last executing test programs: 3m41.831785536s ago: executing program 0 (id=303): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) getrandom(&(0x7f0000000540)=""/196, 0xc4, 0x2) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_clone3(&(0x7f0000000480)={0x3200000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff], 0x1}, 0x58) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) munlockall() (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc) 3m41.691366693s ago: executing program 0 (id=306): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x6c, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x7fff, @loopback, 0xb1ab}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000001c0)={0x1, 0x0, [{}]}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000200)=@arm64={0x4, 0xd, 0x86, '\x00', 0x1000}) (async) semget(0x1, 0x0, 0x405) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000240)=@int=0x3ff, 0x4) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x2, 0x9}}, './file0\x00'}) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000300)={[0x3, 0x17, 0xd, 0x2, 0x4, 0x5, 0x9, 0xfffffff1, 0x7, 0x6, 0x2, 0x20, 0x0, 0x4, 0x9, 0x200, 0x4, 0xf0, 0x10000, 0x3, 0x81, 0x9, 0xffff, 0x0, 0xe, 0xfffffff8, 0x8, 0x1f, 0x3, 0x6, 0xfffff560, 0x52ef, 0x7, 0xf0, 0x11, 0x9, 0x80000001, 0x7fffffff, 0x7f, 0xe0, 0x7, 0x6, 0xffff, 0xfffff4a4, 0x1, 0x7, 0x2, 0x0, 0xa, 0xc, 0x9, 0x5, 0x3073f4d3, 0xadab, 0x5, 0xfc, 0x5, 0x10, 0x0, 0x7, 0x80, 0x7, 0x3, 0x8, 0xdac2, 0x1, 0x3, 0x5, 0x1, 0x6, 0x22, 0x5, 0x1, 0x9ba, 0x9, 0x5, 0x8, 0x5, 0xe, 0x86ae, 0x10001, 0xfffffe01, 0x4, 0x4e26, 0xffff, 0x100, 0x5, 0x8000, 0x3, 0x89ad, 0x7ff, 0x6, 0xbdee, 0x8, 0x1, 0x81, 0x8, 0x0, 0x2, 0x840, 0x2, 0x3f000000, 0x100, 0x9, 0x953, 0x4, 0x2, 0x1, 0x1, 0xfff, 0x7, 0x3, 0x401, 0x3000000, 0x4, 0x0, 0x0, 0x9, 0x13d, 0x1000, 0x600000, 0xfffffe00, 0x3, 0x99f0, 0x6, 0x401, 0x5, 0xa1, 0x80000000, 0x1, 0x9, 0x9, 0x8, 0x9, 0x7, 0x0, 0x2, 0x2, 0x3cd, 0x7ae, 0x6, 0x2, 0x4, 0xff, 0x6, 0xc6a, 0xad32, 0xd, 0x9, 0x7, 0x80000000, 0x6, 0x81, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x800, 0x2, 0x59, 0xdd, 0x401, 0xf, 0x4, 0x2, 0x10000, 0x682, 0xfffffffe, 0x8, 0xffff, 0x3, 0xb3, 0xd8cb, 0x1ff, 0x2, 0x9, 0x9, 0x1000, 0xb37, 0x2, 0x47, 0x9, 0x3, 0x7, 0x3, 0x7, 0x5, 0x100, 0x8, 0x0, 0x5, 0xfffffffa, 0x10000, 0x2, 0xf925, 0x734, 0x0, 0x8, 0x8, 0x2, 0x9, 0x7, 0x7, 0x4, 0x3c, 0x8b1, 0x3, 0x6, 0x8, 0x80000001, 0xbb, 0x4, 0x2, 0x4fa8, 0xff, 0x0, 0xb40, 0x5, 0x5aa, 0x1, 0x3f3a, 0x3, 0x6, 0x177, 0x7fffffff, 0x5, 0x9, 0x5, 0x4, 0x8, 0x80000000, 0x84, 0xe, 0xfffff326, 0x401, 0x3a8, 0x80, 0x9, 0x240000, 0x6, 0x101, 0x10, 0x8, 0x9, 0xa, 0x800, 0xc47, 0x7fff, 0x8, 0x2, 0x1, 0xb, 0x8, 0x966, 0x6, 0x1, 0xd, 0x9, 0x5, 0xffff8001, 0x5, 0xfffffffc, 0x97, 0x8, 0x0, 0xb41, 0x8e3, 0xac, 0x9, 0x401, 0x3, 0x200, 0x9, 0x5, 0x6, 0x0, 0xea100000, 0x2, 0x70a, 0x6, 0x6, 0x9, 0x5, 0x3ff, 0x1, 0x1, 0x1, 0x240, 0x4, 0x6, 0x7, 0x4, 0x19f1, 0xfffffffd, 0x4, 0xd, 0x0, 0x81, 0x6, 0x2, 0x2, 0xfffffff4, 0x0, 0x6, 0x6, 0xffff8000, 0x8, 0x3df, 0x0, 0x0, 0x3f, 0x4bc, 0x759d, 0x3, 0x139, 0xa45e, 0xe6fd, 0x1, 0x1, 0xc9f9, 0xa, 0x0, 0x1, 0x8, 0x0, 0x95, 0x3, 0x7ff, 0x4, 0x142, 0x200, 0x10000, 0x5ab, 0x3ff, 0x1ff, 0x6, 0xbc, 0x1, 0x7, 0x0, 0x4, 0xb5c, 0xfffffa05, 0x1d, 0x5d5bb62c, 0x8, 0x8, 0x7f, 0x8, 0x0, 0x7ff, 0x200, 0x5, 0x80000001, 0x2b3, 0x5, 0x5c08, 0x1, 0x9, 0xb, 0x7, 0x0, 0x80, 0x8001, 0x8, 0x40, 0x9, 0x6, 0x31b, 0x800, 0x4403, 0xe1e, 0x4, 0x2, 0x6, 0x6, 0x5, 0x7, 0x29e, 0x5a, 0x2, 0x3, 0x7f, 0x3, 0xf, 0x3, 0x7, 0xa5e5, 0x3, 0x800, 0x35, 0x1, 0xe200, 0x59, 0x4, 0x5, 0x3, 0x8, 0x35, 0x0, 0x6, 0xe8f, 0x10001, 0x3, 0xa1, 0x2e37, 0xe3b, 0x9, 0x6, 0xfffffffd, 0x2, 0x8001, 0xe, 0x1, 0x5, 0x3, 0x6, 0x9f16, 0x677fe190, 0x8, 0xfffffffb, 0x533, 0x79, 0xd, 0x1, 0x0, 0xffff, 0x101, 0x6, 0x7, 0x2, 0xffffffff, 0x9, 0x23, 0x0, 0x9, 0x7fff, 0x10000, 0x1, 0x9, 0x400, 0x6, 0x2, 0x4, 0xf, 0x9899, 0x7, 0x400, 0x3, 0x9, 0x3, 0x5ee8, 0xbd, 0x7, 0x3, 0x9, 0x1, 0x2, 0xf, 0x769, 0x3, 0x3, 0x4, 0x4, 0x7, 0x3ff, 0x6, 0x5, 0x2, 0x9, 0xbb81, 0x0, 0x9, 0xc, 0x7de7, 0x401, 0xe, 0x9, 0x0, 0x1000, 0x3, 0x7, 0x4, 0x3, 0xfbc6, 0x536, 0xfffffff4, 0x9, 0xbea3, 0xe00, 0x3, 0x0, 0xffff, 0x1000, 0x4, 0x6, 0xfffffffc, 0x0, 0x800, 0x35, 0x3, 0x16f, 0x5, 0x7fffffff, 0x9, 0xe, 0x0, 0x6, 0xdee, 0x1, 0x7, 0x0, 0x8, 0xbd, 0x0, 0x1, 0x143a, 0x340, 0x10, 0x0, 0x1, 0x6, 0x6, 0x9, 0x2, 0x80000001, 0x8001, 0x2, 0x4, 0xd7d, 0x0, 0x5, 0x91, 0xc0000000, 0x5, 0xc, 0x1aa, 0x3, 0x8, 0x2, 0x5, 0x4, 0xe, 0x4d8, 0x5, 0x5, 0xc57b, 0x8, 0x10000, 0x5, 0x3, 0x3, 0x3, 0x6, 0x7f, 0x8, 0x1, 0x3a36, 0x7ff, 0x80000000, 0x0, 0x3, 0x7, 0x81, 0x7, 0x3, 0x3ff, 0x9, 0xd973, 0xffff, 0x9e4e, 0x8, 0x3, 0x2, 0x4, 0x3f9, 0x6c0, 0x8, 0x5, 0x576a, 0x1, 0x80, 0xffff, 0x3, 0xee09, 0x7ff, 0xe466cb7, 0x0, 0x8, 0x8, 0xe, 0x3, 0x6, 0xdf, 0x0, 0x5, 0x81, 0x5, 0x7a2, 0x1, 0x81, 0x4, 0x6, 0xa, 0x0, 0x180, 0xe6e9, 0x3, 0x4, 0xed66, 0xd, 0x80000000, 0x400, 0x4, 0x0, 0x6f2, 0x7, 0x2d68, 0x5, 0xfffffffd, 0x81, 0x4f, 0x2a3, 0x8, 0x9, 0xffffffff, 0xf144, 0x5, 0x6, 0xffffffff, 0xf, 0x8, 0x7, 0x6, 0x4, 0xfffffc02, 0xfffffff2, 0xf, 0xc, 0x0, 0x6, 0x3, 0x1, 0x9, 0x2, 0x400, 0xc, 0x0, 0x5, 0x10000, 0x3, 0x9, 0x1, 0x3, 0x401, 0x80, 0xd, 0x200, 0x4, 0x6, 0x200, 0x5c, 0xf, 0x2, 0x8, 0x78, 0xed, 0x8, 0x400, 0x2, 0xbf6, 0x2, 0x1, 0x0, 0x7, 0x10000, 0x4, 0x0, 0xde, 0x8000, 0x6e340800, 0xffffffff, 0x4, 0x5, 0x0, 0x10000, 0xe72, 0xf45, 0x7, 0x0, 0x2b, 0x4, 0x2, 0x0, 0x8, 0x8001, 0x7, 0x5, 0x8000, 0x3, 0x5c, 0x7d, 0x1, 0x8, 0x0, 0x4, 0x6, 0x5, 0x4, 0x10, 0x5, 0x6, 0x7, 0x8, 0x7000000, 0x38, 0x1, 0x8, 0x207c, 0x9, 0x5, 0x4, 0x1, 0x7, 0x6, 0x0, 0x1a3, 0x93, 0x2, 0x9, 0x4, 0xfffffe01, 0x6, 0x10000, 0x5, 0xe6, 0xb5, 0x80, 0xf, 0x3, 0x10000, 0x3, 0x0, 0x64e1, 0x9, 0x8, 0x5, 0xf851, 0x400, 0x2, 0x0, 0x1, 0x0, 0x6, 0x1, 0xfffffff7, 0x2, 0x401, 0x0, 0x2, 0xffffffd9, 0x9, 0xfffffffd, 0x3, 0x3c6, 0x4, 0x1, 0x4, 0x9, 0x1ff, 0xc, 0x1b6, 0xffffffff, 0x400, 0x47, 0x2, 0x8aa, 0x0, 0xfffffff8, 0x400, 0x0, 0x6, 0x3, 0xf0ec, 0xe, 0x24000, 0x1, 0x5, 0x3, 0xfff, 0x8, 0xfffeffff, 0x1, 0x3bb, 0x6, 0x7fff, 0xe0000000, 0x0, 0x4, 0x7ff, 0xf, 0x9983, 0x8000, 0x9, 0x401, 0x1000, 0x8, 0x3, 0x3, 0x3, 0x4, 0x7, 0x9, 0x1, 0x6, 0x359f8fb, 0x7, 0x1ff, 0xf03b0bf, 0x5, 0x3, 0xfffffffc, 0x273, 0x3, 0x5, 0x400, 0x100, 0x5, 0x7, 0x8, 0x5, 0x7, 0x1000, 0x2, 0x2, 0x0, 0xff, 0x3, 0x4, 0x5, 0xb, 0x5, 0xfffffffd, 0x0, 0x1ff, 0xffff, 0x9, 0x0, 0x8, 0xfff, 0x1, 0x1, 0x10, 0x6, 0x0, 0x100, 0x1, 0x800, 0x6, 0xf4b6, 0x1, 0x3, 0x8, 0x7f, 0x6, 0x1ff, 0x1, 0x2, 0x400000, 0x1, 0x6, 0xa2c8, 0x400, 0x2, 0x8, 0x3, 0x2, 0x4, 0x8, 0x5, 0x0, 0x401, 0x5, 0x80, 0xd8f, 0x6, 0xfffffffb, 0xe19, 0x8, 0x9, 0x3, 0x0, 0xabed, 0x5, 0xd, 0x80, 0xe0, 0x2, 0x4, 0x10001, 0x8000, 0x0, 0x6, 0x2, 0x0, 0x18, 0xa0000000, 0x1ff, 0x7, 0x9, 0x2e8, 0xbc, 0x0, 0x4, 0x75, 0x6, 0x35ce2cf3, 0x8, 0x2, 0x9, 0x4, 0x7, 0x0, 0xb154fa6e, 0x3ff, 0x5, 0x1000, 0x1, 0xfffffffe, 0x4, 0x3, 0x8, 0x5, 0x0, 0xc, 0x3, 0x959, 0xfffffff5, 0x0, 0x7, 0x8001, 0x3, 0x7, 0x80000000, 0xb, 0x6c, 0x9, 0x6, 0x7, 0xc, 0x954, 0xb, 0x1, 0x2, 0x2, 0xbfa, 0x8, 0x15d, 0x8, 0x5, 0x0, 0x7f, 0x2, 0x1, 0xf, 0x3ff, 0x2, 0x5, 0x8, 0x1ff, 0x5, 0x20fd, 0x6, 0x0, 0x9, 0x3, 0x0, 0x54, 0xfff, 0x9, 0x1, 0x3, 0x80000000, 0x8, 0xff, 0x1, 0xdd3f, 0x2, 0x1, 0xa7, 0x3ff, 0x3, 0x9, 0xffffffff, 0x1, 0x1, 0x3, 0x7fff, 0xe, 0x1, 0x80000000, 0x2, 0x9, 0x4, 0x3ff, 0x28, 0xf, 0x64d3, 0xfd, 0x1, 0x9, 0x6, 0xfffffe00, 0x1, 0x1, 0x4, 0x0, 0xffffff1c, 0x28, 0x101, 0xa31, 0xf]}) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@fallback=r5, 0x22, 0x1, 0x3, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0], 0x0}, 0x40) (rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001440)={@cgroup=r5, r4, 0x2, 0x10, 0x0, @void, @value=r5, @void, @void, r7}, 0x20) (async) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001480)={0x2, {0x2, 0x6, 0x0, 0x3e38, 0x7, 0x1}}) (async) fcntl$setpipe(r3, 0x407, 0x8) (async) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000001500)={0x1, 0x6, 0x0, &(0x7f00000014c0)={0xa, "e3a1d33b4ca3891fef2d785d3acedb007c6769bc25e627abbed70376f5fba1ba83"}}) (async) r8 = add_key$keyring(&(0x7f0000001640), &(0x7f0000001680)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_v1(&(0x7f0000001540), &(0x7f0000001580)={'fscrypt:', @desc1}, &(0x7f00000015c0)={0x0, "3b66506bc4cc5fc756c88b0dbb76c6c72f28abb6cdbdfa8f4c81ab1934419a0cbc33474b64399f9548b308294778f20e38afc58e66ebe05cba988f4914ad6e34", 0x1f}, 0x48, r8) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) (async) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f00000016c0), 0x4002, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000001700)=0x0) connect$nfc_raw(r6, &(0x7f0000001740)={0x27, r10, 0xffffffffffffffff, 0x6}, 0x10) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000001940)={@broadcast, @private, 0x0}, &(0x7f0000001980)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x2, 0xc, &(0x7f0000001780)=@raw=[@map_idx={0x18, 0xa}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, @map_val={0x18, 0x3, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x6}, @generic={0x3, 0xa, 0x7, 0x38}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}], &(0x7f0000001800)='GPL\x00', 0x686f, 0xe4, &(0x7f0000001840)=""/228, 0x40f00, 0x48, '\x00', r11, @fallback=0x26, r5, 0x8, &(0x7f00000019c0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x3, &(0x7f0000001a00)=[r5, r2], &(0x7f0000001a40)=[{0x3, 0x1, 0x10, 0x4}, {0x5, 0x5, 0xb, 0xc}, {0x0, 0x4, 0xa, 0xa}], 0x10, 0x5}, 0x94) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001d40)={r4, 0x20, &(0x7f0000001d00)={&(0x7f0000001b40)=""/130, 0x82, 0x0, &(0x7f0000001c00)=""/203, 0xcb}}, 0x10) (async, rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001dc0), 0x1, 0x0) (async, rerun: 64) r14 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$nl_route_sched_retired(r12, &(0x7f0000001fc0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001f80)={&(0x7f0000001e00)=@deltclass={0x158, 0x29, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x1, 0xffff}, {0x7, 0x3}, {0x7, 0x7}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x9}}}, @c_atm={{0x8}, {0x84, 0x2, [@TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x16, 0x3, "8b6f6dd62e57a90dcf8677a7e5fc740964eb"}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_HDR={0x37, 0x3, "8ccd24ee8d5654ac5bbcbceafc97a9bccf006e24b5c6eefb821a3c827879c99d147f16f47561efe2a91e82c010707a2402bce7"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0x1}}, @TCA_ATM_FD={0x8, 0x1, r13}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x9}}}, @c_atm={{0x8}, {0x5c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xe, 0xa}}, @TCA_ATM_HDR={0x3f, 0x3, "0b928d1ab38d0ee8312fb00ae4a601a6a78e9ff352a534f1fae528caee843e53a9b76e004d1141387385a92946a225c725db379552b84e718c3f29"}, @TCA_ATM_FD={0x8, 0x1, r6}, @TCA_ATM_FD={0x8, 0x1, r14}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x9, 0xf}}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x200008cc}, 0x4000010) 3m41.608516917s ago: executing program 0 (id=307): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x703d2a, 0x2, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0xa, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4008084) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x4) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x98, 0x130, 0x260, 0x328, 0x0, 0x98, 0x130, 0x1c8, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xeffbf00c}, {0x6, 0x0, 0xb, 0x4}]}, 0x10) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x16, 0xa01}, 0x14}}, 0x0) r12 = socket$inet(0x2, 0x3, 0xff) sendto(r12, &(0x7f0000000100)="4500001c00010000401174c00c0002010c000201", 0x14, 0x0, &(0x7f0000000200)=@in={0x2, 0x0, @loopback}, 0x80) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) 3m41.345482275s ago: executing program 0 (id=308): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x12, r0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000700)=0xe) sendfile(r2, r3, 0x0, 0x10ffff) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000740)={0x800001, 0xffffffff, 0x4e8, 0x3, 0x1, "f4951600"}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x22) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1e18e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 3m40.3913566s ago: executing program 0 (id=315): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x5, 0xe, "00020000da6c7c102ec50000"}, {0x5, 0x9, "02270e000042eb"}, {0x3, 0x12, '\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xd, "c8f46976e79ea788f03d9d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r3, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r5 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) lseek(r5, 0x9, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000280)={0x2, 0x4}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) r10 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x200, 0x70bd28, 0x10000000, {0x0, 0x0, 0x0, r7, {0x4}, {0xd, 0xf}, {0x3}}}, 0x24}}, 0x0) write$ublk_bdev(r0, 0x0, 0x0) read(r0, &(0x7f0000000000)=""/255, 0xff) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000100)='./proc\x00', r0, 0x4000, r6}, 0x18) 3m40.300375434s ago: executing program 0 (id=316): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="1a040500bbff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@delqdisc={0xec, 0x25, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffff, 0xd}, {0x2, 0xe}, {0xfff3, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xc0, 0x4, 0x78, 0x0, 0x1, 0x2, 0xa}}, {0x18, 0x2, [0x9, 0x711, 0x100, 0x0, 0x1, 0x9, 0x401, 0x6, 0x7, 0xc]}}, {{0x1c, 0x1, {0x2, 0x8, 0x5, 0xcd3d, 0x1, 0x8001, 0x0, 0x1}}, {0x6, 0x2, [0xe]}}, {{0x1c, 0x1, {0xfa, 0x1, 0x7, 0x6, 0x0, 0x9, 0x101, 0x1}}, {0x6, 0x2, [0x400]}}, {{0x1c, 0x1, {0x97, 0x1, 0xb, 0x5, 0x1, 0x0, 0x5, 0x7}}, {0x12, 0x2, [0x3, 0x3, 0x1, 0x2, 0x4, 0xfff1, 0x2]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x11, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 3m39.329575454s ago: executing program 3 (id=324): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000040)=0x1ff, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x201, 0x181801) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000100)={0x0, "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"}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 3m39.210260842s ago: executing program 3 (id=325): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x50) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ftruncate(r8, 0xff) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 3m39.081429096s ago: executing program 3 (id=326): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0xb4}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m38.980874357s ago: executing program 3 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x10000, 0x4) (async, rerun: 32) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) (async, rerun: 32) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) r1 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x40c60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) (async) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/available_schedulers\x00', 0x400, 0x0) read$msr(r2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000004c0)={@ll={0x11, 0x1, r3, 0x1, 0x0, 0x6, @remote}, {&(0x7f00000003c0)=""/145, 0x91}, &(0x7f0000000480), 0xd1}, 0xa0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x470c8, 0x0) (async) chroot(0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 3m37.420896163s ago: executing program 3 (id=342): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x3f, 0x0}) 3m36.78879084s ago: executing program 3 (id=346): socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) socket(0x10, 0x2, 0x0) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x2c, 0x18, 0x1, 0x70bd26, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "32ba630f60057a49"}, 0x7}}]}, 0x2c}}, 0x40004) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0xfffffffffffffffd, 0x0}) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='ufs\x00', 0x204001, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000002940)={0x0, 0x1, 0x4, &(0x7f0000000040)={0x1a, "1a0c1c9da4693f2542f9eb36767f98bba3d22a989366f4c06d461581326c877107"}}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='p', 0x1) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x101000, 0x0) 3m36.646561598s ago: executing program 32 (id=346): socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) socket(0x10, 0x2, 0x0) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x2c, 0x18, 0x1, 0x70bd26, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "32ba630f60057a49"}, 0x7}}]}, 0x2c}}, 0x40004) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0xfffffffffffffffd, 0x0}) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='ufs\x00', 0x204001, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000002940)={0x0, 0x1, 0x4, &(0x7f0000000040)={0x1a, "1a0c1c9da4693f2542f9eb36767f98bba3d22a989366f4c06d461581326c877107"}}) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='p', 0x1) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x101000, 0x0) 3m25.247057786s ago: executing program 33 (id=316): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="1a040500bbff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@delqdisc={0xec, 0x25, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffff, 0xd}, {0x2, 0xe}, {0xfff3, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xc0, 0x4, 0x78, 0x0, 0x1, 0x2, 0xa}}, {0x18, 0x2, [0x9, 0x711, 0x100, 0x0, 0x1, 0x9, 0x401, 0x6, 0x7, 0xc]}}, {{0x1c, 0x1, {0x2, 0x8, 0x5, 0xcd3d, 0x1, 0x8001, 0x0, 0x1}}, {0x6, 0x2, [0xe]}}, {{0x1c, 0x1, {0xfa, 0x1, 0x7, 0x6, 0x0, 0x9, 0x101, 0x1}}, {0x6, 0x2, [0x400]}}, {{0x1c, 0x1, {0x97, 0x1, 0xb, 0x5, 0x1, 0x0, 0x5, 0x7}}, {0x12, 0x2, [0x3, 0x3, 0x1, 0x2, 0x4, 0xfff1, 0x2]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x11, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 1m29.960241272s ago: executing program 5 (id=1109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x3) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4a930, 0x11800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) shutdown(r6, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x801, 0x70bd2c, 0x25dfdb00, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r10, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x1}}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x350, 0x10000) tkill(r1, 0x13) ptrace$pokeuser(0x6, r1, 0x388, 0x20000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r11, 0x111, 0x2, 0x0, 0x4) 1m29.050534858s ago: executing program 5 (id=1111): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x17c, r5, 0x10, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x164, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x20, 0x4, "7a8d983d7606eb81cff2a762c87eef45030209e011fed694d468813d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xc, 0x4, "a4afff3698f57f54"}, @ETHTOOL_A_BITSET_MASK={0xc6, 0x5, "95e05f7a83adc9d8c742cd1babc7cfbb0c866328234862b7b55bbe7c3f68fbd704054f939df1df925b04b26aefc9dbde635dd8c00324c488a1ad0adb07f87f62c94a96ec0a71589dc0cfbec77ec9365584a6201fe21709949033f4665921d43e94a9673d53360c6f90a213db7e18382199393895760924c85c6188f5c7a2638e12b977b1230c3b6803a5887f764837e38c3abc8fc4e160c9bc3303997c3783ab8bd4c10bdc199bd75c8d0c08e73a5332b310dc2033c99f518cb59c9d7a6ab22bfca6"}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x17c}}, 0x804) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xfffffff2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f00000000c0)) getsockopt$sock_int(r2, 0x1, 0x28, 0x0, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1m28.840581197s ago: executing program 5 (id=1112): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000000, 0xe0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x721040, 0x1, 0x6}, 0x18) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x60) r1 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x10001, 0x101102) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000240)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/video4linux/video0/name\x00', 0x0, 0x0) read(r3, &(0x7f0000000700), 0x40) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fff6ffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0xc0000, 0x0) r7 = accept4$tipc(r6, &(0x7f0000000040)=@name, &(0x7f0000000300)=0x10, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000340), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018500000000400000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x10, 0x2000}, 0x94) 1m28.646728545s ago: executing program 5 (id=1113): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x1b68, &(0x7f0000000280)={0x0, 0x0, 0x400, 0x2, 0x96}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000540)=0x40d, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r6, r5, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r8, 0xaea2, 0x3000000000000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$inet6(0xa, 0x6, 0x6) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)="140b8cb647", 0x5}], 0x1}}], 0x1, 0x20008000) recvmsg(r9, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r9, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4880) fcntl$getflags(r10, 0x408) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write$sysctl(r11, &(0x7f0000000180)='7\x00', 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r12) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000003ea2ba8b2b1e8c231529ea56f6c4a40cca7ace306a64ff3d7c5c6fd85a47c97b36453425b56ac67b252d0f474cca6030ee7d8dc892515589fa071b4479cbd6fd7499170d304c0edf35b512b04dc95c3835ff00566b72dfa06f201030cee4ad1055b30b4c7e99145125594a9bbb5d9d87a11e9570b39d084f17670a87091173188726b8a4def143f506f105498069006c4b7ce7375a0ce247de2fd3bc89d7f122009ea31186", @ANYRES16=r13, @ANYBLOB="110228bd7000000000002b00000008000300", @ANYRES32=r14, @ANYBLOB="0a0034000101010101010000080026006c09000008002700020000000800a00004000000"], 0x40}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r11, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d40007005068b9eadb7bdf29ea076154500d4e55d5c7ce6c140dc19c53eb", @ANYRES16=r13, @ANYBLOB="000429bd7000fddbdf254f00000034007a80240001007dcd33e438b302faf8fbe3d014a6d0905f3924962b73b09a285ef32f84f2fe7b0c000300abd1aba64807e70e8c007a8024000100bd6292e8cee327a2e310e86ac62e0bbf23b6f8707300452a8f71c5119641486f0c00030021310c425bdcd4fd08000400000000002400010097b061417fbe881ed275d409ffba3a5730f21240a106299a4e32a6c51a58b74d24000100065650b772eb15964dc2b239a42d7d93356d763e59bacb9ff3c681ec49d6d8f808000400f6000000"], 0xd4}, 0x1, 0x0, 0x0, 0x24040091}, 0x20000010) 1m28.189644405s ago: executing program 5 (id=1117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x20001, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='+1', 0x2) (async, rerun: 32) mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='./binfmt/file0\x00', &(0x7f0000000140)='gfs2\x00', 0x848042, 