ieee802154 phy0 wpan0: encryption failed: -126 [ 116.525697][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.829'. [ 116.622508][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.833'. [ 116.660162][ T9020] 9p: Unknown Cache mode or invalid value fs [ 116.866866][ T9040] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 117.132311][ T9061] netlink: 20 bytes leftover after parsing attributes in process `syz.5.850'. [ 117.177796][ T9064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.851'. [ 117.242301][ T9067] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 117.390129][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.853'. [ 117.393394][ T9070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.853'. [ 117.441324][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 117.484333][ T9075] ipt_REJECT: TCP_RESET invalid for non-tcp [ 117.491179][ T9075] netlink: 'syz.4.855': attribute type 3 has an invalid length. [ 117.592017][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 117.598748][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 117.607850][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.611025][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.614165][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 117.617516][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 117.621501][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 117.624361][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.628812][ T9] usb 7-1: config 0 descriptor?? [ 117.639654][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 117.639668][ T40] audit: type=1400 audit(1766333986.160:639): avc: denied { name_bind } for pid=9076 comm="syz.4.856" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 117.652811][ T5942] Bluetooth: hci4: urb ffff888101f50400 submission failed (90) [ 117.833695][ T9] usb 7-1: USB disconnect, device number 6 [ 118.009812][ T9089] tmpfs: Bad value for 'mpol' [ 118.094111][ T9099] netlink: 'syz.4.863': attribute type 21 has an invalid length. [ 118.314965][ T40] audit: type=1400 audit(1766333986.840:640): avc: denied { getattr } for pid=9110 comm="syz.5.866" path="socket:[31328]" dev="sockfs" ino=31328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 118.324532][ T9111] overlay: Unknown parameter 'smackfsroot' [ 118.328639][ T9111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9111 comm=syz.5.866 [ 118.342097][ T6026] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 118.348119][ T6026] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 118.352492][ T6026] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 118.379104][ T6026] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 118.385337][ T6026] usb 8-1: USB disconnect, device number 9 [ 118.391201][ T40] audit: type=1400 audit(1766333986.920:641): avc: denied { connect } for pid=9114 comm="syz.4.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 118.393019][ T7187] failed while handling packet from 1:16384 [ 118.403185][ T40] audit: type=1400 audit(1766333986.930:642): avc: denied { create } for pid=9115 comm="syz.3.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 118.428740][ T9124] ntfs3(nullb0): Primary boot signature is not NTFS. [ 118.432868][ T9124] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 118.441662][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.492720][ T9135] FAT-fs (nullb0): bogus number of reserved sectors [ 118.495157][ T9135] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 118.518797][ T40] audit: type=1400 audit(1766333987.030:643): avc: denied { getopt } for pid=9134 comm="syz.5.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.522125][ T9137] netlink: 'syz.3.876': attribute type 4 has an invalid length. [ 118.528054][ T9137] netlink: 152 bytes leftover after parsing attributes in process `syz.3.876'. [ 118.536911][ T40] audit: type=1400 audit(1766333987.060:644): avc: denied { create } for pid=9141 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 118.540475][ T9137] .`: renamed from bond0 (while UP) [ 118.554374][ T40] audit: type=1400 audit(1766333987.060:645): avc: denied { bind } for pid=9141 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 118.560749][ T40] audit: type=1400 audit(1766333987.060:646): avc: denied { setopt } for pid=9141 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 118.567131][ T40] audit: type=1400 audit(1766333987.070:647): avc: denied { accept } for pid=9141 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 118.574417][ T40] audit: type=1400 audit(1766333987.070:649): avc: denied { read } for pid=9141 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 118.635939][ T9157] veth1_to_batadv: entered promiscuous mode [ 118.650067][ T9159] openvswitch: netlink: Multiple metadata blocks provided [ 118.698376][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.884'. [ 118.886926][ T9181] mkiss: ax0: crc mode is auto. [ 119.531035][ T9194] syz.4.893 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 119.559999][ T9196] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 119.624515][ T9205] overlayfs: missing 'lowerdir' [ 119.775498][ T9214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.899'. [ 119.809754][ T9221] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 120.620833][ T53] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 120.732741][ T9286] usb usb8: usbfs: process 9286 (syz.4.923) did not claim interface 0 before use [ 120.783597][ T53] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 120.786412][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.790369][ T53] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.796325][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.800404][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 120.805376][ T53] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 120.808196][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.812338][ T53] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.820730][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.824813][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 120.836392][ T53] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 120.839237][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 120.844668][ T53] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.849777][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.854612][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 120.861234][ T53] usb 10-1: string descriptor 0 read error: -22 [ 120.863652][ T53] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 120.868920][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.878851][ T53] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 121.006759][ T9302] netlink: 'syz.4.927': attribute type 58 has an invalid length. [ 121.160752][ T53] usb 10-1: USB disconnect, device number 6 [ 121.346858][ T9328] __nla_validate_parse: 6 callbacks suppressed [ 121.346874][ T9328] netlink: 48 bytes leftover after parsing attributes in process `syz.4.932'. [ 121.354511][ T9328] netlink: 48 bytes leftover after parsing attributes in process `syz.4.932'. [ 121.479365][ T9335] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 121.569154][ T9343] netlink: 32 bytes leftover after parsing attributes in process `syz.4.936'. [ 121.572872][ T9343] futex_wake_op: syz.4.936 tries to shift op by -1; fix this program [ 122.063497][ T9371] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.945'. [ 122.207555][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.949'. [ 122.210621][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.949'. [ 122.295075][ T9394] xt_cgroup: path and classid specified [ 122.345229][ T9400] befs: (nbd3): unable to read superblock [ 122.409790][ T9409] netlink: 830 bytes leftover after parsing attributes in process `syz.2.955'. [ 122.420567][ T9409] tipc: Started in network mode [ 122.423475][ T9409] tipc: Node identity 84e, cluster identity 4711 [ 122.425920][ T9409] tipc: Node number set to 2126 [ 122.854696][ T9367] 9pnet_fd: p9_fd_create_tcp (9367): problem connecting socket to 127.0.0.1 [ 122.861793][ T9443] netlink: 224 bytes leftover after parsing attributes in process `syz.3.958'. [ 122.865868][ T9443] F2FS-fs: Conflicting test_dummy_encryption options [ 122.898975][ T9449] loop2: detected capacity change from 0 to 7 [ 122.905896][ T9449] Dev loop2: unable to read RDB block 7 [ 122.907762][ T9449] loop2: unable to read partition table [ 122.909642][ T9449] loop2: partition table beyond EOD, truncated [ 122.914191][ T9449] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.944759][ T5942] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 123.178224][ T9466] program syz.3.966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.236696][ T9467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.966'. [ 123.250783][ T6026] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 123.365774][ T8656] udevd[8656]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 123.373486][ T5954] udevd[5954]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 123.402643][ T6026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 123.409478][ T6026] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.413797][ T6026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.417236][ T6026] usb 7-1: Product: syz [ 123.418668][ T6026] usb 7-1: Manufacturer: syz [ 123.420550][ T6026] usb 7-1: SerialNumber: syz [ 123.425833][ T6026] usb 7-1: config 0 descriptor?? [ 123.523225][ T9477] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 123.525898][ T9477] lo: entered promiscuous mode [ 123.528376][ T9477] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.532635][ T9477] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 123.535122][ T9477] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.538883][ T9477] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 123.541527][ T9477] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.545334][ T9477] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 123.547823][ T9477] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.552401][ T9477] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 123.555060][ T9477] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.558900][ T9477] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 123.561566][ T9477] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.565441][ T9477] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 123.567943][ T9477] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.572037][ T9477] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 123.574480][ T9477] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.578894][ T9477] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 123.581474][ T9477] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.629041][ T9482] ip6t_srh: unknown srh invflags 4000 [ 123.911731][ T6360] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 124.063508][ T6360] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 124.070364][ T6360] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.077112][ T6360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.080576][ T6360] usb 9-1: Product: syz [ 124.082465][ T6360] usb 9-1: Manufacturer: syz [ 124.084486][ T6360] usb 9-1: SerialNumber: syz [ 124.091727][ T6360] usb 9-1: config 0 descriptor?? [ 124.234492][ T53] usb 7-1: USB disconnect, device number 7 [ 124.298139][ T9484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.970'. [ 124.336030][ T9484] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9484 comm=syz.4.970 [ 124.548415][ T9484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.551707][ T9484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.555406][ T6360] usb 9-1: USB disconnect, device number 24 [ 124.947745][ T9518] loop5: detected capacity change from 0 to 7 [ 124.952075][ T9518] loop5: [ 124.953070][ T9518] loop5: partition table partially beyond EOD, truncated [ 125.112742][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 125.112753][ T40] audit: type=1400 audit(1766333993.640:661): avc: denied { read } for pid=9540 comm="syz.4.986" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 125.127072][ T40] audit: type=1400 audit(1766333993.650:662): avc: denied { wake_alarm } for pid=9540 comm="syz.4.986" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.184429][ T9543] bridge0: port 3(syz_tun) entered blocking state [ 125.186992][ T9543] bridge0: port 3(syz_tun) entered disabled state [ 125.189047][ T9543] syz_tun: entered allmulticast mode [ 125.193786][ T9543] syz_tun: entered promiscuous mode [ 125.278526][ T40] audit: type=1400 audit(1766333993.800:663): avc: denied { ioctl } for pid=9545 comm="syz.4.988" path="socket:[33551]" dev="sockfs" ino=33551 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 125.373691][ T9555] gfs2: Unknown parameter 'norecoverysb/00#/00#' [ 125.378707][ T9557] netlink: 'syz.3.991': attribute type 5 has an invalid length. [ 125.388113][ T9557] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 125.415804][ T9555] ref_ctr_offset mismatch. inode: 0x62c offset: 0x7 ref_ctr_offset(old): 0x200000000980 ref_ctr_offset(new): 0x24 [ 125.488616][ T9561] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 125.619137][ T9574] bond0: Removing last arp target with arp_interval on [ 126.226501][ T40] audit: type=1400 audit(1766333994.750:664): avc: denied { ioctl } for pid=9590 comm="syz.4.999" path="/210/file0/file0" dev="9p" ino=71827799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.500864][ T9600] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 126.504848][ T9600] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 126.788740][ T9618] __nla_validate_parse: 7 callbacks suppressed [ 126.788750][ T9618] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1009'. [ 126.793853][ T9618] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1009'. [ 126.796687][ T9618] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1009'. [ 126.850156][ T9625] (syz.3.1011,9625,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 126.894852][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1012'. [ 126.981369][ T9633] program syz.3.1013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.001816][ T5942] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 127.005924][ T5942] Bluetooth: hci3: Injecting HCI hardware error event [ 127.012023][ T5942] Bluetooth: hci3: hardware error 0x00 [ 127.044332][ T9633] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 127.048884][ T9633] orangefs_devreq_write_iter: total:146: must be at least:8240: [ 127.101936][ T9640] IPv6: addrconf: prefix option has invalid lifetime [ 127.188115][ T9642] set match dimension is over the limit! [ 127.259513][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 127.263968][ T9648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1017'. [ 127.269498][ T9647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.269600][ T9650] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input16 [ 127.457715][ T9672] Unsupported ieee802154 address type: 0 [ 127.467248][ T9675] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.512754][ T9681] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1027'. [ 127.568934][ T9685] ªªªªªª: renamed from vlan0 [ 127.900840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 127.933087][ T9696] ieee802154 phy0 wpan0: encryption failed: -126 [ 128.115710][ T40] audit: type=1400 audit(1766333996.640:665): avc: denied { read } for pid=9705 comm="syz.4.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.429132][ T9725] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1044'. [ 128.554943][ T9742] fuse: Bad value for 'user_id' [ 128.556898][ T9742] fuse: Bad value for 'user_id' [ 128.566931][ T40] audit: type=1400 audit(1766333997.090:666): avc: denied { associate } for pid=9744 comm="syz.4.1048" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 128.631139][ T3328] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 128.632485][ T40] audit: type=1400 audit(1766333997.160:667): avc: denied { lock } for pid=9730 comm="syz.3.1046" path="socket:[34343]" dev="sockfs" ino=34343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 129.071168][ T5942] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 129.657259][ T9768] ALSA: mixer_oss: invalid OSS volume '' [ 129.659744][ T9768] ALSA: mixer_oss: invalid OSS volume '¾%a}öcÍRº­çÞŸ=¤ Ë.ßYφ÷GV/' [ 130.522317][ T40] audit: type=1400 audit(1766333999.050:668): avc: denied { unmount } for pid=6218 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 130.549407][ T9808] loop2: detected capacity change from 0 to 7 [ 130.552235][ T9808] Dev loop2: unable to read RDB block 7 [ 130.554215][ T9808] loop2: unable to read partition table [ 130.556448][ T9808] loop2: partition table beyond EOD, truncated [ 130.558917][ T9808] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 130.612913][ T40] audit: type=1400 audit(1766333999.140:669): avc: denied { map } for pid=9809 comm="syz.4.1067" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 130.724254][ T40] audit: type=1400 audit(1766333999.250:670): avc: denied { ioctl } for pid=9816 comm="syz.4.1070" path="socket:[34458]" dev="sockfs" ino=34458 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.847530][ T9822] openvswitch: netlink: Missing valid actions attribute. [ 130.850623][ T9822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.869303][ T9826] lo speed is unknown, defaulting to 1000 [ 130.871511][ T9826] lo speed is unknown, defaulting to 1000 [ 130.874413][ T9826] lo speed is unknown, defaulting to 1000 [ 130.878596][ T9826] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 130.885202][ T9826] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 130.911487][ T9826] lo speed is unknown, defaulting to 1000 [ 130.916130][ T9826] lo speed is unknown, defaulting to 1000 [ 130.921442][ T9826] lo speed is unknown, defaulting to 1000 [ 130.925732][ T9826] lo speed is unknown, defaulting to 1000 [ 130.972350][ T40] audit: type=1400 audit(1766333999.500:671): avc: denied { append } for pid=9835 comm="syz.3.1074" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 131.026226][ T40] audit: type=1400 audit(1766333999.550:672): avc: denied { map } for pid=9837 comm="syz.3.1075" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.069765][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1077'. [ 131.156310][ T40] audit: type=1400 audit(1766333999.680:673): avc: denied { append } for pid=9848 comm="syz.3.1079" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 131.156683][ T9849] random: crng reseeded on system resumption [ 131.164260][ T9857] validate_nla: 36 callbacks suppressed [ 131.164272][ T9857] netlink: 'syz.4.1081': attribute type 4 has an invalid length. [ 131.165968][ T40] audit: type=1400 audit(1766333999.680:674): avc: denied { open } for pid=9848 comm="syz.3.1079" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 131.192425][ T40] audit: type=1400 audit(1766333999.720:675): avc: denied { ioctl } for pid=9848 comm="syz.3.1079" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 131.224828][ T9863] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1083'. [ 131.500764][ T3328] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 131.627938][ T40] audit: type=1400 audit(1766334000.150:676): avc: denied { call } for pid=9872 comm="syz.3.