last executing test programs: 1m14.163145277s ago: executing program 3 (id=524): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0xa0044d07, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1/file0\x00', 0x124) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4) getsockopt$inet_tcp_int(r3, 0x6, 0x18, 0x0, &(0x7f0000000040)) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000008001a80100003800c0005800800000000000000100003803000018005000c000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a400000000060000c8014000400293a"], 0x270}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 1m14.080867751s ago: executing program 3 (id=525): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="360a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0xc0000) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, 0x0}, 0x2020) (async) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000040), &(0x7f0000000340)=0x4) (async) write$FUSE_BMAP(r2, &(0x7f0000000280)={0x18, 0x0, r3, {0x5}}, 0x18) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000270e00"/20, @ANYRES32=0x0, @ANYBLOB="2a130200b7580000140012800b00010067656e65766500000400028008002000070cf0ce"], 0x3c}}, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r7, &(0x7f0000001440)=""/126, 0x7e, 0x41) (async) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, '\x00'}}, {@cache_readahead}, {@uname={'uname', 0x3d, '\x00'}}, {@uname={'uname', 0x3d, 'GPL\x00'}}, {@directio}], [{@obj_role={'obj_role', 0x3d, '\\,&'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}}) (async) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000380)={0x85fc, {{0xa, 0x4e22, 0xf, @mcast1, 0x5}}, 0x1, 0x2, [{{0xa, 0x4e20, 0x101, @remote, 0x1}}, {{0xa, 0x4e22, 0x2e, @dev={0xfe, 0x80, '\x00', 0xf}, 0x80000001}}]}, 0x190) 1m14.080671506s ago: executing program 3 (id=526): mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f00000000c0)={0xa458, 0x1, 0x3, 0x6, 0xcb, "0982aa400000000000e6ffffab5affffe500", 0x5, 0x80000001}) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) 1m14.080528025s ago: executing program 3 (id=527): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000006e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1, r1}}}], 0x28}}], 0x2, 0x4001c00) 1m14.021156502s ago: executing program 3 (id=528): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="d8735977527dd97761cf47442000", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1m13.770238601s ago: executing program 3 (id=532): ioprio_set$uid(0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x7, &(0x7f0000000000)=@raw=[@exit, @map_idx, @call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @generic={0x20}, @exit], &(0x7f0000000040)='GPL\x00'}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000200)='H\x00', 0x2}], 0x1) 1m13.750001323s ago: executing program 32 (id=532): ioprio_set$uid(0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x7, &(0x7f0000000000)=@raw=[@exit, @map_idx, @call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @generic={0x20}, @exit], &(0x7f0000000040)='GPL\x00'}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000200)='H\x00', 0x2}], 0x1) 50.070674519s ago: executing program 4 (id=979): r0 = socket$netlink(0x10, 0x3, 0x6) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 50.069459601s ago: executing program 4 (id=980): r0 = socket(0x2a, 0xa, 0x9) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x6, 0x3}, 0x8) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0, 0x38}, 0x8}, 0x0) 50.069076446s ago: executing program 4 (id=981): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x98, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x23c055d2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x918}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf7f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x26c, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xe, 0x6, "5b96d7a3b16ccc1fa690"}, @NFTA_TABLE_USERDATA={0xf6, 0x6, "f2578afeefb3eaf3eca61da428d8854f6ddcbb2422ff1099be8d35cba0603dc6a8d37f565c6f6ac0da9f47ed4d779893686bc6510158d20f26a455b3e374fad3979b3c2c28b0875195e6bcdad0d1850ff80b8ea382dd7035d59ffa02f14770e306ad02083558f57b1787791e61125f8d8948829245bb309a60aad3f46f3db95a14d38f72d25eb1a9f18551b2f711afc163efffe95d11d4a66247fa3404f108c3f86f5c301f416b8d71cfbcf52e16bb352c9166b3a111d3d4b858972aa3e4ce53dfa7ff18e24c7168deab53dc50ae2c462a9b5348ff35519e4b055dc5200fe900da5fefe5dab50b3c945e1660a249bc7fd3c9"}, @NFTA_TABLE_USERDATA={0x8b, 0x6, "0904621cdaafc4b55ad1494f6aba9ab71aa150c51cc98b041c3fe956fba90c8641182929f3eb03216ca18f3c7c6d55e1ed5c6cfb42041dc5a81bfd58644e7665b2c1fdb383023b5ecc960b3187fa186f30db7b59358e81519df27490fe3c312f82ba86431ac437ab6e20533f0a82265fcff0cbdfda3693877323addaa3ca8969c9bd7bebc7cf0b"}, @NFTA_TABLE_USERDATA={0x44, 0x6, "a8c0d104aebdd0defddc883f434a247f002384e4dd5f06b32d84161119af9256a7c5679d6a93fcf151593c4f4bb836ae7e5a6866c90ed894bef48a5a93e047f4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x67, 0x6, "a47c60faff2c07fd38c48ad16f445eb3ac58409ed59aa8dc27fb6bf61d593ca09fed78fcf0a260cd13694fb58724a3854bf6f7df0eb39198ebe7dd34f49506bf706bcd87cc88b3707b76180042708bc3de743d1a9650ff7b7d9c8dc49224b0895a6fee"}]}, @NFT_MSG_DELCHAIN={0xe8, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0xb0, 0xc, "7e03d8512e8a1a1e9ad6a5139e80d9db9be1287bf228d74c27e25fc86a3213679243534fa441b3959b902b1ca1df6607c9801d4464a428b1b70bf2845a37767029040ce50bbb4c1585e723b7a4769918b468f4d17614e7df5eb4afe416ab3913ba94f61fc72c46bf698fb103e0f7ff5b4485a3adb2c506d386c7db6e661e07771d9f4e10e2553fd0a519ec5c5111296aefeeba70e4fe83f52e570caeee6bec38ade7e343eac1faa78c4490dd"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x4c0}}, 0x14b6deac033214c2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = syz_io_uring_setup(0x15c1, &(0x7f0000000000)={0x0, 0x7fac, 0x8000, 0x0, 0xfffffff9}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f00000007c0)={&(0x7f0000003000)={[{0x0}]}, 0x1, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000800)={0x1}, 0x1) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r2, 0x40045436, 0x33) syz_emit_ethernet(0x6c, &(0x7f0000000c40)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x5, 0x39e, 0xfff]}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xc}}}}}}}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 49.980167706s ago: executing program 4 (id=982): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x89}], 0x1, 0x800, 0x0) r1 = userfaultfd(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001500010028bd7000fbdbdf250a3802fd", @ANYRES32=0x0, @ANYBLOB="1400010000000000000000000000ffff0000000014000200"], 0x48}}, 0x8000) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000280)='\x00', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000000)={r8, 0x43, &(0x7f0000000200)=""/67}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f0000000080)={r8}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r4, r9, &(0x7f0000c38000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x2}) 49.069270883s ago: executing program 4 (id=985): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x28, r3, 0x801, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000004) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000140)={{r1}, 0x5, &(0x7f0000000080)=[0x7, 0x1, 0x46b6, 0x100000001, 0x2], 0x7987, 0xf, 0x1}) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 48.800792541s ago: executing program 4 (id=993): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_clone(0x80000280, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000040)="47ea198bfd0e9cd5e092a9be7e8e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = getpid() fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r5}) (async) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) wait4(r6, 0x0, 0x80000000, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="1690040010010049727370616e0000100002800400639073d7ce66233a0000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 48.800558627s ago: executing program 33 (id=993): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_clone(0x80000280, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000040)="47ea198bfd0e9cd5e092a9be7e8e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = getpid() fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r5}) (async) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) wait4(r6, 0x0, 0x80000000, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="1690040010010049727370616e0000100002800400639073d7ce66233a0000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 42.339242924s ago: executing program 0 (id=1148): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x4, 0x15, 0xc595, 0x0, 0x8, 0xfffffffffffffffe, 0x2000000000000000, 0x80000004000000], 0xffff1000, 0x2010d2}) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x11, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES16=r0], 0x218}, {0x0}], 0x2, 0x0, 0x0, 0x44011}, 0x0) r6 = gettid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3363, &(0x7f0000000140)={0x0, 0x3026, 0x2000, 0x3, 0x40}, &(0x7f0000000240), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f00000003c0)='./file0\x00', 0x8, 0x400, 0x1}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000005c0)={'ip6_vti0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000900)={{0x0, 0x4, 0x2, 0x0, '\x00', 0xd3}, 0x1, 0x10, 0x2, r6, 0x0, 0x3, 'syz1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32=r12, @ANYBLOB="01010200fe88000000000000000000000000000186dd00008d623623ff355364de3d4259a1c05c916d738c094490aea24532dcb739f9de62e28f6a399985451dc05e868fb19ac5d062b7167340905abde200020000e310ca080e4d93d036c9acddab572773cff65fc4095c3e77efca7f8082d51a46750eccd5e5f7060753b71b8632ff40d93f26bb17776ee0fb30a0891a4210281596273efcc7c45a14f91c9a531cca88b90d9966196224bc9219e8aee846ffaf0e991de11bdb78f09993a9d4ae8b4233107387"], 0x38}}, 0x20044050) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="af9300090a00000004000000000000000300060000000008020000a1e00000010000000000000000020001000000000000000000000000000300050000000000020000007f0000010000000000000000cbc43e"], 0x50}}, 0x0) 42.189594737s ago: executing program 0 (id=1149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000040)={0x3, r0}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) 42.189311849s ago: executing program 0 (id=1150): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r1, &(0x7f0000000640), 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001000000000000000000000000000d"], 0x38}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(r1, 0x1) r3 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@loopback, 0xa, r5}) mq_notify(r3, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close_range(r3, 0xffffffffffffffff, 0x0) r7 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x1000) bind$nfc_llcp(r7, &(0x7f0000000200)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x7, "713e41f8cb5731829df669038b997130bb6940fff49c2de4ab0e3338bccf894a41953ca7a76fcd2d55d2bc27e031c9568eeca16b53859dabdc80096159bf78", 0x16}, 0x60) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000180)) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xc, 0x80005, 0xed, "0062ba7d82000000000000000000f7ffffff00"}) r9 = syz_open_pts(r0, 0x0) r10 = dup3(r9, r0, 0x0) add_key(&(0x7f0000000ac0)='asymmetric\x00', &(0x7f0000000b00)={'syz', 0x2}, &(0x7f0000000b40)="fc479c5868cc5f3be60ca131267200c06c823825055e14240e97093029f9654a25f0f3013e2a3d99", 0xfffff, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r10, &(0x7f0000000b80)={0x2020}, 0x2020) setsockopt$sock_int(r10, 0x1, 0x5, &(0x7f0000000000)=0x5, 0x4) pselect6(0x40, &(0x7f0000000900)={0x8, 0x0, 0x1ff, 0x1b71, 0x3, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x1000000000007fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) 41.378110203s ago: executing program 0 (id=1169): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x42, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x220100, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x7fff}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)={@fallback=r1, r1, 0x2f}, 0x20) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) readlink(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000003c0)=""/201, 0xc9) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x15) 41.136564364s ago: executing program 0 (id=1175): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'comedi_parport\x00', [0x5, 0x5, 0x3ff, 0x601, 0x1, 0x400cc7, 0xfff, 0x5c952399, 0x805, 0x7ff, 0x2, 0x1, 0x2, 0x4, 0x1, 0xe1cb, 0x5, 0x1a44b, 0x3, 0x201, 0xbe5, 0xfffffff9, 0x9, 0x20001e56, 0x9, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0x1]}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0xd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 40.820307939s ago: executing program 0 (id=1176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000300)="66b80c000f0069d0d06299af4100660f6f8dee35c5dd66420f3a0af2c0b8010000000f01c1c401e5efe267f448b800380000000000000f23d80f21f835800000f00f23f8450f01cfb905090000b8adfb112dba000000000f30", 0x59}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000070f5f50df30c53240c08b6e0be63a5b82d029c78fe228a32571ca8f861b577d9cc655f99f65b27f271602da55d0e7f092141dbd7c2ae79506f21b1b8c1886b4b80a508d1ab91cadf377c1e0f2de034b706dbb872729176027700"/106, @ANYRES16=r8, @ANYBLOB="05002abd7000fedbdf254400000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x48051}, 0x10) 40.819373961s ago: executing program 34 (id=1176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000300)="66b80c000f0069d0d06299af4100660f6f8dee35c5dd66420f3a0af2c0b8010000000f01c1c401e5efe267f448b800380000000000000f23d80f21f835800000f00f23f8450f01cfb905090000b8adfb112dba000000000f30", 0x59}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000070f5f50df30c53240c08b6e0be63a5b82d029c78fe228a32571ca8f861b577d9cc655f99f65b27f271602da55d0e7f092141dbd7c2ae79506f21b1b8c1886b4b80a508d1ab91cadf377c1e0f2de034b706dbb872729176027700"/106, @ANYRES16=r8, @ANYBLOB="05002abd7000fedbdf254400000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x48051}, 0x10) 7.139060399s ago: executing program 5 (id=1684): setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') write$tcp_congestion(r1, &(0x7f0000000280)='nv\x00', 0x3) read$FUSE(r1, &(0x7f0000001680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x2000, 0xfffffffc, r5, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r2, r3}}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x200800, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB="2c626c6b732f17653d30783030302c7569643e573700"/34, @ANYRESDEC=r2, @ANYBLOB=',euid=', @ANYRESDEC=r2, @ANYBLOB=',fowner=', @ANYRESDEC=r2, @ANYBLOB=',smackfsroot=fdinfo/3\x00,euid=', @ANYRESDEC=r2, @ANYBLOB=',fowner>', @ANYRESDEC=r2, @ANYBLOB=',posixacl,fsname=fdinfo/3\x00,lazytime,\x00']) 7.080393399s ago: executing program 5 (id=1685): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0xa09c}, {0xa, 0x0, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r3, 0x99d}}, 0x48) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="090029bd1600fd01002506"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc) 7.080122969s ago: executing program 5 (id=1686): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a801400070000000000020040000000000500080002000000140003007866726d300000000000538d4166978986402a8c197d03593366"], 0x58}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x6a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x80, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0xd000, 0x8085000, 0xf, 0x5, 0x1, 0x0, 0x8, 0x3, 0x80, 0x7f, 0x8, 0x6}, {0x80a0000, 0x2000, 0x4, 0x8, 0x9, 0xa, 0x4, 0xb, 0x1, 0x5, 0x5, 0x8}, {0x2000, 0xeeee8000, 0xe, 0x9e, 0x1, 0x78, 0xae, 0xff, 0xe, 0x6, 0x0, 0xe}, {0x4, 0x4, 0x0, 0xff, 0x7, 0x6, 0x10, 0x2, 0x1, 0x8, 0x55, 0x4}, {0x0, 0xdddd1000, 0x8, 0x2, 0x4, 0xc9, 0x40, 0x9, 0x4, 0x4, 0x80, 0x8}, {0xeeef0000, 0x4, 0xf, 0x6, 0x5, 0x5f, 0x10, 0xe, 0x6, 0x5, 0x6, 0x6}, {0xffff1000, 0xdddd1000, 0x10, 0x81, 0x1, 0xf9, 0x13, 0x2f, 0x53, 0x51, 0xfb, 0x4}, {0x107006, 0xf000, 0xe, 0x45, 0xe, 0x5, 0x8, 0x10, 0x32, 0xea, 0x8, 0xde}, {0xffff1000, 0x3}, {0x80a8000, 0x10}, 0x20000008, 0x0, 0x4000, 0x400004, 0x5, 0x8000, 0x0, [0x3, 0x3, 0xa4, 0x5]}) 6.937530154s ago: executing program 5 (id=1688): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv4_newnexthop={0x18, 0x68, 0x521}, 0x18}}, 0x4020054) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000000)='\'!]\\\x00', 0x5) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x60, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x1000000, 0x0, 0x4004810}, 0x24040840) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 6.917590338s ago: executing program 5 (id=1691): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x80011, 0x0, 0x3f, 0x0, 0x0, 0x0) ptrace$getenv(0x4201, r0, 0x40800000000, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x3, 0x4002) ptrace$setregs(0xf, r1, 0x22, &(0x7f0000000140)="01c4de8ed62dc358e2a3187de49031c1ae78b419275b244487078f72a908a275b18b1eccb29ea9f1ad9e33f7db994bb542") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) write$selinux_validatetrans(r2, &(0x7f00000001c0)={'system_u:object_r:dpkg_exec_t:s0', 0x20, 'system_u:object_r:inetd_exec_t:s0', 0x20, 0x32, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x7d) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) syz_clone(0x80011, 0x0, 0x3f, 0x0, 0x0, 0x0) (async) ptrace$getenv(0x4201, r0, 0x40800000000, &(0x7f0000000000)) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x3, 0x4002) (async) ptrace$setregs(0xf, r1, 0x22, &(0x7f0000000140)="01c4de8ed62dc358e2a3187de49031c1ae78b419275b244487078f72a908a275b18b1eccb29ea9f1ad9e33f7db994bb542") (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) (async) write$selinux_validatetrans(r2, &(0x7f00000001c0)={'system_u:object_r:dpkg_exec_t:s0', 0x20, 'system_u:object_r:inetd_exec_t:s0', 0x20, 0x32, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x7d) (async) 6.799389645s ago: executing program 5 (id=1695): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="5ae4f8e31766741fe951756befb1731cb0d069183e2acb2a810830319bf4a8d5f951f177cd6ce46aa921bfffdc8f322defd6025be4d934ebf8793f965009e3d5320b82aa23a4a287b0d2dfe53017831c3f2d2ad5cc7934b5e9785f66b59eba7a"], 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) request_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='encrypted\x00', r1) (async) request_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='encrypted\x00', r1) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) (async) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000400)=0x200000000) (async) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000400)=0x200000000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/clear_refs\x00', 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) write$vhost_msg_v2(r3, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x3, 0x2}}, 0x48) (async) write$vhost_msg_v2(r3, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r3, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) openat$vnet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$vhost_msg(r7, &(0x7f00000007c0)={0x1, {&(0x7f0000002900)=""/4090, 0xffa, 0x0, 0x1, 0x3}}, 0x48) write$vhost_msg_v2(r3, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000880)=""/196, 0xc4, 0x0, 0x3, 0x2}}, 0x48) (async) write$vhost_msg_v2(r3, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000880)=""/196, 0xc4, 0x0, 0x3, 0x2}}, 0x48) 5.5582548s ago: executing program 2 (id=1709): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) listen(r1, 0x6) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'vxcan1\x00', {0x2, 0x4e23, @multicast2}}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 4.689644488s ago: executing program 2 (id=1711): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) syz_usb_connect(0x0, 0x2d, &(0x7f0000001080)=ANY=[@ANYRESOCT=0x0], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) capset(&(0x7f0000000080)={0x19980330}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x40084146, &(0x7f0000000080)) read$char_usb(r1, 