0x0) (async, rerun: 32) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async, rerun: 64) r1 = io_uring_setup(0x47b8, &(0x7f0000000640)={0x0, 0xcd01, 0x2, 0x0, 0x1c2}) (rerun: 64) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000001d40)={0x1, 0x0, 0x0, &(0x7f0000001c80)=[{0x0}], &(0x7f0000001d00)}, 0x20) (async, rerun: 64) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20000, 0x0) (rerun: 64) ioctl$COMEDI_CMDTEST(r2, 0x8050640a, &(0x7f0000000200)={0x1, 0x40, 0xffffffff, 0x7ff, 0x100, 0x10000001, 0x2, 0xe, 0x2, 0xb, 0x4, 0x107, 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m27.91353528s ago: executing program 5 (id=1120): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) fcntl$setstatus(r2, 0x4, 0x2000) shutdown(r2, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 1m12.528603932s ago: executing program 34 (id=1120): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r0, 0x100000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) fcntl$setstatus(r2, 0x4, 0x2000) shutdown(r2, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 52.059991361s ago: executing program 4 (id=1329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newnexthop={0x38, 0x68, 0x405, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1234567812345678}}]}, 0x38}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 51.856928435s ago: executing program 4 (id=1332): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000940)=[0x138d, 0x3ff, 0x9, 0x1, 0xb, 0x1, 0x1, 0xf97, 0x6, 0x4, 0x5d, 0x6, 0x637, 0x0, 0x2], 0x1, 0x4000003}) 51.664563506s ago: executing program 4 (id=1334): r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) write$selinux_user(r1, &(0x7f0000000340)={'/usr/sbin/cupsd', 0x20, 'sysadm_u\x00'}, 0x19) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000200)={0xdf, 0x0, 0xc000}) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000300)) 51.480256421s ago: executing program 4 (id=1337): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8, 0x2) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000500)={0x1, r0}) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x0, 0x0, 0x9, 0x5, 0xf6, "3d9f631898d262a9e4c6bc77b9f4e4ef469e5b91e80503d7ac6ae8124b1ab71a02e3dff84b9aeab7edac00aa8e6bbade9201ae5db1197f271d2152fc2eaefd88af99bb563330d4a7dc402443d469f9ea37e47f5e83f17be4947d35d7052c5e3a5aebcd02603935077f82c8b9f1d93951920c6dbf40e5a59daea075cf150fe6b5a9ac1ef4c868c11018ea18c06ef5e85a1ac1205286b5afecd86bc2c7dfce1ee995e5c69470911aecb78bed771d79f4ef77afb3a963bb752605b4a72f48a6a6709a62edc3d94e0a9a1d688e3c29b39b80063265d12f4df5fa0614fd8441b5d551b741150a2dd501223ed9e8acfc2a3fd597fac63515e4"}, 0xff, 0x1) statfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/233) umount2(&(0x7f0000000300)='./file0\x00', 0xc) (async) umount2(&(0x7f0000000300)='./file0\x00', 0xc) r1 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0/../file0\x00', 0x89901) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x4, 0x5}}, './file0/../file0\x00'}) 51.21842471s ago: executing program 4 (id=1340): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000a00)={r4, r2, r3, 0x3, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20003, 0x12}) 50.469516063s ago: executing program 4 (id=1345): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="287f305d9e00"/20, @ANYRES32=0x0, @ANYBLOB="fffe01000100000008001b0000000000"], 0x28}}, 0x0) 50.233421544s ago: executing program 35 (id=1345): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="287f305d9e00"/20, @ANYRES32=0x0, @ANYBLOB="fffe01000100000008001b0000000000"], 0x28}}, 0x0) 21.36036237s ago: executing program 2 (id=1557): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0xd114, 0x10000, 0x0, 0x125}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 21.240374582s ago: executing program 2 (id=1558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/22, 0x16}, 0x9}], 0x1, 0x40010102, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x7}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r4, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000240)) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000300)={0x2, {{0xa, 0x4e22, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x23}, 0xe}}}, 0x88) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000140)="32ab51b31b2c6a9693929b1c39e08fb222b5779c0a1e1a6954e0cf765a8cd431bc3e92a5bc43af34a6fa67ac573939203751df1a8163208ad6ce8ce3ec54ac5bdf05952945d85bd096cd", 0x4a}, {&(0x7f00000004c0)="c4c68e26f520994eabb679d413357a032267e534373c8282b697dc9ad10f49ff90b619284ca32348f4e117150c5ba9fb9e2b42c40836a04c5b13057795536ae1328c31f7a21ee30214995abc675ce9f6dbbe174508356b3e1a156c39d51a3ebdebb626dc2ad7f34a4669523925c7986c942b7199ea2d681eaf19ec21659687a65b48ed4fd3665b171e80c2e8d7f0273048c9c79610844f2e9f5594a083870a83df074a7fc36f69d1deca6f6efcba04bd43a0bf4d7a4e", 0xb6}, {&(0x7f0000000580)="7d71d2c3f30a92cb94164935f706ab9ebb9bd7ed344477898339263ef728bb19d4f19a423af1acc31fc1f791bf8a1c5b697e673c587d96aed298cfb421ba044fa7045b2d7ba068b7d044ba1a24aa71dcbe5ce804bce26fd2c772720e6846018cfa793067e0b0530b3a9f4b313fe6e30faaebb37cb8ee61c5824cd96045f75ba4dfc1a32cb1b4cbddc0f67174f339994e3986924eca18fed79ca729717a9c1807cf8388c656a467af6294487309", 0xad}, {&(0x7f0000000640)="30d915592d54182ffed99d6183553199c7a0a7dfcc8736e986d98d7041b6835dcee2a42776514a959274ed5c6ed7c63387bf87a2b9ab083364f06c889476f5f7a749fb23bb777346ee4a0fb8d45686bc2bf385c32fd6f5a0ab4a83b2609e2211c6bca5a5c58040ebcc", 0x69}, {&(0x7f00000007c0)="b9e864ca58ec994586253dab699747dcb869e5ec560f6da412231572345f008a0694692a70585a4f299cbb0f611bf569b625a46d52844ab1da41ab580102ef0bce3fd7dc7252ef8320f5c2fe84ea27eaab73641bf54f5900de3b3d283df6deddd6fc29924351e61a2910289ae5ba9db97ac75b7b2eb690300f9e087738a0fc079e3811f41ecf5394f881ddc465c39c490bc947ce80a396be405ac7cf9497cb85f68b6dd846cbaa24a22de5ce4926264084cc4912b1dcad0288c825622b4ae1c3118e1296634577f7915784d6c789160c4071eb608d4327e48caf86c74ba9f8a1f3d2910b64e01e166278622a6ccb75e7ac1f9df00f64184c", 0xf8}], 0x5) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r5, 0x0, 0x6, 0x1) 21.020062554s ago: executing program 2 (id=1560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x154}}, 0x8044) 20.800600205s ago: executing program 2 (id=1562): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfd}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x640100fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x5d2c7973c7bf8b01}, 0x20000050) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfd}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x640100fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x5d2c7973c7bf8b01}, 0x20000050) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f00000084c0)={0xa, 0x4e21, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x24040040) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x1003, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, &(0x7f0000000100)=0x9c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) syz_io_uring_setup(0x4582, &(0x7f00000003c0)={0x0, 0x6ce3, 0x8, 0x0, 0x2a5}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) (async) r3 = syz_io_uring_setup(0x4582, &(0x7f00000003c0)={0x0, 0x6ce3, 0x8, 0x0, 0x2a5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_SEND_ZC={0x2f, 0x3c, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x20058041}) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') chdir(&(0x7f0000000000)='./file0\x00') (async) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x800, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') (async) pivot_root(&(0x7f0000000140)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) shutdown(0xffffffffffffffff, 0x1) (async) shutdown(0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r7, &(0x7f0000000040)='add syz0 ::', 0xb) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x2, 0x10000, 0x1000, &(0x7f0000017000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x2, 0x10000, 0x1000, &(0x7f0000017000/0x1000)=nil}) 20.547189633s ago: executing program 2 (id=1566): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000580)=0x79, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="6900100000000099947ccc310000d4ee65a900000054842cf52300000000009352f99e00d85e0e", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0x5, 0x8202, 0xa, 0x0, r3}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x3ae, &(0x7f0000000cc0)={{0x12, 0x1, 0x310, 0xc9, 0x74, 0x53, 0x20, 0x16d0, 0xf30, 0x7a89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39c, 0x1, 0x0, 0xd8, 0x20, 0x10, "", [{{0x9, 0x4, 0x0, 0x3, 0xc, 0x7c, 0xdf, 0xb0, 0xa, [@generic={0x80, 0xc, "a7238fc666c355798761c032f0344ed35c2cc5598394507524d152f3189dbefe8d5068b318460dded92bb077887eaf521b90b7f4cc2072e74a8bf09b5c374849c38b6c450ab336e20ca915a7b017488c271e5083c6c0fd0813a1638b1d46a043066e408cbd766a2142cc72ba8c548daf4a07a41917421a728f0ac9e9c3c8"}], [{{0x9, 0x5, 0xd, 0x1, 0x400, 0x4, 0xef, 0x7}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x3, 0x6, 0x7, [@generic={0x6e, 0x31, "628194a19093f8fe1376d2c85abd205ade8ec2da043f988987c79d549fea84b18a659523dbdb753d662b824d94ef873a7f49ef73156905f0bdca6dd01fe9f00bc95f3e2376bda131f3da521135dcda54c9d4b47c76877a20603a8a6c6980e1a8e2d5623cb9a9053ca42653ac"}]}}, {{0x9, 0x5, 0x80, 0x13, 0x400, 0x9, 0x6, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0x9}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x26, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x380}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0xcd, 0x1, 0x9, [@generic={0x7c, 0x3, "28226643ca95514dfbc6d13b44c26f31ff367962accfeb9dd73ebb3faf2d60da606df3dc2ba24ff5fbeff21c96c9acf8cacbd2b416521320cd77c61444a21e185dd1e39096f16f6a37f6fb37e9ff821181236a82bf4ed8e028d138999e29dd20d4d5c5968f4ae37750e5d46aa0e250391e0b6d5aebd8b3522c13"}, @generic={0x19, 0x31, "717de8e2e298dd24f791a90ef7fa373cb55fa62f2a415e"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x2f7, 0x2, 0x7, 0x6, [@generic={0x7f, 0xa, "ea1f3dcde96d492bf9292e4cf677ad8d8ae8e2a2d7e0b955b3dcfead16199d1aac557d063998119b6ee15488529c6ff35503d89bf2c3a3b18f4fceeb64d55d4c0869192da2e36ac106f0601fe19df4961b1a698ff30fd8419b17fc43642e0c482c281f2120e2c02be86922b6a0eb470da55671dd53af1d60a47a819f31"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3df, 0xc, 0x40, 0x81, [@generic={0x7d, 0xc, "cc310b3f6c0fe9e9d1c44e88105e17b645837116038a8a7a7e114419bba271c335f4ceb9fe4c5a7dc27370bfb6d5bfe0ba97aadecc59886d4e224850ea59f8f59d15be8748d6e94f8151e579cad17cf8ee7bf224d8f0896be9f6695b3dccd616e467f33eb090a2ede9ae7dcdc1356da118186cc4e03f32f9867327"}, @generic={0x7c, 0xe, "49159b642da0f7cd15bfc0f56db6648b090efcbbdabf4af3ae5e6889343f11c71b30c3295d0e473cc225be1094ec95d4f9c58203b637358cb2546194c1822cf376a6ffda375e2eee4d6c06ecbd36f6418f67edfb52bb01d48e13ba45e1b408adcb58871862d95fe110349477f55abffe962f5b1885a9c1938f23"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xbe, 0x1, 0x6}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x9, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x96}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x7, 0x3}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x2, 0x5, 0x8}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xae, 0x4, 0x29, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1}]}}]}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x250, 0x8, 0x6, 0x6, 0x8, 0x80}, 0x3d, &(0x7f00000010c0)={0x5, 0xf, 0x3d, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x6, 0x8}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "aec3481f523a7fc3ad282a9210c34ef1"}, @ss_container_id={0x14, 0x10, 0x4, 0x99, "b2ef1e43e58d1e1330ffed00d50edbd3"}, @ptm_cap={0x3}]}, 0x8, [{0x4a, &(0x7f0000001100)=@string={0x4a, 0x3, "79627c10633cc127bf6a0e94bab95f37a20e63683cccad094d5e5819f261021f075f0d39a50553ce4cfc10c541f5bfcd9c6e40668bd24310e534710d782d66a1dbd28bffd7286db1"}}, {0x75, &(0x7f0000001180)=ANY=[@ANYBLOB="75033091fa706dae897e5ecb7dff0fe1ad7d7b89372ad776f3e7783bd17d429e4d4d2f6352259fbf672698c93dfc24b70366a6470def67957be1bdcaee118def5483addb46ba8f402b67d7d0040a5569a77464b2ea9318ea0b785f2bb9366beab12a587c0d4947c800"/117]}, {0x7, &(0x7f00000014c0)=ANY=[@ANYBLOB="0723c97502df49ebed4b9233d530705722420dfb286b14537c650a2e99fbeb29aed2c4f2586e8060635af5e50d4b35e356313f00d605e0a32303cbf6831863512024ff70aafdbc0f2afee88b813d5619b0557b6a460ab39b6673d090410babf7026f123d4a4bf6583f6aa739bf016d76f04af0b3373349c386f35a03a185609342bb454fe76cf2687846c9757c9960a647369e84bbb0eaf069b5bf40d1a8d95b402306ee6ee532847ef1798e5fd30ac69cd811ab63111b72b52e4677b479babe83524960f4726a"]}, {0x12, &(0x7f0000001240)=ANY=[@ANYBLOB="126b3e67656ef75a6b4ba2eca5455f11e966"]}, {0xfd, &(0x7f0000001280)=@string={0xfd, 0x3, "8ffca481bebc1628e4bd1474a9bed5e92958595852f0341c12ba8b8cf94b8f2edc4d4115c791bb41e5b00d62a9cc1e7ee5f1507c6ca01f16428512e75004e8c34a4d00418143b8171888915e378c08cecd3428bc914220d4327d47c4e51f4b5fd47b5ebab532e43a2e7689697a72b4278ff9659462164202aff35cda2719008a6ca6071d122c185298476c71830766a5a43322162d840a019871ce39f959759b33df64bc4229ba1c5de5178778a2ae382690cfd96033b0c1d67dd55bc6f31b02dac9eab49f0e326e66318be8dfc44ff8ba3737bdcf3f57dbb507fd921524018d83fe8ac37c00bef6d3f6c71fdfeb3cbe9acc4fe3b9ac647b36f20a"}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x1c09}}]}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0293f8f18258f385bc00000004000400000000001000000000000000200005e8ff000000"], 0x24, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000500)={'veth1_vlan\x00', 0xa12}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0xf, 0x7fff8001}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000002a80)={[0x12e8, 0x9, 0x88fd, 0xffffffffffffffff, 0x2, 0x8000003fe, 0x4002004c4, 0x1000, 0x8, 0x97, 0xf, 0x4, 0x9, 0x2, 0x1, 0x2000000000008], 0xeeee7ffb, 0x514}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) rmdir(&(0x7f0000000000)='./file0\x00') sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="50393ff9474e2916b380d217f2d5d7ac756480dc2a0d34a4833231390d4db9200df3be9f079a381bac847c1d7bdfa86833e16a51333b0fa5c89e934dd9edf8aeb88e8d5bd16e2595be9246ea1045bc4d7eed12156c27458bb71e1cc75eb3011ebc6895e04bdb753a55", 0x69}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d7e91860880", 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="c70500000000000000f7c585f94c1fe171a814289069dc3179a2734303c95b5302f8e6f170433992940b2484592b8734ad594650dfab24bb7e97c6a91183e7976b1c6012829ff4a1e64335bafb812802531ef69535cbcacc5ef1d10283b7624c5a1a823812c54668fb33b9620298927f1821c872f1dc5901322edcdf63ecbb1053d277be4e9695a564e16a51c0a5746ab750905a584a8269fd250171e1b3e5e10d7d464aa1bb7a63e36ed7df680e7dbc623e6101faed8b456a71162706d2418500000000", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c92678147923ab3f54170671e0918c5d3fa46915208ec9191578240878db51753dbc15f7852f7e1614e75c90c1a0440a4cb3df109e647bf01db4200", 0x7c}, {&(0x7f0000000700)="73347c742785f90aa563b4c01785f8371c6c153843eb25bce2d86628414138f6d3eb90c44817fbcc958e331db94a8d1119eefe09b541e73e4789594b627b7ba94f6c14265df07f", 0x47}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)="91ca950729ebf29f5a41cc90a5065840ec8f54b43d8bd82722416e3c2450aaee884dd371267a17136253266e9eeda602b8d4e12bdd7853c5983e", 0x3a}, {&(0x7f0000000840)="ab65faa98379b3ed763097c555c7d8a8eef38de8f453a57cf07384460b8062f874f81ed4234c94554df2f82d2c99e848be9abd5a338b35aa8bc73eef282c18baa83cb943722f22cbbc6be82cd9cd11c287392bc2ad", 0x55}, {&(0x7f0000000a40)="f1224bee5303d70f916d929c27b8f99efa1a1d37a7e826e39670ea91a7eb14ae8eb94ca33ea995dae5f216341221a36e03ca9da27cfe011bba58924d69fba229da90a40651d9bb2d7d7837770bae752783f4b2c8b4cb8a777fb7ecf766ab91c5fdb501913393972e8915e32d45453b3a8b9ee1bf1c19518ed1a661e437fe485a7d0ea46175294d69e3c6c8e49e01dc390460ce402b21208711acfc5a", 0x9c}], 0x3}}], 0x5, 0x2090) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000004c0)=0x400, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000540)) accept4$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, &(0x7f0000000480)=0x10, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) 20.219044309s ago: executing program 2 (id=1572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00008aa000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x101, 0xfffffffffffffffd, 0xffffffffffffffff, 0x100007, 0x80000001000, 0x0, 0x8000000001004, 0xe3, 0xfffffffffffffff9, 0xe, 0xffffffffffff0001, 0x4000002373, 0x80000000008bd9, 0xd8, 0x7f, 0x20], 0x25000, 0x386343}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r3, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) ioctl$CDROMSTART(r3, 0x5308) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.124780636s ago: executing program 36 (id=1572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f00008aa000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x101, 0xfffffffffffffffd, 0xffffffffffffffff, 0x100007, 0x80000001000, 0x0, 0x8000000001004, 0xe3, 0xfffffffffffffff9, 0xe, 0xffffffffffff0001, 0x4000002373, 0x80000000008bd9, 0xd8, 0x7f, 0x20], 0x25000, 0x386343}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r3, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) ioctl$CDROMSTART(r3, 0x5308) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.369048803s ago: executing program 1 (id=1700): fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x1) (async) fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x1) fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) (async) fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) (async) r0 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='source\x00$|\xb5\xb0\xfb\xe6\n\x10!:`\x88\x06\xd0s\xc2\x94\xb7{\f\xc4\xc9c\ay\xac\xc9\xc1\xa9\xc7a\nt1\x9e\x06\xa36\xcf\x84\xaec\xee\xa8\x02\xd9\xe9\x93\xa7\xa0\xff\x16\x1f\xc0\x12\xe3\xa1\xe5\x1dj\xc4\x85\xa7x\x1d\xc5\x05\xef\xd6\x96g\xe7\xa7U', &(0x7f0000000340)='127.0.0.1:/\x00A\xbb-\xbbT\x14\xa6\x0f\xb0\x86-\x90\xc5\xb5\x853p\x8be\x15\xf2\xa85\x03\x95\xf9Bf\xbb\x9c\x19\xa5\xb4\x87s\xb2\x99\x1an\xd0\xd8\xfb\xff\xff\xffQ\x10A\x82\xf6\xd9\x1e\\\n\xfe}23=\xd049)\xd6H\xb8\x80\x83\xcf\xcb\x91\x99\xc7\xd0Ly\xc9\xf2b\xbd\x0e\xca\xc36\x18_]/X\x80\x8c\x1e\xadq\x93u\xcdW\x19JT\xc4th\x00S+\xeb!\x80c\xddizQd\xcd\x13XB\x98\t\xac\xe0\xa6P\xdd$\x1e<\x81\x88\x1fphaCe!\x8e\xfd\xb0\x89\x86\x13\x9aZv\xb2\x976\xf7\xdd\xf3\xd3', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r1, 0x127c, &(0x7f0000000240)={0x0, 0x1000000}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) socket(0x40000000015, 0x5, 0x0) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x1, @rand_addr=' \x01\x00', 0xff}, 0x1c) bind$l2tp6(r2, &(0x7f0000001540)={0xa, 0x0, 0xc2da, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8001, 0x4}, 0x20) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x400028, 0x0, @tid=r3}, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x400028, 0x0, @tid=r3}, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x2c, 0x41, 0x107, 0xfffffffe, 0x1, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x12}]}, @typed={0x8, 0x8f, 0x0, 0x0, @u32=0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 2.25988794s ago: executing program 6 (id=1701): r0 = socket$netlink(0x10, 0x3, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x38, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ba619e05b9"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4800) r4 = socket(0x10, 0x803, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, 0x0, &(0x7f00000021c0)) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x140, 0x30, 0x800, 0x0, 0x0, {}, [{0x12c, 0x1, [@m_skbedit={0x128, 0x8, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x7, 0x20000000, 0x81, 0x1}}]}, {0xd1, 0x6, "0e8d54668a17c783386b918c602aa6e9cb96dc4aa4c3fc7d98acc34aed7c14acbf2eb2c86e59c286caefae330d3b1472e14935dcf696c611ab47c6a84445eff0f3e6763d7a950aa5e29989f3e6fc58c10f425c465ec2b223d5bbf53e31c16d3c13012e2d936c0041e0e8ef59f04c36701f19a4ff9fb7f9e7a01e411564894d835ae663a5cab203813f6cf20dcfbf449f18bdabcdbc3fd71f2a47984c7ca1a458caab35f9f1efbca875c2115a8ee1c7454f45e262e17459cac7e13f182baa9ec1ca435fbadcda26b686e2ba69bd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x44040c81}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x6) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="7518a21a4bb7b858b58217c800bb6d62bfc5f947beeef8982c611d9c7c", @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4004005}, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'bond_slave_1\x00'}}, 0x1e) sendmmsg(r7, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000040)) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x6, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0x5000, 0xb000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x0, 0xa0, 0x2, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcb, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0x10000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0xf000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r11, &(0x7f0000000040)='add syz0 127.0.0.1:', 0x13) syz_open_dev$dri(&(0x7f00000000c0), 0xeaf8, 0xcf302c82d5ca1be1) 2.259383006s ago: executing program 8 (id=1702): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x202, 0x1000, @empty}, 0x1c) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e1f, 0x2200005, @local, 0x1}, 0x1c) setns(0xc9, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000600)={0x44, r4, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x28c}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f00000000c0)='2\x00', 0x2) (async) listen(r2, 0x4) 2.159607451s ago: executing program 1 (id=1703): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) (async) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1600000056000106000000000000000007"], 0x20}], 0x1}, 0x4884) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) write$nbd(r2, &(0x7f0000000200)={0x67446698, 0x0, 0x4, 0x4, 0x1}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) (async) sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) (async) sendmsg$inet_sctp(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000480)="8722", 0x2}], 0x1, 0x0, 0x0, 0x80}, 0x4048000) (async) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x2c, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000003c0)={0x4, 0x8, 0xfa00, {r5, 0x8}}, 0x10) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @remote}, r8}, 0x14) (async) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 2.018707119s ago: executing program 8 (id=1705): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@remote, 0x1, 0x0, 0x40, 0x0, [{@remote}, {@empty}, {}, {}]}}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) ioctl$COMEDI_LOCK(r0, 0x6405) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000140)={0x1, 0x7, 0x2, 0x7, 0x3, 0x0, [{0x4, 0x6, 0xc9e, '\x00', 0x2000}, {0xd, 0xd978, 0x2, '\x00', 0x2001}, {0x4, 0x3, 0x14ba, '\x00', 0x408}]}) syz_open_dev$video(&(0x7f0000000240), 0x2, 0x82000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x300, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10008021}, 0x4000000) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000003c0)={'veth0_vlan\x00', {0x2, 0x4e21, @remote}}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x5, [@union={0xc, 0x1, 0x0, 0x5, 0x0, 0x5, [{0xc, 0x2, 0xbbe}]}, @const, @restrict={0xb, 0x0, 0x0, 0xb, 0x5}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x2e, 0x61]}}, &(0x7f00000004c0)=""/188, 0x59, 0xbc, 0x1, 0x40000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x5, '\x00', 0x0, r4, 0x1, 0x3, 0x2}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000640)={@empty, 0x0, 0x0, 0x10, 0x0, [{@multicast2}]}}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000780)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r6, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000800)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000840)=0x2c) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000880)={r7, 0x1, 0x9, 0x4, 0x0, [], [0x2, 0x7, 0x6, 0x4], [0xf, 0x7fff, 0x7, 0x50cd], [0x3ff, 0x3, 0x15c, 0x4ac]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000a00)={&(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x7, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000b40)={&(0x7f0000000a40)=[0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0], 0x1, 0x3, 0xa, 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000c00)={0x0, r6, r7, 0x0, 0x0, 0x3, &(0x7f0000000bc0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000c40)={&(0x7f0000000b80)=[0x0, r8, r9], 0x3, r10, r7, 0x7, 0x9, 0xa0, 0x5, {0x80000000, 0x10, 0x8000, 0x669c, 0x8000, 0x7f, 0x832d, 0x6, 0x0, 0x80, 0x8, 0x7, 0x40, 0x3, "dca4479b12f5eda19232fc76c031dc5284f4dea07c83485ca548c76d600ff2a0"}}) openat2(r0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x8f8d9bb8ce1e6b06, 0x4, 0x4}, 0x18) ioctl$UBLK_U_CMD_START_DEV(r1, 0xc0207506, &(0x7f0000002ec0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) getresuid(&(0x7f00000030c0), &(0x7f0000003100), &(0x7f0000003140)=0x0) fstat(r0, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000003280)='./file0\x00', &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getegid() syz_fuse_handle_req(r2, &(0x7f0000000d40)="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", 0x2000, &(0x7f0000003e80)={&(0x7f0000002d40)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x7, 0x8, 0x7, 0x7f, 0x100, 0x5, 0x0, 0x0, 0x8, 0xfffffffe}}, &(0x7f0000002dc0)={0x18, 0xfffffffffffffff5, 0x7fffffffffffffff, {0xffff}}, &(0x7f0000002e00)={0x18, 0x0, 0x9af4, {0x5}}, &(0x7f0000002e40)={0x18, 0x0, 0xb4, {0x101}}, &(0x7f0000002e80)={0x18, 0x0, 0x0, {0xb}}, &(0x7f0000002f40)={0x28, 0x0, 0x4, {{0xfff, 0x704, 0x0, r11}}}, &(0x7f0000002f80)={0x60, 0x0, 0x2, {{0x9, 0x9, 0x7ec, 0x7, 0x4, 0xffffffff, 0x1, 0x5}}}, &(0x7f0000003000)={0x18, 0x0, 0x7, {0x1}}, &(0x7f0000003040)={0x1c, 0x0, 0x9, {'/dev/video#\x00'}}, &(0x7f0000003080)={0x20, 0x0, 0x1, {0x0, 0xb}}, &(0x7f0000003200)={0x78, 0x0, 0x86e, {0xb, 0xde3, 0x0, {0x1, 0x10, 0x8, 0x80000001, 0x3, 0x19, 0x800, 0x8, 0xa18, 0x8000, 0x9, r12, r13, 0x6, 0x7f}}}, &(0x7f0000003340)={0x90, 0xfffffffffffffff5, 0x53, {0x2, 0x3, 0x6, 0x400, 0x0, 0x4, {0x4, 0x4, 0x1000, 0x40, 0x4, 0x7fffffff, 0x5, 0x2, 0x101, 0x8000, 0x8, r14, r15, 0x4, 0x7}}}, &(0x7f0000003400)={0x70, 0xfffffffffffffff5, 0x7335cb2a, [{0x4, 0xfff, 0x0, 0xc0b3fcd}, {0x3, 0x180000000, 0x2, 0x1, '$-'}, {0x5, 0x1, 0xa, 0x7, '^^\xe4{!