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 131.639282][ T9873] binder: 9872:9873 ioctl 408c563e 200000000280 returned -22 [ 131.639357][ T40] audit: type=1400 audit(1766334000.150:677): avc: denied { transfer } for pid=9872 comm="syz.3.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 131.669680][ T9875] bridge4: entered promiscuous mode [ 131.670908][ T3328] usb 9-1: Using ep0 maxpacket: 8 [ 131.675461][ T3328] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 131.678701][ T3328] usb 9-1: config 0 has no interface number 0 [ 131.681326][ T3328] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.685633][ T3328] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 131.690193][ T3328] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.694963][ T3328] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 131.700260][ T3328] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 131.704254][ T3328] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.712352][ T3328] usb 9-1: config 0 descriptor?? [ 131.724246][ T3328] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 131.925499][ T3328] usb 9-1: USB disconnect, device number 25 [ 131.934410][ T9867] netlink: 'syz.4.1085': attribute type 10 has an invalid length. [ 131.938550][ T3328] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 131.941195][ T9867] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 131.944523][ T9867] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 132.181909][ T9897] SELinux: syz.3.1096 (9897) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 132.800450][ T9906] netlink: 'syz.4.1099': attribute type 10 has an invalid length. [ 132.804626][ T9906] bridge_slave_1: left allmulticast mode [ 132.806901][ T9906] bridge_slave_1: left promiscuous mode [ 132.809237][ T9906] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.824623][ T9906] bridge_slave_1: entered allmulticast mode [ 132.827358][ T9906] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 132.984718][ T9910] bond5: Unable to set down delay as MII monitoring is disabled [ 132.989289][ T9910] bond5 (unregistering): Released all slaves [ 133.259059][ T9929] __nla_validate_parse: 1 callbacks suppressed [ 133.259075][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 133.461532][ T9936] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(39) [ 133.464186][ T9936] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 133.467390][ T9936] vhci_hcd vhci_hcd.0: Device attached [ 133.485611][ T9939] vhci_hcd: connection closed [ 133.487328][ T7186] vhci_hcd vhci_hcd.4: stop threads [ 133.491356][ T7186] vhci_hcd vhci_hcd.4: release socket [ 133.493138][ T7186] vhci_hcd vhci_hcd.4: disconnect device [ 133.679162][ T9951] XFS (nullb0): Invalid superblock magic number [ 133.983608][ T9966] ata1.00: invalid multi_count 128 ignored [ 134.408182][ T9979] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 134.410363][ T9979] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 134.413126][ T9978] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 134.415718][ T9978] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 134.418852][ T9979] vhci_hcd vhci_hcd.0: Device attached [ 134.419955][ T9978] vhci_hcd vhci_hcd.0: Device attached [ 134.424421][ T9980] vhci_hcd: connection closed [ 134.424667][ T9981] vhci_hcd: connection closed [ 134.425718][ T9743] vhci_hcd vhci_hcd.4: stop threads [ 134.433315][ T9743] vhci_hcd vhci_hcd.4: release socket [ 134.435500][ T9743] vhci_hcd vhci_hcd.4: disconnect device [ 134.437883][ T9743] vhci_hcd vhci_hcd.4: stop threads [ 134.439934][ T9743] vhci_hcd vhci_hcd.4: release socket [ 134.444043][ T9743] vhci_hcd vhci_hcd.4: disconnect device [ 135.076940][ T9991] netlink: 'syz.4.1123': attribute type 39 has an invalid length. [ 136.136820][T10000] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 137.643520][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.003264][T10017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1134'. [ 139.740850][ T1418] ================================================================== [ 139.743380][ T1418] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 139.745593][ T1418] Read of size 1 at addr ffff88805793d490 by task aoe_tx0/1418 [ 139.748582][ T1418] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 139.750111][ T1418] CPU: 0 UID: 0 PID: 1418 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.750127][ T1418] Tainted: [L]=SOFTLOCKUP [ 139.750131][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.750137][ T1418] Call Trace: [ 139.750141][ T1418] [ 139.750145][ T1418] dump_stack_lvl+0x116/0x1f0 [ 139.750167][ T1418] print_report+0xcd/0x630 [ 139.750180][ T1418] ? __virt_addr_valid+0x81/0x610 [ 139.750190][ T1418] ? __phys_addr+0xe8/0x180 [ 139.750199][ T1418] ? handle_tx+0x5dc/0x630 [ 139.750213][ T1418] kasan_report+0xe0/0x110 [ 139.750226][ T1418] ? handle_tx+0x5dc/0x630 [ 139.750241][ T1418] handle_tx+0x5dc/0x630 [ 139.750257][ T1418] dev_hard_start_xmit+0x97/0x6e0 [ 