0x0, 0x0) 1.669687266s ago: executing program 2 (id=1724): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000006c0)={0x40, 0x0, 0x2}, 0x10) 1.619958653s ago: executing program 2 (id=1725): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], 0x1, 0x400}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) close(0x3) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) (async) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r5, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x4000) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x10000) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000001940)={&(0x7f0000001500)={{@hyper, 0xac}, {@host, 0x5}, 0x400, "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"}, 0x418, 0x7fffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.549703948s ago: executing program 2 (id=1726): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002640)={0x9, {"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", 0x1000}}, 0xfa0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) (async) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) (async) dup(r0) (async) write$UHID_INPUT(r1, &(0x7f0000002640)={0x9, {"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", 0x1000}}, 0xfa0) (async) 1.549148066s ago: executing program 2 (id=1727): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000340)=0x40fff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000300)='./cgroup\x00', 0x0, 0x10}, 0x18) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0x403, 0x0, 0x4) r8 = syz_usbip_server_init(0x1) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000300)={0x3, 0x9, 0x2, 0xfffffffa}) write$usbip_server(r8, &(0x7f00000002c0)=@ret_unlink={{0x4, 0x3ff, 0x0, 0x0, 0x9}, {0x6}}, 0x30) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) fsync(r4) syz_usb_disconnect(r3) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x40010) r10 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x2d, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "7bf0a8f3"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x711, 0xc, 0x2, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x14}, [@acm={0x4, 0x24, 0x2, 0xc}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0xf, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0xa, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0x7, 0x3}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x4d, 0xf, 0x1, 0x20, 0x5}, 0x33, &(0x7f0000000400)={0x5, 0xf, 0x33, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0xb4, 0x0, 0x8, 0x2e41}, @ssp_cap={0x20, 0x10, 0xa, 0x5a, 0x5, 0x2, 0x88f, 0xa, [0x0, 0x3f, 0xc000, 0x0, 0x3fc0]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2409}}, {0xd3, &(0x7f0000000700)=@string={0xd3, 0x3, "b55032eb035f67701b270969f9f6e6f37c984dc0c71b45293e6a4ef3a356a9ce38242f64d5831962709a413fa8e1582afb56feed042a3fa6b6b1d31980f733a56e8e3903122792fb64aeec104b06b3b6bce6bdf0a6316e9604f992956a468422b3169142978b435b39e5b756fdbcd675539e26f9b14d988e9169d985d95a071249063bb5c6242333c48c4ae5ba94ee31cbf5ec28312c0361eb187ea4d475ec275f84553ec8d043a9dc0ca02abeb912119d6e7b9cefa22192dcf7ef6a94a8c01840e5eab60e105459cb8cf628662d3c8ebe"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x180a}}]}) syz_usb_control_io$cdc_ncm(r10, &(0x7f0000000600)={0x14, &(0x7f0000000800)={0x20, 0x23, 0xd5, {0xd5, 0x4, "1b3e3ddc4d77a0122a6bbea1cd8d1f5de18d61974458a24c1a326c54d1378eb7665f537831c61b745f17782a1efd38f3699635d1320aa2a7b78a7b8acea86bef7b62239810c4bf4459399adc958b957282ebc4c119bfb4ab0a8a9fb9dbe5e3de48847375a302041f83e29b4176a4e32283d0c686099fb4e2424aef5f19ed12b08090d3013db13d0c84252228c4f00c7a4de0bef385ba309df2f39c0cbf8d7a59b93a82089eae2b725bd402bf7a6dbc0d40b88c67d86004342b20e5473f8ef44cbc9550a06dd285e15f3231f9d15bdbc7e05a6e"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x40, 0x18, 0x9f, "9b845a133a547b475d1e9ead71b139b6e5d0783655b0d868904ceb459b091cdea7fec32e9affebd4e86254d68918f179ccc5789e0ed2aa5a5f0a38ac696e691626721ea338db41795034a3ebe72ba5b85718d8d7f1be63ecf930a5d9c36a5124cbecd61c7d709023367781f06f90e94ac25afb4167d13b15e3cc7d4e633cc04d4f6129a1c96fd187cf40efecc7e94345b8a09b7e0dfbfb05765e338e376cfe"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a40)={0x20, 0x80, 0x1c, {0x8001, 0x1, 0x6, 0x0, 0xf000, 0x101, 0x4, 0x0, 0x7, 0x8, 0x7, 0x7}}, &(0x7f0000000a80)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000ac0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000b00)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000b40)={0x20, 0x89, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x10, &(0x7f0000000300)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 349.925251ms ago: executing program 1 (id=1745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc001, 0x3, 0xc1}) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)={0x2, [0x5, 0x4], 0x1ff}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "29f88877b15e7a424b1d252eea0b4c58e667cc6b30"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 190.378904ms ago: executing program 1 (id=1747): unshare(0x22020400) r0 = eventfd(0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_io_uring_setup(0xc80, &(0x7f0000000440)={0x0, 0x6e86, 0x8000, 0x6, 0x8002d, 0x0, r0}, 0x0, 0x0) 184.847096ms ago: executing program 1 (id=1749): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x2}], 0x1, 0x20048881) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 183.274179ms ago: executing program 1 (id=1750): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xb]}, 0x8) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x3, "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"}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000280)) rmdir(&(0x7f00000002c0)='./file0\x00') ioctl$KVM_SET_TSC_KHZ_vm(r0, 0xaea2, 0x3) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000300)={"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"}) pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RRENAMEAT(r1, &(0x7f0000000740)={0x7, 0x4b, 0x1}, 0x7) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000780)="bda0553afb99b70ef7d327344772aea0cc576734f6cc8a6aa61d73f56c0b9884ec57122a84af5c040e87c70152f811144eed99b8fbf7d1d830a2b286de989c03aa8cea61de13248c464f76e0222b198ea8ea30263b85069e3b4d200b79d826182048c2ed22d23cc887abda1fdb5b70ceedd26933d5c3024e3c49454ace1a24c526ddb5b6057b45edfb21e66e9b804b694588b9d5780182dbeff5a88eaa1e486de471d294e3d13af0fce258e9cb67e4b4931c11f3378e5f217823359655264f0eb6b3b268501e788beb8b917351da994481d28fabe5bc1383cba4ba1d30395ad6") getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000880)={0x0, 0x21, "b54d1237a28786494e8a4f0011a6ab4f7138ef366f9fa103b9d816dd5eaddcb1cb"}, &(0x7f00000008c0)=0x29) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) read(r0, &(0x7f0000000900)=""/96, 0x60) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000980), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f00000009c0)) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000a00)) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000ac0)=[@text32={0x20, &(0x7f0000000a40)="20bcaa4a6b000026d8588fc4e175631bc4c3817d780a288fe8489ed5fab8040000000f23d80f21f835400000b00f23f8ea0100000030010f2304c4c229aedcc4e3fd6c86d4990000f6", 0x49}], 0x1, 0x20, &(0x7f0000000b00), 0x0) r4 = geteuid() quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, r4, &(0x7f0000000b40)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000bc0)={'vxcan0\x00', 0x0}) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000c00)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000c40)={r2, 0x7}, &(0x7f0000000c80)=0x8) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r0, 0x4068aea3, &(0x7f0000000cc0)={0xc1, 0x0, 0x2}) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000d40)={@remote, r5}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f0000000d80)=@qipcrtr={0x2a, 0x0, 0x4000}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e00)="7a3463af8debd07d735073cdffa5a1e538fc4957a5fc16d7156be401c50385f8", 0x20}], 0x1, &(0x7f0000000e80)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffc}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x19}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xff}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000f80)="439724026ba59af32c0cec131e9beb19c9c8a7dd8644d545461fd7d338bcc138c61d407832343fc63edca14fdb95d1eb9b9527f042c0a9418b07a233c2421452f7da3fca7a95ab591b590843b9f5f707f8a3", 0x52}], 0x1, &(0x7f0000001040)=[@timestamping={{0x14, 0x1, 0x25, 0xa4}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffff7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x491}}], 0xc0}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001100)="20e8a001814e16afaac2bc631da7f0701753abe1fbfe3569128b9d5e6fe72421db7e666471c9ff399314880999a64b726f38400f4771a108f6837d903bfe7395c623df0764c98b89413a4884ad3f34daf78ae1cc975c42afddc52a", 0x5b}, {&(0x7f0000001180)="8e5b6e2f46c35a531b24567f1ff5bfa3e984aeab50ffd948c3bb16dda2411eca7abce2faf2fc0284f59382ad9cbe3077f13cc62b3bddc8d1af2150a040abda41a84f426d5a226132cb05b609b4ef67a389de0e967de9909c78", 0x59}, {&(0x7f0000001200)="bdb63a3626c71237702db4fc164a4afc926879c19eb38dd1c58eefbaacdb9f6656646cebca420c607a2db3146607a0469f1fc76e20a7a9406907a61342753c10bfcdf143754a70a0e3ae3fdfdbe9b839cfffda78c8eeea8da018f5b387b92cb8c97057c836813f78f9e30e0043a2fd865d7c46934fc8fa4b8ff48984e557834c683d800439297d92e98ce9a79dbd0c935c2e6ca7e8ed9526a17345fd96f099c8a524f6a40d0c5fdb407fa03b55ba5b7f01", 0xb1}, {&(0x7f00000012c0)="d3c3be1ebc3194d8c66b98237fc596a4dce5cd05504c16b05d2ea017a2a5c6164ba9573574bd4872f7a4bd35ba48161e42d3789347d2f03ebbd990338953fb9e8bb55053be2f5a1d53cf6b61f64a615257943f7f60b1935fc3a46e2371bffe52977f1f657a0851b668bbe43d299f558ce0399ea79b8e35cd41f1b1e5ac763b3f2386034427986d2b479b4767857cc01649b67994dcff2f9756031e7e9bc7702405b75ec398beed0a5a7195125528081e31bde6f186431b7c591136420a51f6da1fab", 0xc2}, {&(0x7f00000013c0)="6ac0f522b949edd185ebee8be597bc5a4a42bc631fa3cb1cdca8448303aa0f3be4274f56caebb7dc8452820208d6352822c15bad41b2562cc2cbe715255f0bbc3c7dd5a46845f8de70995fe3af4225822efb93125a80212d196be2", 0x5b}, {&(0x7f0000001440)="0d1498bdb8b854b21da7dea33aac12cc363cd887d3fc38de05ba68874a", 0x1d}, {&(0x7f0000001480)="5a60df2e33ed989fbb962bac89faf9e5961618827542a94f8a56b5ee4bd6063f907f39f9561ad9811065908a790e7a7911617c8c4749ea6981fc5a1646c9a764da846360e5ee9191f29087b7e48e66f45e6789ca3931fea4fb57ed204af5", 0x5e}, {&(0x7f0000001500)="7e6c9ba818d1b4dc34d5fd96ec18eecef04cba0455a46e287bceeaa6d1bf8fab8076fec758f9778da7763dc11c2b0c494f0f7f27fdc300e80c99f40c95342601c4015e85319f2f63980d201e8ef4a48ebd7bc302390e04bab7b7fc1a70ed96764d1ed64915d9f97cc6838b0269549d59eecb3cc178a2eea3752403e927ddfad1190bb2e1eb96a6e85fad1ea50c94de079afe3f5b75c4e70e4c14858c2741396daa81d61ec396018429b10d945658159fd9001a84ed4918a06dd1ed804cb918a2c8aaf149e1dacdcf50ed59cb30a40b8fdc95e95785baf124b62ca7d52266b0eecfa9ef84eb062024c91278591a413aacad74a21bbf7fc4", 0xf7}, {&(0x7f0000001600)="25439adfb9b28dc1a61e099d609a46b93f78de34d7aca811cc5f4c86f5269c332895150b7d69d6420222c03ae297c7d15bcae070662a39b5433fb909de2403e3b66148207033e2bd3bc7c2442b8565cdb03dc20ec90200f498b4884f1dcb2a083225d5edb73c4cab851e73ce2159e3bfd52ed856df1cb9699a2f5a4b1c04cebd5daaae3876f8c4afc05f7bc1", 0x8c}], 0x9}}], 0x3, 0x4) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000001840)) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000018c0)=@add_del={0x2, &(0x7f0000001880)='vlan0\x00'}) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001900), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000001940)={{0x1, 0x1, 0x18, r3, {0x7f}}, './file0\x00'}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001a80)={0x0, &(0x7f0000001980)=[@wrmsr={0x1e, 0x20, {0x8da, 0x7ff}}, @uexit={0x0, 0x18, 0xfffffffffffffff8}, @wrmsr={0x1e, 0x20, {0x82c, 0xe}}, @code={0xa, 0x6f, {"430f01cf0f0726f2470f5d1e45dae9c441cc54c048b81e000000000000000f23c00f21f835000006000f23f80f381c37c7442400f9ffffffc7442402e6000000c7442406000000000f01142466baf80cb85cf1bb8eef66bafc0ced260f32"}}], 0xc7}) 129.855463ms ago: executing program 6 (id=1751): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x43, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@remote}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x0, 0x1, {0x0, 0x2c, 0x17, 0x1b, 0x7, 0xfffff5e0, 0x1, 0x1d, 0x1}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000380)={0x4, "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"}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x43, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@remote}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) (async) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000000c0)={0x0, 0x1, {0x0, 0x2c, 0x17, 0x1b, 0x7, 0xfffff5e0, 0x1, 0x1d, 0x1}}) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) (async) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) (async) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000380)={0x4, "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"}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) (async) 129.075948ms ago: executing program 6 (id=1752): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x17a26ecb, 0x1, 0x4, 0x80b4d, 0x2c83, 0x2, 0x9, 0x4000000d, 0x94}) mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f000009dfc0)={[{@dyn}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 59.630146ms ago: executing program 1 (id=1753): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b1a, &(0x7f0000000040)) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000400000000800c300741300000800c40001"], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@huge_advise}, {@gid={'gid', 0x3d, r6}}, {@huge_always}, {@mode={'mode', 0x3d, 0x2}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x86c4be3a1f4cb173, 0x35, 0x78, 0x32, 0x78, 0x38, 0x74, 0x86f670a82117018a, 0x25, 0x25]}}, {@huge_never}], [{@subj_user={'subj_user', 0x3d, 'wlan1\x00'}}]}) 54.387203ms ago: executing program 6 (id=1754): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000002c0)={'lo\x00', @broadcast}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000002c0)={'lo\x00', @broadcast}) (async) 53.66049ms ago: executing program 1 (id=1755): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@deltaction={0x8c, 0x31, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7ffd}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x811}, 0x0) (async) r3 = socket(0x2, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x508, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xfff3}, {}, {0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x4, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x474, 0x2, [@TCA_FW_ACT={0x4c, 0x4, [@m_ct={0x48, 0x1f, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "04f3ffcc5f0a9385c40a855d7d4d4b81"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'dummy0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xffff, 0x3000000, 0x1, 0xf, 0x1ff, 0x7, 0xfffffffd, 0x6, 0x8, 0x0, 0xfffffffa, 0x7f, 0x6f, 0xc, 0x5, 0x0, 0x7, 0xc, 0x2, 0x9, 0xffff0e63, 0x7fff, 0x401, 0x7f, 0x400, 0x7ff, 0x2, 0xb, 0x8, 0x1, 0x7f, 0x7, 0x400, 0x8, 0x3, 0x1, 0x1, 0x7fffffff, 0xfffffc01, 0x40, 0x7, 0x2c426973, 0x1c75, 0x8, 0xd71, 0x3, 0x6, 0x6, 0x5, 0x5, 0x3, 0x1ff, 0x6, 0x0, 0x6, 0x5, 0xd, 0x9, 0xffffffff, 0x1, 0x5, 0x4eb, 0x1, 0x1, 0x2, 0x7f, 0x7, 0x1, 0x6, 0x3fe00000, 0x4, 0x8000, 0x93, 0x31, 0xfffffff9, 0x2, 0x101, 0xfffffff7, 0x3, 0x40, 0xc55, 0xd, 0xcece, 0x8ac, 0x2c, 0x9, 0x8, 0x69cf, 0x80, 0x80, 0xfffffffc, 0x10000001, 0x6, 0x1, 0x2790, 0x0, 0x2, 0x10000000, 0x1, 0x9, 0x2, 0xffffff5d, 0xf7c, 0x4, 0x100, 0x8, 0x2, 0xe, 0x0, 0x1, 0x5, 0x4, 0x2, 0x3, 0xdf, 0xfb4, 0x9, 0xb5, 0x0, 0x8, 0x5, 0x3, 0x6f, 0x10000, 0x7, 0x5, 0xe8d6, 0x7, 0xff, 0x4, 0x7, 0xe1c, 0x6, 0x3, 0x9322, 0x7, 0x7, 0x4, 0x8, 0xa786, 0x200, 0x0, 0x7fff, 0x52, 0x1, 0x10001, 0x6, 0x3, 0x1, 0x1ff, 0x4, 0x9, 0x9, 0xf4, 0x7, 0x8, 0xf, 0x58, 0x4db3f18a, 0x9, 0x4, 0xb, 0x9, 0x7fff, 0x3, 0x401, 0x8, 0x1, 0x0, 0xc, 0xa, 0x0, 0x6, 0x2, 0x5, 0x5, 0x100, 0x7, 0x7, 0x0, 0x2, 0x9, 0x9, 0x6, 0x4c0000, 0x5, 0x4, 0x0, 0x3, 0x4, 0x7, 0x5, 0x6, 0x7ff, 0x0, 0xff, 0x6, 0x8e, 0x6, 0x8, 0x394c, 0x8, 0x8001, 0x81, 0x0, 0x8, 0x3, 0x8, 0x3, 0x101, 0xbc, 0x1, 0x4, 0xd8, 0x200, 0x9, 0xf64f, 0x0, 0xfffffe00, 0x0, 0x7, 0x9, 0x6c3, 0x1, 0x5, 0x1000, 0x8, 0x1e76, 0x7, 0x3, 0xfffffffa, 0x2, 0x0, 0x8001, 0x4, 0x7, 0x7fff, 0x4, 0x10000, 0xffff, 0x1000, 0x2, 0x81, 0x7f, 0x4, 0x0, 0x9ee, 0xd6, 0xfffffffa, 0x6, 0x7, 0x0, 0x1, 0xfffffff5, 0xa]}]}]}}]}, 0x508}, 0x1, 0x0, 0x0, 0x40044051}, 0x4) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e725f626c6f63960000002c002c16c5c2118b9831267e0491786b5ebf89e73ff51c62d46ae4c25f855df44ddd1a028918f53e2e10a6881cf41f263b5146d06b9eb89e3ec1dd0e9984f0f623b2a5e8212bfb4dc48b27d126bcbfbd3d677f2107ca38158f5766012db2de33065dd5ba9a51ba56d41822c4dda61e5e3b75fcca68c5321a92c981fa76fa23038858bf48cf932cc374fdca17cdc400381e3e4f283fcb425b3cac15bdf972a4bd67f6d972"]) (async, rerun: 32) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000500)={0x3ff, 0x0, 0x4, {0x9, @raw_data="e63e09b33e64369d8dae60e1e6e735d73f64ea1b51edd82d923da428ca836d3295d0c9b12d3bb819c276dfe5003698b901165421f38b48f2e58e6d50f68960de10a1d05064227456803708d41adaff2023ccc507000000b81433647f5d5aee7df2e720448f2fbfc7684178ad817581d3180327796bbec48401556e4429464b7514dcc765288d05c22b02aec6e7cf0e0991b0d8c7bae62d5c2c67542265f7197d9d534aa3f543e7563ccc4bd3e3e7f137e4fd5538e16f7aa9f3b545ae927ed6afc98f34332d0d43d7"}, 0x9}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x40, 0x8, 0x4, 0x7fff, {{0xc, 0x4, 0x3, 0x1, 0x30, 0x68, 0x0, 0x57, 0x4, 0x0, @empty, @remote, {[@timestamp_addr={0x44, 0x1c, 0x15, 0x1, 0x5, [{@multicast2, 0xfe8}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3}, {@local, 0x5}]}]}}}}}) (async) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x2, 0x1}}, 0x20) (async, rerun: 64) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) (async, rerun: 64) r8 = fanotify_init(0x200, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x5, 0x0, 0x0, 0x0, {0x81, 0x0, 0x0, 0xd85}, {0x0, 0x0, 0x5}, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x84040}, 0x0) (async) fanotify_mark(r8, 0x1, 0x4800003e, r7, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async, rerun: 32) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async, rerun: 32) r10 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x19d) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r11, 0x2000009) sendfile(r10, r11, 0x0, 0x6) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 610.943µs ago: executing program 6 (id=1756): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000380)={0x980915, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x487, 0x0, 0x9}]}) 129.425µs ago: executing program 6 (id=1757): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) write$cgroup_type(r0, &(0x7f00000001c0), 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') removexattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=@known='system.advise\x00') 0s ago: executing program 6 (id=1758): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0xffffff95}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010f7000000000000000000000000000a1c000000050a0108000000000000000001000009d5ff07006e617400140000001100010000000000000000000a00000a"], 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x80) 0s ago: executing program 1 (id=1760): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r5, r5, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x4000) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) (async, rerun: 32) r7 = fcntl$dupfd(r6, 0x0, r6) (rerun: 32) ioctl$TCFLSH(r7, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0xdb) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000380)=0xf7) (async) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x80000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x638200, 0x0) (async) r9 = dup2(r8, r2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs user:trusted: '], 0x32, 0xfffffffffffffffc) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) ioctl$BTRFS_IOC_RESIZE(r9, 0x50009403, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYBLOB=':+0000000000\x00\x0000']) (async) ioctl$TIOCSPGRP(r9, 0x5410, &(0x7f0000000000)=0xffffffffffffffff) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200b0333c3746b1a32fd964632d2bb5ecaee0f465b01013fceea4fbb7d57991091be7bcd3a2d90503e571fda950f9ffffff9242ec9751125c91035241e72b6c2cc47609e7", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES64=r1], 0x48}}, 0x0) (rerun: 64) kernel console output (not intermixed with test programs): oth: hci1: Received unexpected HCI Event 0x00 [ 88.362876][ T5982] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 88.375313][ T9158] can: request_module (can-proto-0) failed. [ 88.409092][ T9168] overlay: Unknown parameter 'appraise' [ 88.489444][ T40] audit: type=1400 audit(1755870240.794:608): avc: denied { write } for pid=9174 comm="syz.1.914" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.582232][ T40] audit: type=1400 audit(1755870240.884:609): avc: denied { execheap } for pid=9190 comm="syz.1.