$[^\x88^'}]}, &(0x7f0000003800)={0x210, 0x8e1e8311a2dfa8e5, 0x1ff, [{{0x4, 0x0, 0x6d, 0x9, 0x8, 0xe, {0x0, 0x2, 0x9, 0x965d, 0x3d4379fa, 0x7, 0xfffffff9, 0x804, 0x3f2, 0xc000, 0x1000, 0x0, 0x0, 0x8000, 0x7f}}, {0x0, 0xffffffff7fffffff, 0x30, 0x401, '/sys/kernel/debug/binder/failed_transaction_log\x00'}}, {{0x0, 0x3, 0x8, 0x7, 0x156, 0x4, {0x5, 0x1403, 0x4, 0x9, 0x400, 0x8, 0xe, 0x1000, 0x0, 0x8000, 0x80, 0x0, 0x0, 0xfff, 0xc151}}, {0x6, 0x3, 0x2, 0x40, '/-'}}, {{0x3, 0x2, 0x2, 0x4, 0x5d0, 0x6, {0x2, 0x4, 0x6, 0x3, 0x9, 0x5, 0x9e3, 0xc4f, 0x7, 0xc000, 0x8001, 0x0, 0x0, 0x9, 0x9}}, {0x5, 0x1ff, 0x0, 0x9}}]}, &(0x7f0000003c40)={0xa0, 0x0, 0x5, {{0x1, 0x0, 0x9, 0x7, 0x8, 0x6, {0x1, 0xfffffffffffffffc, 0xa, 0x4, 0x0, 0x7, 0x6, 0x2, 0x2, 0x8000, 0x8, 0x0, 0x0, 0x2, 0x9}}, {0x0, 0x4}}}, &(0x7f0000003d00)={0x20, 0x0, 0xfffffffffffffffa, {0x9, 0x0, 0x7, 0x6ee3}}, &(0x7f0000003d40)={0x130, 0x0, 0xff, {0xc, 0x76, 0x0, '\x00', {0x4000, 0x0, 0x481c, 0xec4, 0x0, 0x0, 0x6000, '\x00', 0x6, 0x6, 0x7ff, 0x8000000000000000, {0x9, 0xc}, {0x6, 0x6}, {0xffffffff, 0x3}, {0x1, 0x3}, 0x7fffffff, 0x3, 0x8, 0x2}}}}) 1.939390576s ago: executing program 1 (id=1706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x154}}, 0x8044) 1.826961387s ago: executing program 6 (id=1708): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x81c0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bond0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) 1.760424373s ago: executing program 8 (id=1709): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x109d02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x140, r5, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d0db7828f7065867fc3222038bac2c578fb729e3363c5dd7"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "93c89f7c2e2c6efa51b91916d70a6f7d66dcd9bbc6825b63"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f3b578aec5d21a68cc8ae8ca726cd893c2339acd12323e9c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "24c1b99280a1439d660e27f07d1a306100f38d0e682fd851"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x140}}, 0x4000850) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd010001000000080001"], 0x18}}, 0x20004018) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000080)) 1.760143357s ago: executing program 1 (id=1710): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x202) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1.648949073s ago: executing program 6 (id=1711): r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x400) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000000140)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000005c00)=""/241, 0xf1}], 0x7}}], 0x1, 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x1, 0x0) write$cgroup_pid(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.417691541s ago: executing program 8 (id=1712): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1e00, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 16) 1.333972704s ago: executing program 6 (id=1713): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x3) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0}) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], 0x0, 0x2) semop(0x0, &(0x7f0000000240)=[{0x1, 0x3, 0x800}, {0x0, 0x80, 0x1000}, {0x0, 0x3}, {0x3, 0xfff9, 0x1000}, {0x0, 0x5, 0x800}, {0x2, 0xc7d}], 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4008, r3}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200027bdf534e55d71383d7822cf4d497000fddb", @ANYRES32=0x0, @ANYBLOB="224000000100000008001b000200000014002b8008000800", @ANYRES32=r4, @ANYBLOB="080003000b000000"], 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) 1.322757044s ago: executing program 8 (id=1714): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000a99000/0x400000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)={0x18, 0x40, 0x107, 0x70ad2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x2fc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0x60000, 0x2000, 0x8}) 989.746014ms ago: executing program 8 (id=1715): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'geneve0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "088faeae71cb2c8016ce5a26dd57c8e3b85de050ad1065e1247fbdd7b48a2cad", "faa4a2190f2056f3dd98242c2765ebd4628d27b3a438bb2c3942914d8fc252bd", "56b1e81bca36bfb15636d23a08b57c399ad0be96573c8a040b6ca0ee92a61519", "f11944190968857758729f09206d229d45de48ab6da2f85bfcd59e046c65c4c3", "b81ed2ff398d4d079510c21b16f048516ac785fd228f4f85015fe9f272d7de5b", "99a40c1bddc8b91781d9bc15", 0x1ff, 0xc3e, 0x6b9, 0x3}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x150, 0x7, 0x1, 0x2, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xc9, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0xfa, 0x1, 0x0, 0x0, 0x0, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x250, 0x4, 0x9d, 0x10}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x8, 0x6, 0x3, 0x8, 0x7}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41c}}]}) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) mkdir(&(0x7f0000000640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000002900)={0x1, @sliced={0x1, [0x5, 0x2, 0x1000, 0x0, 0x931, 0x6, 0x5, 0xb44, 0x0, 0x4, 0x0, 0x2a2d, 0x3, 0xc2, 0x7, 0x1, 0x24bb, 0x75e1, 0x9, 0x5a, 0x400, 0x0, 0x1, 0xdc, 0x5, 0x2, 0x2, 0x5, 0xb, 0x3, 0xe8, 0x7, 0x168d, 0x8, 0xfff, 0x8001, 0x0, 0x4, 0x1, 0x401, 0x7, 0x6, 0x2, 0x0, 0x5, 0x7ff, 0x4], 0x5}}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) chdir(&(0x7f0000001640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, 0xfffffffffffffffc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2000007}]}}]}, 0x40}}, 0x4000010) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) readlinkat(r6, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)=""/41, 0x29) 989.539343ms ago: executing program 6 (id=1716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='v', 0x1}], 0x1, 0x66, 0x0) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800030022d982ea4b115b15bad24912172706bc54618e23733905e904e82afe59e4d88d521a45b3ca99c1933351ad9519823be1bf7d04bdd58772c8659ca6e3f2d6265496d98d3ec2baf7c1db49c44539efdad9da886b796c94f0686c8b55f02c1d662bad00002d7f8cc55664c4efc6b9cb8105ee09e10d699b8d91a1a9a44c02ebbeeb3573c6794b37c8", @ANYRES8=r3, @ANYBLOB="000004000008"], 0x24}}, 0x0) 829.265778ms ago: executing program 7 (id=1717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 740.271384ms ago: executing program 1 (id=1718): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x70bd29, 0x2, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x22004014}, 0x40080c0) write$binfmt_elf64(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10, 0x3, 0x1, 0x4, 0x3, 0x3e, 0xfffffff7, 0x1db, 0x40, 0x1c2, 0x0, 0x6, 0x38, 0x1, 0x74, 0x8, 0x104}, [{0x6474e551, 0x3, 0x9, 0x3, 0x808000000000006, 0xffffffff, 0xfffffffeffffffff, 0x2}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x978) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x7}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x3}) close(r0) r3 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0xc2141) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0385720, &(0x7f0000000000)={0x1}) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x70bd29, 0x2, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x22004014}, 0x40080c0) (async) write$binfmt_elf64(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x10, 0x3, 0x1, 0x4, 0x3, 0x3e, 0xfffffff7, 0x1db, 0x40, 0x1c2, 0x0, 0x6, 0x38, 0x1, 0x74, 0x8, 0x104}, [{0x6474e551, 0x3, 0x9, 0x3, 0x808000000000006, 0xffffffff, 0xfffffffeffffffff, 0x2}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x978) (async) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x7}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x3}) (async) close(r0) (async) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0xc2141) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0385720, &(0x7f0000000000)={0x1}) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) 660.708401ms ago: executing program 7 (id=1719): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) 559.956565ms ago: executing program 7 (id=1720): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000000)={0x8, 0x101, 0x3de6, 0x4, 0x6, 0xa, 0x26, "8ae43da29112f10ec044f03f543e92ae77e5ac38", "92ef0b45acd1352a8431db82d3c65de242dd8fc5"}) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a000000040085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 450.251593ms ago: executing program 6 (id=1721): r0 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x624000, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x1c4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0xde0f9e45a02cc902) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) fchown(r3, 0x0, 0xee00) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @pix_mp={0x2, 0x10001, 0xb5315241, 0x7, 0x1, [{0xf}, {0xffffffff, 0x7}, {0x81, 0xd16}, {0xf, 0x8a56}, {0x81, 0x9}, {0x0, 0x9}, {0x5, 0x7b}, {0x6, 0x1}], 0x6, 0x81, 0x1, 0x1, 0x6}}) 379.777894ms ago: executing program 7 (id=1722): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1e00, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 17) 250.613015ms ago: executing program 7 (id=1723): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1e00, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0xf4, 0x0, 0x0}, 0x58) 110.199738ms ago: executing program 7 (id=1724): ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x6, 0x80000, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5, r4, r5], &(0x7f00000003c0), 0x0, 0x2}) syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @private0, @mcast2, {[], @ndisc_ra}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000200)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], r5, 0x0, '\x00', 0x1, 0x7}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r7, 0x0, 0xc00, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 0s ago: executing program 1 (id=1725): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc4002, 0x21) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x12, r1, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00') mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) kernel console output (not intermixed with test programs): 3] audit: type=1400 audit(2000000141.199:44223): avc: denied { search } for pid=11473 comm="cmp" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 237.935583][ T43] audit: type=1400 audit(2000000141.199:44224): avc: denied { search } for pid=11473 comm="cmp" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 237.936326][ T43] audit: type=1400 audit(2000000141.199:44225): avc: denied { search } for pid=11473 comm="cmp" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 237.936610][ T43] audit: type=1400 audit(2000000141.199:44226): avc: denied { search } for pid=11473 comm="cmp" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 237.936877][ T43] audit: type=1400 audit(2000000141.199:44227): avc: denied { search } for pid=11473 comm="cmp" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 237.936922][ T43] audit: type=1400 audit(2000000141.199:44228): avc: denied { search } for pid=11473 comm="cmp" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 237.937024][ T43] audit: type=1400 audit(2000000141.199:44229): avc: denied { search } for pid=11473 comm="cmp" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 238.008102][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 238.044169][T11482] ip6erspan0: entered promiscuous mode [ 238.567244][T11489] could not allocate digest TFM handle tgr160 [ 238.726741][T11501] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 238.730417][T11501] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1344'. [ 238.751819][ T7245] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.006402][ T7245] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.165681][ T7245] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.211238][T11515] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 239.278340][T11511] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 239.305447][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.311051][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.315485][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.319939][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.323579][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.325463][ T7245] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.425283][ T10] wiimote 0005:057E:0306.0003: detected device: Nintendo Wii Remote (Gen 1) [ 239.505592][ T10] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input22 [ 239.557155][ T10] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input23 [ 239.591714][ T10] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0003/input/input21 [ 239.667452][T11524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11524 comm=syz.2.1349 [ 239.806721][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805789ac00: rx timeout, send abort [ 239.829792][ T7245] bridge_slave_1: left allmulticast mode [ 239.829865][ T7245] bridge_slave_1: left promiscuous mode [ 239.830031][ T7245] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.839046][ T7245] bridge_slave_0: left promiscuous mode [ 239.839207][ T7245] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.041487][ T7245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.056571][ T7245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.061907][ T7245] bond0 (unregistering): Released all slaves [ 240.137906][ T7245] tipc: Disabling bearer [ 240.160037][ T7245] tipc: Left network mode [ 240.203308][T11532] bridge_slave_1: default FDB implementation only supports local addresses [ 240.307054][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805789b800: rx timeout, send abort [ 240.444746][ T9713] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 240.559082][T11537] bonding: bond0 is being created... [ 240.592659][ T9713] usb 6-1: Using ep0 maxpacket: 16 [ 240.598756][ T9713] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.622878][ T9713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 240.637210][ T9713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.637269][ T9713] usb 6-1: Product: syz [ 240.637300][ T9713] usb 6-1: Manufacturer: syz [ 240.637311][ T9713] usb 6-1: SerialNumber: syz [ 240.646764][ T9713] usb 6-1: config 0 descriptor?? [ 240.656593][ T9713] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 240.656696][ T9713] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 240.713447][ T7245] hsr_slave_0: left promiscuous mode [ 240.716103][ T7245] hsr_slave_1: left promiscuous mode [ 240.716849][ T7245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.716870][ T7245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.723566][ T7245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.723588][ T7245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.735022][ T7245] veth1_macvtap: left promiscuous mode [ 240.735125][ T7245] veth0_macvtap: left promiscuous mode [ 240.735226][ T7245] veth1_vlan: left promiscuous mode [ 240.735283][ T7245] veth0_vlan: left promiscuous mode [ 240.807294][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805789b800: abort rx timeout. Force session deactivation [ 240.923000][ T9713] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 240.987832][T11549] IPVS: set_ctl: invalid protocol: 9 127.0.0.1:21 [ 241.037601][ T9713] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 241.037677][ T9713] em28xx 6-1:0.0: board has no eeprom [ 241.119499][T11532] em28xx 6-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 241.132756][ T9713] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 241.132824][ T9713] em28xx 6-1:0.0: dvb set to bulk mode. [ 241.133696][ T6031] em28xx 6-1:0.0: Binding DVB extension [ 241.170852][ T9713] usb 6-1: USB disconnect, device number 54 [ 241.175929][ T9713] em28xx 6-1:0.0: Disconnecting em28xx [ 241.246247][ T7245] team0 (unregistering): Port device team_slave_1 removed [ 241.295609][ T7245] team0 (unregistering): Port device team_slave_0 removed [ 241.391289][ T6031] em28xx 6-1:0.0: Registering input extension [ 241.391587][ T9713] em28xx 6-1:0.0: Closing input extension [ 241.423393][ T65] Bluetooth: hci2: command tx timeout [ 241.461903][ T1174] smc: removing ib device syz1 [ 241.586982][ T5835] vcan0 speed is unknown, defaulting to 1000 [ 241.587037][ T5835] syz1: Port: 1 Link DOWN [ 241.595325][ T9713] em28xx: Freeing device [ 241.748149][ T1174] smbdirect: ib_dev[syz1] removed [ 242.081760][T11562] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x22 (-16) [ 242.127372][ T65] Bluetooth: hci1: unexpected event for opcode 0x0025 [ 242.197391][T11562] i2c i2c-0: Failed to register i2c client tcpci at 0x02 (-16) [ 242.209905][T11563] nvme_fabrics: missing parameter 'transport=%s' [ 242.214755][T11563] nvme_fabrics: missing parameter 'nqn=%s' [ 242.228345][T11562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11562 comm=syz.2.1353 [ 242.293370][T11558] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 242.409855][T11572] netlink: 'syz.1.1355': attribute type 7 has an invalid length. [ 242.409913][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'. [ 242.420155][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 242.434068][T11571] netlink: 'syz.1.1355': attribute type 7 has an invalid length. [ 242.434156][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'. [ 242.434235][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 242.469097][T11571] bond0: Error: CAN devices cannot be enslaved [ 242.849758][T11517] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.852426][T11517] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.855502][T11517] bridge_slave_0: entered allmulticast mode [ 242.856709][T11517] bridge_slave_0: entered promiscuous mode [ 242.866492][T11517] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.869453][T11517] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.873287][T11517] bridge_slave_1: entered allmulticast mode [ 242.882309][T11517] bridge_slave_1: entered promiscuous mode [ 242.933245][ T43] kauditd_printk_skb: 2467 callbacks suppressed [ 242.933347][ T43] audit: type=1400 audit(2000000146.199:46697): avc: denied { search } for pid=11574 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.933551][ T43] audit: type=1400 audit(2000000146.199:46698): avc: denied { search } for pid=11574 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.940114][ T43] audit: type=1400 audit(2000000146.199:46699): avc: denied { search } for pid=11574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.940159][ T43] audit: type=1400 audit(2000000146.199:46700): avc: denied { read } for pid=11574 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.940252][ T43] audit: type=1400 audit(2000000146.199:46701): avc: denied { read open } for pid=11574 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.943776][ T43] audit: type=1400 audit(2000000146.199:46702): avc: denied { getattr } for pid=11574 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.947455][ T43] audit: type=1400 audit(2000000146.209:46703): avc: denied { search } for pid=11574 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 242.949565][ T43] audit: type=1400 audit(2000000146.209:46704): avc: denied { search } for pid=11574 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 242.951979][ T43] audit: type=1400 audit(2000000146.209:46705): avc: denied { search } for pid=11574 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.952083][ T43] audit: type=1400 audit(2000000146.209:46706): avc: denied { search } for pid=11574 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.959954][T11517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.977788][T11517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.042889][T11517] team0: Port device team_slave_0 added [ 243.049433][T11517] team0: Port device team_slave_1 added [ 243.131605][T11517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.135022][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.145294][T11517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.155811][T11517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.158691][T11517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.168847][T11517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.304875][T11584] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:21 [ 243.307156][T11585] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:21 [ 243.328871][T11584] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 243.352220][T11517] hsr_slave_0: entered promiscuous mode [ 243.352900][T11517] hsr_slave_1: entered promiscuous mode [ 243.355314][T11517] debugfs: 'hsr0' already exists in 'hsr' [ 243.355328][T11517] Cannot create hsr debugfs directory [ 243.372481][T11586] bonding: bond0 is being created... [ 243.397640][T11586] bonding: bond0 already exists [ 243.503092][ T65] Bluetooth: hci2: command tx timeout [ 243.978143][T11595] IPv6: Can't replace route, no match found [ 244.006639][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 244.026717][T11517] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 244.031747][T11517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.038608][T11517] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 244.048860][T11517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.052026][T11517] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 244.061248][T11517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 244.068970][ T5445] 8021q: adding VLAN 0 to HW filter on device eth14 [ 244.071272][T11517] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 244.079095][T11517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 244.200170][T11603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=11603 comm=syz.2.1362 [ 244.486434][T11517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.564153][T11517] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.590970][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.591061][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.614970][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.615050][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.784048][T11618] jffs2: notice: (11618) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 245.165937][T11625] bonding: bond0 is being created... [ 245.166239][T11625] bonding: bond0 already exists [ 245.582953][ T65] Bluetooth: hci2: command tx timeout [ 245.619227][ T5445] 8021q: adding VLAN 0 to HW filter on device eth15 [ 246.195348][T11646] Invalid source name [ 246.195397][T11646] UBIFS error (pid: 11646): cannot open "/dev/sg0", error -22 [ 246.205657][T11646] Invalid source name [ 246.205703][T11646] UBIFS error (pid: 11646): cannot open "/dev/sg0", error -22 [ 246.742600][T11517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.420141][T11683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=11683 comm=syz.1.1377 [ 247.623144][ T1480] logitech-hidpp-device 0005:046D:B012.0004: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 247.658175][ T5445] 8021q: adding VLAN 0 to HW filter on device eth16 [ 247.662690][ T65] Bluetooth: hci2: command tx timeout [ 247.770746][T11695] fido_id[11695]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 247.856089][T11703] bonding: bond0 is being created... [ 247.858448][T11703] bonding: bond0 already exists [ 247.944771][ T43] kauditd_printk_skb: 2751 callbacks suppressed [ 247.944863][ T43] audit: type=1400 audit(2000000151.199:49458): avc: denied { search } for pid=11699 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 247.944910][ T43] audit: type=1400 audit(2000000151.209:49459): avc: denied { search } for pid=11699 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 247.944937][ T43] audit: type=1400 audit(2000000151.209:49460): avc: denied { search } for pid=11699 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 247.944961][ T43] audit: type=1400 audit(2000000151.209:49461): avc: denied { search } for pid=11699 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 247.958730][ T43] audit: type=1400 audit(2000000151.219:49462): avc: denied { search } for pid=11699 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 247.961377][ T43] audit: type=1400 audit(2000000151.219:49463): avc: denied { search } for pid=11699 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 247.976019][ T43] audit: type=1400 audit(2000000151.239:49464): avc: denied { search } for pid=11699 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 247.976398][ T43] audit: type=1400 audit(2000000151.239:49465): avc: denied { search } for pid=11699 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 247.976752][ T43] audit: type=1400 audit(2000000151.239:49466): avc: denied { search } for pid=11699 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 247.992945][ T43] audit: type=1400 audit(2000000151.259:49467): avc: denied { search } for pid=11699 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 248.065389][T11517] veth0_vlan: entered promiscuous mode [ 248.085009][T11517] veth1_vlan: entered promiscuous mode [ 248.213759][T11517] veth0_macvtap: entered promiscuous mode [ 248.227015][T11517] veth1_macvtap: entered promiscuous mode [ 248.265514][T11517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.283789][T11517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.316516][ T5603] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.316747][ T5603] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.316776][ T5603] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.316804][ T5603] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.550676][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.550709][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.611088][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.611153][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.701701][T11714] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1385'. [ 249.277651][ T5445] 8021q: adding VLAN 0 to HW filter on device eth17 [ 250.194162][ T65] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 250.388481][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.404182][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.410719][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.412077][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.415266][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.420130][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.422017][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.427414][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.429446][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.438295][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.446019][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.453408][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.458898][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.463223][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.473699][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.479636][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.486860][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.497575][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.507618][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.511745][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.516232][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.521870][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.531755][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.534453][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.537983][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.542253][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.548577][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.553347][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.561450][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.572408][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.579291][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.588813][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.594796][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.613094][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.616790][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.624078][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.628898][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.631239][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.638863][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.644590][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.651345][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.659802][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.672924][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.677010][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.691800][T11784] netlink: 'syz.7.1399': attribute type 9 has an invalid length. [ 250.692093][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.699792][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.704828][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.706625][T11785] FAULT_INJECTION: forcing a failure. [ 250.706625][T11785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.706682][T11785] CPU: 0 UID: 0 PID: 11785 Comm: syz.1.1398 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.706701][T11785] Tainted: [L]=SOFTLOCKUP [ 250.706706][T11785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.706714][T11785] Call Trace: [ 250.706719][T11785] [ 250.706724][T11785] dump_stack_lvl+0x100/0x190 [ 250.706772][T11785] should_fail_ex.cold+0x5/0xa [ 250.706790][T11785] _copy_from_iter+0x1f4/0x1690 [ 250.706815][T11785] ? __asan_memset+0x23/0x50 [ 250.706839][T11785] ? __pfx__copy_from_iter+0x10/0x10 [ 250.706857][T11785] ? __pfx___alloc_skb+0x10/0x10 [ 250.706885][T11785] netlink_sendmsg+0x808/0xda0 [ 250.706907][T11785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.706926][T11785] ? selinux_socket_sendmsg+0x198/0x2f0 [ 250.706947][T11785] ____sys_sendmsg+0xa4d/0xbe0 [ 250.706962][T11785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.706980][T11785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.706998][T11785] ? lock_acquire+0x1d1/0x380 [ 250.707011][T11785] ? get_pid_task+0x2a/0x250 [ 250.707029][T11785] ___sys_sendmsg+0x190/0x1e0 [ 250.707045][T11785] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.707061][T11785] ? get_pid_task+0x106/0x250 [ 250.707082][T11785] ? find_held_lock+0x2b/0x80 [ 250.707107][T11785] __sys_sendmsg+0x160/0x210 [ 250.707126][T11785] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.707152][T11785] do_syscall_64+0x123/0x790 [ 250.707171][T11785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.707183][T11785] RIP: 0033:0x7f6d4119e159 [ 250.707194][T11785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.707206][T11785] RSP: 002b:00007f6d420b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.707218][T11785] RAX: ffffffffffffffda RBX: 00007f6d41425fa0 RCX: 00007f6d4119e159 [ 250.707226][T11785] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 250.707233][T11785] RBP: 00007f6d420b5090 R08: 0000000000000000 R09: 0000000000000000 [ 250.707241][T11785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.707248][T11785] R13: 00007f6d41426038 R14: 00007f6d41425fa0 R15: 00007ffca9623ca8 [ 250.707262][T11785] [ 250.710639][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.721849][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.729660][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.737535][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.745817][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.748819][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.751735][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.756899][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.760227][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.775613][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.788703][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.794419][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.802263][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.806943][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.814275][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.821549][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.824617][T11780] overlayfs: failed to resolve 'ower2': -2 [ 250.827346][T11780] overlayfs: failed to resolve 'ower2': -2 [ 251.059411][ T65] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 251.059496][ T65] CPU: 2 UID: 0 PID: 65 Comm: kworker/u34:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.059529][ T65] Tainted: [L]=SOFTLOCKUP [ 251.059536][ T65] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.059546][ T65] Workqueue: hci2 hci_rx_work [ 251.059571][ T65] Call Trace: [ 251.059576][ T65] [ 251.059582][ T65] dump_stack_lvl+0x100/0x190 [ 251.059610][ T65] sysfs_warn_dup.cold+0x1c/0x28 [ 251.059635][ T65] sysfs_create_dir_ns+0x24b/0x2b0 [ 251.059652][ T65] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 251.059668][ T65] ? find_held_lock+0x2b/0x80 [ 251.059687][ T65] ? kobject_add_internal+0x25f/0x930 [ 251.059705][ T65] ? kobject_add_internal+0x25f/0x930 [ 251.059724][ T65] ? do_raw_spin_unlock+0x145/0x1e0 [ 251.059742][ T65] kobject_add_internal+0x2c8/0x930 [ 251.059764][ T65] kobject_add+0x16a/0x1e0 [ 251.059782][ T65] ? __pfx_kobject_add+0x10/0x10 [ 251.059809][ T65] ? class_to_subsys+0x10f/0x150 [ 251.059832][ T65] ? kobject_put+0xb9/0x640 [ 251.059852][ T65] ? _raw_spin_unlock+0x28/0x50 [ 251.059882][ T65] device_add+0x294/0x1970 [ 251.059900][ T65] ? __pfx_dev_set_name+0x10/0x10 [ 251.059925][ T65] ? __pfx_device_add+0x10/0x10 [ 251.059943][ T65] ? mgmt_send_event_skb+0x2fb/0x460 [ 251.059964][ T65] hci_conn_add_sysfs+0x1a3/0x260 [ 251.059983][ T65] le_conn_complete_evt+0x122f/0x2130 [ 251.060013][ T65] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 251.060035][ T65] ? hci_event_packet+0x186/0xcd0 [ 251.060058][ T65] ? hci_event_packet+0x186/0xcd0 [ 251.060086][ T65] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 251.060112][ T65] ? skb_pull_data+0x15f/0x1e0 [ 251.060133][ T65] hci_le_meta_evt+0x34a/0x5f0 [ 251.060153][ T65] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 251.060184][ T65] hci_event_packet+0x51c/0xcd0 [ 251.060211][ T65] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 251.060228][ T65] ? __pfx_hci_event_packet+0x10/0x10 [ 251.060256][ T65] ? lockdep_hardirqs_on+0x7d/0x110 [ 251.060277][ T65] hci_rx_work+0x451/0xfc0 [ 251.060308][ T65] process_one_work+0xac7/0x1b10 [ 251.060340][ T65] ? __pfx_process_one_work+0x10/0x10 [ 251.060364][ T65] ? lock_acquire+0x1d1/0x380 [ 251.060385][ T65] ? __pfx_hci_rx_work+0x10/0x10 [ 251.060410][ T65] worker_thread+0x5ef/0xe50 [ 251.060440][ T65] ? kthread+0x13a/0x450 [ 251.060460][ T65] ? __pfx_worker_thread+0x10/0x10 [ 251.060482][ T65] kthread+0x373/0x450 [ 251.060502][ T65] ? __pfx_kthread+0x10/0x10 [ 251.060524][ T65] ret_from_fork+0x730/0xd60 [ 251.060543][ T65] ? __pfx_ret_from_fork+0x10/0x10 [ 251.060561][ T65] ? __switch_to+0x800/0x10f0 [ 251.060582][ T65] ? __pfx_kthread+0x10/0x10 [ 251.060604][ T65] ret_from_fork_asm+0x1a/0x30 [ 251.060630][ T65] [ 251.065238][ T65] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 251.065279][ T65] Bluetooth: hci2: failed to register connection device [ 251.253445][T11794] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.253591][T11794] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.253677][T11794] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.253763][T11794] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.253799][T11794] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 251.261375][T11794] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 251.267143][T11794] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 251.512711][ T6031] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 251.671057][ T6031] usb 6-1: unable to get BOS descriptor or descriptor too short [ 251.676648][ T6031] usb 6-1: not running at top speed; connect to a high speed hub [ 251.676711][ T6031] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 251.682758][ T6031] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 251.682775][ T6031] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 251.682786][ T6031] usb 6-1: config 14 has no interface number 0 [ 251.682795][ T6031] usb 6-1: config 14 has no interface number 1 [ 251.682824][ T6031] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 251.682836][ T6031] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 251.682850][ T6031] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 251.682868][ T6031] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 251.682890][ T6031] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 251.682911][ T6031] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 251.682932][ T6031] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.682956][ T6031] usb 6-1: config 14 interface 57 has no altsetting 0 [ 251.683030][ T6031] usb 6-1: config 14 interface 228 has no altsetting 0 [ 251.692204][ T6031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.692224][ T6031] usb 6-1: Product: syz [ 251.692232][ T6031] usb 6-1: Manufacturer: syz [ 251.692240][ T6031] usb 6-1: SerialNumber: syz [ 251.862708][ T2370] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 252.014581][ T2370] usb 11-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 252.018247][ T2370] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 252.018271][ T2370] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.028893][T11813] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 252.032399][ T2370] opticon 11-1:1.0: opticon converter detected [ 252.038909][ T2370] usb 11-1: opticon converter now attached to ttyUSB0 [ 252.128351][ T6031] legousbtower 6-1:14.57: interrupt endpoints not found [ 252.538092][ T6031] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 252.555342][ T6031] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 252.665660][T11822] rnbd_client L607: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 252.714097][T11822] rtrs_client L2095: : Failed to resolve address, err: -ENODEV [ 252.714619][T11822] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 252.743126][ T6031] usb 11-1: USB disconnect, device number 5 [ 252.748240][ T6031] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 252.748930][ T6031] opticon 11-1:1.0: device disconnected [ 252.969204][ T43] kauditd_printk_skb: 1872 callbacks suppressed [ 252.969289][ T43] audit: type=1400 audit(2000000156.229:51340): avc: denied { bpf } for pid=11829 comm="syz.2.1412" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 252.981324][ T43] audit: type=1400 audit(2000000156.239:51341): avc: denied { mounton } for pid=11829 comm="syz.2.1412" path="/371/file0" dev="tmpfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 252.989618][T11830] overlayfs: failed to resolve '/': -2 [ 253.009753][ T43] audit: type=1400 audit(2000000156.269:51342): avc: denied { relabelfrom } for pid=11829 comm="syz.2.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 253.019816][ T43] audit: type=1400 audit(2000000156.279:51343): avc: denied { relabelto } for pid=11829 comm="syz.2.