139.750274][ T1418] __dev_queue_xmit+0x6d7/0x4650 [ 139.750290][ T1418] ? rcu_is_watching+0x12/0xc0 [ 139.750300][ T1418] ? finish_task_switch.isra.0+0x207/0xbd0 [ 139.750316][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 139.750333][ T1418] ? __lock_acquire+0x436/0x2890 [ 139.750345][ T1418] ? ref_tracker_free+0x37c/0x830 [ 139.750362][ T1418] ? do_raw_spin_lock+0x12c/0x2b0 [ 139.750378][ T1418] ? rcu_is_watching+0x12/0xc0 [ 139.750388][ T1418] tx+0xcc/0x190 [ 139.750401][ T1418] ? __pfx_tx+0x10/0x10 [ 139.750412][ T1418] kthread+0x1e4/0x3e0 [ 139.750423][ T1418] ? find_held_lock+0x2b/0x80 [ 139.750441][ T1418] ? __pfx_kthread+0x10/0x10 [ 139.750451][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 139.750468][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 139.750481][ T1418] ? __kthread_parkme+0x19e/0x250 [ 139.750491][ T1418] ? __pfx_kthread+0x10/0x10 [ 139.750501][ T1418] kthread+0x3c5/0x780 [ 139.750514][ T1418] ? __pfx_kthread+0x10/0x10 [ 139.750525][ T1418] ? rcu_is_watching+0x12/0xc0 [ 139.750537][ T1418] ? __pfx_kthread+0x10/0x10 [ 139.750549][ T1418] ret_from_fork+0x983/0xb10 [ 139.750560][ T1418] ? __pfx_ret_from_fork+0x10/0x10 [ 139.750572][ T1418] ? __switch_to+0x7af/0x10d0 [ 139.750585][ T1418] ? __pfx_kthread+0x10/0x10 [ 139.750596][ T1418] ret_from_fork_asm+0x1a/0x30 [ 139.750615][ T1418] [ 139.750618][ T1418] [ 139.815445][ T1418] Allocated by task 8672: [ 139.816898][ T1418] kasan_save_stack+0x33/0x60 [ 139.818407][ T1418] kasan_save_track+0x14/0x30 [ 139.819928][ T1418] __kasan_kmalloc+0xaa/0xb0 [ 139.821386][ T1418] alloc_tty_struct+0x96/0x8c0 [ 139.822914][ T1418] tty_init_dev.part.0+0x1e/0x500 [ 139.824494][ T1418] tty_open+0xa4f/0xf90 [ 139.825830][ T1418] chrdev_open+0x234/0x6a0 [ 139.827276][ T1418] do_dentry_open+0x748/0x1590 [ 139.828787][ T1418] vfs_open+0x82/0x3f0 [ 139.830083][ T1418] path_openat+0x2078/0x3140 [ 139.831636][ T1418] do_filp_open+0x20b/0x470 [ 139.833073][ T1418] do_sys_openat2+0x121/0x290 [ 139.834548][ T1418] __x64_sys_openat+0x174/0x210 [ 139.836153][ T1418] do_syscall_64+0xcd/0xf80 [ 139.837598][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.839452][ T1418] [ 139.840244][ T1418] Freed by task 3328: [ 139.841502][ T1418] kasan_save_stack+0x33/0x60 [ 139.843008][ T1418] kasan_save_track+0x14/0x30 [ 139.844491][ T1418] kasan_save_free_info+0x3b/0x60 [ 139.846021][ T1418] __kasan_slab_free+0x5f/0x80 [ 139.847502][ T1418] kfree+0x2f8/0x6e0 [ 139.848719][ T1418] process_one_work+0x9ba/0x1b20 [ 139.850264][ T1418] worker_thread+0x6c8/0xf10 [ 139.851693][ T1418] kthread+0x3c5/0x780 [ 139.852944][ T1418] ret_from_fork+0x983/0xb10 [ 139.854361][ T1418] ret_from_fork_asm+0x1a/0x30 [ 139.855796][ T1418] [ 139.856514][ T1418] Last potentially related work creation: [ 139.858217][ T1418] kasan_save_stack+0x33/0x60 [ 139.859686][ T1418] kasan_record_aux_stack+0xa7/0xc0 [ 139.861272][ T1418] insert_work+0x36/0x230 [ 139.862629][ T1418] __queue_work+0x94f/0x10e0 [ 139.864413][ T1418] queue_work_on+0x1a4/0x1f0 [ 139.865797][ T1418] release_tty+0x4de/0x5d0 [ 139.867200][ T1418] tty_release_struct+0xb7/0xe0 [ 139.868683][ T1418] tty_release+0xe2d/0x1470 [ 139.870078][ T1418] __fput+0x402/0xb70 [ 139.871282][ T1418] task_work_run+0x150/0x240 [ 139.872652][ T1418] do_exit+0x87f/0x2bd0 [ 139.873950][ T1418] do_group_exit+0xd3/0x2a0 [ 139.875339][ T1418] get_signal+0x2671/0x26d0 [ 139.876741][ T1418] arch_do_signal_or_restart+0x8f/0x7e0 [ 139.878396][ T1418] exit_to_user_mode_loop+0x8c/0x540 [ 139.880048][ T1418] do_syscall_64+0x4ee/0xf80 [ 139.881446][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.883231][ T1418] [ 139.883973][ T1418] The buggy address belongs to the object at ffff88805793d000 [ 139.883973][ T1418] which belongs to the cache kmalloc-cg-2k of size 2048 [ 139.888331][ T1418] The buggy address is located 1168 bytes inside of [ 139.888331][ T1418] freed 2048-byte region [ffff88805793d000, ffff88805793d800) [ 139.892487][ T1418] [ 139.893225][ T1418] The buggy address belongs to the physical page: [ 139.895154][ T1418] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57938 [ 139.897819][ T1418] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 139.900479][ T1418] memcg:ffff888037b4fb81 [ 139.902140][ T1418] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 139.904549][ T1418] page_type: f5(slab) [ 139.905758][ T1418] raw: 00fff00000000040 ffff88801b44c140 0000000000000000 dead000000000001 [ 139.908494][ T1418] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888037b4fb81 [ 139.911195][ T1418] head: 00fff00000000040 ffff88801b44c140 0000000000000000 dead000000000001 [ 139.913867][ T1418] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888037b4fb81 [ 139.916523][ T1418] head: 00fff00000000003 ffffea00015e4e01 00000000ffffffff 00000000ffffffff [ 139.919193][ T1418] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 