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 88.643911][ T9199] netlink: 'syz.0.924': attribute type 6 has an invalid length. [ 88.646768][ T9199] netlink: 'syz.0.924': attribute type 6 has an invalid length. [ 88.704750][ T9206] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 88.706839][ T9206] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 88.710199][ T9206] vhci_hcd vhci_hcd.0: Device attached [ 88.713285][ T9206] vhci_hcd vhci_hcd.0: port 0 already used [ 88.718537][ T9207] vhci_hcd: connection closed [ 88.718679][ T60] vhci_hcd: stop threads [ 88.722465][ T60] vhci_hcd: release socket [ 88.723947][ T60] vhci_hcd: disconnect device [ 88.805836][ T9214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9214 comm=syz.0.927 [ 88.811083][ T9214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9214 comm=syz.0.927 [ 88.816702][ T9214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9214 comm=syz.0.927 [ 88.821781][ T9214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9214 comm=syz.0.927 [ 88.827161][ T9214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9214 comm=syz.0.927 [ 88.832573][ T9214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9214 comm=syz.0.927 [ 88.837950][ T9214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9214 comm=syz.0.927 [ 88.842079][ T9214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9214 comm=syz.0.927 [ 88.846338][ T9214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9214 comm=syz.0.927 [ 88.852059][ T9214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9214 comm=syz.0.927 [ 88.882186][ T9218] blktrace: Concurrent blktraces are not allowed on loop4 [ 88.884832][ T9218] __nla_validate_parse: 12 callbacks suppressed [ 88.884842][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.928'. [ 88.924964][ T9220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.932754][ T9222] netlink: 72 bytes leftover after parsing attributes in process `syz.2.930'. [ 88.935573][ T9220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.945394][ T9222] overlayfs: statfs failed on './file0' [ 88.945703][ T40] audit: type=1400 audit(1755870241.244:610): avc: denied { getattr } for pid=9221 comm="syz.2.930" name="/" dev="9p" ino=35913920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 89.234571][ T9238] pimreg: entered allmulticast mode [ 89.284309][ T40] audit: type=1800 audit(1755870241.584:611): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.939" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 89.291198][ T9240] ip6gretap1: entered promiscuous mode [ 89.294874][ T9240] ip6gretap1: entered allmulticast mode [ 89.315420][ T40] audit: type=1400 audit(1755870241.614:612): avc: denied { accept } for pid=9248 comm="syz.2.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 89.336644][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 89.363362][ T9254] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 89.469991][ T9263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.943'. [ 89.535246][ T9271] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 89.824186][ T9300] bpq0: left allmulticast mode [ 89.850905][ T40] audit: type=1400 audit(1755870242.154:613): avc: denied { append } for pid=9302 comm="syz.0.955" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 89.905848][ T5982] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.915746][ T5982] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.434134][ T9280] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 90.449080][ T9321] netlink: 'syz.2.958': attribute type 1 has an invalid length. [ 90.454594][ T9321] netlink: 'syz.2.958': attribute type 3 has an invalid length. [ 90.458259][ T9321] netlink: 224 bytes leftover after parsing attributes in process `syz.2.958'. [ 90.461914][ T9321] NCSI netlink: No device for ifindex 0 [ 90.503009][ T9330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.961'. [ 90.535451][ T9334] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 90.564522][ T9334] netlink: 'syz.0.962': attribute type 10 has an invalid length. [ 90.567756][ T9334] hsr_slave_0: left promiscuous mode [ 90.570168][ T9334] hsr_slave_1: left promiscuous mode [ 90.608357][ T9331] netlink: 'syz.2.961': attribute type 1 has an invalid length. [ 90.608394][ T9337] netlink: 'syz.2.961': attribute type 1 has an invalid length. [ 90.614128][ T9331] netlink: 56 bytes leftover after parsing attributes in process `syz.2.961'. [ 90.698171][ T9340] gtp0: entered promiscuous mode [ 90.707910][ T9340] kernel profiling enabled (shift: 63) [ 90.709971][ T9340] profiling shift: 63 too large [ 90.840124][ T9346] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 91.604539][ T9357] overlayfs: missing 'lowerdir' [ 91.635306][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.969'. [ 91.733938][ T9370] SELinux: failed to load policy [ 91.737830][ T9370] netlink: 44 bytes leftover after parsing attributes in process `syz.0.972'. [ 92.021255][ T9384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.976'. [ 92.024286][ T9384] netem: change failed [ 92.275882][ T7523] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 92.425856][ T7523] usb 5-1: Using ep0 maxpacket: 16 [ 92.428605][ T7523] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.431972][ T7523] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 92.436841][ T7523] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.439745][ T7523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.444624][ T7523] usb 5-1: config 0 descriptor?? [ 92.647997][ T9386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.651885][ T9386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.860910][ T7523] usbhid 5-1:0.0: can't add hid device: -71 [ 92.863190][ T7523] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 92.867910][ T7523] usb 5-1: USB disconnect, device number 8 [ 93.408408][ T5982] Bluetooth: hci1: Unable to find connection with handle 0x00c8 [ 93.817201][ T40] kauditd_printk_skb: 613 callbacks suppressed [ 93.817213][ T40] audit: type=1400 audit(1755870246.124:1227): avc: denied { map } for pid=9410 comm="syz.2.986" path="/dev/net/tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 93.826790][ T40] audit: type=1400 audit(1755870246.124:1228): avc: denied { execute } for pid=9410 comm="syz.2.986" path="/dev/net/tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 93.840116][ T9411] netlink: 'syz.1.987': attribute type 10 has an invalid length. [ 93.910167][ T9418] __nla_validate_parse: 2 callbacks suppressed [ 93.910179][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 93.939163][ T9422] netlink: 172 bytes leftover after parsing attributes in process `syz.2.990'. [ 93.942553][ T9424] netlink: 'syz.1.991': attribute type 7 has an invalid length. [ 93.952769][ T9420] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 93.963601][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.992'. [ 93.967271][ T40] audit: type=1400 audit(1755870246.274:1229): avc: denied { setopt } for pid=9427 comm="syz.1.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.137429][ T5976] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.140003][ T5976] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.142296][ T5976] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.144805][ T5976] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.148259][ T5976] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.159065][ T9433] xfrm0 speed is unknown, defaulting to 1000 [ 94.203523][ T9433] chnl_net:caif_netlink_parms(): no params data found [ 94.238059][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.240379][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.242643][ T9433] bridge_slave_0: entered allmulticast mode [ 94.244978][ T9433] bridge_slave_0: entered promiscuous mode [ 94.245682][ T7514] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 94.248580][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.251546][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.253919][ T9433] bridge_slave_1: entered allmulticast mode [ 94.256307][ T9433] bridge_slave_1: entered promiscuous mode [ 94.273868][ T9433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.278347][ T9433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.297106][ T9433] team0: Port device team_slave_0 added [ 94.300165][ T9433] team0: Port device team_slave_1 added [ 94.317748][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.319991][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.328342][ T9433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.332575][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.334851][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.344007][ T9433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.355795][ T1337] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 94.372762][ T9433] hsr_slave_0: entered promiscuous mode [ 94.374872][ T9433] hsr_slave_1: entered promiscuous mode [ 94.376877][ T9433] debugfs: 'hsr0' already exists in 'hsr' [ 94.378645][ T9433] Cannot create hsr debugfs directory [ 94.405753][ T7514] usb 7-1: Using ep0 maxpacket: 8 [ 94.408855][ T7514] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 94.411472][ T7514] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.414498][ T7514] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.417695][ T7514] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.420784][ T7514] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.424813][ T7514] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.427840][ T7514] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.448809][ T9433] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.452226][ T9433] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.456776][ T9433] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.461606][ T9433] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.472917][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.475228][ T9433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.477637][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.479850][ T9433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.497839][ T9433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.503632][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.506347][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.511354][ T9433] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.516348][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.518894][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.523407][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.525671][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.527331][ T1337] usb 5-1: unable to get BOS descriptor or descriptor too short [ 94.531037][ T1337] usb 5-1: not running at top speed; connect to a high speed hub [ 94.534236][ T1337] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.539174][ T1337] usb 5-1: config 1 interface 0 has no altsetting 0 [ 94.543428][ T1337] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.545080][ T9433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.546540][ T1337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.552172][ T1337] usb 5-1: Product: syz [ 94.553605][ T1337] usb 5-1: Manufacturer: syz [ 94.555008][ T1337] usb 5-1: SerialNumber: syz [ 94.617495][ T9433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.632112][ T7514] usb 7-1: usb_control_msg returned -32 [ 94.634005][ T7514] usbtmc 7-1:16.0: can't read capabilities [ 94.641106][ T6039] usb 7-1: USB disconnect, device number 8 [ 94.711204][ T9467] netlink: 'syz.2.998': attribute type 4 has an invalid length. [ 94.716687][ T9467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.720103][ T40] audit: type=1400 audit(1755870247.024:1230): avc: denied { map } for pid=9466 comm="syz.2.998" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 94.724693][ T9433] veth0_vlan: entered promiscuous mode [ 94.733007][ T9433] veth1_vlan: entered promiscuous mode [ 94.743004][ T9433] veth0_macvtap: entered promiscuous mode [ 94.746911][ T9433] veth1_macvtap: entered promiscuous mode [ 94.754673][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.761727][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.761787][ T1337] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 94.766189][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.771762][ T1337] usb 5-1: USB disconnect, device number 9 [ 94.771762][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.779056][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.779426][ T9471] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1000'. [ 94.783216][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.806522][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.806880][ T9473] 9pnet_fd: Insufficient options for proto=fd [ 94.808999][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.818895][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.821455][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.828229][ T40] audit: type=1400 audit(1755870247.134:1231): avc: denied { mounton } for pid=9433 comm="syz-executor" path="/syzkaller.LGPG7W/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=31164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 94.829465][ T9481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1003'. [ 94.857803][ T40] audit: type=1400 audit(1755870247.164:1232): avc: denied { map } for pid=9479 comm="syz.2.1003" path="socket:[31171]" dev="sockfs" ino=31171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 94.867562][ T9481] selinux_netlink_send: 56 callbacks suppressed [ 94.867572][ T9481] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9481 comm=syz.2.1003 [ 94.895442][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1006'. [ 94.898515][ T9490] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1006'. [ 94.900581][ T9493] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 94.903455][ T9493] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 94.904084][ T9490] fuse: Unknown parameter '0xffffffffffffffff0x000000000000000c0000000000000000000000700000000000000000000' [ 94.912250][ T40] audit: type=1400 audit(1755870247.214:1233): avc: denied { setattr } for pid=9494 comm="syz.2.1008" name="NETLINK" dev="sockfs" ino=31187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.973732][ T9509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.000261][ T40] audit: type=1400 audit(1755870247.304:1234): avc: denied { ioctl } for pid=9514 comm="syz.1.1017" path="socket:[31207]" dev="sockfs" ino=31207 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 95.021214][ T9518] : entered promiscuous mode [ 95.136398][ T9531] trusted_key: syz.2.1022 sent an empty control message without MSG_MORE. [ 95.146330][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1022'. [ 95.150988][ T9533] fuse: Unknown parameter 'r00000000100000' [ 95.175955][ T9535] geneve2: entered promiscuous mode [ 95.178006][ T9535] geneve2: entered allmulticast mode [ 95.242904][ T40] audit: type=1326 audit(1755870247.544:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz.1.1026" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbed98ebe9 code=0x0 [ 95.283915][ T40] audit: type=1400 audit(1755870247.584:1236): avc: denied { lock } for pid=9544 comm="syz.2.1028" path="/251/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.336496][ T9555] binder: 9554:9555 ioctl c018620c 200000000240 returned -22 [ 95.357837][ T9557] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1033'. [ 95.473016][ T9574] mkiss: ax0: crc mode is auto. [ 95.540757][ T9576] binder: 9575:9576 ioctl c0306201 200000000080 returned -14 [ 95.547305][ T9576] program syz.2.1040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.550722][ T9576] binder: 9575:9576 ioctl 80045430 7f10a87dbf9c returned -22 [ 95.985828][ T7515] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 95.995515][ T9604] dlm: no locking on control device [ 95.995754][ T9603] dlm: no locking on control device [ 95.997674][ T9604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.155862][ T7515] usb 7-1: Using ep0 maxpacket: 8 [ 96.158700][ T7515] usb 7-1: config 1 interface 0 has no altsetting 0 [ 96.162214][ T7515] usb 7-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 96.164988][ T7515] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.167603][ T7515] usb 7-1: Product: syz [ 96.169065][ T7515] usb 7-1: Manufacturer: syz [ 96.170503][ T7515] usb 7-1: SerialNumber: syz [ 96.235889][ T5982] Bluetooth: hci2: command tx timeout [ 96.255733][ T7521] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 96.427074][ T7521] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 96.430251][ T7521] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 96.434758][ T7521] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.439108][ T7521] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 96.442895][ T7521] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 96.448079][ T7521] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.450916][ T7521] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.453396][ T7521] usb 5-1: Product: syz [ 96.454714][ T7521] usb 5-1: Manufacturer: syz [ 96.464535][ T7521] cdc_wdm 5-1:1.0: skipping garbage [ 96.466648][ T7521] cdc_wdm 5-1:1.0: skipping garbage [ 96.468988][ T7521] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 96.471126][ T7521] cdc_wdm 5-1:1.0: Unknown control protocol [ 96.745143][ T9647] overlay: Unknown parameter 'smackfsroot' [ 96.886957][ T7515] usbhid 7-1:1.0: can't add hid device: -71 [ 96.888916][ T7515] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 96.892077][ T7515] usb 7-1: USB disconnect, device number 9 [ 97.228627][ T59] usb 5-1: USB disconnect, device number 10 [ 97.255694][ T7515] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 97.405777][ T7515] usb 7-1: Using ep0 maxpacket: 8 [ 97.408857][ T7515] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 97.412348][ T7515] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 97.415519][ T7515] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.418846][ T7515] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.423538][ T7515] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.427232][ T7515] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.632394][ T7515] usb 7-1: GET_CAPABILITIES returned 0 [ 97.634169][ T7515] usbtmc 7-1:16.0: can't read capabilities [ 97.731880][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1069'. [ 97.792745][ T141] kernel write not supported for file bpf-prog (pid: 141 comm: kworker/3:2) [ 97.850799][ T46] bond0: (slave bond_slave_0): interface is now down [ 97.851525][ T9690] netlink: 'syz.5.1075': attribute type 10 has an invalid length. [ 97.853587][ T46] bond0: (slave bond_slave_1): interface