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 253.088705][ T43] audit: type=1400 audit(2000000156.349:51344): avc: denied { write } for pid=11796 comm="syz.1.1403" name="legousbtower0" dev="devtmpfs" ino=3926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 253.089600][ T43] audit: type=1400 audit(2000000156.349:51345): avc: denied { write } for pid=11796 comm="syz.1.1403" path="/dev/usb/legousbtower0" dev="devtmpfs" ino=3926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 253.095805][ T43] audit: type=1400 audit(2000000156.359:51346): avc: denied { ioctl } for pid=11796 comm="syz.1.1403" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 253.099840][ T43] audit: type=1400 audit(2000000156.359:51347): avc: denied { read write } for pid=11796 comm="syz.1.1403" name="video0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 253.100980][ T43] audit: type=1400 audit(2000000156.359:51348): avc: denied { read write open } for pid=11796 comm="syz.1.1403" path="/dev/video0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 253.104520][ T43] audit: type=1400 audit(2000000156.369:51349): avc: denied { ioctl } for pid=11796 comm="syz.1.1403" path="/dev/video0" dev="devtmpfs" ino=952 ioctlcmd=0x5609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 253.151158][T11833] usb 6-1: Couldn't submit interrupt_out_urb -90 [ 253.209290][T11835] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 253.262791][ T5742] Bluetooth: hci3: command 0x0419 tx timeout [ 253.262837][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.262875][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 253.262989][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 253.299669][ C3] usb 6-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 253.300837][T11180] usb 6-1: USB disconnect, device number 55 [ 253.319367][T11180] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 253.580580][T11837] binder: 11836:11837 ioctl c0306201 2000000001c0 returned -14 [ 253.913703][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1419'. [ 253.914495][T11856] netlink: 136 bytes leftover after parsing attributes in process `syz.7.1419'. [ 254.165105][T11866] netlink: 'syz.2.1422': attribute type 1 has an invalid length. [ 254.165150][T11866] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1422'. [ 254.165232][T11866] netlink: 'syz.2.1422': attribute type 2 has an invalid length. [ 254.165254][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 254.234908][ T65] Bluetooth: hci4: sending frame failed (-49) [ 254.235300][ T5738] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 254.303266][T11180] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 254.440852][T11870] FAULT_INJECTION: forcing a failure. [ 254.440852][T11870] name failslab, interval 1, probability 0, space 0, times 0 [ 254.445013][T11870] CPU: 0 UID: 0 PID: 11870 Comm: syz.7.1426 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.445045][T11870] Tainted: [L]=SOFTLOCKUP [ 254.445051][T11870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 254.445058][T11870] Call Trace: [ 254.445062][T11870] [ 254.445067][T11870] dump_stack_lvl+0x100/0x190 [ 254.445096][T11870] should_fail_ex.cold+0x5/0xa [ 254.445113][T11870] should_failslab+0xc2/0x120 [ 254.445151][T11870] __kmalloc_node_noprof+0xff/0x880 [ 254.445163][T11870] ? qdisc_alloc+0xbb/0xb30 [ 254.445195][T11870] qdisc_alloc+0xbb/0xb30 [ 254.445208][T11870] ? _raw_read_unlock+0x28/0x50 [ 254.445224][T11870] qdisc_create+0x70/0x1060 [ 254.445244][T11870] tc_modify_qdisc+0xdcf/0x2120 [ 254.445265][T11870] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 254.445293][T11870] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 254.445311][T11870] rtnetlink_rcv_msg+0x3c9/0xe90 [ 254.445326][T11870] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.445341][T11870] ? ref_tracker_free+0x37e/0x6c0 [ 254.445356][T11870] netlink_rcv_skb+0x159/0x420 [ 254.445373][T11870] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.445386][T11870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.445407][T11870] ? netlink_deliver_tap+0x1ae/0xcc0 [ 254.445426][T11870] netlink_unicast+0x585/0x850 [ 254.445446][T11870] ? __pfx_netlink_unicast+0x10/0x10 [ 254.445475][T11870] netlink_sendmsg+0x8b0/0xda0 [ 254.445500][T11870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.445526][T11870] ? selinux_socket_sendmsg+0x198/0x2f0 [ 254.445551][T11870] ____sys_sendmsg+0xa4d/0xbe0 [ 254.445565][T11870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.445582][T11870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.445599][T11870] ? lock_acquire+0x1d1/0x380 [ 254.445610][T11870] ? get_pid_task+0x2a/0x250 [ 254.445627][T11870] ___sys_sendmsg+0x190/0x1e0 [ 254.445646][T11870] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.445672][T11870] ? get_pid_task+0x106/0x250 [ 254.445704][T11870] ? find_held_lock+0x2b/0x80 [ 254.445741][T11870] __sys_sendmsg+0x160/0x210 [ 254.445768][T11870] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.445807][T11870] do_syscall_64+0x123/0x790 [ 254.445828][T11870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.445846][T11870] RIP: 0033:0x7fa8e399e159 [ 254.445862][T11870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.445878][T11870] RSP: 002b:00007fa8e490c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.445896][T11870] RAX: ffffffffffffffda RBX: 00007fa8e3c25fa0 RCX: 00007fa8e399e159 [ 254.445908][T11870] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 254.445919][T11870] RBP: 00007fa8e490c090 R08: 0000000000000000 R09: 0000000000000000 [ 254.445930][T11870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.445940][T11870] R13: 00007fa8e3c26038 R14: 00007fa8e3c25fa0 R15: 00007ffe16d02528 [ 254.445964][T11870] [ 254.472315][T11180] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 254.501162][T11180] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 254.501212][T11180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.540562][T11861] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 254.546849][T11180] opticon 6-1:1.0: opticon converter detected [ 254.566971][T11180] usb 6-1: opticon converter now attached to ttyUSB0 [ 255.051271][T11889] netlink: 'syz.2.1430': attribute type 2 has an invalid length. [ 255.228002][T11861] FAULT_INJECTION: forcing a failure. [ 255.228002][T11861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.233369][T11861] CPU: 0 UID: 0 PID: 11861 Comm: syz.1.1420 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.233400][T11861] Tainted: [L]=SOFTLOCKUP [ 255.233406][T11861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.233412][T11861] Call Trace: [ 255.233417][T11861] [ 255.233422][T11861] dump_stack_lvl+0x100/0x190 [ 255.233443][T11861] should_fail_ex.cold+0x5/0xa [ 255.233459][T11861] _copy_to_user+0x32/0xd0 [ 255.233478][T11861] copy_siginfo_to_user+0x27/0xc0 [ 255.233492][T11861] x64_setup_rt_frame+0xa03/0xce0 [ 255.233512][T11861] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 255.233532][T11861] arch_do_signal_or_restart+0x5ee/0x7e0 [ 255.233550][T11861] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 255.233570][T11861] ? fput+0x7c/0x100 [ 255.233587][T11861] exit_to_user_mode_loop+0x139/0x700 [ 255.233600][T11861] ? rcu_is_watching+0x13/0xc0 [ 255.233616][T11861] do_syscall_64+0x661/0x790 [ 255.233630][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.233643][T11861] RIP: 0033:0x7f6d4115e98e [ 255.233653][T11861] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 255.233665][T11861] RSP: 002b:00007f6d420b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.233679][T11861] RAX: 0000000000000001 RBX: 00007f6d420b56c0 RCX: 00007f6d4115e98e [ 255.233687][T11861] RDX: 0000000000000001 RSI: 00007f6d420b5090 RDI: 0000000000000005 [ 255.233693][T11861] RBP: 00007f6d420b5090 R08: 0000000000000000 R09: 0000000000000000 [ 255.233700][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.233707][T11861] R13: 00007f6d41426038 R14: 00007f6d41425fa0 R15: 00007ffca9623ca8 [ 255.233721][T11861] [ 255.284181][T11893] option changes via remount are deprecated (pid=11892 comm=syz.2.1432) [ 255.307725][T11180] usb 6-1: USB disconnect, device number 56 [ 255.320427][T11180] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 255.320715][T11180] opticon 6-1:1.0: device disconnected [ 255.342908][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 255.506677][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.742063][T11903] CUSE: unknown device info "" [ 255.742106][T11903] CUSE: unknown device info "" [ 255.742130][T11903] CUSE: unknown device info "" [ 255.742148][T11903] CUSE: unknown device info "" [ 255.742154][T11903] CUSE: DEVNAME unspecified [ 255.792945][T11180] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 255.954180][T11180] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 255.963316][T11180] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 255.963361][T11180] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 255.963401][T11180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.991292][T11180] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 256.003444][T11180] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 256.141664][T11917] 9p: Unknown Cache mode or invalid value f [ 256.316205][T11921] Device name not specified. [ 256.316205][T11921] [ 256.354554][T11919] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1440'. [ 256.383581][T11897] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 256.384139][T11897] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 256.386155][T11897] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 256.410357][T11924] IPVS: set_ctl: invalid protocol: 60 172.20.20.56:23 [ 256.411178][T11924] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 256.487825][T11932] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 256.488323][T11897] SPCP8x5 ttyUSB0: failed to get modem status: -32 [ 256.497423][T11935] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1441'. [ 256.504637][T11933] IPVS: Error connecting to the multicast addr [ 256.614763][T11897] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 256.622415][ T57] usb 6-1: USB disconnect, device number 57 [ 256.629499][T11943] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.1445'. [ 256.629556][T11943] veth0_to_bond: default FDB implementation only supports local addresses [ 256.635951][ T57] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 256.636294][ T57] spcp8x5 6-1:1.0: device disconnected [ 256.860926][T11949] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.863613][T11950] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.014431][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1448'. [ 257.014493][T11953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.299854][T11938] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 257.300140][T11938] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 257.301553][T11938] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 257.301623][T11938] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 257.317197][T11938] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 257.336148][T11962] fuse: Bad value for 'fd' [ 257.568927][T11969] loop2: detected capacity change from 0 to 7 [ 257.598740][T11969] Dev loop2: unable to read RDB block 7 [ 257.600759][T11969] loop2: unable to read partition table [ 257.603049][T11969] loop2: partition table beyond EOD, truncated [ 257.605217][T11969] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 257.655641][T11969] Bluetooth: MGMT ver 1.23 [ 257.669257][ C3] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 257.691664][T11969] usb usb5: usbfs: process 11969 (syz.6.1451) did not claim interface 0 before use [ 257.696999][T11969] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 257.954194][T11984] block nbd1: NBD_DISCONNECT [ 257.985911][ T43] kauditd_printk_skb: 1079 callbacks suppressed [ 257.985999][ T43] audit: type=1400 audit(2000000161.249:52429): avc: denied { ioctl } for pid=11981 comm="syz.6.1455" path="/dev/loop7" dev="devtmpfs" ino=663 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.986658][T11982] loop7: detected capacity change from 0 to 7 [ 257.987861][ T43] audit: type=1400 audit(2000000161.249:52430): avc: denied { ioctl } for pid=11981 comm="syz.6.1455" path="/dev/loop7" dev="devtmpfs" ino=663 ioctlcmd=0x4c09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.003519][ T43] audit: type=1400 audit(2000000161.269:52431): avc: denied { read write } for pid=7204 comm="syz-executor" name="loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.005889][ T43] audit: type=1400 audit(2000000161.269:52432): avc: denied { read write open } for pid=7204 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.005935][ T43] audit: type=1400 audit(2000000161.269:52433): avc: denied { ioctl } for pid=7204 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.034881][ T43] audit: type=1400 audit(2000000161.299:52434): avc: denied { write } for pid=11981 comm="syz.6.1455" name="tcp6" dev="proc" ino=4026534115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 258.034975][ T43] audit: type=1400 audit(2000000161.299:52435): avc: denied { write } for pid=11981 comm="syz.6.1455" path="/proc/169/net/tcp6" dev="proc" ino=4026534115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 258.044653][ T43] audit: type=1400 audit(2000000161.309:52436): avc: denied { write } for pid=11981 comm="syz.6.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.087723][ T43] audit: type=1400 audit(2000000161.349:52437): avc: denied { read write } for pid=5728 comm="syz-executor" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.088368][ T43] audit: type=1400 audit(2000000161.349:52438): avc: denied { read write open } for pid=5728 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.166540][T11982] Dev loop7: unable to read RDB block 7 [ 258.166621][T11982] loop7: unable to read partition table [ 258.166749][T11982] loop7: partition table beyond EOD, truncated [ 258.166773][T11982] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 258.177134][T11992] input: syz0 as /devices/virtual/input/input27 [ 258.513273][ T1041] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 258.632866][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 258.677238][ T1041] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.686575][ T1041] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.686617][ T1041] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 258.686677][ T1041] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 258.686715][ T1041] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.715612][ T1041] usb 7-1: config 0 descriptor?? [ 258.739612][T12015] No such timeout policy "syz1" [ 258.971497][T11995] FAULT_INJECTION: forcing a failure. [ 258.971497][T11995] name failslab, interval 1, probability 0, space 0, times 0 [ 258.971583][T11995] CPU: 3 UID: 0 PID: 11995 Comm: syz.2.1458 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.971626][T11995] Tainted: [L]=SOFTLOCKUP [ 258.971633][T11995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.971641][T11995] Call Trace: [ 258.971647][T11995] [ 258.971653][T11995] dump_stack_lvl+0x100/0x190 [ 258.971689][T11995] should_fail_ex.cold+0x5/0xa [ 258.971724][T11995] should_failslab+0xc2/0x120 [ 258.971744][T11995] __kvmalloc_node_noprof+0x113/0x9b0 [ 258.971759][T11995] ? do_raw_spin_lock+0x128/0x260 [ 258.971776][T11995] ? alloc_fdtable+0x17f/0x2d0 [ 258.971799][T11995] alloc_fdtable+0x17f/0x2d0 [ 258.971814][T11995] dup_fd+0x995/0xd10 [ 258.971829][T11995] ? do_raw_spin_unlock+0x145/0x1e0 [ 258.971845][T11995] ? _raw_spin_unlock+0x28/0x50 [ 258.971869][T11995] ? copy_fs_struct+0x2a0/0x340 [ 258.971884][T11995] ksys_unshare+0x7c7/0xa70 [ 258.971899][T11995] ? __pfx_ksys_unshare+0x10/0x10 [ 258.971919][T11995] __x64_sys_unshare+0x31/0x40 [ 258.971934][T11995] do_syscall_64+0x123/0x790 [ 258.971950][T11995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.971964][T11995] RIP: 0033:0x7f570ef9e159 [ 258.971975][T11995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.971988][T11995] RSP: 002b:00007f570d1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 258.972002][T11995] RAX: ffffffffffffffda RBX: 00007f570f225fa0 RCX: 00007f570ef9e159 [ 258.972011][T11995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 258.972019][T11995] RBP: 00007f570f035024 R08: 0000000000000000 R09: 0000000000000000 [ 258.972027][T11995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.972035][T11995] R13: 00007f570f226038 R14: 00007f570f225fa0 R15: 00007ffe8b8cb7d8 [ 258.972051][T11995] [ 259.029140][T12034] ip_tables: iptables: counters copy to user failed while replacing table [ 259.342930][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 259.342956][ T5090] Bluetooth: hci1: command 0x0c1a tx timeout [ 259.343005][ T5738] Bluetooth: hci3: command 0x0419 tx timeout [ 259.460747][T12051] xt_CT: No such helper "netbios-ns" [ 259.950332][T12066] No such timeout policy "syz1" [ 260.307407][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1489'. [ 260.310566][T12099] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1489'. [ 260.803191][T12117] binder: 12112:12117 ioctl 4018620d 0 returned -22 [ 260.884015][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.884267][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.897657][T12120] jffs2: notice: (12120) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 261.112798][ T57] usb 12-1: new low-speed USB device number 2 using dummy_hcd [ 261.209764][ T6031] usb 7-1: USB disconnect, device number 50 [ 261.245003][ T57] usb 12-1: device descriptor read/64, error -71 [ 261.423376][ T5738] Bluetooth: hci3: command 0x0419 tx timeout [ 261.432803][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 261.452982][ T9] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 261.484830][ T57] usb 12-1: new low-speed USB device number 3 using dummy_hcd [ 261.612674][ T9] usb 11-1: Using ep0 maxpacket: 8 [ 261.612680][ T57] usb 12-1: device descriptor read/64, error -71 [ 261.616642][ T9] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 261.631561][ T9] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 261.631637][ T9] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.631681][ T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.631695][ T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.631708][ T9] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.631728][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.657706][T12142] 8021q: VLANs not supported on ip6tnl0 [ 261.723136][ T57] usb usb12-port1: attempt power cycle [ 261.836828][T12146] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1504'. [ 261.863979][ T9] usb 11-1: usb_control_msg returned -32 [ 261.864044][ T9] usbtmc 11-1:16.0: can't read capabilities [ 262.051541][T12157] No source specified [ 262.063158][ T57] usb 12-1: new low-speed USB device number 4 using dummy_hcd [ 262.085599][ T57] usb 12-1: device descriptor read/8, error -71 [ 262.145459][T12131] usbtmc 11-1:16.0: usb_control_msg returned -32 [ 262.148465][ T1480] usb 11-1: USB disconnect, device number 6 [ 262.324141][ T57] usb 12-1: new low-speed USB device number 5 using dummy_hcd [ 262.348487][ T57] usb 12-1: device descriptor read/8, error -71 [ 262.453377][ T57] usb usb12-port1: unable to enumerate USB device [ 262.493043][T12164] xt_CT: No such helper "snmp_trap" [ 262.549658][T12167] netlink: 'syz.2.1509': attribute type 39 has an invalid length. [ 262.734765][T12168] ALSA: seq fatal error: cannot create timer (-19) [ 262.993437][ T43] kauditd_printk_skb: 3457 callbacks suppressed [ 262.993538][ T43] audit: type=1400 audit(2000000166.249:55896): avc: denied { read } for pid=12181 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.994773][ T43] audit: type=1400 audit(2000000166.259:55897): avc: denied { read open } for pid=12181 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.999387][ T43] audit: type=1400 audit(2000000166.259:55898): avc: denied { getattr } for pid=12181 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.002011][ T43] audit: type=1400 audit(2000000166.259:55899): avc: denied { search } for pid=12181 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 263.006488][ T43] audit: type=1400 audit(2000000166.269:55900): avc: denied { search } for pid=12181 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 263.007511][ T43] audit: type=1400 audit(2000000166.269:55901): avc: denied { search } for pid=12181 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.016316][ T43] audit: type=1400 audit(2000000166.269:55902): avc: denied { search } for pid=12181 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.016379][ T43] audit: type=1400 audit(2000000166.269:55903): avc: denied { search } for pid=12181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.016424][ T43] audit: type=1400 audit(2000000166.269:55904): avc: denied { search } for pid=12181 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.016468][ T43] audit: type=1400 audit(2000000166.269:55905): avc: denied { search } for pid=12181 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 263.172842][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'. [ 263.484124][T12193] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1516'. [ 263.502801][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 264.070871][T12206] fuse: Bad value for 'rootmode' [ 264.485460][T12232] ecryptfs: Unknown parameter 'ecryptfs_cipher}aesec|}' [ 264.953814][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1529'. [ 265.207007][T12266] xt_CT: No such helper "snmp_trap" [ 265.492281][T12278] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1537'. [ 266.199126][T12279] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.199438][T12279] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.199737][T12279] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.199875][T12279] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.199921][T12279] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 266.403926][T12311] netlink: 'syz.2.1546': attribute type 10 has an invalid length. [ 266.409778][T12304] netlink: 'syz.2.1546': attribute type 10 has an invalid length. [ 266.855616][T12325] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1550'. [ 266.900428][ T5876] libceph: connect (1)[c::]:6789 error -22 [ 266.900738][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 266.913589][T12330] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1553'. [ 266.952861][ T1480] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 266.966318][T12325] ceph: No mds server is up or the cluster is laggy [ 267.008277][T12325] netlink: 'syz.6.1550': attribute type 23 has an invalid length. [ 267.104157][ T1480] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 267.116355][ T1480] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 267.119884][ T1480] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.133714][T12318] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 267.138714][ T1480] opticon 7-1:1.0: opticon converter detected [ 267.147051][ T1480] usb 7-1: opticon converter now attached to ttyUSB0 [ 267.221406][T12339] binder: 12337:12339 ioctl c0306201 200000000180 returned -14 [ 267.526413][T12350] kvm: pic: level sensitive irq not supported [ 267.526941][T12350] kvm: pic: non byte read [ 267.582794][ T5090] Bluetooth: hci0: command 0x0c1a tx timeout [ 267.820907][ T1480] usb 7-1: USB disconnect, device number 51 [ 267.828483][ T1480] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 267.832153][ T1480] opticon 7-1:1.0: device disconnected [ 268.003663][ T43] kauditd_printk_skb: 1602 callbacks suppressed [ 268.006174][ T43] audit: type=1400 audit(2000000171.269:57508): avc: denied { map } for pid=12358 comm="syz.2.1557" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 268.014809][ T43] audit: type=1400 audit(2000000171.269:57509): avc: denied { read write } for pid=12358 comm="syz.2.1557" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 268.014855][ T43] audit: type=1400 audit(2000000171.269:57510): avc: denied { map } for pid=12358 comm="syz.2.1557" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 268.014894][ T43] audit: type=1400 audit(2000000171.269:57511): avc: denied { read write } for pid=12358 comm="syz.2.1557" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 268.046739][ T43] audit: type=1400 audit(2000000171.299:57512): avc: denied { read write } for pid=5728 comm="syz-executor" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.046776][ T43] audit: type=1400 audit(2000000171.299:57513): avc: denied { read write open } for pid=5728 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.046798][ T43] audit: type=1400 audit(2000000171.299:57514): avc: denied { ioctl } for pid=5728 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.153947][ T43] audit: type=1400 audit(2000000171.419:57515): avc: denied { create } for pid=12361 comm="syz.2.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.161525][ T43] audit: type=1400 audit(2000000171.419:57516): avc: denied { write } for pid=12361 comm="syz.2.