last executing test programs: 5.379845727s ago: executing program 3 (id=231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=virtio,cache=mmap']) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=virtio,cache=mmap']) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001880)={0x1, 0x0, [{0xddf11baa0b33d4d9, 0x43, &(0x7f0000001700)=""/67}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001880)={0x1, 0x0, [{0xddf11baa0b33d4d9, 0x43, &(0x7f0000001700)=""/67}]}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) syz_create_resource$binfmt(&(0x7f0000000340)='./file0/file1\x00') openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) (async) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "30315be07b3d1cee0f1a117fbdeec3329037b9b8e6c681dc8eac25da10f27a47", "7efd27414f58889a465d7258bb318f7698a45c6dfcbedac24407b0e48b49b1a7", "787583f170175c961d218c79a6ed60a242369d3d4c9a32231f9a627581f599bb", "68f1b8696afe3855e825259d22f1828f5fec11b7668de8cf91630af3acdf3e7c", "7ed4de2376a9832f59cebfea5caa1742babb9a878cfdf5959438c02642dec8b8", "70efc203420f06debcb4f43b", 0xffff, 0x0, 0x4, 0x200, 0x7}}) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) (async) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) setxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000480)=@ng={0x4, 0x13, "87a0aa"}, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f0000000500)='./file0\x00', &(0x7f0000000680)={[&(0x7f0000000540)='\xde%%(%)u/\xe7&}^,\x00', &(0x7f00000005c0)=']\x00', &(0x7f0000000600)='syz\x00', &(0x7f0000000640)='\\{~$\x80}-{\x83##\x00']}, &(0x7f0000000880)={[&(0x7f00000006c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000700)='security.ima\x00', &(0x7f0000000740)='@-x\x00', &(0x7f0000000780)='\xaa\xaa\xaa\xaa\xaa', &(0x7f00000007c0)='+%-+\x00', &(0x7f0000000800)='\xc7\'\x00', &(0x7f0000000840)='%\x00']}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r7, @ANYBLOB="ef694821e16065bb06e34a3361f00c4109a1d9540912cd008544dc140e34fe8c132eaea468bbc3035a4e5aa726b04822412a3061ff3722598b0ef7ab23213e0c0ba4ff1538646e53cfa44b7d87c58eb0d9774a4f0e3bc149bbf0c79de486eeda545e62234338dbea6bb30028b67039321075d78f1b477e9977cf2a7300652e83c286e02bc57ed89ced0b8df3c1893ab15f0e96fb85517d95256a770a12e682272fe332b367dfaebfa11cba4f1014ad62a297d85e455764f12d7dd56276c2e2190e009b76c708672a60526c382a16e89ed5a75c8f"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x26, 0x4, 0xfe) (async) r8 = socket(0x26, 0x4, 0xfe) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa97c4864ef7a30900490000240064000000879078ac1414bbac14140c8907efe000000d7be7fffff5ffffffff"], 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0), 0x0, 0x9200000000000000) getpgid(0x0) 5.270844671s ago: executing program 3 (id=233): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x88800, 0xd1) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000100)) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000140)) ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x6) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0xc080, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r3 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0xae, 0xc9}}}, 0x6) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000600), 0x240200, 0x0) kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x6, r4, r1) ioctl$FITHAW(r0, 0xc0045878) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640)='/dev/bsg/0:0:0:0\x00', 0x2c000, 0x0) ioctl$SG_SET_DEBUG(r5, 0x227e, &(0x7f0000000680)=0x1) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f00000006c0)={0xb6, 0x0, 0xf466}) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000740)={0x1, 0x5}) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000840)={0x62, 0x40, &(0x7f0000000780)="89ea91a137efe08f27f4e326de639205e9572a16db9657d9a4d9cbadc8b472a3bb08125e0c0ae1682c16fd62bb6330031b42b945ee13818092d2fe8f53a91701ec559faa496ae3b83a005f1f659c4acb1948fd1e2ebd031d2478700ac43fe0357f59633fa2d0b8f7307ac7293c30bc7704defebdddc6b2c4f7ee461e03937f55d8556a869afc713ad5", {0xfffffffb, 0x0, 0x49433553, 0x3, 0x400, 0x4, 0x5, 0x6}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000f80)={0xe4, 0x0, &(0x7f0000000e00)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000980)={@fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f00000008c0)=""/166, 0xa6, 0x2, 0x22}}, &(0x7f0000000a00)={0x0, 0x18, 0x30}}}, @acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b80)={@ptr={0x70742a85, 0x1, &(0x7f0000000a40)=""/6, 0x6, 0x2, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f0000000a80)=""/208, 0xd0, 0x2, 0x26}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000c00)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000d40)={@ptr={0x70742a85, 0x0, &(0x7f0000000c40)=""/156, 0x9c, 0x1, 0x4}, @flat=@weak_binder={0x77622a85, 0x3004}, @ptr={0x70742a85, 0x0, &(0x7f0000000d00)=""/48, 0x30, 0x1, 0x23}}, &(0x7f0000000dc0)={0x0, 0x28, 0x40}}}], 0x41, 0x0, &(0x7f0000000f00)="ea0754a87f3a877503cc99bfb2f18d72d50c1e9b0f1e8d538cef7210fb8242b94a5b6d5afac79712a22a7ffe2eb691a7b17e468f14ff7405229b86feab59fa8fe6"}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f0000000fc0)={0xa4, 0x0, 0x1}) sendto$inet(r0, &(0x7f0000001040)="796bed3f68293035d82681075c0950d13da159bba5eb9ce351ba3e2145e6804a0c247d38190467667602630e0ce6bb368a15782993f9bc92d8c98fc401c8d359a4b4c8f26b5b9d2a3a70fe5ff48679672ba573e7c0a0918ca7419bfb1613fe3c1641d550ba3c2c26ea09da475b253ece445aded0a035786ec62d8564448b2b6bef3d49309a77099c", 0x88, 0x200048c0, &(0x7f0000001100)={0x2, 0x4e24, @loopback}, 0x10) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000001180)={0x3, 0x0, &(0x7f0000001140)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000001440)={&(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[{}, {}, {}, {}], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x4, 0xa}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000001540)={&(0x7f00000014c0)=[0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0], 0x3, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000001940)={0x1, 0x1, &(0x7f00000011c0)=[r8], &(0x7f0000001200)=[0x9, 0x4, 0x100, 0x6, 0x0, 0x0], &(0x7f00000018c0)=[r9, r10, 0x0, 0x0], &(0x7f0000001900)=[0xc9], 0x0, 0x2}) 5.192055229s ago: executing program 3 (id=234): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x0, 0x0}], 0x1}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioperm(0x0, 0x2, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0x6, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @rose, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x6, 0x5}) 2.850315598s ago: executing program 3 (id=257): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) socket(0x2, 0x3, 0xff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0x30}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) pipe2$watch_queue(&(0x7f0000000040), 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x5e, 0x2, 0x1d, 0x0, 0x3}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x8, 0x0, 0x5e, 0xfffffffffffffff9}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x300, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) socket$inet(0x2, 0x3, 0xb) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.673724777s ago: executing program 3 (id=258): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0x10}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async) syz_open_dev$video4linux(0x0, 0x5, 0x20400) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x100000000000000, &(0x7f0000000580)="b318"}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.580048047s ago: executing program 3 (id=259): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x8680, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0xa817}, &(0x7f00000001c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0xa817}, &(0x7f00000001c0)=0x8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) r5 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0xfff, 0x20080) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x3) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000340)={0xfffffffffffffff7, 0xfffffffffffffffb}) (async) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000340)={0xfffffffffffffff7, 0xfffffffffffffffb}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) r6 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r6) (async) syz_usb_disconnect(r6) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r5, 0x80084121, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000440)=@assoc_value, &(0x7f0000000480)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000440)=@assoc_value, &(0x7f0000000480)=0x8) write$binfmt_misc(r1, &(0x7f00000004c0)="cbe861bceee2a6381b93b76bb41f9135f919cdc2917c7bf401be8c50b4819f96d5413d132cb14ddcdac6d2556a7ae29f217a6436a9b244781cb5f982d1e30064a88e70b81618b0c802ae7b525b20cc83359f85b37255c9a996a8233fdc6d26e9237d329916ef78c633a69fddbec92c0147892fa8ed", 0x75) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@mpls_getnetconf={0x2c, 0x52, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x83b0000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000740)={0x0, 0x18, "632e60fa42137f947cf7a78e6fabac1a51263825b42d6d36"}) (async) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000740)={0x0, 0x18, "632e60fa42137f947cf7a78e6fabac1a51263825b42d6d36"}) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000840)={r8, 0x8, {0x0, 0x0, 0x0, 0x5c4, 0x100, 0x0, 0x4, 0x3, 0x14, "fa0b5398419d7e6025186980c6d44c5d04c205a9640729e5f04d3f1613a729b852ac76f11d0ee41e0b291e6889a3c7fc39ce2f9c5565181234df4f27db919345", "acd07b7d1b44981f447501fd530ca1b0f8bf82edf5576d53080044020005f345124ff0301842ba71bb3e38d942df2a485dbfefdf5f83af288d477115eb5af6f4", "938a97fca1d3774a699edf1b0a6852c04bad4b9869748c16c930233b42348037", [0x6e, 0x1]}}) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000840)={r8, 0x8, {0x0, 0x0, 0x0, 0x5c4, 0x100, 0x0, 0x4, 0x3, 0x14, "fa0b5398419d7e6025186980c6d44c5d04c205a9640729e5f04d3f1613a729b852ac76f11d0ee41e0b291e6889a3c7fc39ce2f9c5565181234df4f27db919345", "acd07b7d1b44981f447501fd530ca1b0f8bf82edf5576d53080044020005f345124ff0301842ba71bb3e38d942df2a485dbfefdf5f83af288d477115eb5af6f4", "938a97fca1d3774a699edf1b0a6852c04bad4b9869748c16c930233b42348037", [0x6e, 0x1]}}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000980)={r3, 0x9}, &(0x7f00000009c0)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000980)={r3, 0x9}, &(0x7f00000009c0)=0x8) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x9) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x9) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x2b0, &(0x7f0000000a00)={[{0xb7, 0x4e00, "92c8d3762a222422b8c9e67a5cf1d9de6bd09c9e9c51991fb63bc02c14a33e627abfc30e021394f89f2ca84d09057a47a127ad59aecda4e3970bda71bd48acbd193018df1c91fbcdad4b0c71a89831900725c2fbaa1f23882a40149026642c871c3e28e309ec7df5419ccb76f31a300afdcf84a8b7776685d2cfe9d04f6c17677125ff453475ce85a76e399b04b45171bb7221dc07b07bfc378e2833649d1a869445603431ab14f0a32d155f8dfc4fd07adfcf4c279ed2"}, {0xf3, 0x4e00, "4d7c2db9bd9c2705c1c229c822cacaf841161ef8b1ebe76725ec97cf0c1b6956a8fa1cfa790aab4343e3606be3d3870561462d890890818eee955999ff2669b0aa9dc792b3c8dde10d372a7a50c8c127c8c179f8876b5e24c8bc3153094595846b978b2f76b0263b1f0c81334537418d87f64d2f5710b491b1bc784dea863d5bd7cc6155d902b986732a7a2074f9749f822c538f482a27b4b49468add4cfe214052d9a14dc50beb58a0c1a13f8f25ee4adc6471672c53b822892c025a76bdd1a5a064c3dc8668d0ebfd42d0cbea14b76200effe3f695cfb91e9bf0624359ed91d18ca224a87b4dab8aa1bd326cc88e3017de4f"}, {0xf5, 0x4e00, "3060de824a0d05ac2930343b4c5ad48efaa2dd1b8fc70ca98bc8e160a0842dfec09d2df807d578b952e30db2b3d25c308b2ec7916d4a57beec7aed06d088646c8ff6053a375ec0fd765e1e01031aa5d3712f60a9f8feac5a4ad4b448141254a97df9001d4f6caab228932a673d4619b95670febd301c00829fe4aaeb36dddc978c8ecc6e2e48e54041d6fc7122993cef895fd0f9044de6f7871877f40985e81f3b7b74b947ebd337f0a6e5f2418e09c0ffbdf0882bbe8bd1f688abfa80898cedbbbc8e5229a96bac17a999a4dadaea54d43ffa453794d4b99f0a0ac3a80f51b81008b4bc1982fbb0a238575091cc488fb3aeffd2fd"}]}) (async) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x2b0, &(0x7f0000000a00)={[{0xb7, 0x4e00, "92c8d3762a222422b8c9e67a5cf1d9de6bd09c9e9c51991fb63bc02c14a33e627abfc30e021394f89f2ca84d09057a47a127ad59aecda4e3970bda71bd48acbd193018df1c91fbcdad4b0c71a89831900725c2fbaa1f23882a40149026642c871c3e28e309ec7df5419ccb76f31a300afdcf84a8b7776685d2cfe9d04f6c17677125ff453475ce85a76e399b04b45171bb7221dc07b07bfc378e2833649d1a869445603431ab14f0a32d155f8dfc4fd07adfcf4c279ed2"}, {0xf3, 0x4e00, "4d7c2db9bd9c2705c1c229c822cacaf841161ef8b1ebe76725ec97cf0c1b6956a8fa1cfa790aab4343e3606be3d3870561462d890890818eee955999ff2669b0aa9dc792b3c8dde10d372a7a50c8c127c8c179f8876b5e24c8bc3153094595846b978b2f76b0263b1f0c81334537418d87f64d2f5710b491b1bc784dea863d5bd7cc6155d902b986732a7a2074f9749f822c538f482a27b4b49468add4cfe214052d9a14dc50beb58a0c1a13f8f25ee4adc6471672c53b822892c025a76bdd1a5a064c3dc8668d0ebfd42d0cbea14b76200effe3f695cfb91e9bf0624359ed91d18ca224a87b4dab8aa1bd326cc88e3017de4f"}, {0xf5, 0x4e00, "3060de824a0d05ac2930343b4c5ad48efaa2dd1b8fc70ca98bc8e160a0842dfec09d2df807d578b952e30db2b3d25c308b2ec7916d4a57beec7aed06d088646c8ff6053a375ec0fd765e1e01031aa5d3712f60a9f8feac5a4ad4b448141254a97df9001d4f6caab228932a673d4619b95670febd301c00829fe4aaeb36dddc978c8ecc6e2e48e54041d6fc7122993cef895fd0f9044de6f7871877f40985e81f3b7b74b947ebd337f0a6e5f2418e09c0ffbdf0882bbe8bd1f688abfa80898cedbbbc8e5229a96bac17a999a4dadaea54d43ffa453794d4b99f0a0ac3a80f51b81008b4bc1982fbb0a238575091cc488fb3aeffd2fd"}]}) dup2(r4, r4) move_mount(r8, &(0x7f0000000cc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000d00)='./file0\x00', 0x0) 1.889590359s ago: executing program 1 (id=261): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffd, 0x721100) (async, rerun: 64) r1 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) (rerun: 64) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x5522, 0x0) (async) fsopen(0x0, 0x0) (async, rerun: 64) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000000)=0xffffffffffffffc0) (rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r3 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0x6}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6e4}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (rerun: 64) open_by_handle_at(r5, 0x0, 0xc041) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r7, 0x80184947, &(0x7f0000005480)={0x0, 'syz1\x00'}) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd26, 0x4, {0x2, 0x80, 0x10, 0x5, 0xfe, 0x1, 0xc8, 0x2, 0x600}}, 0x1c}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) (async) write$P9_RREADDIR(r8, 0x0, 0x0) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x800448f0, &(0x7f0000000040)={0xfffd, 0x48, "a415ff", 0x3, 0x95}) 1.811327492s ago: executing program 1 (id=264): sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x4, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x28, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x12, 0x1, 0x0, 0x0, @str='\xfe\xff\xff\xff*%*[-#\xd9&-\x00'}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 1.730600648s ago: executing program 1 (id=266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002d40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)="ef8ea0e1a5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e1f", 0x20}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd84f9ae9d160e87c30c0008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000000000060036"], 0x30}, 0x1, 0x0, 0x0, 0x40420d5}, 0x80) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000280)={0x0, 0x43d9102d65573c3, @start={0x8}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_MARK={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x8c0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) accept$alg(r3, 0x0, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000002d40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)="ef8ea0e1a5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e1f", 0x20}], 0x1, 0x0, 0x0, 0x2}], 0x1, 0x0) (async) recvmmsg(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd84f9ae9d160e87c30c0008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000000000060036"], 0x30}, 0x1, 0x0, 0x0, 0x40420d5}, 0x80) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000280)={0x0, 0x43d9102d65573c3, @start={0x8}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_MARK={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x8c0) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000080)) (async) 1.661295205s ago: executing program 1 (id=268): madvise(&(0x7f0000225000/0x2000)=nil, 0x2000, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) cachestat(r1, &(0x7f0000000040)={0xffff, 0x3}, &(0x7f00000000c0), 0x0) 1.107265285s ago: executing program 1 (id=283): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_team\x00', 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) (async, rerun: 64) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000130001002cbd7000fedbdf250000000003e4aa0ed7576f82f166a2d246c0c006d6b689b982245473377d0c206307c234fe076fda3514e234d195bee55ed1fe3cd6c907834216afb86b7848108e00ee76658cf7d387f250a20cfc42d3c0c3a8e78b2553a5dd3f06f52e9bd0e30d00"/123, @ANYRES32=r4, @ANYBLOB="151104001f4c0500"], 0x20}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000) (async) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.106399114s ago: executing program 2 (id=284): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x0, 0x270, 0x430, 0x0, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0xfffc, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'vlan1\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x1d, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ldst={0x1, 0x0, 0x1, 0x9, 0x1, 0x90}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf}, 0x94) 1.104067562s ago: executing program 2 (id=285): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x3d) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000040)={0x1, @sdr={0x34325842, 0x7}}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = fcntl$dupfd(r1, 0x406, r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x20000e4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r3, 0x0, 0x159) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xfffffd9e}, 0x1, 0x0, 0x0, 0xd37f433855471683}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48014}, 0x44010) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f00000003c0)="e26248", 0x3}], 0x2}, 0x44040) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0xc311, 0x400, 0xc, 0xa0002f1}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) r6 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0xa) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 1.041384921s ago: executing program 1 (id=286): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000040)={0x14, &(0x7f0000000200)={0x40, 0xd, 0xa4, {0xa4, 0x7, "2808e122100662931cfa654a6406a78571cc8ae21564c4d24f43d80bcd74c4d1357711f8642ed621fc90b2dd311c3c3b84063d6d14c358841bdb7bbb5985a63141c976277d70d67763562a643ed606d842a6bd686f2251f0e5cfc8d72124028f49935759ab5339834737042d38695b051d6409289f88e00af12ccf99daf3f1f873eb322cb6c34350da62117af24cdeacbaafba7b00bc616a59c0ce8234b29808956c"}}, &(0x7f00000002c0)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "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"}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000400)={0x20, 0xc, 0x4c, "5347796827c1f5c1bd3b74fee1952baec79ce7f77c0444e48b99b8f5623915ba249f47f7a311df66e3273ceafaadba18fb2b0b5db5aeaed8a9e157d16bc015f07d508a7aa125c96b64b1f2e2"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480)={0xc0, 0x5, 0x1, 'M'}, &(0x7f0000000540)={0x40, 0x5, 0x6, "777aac5b2351"}}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)={0x0, 0x22, 0x5, {0x5, 0xc, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, &(0x7f00000000c0)) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x1, 0x7f, 0x6, &(0x7f00000001c0)={0x12, "7a6bb811e13d10abade8d50000000000000000f6d7e5ff00"}}) 1.040258754s ago: executing program 2 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = syz_open_dev$media(&(0x7f0000000140), 0x3, 0x20001) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000a00)={0x0, 0x4, 0x0, &(0x7f0000000640)=[{}, {}, {}, {}], 0x5, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000080)=[{}, {}], 0x6, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}]}) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0xfffffffffffffcf5, 0x3, 0x4002}]}}]}, 0x40}}, 0x0) (async) r12 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r12, 0x29, 0x42, 0x0, &(0x7f00007d0000)) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000ac0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000580)=@deltclass={0x30, 0x29, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x8, 0xb}, {0x8, 0x3}, {0xf}}, [@tclass_kind_options=@c_mqprio={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x48040}, 0x80e1) (async) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xa, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r14, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000600)="f1", 0x1}, {&(0x7f0000000280)="63c6b28a5bee93e9c01ffe61dfc0a2", 0xf}], 0x2}, 0x40004844) 891.780911ms ago: executing program 2 (id=291): r0 = socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) listen(r3, 0x80) accept4$netrom(r3, &(0x7f0000000100)={{}, [@null, @netrom, @remote, @bcast, @default, @netrom, @null, @bcast]}, &(0x7f0000000080)=0x48, 0x800) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x200000c0) 581.658695ms ago: executing program 0 (id=295): chdir(&(0x7f0000000340)='./cgroup\x00') rename(&(0x7f0000000080)='./file2\x00', &(0x7f0000000040)='./file2\x00') 580.964865ms ago: executing program 0 (id=296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) r1 = socket(0x2, 0x80805, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, &(0x7f0000000200)) r2 = eventfd2(0xbfb, 0x0) syz_io_uring_setup(0x10278e, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000240)=r2, 0x1) io_uring_enter(0xffffffffffffffff, 0x3, 0x10a5, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, 0x0, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r6, 0x5411, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 501.285548ms ago: executing program 0 (id=297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xa66, 0x0, &(0x7f0000000280)="f1c9772d2c7128399c1bbd619eed6ea83af8bbe2ff962c024e6537665df59bf247a7d18446af68aaa89cbb7aa562f3", 0x0, 0x2f}) (async) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000001380)=[{0x6, 0x4, 0x0, 0x0, @tick, {0xbf}, {}, @queue={0x2, {0xfffff146, 0x4}}}, {0x0, 0x0, 0x0, 0x4, @tick=0x2, {0xfc}, {0x2}, @addr={0x0, 0x7}}, {0x0, 0x0, 0x2, 0x0, @tick, {0x0, 0x8}, {}, @control={0x80}}, {0x0, 0x0, 0x1, 0x0, @time={0x5, 0x800}, {}, {0x8, 0xfc}, @connect={{0x4, 0x4}, {0xd, 0x7f}}}], 0x70) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0], 0x3, 0x3, 0x2, 0x1}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r5, r4, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2e}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/226, 0xe2, 0x2, 0xfffffffffffffffc}, @ptr={0x70742a85, 0x1, 0x0, 0x13, 0x1, 0xda}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) (async) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001b80)="27c9a8ece710", 0x6}, {0x0}], 0x2, &(0x7f0000001f40)}}], 0x2, 0x10018) 330.972898ms ago: executing program 0 (id=298): r0 = socket(0x1e, 0x805, 0x0) (async, rerun: 64) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) (rerun: 64) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) 330.761266ms ago: executing program 0 (id=299): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) 241.618588ms ago: executing program 0 (id=300): execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b050000000000090400"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffff9c, &(0x7f0000000200), 0x1ad100) 1.332462ms ago: executing program 2 (id=301): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x1, 0xa, 0x21}, 0x18) getsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000080)=""/114, &(0x7f0000000100)=0x72) (async) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000140)) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) (async) socketpair(0xb, 0x3, 0x5, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) (async) connect$netlink(r1, &(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000240)={@desc={0x1, 0x0, @desc2}}) (async) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x10, r0, 0x8000000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000500)=0x6) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x2004004) syz_open_dev$dmmidi(&(0x7f0000000680), 0xb, 0x260000) (async) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000006c0)={0x8, 0xb10, 0x7, 0x3a, 0x10001, 0x40}) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs2/binder0\x00', 0x1800, 0x0) (async) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000800)={&(0x7f00000007c0)={&(0x7f0000000740)="42778953409af25b3a84932ca0cd022321dc91f875b5909e93f6ff7b421aa624f88351a70cb77517e680da9e8a25233d17f2143bceda3c5a00fcb17c27e5f863e22bd896300108bfedbadfbf47cfd3385c1b9da0ce86776cda7d8bc74b06ab6f4440b889971997439831d577bf1dc878d003", 0x72, 0x0, 0x3, 0xffffffffffffffff}, 0x1}, 0x1) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000840)={"ee2b67b6", 0x2, 0x7, 0x9d, 0x7dfa, 0x0, "71b1500773adc7279f63285c23e7c5", "1a28684e", "0036fd79", "8127c8b0", ["31b3943016108c64518ff654", "0a1a35394e3ae81cf9260ae5", "942e5e4a965265f086821b4d", "63826460ab37fc9c118d4676"]}) openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x802, 0x0) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000900)={0x0, 0x5}, 0x8) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000a40)={'erspan0\x00', &(0x7f00000009c0)={'gre0\x00', 0x0, 0x0, 0x40, 0x8, 0x130, {{0xb, 0x4, 0x3, 0x3d, 0x2c, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1, {[@timestamp={0x44, 0x10, 0xd7, 0x0, 0xf, [0x8, 0x5d, 0xff]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000a80)={'batadv0\x00', 0x0}) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @dev, @multicast1}, &(0x7f0000000b00)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b40)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x9, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x87, 0xf90, 0xffffffff}}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000c00)=0x0, &(0x7f0000000c40)=0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001680)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001640)={&(0x7f0000001380)={0x288, r4, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4}, 0x20000090) 0s ago: executing program 2 (id=302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x39e0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000040)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x5d, &(0x7f00000000c0)=""/93, 0x41100, 0x22, '\x00', r2, 0x0, r0, 0x8, &(0x7f00000001c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[r3, r4, r5, 0x1], &(0x7f00000003c0)=[{0x0, 0x3, 0xe, 0x5}, {0xffffffff, 0x1, 0x4, 0x7}, {0x5, 0x1, 0x5, 0xc}], 0x10, 0x6}, 0x94) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1d0, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6417}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x39eb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffff86}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbd1a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4006}, 0x4000000) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c4}, 0x40) syz_usb_connect(0x0, 