is now down [ 97.859109][ T9690] syz_tun: entered promiscuous mode [ 97.863237][ T9690] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 97.876736][ T12] bond0: (slave bond_slave_0): interface is now down [ 97.879189][ T12] bond0: (slave bond_slave_1): interface is now down [ 97.881390][ T12] bond0: (slave syz_tun): interface is now down [ 97.883790][ T12] bond0: now running without any active interface! [ 97.884523][ T9693] netlink: 'syz.5.1076': attribute type 10 has an invalid length. [ 97.891150][ T9693] team0: Port device netdevsim0 added [ 97.917273][ T9698] bridge_slave_1: left allmulticast mode [ 97.919596][ T9698] bridge_slave_1: left promiscuous mode [ 97.922036][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.926516][ T9698] bridge_slave_0: left allmulticast mode [ 97.928821][ T9698] bridge_slave_0: left promiscuous mode [ 97.931200][ T9698] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.983224][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 97.986211][ T9660] usbtmc 7-1:16.0: Unable to send data, error -71 [ 97.993141][ T9660] PM: Enabling pm_trace changes system date and time during resume. [ 97.993141][ T9660] PM: Correct system time has to be restored manually after resume. [ 98.030335][ T9699] macsec1: entered promiscuous mode [ 98.032477][ T9699] team0: entered promiscuous mode [ 98.034490][ T9699] team_slave_0: entered promiscuous mode [ 98.037433][ T9699] team_slave_1: entered promiscuous mode [ 98.039849][ T9699] macsec1: entered allmulticast mode [ 98.041933][ T9699] team0: entered allmulticast mode [ 98.044056][ T9699] team_slave_0: entered allmulticast mode [ 98.046434][ T9699] team_slave_1: entered allmulticast mode [ 98.048910][ T9699] team0: Device macsec1 is already an upper device of the team interface [ 98.052763][ T9699] team0: left allmulticast mode [ 98.054462][ T9699] team_slave_0: left allmulticast mode [ 98.056489][ T9699] team_slave_1: left allmulticast mode [ 98.058376][ T9699] team0: left promiscuous mode [ 98.059928][ T9699] team_slave_0: left promiscuous mode [ 98.061718][ T9699] team_slave_1: left promiscuous mode [ 98.068329][ T9660] macsec1: entered promiscuous mode [ 98.070057][ T9660] team0: entered promiscuous mode [ 98.071667][ T9660] team_slave_0: entered promiscuous mode [ 98.073547][ T9660] team_slave_1: entered promiscuous mode [ 98.075419][ T9660] macsec1: entered allmulticast mode [ 98.077705][ T9660] team0: entered allmulticast mode [ 98.079477][ T9660] team_slave_0: entered allmulticast mode [ 98.081349][ T9660] team_slave_1: entered allmulticast mode [ 98.083466][ T9660] team0: Device macsec1 is already an upper device of the team interface [ 98.086778][ T9660] team0: left allmulticast mode [ 98.088476][ T9660] team_slave_0: left allmulticast mode [ 98.090265][ T9660] team_slave_1: left allmulticast mode [ 98.092045][ T9660] team0: left promiscuous mode [ 98.093665][ T9660] team_slave_0: left promiscuous mode [ 98.095489][ T9660] team_slave_1: left promiscuous mode [ 98.163139][ T1337] usb 7-1: USB disconnect, device number 10 [ 98.305726][ T5982] Bluetooth: hci2: command tx timeout [ 98.713525][ T9747] ip6tnl2: entered promiscuous mode [ 98.716719][ T9747] ip6tnl2: entered allmulticast mode [ 98.726879][ T9754] netlink: 'syz.1.1097': attribute type 2 has an invalid length. [ 98.729938][ T9754] netlink: 'syz.1.1097': attribute type 2 has an invalid length. [ 98.762965][ T9755] vlan0: entered promiscuous mode [ 98.764652][ T9755] vlan0: entered allmulticast mode [ 98.767014][ T9755] bridge0: entered allmulticast mode [ 98.928529][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 98.928545][ T40] audit: type=1400 audit(1755870251.234:1240): avc: denied { setattr } for pid=9777 comm="syz.2.1104" name="NFC_LLCP" dev="sockfs" ino=33500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.930417][ T9778] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 98.971363][ T9784] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 98.977430][ T40] audit: type=1400 audit(1755870251.284:1241): avc: denied { create } for pid=9783 comm="syz.2.1107" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.984316][ T40] audit: type=1400 audit(1755870251.284:1242): avc: denied { associate } for pid=9783 comm="syz.2.1107" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.030569][ T9780] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.032558][ T9780] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.034558][ T9780] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.037194][ T9780] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.039514][ T9780] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.041837][ T9780] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.054702][ T9795] overlayfs: failed to resolve './file0': -2 [ 99.076662][ T40] audit: type=1326 audit(1755870251.384:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.0.1112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78258ebe9 code=0x7ffc0000 [ 99.086535][ T40] audit: type=1326 audit(1755870251.384:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.0.1112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78258ebe9 code=0x7ffc0000 [ 99.095595][ T40] audit: type=1326 audit(1755870251.384:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.0.1112" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff78258ebe9 code=0x7ffc0000 [ 99.105122][ T40] audit: type=1326 audit(1755870251.384:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.0.1112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78258ebe9 code=0x7ffc0000 [ 99.112385][ T40] audit: type=1326 audit(1755870251.384:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.0.1112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78258ebe9 code=0x7ffc0000 [ 99.118471][ T9807] sctp: [Deprecated]: syz.2.1109 (pid 9807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.118471][ T9807] Use struct sctp_sack_info instead [ 99.122503][ T40] audit: type=1326 audit(1755870251.384:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.0.1112" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff78258ebe9 code=0x7ffc0000 [ 99.126864][ T9800] ceph: No mds server is up or the cluster is laggy [ 99.130368][ T9807] __nla_validate_parse: 3 callbacks suppressed [ 99.130381][ T9807] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1109'. [ 99.130503][ T9807] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9807 comm=syz.2.1109 [ 99.133252][ T40] audit: type=1326 audit(1755870251.384:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9803 comm="syz.0.1112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78258ebe9 code=0x7ffc0000 [ 99.184028][ T9800] ufs: You didn't specify the type of your ufs filesystem [ 99.184028][ T9800] [ 99.184028][ T9800] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 99.184028][ T9800] [ 99.184028][ T9800] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 99.193175][ T9800] syz.2.1109: attempt to access beyond end of device [ 99.193175][ T9800] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 99.234842][ T9810] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1114'. [ 99.258433][ T9812] syz.0.1115: attempt to access beyond end of device [ 99.258433][ T9812] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 99.262429][ T9812] XFS (nbd0): SB validate failed with error -5. [ 99.308684][ T9819] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 99.312334][ T9819] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 99.328693][ T9824] netlink: 'syz.5.1118': attribute type 39 has an invalid length. [ 99.329327][ T9825] netlink: 'syz.5.1118': attribute type 39 has an invalid length. [ 99.338412][ T9824] bond0: (slave syz_tun): Releasing backup interface [ 99.377194][ T9830] netlink: 'syz.2.1120': attribute type 1 has an invalid length. [ 99.382682][ T9830] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 99.471564][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'. [ 99.550343][ T9855] netlink: 'syz.5.1127': attribute type 1 has an invalid length. [ 99.553008][ T9855] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 99.570592][ T9859] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1128'. [ 99.576332][ T9859] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1128'. [ 99.596834][ T9864] overlayfs: overlapping lowerdir path [ 99.613058][ T9861] sch_tbf: peakrate 9 is lower than or equals to rate 4860735636028724261 ! [ 99.726015][ T141] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 99.885736][ T141] usb 7-1: Using ep0 maxpacket: 32 [ 99.888904][ T141] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 99.893273][ T141] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 99.896405][ T141] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 99.898885][ T141] usb 7-1: Product: syz [ 99.900138][ T141] usb 7-1: Manufacturer: syz [ 99.901601][ T141] usb 7-1: SerialNumber: syz [ 99.903965][ T141] usb 7-1: config 0 descriptor?? [ 99.906301][ T9842] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.070026][ T9892] kvm: kvm [9891]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000004) [ 100.160805][ T1337] usb 7-1: USB disconnect, device number 11 [ 100.171080][ T9897] bad cache= option: none [ 100.171080][ T9897] [ 100.173435][ T9897] CIFS: VFS: bad cache= option: none [ 100.257439][ T9901] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 100.279797][ T9903] netlink: 'syz.1.1141': attribute type 4 has an invalid length. [ 100.284083][ T9905] netlink: 'syz.1.1141': attribute type 4 has an invalid length. [ 100.293153][ T9903] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1141'. [ 100.296065][ T9903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1141'. [ 100.298775][ T9903] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1141'. [ 100.301407][ T9903] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1141'. [ 100.422859][ T9909] overlayfs: conflicting options: userxattr,redirect_dir=on [ 100.447202][ T9912] kernel profiling enabled (shift: 63) [ 100.448967][ T9912] profiling shift: 63 too large [ 101.035774][ T5982] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.042615][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1153'. [ 101.104292][ T9941] FAT-fs (sr0): bogus number of reserved sectors [ 101.105881][ T5982] Bluetooth: hci2: command 0x0419 tx timeout [ 101.105918][ T5976] Bluetooth: hci3: command 0x0406 tx timeout [ 101.105941][ T5976] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.106674][ T9941] FAT-fs (sr0): Can't find a valid FAT filesystem [ 101.117726][ T9943] FAT-fs (sr0): bogus number of reserved sectors [ 101.119797][ T9943] FAT-fs (sr0): Can't find a valid FAT filesystem [ 101.232855][ T9949] nfs: Unknown parameter 'no/snd/controlC#' [ 101.299699][ T9961] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 101.372625][ T9967] syzkaller0: entered promiscuous mode [ 101.374384][ T9967] syzkaller0: entered allmulticast mode [ 101.384349][ T9974] SELinux: Context ( is not valid (left unmapped). [ 101.755934][ T141] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 101.885918][ T141] usb 6-1: device descriptor read/64, error -71 [ 102.121064][ T5972] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.123514][ T5972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.125995][ T5972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.128634][ T5972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.131257][ T5972] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.135907][ T141] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 102.144298][T10010] xfrm0 speed is unknown, defaulting to 1000 [ 102.190822][T10010] chnl_net:caif_netlink_parms(): no params data found [ 102.226178][T10010] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.228416][T10010] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.230650][T10010] bridge_slave_0: entered allmulticast mode [ 102.232949][T10010] bridge_slave_0: entered promiscuous mode [ 102.235523][T10010] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.238400][T10010] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.240642][T10010] bridge_slave_1: entered allmulticast mode [ 102.242923][T10010] bridge_slave_1: entered promiscuous mode [ 102.256639][T10020] nbd: must specify at least one socket [ 102.259304][T10020] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 102.262499][T10020] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 102.264834][T10010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.268616][ T141] usb 6-1: device descriptor read/64, error -71 [ 102.281861][T10010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.299801][T10010] team0: Port device team_slave_0 added [ 102.303467][T10010] team0: Port device team_slave_1 added [ 102.321931][T10010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.324234][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.332518][T10010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.337327][T10010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.339757][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.349892][T10010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.372169][T10010] hsr_slave_0: entered promiscuous mode [ 102.374785][T10010] hsr_slave_1: entered promiscuous mode [ 102.377398][T10010] debugfs: 'hsr0' already exists in 'hsr' [ 102.379946][T10010] Cannot create hsr debugfs directory [ 102.386062][ T141] usb usb6-port1: attempt power cycle [ 102.440348][T10010] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.443755][T10010] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.447689][T10010] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 102.451236][T10010] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.463830][T10010] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.466639][T10010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.469064][T10010] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.471292][T10010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.492925][T10010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.499458][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.502012][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.507144][T10010] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.511607][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.513893][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.519162][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.521393][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.564054][T10039] xfrm0 speed is unknown, defaulting to 1000 [ 102.596153][T10010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.620881][T10049] input: syz1 as /devices/virtual/input/input14 [ 102.680257][T10067] kAFS: unparsable volume name [ 102.705476][T10064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.710174][T10064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.725815][ T141] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 102.734584][T10070] kAFS: unparsable volume name [ 102.745547][ T60] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.748623][ T60] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.751640][ T141] usb 6-1: device descriptor read/8, error -71 [ 102.753938][ T60] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.757002][ T60] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.757729][ T5972] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 102.768527][T10010] veth0_vlan: entered promiscuous mode [ 102.774533][T10010] veth1_vlan: entered promiscuous mode [ 102.784178][T10010] veth0_macvtap: entered promiscuous mode [ 102.787752][T10010] veth1_macvtap: entered promiscuous mode [ 102.793863][T10010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.802213][T10010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.810353][ T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.813306][ T60] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.818909][ T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.820510][T10079] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.824815][ T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.836227][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.838955][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.844550][T10081] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 102.846416][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.846667][T10081] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.849235][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.851657][T10081] vhci_hcd vhci_hcd.0: Device attached [ 102.858093][T10082] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 102.861707][ T46] vhci_hcd: stop threads [ 102.863500][ T46] vhci_hcd: release socket [ 102.865894][ T46] vhci_hcd: disconnect device [ 102.880961][ T1144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.885072][ T1144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.889587][ T1144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 102.894641][T10087] validate_nla: 64 callbacks suppressed [ 102.894653][T10087] netlink: 'syz.6.1177': attribute type 7 has an invalid length. [ 102.900469][T10087] netem: unknown loss type 12 [ 102.901990][T10087] netem: change failed [ 102.904782][T10090] netlink: 'syz.5.1194': attribute type 30 has an invalid length. [ 102.939471][ T1144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.943388][ T1144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.947227][ T1144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 102.985872][ T141] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 103.018577][ T141] usb 6-1: device descriptor read/8, error -71 [ 103.018982][ T1144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.023861][ T1144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.027950][ T1144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.100529][ T1144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.105125][ T1144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.108701][ T5972] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.111358][ T1144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.126039][ T141] usb usb6-port1: unable to enumerate USB device [ 103.157773][T10121] xfrm0 speed is unknown, defaulting to 1000 [ 103.186546][ T5972] Bluetooth: hci2: command 0x0419 tx timeout [ 103.418780][ T1144] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 103.423761][ T1144] bond0 (unregistering): Released all slaves [ 103.427629][ T1144] bond1 (unregistering): Released all slaves [ 103.431397][ T1144] bond2 (unregistering): Released all slaves [ 103.465986][T10137] CIFS mount error: No usable UNC path provided in device string! [ 103.465986][T10137] [ 103.469133][T10137] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 103.526572][T10142] tmpfs: Unknown parameter 'mpnl' [ 103.537252][ T1144] : left promiscuous mode [ 103.596920][ T1144] tipc: Disabling bearer [ 103.599756][ T1144] tipc: Left network mode [ 103.739423][ T1144] veth1_macvtap: left allmulticast mode [ 103.741687][ T1144] veth1_macvtap: left promiscuous mode [ 103.743933][ T1144] veth0_macvtap: left promiscuous mode [ 103.746735][ T1144] veth1_vlan: left promiscuous mode [ 103.766280][ T1144] pimreg (unregistering): left allmulticast mode [ 104.145844][ T5972] Bluetooth: hci1: command tx timeout [ 104.248115][T10161] openvswitch: netlink: Tunnel attr 5 has unexpected len 4 expected 0 [ 104.251627][T10161] __nla_validate_parse: 18 callbacks suppressed [ 104.251640][T10161] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1216'. [ 104.320270][T10161] netlink: 'syz.2.1216': attribute type 7 has an invalid length. [ 104.332739][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 104.332756][ T40] audit: type=1400 audit(1755870256.634:1286): avc: denied { connect } for pid=10163 comm="syz.5.