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 268.161561][ T43] audit: type=1400 audit(2000000171.419:57517): avc: denied { name_bind } for pid=12361 comm="syz.2.1558" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 268.222805][ T5738] Bluetooth: hci3: command 0x0419 tx timeout [ 268.222865][ T5738] Bluetooth: hci1: command 0x0c1a tx timeout [ 268.222926][ T5090] Bluetooth: hci2: command 0x0c1a tx timeout [ 268.956009][T12381] bond1: entered promiscuous mode [ 269.310298][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.316581][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.324484][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.328168][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.330995][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.420586][T12404] vlan2: entered promiscuous mode [ 269.420639][T12404] hsr0: entered promiscuous mode [ 269.420798][T12404] vlan2: entered allmulticast mode [ 269.420808][T12404] hsr0: entered allmulticast mode [ 269.420816][T12404] hsr_slave_0: entered allmulticast mode [ 269.420826][T12404] hsr_slave_1: entered allmulticast mode [ 269.463399][T12405] overlayfs: overlapping lowerdir path [ 269.480507][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1575'. [ 269.484881][T12405] hsr_slave_0: left promiscuous mode [ 269.485709][T12405] hsr_slave_1: left promiscuous mode [ 270.257098][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1577'. [ 270.302742][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 270.370740][T12399] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.373183][T12399] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.373300][T12399] bridge_slave_0: entered allmulticast mode [ 270.374741][T12399] bridge_slave_0: entered promiscuous mode [ 270.381430][T12399] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.381652][T12399] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.381981][T12399] bridge_slave_1: entered allmulticast mode [ 270.383594][T12399] bridge_slave_1: entered promiscuous mode [ 270.471793][T12399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.485956][T12399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.544271][T12399] team0: Port device team_slave_0 added [ 270.551893][T12399] team0: Port device team_slave_1 added [ 270.614300][T12399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.614354][T12399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.614392][T12399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.627827][T12399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.627838][T12399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.627853][T12399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.730351][T12399] hsr_slave_0: entered promiscuous mode [ 270.730866][T12399] hsr_slave_1: entered promiscuous mode [ 270.731275][T12399] debugfs: 'hsr0' already exists in 'hsr' [ 270.731287][T12399] Cannot create hsr debugfs directory [ 270.741516][T12440] binder: 12439:12440 ioctl 4018620d 0 returned -22 [ 270.828331][T12443] jffs2: notice: (12443) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 270.987064][T12399] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 270.992230][T12399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 270.996120][T12399] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 271.001445][T12399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 271.003456][T12399] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 271.025504][T12399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.027602][T12399] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 271.032198][T12399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.247638][T12399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.298718][T12399] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.319743][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.319891][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.334906][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.335009][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.422778][ T5090] Bluetooth: hci0: command tx timeout [ 271.917519][T12453] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 271.917701][T12453] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 271.926417][T12453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 271.926655][T12453] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.926810][T12453] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 271.926864][T12453] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 271.937274][T12453] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 271.976476][T12399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.219339][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1584'. [ 272.347513][T12488] netlink: 'syz.7.1586': attribute type 1 has an invalid length. [ 272.376619][T12488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.397476][T12487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.397676][T12487] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 272.398125][T12487] bond1: (slave gre1): Error -95 calling set_mac_address [ 272.419239][T12488] gretap1: entered promiscuous mode [ 272.429446][T12488] bond1: (slave gretap1): making interface the new active one [ 272.432330][T12488] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 272.498653][T12492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 272.506176][T12492] bond1: (slave bond2): Enslaving as an active interface with a down link [ 272.518831][T12488] bond1 (unregistering): (slave gretap1): Releasing active interface [ 272.532496][T12488] bond1 (unregistering): (slave bond2): Releasing active interface [ 272.537575][T12488] bond1 (unregistering): Released all slaves [ 272.659540][T12399] veth0_vlan: entered promiscuous mode [ 272.708436][T12399] veth1_vlan: entered promiscuous mode [ 272.811557][T12399] veth0_macvtap: entered promiscuous mode [ 272.824364][T12399] veth1_macvtap: entered promiscuous mode [ 272.878470][T12399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.893759][T12399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.938545][T12507] overlayfs: invalid redirect ((null)) [ 272.963471][ T5603] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.963549][ T5603] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.964127][ T5603] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.964180][ T5603] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.047372][ T43] kauditd_printk_skb: 467 callbacks suppressed [ 273.049752][ T43] audit: type=1400 audit(2000000176.309:57985): avc: denied { create } for pid=12505 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.051439][ T43] audit: type=1400 audit(2000000176.309:57986): avc: denied { write } for pid=12505 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.051486][ T43] audit: type=1400 audit(2000000176.309:57987): avc: denied { read } for pid=12505 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.051528][ T43] audit: type=1400 audit(2000000176.309:57988): avc: denied { read } for pid=12505 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.549956][T12504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.550239][T12504] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 273.550400][T12504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.550469][T12504] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 273.566110][T12504] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 273.573958][ T43] audit: type=1400 audit(2000000176.829:57989): avc: denied { ioctl } for pid=12508 comm="syz.6.1592" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.574033][ T43] audit: type=1400 audit(2000000176.839:57990): avc: denied { create } for pid=12399 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.574073][ T43] audit: type=1400 audit(2000000176.839:57991): avc: denied { write } for pid=12399 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.575963][ T43] audit: type=1400 audit(2000000176.839:57992): avc: denied { ioctl } for pid=12508 comm="syz.6.1592" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.577429][ T43] audit: type=1400 audit(2000000176.839:57993): avc: denied { read } for pid=12399 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.585266][ T43] audit: type=1400 audit(2000000176.849:57994): avc: denied { ioctl } for pid=12508 comm="syz.6.1592" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.680350][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.680462][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.712791][T12515] FAULT_INJECTION: forcing a failure. [ 273.712791][T12515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.712868][T12515] CPU: 3 UID: 0 PID: 12515 Comm: syz.7.1594 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.712895][T12515] Tainted: [L]=SOFTLOCKUP [ 273.712901][T12515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.712908][T12515] Call Trace: [ 273.712912][T12515] [ 273.712917][T12515] dump_stack_lvl+0x100/0x190 [ 273.712950][T12515] should_fail_ex.cold+0x5/0xa [ 273.712967][T12515] _copy_from_user+0x2e/0xd0 [ 273.712989][T12515] copy_clone_args_from_user+0x152/0x7d0 [ 273.713009][T12515] ? get_pid_task+0xfc/0x250 [ 273.713024][T12515] ? get_pid_task+0xfc/0x250 [ 273.713060][T12515] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 273.713081][T12515] ? find_held_lock+0x2b/0x80 [ 273.713161][T12515] __do_sys_clone3+0xbf/0x290 [ 273.713190][T12515] ? __pfx___do_sys_clone3+0x10/0x10 [ 273.713209][T12515] ? ksys_write+0x190/0x250 [ 273.713235][T12515] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 273.713267][T12515] ? __fget_files+0x21f/0x3d0 [ 273.713301][T12515] do_syscall_64+0x123/0x790 [ 273.713319][T12515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.713339][T12515] RIP: 0033:0x7fa8e399e159 [ 273.713355][T12515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.713372][T12515] RSP: 002b:00007fa8e490bef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 273.713390][T12515] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa8e399e159 [ 273.713403][T12515] RDX: 00007fa8e490bf10 RSI: 0000000000000058 RDI: 00007fa8e490bf10 [ 273.713414][T12515] RBP: 00007fa8e490c090 R08: 0000000000000000 R09: 0000000000000058 [ 273.713427][T12515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.713439][T12515] R13: 00007fa8e3c26038 R14: 00007fa8e3c25fa0 R15: 00007ffe16d02528 [ 273.713460][T12515] [ 273.794459][ T7158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.794472][ T7158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.814670][ T6031] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 273.885634][T12521] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1595'. [ 273.962907][ T6031] usb 11-1: Using ep0 maxpacket: 8 [ 273.980189][ T6031] usb 11-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 273.996212][ T6031] usb 11-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.996313][ T6031] usb 11-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.996352][ T6031] usb 11-1: config 0 interface 0 has no altsetting 0 [ 273.996401][ T6031] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.030863][ T6031] usb 11-1: config 0 descriptor?? [ 274.169772][T12517] overlayfs: failed to resolve './file1': -2 [ 274.862895][ T5090] Bluetooth: hci1: command 0x0c1a tx timeout [ 274.886437][ T6031] usbhid 11-1:0.0: can't add hid device: -71 [ 274.887216][ T6031] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 274.911305][ T6031] usb 11-1: USB disconnect, device number 7 [ 275.223042][T12554] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1599'. [ 275.506459][T12566] FAULT_INJECTION: forcing a failure. [ 275.506459][T12566] name failslab, interval 1, probability 0, space 0, times 0 [ 275.506519][T12566] CPU: 3 UID: 0 PID: 12566 Comm: syz.6.1602 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.506546][T12566] Tainted: [L]=SOFTLOCKUP [ 275.506552][T12566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 275.506559][T12566] Call Trace: [ 275.506563][T12566] [ 275.506568][T12566] dump_stack_lvl+0x100/0x190 [ 275.506589][T12566] should_fail_ex.cold+0x5/0xa [ 275.506605][T12566] should_failslab+0xc2/0x120 [ 275.506620][T12566] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 275.506632][T12566] ? copy_process+0x6a2/0x8370 [ 275.506647][T12566] copy_process+0x6a2/0x8370 [ 275.506659][T12566] ? _kstrtoull+0x144/0x200 [ 275.506671][T12566] ? __pfx__kstrtoull+0x10/0x10 [ 275.506689][T12566] ? __pfx_copy_process+0x10/0x10 [ 275.506707][T12566] ? _copy_from_user+0x59/0xd0 [ 275.506726][T12566] kernel_clone+0x176/0x9d0 [ 275.506737][T12566] ? get_pid_task+0xfc/0x250 [ 275.506753][T12566] ? __pfx_kernel_clone+0x10/0x10 [ 275.506768][T12566] ? find_held_lock+0x2b/0x80 [ 275.506787][T12566] __do_sys_clone3+0x214/0x290 [ 275.506801][T12566] ? __pfx___do_sys_clone3+0x10/0x10 [ 275.506813][T12566] ? ksys_write+0x190/0x250 [ 275.506828][T12566] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.506844][T12566] ? __fget_files+0x21f/0x3d0 [ 275.506867][T12566] do_syscall_64+0x123/0x790 [ 275.506881][T12566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.506893][T12566] RIP: 0033:0x7f9f45f9e159 [ 275.506902][T12566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.506915][T12566] RSP: 002b:00007f9f46e04ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 275.506927][T12566] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9f45f9e159 [ 275.506934][T12566] RDX: 00007f9f46e04f10 RSI: 0000000000000058 RDI: 00007f9f46e04f10 [ 275.506941][T12566] RBP: 00007f9f46e05090 R08: 0000000000000000 R09: 0000000000000058 [ 275.506948][T12566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.506955][T12566] R13: 00007f9f46226038 R14: 00007f9f46225fa0 R15: 00007ffe17186fc8 [ 275.506970][T12566] [ 275.582765][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 275.582813][ T5738] Bluetooth: hci3: command 0x0419 tx timeout [ 275.582924][ T5090] Bluetooth: hci0: command 0x040f tx timeout [ 276.943454][ T5090] Bluetooth: hci1: command 0x0c1a tx timeout [ 277.577305][T12540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.666769][ T5090] Bluetooth: hci0: command 0x040f tx timeout [ 277.666908][ T5090] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.755743][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1605'. [ 278.047989][T12589] xt_l2tp: wrong L2TP version: 4 [ 278.055832][ T43] kauditd_printk_skb: 516 callbacks suppressed [ 278.055921][ T43] audit: type=1400 audit(2000000181.319:58511): avc: denied { prog_load } for pid=12587 comm="syz.1.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 278.064519][ T43] audit: type=1400 audit(2000000181.319:58512): avc: denied { bpf } for pid=12587 comm="syz.1.1609" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.064577][ T43] audit: type=1400 audit(2000000181.319:58513): avc: denied { perfmon } for pid=12587 comm="syz.1.1609" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.064656][ T43] audit: type=1400 audit(2000000181.319:58514): avc: denied { perfmon } for pid=12587 comm="syz.1.1609" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.064693][ T43] audit: type=1400 audit(2000000181.319:58515): avc: denied { perfmon } for pid=12587 comm="syz.1.1609" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.064730][ T43] audit: type=1400 audit(2000000181.319:58516): avc: denied { perfmon } for pid=12587 comm="syz.1.1609" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.064768][ T43] audit: type=1400 audit(2000000181.319:58517): avc: denied { bpf } for pid=12587 comm="syz.1.1609" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.099570][ T43] audit: type=1400 audit(2000000181.329:58518): avc: denied { prog_load } for pid=12587 comm="syz.1.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 278.099604][ T43] audit: type=1400 audit(2000000181.329:58519): avc: denied { bpf } for pid=12587 comm="syz.1.1609" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.099625][ T43] audit: type=1400 audit(2000000181.329:58520): avc: denied { prog_run } for pid=12587 comm="syz.1.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 278.282656][T12602] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.284867][T12602] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.332504][T12602] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 278.332504][T12602] [ 278.443216][T12608] fuse: Bad value for 'group_id' [ 278.445161][T12608] fuse: Bad value for 'group_id' [ 278.507065][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1616'. [ 278.659916][T12625] sctp: [Deprecated]: syz.7.1619 (pid 12625) Use of int in max_burst socket option deprecated. [ 278.659916][T12625] Use struct sctp_assoc_value instead [ 278.919891][T12643] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1623'. [ 278.928717][T12643] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 278.991548][T12645] fuse: Bad value for 'fd' [ 279.113067][T12649] fuse: Bad value for 'fd' [ 279.241872][T12614] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.242135][T12614] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 279.242184][T12614] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 279.246153][T12614] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.248444][T12614] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 279.528642][T12667] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1627'. [ 279.664450][T12673] xt_policy: neither incoming nor outgoing policy selected [ 279.801763][T12677] netlink: set zone limit has 4 unknown bytes [ 279.993834][T12690] CIFS: iocharset name too long [ 280.007495][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1636'. [ 280.211544][T12698] FAULT_INJECTION: forcing a failure. [ 280.211544][T12698] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 280.211609][T12698] CPU: 0 UID: 0 PID: 12698 Comm: syz.8.1639 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.211640][T12698] Tainted: [L]=SOFTLOCKUP [ 280.211646][T12698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.211654][T12698] Call Trace: [ 280.211660][T12698] [ 280.211666][T12698] dump_stack_lvl+0x100/0x190 [ 280.211689][T12698] should_fail_ex.cold+0x5/0xa [ 280.211705][T12698] ? prepare_alloc_pages+0x16d/0x5b0 [ 280.211722][T12698] should_fail_alloc_page+0xeb/0x140 [ 280.211738][T12698] prepare_alloc_pages+0x1f0/0x5b0 [ 280.211753][T12698] ? is_bpf_text_address+0x94/0x1a0 [ 280.211771][T12698] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 280.211798][T12698] ? stack_trace_save+0x8e/0xc0 [ 280.211818][T12698] ? __pfx_stack_trace_save+0x10/0x10 [ 280.211836][T12698] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 280.211855][T12698] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 280.211874][T12698] ? is_bpf_text_address+0x94/0x1a0 [ 280.211892][T12698] ? kasan_save_stack+0x3f/0x50 [ 280.211904][T12698] ? kasan_save_stack+0x30/0x50 [ 280.211916][T12698] ? kasan_save_track+0x14/0x30 [ 280.211929][T12698] ? __kasan_slab_alloc+0x89/0x90 [ 280.211941][T12698] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 280.211954][T12698] ? alloc_vmap_area+0x1814/0x2bb0 [ 280.211966][T12698] ? __get_vm_area_node+0x1ed/0x350 [ 280.211979][T12698] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 280.211994][T12698] ? __vmalloc_node_noprof+0xad/0xf0 [ 280.212008][T12698] ? copy_process+0x803/0x8370 [ 280.212021][T12698] ? kernel_clone+0x176/0x9d0 [ 280.212039][T12698] ? __do_sys_clone3+0x214/0x290 [ 280.212051][T12698] ? do_syscall_64+0x123/0x790 [ 280.212065][T12698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.212085][T12698] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 280.212100][T12698] ? policy_nodemask+0xed/0x4f0 [ 280.212117][T12698] alloc_pages_mpol+0x201/0x550 [ 280.212133][T12698] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 280.212153][T12698] alloc_pages_noprof+0x1a/0x160 [ 280.212184][T12698] get_free_pages_noprof+0x10/0xb0 [ 280.212198][T12698] __kasan_populate_vmalloc+0xa0/0x210 [ 280.212222][T12698] alloc_vmap_area+0x95d/0x2bb0 [ 280.212240][T12698] ? kasan_save_track+0x14/0x30 [ 280.212253][T12698] ? __kasan_kmalloc+0xaa/0xb0 [ 280.212266][T12698] ? __pfx_alloc_vmap_area+0x10/0x10 [ 280.212280][T12698] ? __get_vm_area_node+0x124/0x350 [ 280.212296][T12698] __get_vm_area_node+0x1ed/0x350 [ 280.212313][T12698] __vmalloc_node_range_noprof+0x268/0x1420 [ 280.212330][T12698] ? kernel_clone+0x176/0x9d0 [ 280.212342][T12698] ? lock_acquire+0x1d1/0x380 [ 280.212360][T12698] ? kernel_clone+0x176/0x9d0 [ 280.212376][T12698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 280.212394][T12698] ? rcu_is_watching+0x13/0xc0 [ 280.212411][T12698] ? trace_kmem_cache_alloc+0xdd/0x100 [ 280.212428][T12698] ? kernel_clone+0x176/0x9d0 [ 280.212441][T12698] __vmalloc_node_noprof+0xad/0xf0 [ 280.212456][T12698] ? kernel_clone+0x176/0x9d0 [ 280.212472][T12698] copy_process+0x803/0x8370 [ 280.212485][T12698] ? _kstrtoull+0x144/0x200 [ 280.212499][T12698] ? __pfx__kstrtoull+0x10/0x10 [ 280.212519][T12698] ? __pfx_copy_process+0x10/0x10 [ 280.212556][T12698] ? _copy_from_user+0x59/0xd0 [ 280.212577][T12698] kernel_clone+0x176/0x9d0 [ 280.212590][T12698] ? get_pid_task+0xfc/0x250 [ 280.212607][T12698] ? __pfx_kernel_clone+0x10/0x10 [ 280.212623][T12698] ? find_held_lock+0x2b/0x80 [ 280.212644][T12698] __do_sys_clone3+0x214/0x290 [ 280.212658][T12698] ? __pfx___do_sys_clone3+0x10/0x10 [ 280.212671][T12698] ? ksys_write+0x190/0x250 [ 280.212688][T12698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.212704][T12698] ? __fget_files+0x21f/0x3d0 [ 280.212729][T12698] do_syscall_64+0x123/0x790 [ 280.212746][T12698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.212762][T12698] RIP: 0033:0x7f987099e159 [ 280.212775][T12698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.212788][T12698] RSP: 002b:00007f9871785ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 280.212804][T12698] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f987099e159 [ 280.212813][T12698] RDX: 00007f9871785f10 RSI: 0000000000000058 RDI: 00007f9871785f10 [ 280.212822][T12698] RBP: 00007f9871786090 R08: 0000000000000000 R09: 0000000000000058 [ 280.212831][T12698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.212839][T12698] R13: 00007f9870c26038 R14: 00007f9870c25fa0 R15: 00007ffc5dd9b778 [ 280.212857][T12698] [ 280.213281][T12698] syz.8.1639: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 280.213330][T12698] CPU: 0 UID: 0 PID: 12698 Comm: syz.8.1639 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.213350][T12698] Tainted: [L]=SOFTLOCKUP [ 280.213355][T12698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.213364][T12698] Call Trace: [ 280.213369][T12698] [ 280.213375][T12698] dump_stack_lvl+0x100/0x190 [ 280.213397][T12698] warn_alloc.cold+0x9e/0xb2 [ 280.213413][T12698] ? __pfx_warn_alloc+0x10/0x10 [ 280.213434][T12698] ? lockdep_hardirqs_on+0x7d/0x110 [ 280.213451][T12698] ? __get_vm_area_node+0x2f0/0x350 [ 280.213472][T12698] ? __get_vm_area_node+0x22b/0x350 [ 280.213491][T12698] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 280.213510][T12698] ? lock_acquire+0x1d1/0x380 [ 280.213529][T12698] ? kernel_clone+0x176/0x9d0 [ 280.213548][T12698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 280.213568][T12698] ? rcu_is_watching+0x13/0xc0 [ 280.213586][T12698] ? trace_kmem_cache_alloc+0xdd/0x100 [ 280.213605][T12698] ? kernel_clone+0x176/0x9d0 [ 280.213619][T12698] __vmalloc_node_noprof+0xad/0xf0 [ 280.213637][T12698] ? kernel_clone+0x176/0x9d0 [ 280.213654][T12698] copy_process+0x803/0x8370 [ 280.213668][T12698] ? _kstrtoull+0x144/0x200 [ 280.213683][T12698] ? __pfx__kstrtoull+0x10/0x10 [ 280.213705][T12698] ? __pfx_copy_process+0x10/0x10 [ 