0xc10, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x88, 0xac, 0x61, 0x78, 0x733, 0x3281, 0x6f64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbfe, 0x3, 0x8, 0xa, 0x0, 0x3, [{{0x9, 0x4, 0x57, 0x9, 0xd, 0x20, 0xa9, 0xd4, 0x2, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "150f5856"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8b, 0x40c, 0x8}, [@obex={0x5, 0x24, 0x15, 0x1000}, @acm={0x4, 0x24, 0x2, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xb, 0x5}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "81ee"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x101, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x7, 0x37}, [@mbim_extended={0x8, 0x24, 0x1c, 0x81, 0x0, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x4, 0xfffd, 0x4b, 0xf, 0xfe00, 0xe7}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x7, 0x100}, @mbim_extended={0x8, 0x24, 0x1c, 0x400, 0x9f, 0x88e}]}], [{{0x9, 0x5, 0x4, 0x4, 0x248, 0x5, 0xf7, 0x6}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x2, 0x1, 0x8, [@generic={0xf2, 0x23, "19df7d4f430bad25d13ee429f6088e9bbb83a6cb4d79fae1e399a7c05eb732282438525da030e48eea172d65bba243f68ca6297c4f5f01a245883a929aead7232fb1e58393d21cb4fd031adf27c84075af49ce3a52b308c2c5cbe52efb2b743d6917f9485436660645c0920533ddd108e3263c914802925bed354b2a52c9a086c7f75a8cb134afcec059e2a8c7820faa2361cb3b425a8a8c68fe7286cb8d7e3c3456611c6c869f258cdd4b6a10e13d0810a50e9ac90cfec42bf1d5f2252912f06978bca91eea0f0b7f3ce9ae77f112847350fb65458427dd6c4047286be1167c1f0c7f85a69ca613edfdf830eb2c3b32"}, @generic={0x26, 0x7, "ac38f74a3cec91d8a9e255691bb71ae64a71c2342efd99e35d70d2f069d71c290f6ac9a2"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x0, 0x7, 0x52, 0x4}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x8, 0x9, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x100}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7, 0xf, 0x3, [@generic={0x86, 0x10, "f496ab416121cb3015eec37e7a5a77dec9a4c77b83fa1f5745f9f3dc7eed8377b729ea11fb7b62ffb82e95ab967d2ca05ece49d344cbc02947a3fba63fbb15caa45084db03b2194a7b9f33e2c75bdaf6c9525da64d45ba645531d133037589f1689fb71765d03be97a214aed499e30ad5f14beb2ebdd8648632718b032d93d2fc06e54c3"}, @generic={0x6, 0x23, "ea84dfcb"}]}}, {{0x9, 0x5, 0xa, 0x20, 0x20, 0x6, 0x7e, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5}, @generic={0xcb, 0x6, "b644ef83b4f3af6c6b9a1fb25d5497503b1dbd88fb257ff946c51358d6e1b0fd437fa4e408b34e078c9d85825a83e19fbcccb9dbf246a55e0232a3c182943a9ea70a1976c45235710b4dbcb9a8641b7fa22b675429f4c4b6351f35db6c2882607d30d62df9805d092cd9fee8db8ae6679344d74cd35e3eca7e2b6df43baa03a178d9fd80081880fdbfe0bd393275fb557ee7dbec6dc7eda8701a46d6ca9408418e9c1cce58fa77505562eb43a107cb6359d35ebe3c5f6216d330882af0d33256bc599099c2e0a2544c"}]}}, {{0x9, 0x5, 0x1849e7951173b396, 0x0, 0x20, 0x7, 0x4, 0x5, [@generic={0x70, 0x22, "3e27c6ac9f9bab04aac67089bf3291e9f85e3d6cf953c2fdab5cd451719048ddbfe4c6a438e1a405d41dd19f2c1fc1df15a44e5149dfe39ed06c75da158f66da31811675dc63397c1a8c7ad6ac6cc9ac18701a2607678fef9d946867ace8aaf0c06e9443eff16e3b675be344d5af"}, @generic={0x11, 0x23, "06ef3a76810aa43ca3dde925aec9bf"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0x4, 0x6, 0x81}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x4, 0x3, 0x9}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x4, 0x40, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0xa59e4219dcde67a8, 0x0, 0x4}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x5, 0x3, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x8}, @generic={0x44, 0x7, "9cb629f28ecc26ac0c49295c4d1f4005c3071ee16156bce0a71258237b08f4c208a79c2155aa93e4c59008631d973931f54daf19b527503b705020b67bf2fe9c2193"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x2e, 0x2, 0x3, [@generic={0x58, 0x7, "d6ab0d3eb2b99a124eb9399772eb05cb197f19a8b81a787e14fd92865d032c7d895130d860b619d3b0987b13b36c66a0423490dee5bd23cb2b86fcc50ce03206d757b298e60569e1f8225098f238e4b5e61e66b58b2a"}]}}]}}, {{0x9, 0x4, 0x17, 0x3, 0xc, 0x2, 0x2, 0xff, 0x40, [@uac_control={{0xa, 0x24, 0x1, 0xf, 0xf7}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x4, 0xff, 0x400, 0x80, 0x6}]}], [{{0x9, 0x5, 0x9, 0x3, 0x400, 0x7, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x8}, @generic={0x7d, 0x224430dd4969d220, "83613c0c0de307c2f128df99111364bc34c4131e61d7c74f0eb2dc3d5709b3667d7e9e39b50fc1fa376f714ee431bd0f70ca06c1a3fb5f3a0b0ab744827dca41b30f47bbcc4615e9fa2502448a5b20f221e7a89855aee0e6c0e53d761e71c0c079429f14c712fd17854755241cfc0187474996ce1f34a5d5d0c3a0"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x3ff, 0xb5, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x10, 0x1, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0x176f8dd54f562345, 0xc, 0x1}, @generic={0xf5, 0xe, "df0c74f07507834606035703232aafb412d86961f53a9d432b1171e0cee3cc4271bec50eb53832c2dbf15076e068ad9252abb370a1616d2e05256d8e516d6e393d48ff4a43640537a46a0a7eb6bfb0a7daec58f51585015550d2a4a1116421c9ed81c998be68e1a82c0cee156190d1bb72645306770a36a93eb86bda969143429d248a534b0279207d6163e0b75dbbad239104221c4dc6f416e193da23ecaa6a1b26b8802b20263a139c57c1dd8cddd51741c45852d4c88982a448058a442b69d5c0b342ad1de289376ddf89d353b32f133944f9c5c8e2372623fc20c0dc8cd1c8cefc505e975ec47ed97fd9db15c9570688ad"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x5, 0xc7, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x800}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x1, 0x6, 0x2}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x4, 0x9, 0x7, [@generic={0xf4, 0x21, "56858b885f56e5f20ec880485ac86932154250cccf97ca565660fffc51a359b4565ed56a174734dc59e6d9a1c61c54bc3742fb1350e994b6b02cbe2118ba372bdd7e951a2203909b2490e387d9414df9cbcd0dff69f7ab2bd4012b6e93296e031f0055dfa04a4c965343db4b41114a10375c431ffda80725239fe803a1262e5aff6774df61a9717951814b8dc829975254f6508b64f160105943cbf291e0d1fc405fb97940936f2237ae088e43d17362c2f30adb9c62346be268e7102966b90125710ddf966bf7fe12e45331e638850aaca1e94de519ac25e6ddd0205968d8ffc336099b5e87eb201287443fb5c9594a534b"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x90d83f333fb974ec, 0x8, 0x3d, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xe12}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x88, 0xf, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x8, 0x0, 0x5, [@generic={0x6a, 0x8, "77f6388339e796fa3aedc9f98c7fba96a38e8080643696fd05f9bae448fd688fd83e2619ef1d42ea5272414958682fc14c686e9cbe36bdee8647919245a3e09cf120d4f83f5516a91dcae619f60ea0aec25a34ae3f434c94479e3671f202540cb4ab88e5ef2b9b79"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xfa, 0xffff}]}}, {{0x9, 0x5, 0x0, 0xb823016e792cdbb6, 0x40, 0x2, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x4, 0x9, 0x5}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x2, 0x6, 0xca}}]}}, {{0x9, 0x4, 0x65, 0x0, 0x6, 0x86, 0xb3, 0x15, 0x24, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "61a5e3138fd1"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xb, 0xff, 0x1}, [@obex={0x5, 0x24, 0x15, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0xd, 0x2, 0xab}, @country_functional={0xc, 0x24, 0x7, 0xf, 0x81bb, [0x0, 0xfffa, 0xa]}, @acm={0x4, 0x24, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0xc5}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x8}]}], [{{0x9, 0x5, 0xe, 0x4, 0x10, 0x2, 0x8, 0x8, [@generic={0xae, 0x9, "676cb5ad21ef731c0b1adf81020898a8e08cde16de95ecdc95f4d213a7789f5b34bd97a9f27df08649b89b4d15fd7534d98c3dbc083666d048656b9c005f0eb496e0f54d09228107192393ec788e563ed526e2ad6b03cf3dc2bb1d9dbb4d275c0db37da2d499492be8e195b97e7bfb393ce4db9406d9e99d8f80bafae8014fc8e9686d468465e52fae133494cba5a4ba56a80c5274a791a620623d5c3666581a69be52f41234453494574af2"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x200, 0x3, 0xff, 0x48, [@generic={0xea, 0xe, "c023dd9491e67f2b0e25c4ecdd4205f6e947d82615e05cfd85e4c8aa058960a42a9c401774b61916f409f5088f50206ec7694ed716d040ef07d28e041bac2e24aab84af4c025e40f0d6eeb35ad917d980b285706e4c99d41cd6392d926f89e4d1b7842df41818c18368fc4214d1e3c75a2781689bd64a51ea954e6db850c012ab093c28977250da3c8b239c22e63077f89d00cb6dfb1b3e56ea99416a574055d4baefb80778fd0e1fd718881116a3a91df40ed14f9512fafc3a71a46668d955faf856fb6053ac90ed1337897be2d62facb30c51c22c11ade71599e806a8948f7bc90903b4ff401bd"}]}}, {{0x9, 0x5, 0xc, 0x1c, 0x20, 0x2, 0x0, 0x2, [@generic={0xc9, 0x22, "7a053b28e20ffc5f643236f01e7828b4e1c76ea84cb4d5ec8d178563e9cac34b2b3335d9378bc47e321817152b23c9e2e2c8793fe140e67636bc033951768ea337a144220c0721b45d8286dfcbf61889e552482b00ae9d0cec7d9faca5676612d2b5714dfd40487d90901b5cc401b0b65dd7feeb145e5c6a736de05db5b1fd943027834ab4415ad743945da0afa2a2bb47a8b782510cb600a9c2f4f5a17971fed8887d4b8685f64544c7cf9b48247ac99a941a5fa879551b247654fd8f92380d53eca2bdab06ed"}, @generic={0xf0, 0x7, "6083d6fc0e14eca7c796fb745e6529847bdde25209a7123eebea0a62b5b96c228f3ca9c0f4fa836ab348befe76cd54da49ac7b14ca7ffc108ee0305b8db195499b92dc42975e496817c922852a0353be5c493812616794f8ea403e4919728263f7068a4d38365c5804a5fca7bb9edbc2b43a720b9a1a7e734935f6dfe0cde35c0dcf45c7080eea4a27ab46ca5e05e1d774866a3710d60638feb11619e0c3191e8028c6bf66558d9169eb58fa6a33dad2f0a564aa8df02f0a8b8f1e262a5276d7e2a43e956e8062d2d8704fbdb4a6936b40fc140b4a5b7804544ec43a36d4e3fafd160f18426cd4a433bae63fe625"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x1, 0xc, 0xf7}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0xcd, 0xb, 0x2}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0x0, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f00000014c0)={0xa, 0x6, 0x250, 0x19, 0x1, 0x7, 0x8, 0x6}, 0x3c, &(0x7f0000001500)={0x5, 0xf, 0x3c, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "7033ce98c255d6120a6eaa180b49af5a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x3, 0x5, 0x7, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x1, 0x8, 0x10}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x0, 0x3, 0x1, 0x7}]}, 0x2, [{0x68, &(0x7f0000001540)=@string={0x68, 0x3, "04e7d6bce5f7e62ffe5f9798fac42632bfc8849be86d3466541ddab1ad8ad82c088bd137c148fd74d29ddbbb0a6e18d74ce950db92ddd926da6081fdc1404c659373437c59e6595ef9548f7d357567f4d30064e0e290fa3b5a934f392cfc6525fde89634da3a"}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x430}}]}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001680), r5) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000001940)={&(0x7f0000001640), 0xc, &(0x7f0000001900)={&(0x7f00000016c0)={0x220, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcf02}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x140}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcd6b}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0xc080}, 0x400c844) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) write$char_usb(r7, &(0x7f0000001980)="16aaf9c66222eea4f387d82afd68aa4a4e59ee46988656958fe98b9de94304b1e949c3ecdf2ebfef4967d8583afb6dbc70738839c8dc72120abd2bec5f96c9ff08e71f239396453cac368216b0e0902e97bdee5339013719f732db539096326e5e3abdc65d046fce2b7372c1059bedc67481aba442457367b1aeb2653cc838cf6063d527b82bfcbfecfc2355e7ee963ac074e567b4c81a694c3ae44708a6161bb8fad037e4f9d3c011d84442ca08841cd0d3c362c22d1320b87dab6476a31d02e6a295873cfe7be564a6c9a439a3b1cc6b5fba89", 0xd4) bind$l2tp(r0, &(0x7f0000001a80)={0x2, 0x0, @empty}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001b00)={r4, &(0x7f0000001ac0)="ee3a1a7d7b038cfa8ddb768b55d48c018863b40c1a494efc25282166"}, 0x20) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000023c0)={&(0x7f0000001bc0)={0x7b8, r8, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_FRAME={0x138, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @from_mac=@broadcast, {0x8, 0x2}}, 0x8, 0x2, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0x86, "50c083d608045521d1e6554ab418dc5d0e3402dba8d845c1480d0ab8f875623c2c1fbfff7de5dd058ea11d46f876e188cb499f96659e5022e0ef126cd55ca01fc072208fcc72015e553a9336b482f3e1a4caf447fa6cc0a9a1da8a5665b8b98ccebbfff6dae9d8ead8839cb0d2ef860155d4c34a77219502fc9f4b2cc381e677a527f02ff1c8"}, {0xdd, 0x86, "80b92ff6aab66881a392c94de29b8600662d80d3760ea272dd6bc97549bc3e7c8e2e740648f3f1905667a3cfdd8de9bbb133689425bd58a0d7f3d5844727784799df29c60647abc25317af0ff28f7ce72e895fac1a28f6e61c26c244b3653c2e8e4fc969a68e87d1839a736abc20ce7bcd05bef792daed76c65f84f982ae50d0f7b71a79fd94"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x5}, @broadcast, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0xf}, {0x7, 0x1}}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x465, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xc}, @broadcast, @device_b, @random="39ab5b518cf5"}, @random="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"}}, @NL80211_ATTR_FRAME={0x1a4, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @random="b5356da6fcbd", @broadcast, @from_mac, {0x7, 0x7e}, "", @void, @value=@ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7b8}, 0x1, 0x0, 0x0, 0x48000}, 0x4) r9 = open(&(0x7f0000002440)='./file0\x00', 0x105000, 0x40) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x5c, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7f}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002700)={0x0, &(0x7f00000025c0)=[@set_irq_handler={0xc8, 0x20, {0xef}}, @in_dx={0x69, 0x20, {0x34f6, 0x1}}, @in_dx={0x69, 0x20, {0xbcf7, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0xc001057c, 0x3}}, @code={0xa, 0x6d, {"c744240061000000c744240295000000ff2c2426430f09660f2e2d6b00000026410f00d0b9800000c00f3235008000000f302667660f3a42294e0f20d835200000000f22d846d9620066b81a018ec0b805000000b9d80000000f01d9"}}], 0x105}) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002780)=[@text16={0x10, &(0x7f0000002740)="36f08136105000403626660f3880320fc7592f0f320f7971562e260f381cde0f019ec3bd0f350f20c06635000001000f22c026360f0199d5c4", 0x39}], 0x1, 0x50, &(0x7f00000027c0)=[@cr0={0x0, 0x40000}, @cr0={0x0, 0x8004001c}], 