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.369402][T10161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.393188][T10172] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 104.435846][T10179] QAT: failed to copy from user cfg_data. [ 104.503350][T10188] syzkaller0: entered promiscuous mode [ 104.505116][T10188] syzkaller0: entered allmulticast mode [ 104.573658][ T40] audit: type=1400 audit(1755870256.874:1287): avc: denied { create } for pid=10195 comm="syz.2.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 104.580183][T10196] xfrm0 speed is unknown, defaulting to 1000 [ 104.583267][ T40] audit: type=1400 audit(1755870256.874:1288): avc: denied { sys_admin } for pid=10195 comm="syz.2.1225" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 104.754852][ T40] audit: type=1400 audit(1755870257.054:1289): avc: denied { link } for pid=10203 comm="syz.5.1227" name="#26" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.762229][ T40] audit: type=1400 audit(1755870257.054:1290): avc: denied { rename } for pid=10203 comm="syz.5.1227" name="#27" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.791412][ T5972] Bluetooth: hci2: ISO packet for unknown connection handle 200 [ 104.873270][T10209] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1229'. [ 105.185803][ T5972] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.265792][ T5972] Bluetooth: hci2: command 0x0419 tx timeout [ 105.495080][T10215] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 105.805697][ T6052] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 105.988231][ T6052] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 105.991604][ T6052] usb 7-1: can't read configurations, error -22 [ 106.125763][ T6052] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 106.225761][ T5972] Bluetooth: hci1: command tx timeout [ 106.307882][ T6052] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 106.311558][ T6052] usb 7-1: can't read configurations, error -22 [ 106.314766][ T6052] usb usb7-port1: attempt power cycle [ 106.665764][ T6052] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 106.688382][ T6052] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 106.691558][ T6052] usb 7-1: can't read configurations, error -22 [ 106.816604][ T6052] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 106.839478][T10226] SELinux: policydb string  does not match my string SE Linux [ 106.842012][T10226] SELinux: failed to load policy [ 106.842307][ T6052] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 106.846332][ T6052] usb 7-1: can't read configurations, error -22 [ 106.848367][ T6052] usb usb7-port1: unable to enumerate USB device [ 106.871831][T10231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1236'. [ 106.877598][T10231] netlink: 151040 bytes leftover after parsing attributes in process `syz.1.1236'. [ 106.921665][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 106.924442][T10238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1238'. [ 106.942633][T10238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10238 comm=syz.1.1238 [ 106.995970][ T40] audit: type=1400 audit(1755870259.294:1291): avc: denied { write } for pid=10243 comm="syz.1.1239" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 107.015134][T10251] random: crng reseeded on system resumption [ 107.019404][ T40] audit: type=1400 audit(1755870259.324:1292): avc: denied { ioctl } for pid=10250 comm="syz.6.1241" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 107.019949][T10251] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1241'. [ 107.048528][T10255] overlayfs: overlapping lowerdir path [ 107.104296][ T40] audit: type=1400 audit(1755870259.404:1293): avc: denied { setopt } for pid=10263 comm="syz.1.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 107.126942][T10271] netlink: 'syz.1.1246': attribute type 1 has an invalid length. [ 107.129751][T10271] netlink: 'syz.1.1246': attribute type 1 has an invalid length. [ 107.129766][T10271] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1246'. [ 107.138389][T10271] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.181985][T10271] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.300345][T10271] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.346027][ T5972] Bluetooth: hci2: command 0x0419 tx timeout [ 107.437825][T10271] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.538746][ T40] audit: type=1400 audit(1755870259.844:1294): avc: denied { getopt } for pid=10290 comm="syz.6.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.541914][T10291] SELinux: policydb version -1366159057 does not match my version range 15-35 [ 107.544714][ T40] audit: type=1400 audit(1755870259.844:1295): avc: denied { accept } for pid=10290 comm="syz.6.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.553474][T10291] SELinux: failed to load policy [ 107.564044][ T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.569736][ T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.574787][ T60] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.579841][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.605097][T10297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.625048][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1258'. [ 107.631801][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1258'. [ 107.662166][T10305] program syz.6.1259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.703723][T10310] netlink: 'syz.6.1261': attribute type 12 has an invalid length. [ 107.816722][T10327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.867878][T10343] Bluetooth: MGMT ver 1.23 [ 107.951286][T10361] overlayfs: failed to resolve './bus': -2 [ 108.013677][T10369] overlay: Bad value for 'workdir' [ 108.019048][T10370] input: syz1 as /devices/virtual/input/input17 [ 108.180682][T10395] futex_wake_op: syz.5.1284 tries to shift op by -1; fix this program [ 108.189848][T10382] netlink: 'syz.5.1284': attribute type 1 has an invalid length. [ 108.193851][T10397] netlink: 'syz.6.1289': attribute type 6 has an invalid length. [ 108.196968][T10397] netlink: 'syz.6.1289': attribute type 6 has an invalid length. [ 108.247922][T10401] bridge: RTM_NEWNEIGH with invalid ether address [ 108.287317][T10413] netlink: 'syz.5.1294': attribute type 1 has an invalid length. [ 108.287337][T10412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=10412 comm=syz.5.1294 [ 108.296855][T10413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.305903][ T5972] Bluetooth: hci1: command tx timeout [ 108.356668][ T6052] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 108.515837][ T6052] usb 6-1: Using ep0 maxpacket: 32 [ 108.518585][ T6052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.521889][ T6052] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.525191][ T6052] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 108.528007][ T6052] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.531615][ T6052] usb 6-1: config 0 descriptor?? [ 108.944885][ T6052] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 109.253986][ T7521] usb 6-1: USB disconnect, device number 14 [ 109.316771][T10445] __nla_validate_parse: 3 callbacks suppressed [ 109.316782][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1303'. [ 109.324298][T10445] bond_slave_0: entered promiscuous mode [ 109.326293][T10445] bond_slave_1: entered promiscuous mode [ 109.329169][T10445] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 109.333246][T10445] binder: 10444:10445 ioctl c0306201 0 returned -14 [ 109.336395][T10445] binder: 10444:10445 ioctl 4018620d 0 returned -22 [ 109.391206][T10449] binder: 10444:10449 ioctl c0306201 200000000200 returned -14 [ 109.636045][ T7521] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 109.765735][ T7521] usb 6-1: device descriptor read/64, error -71 [ 110.006061][ T7521] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 110.136487][ T7521] usb 6-1: device descriptor read/64, error -71 [ 110.239378][T10457] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 110.239619][ T6052] IPVS: starting estimator thread 0... [ 110.246035][ T7521] usb usb6-port1: attempt power cycle [ 110.345801][T10459] IPVS: using max 54 ests per chain, 129600 per kthread [ 110.485735][ T141] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 110.606093][ T7521] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 110.626433][ T7521] usb 6-1: device descriptor read/8, error -71 [ 110.636025][ T141] usb 11-1: Using ep0 maxpacket: 16 [ 110.639614][ T141] usb 11-1: config 0 has no interfaces? [ 110.643204][ T141] usb 11-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 110.646984][ T141] usb 11-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 110.650146][ T141] usb 11-1: Manufacturer: syz [ 110.652001][ T141] usb 11-1: SerialNumber: syz [ 110.655108][ T141] usb 11-1: config 0 descriptor?? [ 110.860006][ T141] usb 11-1: USB disconnect, device number 2 [ 110.875729][ T7521] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 110.906829][ T7521] usb 6-1: device descriptor read/8, error -71 [ 111.026113][ T7521] usb usb6-port1: unable to enumerate USB device [ 111.413243][T10472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.430143][T10472] xfrm0 speed is unknown, defaulting to 1000 [ 111.771682][T10499] overlayfs: missing 'lowerdir' [ 111.880145][T10499] fuse: Unknown parameter 't(fct`܆ LZC.5". 2K{mOy+Tot2F'z1Izd?dŐc4ԗFi(#9a+OPuLD:F3)' [ 112.345106][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 112.345118][ T40] audit: type=1400 audit(1755870264.644:1297): avc: denied { create } for pid=10502 comm="syz.5.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 112.354058][ T40] audit: type=1400 audit(1755870264.644:1298): avc: denied { write } for pid=10502 comm="syz.5.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 112.396995][T10513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1324'. [ 112.401247][T10513] nla_validate_range_unsigned: 55 callbacks suppressed [ 112.401257][T10513] netlink: 'syz.1.1324': attribute type 11 has an invalid length. [ 112.601590][T10525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1178 sclass=netlink_route_socket pid=10525 comm=syz.1.1328 [ 112.777313][ T40] audit: type=1400 audit(1755870265.084:1299): avc: denied { bind } for pid=10549 comm="syz.5.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.903529][T10561] Invalid logical block size (10) [ 113.025781][ T7515] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 113.162964][T10565] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 113.172441][T10565] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 113.207738][ T7515] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.211374][ T7515] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 113.215536][ T7515] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.219254][ T7515] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 113.223691][ T7515] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 113.229622][ T7515] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.233359][ T7515] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.236872][ T7515] usb 10-1: Product: syz [ 113.238749][ T7515] usb 10-1: Manufacturer: syz [ 113.244914][ T7515] cdc_wdm 10-1:1.0: skipping garbage [ 113.247477][ T7515] cdc_wdm 10-1:1.0: skipping garbage [ 113.250727][ T7515] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 113.253274][ T7515] cdc_wdm 10-1:1.0: Unknown control protocol [ 113.446336][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 113.449091][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 113.451779][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 113.454780][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 113.457791][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 113.460737][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 113.463610][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 113.466424][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 113.469286][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 113.472328][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 113.475215][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 113.478058][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 113.481028][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 113.484007][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 113.487064][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 113.489867][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 113.492569][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 113.495482][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 113.498827][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 113.501524][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 113.504206][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 113.508602][ T7515] usb 10-1: USB disconnect, device number 2 [ 113.591969][T10580] Invalid source name [ 113.593671][T10580] UBIFS error (pid: 10580): cannot open "./file0", error -22 [ 113.593773][ T40] audit: type=1400 audit(1755870265.894:1300): avc: denied { mounton } for pid=10579 comm="syz.6.1344" path="/60/file0" dev="tmpfs" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.597592][T10580] netlink: 276 bytes leftover after parsing attributes in process `syz.6.1344'. [ 113.613782][T10580] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1344'. [ 113.657579][T10550] lo: entered allmulticast mode [ 113.659737][T10549] lo: left allmulticast mode [ 113.715127][T10625] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1352'. [ 113.715127][T10623] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1352'. [ 113.839322][T10642] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1356'. [ 113.910934][T10638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.912867][ T40] audit: type=1400 audit(1755870266.214:1301): avc: denied { bind } for pid=10644 comm="syz.6.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.913286][T10648] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.915338][T10638] bond0: (slave rose0): Enslaving as an active interface with an up link [ 114.051045][T10653] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 114.208341][T10658] kernel profiling enabled (shift: 63) [ 114.210095][T10658] profiling shift: 63 too large [ 114.212446][ T40] audit: type=1400 audit(1755870266.514:1302): avc: denied { listen } for pid=10657 comm="syz.5.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 114.333655][T10665] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1364'. [ 114.336542][T10665] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1364'. [ 114.424136][ T40] audit: type=1400 audit(1755870266.724:1303): avc: denied { ioctl } for pid=10670 comm="syz.5.1367" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.467022][T10671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10671 comm=syz.5.1367 [ 114.550971][T10683] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1370'. [ 114.644776][T10690] overlayfs: missing 'lowerdir' [ 114.693453][T10700] SELinux: security_context_str_to_sid () failed with errno=-22 [ 114.727943][T10703] program syz.5.1377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.737902][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 114.764936][T10707] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1378'. [ 114.803917][T10712] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1380'. [ 114.934250][T10731] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 114.987047][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 115.016594][T10736] netlink: 'syz.6.1386': attribute type 4 has an invalid length. [ 115.020202][T10736] macvlan0: entered promiscuous mode [ 115.022491][T10736] macvlan0: entered allmulticast mode [ 115.024714][T10736] veth1_vlan: entered allmulticast mode [ 115.075768][T10748] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.1391'. [ 115.133570][T10755] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 115.199958][ T40] audit: type=1400 audit(1755870267.504:1304): avc: denied { name_connect } for pid=10769 comm="syz.1.1396" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 115.286573][ T40] audit: type=1400 audit(1755870267.594:1305): avc: denied { bind } for pid=10787 comm="syz.6.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.292695][T10790] Unsupported ieee802154 address type: 0 [ 115.414242][T10797] Process accounting resumed [ 115.759170][ T40] audit: type=1400 audit(1755870268.064:1306): avc: denied { link } for pid=10806 comm="syz.6.1406" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 115.785379][T10813] batadv_slave_0: entered promiscuous mode [ 115.788585][T10813] erspan0: entered promiscuous mode [ 115.831360][T10815] vxcan1: tx drop: invalid da for name 0x0000000000000016 [ 115.884936][T10820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1410'. [ 115.889196][T10820] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1410'. [ 115.891380][T10745] syz.5.1390 (10745) used greatest stack depth: 19800 bytes left [ 115.928611][T10827] tipc: Started in network mode [ 115.930381][T10827] tipc: Node identity , cluster identity 4711 [ 115.932540][T10827] tipc: Failed to obtain node identity [ 115.934673][T10827] tipc: Enabling of bearer rejected, failed to enable media [ 115.945120][T10830] openvswitch: netlink: Tunnel attr 16383 out of range max 16 [ 116.018693][ T7514] IPVS: starting estimator thread 0... [ 116.051868][T10849] overlayfs: invalid origin (0000) [ 116.116909][T10845] IPVS: using max 54 ests per chain, 129600 per kthread [ 116.186374][T10864] netlink: 'syz.1.1423': attribute type 2 has an invalid length. [ 116.189365][T10864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.660326][ T5972] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 116.662577][ T5972] Bluetooth: hci3: unexpected event for opcode 0x203e [ 116.891601][T10894] ieee802154 phy0 wpan0: encryption failed: -126 [ 117.107699][T10901] binder: 10900:10901 ioctl c0306201 200000000080 returned -14 [ 117.164387][T10904] nfs: Unknown parameter '/dev/fuse' [ 117.339078][T10908] netlink: 'syz.2.1438': attribute type 1 has an invalid length. [ 117.393810][T10913] mkiss: ax0: crc mode is auto. [ 117.411367][T10913] input: syz1 as /devices/virtual/input/input20 [ 117.675429][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 117.675448][ T40] audit: type=1400 audit(1755870269.974:1310): avc: denied { relabelfrom } for pid=10922 comm="syz.1.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 117.689785][T10843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.692335][ T40] audit: type=1400 audit(1755870269.994:1311): avc: denied { relabelto } for pid=10922 comm="syz.1.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 117.798006][ T40] audit: type=1400 audit(1755870270.104:1312): avc: denied { create } for pid=10935 comm="syz.1.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.798928][T10934] 9pnet_fd: Insufficient options for proto=fd [ 117.807003][ T40] audit: type=1400 audit(1755870270.104:1313): avc: denied { getopt } for pid=10935 comm="syz.1.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.861061][ T40] audit: type=1400 audit(1755870270.164:1314): avc: denied { mount } for pid=10938 comm="syz.5.1449" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 117.892113][ T40] audit: type=1400 audit(1755870270.194:1315): avc: denied { write } for pid=10951 comm="syz.2.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 117.892384][T10952] netlink: 'syz.2.1451': attribute type 1 has an invalid length. [ 117.913403][T10952] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 117.918587][T10952] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 117.922350][T10952] bond5: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 117.968314][T10960] input: syz0 as /devices/virtual/input/input21 [ 118.053405][T10963] overlayfs: invalid origin (0000) [ 118.066793][ T1144] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.075509][ T1144] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.080364][ T40] audit: type=1400 audit(1755870270.394:1316): avc: denied { unmount } for pid=9433 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 118.081894][ T1144] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.091909][ T1144] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.140097][T10983] binder: 10982:10983 ioctl 89e4 0 returned -22 [ 118.170638][ T40] audit: type=1400 audit(1755870270.474:1317): avc: denied { write } for pid=10974 comm="syz.2.