280.213724][T12698] ? _copy_from_user+0x59/0xd0 [ 280.213746][T12698] kernel_clone+0x176/0x9d0 [ 280.213761][T12698] ? get_pid_task+0xfc/0x250 [ 280.213780][T12698] ? __pfx_kernel_clone+0x10/0x10 [ 280.213799][T12698] ? find_held_lock+0x2b/0x80 [ 280.213823][T12698] __do_sys_clone3+0x214/0x290 [ 280.213838][T12698] ? __pfx___do_sys_clone3+0x10/0x10 [ 280.213853][T12698] ? ksys_write+0x190/0x250 [ 280.213872][T12698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.213889][T12698] ? __fget_files+0x21f/0x3d0 [ 280.213917][T12698] do_syscall_64+0x123/0x790 [ 280.213934][T12698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.213948][T12698] RIP: 0033:0x7f987099e159 [ 280.213960][T12698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.213974][T12698] RSP: 002b:00007f9871785ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 280.213987][T12698] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f987099e159 [ 280.213996][T12698] RDX: 00007f9871785f10 RSI: 0000000000000058 RDI: 00007f9871785f10 [ 280.214005][T12698] RBP: 00007f9871786090 R08: 0000000000000000 R09: 0000000000000058 [ 280.214014][T12698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.214022][T12698] R13: 00007f9870c26038 R14: 00007f9870c25fa0 R15: 00007ffc5dd9b778 [ 280.214047][T12698] [ 280.214053][T12698] Mem-Info: [ 280.214060][T12698] active_anon:57056 inactive_anon:955 isolated_anon:0 [ 280.214060][T12698] active_file:5003 inactive_file:31284 isolated_file:0 [ 280.214060][T12698] unevictable:1000 dirty:225 writeback:0 [ 280.214060][T12698] slab_reclaimable:8283 slab_unreclaimable:80549 [ 280.214060][T12698] mapped:26305 shmem:42499 pagetables:4103 [ 280.214060][T12698] sec_pagetables:313 bounce:0 [ 280.214060][T12698] kernel_misc_reclaimable:0 [ 280.214060][T12698] free:402121 free_pcp:18087 free_cma:0 [ 280.214094][T12698] Node 0 active_anon:225676kB inactive_anon:3820kB active_file:16960kB inactive_file:112476kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100984kB dirty:900kB writeback:0kB shmem:166516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17552kB pagetables:15224kB sec_pagetables:1244kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 280.214131][T12698] Node 1 active_anon:2548kB inactive_anon:0kB active_file:3052kB inactive_file:12660kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:4236kB dirty:0kB writeback:0kB shmem:3480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:320kB pagetables:1188kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 280.214202][T12698] Node 0 DMA free:9596kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1236kB inactive_anon:0kB active_file:4kB inactive_file:548kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:352kB local_pcp:108kB free_cma:0kB [ 280.214317][T12698] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 280.214343][T12698] Node 0 DMA32 free:40156kB boost:0kB min:27360kB low:34200kB high:41040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:224440kB inactive_anon:3820kB active_file:16956kB inactive_file:111928kB unevictable:2000kB writepending:900kB zspages:516kB present:2080628kB managed:1253048kB mlocked:0kB bounce:0kB free_pcp:23268kB local_pcp:10032kB free_cma:0kB [ 280.214382][T12698] lowmem_reserve[]: 0 0 0 0 0 [ 280.214404][T12698] Node 1 Normal free:1558732kB boost:0kB min:39876kB low:49844kB high:59812kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2548kB inactive_anon:0kB active_file:3052kB inactive_file:12660kB unevictable:2000kB writepending:0kB zspages:1544kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:48728kB local_pcp:16428kB free_cma:0kB [ 280.214442][T12698] lowmem_reserve[]: 0 0 0 0 0 [ 280.214464][T12698] Node 0 DMA: 41*4kB (UME) 43*8kB (UME) 32*16kB (UME) 26*32kB (UME) 33*64kB (UME) 8*128kB (UME) 6*256kB (UME) 2*512kB (UM) 2*1024kB (ME) 0*2048kB 0*4096kB = 9596kB [ 280.214559][T12698] Node 0 DMA32: 89*4kB (M) 137*8kB (UME) 69*16kB (ME) 36*32kB (ME) 65*64kB (UME) 44*128kB (UME) 18*256kB (UME) 17*512kB (UME) 7*1024kB (UME) 1*2048kB (M) 1*4096kB (U) = 40124kB [ 280.214659][T12698] Node 1 Normal: 921*4kB (UM) 223*8kB (UM) 389*16kB (UME) 393*32kB (UME) 460*64kB (UM) 330*128kB (UME) 284*256kB (UME) 193*512kB (UME) 147*1024kB (UM) 11*2048kB (UME) 273*4096kB (UM) = 1558732kB [ 280.214760][T12698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.214771][T12698] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 280.214782][T12698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.214792][T12698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 280.214803][T12698] 78805 total pagecache pages [ 280.214808][T12698] 27 pages in swap cache [ 280.214812][T12698] Free swap = 121952kB [ 280.214818][T12698] Total swap = 124996kB [ 280.214823][T12698] 1048443 pages RAM [ 280.214828][T12698] 0 pages HighMem/MovableOnly [ 280.214832][T12698] 285871 pages reserved [ 280.214837][T12698] 0 pages cma reserved [ 280.834721][T12693] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 280.834937][T12693] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 280.835080][T12693] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.835152][T12693] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 280.847321][T12693] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 281.194918][T12737] FAULT_INJECTION: forcing a failure. [ 281.194918][T12737] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 281.194996][T12737] CPU: 2 UID: 0 PID: 12737 Comm: syz.6.1648 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.195029][T12737] Tainted: [L]=SOFTLOCKUP [ 281.195035][T12737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 281.195043][T12737] Call Trace: [ 281.195048][T12737] [ 281.195053][T12737] dump_stack_lvl+0x100/0x190 [ 281.195079][T12737] should_fail_ex.cold+0x5/0xa [ 281.195095][T12737] ? prepare_alloc_pages+0x16d/0x5b0 [ 281.195113][T12737] should_fail_alloc_page+0xeb/0x140 [ 281.195129][T12737] prepare_alloc_pages+0x1f0/0x5b0 [ 281.195147][T12737] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 281.195168][T12737] ? __pfx_get_page_from_freelist+0x10/0x10 [ 281.195188][T12737] ? prepare_alloc_pages+0x1f0/0x5b0 [ 281.195203][T12737] ? is_bpf_text_address+0x94/0x1a0 [ 281.195233][T12737] ? rcu_is_watching+0x13/0xc0 [ 281.195253][T12737] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 281.195276][T12737] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 281.195299][T12737] ? stack_trace_save+0x8e/0xc0 [ 281.195319][T12737] ? __pfx_stack_trace_save+0x10/0x10 [ 281.195338][T12737] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 281.195360][T12737] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 281.195382][T12737] ? is_bpf_text_address+0x94/0x1a0 [ 281.195401][T12737] ? kasan_save_track+0x14/0x30 [ 281.195414][T12737] ? __kasan_slab_alloc+0x89/0x90 [ 281.195429][T12737] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 281.195443][T12737] ? alloc_vmap_area+0x1814/0x2bb0 [ 281.195456][T12737] ? __get_vm_area_node+0x1ed/0x350 [ 281.195470][T12737] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 281.195486][T12737] ? __vmalloc_node_noprof+0xad/0xf0 [ 281.195500][T12737] ? copy_process+0x803/0x8370 [ 281.195514][T12737] ? kernel_clone+0x176/0x9d0 [ 281.195526][T12737] ? __do_sys_clone3+0x214/0x290 [ 281.195539][T12737] ? do_syscall_64+0x123/0x790 [ 281.195553][T12737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.195580][T12737] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 281.195604][T12737] ? policy_nodemask+0xed/0x4f0 [ 281.195621][T12737] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 281.195649][T12737] __kasan_populate_vmalloc+0xf0/0x210 [ 281.195673][T12737] alloc_vmap_area+0x95d/0x2bb0 [ 281.195691][T12737] ? kasan_save_track+0x14/0x30 [ 281.195704][T12737] ? __kasan_kmalloc+0xaa/0xb0 [ 281.195718][T12737] ? __pfx_alloc_vmap_area+0x10/0x10 [ 281.195732][T12737] ? __get_vm_area_node+0x124/0x350 [ 281.195748][T12737] __get_vm_area_node+0x1ed/0x350 [ 281.195766][T12737] __vmalloc_node_range_noprof+0x268/0x1420 [ 281.195782][T12737] ? kernel_clone+0x176/0x9d0 [ 281.195795][T12737] ? lock_acquire+0x1d1/0x380 [ 281.195813][T12737] ? kernel_clone+0x176/0x9d0 [ 281.195829][T12737] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 281.195847][T12737] ? rcu_is_watching+0x13/0xc0 [ 281.195863][T12737] ? trace_kmem_cache_alloc+0xdd/0x100 [ 281.195880][T12737] ? kernel_clone+0x176/0x9d0 [ 281.195893][T12737] __vmalloc_node_noprof+0xad/0xf0 [ 281.195908][T12737] ? kernel_clone+0x176/0x9d0 [ 281.195923][T12737] copy_process+0x803/0x8370 [ 281.195936][T12737] ? _kstrtoull+0x144/0x200 [ 281.195951][T12737] ? __pfx__kstrtoull+0x10/0x10 [ 281.195970][T12737] ? __pfx_copy_process+0x10/0x10 [ 281.195988][T12737] ? _copy_from_user+0x59/0xd0 [ 281.196008][T12737] kernel_clone+0x176/0x9d0 [ 281.196021][T12737] ? get_pid_task+0xfc/0x250 [ 281.196039][T12737] ? __pfx_kernel_clone+0x10/0x10 [ 281.196056][T12737] ? find_held_lock+0x2b/0x80 [ 281.196079][T12737] __do_sys_clone3+0x214/0x290 [ 281.196093][T12737] ? __pfx___do_sys_clone3+0x10/0x10 [ 281.196107][T12737] ? ksys_write+0x190/0x250 [ 281.196124][T12737] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 281.196140][T12737] ? __fget_files+0x21f/0x3d0 [ 281.196165][T12737] do_syscall_64+0x123/0x790 [ 281.196180][T12737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.196194][T12737] RIP: 0033:0x7f9f45f9e159 [ 281.196206][T12737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.196219][T12737] RSP: 002b:00007f9f46e04ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 281.196233][T12737] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9f45f9e159 [ 281.196241][T12737] RDX: 00007f9f46e04f10 RSI: 0000000000000058 RDI: 00007f9f46e04f10 [ 281.196249][T12737] RBP: 00007f9f46e05090 R08: 0000000000000000 R09: 0000000000000058 [ 281.196257][T12737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.196265][T12737] R13: 00007f9f46226038 R14: 00007f9f46225fa0 R15: 00007ffe17186fc8 [ 281.196282][T12737] [ 281.583696][T12746] netlink: 348 bytes leftover after parsing attributes in process `syz.6.1651'. [ 281.691377][T12748] autofs: Bad value for 'fd' [ 281.798415][T12745] autofs: Bad value for 'fd' [ 282.003244][T12771] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 282.142859][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 282.401125][T12787] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 282.409218][T12788] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 282.417928][T12786] trusted_key: encrypted_key: insufficient parameters specified [ 282.418908][T12787] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 282.592361][T12800] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1663'. [ 282.628369][T12800] netlink: 'syz.7.1663': attribute type 5 has an invalid length. [ 282.862818][ T65] Bluetooth: hci0: command 0x040f tx timeout [ 282.863133][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 282.863170][ T65] Bluetooth: hci3: command 0x0419 tx timeout [ 282.905570][T12804] netlink: 'syz.1.1665': attribute type 10 has an invalid length. [ 282.921599][T12804] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 283.072406][ T43] kauditd_printk_skb: 1237 callbacks suppressed [ 283.072473][ T43] audit: type=1400 audit(2000000186.329:59758): avc: denied { ioctl } for pid=12811 comm="syz.8.1668" path="socket:[47917]" dev="sockfs" ino=47917 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.083640][ T43] audit: type=1400 audit(2000000186.349:59759): avc: denied { create } for pid=12811 comm="syz.8.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.090818][ T43] audit: type=1400 audit(2000000186.349:59760): avc: denied { create } for pid=12811 comm="syz.8.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.090878][ T43] audit: type=1400 audit(2000000186.349:59761): avc: denied { create } for pid=12811 comm="syz.8.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.090913][ T43] audit: type=1400 audit(2000000186.349:59762): avc: denied { read } for pid=12811 comm="syz.8.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.090948][ T43] audit: type=1400 audit(2000000186.349:59763): avc: denied { create } for pid=12811 comm="syz.8.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.090983][ T43] audit: type=1400 audit(2000000186.349:59764): avc: denied { create } for pid=12811 comm="syz.8.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.091017][ T43] audit: type=1400 audit(2000000186.349:59765): avc: denied { create } for pid=12811 comm="syz.8.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.122843][ T43] audit: type=1400 audit(2000000186.359:59766): avc: denied { write } for pid=12811 comm="syz.8.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.165571][ T43] audit: type=1400 audit(2000000186.429:59767): avc: denied { read write } for pid=10875 comm="syz-executor" name="loop6" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.763188][T12813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 283.766329][T12813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 283.768927][T12813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 283.771987][T12813] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 283.772051][T12813] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 284.062795][ T990] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 284.162685][ T5835] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 284.212681][ T990] usb 11-1: Using ep0 maxpacket: 8 [ 284.216292][ T990] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 284.237827][ T990] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.237877][ T990] usb 11-1: config 0 has no interface number 0 [ 284.237934][ T990] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 108, changing to 10 [ 284.237973][ T990] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 24578, setting to 1024 [ 284.238021][ T990] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.260775][ T990] usb 11-1: config 0 descriptor?? [ 284.295117][ T990] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 284.338205][ T5835] usb 13-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 284.360458][ T5835] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 284.360544][ T5835] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.401160][T12841] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 284.422352][ T5835] opticon 13-1:1.0: opticon converter detected [ 284.486078][ T5835] usb 13-1: opticon converter now attached to ttyUSB0 [ 284.494133][ T5876] usb 11-1: USB disconnect, device number 8 [ 285.102880][ T5090] Bluetooth: hci1: command 0x0c1a tx timeout [ 285.212273][T12871] FAULT_INJECTION: forcing a failure. [ 285.212273][T12871] name failslab, interval 1, probability 0, space 0, times 0 [ 285.212347][T12871] CPU: 3 UID: 0 PID: 12871 Comm: syz.1.1684 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.212391][T12871] Tainted: [L]=SOFTLOCKUP [ 285.212400][T12871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 285.212412][T12871] Call Trace: [ 285.212420][T12871] [ 285.212428][T12871] dump_stack_lvl+0x100/0x190 [ 285.212462][T12871] should_fail_ex.cold+0x5/0xa [ 285.212490][T12871] should_failslab+0xc2/0x120 [ 285.212540][T12871] __kmalloc_noprof+0xfc/0x840 [ 285.212575][T12871] ? lsm_blob_alloc+0x68/0x90 [ 285.212605][T12871] lsm_blob_alloc+0x68/0x90 [ 285.212629][T12871] security_prepare_creds+0x2d/0x290 [ 285.212653][T12871] prepare_creds+0x5d6/0x950 [ 285.212686][T12871] copy_creds+0xa7/0xa50 [ 285.212709][T12871] copy_process+0x1447/0x8370 [ 285.212738][T12871] ? _kstrtoull+0x144/0x200 [ 285.212759][T12871] ? __pfx__kstrtoull+0x10/0x10 [ 285.212792][T12871] ? __pfx_copy_process+0x10/0x10 [ 285.212821][T12871] ? _copy_from_user+0x59/0xd0 [ 285.212852][T12871] kernel_clone+0x176/0x9d0 [ 285.212873][T12871] ? get_pid_task+0xfc/0x250 [ 285.212900][T12871] ? __pfx_kernel_clone+0x10/0x10 [ 285.212927][T12871] ? find_held_lock+0x2b/0x80 [ 285.212961][T12871] __do_sys_clone3+0x214/0x290 [ 285.213003][T12871] ? __pfx___do_sys_clone3+0x10/0x10 [ 285.213026][T12871] ? ksys_write+0x190/0x250 [ 285.213054][T12871] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 285.213082][T12871] ? __fget_files+0x21f/0x3d0 [ 285.213121][T12871] do_syscall_64+0x123/0x790 [ 285.213147][T12871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.213168][T12871] RIP: 0033:0x7f6d4119e159 [ 285.213187][T12871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.213205][T12871] RSP: 002b:00007f6d420b4ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 285.213227][T12871] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6d4119e159 [ 285.213240][T12871] RDX: 00007f6d420b4f10 RSI: 0000000000000058 RDI: 00007f6d420b4f10 [ 285.213253][T12871] RBP: 00007f6d420b5090 R08: 0000000000000000 R09: 0000000000000058 [ 285.213265][T12871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.213277][T12871] R13: 00007f6d41426038 R14: 00007f6d41425fa0 R15: 00007ffca9623ca8 [ 285.213304][T12871] [ 285.822873][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 285.822936][ T65] Bluetooth: hci3: command 0x0419 tx timeout [ 285.823006][ T5090] Bluetooth: hci0: command 0x040f tx timeout [ 285.936449][T12868] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 285.937362][T12868] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 285.937526][T12868] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 285.937743][T12868] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 285.977730][ T5876] usb 13-1: USB disconnect, device number 2 [ 285.986066][ T5876] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 285.986530][ T5876] opticon 13-1:1.0: device disconnected [ 286.175710][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1689'. [ 286.175765][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1689'. [ 286.175805][T12886] netlink: 'syz.7.1689': attribute type 5 has an invalid length. [ 286.205209][ T7245] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.205293][ T7245] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.205337][ T7245] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.205359][ T7245] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.806638][T12905] pim6reg1: entered promiscuous mode [ 286.811446][T12905] pim6reg1: entered allmulticast mode [ 286.939299][T12913] FAULT_INJECTION: forcing a failure. [ 286.939299][T12913] name failslab, interval 1, probability 0, space 0, times 0 [ 286.957450][T12913] CPU: 0 UID: 0 PID: 12913 Comm: syz.6.1699 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.957500][T12913] Tainted: [L]=SOFTLOCKUP [ 286.957509][T12913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.957521][T12913] Call Trace: [ 286.957530][T12913] [ 286.957539][T12913] dump_stack_lvl+0x100/0x190 [ 286.957575][T12913] should_fail_ex.cold+0x5/0xa [ 286.957604][T12913] should_failslab+0xc2/0x120 [ 286.957626][T12913] __kmalloc_noprof+0xfc/0x840 [ 286.957648][T12913] ? lsm_blob_alloc+0x68/0x90 [ 286.957676][T12913] lsm_blob_alloc+0x68/0x90 [ 286.957699][T12913] security_task_alloc+0x2a/0x260 [ 286.957724][T12913] copy_process+0x2c11/0x8370 [ 286.957760][T12913] ? __pfx_copy_process+0x10/0x10 [ 286.957788][T12913] ? _copy_from_user+0x59/0xd0 [ 286.957822][T12913] kernel_clone+0x176/0x9d0 [ 286.957844][T12913] ? get_pid_task+0xfc/0x250 [ 286.957872][T12913] ? __pfx_kernel_clone+0x10/0x10 [ 286.957898][T12913] ? find_held_lock+0x2b/0x80 [ 286.957933][T12913] __do_sys_clone3+0x214/0x290 [ 286.957956][T12913] ? __pfx___do_sys_clone3+0x10/0x10 [ 286.957979][T12913] ? ksys_write+0x190/0x250 [ 286.958010][T12913] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 286.958032][T12913] ? __fget_files+0x21f/0x3d0 [ 286.958076][T12913] do_syscall_64+0x123/0x790 [ 286.958101][T12913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.958123][T12913] RIP: 0033:0x7f9f45f9e159 [ 286.958143][T12913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.958161][T12913] RSP: 002b:00007f9f46e04ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 286.958204][T12913] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9f45f9e159 [ 286.958218][T12913] RDX: 00007f9f46e04f10 RSI: 0000000000000058 RDI: 00007f9f46e04f10 [ 286.958232][T12913] RBP: 00007f9f46e05090 R08: 0000000000000000 R09: 0000000000000058 [ 286.958246][T12913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.958260][T12913] R13: 00007f9f46226038 R14: 00007f9f46225fa0 R15: 00007ffe17186fc8 [ 286.958286][T12913] [ 286.993712][T12916] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 286.995519][T12917] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 287.184836][ T5090] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.935093][T12956] FAULT_INJECTION: forcing a failure. [ 287.935093][T12956] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 287.935181][T12956] CPU: 3 UID: 0 PID: 12956 Comm: syz.8.1712 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.935225][T12956] Tainted: [L]=SOFTLOCKUP [ 287.935235][T12956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 287.935249][T12956] Call Trace: [ 287.935264][T12956] [ 287.935273][T12956] dump_stack_lvl+0x100/0x190 [ 287.935321][T12956] should_fail_ex.cold+0x5/0xa [ 287.935346][T12956] ? prepare_alloc_pages+0x16d/0x5b0 [ 287.935381][T12956] should_fail_alloc_page+0xeb/0x140 [ 287.935406][T12956] prepare_alloc_pages+0x1f0/0x5b0 [ 287.935432][T12956] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 287.935468][T12956] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 287.935504][T12956] ? arch_stack_walk+0xa6/0xf0 [ 287.935541][T12956] ? __lock_acquire+0x4c5/0x1ec0 [ 287.935569][T12956] ? stack_trace_save+0x8e/0xc0 [ 287.935600][T12956] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 287.935636][T12956] ? lock_acquire+0x1d1/0x380 [ 287.935657][T12956] ? try_charge_memcg+0x183/0xf60 [ 287.935691][T12956] ? __lock_acquire+0x4c5/0x1ec0 [ 287.935724][T12956] ? lock_acquire+0x1d1/0x380 [ 287.935743][T12956] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.935769][T12956] ? policy_nodemask+0xed/0x4f0 [ 287.935798][T12956] alloc_pages_mpol+0x201/0x550 [ 287.935844][T12956] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 287.935869][T12956] ? __memcg_slab_post_alloc_hook+0x78b/0x1270 [ 287.935907][T12956] alloc_pages_noprof+0x1a/0x160 [ 287.935937][T12956] pgd_alloc+0x4d/0x630 [ 287.935963][T12956] ? mutex_init_lockdep+0xf1/0x120 [ 287.935991][T12956] mm_init+0x6a3/0xef0 [ 287.936016][T12956] copy_process+0x47f3/0x8370 [ 287.936053][T12956] ? __pfx_copy_process+0x10/0x10 [ 287.936084][T12956] ? _copy_from_user+0x59/0xd0 [ 287.936119][T12956] kernel_clone+0x176/0x9d0 [ 287.936141][T12956] ? get_pid_task+0xfc/0x250 [ 287.936170][T12956] ? __pfx_kernel_clone+0x10/0x10 [ 287.936199][T12956] ? find_held_lock+0x2b/0x80 [ 287.936233][T12956] __do_sys_clone3+0x214/0x290 [ 287.936257][T12956] ? __pfx___do_sys_clone3+0x10/0x10 [ 287.936278][T12956] ? ksys_write+0x190/0x250 [ 287.936308][T12956] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 