0x2) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r9, &(0x7f0000002ac0)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000002a80)={&(0x7f00000028c0)={0x1bc, r11, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000840}, 0x8000000) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000002b00)=0x1002, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r9, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x1c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x10) kernel console output (not intermixed with test programs): [ 53.043657][ T40] audit: type=1400 audit(1767452707.115:61): avc: denied { siginh } for pid=5903 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:25828' (ED25519) to the list of known hosts. [ 55.333824][ T40] audit: type=1400 audit(1767452709.425:62): avc: denied { name_bind } for pid=5916 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.366365][ T40] audit: type=1400 audit(1767452709.465:63): avc: denied { execute } for pid=5918 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.375837][ T40] audit: type=1400 audit(1767452709.465:64): avc: denied { execute_no_trans } for pid=5918 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.438864][ T40] audit: type=1400 audit(1767452711.535:65): avc: denied { mounton } for pid=5918 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.447492][ T40] audit: type=1400 audit(1767452711.545:66): avc: denied { mount } for pid=5918 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.457601][ T5918] cgroup: Unknown subsys name 'net' [ 57.607415][ T5918] cgroup: Unknown subsys name 'cpuset' [ 57.612680][ T5918] cgroup: Unknown subsys name 'rlimit' [ 57.824090][ T5921] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.613125][ T5918] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.975044][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 61.975059][ T40] audit: type=1400 audit(1767452716.075:82): avc: denied { execmem } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.182063][ T40] audit: type=1400 audit(1767452716.275:83): avc: denied { create } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.199566][ T40] audit: type=1400 audit(1767452716.275:84): avc: denied { read write } for pid=5929 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.208571][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.216072][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.219957][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.222986][ T40] audit: type=1400 audit(1767452716.275:85): avc: denied { open } for pid=5929 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.233693][ T40] audit: type=1400 audit(1767452716.295:86): avc: denied { ioctl } for pid=5929 comm="syz-executor" path="socket:[6079]" dev="sockfs" ino=6079 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.258854][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.262515][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.266430][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.271076][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.274990][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.278904][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.279681][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.282693][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.285238][ T5931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.286685][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.286784][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.288533][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.292630][ T5931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.295414][ T40] audit: type=1400 audit(1767452716.395:87): avc: denied { read } for pid=5929 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.296753][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.297539][ T5931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.301436][ T5290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.302128][ T40] audit: type=1400 audit(1767452716.395:88): avc: denied { open } for pid=5929 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.315187][ T5290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.317025][ T40] audit: type=1400 audit(1767452716.395:89): avc: denied { mounton } for pid=5929 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.599734][ T40] audit: type=1400 audit(1767452716.695:90): avc: denied { module_request } for pid=5935 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.663328][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 62.697769][ T5929] chnl_net:caif_netlink_parms(): no params data found [ 62.764912][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 62.827164][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.830059][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.832509][ T5935] bridge_slave_0: entered allmulticast mode [ 62.835475][ T5935] bridge_slave_0: entered promiscuous mode [ 62.842257][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.845266][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.847787][ T5935] bridge_slave_1: entered allmulticast mode [ 62.850473][ T5935] bridge_slave_1: entered promiscuous mode [ 62.866078][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.868652][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.871158][ T5929] bridge_slave_0: entered allmulticast mode [ 62.873946][ T5929] bridge_slave_0: entered promiscuous mode [ 62.879370][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 62.910820][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.913191][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.915897][ T5929] bridge_slave_1: entered allmulticast mode [ 62.919748][ T5929] bridge_slave_1: entered promiscuous mode [ 62.974893][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.000016][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.002477][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.005558][ T5936] bridge_slave_0: entered allmulticast mode [ 63.008392][ T5936] bridge_slave_0: entered promiscuous mode [ 63.014086][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.018518][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.044060][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.047273][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.049681][ T5936] bridge_slave_1: entered allmulticast mode [ 63.052748][ T5936] bridge_slave_1: entered promiscuous mode [ 63.057168][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.085293][ T5935] team0: Port device team_slave_0 added [ 63.108850][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.111889][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.114552][ T5932] bridge_slave_0: entered allmulticast mode [ 63.117308][ T5932] bridge_slave_0: entered promiscuous mode [ 63.126732][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.129330][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.131711][ T5932] bridge_slave_1: entered allmulticast mode [ 63.135332][ T5932] bridge_slave_1: entered promiscuous mode [ 63.139959][ T5935] team0: Port device team_slave_1 added [ 63.143335][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.148298][ T5929] team0: Port device team_slave_0 added [ 63.168032][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.172827][ T5929] team0: Port device team_slave_1 added [ 63.193918][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.196705][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.205397][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.217732][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.227973][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.230727][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.239508][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.251177][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.255630][ T5936] team0: Port device team_slave_0 added [ 63.262632][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.265726][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.275285][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.286470][ T5936] team0: Port device team_slave_1 added [ 63.296172][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.299425][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.310584][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.339285][ T5932] team0: Port device team_slave_0 added [ 63.348756][ T5932] team0: Port device team_slave_1 added [ 63.357601][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.360328][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.368499][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.372871][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.375553][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.383836][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.410036][ T5935] hsr_slave_0: entered promiscuous mode [ 63.412590][ T5935] hsr_slave_1: entered promiscuous mode [ 63.419970][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.422432][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.431822][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.441762][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.444180][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.452577][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.477012][ T5929] hsr_slave_0: entered promiscuous mode [ 63.479450][ T5929] hsr_slave_1: entered promiscuous mode [ 63.481532][ T5929] debugfs: 'hsr0' already exists in 'hsr' [ 63.483622][ T5929] Cannot create hsr debugfs directory [ 63.537193][ T5932] hsr_slave_0: entered promiscuous mode [ 63.540681][ T5932] hsr_slave_1: entered promiscuous mode [ 63.543748][ T5932] debugfs: 'hsr0' already exists in 'hsr' [ 63.546032][ T5932] Cannot create hsr debugfs directory [ 63.556182][ T5936] hsr_slave_0: entered promiscuous mode [ 63.558583][ T5936] hsr_slave_1: entered promiscuous mode [ 63.561040][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 63.563096][ T5936] Cannot create hsr debugfs directory [ 63.885384][ T5935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.894901][ T5935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.901342][ T5935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.912231][ T5935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.958497][ T5936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.967846][ T5936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.972793][ T5936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.983138][ T5936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.047134][ T5932] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.054753][ T5932] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.061143][ T5932] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.070331][ T5932] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.145711][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.148526][ T5929] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.160001][ T5929] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.166096][ T5929] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.171993][ T5929] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.206129][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.226207][ T776] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.229878][ T776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.245806][ T776] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.248612][ T776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.273979][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.289437][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.317665][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.328901][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.338377][ T776] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.340949][ T776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.358469][ T776] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.361670][ T776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.366608][ T5290] Bluetooth: hci0: command tx timeout [ 64.366614][ T5945] Bluetooth: hci1: command tx timeout [ 64.366837][ T64] Bluetooth: hci3: command tx timeout [ 64.366954][ T5943] Bluetooth: hci2: command tx timeout [ 64.368755][ T776] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.368854][ T776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.397301][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.400122][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.417280][ T40] audit: type=1400 audit(1767452718.515:91): avc: denied { sys_module } for pid=5935 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.433637][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.465719][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.474894][ T776] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.477255][ T776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.492494][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.495794][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.549600][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.586294][ T5935] veth0_vlan: entered promiscuous mode [ 64.593574][ T5935] veth1_vlan: entered promiscuous mode [ 64.621313][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.645320][ T5935] veth0_macvtap: entered promiscuous mode [ 64.656662][ T5935] veth1_macvtap: entered promiscuous mode [ 64.661702][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.680029][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.697681][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.705284][ T5932] veth0_vlan: entered promiscuous mode [ 64.715567][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.719229][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.724030][ T5932] veth1_vlan: entered promiscuous mode [ 