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 118.227551][T11004] netlink: 'syz.1.1470': attribute type 5 has an invalid length. [ 118.237327][T11004] lo speed is unknown, defaulting to 1000 [ 118.239254][T11004] lo speed is unknown, defaulting to 1000 [ 118.241857][T11004] lo speed is unknown, defaulting to 1000 [ 118.248817][T11004] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 118.260407][T11004] lo speed is unknown, defaulting to 1000 [ 118.263315][T11004] lo speed is unknown, defaulting to 1000 [ 118.266753][T11004] lo speed is unknown, defaulting to 1000 [ 118.269294][T11004] lo speed is unknown, defaulting to 1000 [ 118.271907][T11004] lo speed is unknown, defaulting to 1000 [ 118.277117][ T40] audit: type=1400 audit(1755870270.584:1318): avc: denied { read write } for pid=11000 comm="syz.2.1469" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 118.284417][ T40] audit: type=1400 audit(1755870270.584:1319): avc: denied { open } for pid=11000 comm="syz.2.1469" path="/365/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 118.408776][T11021] netlink: 'syz.2.1472': attribute type 1 has an invalid length. [ 118.411211][T11021] netlink: 'syz.2.1472': attribute type 2 has an invalid length. [ 118.413804][T11021] netlink: 'syz.2.1472': attribute type 1 has an invalid length. [ 118.500080][T11030] netlink: 'syz.2.1476': attribute type 15 has an invalid length. [ 118.503338][T11030] netlink: 'syz.2.1476': attribute type 15 has an invalid length. [ 118.623527][ T6140] IPVS: starting estimator thread 0... [ 118.624049][T11034] tipc: Started in network mode [ 118.625800][ T5972] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.626449][ T1337] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 118.628147][T11034] tipc: Node identity ac1414aa, cluster identity 4711 [ 118.630536][ T1337] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 118.633159][T11034] tipc: Enabling of bearer rejected, failed to enable media [ 118.636260][T11037] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 118.644665][T11037] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 118.647725][T11037] vhci_hcd vhci_hcd.0: Device attached [ 118.735689][T11036] IPVS: using max 54 ests per chain, 129600 per kthread [ 118.826500][T11056] fuse: Bad value for 'fd' [ 118.925928][ T7521] usb 42-1: SetAddress Request (2) to port 0 [ 118.927985][ T7521] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 119.362271][T11038] vhci_hcd: connection reset by peer [ 119.364275][ T1148] vhci_hcd: stop threads [ 119.366022][ T1148] vhci_hcd: release socket [ 119.367575][ T1148] vhci_hcd: disconnect device [ 119.936769][T11059] SELinux: syz.2.1484 (11059) set checkreqprot to 1. This is no longer supported. [ 120.706047][ T5972] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 120.709443][ T5972] Bluetooth: hci3: Injecting HCI hardware error event [ 120.712485][ T5972] Bluetooth: hci3: hardware error 0x00 [ 120.716028][ T5982] Bluetooth: hci3: command 0x0406 tx timeout [ 120.716272][ T1337] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 120.720754][ T1337] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 122.785897][ T5972] Bluetooth: hci2: command 0x0419 tx timeout [ 122.786002][ T1337] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 122.790897][ T1337] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 123.985858][ T7521] usb 42-1: device descriptor read/8, error -110 [ 124.376538][ T7521] usb usb42-port1: attempt power cycle [ 124.865969][ T5972] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.866034][ T1337] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 124.869926][ T1337] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 124.902514][T11064] ufs: You didn't specify the type of your ufs filesystem [ 124.902514][T11064] [ 124.902514][T11064] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 124.902514][T11064] [ 124.902514][T11064] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 124.912262][T11064] ufs: ufstype=old is supported read-only [ 124.914245][T11064] ufs: ufs_fill_super(): bad magic number [ 124.918244][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 124.918257][ T40] audit: type=1400 audit(1755870277.224:1324): avc: denied { mount } for pid=11063 comm="syz.2.1486" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 124.918363][T11070] overlayfs: overlapping lowerdir path [ 124.935039][T11070] overlayfs: failed to resolve './bus': -2 [ 124.949926][ T40] audit: type=1400 audit(1755870277.254:1325): avc: denied { unmount } for pid=5973 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 124.956218][ T7521] usb usb42-port1: unable to enumerate USB device [ 124.968747][T11075] syzkaller1: entered promiscuous mode [ 125.020288][ T40] audit: type=1326 audit(1755870277.324:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.5.1488" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f375cf8ebe9 code=0x0 [ 125.049729][T11078] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.082615][ T40] audit: type=1400 audit(1755870277.384:1327): avc: denied { execute } for pid=11079 comm="syz.2.1491" path="/file1" dev="ramfs" ino=40951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 125.172066][T11089] "syz.2.1494" (11089) uses obsolete ecb(arc4) skcipher [ 125.290019][T11096] validate_nla: 63 callbacks suppressed [ 125.290035][T11096] netlink: 'syz.2.1495': attribute type 5 has an invalid length. [ 125.340009][T11101] __nla_validate_parse: 81 callbacks suppressed [ 125.340021][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1497'. [ 125.364034][T11106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1498'. [ 125.367914][T11107] nbd: must specify at least one socket [ 125.434620][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'. [ 125.438025][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'. [ 125.653530][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'. [ 125.765277][ T40] audit: type=1326 audit(1755870278.064:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11135 comm="syz.1.1509" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbed98ebe9 code=0x0 [ 126.003982][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1516'. [ 126.172469][T11181] tap1: tun_chr_ioctl cmd 1074025675 [ 126.174327][T11181] tap1: persist enabled [ 126.177382][T11181] tap1: tun_chr_ioctl cmd 1074025675 [ 126.179097][T11181] tap1: persist enabled [ 126.195821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.212024][T11178] Invalid option length (1048180) for dns_resolver key [ 126.218361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 126.235790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.627248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 126.947081][ T5982] Bluetooth: hci4: command 0x1003 tx timeout [ 126.949051][ T5972] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 126.964281][ T40] audit: type=1400 audit(1755870279.264:1329): avc: denied { nlmsg_read } for pid=11216 comm="syz.2.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.972529][ T40] audit: type=1400 audit(1755870279.264:1330): avc: denied { getopt } for pid=11215 comm="syz.5.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.975281][T11214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1535'. [ 126.978807][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1538'. [ 126.990093][T11214] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 126.999187][T11224] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1539'. [ 127.003330][T11223] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1539'. [ 127.017600][ T40] audit: type=1326 audit(1755870279.324:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.6.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee678ebe9 code=0x7ff00000 [ 127.024861][ T40] audit: type=1326 audit(1755870279.324:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.6.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee678ebe9 code=0x7ff00000 [ 127.033229][ T40] audit: type=1326 audit(1755870279.324:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.6.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee678ebe9 code=0x7ff00000 [ 127.082538][T11229] overlayfs: failed to resolve './file0': -2 [ 127.549941][T11255] netlink: 'syz.2.1550': attribute type 1 has an invalid length. [ 127.555111][T11255] netlink: 'syz.2.1550': attribute type 21 has an invalid length. [ 127.838391][T11270] syz.5.1556: attempt to access beyond end of device [ 127.838391][T11270] nbd5: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 127.843866][T11270] gfs2: error -5 reading superblock [ 128.088676][T11281] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1767728122 (56567299904 ns) > initial count (24361045504 ns). Using initial count to start timer. [ 128.349998][T11292] autofs4:pid:11292:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 128.666194][ T1337] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 128.827350][ T1337] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 128.829940][ T1337] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 128.833000][ T1337] usb 6-1: config 0 interface 0 has no altsetting 0 [ 128.838213][ T1337] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.841711][ T1337] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.845404][ T1337] usb 6-1: Product: syz [ 128.847535][ T1337] usb 6-1: Manufacturer: syz [ 128.849386][ T1337] usb 6-1: SerialNumber: syz [ 128.849848][T11309] can0: slcan on ptm0. [ 128.852801][ T1337] usb 6-1: config 0 descriptor?? [ 128.856201][ T1337] hub 6-1:0.0: bad descriptor, ignoring hub [ 128.858726][ T1337] hub 6-1:0.0: probe with driver hub failed with error -5 [ 128.862207][ T1337] usb 6-1: selecting invalid altsetting 0 [ 128.911794][T11311] netlink: 'syz.5.1569': attribute type 1 has an invalid length. [ 128.919235][T11311] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.052926][T11316] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 129.105749][ T6039] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 129.235885][ T6039] usb 7-1: device descriptor read/64, error -71 [ 129.305701][ T7515] usb 6-1: reset high-speed USB device number 19 using dummy_hcd [ 129.309577][ T7515] usb 6-1: device reset changed ep0 maxpacket size! [ 129.312335][ T7515] usb 6-1: USB disconnect, device number 19 [ 129.475822][ T6039] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 129.565796][ T7521] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 129.605700][ T6039] usb 7-1: device descriptor read/64, error -71 [ 129.625688][ T7515] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 129.715922][ T6039] usb usb7-port1: attempt power cycle [ 129.718141][ T7521] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.722565][ T7521] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 129.727154][ T7521] usb 10-1: config 0 interface 0 has no altsetting 0 [ 129.731977][ T7521] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 129.735778][ T7521] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 129.739090][ T7521] usb 10-1: Product: syz [ 129.740872][ T7521] usb 10-1: Manufacturer: syz [ 129.742878][ T7521] usb 10-1: SerialNumber: syz [ 129.745954][ T7521] usb 10-1: config 0 descriptor?? [ 129.749673][ T7521] hub 10-1:0.0: bad descriptor, ignoring hub [ 129.752195][ T7521] hub 10-1:0.0: probe with driver hub failed with error -5 [ 129.756964][ T7521] usb 10-1: selecting invalid altsetting 0 [ 129.776951][ T7515] usb 6-1: Using ep0 maxpacket: 32 [ 129.782131][ T7515] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 129.787841][ T7515] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 129.790575][ T7515] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 129.793919][ T7515] usb 6-1: Product: syz [ 129.795149][ T7515] usb 6-1: Manufacturer: syz [ 129.797535][ T7515] usb 6-1: SerialNumber: syz [ 129.800188][ T7515] usb 6-1: config 0 descriptor?? [ 129.801996][T11324] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.804789][ T7515] hub 6-1:0.0: bad descriptor, ignoring hub [ 129.806738][ T7515] hub 6-1:0.0: probe with driver hub failed with error -5 [ 129.925945][ T40] kauditd_printk_skb: 48379 callbacks suppressed [ 129.925957][ T40] audit: type=1326 audit(1755870282.224:49713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.6.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee678ebe9 code=0x7ff00000 [ 129.935152][ T40] audit: type=1326 audit(1755870282.234:49714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.6.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee678ebe9 code=0x7ff00000 [ 129.942538][ T40] audit: type=1326 audit(1755870282.234:49715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.6.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee678ebe9 code=0x7ff00000 [ 129.950120][ T40] audit: type=1326 audit(1755870282.234:49716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.6.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee678ebe9 code=0x7ff00000 [ 129.959367][ T40] audit: type=1326 audit(1755870282.234:49717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.6.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee678ebe9 code=0x7ff00000 [ 129.967079][ T40] audit: type=1326 audit(1755870282.234:49718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.6.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee678ebe9 code=0x7ff00000 [ 129.974261][ T40] audit: type=1326 audit(1755870282.234:49719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.6.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee678ebe9 code=0x7ff00000 [ 129.981502][ T40] audit: type=1326 audit(1755870282.234:49720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.6.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee678ebe9 code=0x7ff00000 [ 129.988537][ T40] audit: type=1326 audit(1755870282.234:49721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.6.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee678ebe9 code=0x7ff00000 [ 129.995956][ T40] audit: type=1326 audit(1755870282.234:49722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11225 comm="syz.6.1540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ee678ebe9 code=0x7ff00000 [ 130.055860][ T7521] usb 10-1: USB disconnect, device number 3 [ 130.075707][ T6039] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 130.096148][ T6039] usb 7-1: device descriptor read/8, error -71 [ 130.258554][T11325] macsec0: entered promiscuous mode [ 130.260314][T11325] macsec0: entered allmulticast mode [ 130.262012][T11325] veth1_macvtap: entered allmulticast mode [ 130.336357][ T6039] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 130.356750][ T6039] usb 7-1: device descriptor read/8, error -71 [ 130.466349][ T6039] usb usb7-port1: unable to enumerate USB device [ 130.836146][ T7521] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 130.856221][ T7515] usb 6-1: USB disconnect, device number 20 [ 130.995731][ T7521] usb 11-1: Invalid ep0 maxpacket: 64 [ 131.125765][ T7521] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 131.285740][ T7521] usb 11-1: Invalid ep0 maxpacket: 64 [ 131.287640][ T7521] usb usb11-port1: attempt power cycle [ 131.446114][T11372] xfrm0 speed is unknown, defaulting to 1000 [ 131.448477][T11372] lo speed is unknown, defaulting to 1000 [ 131.472480][T11372] __nla_validate_parse: 5 callbacks suppressed [ 131.472491][T11372] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1588'. [ 131.611800][T11384] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1592'. [ 131.629248][ T7521] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 131.646498][ T7521] usb 11-1: Invalid ep0 maxpacket: 64 [ 131.775806][ T7521] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 131.807345][ T7521] usb 11-1: Invalid ep0 maxpacket: 64 [ 131.809221][ T7521] usb usb11-port1: unable to enumerate USB device [ 131.824449][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1595'. [ 131.987049][T11397] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1596'. [ 131.987991][T11399] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 131.995905][T11309] can0 (unregistered): slcan off ptm0. [ 132.120416][T11430] pimreg: left allmulticast mode [ 132.160200][T11430] pimreg: entered allmulticast mode [ 132.188007][T11432] hugetlbfs: Unknown parameter 'uid"0jGPΞ4Y8 vS蒖' [ 132.289744][T11453] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1612'. [ 132.290467][T11454] overlayfs: failed to decode file handle (len=1, type=0, flags=0, err=-22) [ 132.424397][T11476] kAFS: unparsable volume name [ 132.435964][ T7521] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 132.617292][ T7521] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.620717][ T7521] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 132.625556][ T7521] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.629962][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.632097][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.634831][ T7521] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.637450][ T7521] usb 7-1: Product: syz [ 132.638768][ T7521] usb 7-1: Manufacturer: syz [ 132.640230][ T7521] usb 7-1: SerialNumber: syz [ 132.645359][ T7521] cdc_mbim 7-1:1.0: skipping garbage [ 132.649659][T11496] netlink: 'syz.1.1626': attribute type 1 has an invalid length. [ 132.652177][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'. [ 132.743139][T11506] syz.1.1630: attempt to access beyond end of device [ 132.743139][T11506] loop1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 132.747739][T11506] MINIX-fs: unable to read superblock [ 132.774319][T11511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1631'. [ 132.779802][T11511] usb usb9: usbfs: process 11511 (syz.1.1631) did not claim interface 1 before use [ 132.843616][T11437] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 133.047242][ T7521] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 133.049682][ T7521] cdc_mbim 7-1:1.0: bind() failure [ 133.052649][ T7521] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 133.054917][ T7521] cdc_ncm 7-1:1.1: bind() failure [ 133.068246][T11518] hub 1-0:1.0: USB hub found [ 133.070099][T11518] hub 1-0:1.0: 2 ports detected [ 133.074174][T11518] loop9: detected capacity change from 0 to 7 [ 133.076993][ T5978] Dev loop9: unable to read RDB block 7 [ 133.078790][ T5978] loop9: unable to read partition table [ 133.080628][ T5978] loop9: partition table beyond EOD, truncated [ 133.083955][T11518] Dev loop9: unable to read RDB block 7 [ 133.086198][T11518] loop9: unable to read partition table [ 133.088086][T11518] loop9: partition table beyond EOD, truncated [ 133.090106][T11518] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 133.135720][ T6052] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 133.285789][ T6052] usb 10-1: Using ep0 maxpacket: 8 [ 133.288706][ T6052] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.292152][ T6052] usb 10-1: config 0 interface 0 has no altsetting 0 [ 133.295014][ T6052] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 133.298148][ T6052] usb 10-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 133.300894][ T6052] usb 10-1: Product: syz [ 133.303148][ T6052] usb 10-1: config 0 descriptor?? [ 133.356704][T11530] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1677391066 (6709564264 ns) > initial count (4324526900 ns). Using initial count to start timer. [ 133.408049][ T6039] usb 7-1: USB disconnect, device number 20 [ 133.429933][T11536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1640'. [ 