287.936341][T12956] ? __fget_files+0x21f/0x3d0 [ 287.936383][T12956] do_syscall_64+0x123/0x790 [ 287.936412][T12956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.936437][T12956] RIP: 0033:0x7f987099e159 [ 287.936456][T12956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.936479][T12956] RSP: 002b:00007f9871785ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 287.936510][T12956] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f987099e159 [ 287.936532][T12956] RDX: 00007f9871785f10 RSI: 0000000000000058 RDI: 00007f9871785f10 [ 287.936546][T12956] RBP: 00007f9871786090 R08: 0000000000000000 R09: 0000000000000058 [ 287.936562][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 287.936575][T12956] R13: 00007f9870c26038 R14: 00007f9870c25fa0 R15: 00007ffc5dd9b778 [ 287.936605][T12956] [ 287.993321][ T5738] Bluetooth: hci0: command 0x040f tx timeout [ 287.993373][ T5738] Bluetooth: hci3: command 0x0419 tx timeout [ 287.993474][ T5090] Bluetooth: hci2: command 0x0c1a tx timeout [ 288.113490][ T43] kauditd_printk_skb: 595 callbacks suppressed [ 288.113606][ T43] audit: type=1400 audit(2000000191.379:60363): avc: denied { create } for pid=12957 comm="syz.6.1713" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 288.129156][ T43] audit: type=1400 audit(2000000191.389:60364): avc: denied { map } for pid=12957 comm="syz.6.1713" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=49877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 288.140676][ T43] audit: type=1400 audit(2000000191.409:60365): avc: denied { read write } for pid=12957 comm="syz.6.1713" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=49877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 288.140781][ T43] audit: type=1400 audit(2000000191.409:60366): avc: denied { read write } for pid=12959 comm="syz.8.1714" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 288.141821][ T43] audit: type=1400 audit(2000000191.409:60367): avc: denied { read open } for pid=12959 comm="syz.8.1714" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 288.149278][ T43] audit: type=1400 audit(2000000191.409:60368): avc: denied { ioctl } for pid=12959 comm="syz.8.1714" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 288.195449][ T43] audit: type=1400 audit(2000000191.459:60369): avc: denied { write } for pid=12957 comm="syz.6.1713" name="secretmem" dev="secretmem" ino=49877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 288.211619][ T43] audit: type=1400 audit(2000000191.469:60370): avc: denied { read } for pid=12957 comm="syz.6.1713" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 288.211684][ T43] audit: type=1400 audit(2000000191.469:60371): avc: denied { read open } for pid=12957 comm="syz.6.1713" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 288.213773][ T43] audit: type=1400 audit(2000000191.469:60372): avc: denied { ioctl } for pid=12957 comm="syz.6.1713" path="/dev/dri/card1" dev="devtmpfs" ino=637 ioctlcmd=0x64bc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 288.632750][ T990] usb 13-1: new full-speed USB device number 3 using dummy_hcd [ 288.786416][ T990] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 288.796761][ T990] usb 13-1: config 1 interface 0 altsetting 250 endpoint 0x1 has invalid maxpacket 592, setting to 64 [ 288.796801][ T990] usb 13-1: config 1 interface 0 has no altsetting 0 [ 288.824285][ T990] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.824325][ T990] usb 13-1: Product: М [ 288.824370][ T990] usb 13-1: Manufacturer: င [ 288.824394][ T990] usb 13-1: SerialNumber: syz [ 288.841447][T12965] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 288.853294][T12981] netlink: 'syz.7.1720': attribute type 11 has an invalid length. [ 289.001640][T12984] FAULT_INJECTION: forcing a failure. [ 289.001640][T12984] name failslab, interval 1, probability 0, space 0, times 0 [ 289.001698][T12984] CPU: 3 UID: 0 PID: 12984 Comm: syz.7.1722 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.001725][T12984] Tainted: [L]=SOFTLOCKUP [ 289.001731][T12984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.001739][T12984] Call Trace: [ 289.001743][T12984] [ 289.001748][T12984] dump_stack_lvl+0x100/0x190 [ 289.001769][T12984] should_fail_ex.cold+0x5/0xa [ 289.001787][T12984] should_failslab+0xc2/0x120 [ 289.001801][T12984] kmem_cache_alloc_noprof+0x92/0x6a0 [ 289.001813][T12984] ? __mt_dup+0x61e/0xce0 [ 289.001829][T12984] __mt_dup+0x61e/0xce0 [ 289.001844][T12984] ? __pfx___mt_dup+0x10/0x10 [ 289.001861][T12984] ? lock_acquire+0x1d1/0x380 [ 289.001873][T12984] ? get_mm_exe_file+0x25/0x1a0 [ 289.001893][T12984] dup_mmap+0x3d0/0x2370 [ 289.001908][T12984] ? do_raw_spin_lock+0x128/0x260 [ 289.001926][T12984] ? __pfx_dup_mmap+0x10/0x10 [ 289.001938][T12984] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 289.001958][T12984] ? lockdep_hardirqs_on+0x7d/0x110 [ 289.001970][T12984] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 289.001991][T12984] ? __lock_acquire+0x4c5/0x1ec0 [ 289.002008][T12984] ? lock_acquire+0x1d1/0x380 [ 289.002019][T12984] ? copy_process+0x4806/0x8370 [ 289.002037][T12984] copy_process+0x4811/0x8370 [ 289.002057][T12984] ? __pfx_copy_process+0x10/0x10 [ 289.002074][T12984] ? _copy_from_user+0x59/0xd0 [ 289.002093][T12984] kernel_clone+0x176/0x9d0 [ 289.002105][T12984] ? get_pid_task+0xfc/0x250 [ 289.002121][T12984] ? __pfx_kernel_clone+0x10/0x10 [ 289.002137][T12984] ? find_held_lock+0x2b/0x80 [ 289.002156][T12984] __do_sys_clone3+0x214/0x290 [ 289.002169][T12984] ? __pfx___do_sys_clone3+0x10/0x10 [ 289.002181][T12984] ? ksys_write+0x190/0x250 [ 289.002197][T12984] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 289.002211][T12984] ? __fget_files+0x21f/0x3d0 [ 289.002234][T12984] do_syscall_64+0x123/0x790 [ 289.002249][T12984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.002261][T12984] RIP: 0033:0x7fa8e399e159 [ 289.002271][T12984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.002283][T12984] RSP: 002b:00007fa8e490bef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 289.002295][T12984] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa8e399e159 [ 289.002302][T12984] RDX: 00007fa8e490bf10 RSI: 0000000000000058 RDI: 00007fa8e490bf10 [ 289.002309][T12984] RBP: 00007fa8e490c090 R08: 0000000000000000 R09: 0000000000000058 [ 289.002316][T12984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.002323][T12984] R13: 00007fa8e3c26038 R14: 00007fa8e3c25fa0 R15: 00007ffe16d02528 [ 289.002338][T12984] [ 289.103895][T12965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.104322][T12965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.144702][T12985] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1721'. [ 289.215541][ T990] usb 13-1: USB disconnect, device number 3 [ 289.352231][ T1163] ================================================================== [ 289.352252][ T1163] BUG: KASAN: slab-use-after-free in dr ** replaying previous printk message ** [ 289.352252][ T1163] BUG: KASAN: slab-use-after-free in drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 289.352272][ T1163] Read of size 1 at addr ffff888034bc0009 by task kworker/u33:8/1163 [ 289.352281][ T1163] [ 289.352289][ T1163] CPU: 2 UID: 0 PID: 1163 Comm: kworker/u33:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.352304][ T1163] Tainted: [L]=SOFTLOCKUP [ 289.352309][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.352316][ T1163] Workqueue: events_unbound commit_work [ 289.352330][ T1163] Call Trace: [ 289.352334][ T1163] [ 289.352339][ T1163] dump_stack_lvl+0x100/0x190 [ 289.352356][ T1163] print_report+0x13d/0x4b0 [ 289.352373][ T1163] ? __virt_addr_valid+0x239/0x430 [ 289.352385][ T1163] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 289.352398][ T1163] kasan_report+0xdf/0x1c0 [ 289.352412][ T1163] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 289.352426][ T1163] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 289.352439][ T1163] ? preempt_schedule_common+0x3c/0xb0 [ 289.352451][ T1163] ? preempt_schedule_thunk+0x16/0x40 [ 289.352465][ T1163] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 289.352497][ T1163] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 289.352516][ T1163] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 289.352530][ T1163] drm_atomic_helper_commit_tail+0xff/0x130 [ 289.352543][ T1163] commit_tail+0x338/0x430 [ 289.352568][ T1163] process_one_work+0xac7/0x1b10 [ 289.352588][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 289.352605][ T1163] ? lock_acquire+0x1d1/0x380 [ 289.352618][ T1163] ? __pfx_commit_work+0x10/0x10 [ 289.352630][ T1163] worker_thread+0x5ef/0xe50 [ 289.352648][ T1163] ? kthread+0x13a/0x450 [ 289.352662][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 289.352678][ T1163] kthread+0x373/0x450 [ 289.352692][ T1163] ? __pfx_kthread+0x10/0x10 [ 289.352707][ T1163] ret_from_fork+0x730/0xd60 [ 289.352733][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 289.352745][ T1163] ? __switch_to+0x800/0x10f0 [ 289.352760][ T1163] ? __pfx_kthread+0x10/0x10 [ 289.352775][ T1163] ret_from_fork_asm+0x1a/0x30 [ 289.352789][ T1163] [ 289.352794][ T1163] [ 289.352796][ T1163] Allocated by task 12991: [ 289.352802][ T1163] kasan_save_stack+0x30/0x50 [ 289.352897][ T1163] kasan_save_track+0x14/0x30 [ 289.352907][ T1163] __kasan_kmalloc+0xaa/0xb0 [ 289.352917][ T1163] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 289.352932][ T1163] drm_atomic_helper_crtc_duplicate_state+0x72/0xd0 [ 289.352946][ T1163] drm_atomic_get_crtc_state+0x1de/0x690 [ 289.352981][ T1163] drm_atomic_set_property+0x165/0x3f90 [ 289.352993][ T1163] drm_mode_atomic_ioctl+0x6c5/0x2680 [ 289.353004][ T1163] drm_ioctl_kernel+0x1f3/0x3e0 [ 289.353014][ T1163] drm_ioctl+0x5e6/0xc60 [ 289.353023][ T1163] __x64_sys_ioctl+0x18e/0x210 [ 289.353039][ T1163] do_syscall_64+0x123/0x790 [ 289.353050][ T1163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.353060][ T1163] [ 289.353063][ T1163] Freed by task 10: [ 289.353068][ T1163] kasan_save_stack+0x30/0x50 [ 289.353078][ T1163] kasan_save_track+0x14/0x30 [ 289.353088][ T1163] kasan_save_free_info+0x3b/0x70 [ 289.353103][ T1163] __kasan_slab_free+0x5f/0x80 [ 289.353113][ T1163] kfree+0x22b/0x6d0 [ 289.353126][ T1163] drm_atomic_commit_default_clear+0x465/0x10c0 [ 289.353137][ T1163] __drm_atomic_commit_free+0x185/0x2f0 [ 289.353147][ T1163] drm_atomic_helper_dirtyfb+0x578/0x790 [ 289.353167][ T1163] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 289.353182][ T1163] drm_fb_helper_damage_work+0x4c8/0xab0 [ 289.353194][ T1163] process_one_work+0xac7/0x1b10 [ 289.353209][ T1163] worker_thread+0x5ef/0xe50 [ 289.353224][ T1163] kthread+0x373/0x450 [ 289.353237][ T1163] ret_from_fork+0x730/0xd60 [ 289.353247][ T1163] ret_from_fork_asm+0x1a/0x30 [ 289.353258][ T1163] [ 289.353260][ T1163] The buggy address belongs to the object at ffff888034bc0000 [ 289.353260][ T1163] which belongs to the cache kmalloc-512 of size 512 [ 289.353269][ T1163] The buggy address is located 9 bytes inside of [ 289.353269][ T1163] freed 512-byte region [ffff888034bc0000, ffff888034bc0200) [ 289.353279][ T1163] [ 289.353282][ T1163] The buggy address belongs to the physical page: [ 289.353287][ T1163] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34bc0 [ 289.353297][ T1163] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 289.353305][ T1163] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 289.353316][ T1163] page_type: f5(slab) [ 289.353326][ T1163] raw: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 289.353336][ T1163] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 289.353346][ T1163] head: 00fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 289.353355][ T1163] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 289.353365][ T1163] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 289.353374][ T1163] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 289.353380][ T1163] page dumped because: kasan: bad access detected [ 289.353385][ T1163] page_owner tracks the page as allocated [ 289.353389][ T1163] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (init), ts 10179364067 [ 289.353405][ T1163] post_alloc_hook+0xfd/0x120 [ 289.353420][ T1163] get_page_from_freelist+0x110d/0x35b0 [ 289.353435][ T1163] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 289.353451][ T1163] new_slab+0xa9/0x6e0 [ 289.353465][ T1163] refill_objects+0xe3/0x410 [ 289.353480][ T1163] __pcs_replace_empty_main+0x35e/0x650 [ 289.353496][ T1163] __kmalloc_noprof+0x67c/0x840 [ 289.353505][ T1163] tomoyo_init_log+0x1224/0x20c0 [ 289.353515][ T1163] tomoyo_supervisor+0x506/0x1340 [ 289.353527][ T1163] tomoyo_path_permission+0x270/0x3b0 [ 289.353540][ T1163] tomoyo_path_perm+0x364/0x460 [ 289.353554][ T1163] security_inode_getattr+0x116/0x280 [ 289.353570][ T1163] vfs_fstat+0x4b/0xe0 [ 289.353583][ T1163] __do_sys_newfstat+0x8b/0x110 [ 289.353595][ T1163] do_syscall_64+0x123/0x790 [ 289.353607][ T1163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.353617][ T1163] page last free pid 1 tgid 1 ts 10178754899 stack trace: [ 289.353624][ T1163] __free_frozen_pages+0x79f/0x10f0 [ 289.353637][ T1163] stack_depot_save_flags+0x456/0x9f0 [ 289.353648][ T1163] kasan_save_stack+0x3f/0x50 [ 289.353658][ T1163] kasan_save_track+0x14/0x30 [ 289.353668][ T1163] __kasan_kmalloc+0xaa/0xb0 [ 289.353678][ T1163] __kmalloc_noprof+0x32f/0x840 [ 289.353687][ T1163] tomoyo_supervisor+0x65d/0x1340 [ 289.353698][ T1163] tomoyo_mount_acl+0x580/0x8b0 [ 289.353714][ T1163] tomoyo_mount_permission+0x214/0x460 [ 289.353729][ T1163] security_sb_mount+0xdd/0x270 [ 289.353743][ T1163] path_mount+0x158/0x24c0 [ 289.353757][ T1163] __x64_sys_mount+0x293/0x310 [ 289.353771][ T1163] do_syscall_64+0x123/0x790 [ 289.353781][ T1163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.353791][ T1163] [ 289.353794][ T1163] Memory state around the buggy address: [ 289.353799][ T1163] ffff888034bbff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.353807][ T1163] ffff888034bbff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 289.353814][ T1163] >ffff888034bc0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.353820][ T1163] ^ [ 289.353825][ T1163] ffff888034bc0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.353833][ T1163] ffff888034bc0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.353839][ T1163] ================================================================== [ 289.358496][ T1163] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 289.668312][ T1163] CPU: 2 UID: 0 PID: 1163 Comm: kworker/u33:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.672942][ T1163] Tainted: [L]=SOFTLOCKUP [ 289.675083][ T1163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.678987][ T1163] Workqueue: events_unbound commit_work [ 289.681199][ T1163] Call Trace: [ 289.682636][ T1163] [ 289.683924][ T1163] dump_stack_lvl+0x100/0x190 [ 289.685914][ T1163] vpanic+0x553/0x970 [ 289.687613][ T1163] ? __pfx_vpanic+0x10/0x10 [ 289.689547][ T1163] ? mark_held_locks+0x40/0x70 [ 289.691573][ T1163] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 289.694571][ T1163] panic+0xd1/0xe0 [ 289.696134][ T1163] ? __pfx_panic+0x10/0x10 [ 289.697969][ T1163] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 289.700913][ T1163] ? preempt_schedule_common+0x3c/0xb0 [ 289.703378][ T1163] check_panic_on_warn.cold+0x19/0x34 [ 289.705755][ T1163] end_report.part.0+0x3a/0x90 [ 289.707733][ T1163] kasan_report.cold+0xe/0x18 [ 289.709804][ T1163] ? drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 289.712906][ T1163] drm_atomic_helper_wait_for_vblanks.part.0+0x7d5/0x8a0 [ 289.715801][ T1163] ? preempt_schedule_common+0x3c/0xb0 [ 289.718306][ T1163] ? preempt_schedule_thunk+0x16/0x40 [ 289.720768][ T1163] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 289.724032][ T1163] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 289.726417][ T1163] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 289.729154][ T1163] drm_atomic_helper_commit_tail+0xff/0x130 [ 289.731515][ T1163] commit_tail+0x338/0x430 [ 289.733398][ T1163] process_one_work+0xac7/0x1b10 [ 289.735554][ T1163] ? __pfx_process_one_work+0x10/0x10 [ 289.738027][ T1163] ? lock_acquire+0x1d1/0x380 [ 289.739967][ T1163] ? __pfx_commit_work+0x10/0x10 [ 289.742100][ T1163] worker_thread+0x5ef/0xe50 [ 289.743984][ T1163] ? kthread+0x13a/0x450 [ 289.745729][ T1163] ? __pfx_worker_thread+0x10/0x10 [ 289.747800][ T1163] kthread+0x373/0x450 [ 289.749465][ T1163] ? __pfx_kthread+0x10/0x10 [ 289.751485][ T1163] ret_from_fork+0x730/0xd60 [ 289.753723][ T1163] ? __pfx_ret_from_fork+0x10/0x10 [ 289.756127][ T1163] ? __switch_to+0x800/0x10f0 [ 289.758108][ T1163] ? __pfx_kthread+0x10/0x10 [ 289.759567][ T1163] ret_from_fork_asm+0x1a/0x30 [ 289.761020][ T1163] [ 289.762644][ T1163] Kernel Offset: disabled [ 289.763943][ T1163] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:50:05 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff8fbd3bc0 RBX=ffffffff8fbd3c60 RCX=ffffffff81ea0469 RDX=ffff88801eee0000 RSI=0000000000000004 RDI=ffffffff8fbd3c60 RBP=ffffc90000137da8 RSP=ffffc90000137958 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=53414b203a475542 R12=0000000000000000 R13=ffffc90000137da8 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff827eee9a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6d41f556c8 CR3=0000000036ce4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f64656772656d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca9624196 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca9624196 00007ffca962419c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d41235607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d41235647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d412357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d41235639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000220 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000220 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f2d4b00 RSI=ffffffff81b69e9e RDI=ffff88801f2d4b00 RBP=0000000000000001 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=0000000000000000 RIP=ffffffff81b69e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4de07ed158 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000004 DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002012492 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563b3e268770 0000563b3e268770 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 0000563b3df153b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1070207f0 00007ff1070207e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff1069f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464325f5a711434 6464325f5a7191c4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464325f5a7191cc 6464325f5a7191cc ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 0000563b3df153b0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563b3e150c50 0000563b3df17bd0 0000563b3e14df60 0000563b3e160a20 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563b3e153020 0000563b3e157e10 0000563b3e151580 0000563b3e157640 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563b3e16a4b0 0000563b3e14cd70 0000563b3e15c2b0 0000563b3e15fa30 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563b3e15ce90 0000563b3e150e70 0000563b3e1575e0 0000563b3e15af50 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 706e642f35317475 0000562f5d752b3c 0000000000000051 0032312f38652f6b ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 000000000000003c 0000000000000051 0000312f3531296b ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000062 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afb6c5 RDI=ffffffff9bc60ca0 RBP=ffffffff9bc60c60 RSP=ffffc900058e7220 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=332e39383220205b R12=0000000000000000 R13=0000000000000062 R14=000000000000000f R15=ffffc900058e7538 RIP=ffffffff85afb6ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa8e4755690 CR3=0000000036dd5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000001000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7ed70feb 00007ffd7ed70feb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7ed714f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7ed714f0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 204c202020202020 2020202020202047 203a6465746e6961 5420383a3333752f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3834203130203938 2034362038642037 6620666620666620 6666203865203163 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2037632038342033 6320313020333720 6666206666203066 203130206433203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38343c2035302066 3020383020343220 6334206238206334 2038632039382064 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420326320393820 6434206163203938 2038342036642039 3820383420376620 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f637320636234 3678303d646d636c 74636f6920373336 3d6f6e6920227366 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff982a6b28 RBX=0000000000000003 RCX=0000000000000004 RDX=ffffffff9690bfa0 RSI=0000000000000004 RDI=ffffffff9815dd58 RBP=0000000000000030 RSP=ffffc90005007188 R8 =ffffffff9690bfd0 R9 =0000000000000002 R10=ffffc90005007318 R11=0000000000000000 R12=ffffffff81e68620 R13=ffffc90005007230 R14=ffffffff81e68fd0 R15=ffffffff9815dd58 RIP=ffffffff81e69a97 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558abbe500 ffffffff 00c00000 GS =0000 ffff8880d5e64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001bc0 CR3=0000000043f4d000 CR4=00352ef0 DR0=0000000000000004 DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe16d02a16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe16d02a16 00007ffe16d02a1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8e3a35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8e3a35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8e3a357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa8e3a35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e71540bc6121854f be477d5a83df1510 c8926846d2e55fff 04bc9ae84a5d19c2 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c8926846d2e55fff 04bc9ae84a5d19c2 cdd1b1c23d89f603 a1880fbf5ae3fb6f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0929f31a0ff91999 bc3d26944eeb09e4 224fb55d4c17ac27 50c48d626c16dc84 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05b9e2db9b4355f6 58fcb32ecc69bf00 b368023e4c82b918 0929f31a0ff91999 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc3d26944eeb09e4 224fb55d4c17ac27 50c48d626c16dc84 763a7157fdb2dfe0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6ffafb89e202c0e2 da22686598f2864d 42da2900000b4ed4 bc32560e0ae1c243 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 41af2181fc2d5bc6 b43603a712b44a5e 04904697c8e16c03 c572ec5a2ab2b09a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000