139.921850][ T1418] page dumped because: kasan: bad access detected [ 139.923830][ T1418] page_owner tracks the page as allocated [ 139.925578][ T1418] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6502, tgid 6501 (syz.3.135), ts 65203849425, free_ts 64111322776 [ 139.931961][ T1418] post_alloc_hook+0x1af/0x220 [ 139.933411][ T1418] get_page_from_freelist+0xd0b/0x31a0 [ 139.935039][ T1418] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 139.936837][ T1418] alloc_pages_mpol+0x1fb/0x550 [ 139.938303][ T1418] new_slab+0x2c3/0x430 [ 139.939580][ T1418] ___slab_alloc+0xe18/0x1c90 [ 139.941040][ T1418] __slab_alloc.constprop.0+0x63/0x110 [ 139.942632][ T1418] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 139.944540][ T1418] kmemdup_noprof+0x29/0x60 [ 139.945887][ T1418] neigh_sysctl_register+0xb2/0x670 [ 139.947429][ T1418] devinet_sysctl_register+0xb6/0x200 [ 139.949057][ T1418] inetdev_init+0x2b8/0x580 [ 139.950445][ T1418] inetdev_event+0xc32/0x1870 [ 139.951899][ T1418] notifier_call_chain+0xbc/0x3e0 [ 139.953473][ T1418] call_netdevice_notifiers_info+0xbe/0x110 [ 139.955314][ T1418] register_netdevice+0x1792/0x21d0 [ 139.956914][ T1418] page last free pid 1143 tgid 1143 stack trace: [ 139.958853][ T1418] __free_frozen_pages+0x7df/0x1170 [ 139.960441][ T1418] __put_partials+0x130/0x170 [ 139.962204][ T1418] qlist_free_all+0x4c/0xf0 [ 139.963918][ T1418] kasan_quarantine_reduce+0x195/0x1e0 [ 139.965615][ T1418] __kasan_slab_alloc+0x69/0x90 [ 139.967140][ T1418] __kmalloc_node_track_caller_noprof+0x30b/0x930 [ 139.969103][ T1418] kmalloc_reserve+0xef/0x2c0 [ 139.970513][ T1418] __alloc_skb+0x186/0x410 [ 139.971875][ T1418] mld_newpack.isra.0+0x18e/0xa20 [ 139.973421][ T1418] add_grhead+0x299/0x340 [ 139.974777][ T1418] add_grec+0x11b5/0x1720 [ 139.976122][ T1418] mld_send_initial_cr+0x151/0x320 [ 139.977644][ T1418] ipv6_mc_dad_complete+0xa7/0x1d0 [ 139.979195][ T1418] addrconf_dad_completed+0xd8a/0x10d0 [ 139.980839][ T1418] addrconf_dad_work+0x855/0x14f0 [ 139.982341][ T1418] process_one_work+0x9ba/0x1b20 [ 139.983868][ T1418] [ 139.984606][ T1418] Memory state around the buggy address: [ 139.986265][ T1418] ffff88805793d380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.988651][ T1418] ffff88805793d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.991047][ T1418] >ffff88805793d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.993390][ T1418] ^ [ 139.994799][ T1418] ffff88805793d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.997251][ T1418] ffff88805793d580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.999625][ T1418] ================================================================== [ 140.002112][ T1418] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 140.004267][ T1418] CPU: 0 UID: 0 PID: 1418 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.007395][ T1418] Tainted: [L]=SOFTLOCKUP [ 140.008701][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.012011][ T1418] Call Trace: [ 140.013019][ T1418] [ 140.013927][ T1418] dump_stack_lvl+0x3d/0x1f0 [ 140.015346][ T1418] vpanic+0x640/0x6f0 [ 140.016588][ T1418] panic+0xca/0xd0 [ 140.017759][ T1418] ? __pfx_panic+0x10/0x10 [ 140.019431][ T1418] ? check_panic_on_warn+0x1f/0xb0 [ 140.021117][ T1418] check_panic_on_warn+0xab/0xb0 [ 140.022617][ T1418] end_report+0x107/0x160 [ 140.023979][ T1418] kasan_report+0xee/0x110 [ 140.025380][ T1418] ? handle_tx+0x5dc/0x630 [ 140.026813][ T1418] handle_tx+0x5dc/0x630 [ 140.028137][ T1418] dev_hard_start_xmit+0x97/0x6e0 [ 140.029709][ T1418] __dev_queue_xmit+0x6d7/0x4650 [ 140.031286][ T1418] ? rcu_is_watching+0x12/0xc0 [ 140.032761][ T1418] ? finish_task_switch.isra.0+0x207/0xbd0 [ 140.034566][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 140.036262][ T1418] ? __lock_acquire+0x436/0x2890 [ 140.037809][ T1418] ? ref_tracker_free+0x37c/0x830 [ 140.039408][ T1418] ? do_raw_spin_lock+0x12c/0x2b0 [ 140.041009][ T1418] ? rcu_is_watching+0x12/0xc0 [ 140.042515][ T1418] tx+0xcc/0x190 [ 140.043932][ T1418] ? __pfx_tx+0x10/0x10 [ 140.045424][ T1418] kthread+0x1e4/0x3e0 [ 140.046993][ T1418] ? find_held_lock+0x2b/0x80 [ 140.048807][ T1418] ? __pfx_kthread+0x10/0x10 [ 140.050591][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 140.052399][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 140.054006][ T1418] ? __kthread_parkme+0x19e/0x250 [ 140.055575][ T1418] ? __pfx_kthread+0x10/0x10 [ 140.057021][ T1418] kthread+0x3c5/0x780 [ 140.058308][ T1418] ? __pfx_kthread+0x10/0x10 [ 140.059737][ T1418] ? rcu_is_watching+0x12/0xc0 [ 140.061288][ T1418] ? __pfx_kthread+0x10/0x10 [ 140.062710][ T1418] ret_from_fork+0x983/0xb10 [ 140.064136][ T1418] ? __pfx_ret_from_fork+0x10/0x10 [ 140.065706][ T1418] ? __switch_to+0x7af/0x10d0 [ 140.067169][ T1418] ? __pfx_kthread+0x10/0x10 [ 140.068594][ T1418] ret_from_fork_asm+0x1a/0x30 [ 140.070075][ T1418] [ 140.071672][ T1418] Kernel Offset: disabled [ 140.073012][ T1418] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:15:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85326365 RDI=ffffffff9aeedc00 RBP=ffffffff9aeedbc0 RSP=ffffc9000748f3d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000078 R14=ffffffff9aeedbc0 R15=ffffffff85326300 RIP=ffffffff8532638f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555575bfd808 CR3=0000000025551000 CR4=00352ef0 DR0=0000000000000008 DR1=0000000000000007 DR2=0000000000000004 DR3=0000000000000008 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5b7a9300 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0075c15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0075c1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0075c15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0075c1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0075c150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0075c151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000020000 RBX=0000000000000000 RCX=0000000000020000 RDX=0000000000000007 RSI=0000000000000000 RDI=ffffffff8e3c9620 RBP=0000000000000003 RSP=ffffc90003d17610 R8 =0000000000000000 R9 =0000000000000007 R10=0000000000000000 R11=ffff8880223ad4b0 R12=ffff8880223ac980 R13=ffffffff8e3c9620 R14=ffff8880223ad528 R15=0000000000000000 RIP=ffffffff8199cbeb RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f85c6717d60 CR3=000000002ce32000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f85c5bba6c3 00007f85c5bba6c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc87d69a50 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000008 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000009 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555584036af3 0000555584033d00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d003428000000034 0180100000000000 800444a003408010 0044900301800444 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08014d8004108885 bac208000100000e 080606011ea40002 0007001000000037 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800010000000000 06011e9800020007 0010000010004680 040c100000000036 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000c0800000000 ce00020007408010 0045b003018f8004 45a0032000000035 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0343800400000000 80100044f0034f80 0444e00370100044 d003428000000034 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f5f207220643730 6335336239666666 66666666660a3934 30315f6f666e6964 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3966666666666666 660a383430315f6f 666e69646f6d5f44 495f455551494e55 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30315f6f666e6964 6f6d5f44495f4555 51494e555f5f2072 2030623063353362 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666e69646f6d5f44 495f455551494e55 5f5f207220653331 6435336239666666 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5551494e555f5f20 7220653731643533 6239666666666666 66660a3535395f6f ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6231643533623966 666666666666660a 3435395f6f666e69 646f6d5f44495f45 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666666660a333539 5f6f666e69646f6d 5f44495f45555149 4e555f5f20722065 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff888024b78000 RSI=ffffffff816bdc71 RDI=ffffffff8bf2b380 RBP=ffff88802a3b0140 RSP=ffffc90003327628 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff9088b3d7 R11=ffff888024b78b30 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a63bbc0 R15=ffffed1005476028 RIP=ffffffff8b77fdcf RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6af5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0076a50fe0 CR3=0000000025551000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5b7a9300 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0075c15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0075c1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0075c15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0075c1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0075c150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0075c151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88811079a000 RCX=0000000000000e80 RDX=fffffbfff1bae6ae RSI=fffffbfff1bae6ac RDI=ffff88811079a180 RBP=ffffea0004410000 RSP=ffffc90006157820 R8 =0000000000100000 R9 =0000000000000000 R10=ffffed1022080000 R11=dffffc0000000000 R12=00000000000029c2 R13=ffffea000441e680 R14=000000000000000a R15=ffffea0004420000 RIP=ffffffff8b76a58b RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555563b11500 ffffffff 00c00000 GS =0000 ffff8880d6bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f983bde6038 CR3=0000000035e9a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f983c91d100 00007f983bdba460 00007f983bdba478 00007f983bdba4c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000