133.432887][T11536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1640'. [ 133.437001][T11536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1640'. [ 133.463335][T11540] netlink: 'syz.2.1641': attribute type 3 has an invalid length. [ 133.466322][T11541] omfs: Invalid superblock (0) [ 133.467566][T11540] netlink: 'syz.2.1641': attribute type 1 has an invalid length. [ 133.675196][T11549] xfrm0 speed is unknown, defaulting to 1000 [ 133.679453][T11549] lo speed is unknown, defaulting to 1000 [ 133.693090][T11552] 9pnet_fd: p9_fd_create_tcp (11552): problem binding to privport [ 133.710063][ T6052] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [syz] on usb-dummy_hcd.5-1/input0 [ 133.717864][T11555] xfrm0 speed is unknown, defaulting to 1000 [ 133.720202][T11555] lo speed is unknown, defaulting to 1000 [ 133.764065][T11561] bridge0: port 3(syz_tun) entered blocking state [ 133.765117][T11562] binder: 11560:11562 unknown command 0 [ 133.766448][T11561] bridge0: port 3(syz_tun) entered disabled state [ 133.768069][T11562] binder: 11560:11562 ioctl c0306201 200000000080 returned -22 [ 133.770105][T11561] syz_tun: entered allmulticast mode [ 133.774967][T11561] syz_tun: entered promiscuous mode [ 133.777295][T11561] bridge0: port 3(syz_tun) entered blocking state [ 133.779331][T11561] bridge0: port 3(syz_tun) entered forwarding state [ 133.808613][T11561] syz_tun: left allmulticast mode [ 133.811001][T11561] syz_tun: left promiscuous mode [ 133.812965][T11561] bridge0: port 3(syz_tun) entered disabled state [ 133.824372][T11561] bridge_slave_0: left allmulticast mode [ 133.827223][T11561] bridge_slave_0: left promiscuous mode [ 133.829973][T11561] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.837651][T11561] bridge_slave_1: left allmulticast mode [ 133.839477][T11561] bridge_slave_1: left promiscuous mode [ 133.841504][T11561] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.847366][T11561] bond0: (slave bond_slave_0): Releasing backup interface [ 133.854920][T11574] netlink: 'syz.2.1647': attribute type 30 has an invalid length. [ 133.876581][T11561] bond_slave_0: left promiscuous mode [ 133.882772][T11561] bond0: (slave bond_slave_1): Releasing backup interface [ 133.911432][T11576] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 133.912704][T11514] netlink: 'syz.5.1632': attribute type 6 has an invalid length. [ 133.916713][T11561] bond_slave_1: left promiscuous mode [ 133.922381][T11561] team0: Port device team_slave_0 removed [ 133.928847][T11561] team0: Port device team_slave_1 removed [ 133.932611][T11561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.935902][T11561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.939647][T11561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.942623][T11561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.962180][T11562] binder: 11560:11562 ioctl c0306201 0 returned -14 [ 133.965409][T11562] binder: 11560:11562 ioctl 4018620d 0 returned -22 [ 133.973409][T11584] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 133.975974][T11584] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 133.979943][T11584] vhci_hcd vhci_hcd.0: Device attached [ 133.983195][T11586] vhci_hcd: connection closed [ 133.983419][ T13] vhci_hcd: stop threads [ 133.986632][ T13] vhci_hcd: release socket [ 133.988057][ T13] vhci_hcd: disconnect device [ 133.997669][T11580] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 134.007793][ T5968] usb 10-1: USB disconnect, device number 4 [ 134.065729][ T5972] Bluetooth: hci0: command tx timeout [ 134.830763][T11624] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 134.935793][ T40] kauditd_printk_skb: 13233 callbacks suppressed [ 134.935810][ T40] audit: type=1326 audit(1755870287.234:62956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed98ebe9 code=0x50000 [ 134.945457][ T40] audit: type=1326 audit(1755870287.244:62957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed98ebe9 code=0x50000 [ 134.956782][ T40] audit: type=1326 audit(1755870287.244:62958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed98ebe9 code=0x50000 [ 134.965075][ T40] audit: type=1326 audit(1755870287.244:62959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed98ebe9 code=0x50000 [ 134.973019][ T40] audit: type=1326 audit(1755870287.244:62960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed98ebe9 code=0x50000 [ 134.981056][ T40] audit: type=1326 audit(1755870287.244:62961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed98ebe9 code=0x50000 [ 134.990180][ T40] audit: type=1326 audit(1755870287.244:62962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed98ebe9 code=0x50000 [ 134.997943][ T40] audit: type=1326 audit(1755870287.244:62963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed98ebe9 code=0x50000 [ 135.005962][ T40] audit: type=1326 audit(1755870287.244:62964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed98ebe9 code=0x50000 [ 135.014238][ T40] audit: type=1326 audit(1755870287.244:62965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.1655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed98ebe9 code=0x50000 [ 135.116992][T11643] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 135.120102][T11643] SELinux: failed to load policy [ 135.676455][T11677] comedi: valid board names for 8255 driver are: [ 135.679601][T11677] 8255 [ 135.680997][T11677] comedi: valid board names for vmk80xx driver are: [ 135.683443][T11677] vmk80xx [ 135.684434][T11677] comedi: valid board names for usbduxsigma driver are: [ 135.687300][T11677] usbduxsigma [ 135.688647][T11677] comedi: valid board names for usbduxfast driver are: [ 135.690774][T11677] usbduxfast [ 135.691946][T11677] comedi: valid board names for usbdux driver are: [ 135.694725][T11677] usbdux [ 135.695906][T11677] comedi: valid board names for ni6501 driver are: [ 135.698393][T11677] ni6501 [ 135.699591][T11677] comedi: valid board names for dt9812 driver are: [ 135.701723][T11677] dt9812 [ 135.702639][T11677] comedi: valid board names for ni_labpc_cs driver are: [ 135.704915][T11677] ni_labpc_cs [ 135.707388][T11677] comedi: valid board names for ni_daq_700 driver are: [ 135.709590][T11677] ni_daq_700 [ 135.710675][T11677] comedi: valid board names for labpc_pci driver are: [ 135.712859][T11677] labpc_pci [ 135.713914][T11677] comedi: valid board names for adl_pci9118 driver are: [ 135.717161][T11677] pci9118dg [ 135.718841][T11677] pci9118hg [ 135.719970][T11677] pci9118hr [ 135.721031][T11677] comedi: valid board names for 8255_pci driver are: [ 135.723412][T11677] 8255_pci [ 135.724429][T11677] comedi: valid board names for s526 driver are: [ 135.727101][T11677] s526 [ 135.728254][T11677] comedi: valid board names for multiq3 driver are: [ 135.731257][T11677] multiq3 [ 135.732591][T11677] comedi: valid board names for pcmuio driver are: [ 135.734841][T11677] pcmuio48 [ 135.736166][T11677] pcmuio96 [ 135.737230][T11677] comedi: valid board names for pcmmio driver are: [ 135.739680][T11677] pcmmio [ 135.740864][T11677] comedi: valid board names for pcmda12 driver are: [ 135.743697][T11677] pcmda12 [ 135.744996][T11677] comedi: valid board names for pcmad driver are: [ 135.747582][T11677] pcmad12 [ 135.748648][T11677] pcmad16 [ 135.749646][T11677] comedi: valid board names for ni_labpc driver are: [ 135.752117][T11677] lab-pc-1200 [ 135.753729][T11677] lab-pc-1200ai [ 135.755026][T11677] lab-pc+ [ 135.756227][T11677] comedi: valid board names for atmio16 driver are: [ 135.758927][T11677] atmio16 [ 135.760086][T11677] atmio16d [ 135.761462][T11677] comedi: valid board names for ni_at_ao driver are: [ 135.763621][T11677] at-ao-6 [ 135.764749][T11677] at-ao-10 [ 135.766349][T11677] comedi: valid board names for ni_at_a2150 driver are: [ 135.769227][T11677] ni_at_a2150 [ 135.770626][T11677] comedi: valid board names for adq12b driver are: [ 135.773272][T11677] adq12b [ 135.774225][T11677] comedi: valid board names for mpc624 driver are: [ 135.777468][T11677] mpc624 [ 135.778983][T11677] comedi: valid board names for c6xdigio driver are: [ 135.781664][T11677] c6xdigio [ 135.782748][T11677] comedi: valid board names for aio_iiro_16 driver are: [ 135.785066][T11677] aio_iiro_16 [ 135.786777][T11677] comedi: valid board names for aio_aio12_8 driver are: [ 135.789299][T11677] aio_aio12_8 [ 135.790531][T11677] aio_ai12_8 [ 135.791721][T11677] aio_ao12_4 [ 135.792937][T11677] comedi: valid board names for fl512 driver are: [ 135.795024][T11677] fl512 [ 135.796682][T11677] comedi: valid board names for dmm32at driver are: [ 135.798975][T11677] dmm32at [ 135.800032][T11677] comedi: valid board names for dt282x driver are: [ 135.802130][T11677] dt2821 [ 135.803335][T11677] dt2821-f [ 135.804614][T11677] dt2821-g [ 135.806181][T11677] dt2823 [ 135.807364][T11677] dt2824-pgh [ 135.808709][T11677] dt2824-pgl [ 135.810040][T11677] dt2825 [ 135.811214][T11677] dt2827 [ 135.812388][T11677] dt2828 [ 135.813737][T11677] dt2829 [ 135.814962][T11677] dt21-ez [ 135.816806][T11677] dt23-ez [ 135.818100][T11677] dt24-ez [ 135.819338][T11677] dt24-ez-pgl [ 135.820746][T11677] comedi: valid board names for dt2817 driver are: [ 135.823326][T11677] dt2817 [ 135.824516][T11677] comedi: valid board names for dt2815 driver are: [ 135.828263][T11677] dt2815 [ 135.829255][T11677] comedi: valid board names for dt2814 driver are: [ 135.831434][T11677] dt2814 [ 135.832612][T11677] comedi: valid board names for dt2811 driver are: [ 135.834828][T11677] dt2811-pgh [ 135.836057][T11677] dt2811-pgl [ 135.837229][T11677] comedi: valid board names for dt2801 driver are: [ 135.839310][T11677] dt2801 [ 135.840262][T11677] comedi: valid board names for das6402 driver are: [ 135.842397][T11677] das6402-12 [ 135.843533][T11677] das6402-16 [ 135.844620][T11677] comedi: valid board names for das1800 driver are: [ 135.846772][T11677] das-1701st [ 135.847880][T11677] das-1701st-da [ 135.849106][T11677] das-1702st [ 135.850205][T11677] das-1702st-da [ 135.851377][T11677] das-1702hr [ 135.852491][T11677] das-1702hr-da [ 135.853739][T11677] das-1701ao [ 135.854826][T11677] das-1702ao [ 135.856618][T11677] das-1801st [ 135.857761][T11677] das-1801st-da [ 135.858956][T11677] das-1802st [ 135.859983][T11677] das-1802st-da [ 135.861208][T11677] das-1802hr [ 135.862386][T11677] das-1802hr-da [ 135.863664][T11677] das-1801hc [ 135.864796][T11677] das-1802hc [ 135.866020][T11677] das-1801ao [ 135.867181][T11677] das-1802ao [ 135.868364][T11677] comedi: valid board names for das800 driver are: [ 135.870544][T11677] das-800 [ 135.871549][T11677] cio-das800 [ 135.872690][T11677] das-801 [ 135.873789][T11677] cio-das801 [ 135.874908][T11677] das-802 [ 135.877212][T11677] cio-das802 [ 135.882591][T11677] cio-das802/16 [ 135.883809][T11677] comedi: valid board names for isa-das08 driver are: [ 135.886887][T11677] isa-das08 [ 135.887935][T11677] das08-pgm [ 135.888980][T11677] das08-pgh [ 135.890025][T11677] das08-pgl [ 135.891062][T11677] das08-aoh [ 135.892174][T11677] das08-aol [ 135.893182][T11677] das08-aom [ 135.894222][T11677] das08/jr-ao [ 135.895293][T11677] das08jr-16-ao [ 135.897467][T11677] pc104-das08 [ 135.898588][T11677] das08jr/16 [ 135.899660][T11677] comedi: valid board names for das16m1 driver are: [ 135.901741][T11677] das16m1 [ 135.902762][T11677] comedi: valid board names for dac02 driver are: [ 135.904773][T11677] dac02 [ 135.906326][T11677] comedi: valid board names for rti802 driver are: [ 135.908356][T11677] rti802 [ 135.909313][T11677] comedi: valid board names for rti800 driver are: [ 135.911333][T11677] rti800 [ 135.912282][T11677] rti815 [ 135.913267][T11677] comedi: valid board names for pcm3724 driver are: [ 135.915342][T11677] pcm3724 [ 135.918121][T11677] comedi: valid board names for pcl818 driver are: [ 135.921135][T11677] pcl818l [ 135.922203][T11677] pcl818h [ 135.923227][T11677] pcl818hd [ 135.925171][T11677] pcl818hg [ 135.927583][T11677] pcl818 [ 135.928575][T11677] pcl718 [ 135.929523][T11677] pcm3718 [ 135.930515][T11677] comedi: valid board names for pcl816 driver are: [ 135.932532][T11677] pcl816 [ 135.933503][T11677] pcl814b [ 135.934564][T11677] comedi: valid board names for pcl812 driver are: [ 135.939906][T11677] pcl812 [ 135.940993][T11677] pcl812pg [ 135.942806][T11677] acl8112pg [ 135.944071][T11677] acl8112dg [ 135.945413][T11677] acl8112hg [ 135.947958][T11677] a821pgl [ 135.949001][T11677] a821pglnda [ 135.950070][T11677] a821pgh [ 135.951059][T11677] a822pgl [ 135.952049][T11677] a822pgh [ 135.953096][T11677] a823pgl [ 135.954752][T11677] a823pgh [ 135.956446][T11677] pcl813 [ 135.957501][T11677] pcl813b [ 135.958578][T11677] acl8113 [ 135.959695][T11677] iso813 [ 135.960718][T11677] acl8216 [ 135.961890][T11677] a826pg [ 135.963325][T11677] comedi: valid board names for pcl730 driver are: [ 135.966672][T11677] pcl730 [ 135.967757][T11677] iso730 [ 135.968889][T11677] acl7130 [ 135.969893][T11677] pcm3730 [ 135.971009][T11677] pcl725 [ 135.972016][T11677] p8r8dio [ 135.973215][T11677] acl7225b [ 135.974363][T11677] p16r16dio [ 135.975562][T11677] pcl733 [ 135.977402][T11677] pcl734 [ 135.978361][T11677] opmm-1616-xt [ 135.979445][T11677] pearl-mm-p [ 135.980622][T11677] ir104-pbf [ 135.981983][T11677] comedi: valid board names for pcl726 driver are: [ 135.984561][T11677] pcl726 [ 135.986402][T11677] pcl727 [ 135.987589][T11677] pcl728 [ 135.988777][T11677] acl6126 [ 135.990016][T11677] acl6128 [ 135.991246][T11677] comedi: valid board names for pcl724 driver are: [ 135.993821][T11677] pcl724 [ 135.994981][T11677] pcl722 [ 135.998708][T11707] netlink: 'syz.2.1693': attribute type 1 has an invalid length. [ 135.998941][T11677] pcl731 [ 136.001312][T11706] netlink: 'syz.2.1693': attribute type 1 has an invalid length. [ 136.002402][T11677] acl7122 [ 136.002410][T11677] acl7124 [ 136.002415][T11677] pet48dio [ 136.002421][T11677] pcmio48 [ 136.002424][T11677] onyx-mm-dio [ 136.002428][T11677] comedi: valid board names for pcl711 driver are: [ 136.002434][T11677] pcl711 [ 136.002437][T11677] pcl711b [ 136.002441][T11677] acl8112hg [ 136.002445][T11677] acl8112dg [ 136.002449][T11677] comedi: valid board names for amplc_pc263 driver are: [ 136.021794][T11677] pc263 [ 136.022973][T11677] comedi: valid board names for amplc_pc236 driver are: [ 136.025312][T11677] pc36at [ 136.026827][T11677] comedi: valid board names for amplc_dio200 driver are: [ 136.029574][T11677] pc212e [ 136.030534][T11677] pc214e [ 136.031491][T11677] pc215e [ 136.032447][T11677] pc218e [ 136.033458][T11677] pc272e [ 136.034416][T11677] comedi: valid board names for comedi_parport driver are: [ 136.038030][T11677] comedi_parport [ 136.039392][T11677] comedi: valid board names for comedi_test driver are: [ 136.041739][T11677] comedi_test [ 136.042844][T11677] comedi: valid board names for comedi_bond driver are: [ 136.045551][T11677] comedi_bond [ 136.364422][T11728] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 137.101315][T11745] netlink: 'syz.1.1705': attribute type 21 has an invalid length. [ 137.106566][T11745] IPv6: NLM_F_CREATE should be specified when creating new route [ 137.495772][ T6039] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 137.677316][ T6039] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 137.681008][ T6039] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 137.684310][ T6039] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 137.687256][ T6039] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.691644][T11754] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 137.696159][ T6039] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.206757][ T6039] usb 11-1: USB disconnect, device number 7 [ 138.256586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 138.375921][ T7521] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 138.515856][ T7521] usb 7-1: device descriptor read/64, error -71 [ 138.755728][ T7521] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 138.789352][T11783] sctp: [Deprecated]: syz.6.1715 (pid 11783) Use of int in max_burst socket option deprecated. [ 138.789352][T11783] Use struct sctp_assoc_value instead [ 138.794582][T11783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.915906][ T7521] usb 7-1: device descriptor read/64, error -71 [ 139.026070][ T7521] usb usb7-port1: attempt power cycle [ 139.376026][ T7521] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 139.396101][ T7521] usb 7-1: device descriptor read/8, error -71 [ 139.655731][ T7521] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 139.686871][ T7521] usb 7-1: device descriptor read/8, error -71 [ 139.796218][ T7521] usb usb7-port1: unable to enumerate USB device [ 140.674117][ T40] kauditd_printk_skb: 30526 callbacks suppressed [ 140.674129][ T40] audit: type=1400 audit(1755870292.974:93492): avc: denied { bind } for pid=11802 comm="syz.6.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 141.325912][ T6039] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 141.481621][ T6039] usb 11-1: config index 0 descriptor too short (expected 23569, got 27) [ 141.484529][ T6039] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.490214][ T6039] usb 11-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 141.490779][T11837] __nla_validate_parse: 74 callbacks suppressed [ 141.490792][T11837] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1730'. [ 141.494016][ T6039] usb 11-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 141.497987][T11837] macvlan2: entered promiscuous mode [ 141.500378][ T6039] usb 11-1: Manufacturer: syz [ 141.502007][T11837] macvlan2: entered allmulticast mode [ 141.504148][ T6039] usb 11-1: config 0 descriptor?? [ 141.505547][T11837] veth1_vlan: entered allmulticast mode [ 141.509659][T11837] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 141.545798][ T6039] rc_core: IR keymap rc-hauppauge not found [ 141.545824][ T7514] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 141.548022][ T6039] Registered IR keymap rc-empty [ 141.548474][ T6039] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 141.555998][ T6039] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input22 [ 141.706870][ T7514] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.709527][ T7514] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 141.712839][ T7514] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.715747][ T7514] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 141.719408][ T7514] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 141.725436][ T7514] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.729119][ T7514] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.731668][ T7514] usb 7-1: Product: syz [ 141.733025][ T7514] usb 7-1: Manufacturer: syz [ 141.747344][ T7514] cdc_wdm 7-1:1.0: skipping garbage [ 141.749120][ T7514] cdc_wdm 7-1:1.0: skipping garbage [ 141.751594][ T7514] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 141.753625][ T7514] cdc_wdm 7-1:1.0: Unknown control protocol [ 141.876393][ T6039] usb 11-1: USB disconnect, device number 8 [ 141.949619][T11830] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 141.951621][T11830] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.954071][T11830] vhci_hcd vhci_hcd.0: Device attached [ 141.956446][T11868] vhci_hcd: cannot find the pending unlink 1023 [ 142.011432][ C0] wdm_int_callback: 1 callbacks suppressed [ 142.011460][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 142.011757][ T7521] usb 7-1: USB disconnect, device number 25 [ 142.013336][ C0] wdm_int_callback: 1 callbacks suppressed [ 142.013349][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 142.013360][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 142.023783][T11872] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1737'. [ 