64.727496][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.734847][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.739797][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.778985][ T5936] veth0_vlan: entered promiscuous mode [ 64.797860][ T5936] veth1_vlan: entered promiscuous mode [ 64.803312][ T5932] veth0_macvtap: entered promiscuous mode [ 64.816214][ T5932] veth1_macvtap: entered promiscuous mode [ 64.851732][ T776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.855032][ T776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.861688][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.877729][ T5929] veth0_vlan: entered promiscuous mode [ 64.885048][ T4674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.888591][ T4674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.889393][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.900111][ T5929] veth1_vlan: entered promiscuous mode [ 64.906126][ T5936] veth0_macvtap: entered promiscuous mode [ 64.917477][ T4674] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.920628][ T4674] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.927232][ T4674] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.930391][ T4674] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.935604][ T5936] veth1_macvtap: entered promiscuous mode [ 64.950644][ T5935] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.971643][ T5929] veth0_macvtap: entered promiscuous mode [ 64.981948][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.011984][ T5929] veth1_macvtap: entered promiscuous mode [ 65.026409][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.038441][ T6021] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 65.057101][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.061281][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.065477][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.068840][ T4674] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.072824][ T4674] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.090933][ T4674] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.095400][ T4674] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.111851][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.121488][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.126230][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.135604][ T1146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.140004][ T1146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.156145][ T1146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.160106][ T1146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.265747][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.276107][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.322799][ T4674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.330581][ T4674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.354220][ T4674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.357618][ T4674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.386049][ T4674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.389101][ T4674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.479806][ T6033] dlm: no locking on control device [ 65.512891][ T6044] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 65.542653][ T6044] veth0_vlan: left promiscuous mode [ 65.545935][ T6044] veth0_vlan: entered promiscuous mode [ 65.550460][ T6044] team0: Device veth0_vlan failed to register rx_handler [ 65.559096][ T6049] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 65.743554][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 65.793469][ T6050] kAFS: unable to lookup cell 'syz1' [ 66.159773][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 66.264945][ T1026] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 66.436801][ T1026] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 66.444486][ T1026] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.448999][ T1026] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 66.452824][ T1026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.454996][ T64] Bluetooth: hci3: command tx timeout [ 66.457225][ T64] Bluetooth: hci1: command tx timeout [ 66.457920][ T5290] Bluetooth: hci2: command tx timeout [ 66.457959][ T5943] Bluetooth: hci0: command tx timeout [ 66.505929][ T6102] /dev/nullb0: Can't open blockdev [ 66.666215][ T6109] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 66.669146][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.676200][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.681008][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.684011][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.689102][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.692342][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.700469][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.703399][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.706589][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.709982][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.720407][ T1026] usb 6-1: usb_control_msg returned -32 [ 66.722521][ T1026] usbtmc 6-1:16.0: can't read capabilities [ 66.957263][ T6115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'. [ 67.090613][ T40] kauditd_printk_skb: 102 callbacks suppressed [ 67.090626][ T40] audit: type=1400 audit(1767452721.185:194): avc: denied { read write } for pid=6125 comm="syz.3.27" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.100899][ T40] audit: type=1400 audit(1767452721.195:195): avc: denied { open } for pid=6125 comm="syz.3.27" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.141536][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 67.145787][ T6126] netlink: 'syz.3.27': attribute type 5 has an invalid length. [ 67.149542][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 67.153420][ T6126] Zero length message leads to an empty skb [ 67.160480][ T40] audit: type=1400 audit(1767452721.255:196): avc: denied { connect } for pid=6131 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.172183][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.175885][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.213721][ T40] audit: type=1400 audit(1767452721.305:197): avc: denied { create } for pid=6136 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.223561][ T40] audit: type=1400 audit(1767452721.315:198): avc: denied { setopt } for pid=6136 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.267691][ T40] audit: type=1400 audit(1767452721.365:199): avc: denied { create } for pid=6136 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.270186][ T6137] ieee802154 phy0 wpan0: encryption failed: -22 [ 67.273715][ T40] audit: type=1400 audit(1767452721.365:200): avc: denied { write } for pid=6136 comm="syz.0.29" path="socket:[10522]" dev="sockfs" ino=10522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.278335][ T6137] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.292282][ T40] audit: type=1400 audit(1767452721.385:201): avc: denied { ioctl } for pid=6136 comm="syz.0.29" path="socket:[10523]" dev="sockfs" ino=10523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.295039][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 67.302296][ T40] audit: type=1400 audit(1767452721.385:202): avc: denied { create } for pid=6136 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 67.311753][ T40] audit: type=1400 audit(1767452721.405:203): avc: denied { setopt } for pid=6136 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 67.391747][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.3.31'. [ 67.455213][ T6147] nvme_fabrics: missing parameter 'transport=%s' [ 67.457832][ T6147] nvme_fabrics: missing parameter 'nqn=%s' [ 67.460300][ T6147] nvme_fabrics: unknown parameter or missing value 'system_u:object_r:udev_tbl_t:s0' in ctrl creation request [ 67.492187][ T6149] hub 2-0:1.0: USB hub found [ 67.495531][ T6149] hub 2-0:1.0: 2 ports detected [ 67.823181][ T6155] overlay: Bad value for 'workdir' [ 68.054516][ T6018] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 68.237020][ T6018] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.237065][ T6018] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 68.237084][ T6018] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.240559][ T6018] usb 8-1: config 0 descriptor?? [ 68.473281][ T6018] usbhid 8-1:0.0: can't add hid device: -71 [ 68.473351][ T6018] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 68.482867][ T6018] usb 8-1: USB disconnect, device number 2 [ 68.524799][ T5290] Bluetooth: hci0: command tx timeout [ 68.534285][ T5290] Bluetooth: hci3: command tx timeout [ 68.534317][ T5290] Bluetooth: hci2: command tx timeout [ 68.534862][ T64] Bluetooth: hci1: command tx timeout [ 68.689915][ T6160] netlink: 'syz.2.35': attribute type 1 has an invalid length. [ 68.709704][ T6160] bond1 (unregistering): Released all slaves [ 68.804057][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35'. [ 69.001977][ T6089] usb 6-1: USB disconnect, device number 2 [ 69.117248][ T6181] netlink: 112 bytes leftover after parsing attributes in process `syz.1.41'. [ 69.127725][ T6182] netlink: 132 bytes leftover after parsing attributes in process `syz.1.41'. [ 69.134831][ T6182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=6182 comm=syz.1.41 [ 69.252083][ T6191] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.261003][ T6189] program syz.2.44 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.334260][ T6204] netlink: 'syz.1.46': attribute type 1 has an invalid length. [ 69.412097][ T6191] /dev/nullb0: Can't open blockdev [ 69.525479][ T6221] netlink: 'syz.0.52': attribute type 11 has an invalid length. [ 69.528772][ T6221] netlink: 'syz.0.52': attribute type 13 has an invalid length. [ 69.706748][ T6241] syz.2.56 uses obsolete (PF_INET,SOCK_PACKET) [ 69.719864][ T6241] autofs4:pid:6241:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 70.292650][ T6259] ======================================================= [ 70.292650][ T6259] WARNING: The mand mount option has been deprecated and [ 70.292650][ T6259] and is ignored by this kernel. Remove the mand [ 70.292650][ T6259] option from the mount to silence this warning. [ 70.292650][ T6259] ======================================================= [ 70.605359][ T64] Bluetooth: hci2: command tx timeout [ 70.606412][ T5290] Bluetooth: hci3: command tx timeout [ 70.607546][ T5945] Bluetooth: hci0: command tx timeout [ 70.615398][ T5945] Bluetooth: hci1: command tx timeout [ 71.166688][ T6306] mmap: syz.1.73 (6306) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.421900][ T6321] loop1: detected capacity change from 0 to 524288000 [ 71.566045][ T6330] __nla_validate_parse: 2 callbacks suppressed [ 71.566062][ T6330] netlink: 4556 bytes leftover after parsing attributes in process `syz.2.81'. [ 71.678017][ T6339] program syz.1.84 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.681258][ T6339] ata1.00: non-matching transfer count (32/0) [ 71.834405][ T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 71.987009][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 71.990953][ T9] usb 7-1: config 15 has an invalid interface number: 2 but max is 1 [ 71.993687][ T9] usb 7-1: config 15 has an invalid descriptor of length 224, skipping remainder of the config [ 71.997272][ T9] usb 7-1: config 15 has 1 interface, different from the descriptor's value: 2 [ 72.000926][ T9] usb 7-1: config 15 has no interface number 0 [ 72.003727][ T9] usb 7-1: config 15 interface 2 altsetting 8 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 72.008827][ T9] usb 7-1: config 15 interface 2 altsetting 8 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 72.013004][ T9] usb 7-1: config 15 interface 2 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 72.017739][ T9] usb 7-1: config 15 interface 2 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 72.022239][ T9] usb 7-1: config 15 interface 2 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 72.027000][ T9] usb 7-1: config 15 interface 2 altsetting 8 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 72.031667][ T9] usb 7-1: config 15 interface 2 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 72.036288][ T9] usb 7-1: config 15 interface 2 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 72.040481][ T9] usb 7-1: config 15 interface 2 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 72.044185][ T9] usb 7-1: config 15 interface 2 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 72.047545][ T9] usb 7-1: config 15 interface 2 altsetting 8 has 14 endpoint descriptors, different from the interface descriptor's value: 16 [ 72.051579][ T9] usb 7-1: config 15 interface 2 has no altsetting 0 [ 72.056799][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice=37.b3 [ 72.059911][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.062678][ T9] usb 7-1: Product: syz [ 72.064505][ T9] usb 7-1: Manufacturer: ᐁ [ 72.066277][ T9] usb 7-1: SerialNumber: syz [ 72.070535][ T6330] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.073127][ T6330] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.075967][ T6330] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.124195][ T6029] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 72.211114][ T40] kauditd_printk_skb: 81 callbacks suppressed [ 72.211127][ T40] audit: type=1400 audit(1767452726.305:285): avc: denied { ioctl } for pid=6361 comm="syz.1.92" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.281306][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 72.285403][ T6330] netlink: 13 bytes leftover after parsing attributes in process `syz.2.81'. [ 72.290759][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.294540][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.306946][ T6029] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.316021][ T6029] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 72.319539][ T6029] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.330355][ T6029] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 72.335144][ T9] apple-mfi-fastcharge 7-1: USB disconnect, device number 2 [ 72.337552][ T6029] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 72.345482][ T6029] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.348423][ T6029] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.350991][ T6029] usb 8-1: Product: syz [ 72.352338][ T6029] usb 8-1: Manufacturer: syz [ 72.366037][ T6029] cdc_wdm 8-1:1.0: skipping garbage [ 72.368560][ T6029] cdc_wdm 8-1:1.0: skipping garbage [ 72.372744][ T6029] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 72.376828][ T6029] cdc_wdm 8-1:1.0: Unknown control protocol [ 72.494304][ T6018] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 72.565720][ T40] audit: type=1400 audit(1767452726.665:286): avc: denied { read write } for pid=6352 comm="syz.3.89" name="cdc-wdm0" dev="devtmpfs" ino=2857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 72.573557][ T40] audit: type=1400 audit(1767452726.665:287): avc: denied { open } for pid=6352 comm="syz.3.89" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 72.581823][ T40] audit: type=1400 audit(1767452726.665:288): avc: denied { ioctl } for pid=6352 comm="syz.3.89" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2857 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 72.591138][ T40] audit: type=1400 audit(1767452726.665:289): avc: denied { ioctl } for pid=6352 comm="syz.3.89" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 72.599614][ T6353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.602721][ T6353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.616654][ T24] usb 8-1: USB disconnect, device number 3 [ 72.639777][ T40] audit: type=1400 audit(1767452726.735:290): avc: denied { shutdown } for pid=6369 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.646442][ T6370] sctp: [Deprecated]: syz.3.94 (pid 6370) Use of int in max_burst socket option. [ 72.646442][ T6370] Use struct sctp_assoc_value instead [ 72.656690][ T6018] usb 6-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 72.661383][ T6018] usb 6-1: config 0 interface 0 has no altsetting 0 [ 72.662210][ T40] audit: type=1400 audit(1767452726.755:291): avc: denied { write } for pid=6369 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.666622][ T6018] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 72.672116][ T40] audit: type=1400 audit(1767452726.765:292): avc: denied { getopt } for pid=6369 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.679604][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 72.683570][ T40] audit: type=1400 audit(1767452726.765:293): avc: denied { ioctl } for pid=6369 comm="syz.3.94" path="socket:[13512]" dev="sockfs" ino=13512 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.689254][ T6018] usb 6-1: Product: syz [ 72.698042][ T6018] usb 6-1: Manufacturer: syz [ 72.700105][ T6018] usb 6-1: SerialNumber: syz [ 72.707636][ T6018] usb 6-1: config 0 descriptor?? [ 72.744940][ T6018] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 72.769535][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.820993][ T40] audit: type=1400 audit(1767452726.915:294): avc: denied { write } for pid=6375 comm="syz.0.96" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.865784][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 72.933161][ T6389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.934470][ T6364] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 72.941767][ T6364] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 72.950994][ T6089] usb 6-1: USB disconnect, device number 3 [ 73.111490][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 73.183742][ T6089] IPVS: starting estimator thread 0... [ 73.294498][ T6415] IPVS: using max 44 ests per chain, 105600 per kthread [ 73.564338][ T54] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 73.607962][ T6434] tmpfs: Cannot change global quota limit on remount [ 73.646663][ T6436] warning: `syz.0.112' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.724218][ T54] usb 7-1: Using ep0 maxpacket: 8 [ 73.735883][ T54] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.739121][ T54] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.742352][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 73.742698][ T54] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.744011][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 73.744036][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 73.744059][ T6445] netlink: 'syz.0.116': attribute type 11 has an invalid length. [ 73.744086][ T6445] netlink: 'syz.0.116': attribute type 7 has an invalid length. [ 73.748634][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 73.753134][ T54] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.756651][ T6444] netlink: 'syz.0.116': attribute type 11 has an invalid length. [ 73.759449][ T54] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.762148][ T6444] netlink: 'syz.0.116': attribute type 7 has an invalid length. [ 73.764566][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.958590][ T6458] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 73.992028][ T54] usb 7-1: GET_CAPABILITIES returned 0 [ 73.994069][ T54] usbtmc 7-1:16.0: can't read capabilities [ 73.994906][ T6458] netlink: 96 bytes leftover after parsing attributes in process `syz.1.119'. [ 74.044257][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.184293][ T34] usb 5-1: device descriptor read/64, error -71 [ 74.310201][ T6089] hid-generic 0006:0003:10000.0002: item fetching failed at offset 5/53 [ 74.316369][ T6089] hid-generic 0006:0003:10000.0002: probe with driver hid-generic failed with error -22 [ 74.444464][ T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.584270][ T34] usb 5-1: device descriptor read/64, error -71 [ 74.644051][ T6499] Unsupported ieee802154 address type: 0 [ 74.659462][ T6499] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 74.695995][ T34] usb usb5-port1: attempt power cycle [ 75.034647][ T34] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.055186][ T34] usb 5-1: device descriptor read/8, error -71 [ 75.142977][ T6518] bond0: Error: Cannot enslave bond to itself. [ 75.294288][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.314995][ T34] usb 5-1: device descriptor read/8, error -71 [ 75.316916][ T6522] netlink: 'syz.1.135': attribute type 8 has an invalid length. [ 75.434505][ T34] usb usb5-port1: unable to enumerate USB device [ 75.505789][ T6528] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 75.530977][ T6528] QAT: Stopping all acceleration devices. [ 76.149712][ T6544] evm: overlay not supported [ 76.319306][ T6029] usb 7-1: USB disconnect, device number 3 [ 76.523675][ T6569] Cannot find set identified by id 0 to match [ 76.539599][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.541945][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.572034][ T6570] process 'syz.1.149' launched 'ELF' with NULL argv: empty string added [ 76.734076][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.737135][ T6580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.740689][ T6580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.743326][ T6580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.223295][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 77.223307][ T40] audit: type=1400 audit(1767452731.315:358): avc: denied { create } for pid=6600 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.234392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.243712][ T40] audit: type=1400 audit(1767452731.335:359): avc: denied { setopt } for pid=6600 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.251830][ T6604] input: syz0 as /devices/virtual/input/input6 [ 77.281507][ T40] audit: type=1400 audit(1767452731.345:360): avc: denied { write } for pid=6600 comm="syz.2.161" path="socket:[16456]" dev="sockfs" ino=16456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.321081][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.334394][ T40] audit: type=1400 audit(1767452731.425:361): avc: denied { ioctl } for pid=6612 comm="syz.0.165" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 77.377855][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.416090][ T6615] bridge_slave_0: default FDB implementation only supports local addresses [ 77.483108][ T40] audit: type=1400 audit(1767452731.575:362): avc: denied { connect } for pid=6616 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.491823][ T40] audit: type=1400 audit(1767452731.585:363): avc: denied { create } for pid=6619 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 77.493545][ T6618] __nla_validate_parse: 11 callbacks suppressed [ 77.493557][ T6618] netlink: 32 bytes leftover after parsing attributes in process `syz.0.166'. [ 77.505855][ T34] IPVS: starting estimator thread 0... [ 77.509695][ T40] audit: type=1400 audit(1767452731.605:364): avc: denied { ioctl } for pid=6619 comm="syz.2.167" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.552599][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 77.562307][ T6628] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 77.614283][ T6623] IPVS: using max 45 ests per chain, 108000 per kthread [ 77.650637][ T40] audit: type=1400 audit(1767452731.745:365): avc: denied { write } for pid=6635 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.785979][ T6652] netlink: 'syz.1.176': attribute type 9 has an invalid length. [ 77.789561][ T6652] netlink: 'syz.1.176': attribute type 11 has an invalid length. [ 77.792969][ T6652] netlink: 'syz.1.176': attribute type 12 has an invalid length. [ 77.797910][ T6652] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.176'. [ 77.803299][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 77.851408][ T6654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'. [ 77.981908][ T40] audit: type=1400 audit(1767452732.075:366): avc: denied { append } for pid=6667 comm="syz.0.181" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.995110][ T40] audit: type=1400 audit(1767452732.085:367): avc: denied { setopt } for pid=6671 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.995808][ T6669] program syz.0.181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.007535][ T6669] ata1.00: invalid command format 0 [ 78.185899][ T6697] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 78.200849][ T6699] netlink: 'syz.1.186': attribute type 2 has an invalid length. [ 78.220629][ T6681] kvm: kvm [6680]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 78.225084][ T6681] kvm: kvm [6680]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 78.246321][ T6704] fuse: Unknown parameter '0x00000000000000060x0000000000000006' [ 78.257328][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 78.430570][ T6721] delete_channel: no stack [ 78.486050][ T6728] netlink: 'syz.1.190': attribute type 39 has an invalid length. [ 78.583586][ T6732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.587486][ T6732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.613580][ T6741] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 78.753904][ T6758] sctp: [Deprecated]: syz.2.193 (pid 6758) Use of int in maxseg socket option. [ 78.753904][ T6758] Use struct sctp_assoc_value instead [ 78.760444][ T6757] sctp: [Deprecated]: syz.2.193 (pid 6757) Use of int in maxseg socket option. [ 78.760444][ T6757] Use struct sctp_assoc_value instead [ 78.824954][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.922253][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 78.974511][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 78.977517][ T24] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 78.982008][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.986948][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.995584][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.005223][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.010526][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.016127][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.021381][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.024375][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.028829][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.033137][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 79.036427][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 79.037993][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.039161][ T24] usb 5-1: SerialNumber: syz [ 79.046056][ T24] usb 5-1: config 0 descriptor?? [ 79.056179][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input7 [ 79.207303][ T6811] openvswitch: netlink: IPv6 tunnel dst address is zero [ 79.255691][ T5324] bcm5974 5-1:0.0: could not read from device [ 79.264201][ T5324] bcm5974 5-1:0.0: could not read from device [ 79.264280][ T6811] hfs: can't find a HFS filesystem on dev sr0 [ 79.273212][ T5324] bcm5974 5-1:0.0: could not read from device [ 79.283534][ T5324] bcm5974 5-1:0.0: could not read from device [ 79.286152][ T24] usb 5-1: USB disconnect, device number 6 [ 79.509714][ T6858] autofs: Unknown parameter '' [ 79.592412][ T6877] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 79.618397][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.211'. [ 79.623418][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 79.669803][ T6887] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.215'. [ 79.685256][ T6889] IPv6: sit1: Disabled Multicast RS [ 79.688592][ T6889] sit1: entered allmulticast mode [ 79.819056][ T6905] bond1: option downdelay: invalid value (18446744073709551615) [ 79.822001][ T6905] bond1: option downdelay: allowed values 0 - 2147483647 [ 79.827185][ T6905] bond1 (unregistering): Released all slaves [ 79.945161][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 80.116266][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.119999][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.133739][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.135495][ T6997] rtc_cmos 00:05: Alarms can be up to one day in the future [ 80.138969][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.144204][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.149485][ T9] usb 8-1: config 0 descriptor?? [ 80.776338][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 80.779181][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 80.785007][ T9] usb 8-1: USB disconnect, device number 4 [ 81.062910][ T7040] 9pnet_virtio: no channels available for device syz [ 81.150560][ T7048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7048 comm=syz.0.232 [ 81.490993][ T7059] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 81.491003][ T7060] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 81.497541][ T7059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.514185][ T54] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 81.583010][ T7066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.589914][ T7067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.632061][ T7071] validate_nla: 1 callbacks suppressed [ 81.632076][ T7071] netlink: 'syz.0.238': attribute type 13 has an invalid length. [ 81.638532][ T7071] netlink: 'syz.0.238': attribute type 27 has an invalid length. [ 81.654552][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 81.684471][ T54] usb 8-1: Using ep0 maxpacket: 16 [ 81.691092][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 81.706703][ T54] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 81.710601][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.725477][ T54] usb 8-1: Product: syz [ 81.729116][ T54] usb 8-1: Manufacturer: syz [ 81.731325][ T54] usb 8-1: SerialNumber: syz [ 81.747982][ T54] usb 8-1: config 0 descriptor?? [ 81.764642][ T54] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 81.768553][ T54] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 81.771280][ T7089] batman_adv: batadv0: Adding interface: gretap1 [ 81.773911][ T7089] batman_adv: batadv0: Interface activated: gretap1 [ 81.785897][ T7089] loop7: detected capacity change from 0 to 7 [ 81.790932][ T5949] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.794545][ T5949] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.798125][ T5949] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.800811][ T5949] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.803478][ T5949] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.807549][ T5949] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.810104][ T5949] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.812611][ T5949] ldm_validate_partition_table(): Disk read failed. [ 81.815620][ T5949] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.826917][ T5949] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.834279][ T5949] Buffer I/O error on dev loop7, logical block 0, async page read [ 81.837465][ T5949] Dev loop7: unable to read RDB block 0 [ 81.837507][ T5949] loop7: unable to read partition table [ 81.837660][ T5949] loop7: partition table beyond EOD, truncated [ 81.857474][ T7089] ldm_validate_partition_table(): Disk read failed. [ 81.860717][ T7089] Dev loop7: unable to read RDB block 0 [ 81.863203][ T7089] loop7: unable to read partition table [ 81.866782][ T7089] loop7: partition table beyond EOD, truncated [ 81.869788][ T7089] loop_reread_partitions: partition scan of loop7 (7x~Sj̖P) failed (rc=-5) [ 81.934344][ T6089] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 82.004035][ T7110] binder: 7108:7110 ioctl 530a 2000000000c0 returned -22 [ 82.004051][ T7109] binder: 7108:7109 ioctl c0306201 200000000640 returned -22 [ 82.012058][ T7118] binder: 7108:7118 ioctl 8208ae63 200000000880 returned -22 [ 82.104292][ T6089] usb 5-1: Using ep0 maxpacket: 8 [ 82.107493][ T6089] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 82.110278][ T6089] usb 5-1: config 0 has no interface number 0 [ 82.112251][ T6089] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 82.116266][ T6089] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 82.120507][ T6089] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 82.124001][ T6089] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.128567][ T6089] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 82.131581][ T6089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.136627][ T6089] usb 5-1: config 0 descriptor?? [ 82.143616][ T6089] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 82.245147][ T6017] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 82.356664][ T6019] usb 5-1: USB disconnect, device number 7 [ 82.359558][ T54] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 82.366364][ T6019] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 82.398059][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 82.402894][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 82.411148][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 82.417260][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 82.425121][ T6017] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 82.429315][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.433316][ T6017] usb 6-1: Product: syz [ 82.435498][ T6017] usb 6-1: Manufacturer: syz [ 82.437780][ T6017] usb 6-1: SerialNumber: syz [ 82.444075][ T6017] usb 6-1: config 0 descriptor?? [ 82.486458][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 82.486470][ T40] audit: type=1400 audit(1767452736.585:394): avc: denied { lock } for pid=7145 comm="syz.2.248" path="socket:[16835]" dev="sockfs" ino=16835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 82.506884][ T40] audit: type=1400 audit(1767452736.605:395): avc: denied { watch } for pid=7145 comm="syz.2.248" path="/57/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 82.657409][ T6017] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 82.797423][ T40] audit: type=1400 audit(1767452736.895:396): avc: denied { connect } for pid=7053 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 82.850562][ T40] audit: type=1400 audit(1767452736.945:397): avc: denied { write } for pid=7053 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 82.868769][ T7114] usb 6-1: Couldn't submit interrupt_out_urb -90 [ 82.869776][ T6089] usb 6-1: USB disconnect, device number 4 [ 82.983769][ T40] audit: type=1400 audit(1767452737.075:398): avc: denied { write } for pid=7169 comm="syz.0.250" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 83.019538][ T54] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 83.025619][ T54] em28xx 8-1:0.0: board has no eeprom [ 83.055362][ T7177] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 83.066863][ T7177] hpfs: hpfs_map_sector(): read error [ 83.104334][ T54] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 83.104364][ T54] em28xx 8-1:0.0: dvb set to bulk mode. [ 83.104845][ T6017] em28xx 8-1:0.0: Binding DVB extension [ 83.125811][ T54] usb 8-1: USB disconnect, device number 5 [ 83.129366][ T54] em28xx 8-1:0.0: Disconnecting em28xx [ 83.162707][ T6017] em28xx 8-1:0.0: Registering input extension [ 83.170970][ T54] em28xx 8-1:0.0: Closing input extension [ 83.179983][ T40] audit: type=1400 audit(1767452737.275:399): avc: denied { setopt } for pid=7178 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.199192][ T54] em28xx 8-1:0.0: Freeing device [ 83.205035][ T40] audit: type=1400 audit(1767452737.305:400): avc: denied { ioctl } for pid=7178 comm="syz.0.252" path="socket:[17467]" dev="sockfs" ino=17467 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.317602][ T7197] tipc: Started in network mode [ 83.319546][ T7197] tipc: Node identity 02e740a3e20c, cluster identity 4711 [ 83.322103][ T7197] tipc: Enabled bearer , priority 0 [ 83.326221][ T7196] tipc: Resetting bearer [ 83.419031][ T7203] netlink: 'syz.2.254': attribute type 30 has an invalid length. [ 83.481655][ T7213] __nla_validate_parse: 7 callbacks suppressed [ 83.481678][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 83.534444][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 83.865312][ T40] audit: type=1400 audit(1767452737.955:401): avc: denied { append } for pid=7227 comm="syz.3.259" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.104270][ T54] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 84.264356][ T54] usb 8-1: Invalid ep0 maxpacket: 64 [ 84.405082][ T54] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 84.516242][ T7196] tipc: Disabling bearer [ 84.522428][ T7203] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 84.524874][ T6089] tipc: Node number set to 3773513891 [ 84.564564][ T54] usb 8-1: Invalid ep0 maxpacket: 64 [ 84.567519][ T54] usb usb8-port1: attempt power cycle [ 84.637242][ T40] audit: type=1400 audit(1767452738.735:402): avc: denied { read } for pid=7249 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.668259][ T7257] netlink: 36 bytes leftover after parsing attributes in process `syz.1.264'. [ 84.821448][ T7310] netlink: 132 bytes leftover after parsing attributes in process `syz.2.269'. [ 84.832656][ T7310] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 84.904347][ T54] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 84.925692][ T54] usb 8-1: Invalid ep0 maxpacket: 64 [ 84.946888][ T7314] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 85.074418][ T54] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 85.105493][ T54] usb 8-1: Invalid ep0 maxpacket: 64 [ 85.113279][ T54] usb usb8-port1: unable to enumerate USB device [ 85.118469][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'. [ 85.148690][ T7345] Bluetooth: MGMT ver 1.23 [ 85.199961][ T40] audit: type=1400 audit(1767452739.295:403): avc: denied { load_policy } for pid=7351 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 85.206864][ T7352] SELinux: unknown common r [ 85.210604][ T7352] SELinux: failed to load policy [ 85.350390][ T7373] Cannot find map_set index 65532 as target [ 85.426420][ T7383] QAT: Invalid ioctl -2144835806 [ 85.644419][ T1026] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 85.755057][ T7408] 9p: Bad value for 'dfltuid' [ 85.757154][ T7408] 9p: Bad value for 'dfltuid' [ 85.760369][ T7409] 9p: Bad value for 'dfltuid' [ 85.762021][ T7409] 9p: Bad value for 'dfltuid' [ 85.794243][ T1026] usb 6-1: Using ep0 maxpacket: 8 [ 85.797725][ T1026] usb 6-1: config 0 interface 0 has no altsetting 0 [ 85.800816][ T1026] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 85.804761][ T1026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.810143][ T1026] usb 6-1: config 0 descriptor?? [ 86.224902][ T1026] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 86.434538][ T54] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 86.586002][ T54] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 86.588968][ T54] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 86.591702][ T54] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 86.595145][ T54] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 86.597742][ T54] usb 5-1: too many endpoints for config 0 interface 0 altsetting 97: 97, using maximum allowed: 30 [ 86.601655][ T54] usb 5-1: config 0 interface 0 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 86.606297][ T54] usb 5-1: config 0 interface 0 has no altsetting 0 [ 86.610827][ T54] usb 5-1: string descriptor 0 read error: -22 [ 86.613002][ T54] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 86.616829][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.623308][ T54] usb 5-1: config 0 descriptor?? [ 86.628367][ T54] hub 5-1:0.0: bad descriptor, ignoring hub [ 86.630748][ T54] hub 5-1:0.0: probe with driver hub failed with error -5 [ 86.735095][ T1026] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 86.741920][ T54] usb 6-1: USB disconnect, device number 5 [ 86.768736][ T851] cfg80211: failed to load regulatory.db [ 86.854507][ T5945] ================================================================== [ 86.854737][ T64] Bluetooth: hci2: command 0x2016 tx timeout [ 86.857301][ T5945] BUG: KASAN: slab-use-after-free in le_read_features_complete+0x5b/0x390 [ 86.862436][ T5945] Write of size 4 at addr ffff88802e4cc010 by task kworker/u33:5/5945 [ 86.865181][ T1026] usb 7-1: device descriptor read/64, error -71 [ 86.867852][ T5945] [ 86.867864][ T5945] CPU: 3 UID: 0 PID: 5945 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 86.867879][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.867888][ T5945] Workqueue: hci2 hci_cmd_sync_work [ 86.867908][ T5945] Call Trace: [ 86.867914][ T5945] [ 86.867918][ T5945] dump_stack_lvl+0x116/0x1f0 [ 86.867935][ T5945] print_report+0xcd/0x630 [ 86.867962][ T5945] ? __virt_addr_valid+0x81/0x610 [ 86.867973][ T5945] ? __phys_addr+0xe8/0x180 [ 86.867983][ T5945] ? le_read_features_complete+0x5b/0x390 [ 86.867998][ T5945] kasan_report+0xe0/0x110 [ 86.868015][ T5945] ? le_read_features_complete+0x5b/0x390 [ 86.868033][ T5945] kasan_check_range+0x100/0x1b0 [ 86.868050][ T5945] le_read_features_complete+0x5b/0x390 [ 86.868067][ T5945] hci_cmd_sync_work+0x1ff/0x470 [ 86.868082][ T5945] ? __pfx_le_read_features_complete+0x10/0x10 [ 86.868099][ T5945] process_one_work+0x9ba/0x1b20 [ 86.868117][ T5945] ? __pfx_process_one_work+0x10/0x10 [ 86.868133][ T5945] ? assign_work+0x1a0/0x250 [ 86.868147][ T5945] worker_thread+0x6c8/0xf10 [ 86.868164][ T5945] ? __pfx_worker_thread+0x10/0x10 [ 86.868178][ T5945] kthread+0x3c5/0x780 [ 86.868192][ T5945] ? __pfx_kthread+0x10/0x10 [ 86.868205][ T5945] ? rcu_is_watching+0x12/0xc0 [ 86.868216][ T5945] ? __pfx_kthread+0x10/0x10 [ 86.868229][ T5945] ret_from_fork+0x983/0xb10 [ 86.868243][ T5945] ? __pfx_ret_from_fork+0x10/0x10 [ 86.868256][ T5945] ? __switch_to+0x7af/0x10d0 [ 86.868270][ T5945] ? __pfx_kthread+0x10/0x10 [ 86.868283][ T5945] ret_from_fork_asm+0x1a/0x30 [ 86.868304][ T5945] [ 86.868307][ T5945] [ 86.937190][ T5945] Allocated by task 64: [ 86.939121][ T5945] kasan_save_stack+0x33/0x60 [ 86.941161][ T5945] kasan_save_track+0x14/0x30 [ 86.943178][ T5945] __kasan_kmalloc+0xaa/0xb0 [ 86.945151][ T5945] __hci_conn_add+0xf8/0x1cc0 [ 86.947344][ T5945] hci_conn_add_unset+0x76/0x130 [ 86.950444][ T5945] le_conn_complete_evt+0x639/0x1fa0 [ 86.953135][ T5945] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 86.955893][ T5945] hci_le_meta_evt+0x357/0x610 [ 86.958100][ T5945] hci_event_packet+0x685/0x1210 [ 86.960294][ T5945] hci_rx_work+0x2c9/0x1020 [ 86.962322][ T5945] process_one_work+0x9ba/0x1b20 [ 86.964483][ T5945] worker_thread+0x6c8/0xf10 [ 86.966787][ T5945] kthread+0x3c5/0x780 [ 86.968728][ T5945] ret_from_fork+0x983/0xb10 [ 86.970908][ T5945] ret_from_fork_asm+0x1a/0x30 [ 86.973293][ T5945] [ 86.974400][ T5945] Freed by task 64: [ 86.976417][ T5945] kasan_save_stack+0x33/0x60 [ 86.978989][ T5945] kasan_save_track+0x14/0x30 [ 86.981222][ T5945] kasan_save_free_info+0x3b/0x60 [ 86.983695][ T5945] __kasan_slab_free+0x5f/0x80 [ 86.985742][ T5945] kfree+0x2f8/0x6e0 [ 86.987402][ T5945] device_release+0xa4/0x240 [ 86.989491][ T5945] kobject_put+0x1ef/0x6f0 [ 86.991549][ T5945] device_unregister+0x2f/0xe0 [ 86.993632][ T5945] hci_conn_del_sysfs+0xdd/0x1a0 [ 86.995833][ T5945] hci_conn_del+0x680/0x11d0 [ 86.997769][ T5945] hci_disconn_complete_evt+0x410/0xa30 [ 87.000249][ T5945] hci_event_packet+0xa39/0x1210 [ 87.002529][ T5945] hci_rx_work+0x2c9/0x1020 [ 87.004489][ T5945] process_one_work+0x9ba/0x1b20 [ 87.006699][ T5945] worker_thread+0x6c8/0xf10 [ 87.008963][ T5945] kthread+0x3c5/0x780 [ 87.010783][ T5945] ret_from_fork+0x983/0xb10 [ 87.012734][ T5945] ret_from_fork_asm+0x1a/0x30 [ 87.015158][ T5945] [ 87.016178][ T5945] The buggy address belongs to the object at ffff88802e4cc000 [ 87.016178][ T5945] which belongs to the cache kmalloc-8k of size 8192 [ 87.022505][ T5945] The buggy address is located 16 bytes inside of [ 87.022505][ T5945] freed 8192-byte region [ffff88802e4cc000, ffff88802e4ce000) [ 87.028644][ T5945] [ 87.029688][ T5945] The buggy address belongs to the physical page: [ 87.033063][ T5945] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e4c8 [ 87.037202][ T5945] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 87.041170][ T5945] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 87.044788][ T5945] page_type: f5(slab) [ 87.046569][ T5945] raw: 00fff00000000040 ffff88801b443180 ffffea0000e7b000 dead000000000005 [ 87.050527][ T5945] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 87.054305][ T5945] head: 00fff00000000040 ffff88801b443180 ffffea0000e7b000 dead000000000005 [ 87.057988][ T5945] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 87.062019][ T5945] head: 00fff00000000003 ffffea0000b93201 00000000ffffffff 00000000ffffffff [ 87.065762][ T5945] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 87.069909][ T5945] page dumped because: kasan: bad access detected [ 87.073242][ T5945] page_owner tracks the page as allocated [ 87.075671][ T5945] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5935, tgid 5935 (syz-executor), ts 63661397225, free_ts 20980336138 [ 87.084696][ T5945] post_alloc_hook+0x1af/0x220 [ 87.087085][ T5945] get_page_from_freelist+0xd0b/0x31a0 [ 87.090311][ T5945] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 87.093114][ T5945] alloc_pages_mpol+0x1fb/0x550 [ 87.095264][ T5945] new_slab+0x2c3/0x430 [ 87.097146][ T5945] ___slab_alloc+0xe18/0x1c90 [ 87.099299][ T5945] __slab_alloc.constprop.0+0x63/0x110 [ 87.101581][ T5945] __kmalloc_cache_noprof+0x485/0x800 [ 87.103854][ T5945] macvlan_common_newlink+0x47f/0x1a20 [ 87.104265][ T1026] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 87.106122][ T5945] macvtap_newlink+0x17a/0x240 [ 87.106154][ T5945] rtnl_newlink+0xc19/0x1f50 [ 87.106173][ T5945] rtnetlink_rcv_msg+0x95e/0xe90 [ 87.116653][ T5945] netlink_rcv_skb+0x158/0x420 [ 87.118876][ T5945] netlink_unicast+0x5aa/0x870 [ 87.120949][ T5945] netlink_sendmsg+0x8c8/0xdd0 [ 87.123018][ T5945] __sys_sendto+0x4a3/0x520 [ 87.124965][ T5945] page last free pid 851 tgid 851 stack trace: [ 87.127504][ T5945] __free_frozen_pages+0x7df/0x1170 [ 87.129922][ T5945] vfree+0x1fd/0xb50 [ 87.131787][ T5945] delayed_vfree_work+0x56/0x70 [ 87.133909][ T5945] process_one_work+0x9ba/0x1b20 [ 87.135759][ T5945] worker_thread+0x6c8/0xf10 [ 87.137327][ T5945] kthread+0x3c5/0x780 [ 87.138722][ T5945] ret_from_fork+0x983/0xb10 [ 87.140414][ T5945] ret_from_fork_asm+0x1a/0x30 [ 87.141999][ T5945] [ 87.142789][ T5945] Memory state around the buggy address: [ 87.144348][ T5945] ffff88802e4cbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.146583][ T5945] ffff88802e4cbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.149147][ T5945] >ffff88802e4cc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.152055][ T5945] ^ [ 87.153722][ T5945] ffff88802e4cc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.156855][ T5945] ffff88802e4cc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.159682][ T5945] ================================================================== [ 87.163089][ T5945] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.165303][ T5945] CPU: 3 UID: 0 PID: 5945 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 87.168466][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.171984][ T5945] Workqueue: hci2 hci_cmd_sync_work [ 87.173723][ T5945] Call Trace: [ 87.175058][ T5945] [ 87.176107][ T5945] dump_stack_lvl+0x3d/0x1f0 [ 87.177810][ T5945] vpanic+0x640/0x6f0 [ 87.179278][ T5945] panic+0xca/0xd0 [ 87.180498][ T5945] ? __pfx_panic+0x10/0x10 [ 87.182436][ T5945] ? le_read_features_complete+0x5b/0x390 [ 87.184888][ T5945] ? preempt_schedule_common+0x44/0xc0 [ 87.187258][ T5945] ? preempt_schedule_thunk+0x16/0x30 [ 87.189852][ T5945] ? check_panic_on_warn+0x1f/0xb0 [ 87.192568][ T5945] check_panic_on_warn+0xab/0xb0 [ 87.194962][ T5945] end_report+0x107/0x160 [ 87.196507][ T5945] kasan_report+0xee/0x110 [ 87.198072][ T5945] ? le_read_features_complete+0x5b/0x390 [ 87.199913][ T5945] kasan_check_range+0x100/0x1b0 [ 87.201567][ T5945] le_read_features_complete+0x5b/0x390 [ 87.203370][ T5945] hci_cmd_sync_work+0x1ff/0x470 [ 87.205064][ T5945] ? __pfx_le_read_features_complete+0x10/0x10 [ 87.207186][ T5945] process_one_work+0x9ba/0x1b20 [ 87.209371][ T5945] ? __pfx_process_one_work+0x10/0x10 [ 87.211392][ T5945] ? assign_work+0x1a0/0x250 [ 87.213541][ T5945] worker_thread+0x6c8/0xf10 [ 87.215368][ T5945] ? __pfx_worker_thread+0x10/0x10 [ 87.217187][ T5945] kthread+0x3c5/0x780 [ 87.218645][ T5945] ? __pfx_kthread+0x10/0x10 [ 87.220380][ T5945] ? rcu_is_watching+0x12/0xc0 [ 87.222297][ T5945] ? __pfx_kthread+0x10/0x10 [ 87.223865][ T5945] ret_from_fork+0x983/0xb10 [ 87.225457][ T5945] ? __pfx_ret_from_fork+0x10/0x10 [ 87.227191][ T5945] ? __switch_to+0x7af/0x10d0 [ 87.229091][ T5945] ? __pfx_kthread+0x10/0x10 [ 87.230850][ T5945] ret_from_fork_asm+0x1a/0x30 [ 87.232584][ T5945] [ 87.234621][ T5945] Kernel Offset: disabled [ 87.236291][ T5945] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:05:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000002 RBX=0000000000000000 RCX=ffffffff819a448c RDX=0000000000000000 RSI=ffffffff8dbbeba9 RDI=ffffffff8bf2b480 RBP=0000000000000293 RSP=ffffc9000c76fb50 R8 =0000000000000001 R9 =fffff520018edf62 R10=0000000000000003 R11=ffff8880232e8b30 R12=ffffffff8a1754e6 R13=0000000000000006 R14=ffff8880232e8000 R15=ffff888031368000 RIP=ffffffff8b781e71 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fee9fc3cc80 ffffffff 00c00000 GS =0000 ffff8880d68f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c42afba CR3=000000002da1c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000001bb3 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8b2f0dbb 00007fff8b2f0dbb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8b2f12c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8b2f12c0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3739203a65756c61 76207327726f7470 6972637365642065 6361667265746e69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20656874206d6f72 6620746e65726566 666964202c73726f 7470697263736564 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20746e696f70646e 6520302073616820 373920676e697474 6573746c61203020 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656361667265746e 692030206769666e 6f63203a312d3520 627375205d343554 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63732030 33363d6f6e692022 7366706d74766564 223d766564202274 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000009742d RBX=0000000000000001 RCX=ffffffff8b7816d9 RDX=0000000000000000 RSI=ffffffff8dace4f3 RDI=ffffffff8bf2b480 RBP=ffffed1003bda498 RSP=ffffc90000177de8 R8 =0000000000000001 R9 =ffffed100d4a673d R10=ffff88806a5339eb R11=ffff88801ded2ff0 R12=0000000000000001 R13=ffff88801ded24c0 R14=ffffffff9088b9d0 R15=0000000000000000 RIP=ffffffff8b77fdcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=0000000039d4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000136 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 719e10100001c080 10000ffe80800406 0142e00c000000fb 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2080801000118004 0100000008060601 5fac408281880800 11e00300100011d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300100011c00302 100011b003201000 0a900304ddfeeff6 08000f980304ee08 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000f9003188a0400 0f8c03508204000f 88032008000f8003 0f80040a80030a80 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0411a00300080011 90030fffffffffff ff04118003280800 0610002010000600 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff04098003 2080801000118004 0100000008060601 5fac408281880800 ZMM25=d2f4a775d2f4a775 d2f4a775d2f4a775 d2f4a775d2f4a775 d2f4a775d2f4a775 d2f4a775d2f4a775 d2f4a775d2f4a775 d2f4a775d2f4a775 d2f4a775d2f4a775 ZMM26=768f3393768f3393 768f3393768f3393 768f3393768f3393 768f3393768f3393 768f3393768f3393 768f3393768f3393 768f3393768f3393 768f3393768f3393 ZMM27=8608429786084297 8608429786084297 8608429786084297 8608429786084297 8608429786084297 8608429786084297 8608429786084297 8608429786084297 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c5040000c5040000 c5040000c5040000 c5040000c5040000 c5040000c5040000 c5040000c5040000 c5040000c5040000 c5040000c5040000 c5040000c5040000 info registers vcpu 2 CPU#2 RAX=000000000007b149 RBX=0000000000000002 RCX=ffffffff8b7816d9 RDX=0000000000000000 RSI=ffffffff8dace4f3 RDI=ffffffff8bf2b480 RBP=ffffed1003bda930 RSP=ffffc90000187de8 R8 =0000000000000001 R9 =ffffed100d4c673d R10=ffff88806a6339eb R11=ffff88801ded54b0 R12=0000000000000002 R13=ffff88801ded4980 R14=ffffffff9088b9d0 R15=0000000000000000 RIP=ffffffff8b77fdcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6af5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2976a1 CR3=00000000392cb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf99a0380 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5db815050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5db81505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5db815057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5db81506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5db8150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5db8151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853265b5 RDI=ffffffff9aeedc40 RBP=ffffffff9aeedc00 RSP=ffffc90003b9f588 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3465323038387257 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9aeedc00 R15=ffffffff85326550 RIP=ffffffff853265df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200001000000 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f4000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c73d416d573e525f 6f1b2bb676f0d40d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d03586bccd5437a 0ca1cf434e9c87fc ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e65e9fe04b212293 ed8473e430d1ff1a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 99a797fff9016ec1 1d36ca52c9bbc7e1 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000082c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ce00000030000000 35d4f93035d5034e ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ac000000f4000000 760000001e000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 35d4601f35d45721 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000035d5055f 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a5a34c4ebfdd8418 cdb5f72dece53c21 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2ec2d39041988285 5f18db38e7280edd ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a312d3620627375 205d343554202020 5b5d303239313437 2e36382020205b20 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3739203a65756c61 76207327726f7470 6972637365642065 6361667265746e69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20656874206d6f72 6620746e65726566 666964202c73726f 7470697263736564 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20746e696f70646e 6520302073616820 373920676e697474 6573746c61203020 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656361667265746e 692030206769666e 6f63203a312d3520 627375205d343554 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000