142.163856][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.165997][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.168424][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.170321][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.172880][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.174922][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.177808][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.179804][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.182226][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.184297][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.187609][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.190361][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.192926][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.194869][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.198367][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.200268][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.202669][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.204543][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.206687][ T7514] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 142.207087][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.211266][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.213703][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.215598][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.218219][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.220103][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.222507][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.224450][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.227288][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.229277][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.231668][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.233570][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.236257][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.238481][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.240928][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.242865][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.245260][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.247331][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.249771][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.251696][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.254103][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.256262][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.258805][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.260641][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.263096][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.264938][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.267407][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.269308][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.271626][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.273555][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.276018][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.277968][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.280330][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.282220][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.284702][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.286810][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.289283][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.291154][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.293537][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.295446][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.297991][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.299740][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.302042][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.303845][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.306244][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.308150][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.310530][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.312367][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.314620][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.316651][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.319151][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.321021][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.323443][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.325374][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.327977][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.330253][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.332631][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.334521][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.337026][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.339077][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.341660][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.343614][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.346284][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.348364][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.350768][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.352661][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.354996][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.356969][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.359468][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.361477][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.363902][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.365869][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.368352][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.370340][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.372866][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.374787][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.377385][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.379348][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.381750][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.383585][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.386041][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.387946][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.390797][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.392710][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.395076][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.397075][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.399592][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.401490][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.403800][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.406117][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.408631][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.410505][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.412827][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.414680][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.417257][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.419214][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.421604][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.423457][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.426022][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.427919][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.430506][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.432452][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.434909][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.437303][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.439903][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.441848][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.444277][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.446227][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.448597][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 142.450453][T11885] binder: 11884:11885 ioctl 4018620d 200000000480 returned -16 [ 142.535794][ T7521] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 142.651039][T11913] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.662353][T11913] netlink: 'syz.6.1748': attribute type 2 has an invalid length. [ 142.687213][ T7521] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.690545][ T7521] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 142.693979][ T7521] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.698886][ T7521] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.702362][ T7521] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.708982][ T7521] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.709946][ T40] audit: type=1400 audit(1755870295.014:93493): avc: denied { write } for pid=11924 comm="syz.6.1752" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 142.712497][ T7521] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.723245][ T7521] usb 7-1: Product: syz [ 142.725031][ T7521] usb 7-1: Manufacturer: 債弃灧✛椉顼쁍ᯇ⥅樾嚣캩␸搯菕戙驰㽁⩘囻⨄꘿놶᧓ꔳ蹮̹✒ﮒ깤წً뚳ㆦ陮滑閒䙪⊄ᚳ䊑讗孃嚷볽痖鹓臘䶱躘榑藙嫙ሇى딻Ⓠ㌣賄钺㇮⣬ⰱ愃ᣫꑾ痔⟬葟㹕탈ꥃ೜⪠릾ᄒ溝鱻ꋯ鈡櫯ꢔᣀ뛪ဎ奔賋⣶ⵦ踼 [ 142.737840][ T7521] cdc_wdm 7-1:1.0: skipping garbage [ 142.739499][ T7521] cdc_wdm 7-1:1.0: skipping garbage [ 142.741111][ T7521] cdc_wdm 7-1:1.0: skipping garbage [ 142.742880][ T7521] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 142.760332][T11929] : renamed from lo (while UP) [ 142.852740][T11950] program syz.6.1758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.856191][T11950] ata1.00: invalid service action 31 [ 142.877497][T11953] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=50 sclass=netlink_audit_socket pid=11953 comm=syz.6.1759 [ 142.885730][T11955] random: crng reseeded on system resumption [ 142.890502][T11957] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 142.895292][T11957] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 142.897298][ T40] audit: type=1400 audit(1755870295.204:93494): avc: denied { read } for pid=5361 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 142.900174][T11957] CPU: 2 UID: 0 PID: 11957 Comm: syz.1.1760 Not tainted syzkaller #0 PREEMPT(full) [ 142.907602][ T40] audit: type=1400 audit(1755870295.204:93495): avc: denied { search } for pid=5361 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.911044][T11957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.918654][ T40] audit: type=1400 audit(1755870295.204:93496): avc: denied { search } for pid=5361 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.922290][T11957] RIP: 0010:h5_recv+0x104/0x950 [ 142.930302][ T40] audit: type=1400 audit(1755870295.204:93497): avc: denied { add_name } for pid=5361 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.931600][T11957] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 e1 c4 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 142.931615][T11957] RSP: 0018:ffffc9000cd3fc00 EFLAGS: 00010293 [ 142.931625][T11957] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887ac6ca [ 142.931632][T11957] RDX: ffff8880317ca440 RSI: ffffffff887ac70f RDI: 0000000000000005 [ 142.931639][T11957] RBP: ffffc9000cd3fd88 R08: 0000000000000005 R09: 0000000000000000 [ 142.941215][ T40] audit: type=1400 audit(1755870295.204:93498): avc: denied { create } for pid=5361 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.946320][T11957] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 142.946332][T11957] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb471e0 [ 142.946339][T11957] FS: 00007ffbee7fd6c0(0000) GS:ffff8880d68bc000(0000) knlGS:0000000000000000 [ 142.946362][T11957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.946372][T11957] CR2: 00007ffbee7fdd58 CR3: 000000005918a000 CR4: 0000000000352ef0 [ 142.946379][T11957] Call Trace: [ 142.946383][T11957] [ 142.946390][T11957] ? __pfx_h5_recv+0x10/0x10 [ 142.946409][T11957] ? rcu_is_watching+0x12/0xc0 [ 142.946424][T11957] ? lock_acquire+0x2cd/0x350 [ 142.946440][T11957] ? __pfx___might_resched+0x10/0x10 [ 142.946455][T11957] hci_uart_tty_receive+0x254/0x7e0 [ 142.946468][T11957] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 142.946481][T11957] tty_ioctl+0x583/0x1680 [ 142.946503][T11957] ? __pfx_tty_ioctl+0x10/0x10 [ 142.946514][T11957] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 142.946532][T11957] ? rcu_is_watching+0x12/0xc0 [ 142.946545][T11957] ? __fget_files+0x204/0x3c0 [ 142.946557][T11957] ? hook_file_ioctl_common+0x145/0x410 [ 142.946570][T11957] ? selinux_file_ioctl+0x180/0x270 [ 142.946585][T11957] ? selinux_file_ioctl+0xb4/0x270 [ 142.946600][T11957] ? __pfx_tty_ioctl+0x10/0x10 [ 142.946611][T11957] __x64_sys_ioctl+0x18e/0x210 [ 142.946627][T11957] do_syscall_64+0xcd/0x4c0 [ 142.946641][T11957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.946652][T11957] RIP: 0033:0x7ffbed98ebe9 [ 142.949252][ T40] audit: type=1400 audit(1755870295.204:93499): avc: denied { append open } for pid=5361 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.951757][T11957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.955164][ T40] audit: type=1400 audit(1755870295.204:93500): avc: denied { getattr } for pid=5361 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.957622][T11957] RSP: 002b:00007ffbee7fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.957636][T11957] RAX: ffffffffffffffda RBX: 00007ffbedbb6180 RCX: 00007ffbed98ebe9 [ 142.957643][T11957] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000009 [ 142.957650][T11957] RBP: 00007ffbeda11e19 R08: 0000000000000000 R09: 0000000000000000 [ 142.957656][T11957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.957667][T11957] R13: 00007ffbedbb6218 R14: 00007ffbedbb6180 R15: 00007ffe657d7f28 [ 142.957678][T11957] [ 142.957682][T11957] Modules linked in: [ 142.957909][T11957] ---[ end trace 0000000000000000 ]--- [ 143.066208][T11957] RIP: 0010:h5_recv+0x104/0x950 [ 143.067821][T11957] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 e1 c4 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 143.074912][T11957] RSP: 0018:ffffc9000cd3fc00 EFLAGS: 00010293 [ 143.077362][T11957] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887ac6ca [ 143.080561][T11957] RDX: ffff8880317ca440 RSI: ffffffff887ac70f RDI: 0000000000000005 [ 143.083831][T11957] RBP: ffffc9000cd3fd88 R08: 0000000000000005 R09: 0000000000000000 [ 143.087656][T11957] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 143.090844][T11957] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb471e0 [ 143.094020][T11957] FS: 00007ffbee7fd6c0(0000) GS:ffff8880d68bc000(0000) knlGS:0000000000000000 [ 143.097055][T11957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.099094][T11957] CR2: 00007ffbee7fdd58 CR3: 000000005918a000 CR4: 0000000000352ef0 [ 143.101668][T11957] Kernel panic - not syncing: Fatal exception [ 143.104203][T11957] Kernel Offset: disabled [ 143.105576][T11957] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:44:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=00000000000000e3 RCX=ffffffff819acd92 RDX=ffff88801c780000 RSI=ffffffff819acd80 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000078fb98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff920000f1f75 R13=0000000000000200 R14=ffff8880317ca440 R15=ffffc9000078fc60 RIP=ffffffff819acd82 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffbee81df98 CR3=0000000026221000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06df000000060000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014010000000000 000800080007000c 00080000000c0000 015c000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06db000000200000 0001000000100008 0000000000000004 000c001a00100000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0044000000480000 004c000000500000 0054000000580000 005c000000600000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0064000000700000 0098000000840000 00b4000000940000 00cc000000dc0000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001e000000000000 0000000000000000 01b10000000005d7 5c80000000180000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00200000000e0014 000c000000080004 0020000e00000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a000803000000 0000005d00000008 0004000b000c0008 07000000ffffffc6 ZMM25=d2b531e9d2b531e9 d2b531e9d2b531e9 d2b531e9d2b531e9 d2b531e9d2b531e9 d2b531e9d2b531e9 d2b531e9d2b531e9 d2b531e9d2b531e9 d2b531e9d2b531e9 ZMM26=c262e7e1c262e7e1 c262e7e1c262e7e1 c262e7e1c262e7e1 c262e7e1c262e7e1 c262e7e1c262e7e1 c262e7e1c262e7e1 c262e7e1c262e7e1 c262e7e1c262e7e1 ZMM27=9f09ed5e9f09ed5e 9f09ed5e9f09ed5e 9f09ed5e9f09ed5e 9f09ed5e9f09ed5e 9f09ed5e9f09ed5e 9f09ed5e9f09ed5e 9f09ed5e9f09ed5e 9f09ed5e9f09ed5e ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3308000033080000 3308000033080000 3308000033080000 3308000033080000 3308000033080000 3308000033080000 3308000033080000 3308000033080000 info registers vcpu 1 CPU#1 RAX=000000000015043c RBX=0000000000000001 RCX=ffffffff8b93ac29 RDX=ffffed100d4a6656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=ffffed1003bd8488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801dec2440 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93978f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7ee764ff98 CR3=0000000051966000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000c0000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6f77ee70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6f77eff6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6f77eff6 00007ffe6f77effc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10a7a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10a7a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10a7a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10a7a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10a7a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f10a7a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643385 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc9000cd3f600 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b10dfe0 R15=ffffffff85643320 RIP=ffffffff856433af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ffbee7fd6c0 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffbee7fdd58 CR3=000000005918a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe657d8436 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe657d8436 00007ffe657d843c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffbeda12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffbeda12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffbeda12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffbeda12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffbeda12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffbeda12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffbedb874a8 00007ffbedb874a0 00007ffbedb87498 00007ffbedb87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffbee6ed100 00007ffbedb87460 00007ffbedb87478 00007ffbedb874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffbedb874b8 00007ffbedb874b0 00007ffbedb874a8 00007ffbedb874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000014cc74 RBX=0000000000000003 RCX=ffffffff8b93ac29 RDX=ffffed100d4e6656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=ffffed1003c5b000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2d8000 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93978f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffbee7fcf98 CR3=0000000026221000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555cecc73600 0000555cecc73600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed7346340 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6974616e72656269 68203a4d50205d35 35393131545b5d32 33303938382e3234 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 393537312e362e7a 79733d6d6d6f6320 33353931313d6469 702074656b636f73 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f74696475615f6b 6e696c74656e3d73 73616c6373203035 3d657079745f6773 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d6c6e20393d6c6f 636f746f7270203a 6567617373656d20 6b6e696c74656e20 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64657a696e676f63 65726e75203a7875 6e694c4553205d33 35393131545b5d37 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000