last executing test programs: 2m41.816351229s ago: executing program 2 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000280)=0x3) waitid$P_PIDFD(0x3, r2, 0x0, 0x8, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 2m41.789207729s ago: executing program 2 (id=14): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x3, 0x9, 0x0, 0x4, 0x5, 0x0, 0x5, 0xdf}) (async) r1 = socket(0x2, 0x80805, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, &(0x7f0000000040)=""/118) (async) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000001580)=0x6, 0x4) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x4, "f3c492ea016503000000c708bde439d9edffdd00000000e4a6d85b005900", 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8050) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000200)={"fe0d1acce4a37ef94acd000200"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e12090018", 0x27}], 0x1}, 0x0) r6 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x45a, &(0x7f0000001100)={@link_local, @remote, @val={@val={0x88a8, 0x7, 0x0, 0x1}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "97cd1f", 0x41c, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}, @mcast1, {[@dstopts={0x87, 0x24, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x4c, 0x5, [0x9]}}, @pad1, @generic={0x4, 0xee, "ea99ba96f23e844c7781bbe8a1daebc0e65a19157296e67f8703d65898986693c3b199f6210a7ac5c4acf04208e66057aceabdb6d76c6c59d030473d3ecb951d8d4886c513a6391fed66d55591120f399b870bfb21c0310a70d46b860cade0802ad3f251c7da9a8395c42d58eb9283aec1dd7a49a1e6ec2fc813ee8978e9f75d9f498d2c6874d5fff77a2f9f0b3f7bc66b18438ebdba2e65b21e83d3395c50e153915c9ca940d01b4b4f0da863fe6d1d37b92dc770944668774cf29e0afa1bc8d04ee8faa58e391e0756540319de66aacf431d0bbc13ac68b215acadbd3210d66d50deccc8ab6aedd52692965eb5"}, @generic={0x5, 0x13, "40f9b3e6768f01a37ae811a377f9dcb2030b8f"}, @padn={0x1, 0x1, [0x0]}]}, @srh={0x2f, 0x4, 0x4, 0x2, 0x5, 0x20, 0xd, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0xc, 0x6, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, @private0]}, @fragment={0x3c, 0x0, 0x4, 0x1, 0x0, 0x1, 0x66}], @mlv2_report={0x8f, 0x0, 0x0, 0x5, 0x7, [{0xd6, 0x7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, [@dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x30}, @private1={0xfc, 0x1, '\x00', 0x1}], [0x3c, 0x4bd, 0x2ee, 0x8, 0x4, 0x7f, 0x1]}, {0x0, 0x8, 0x1, @loopback, [@mcast1], [0x7, 0x9, 0x0, 0x5d03, 0x0, 0x9, 0x3, 0x2]}, {0x9, 0x7, 0x8, @mcast2, [@remote, @private0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote], [0x80000001, 0x1, 0x4, 0x0, 0x4, 0x9, 0x1]}, {0x5, 0x2, 0x2, @empty, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x3a}], [0x8, 0xbb19]}, {0x5, 0x5, 0x4, @mcast2, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private0, @dev={0xfe, 0x80, '\x00', 0x1b}, @private2], [0x9, 0x1fb9, 0x10000, 0x6, 0x3]}, {0x5, 0x6, 0x3, @empty, [@mcast2, @mcast1, @loopback], [0x7, 0xa, 0x3, 0xa000, 0x143, 0xb]}, {0x7, 0x1, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@private2], [0x5]}]}}}}}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000001940)=""/4107, &(0x7f0000001040)=0x100b) 2m41.788141493s ago: executing program 2 (id=15): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r4, 0x560d, 0x10000000000004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0xba01}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00ed0bd81700000000000002000000", @ANYRES32=r8, @ANYBLOB="000014000a0001"], 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES64=r9, @ANYRES8=r5], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmsg$alg(r12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xe078}}, 0x0) recvmmsg(r12, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/99, 0x63}], 0x1}}], 0x1, 0x2143, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="f1dbaefdcb2c8b43"], 0x30}}, 0x0) mount$afs(&(0x7f0000000180), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x86c58d3ee8472451, &(0x7f00000003c0)={[{@dyn}, {@dyn}, {@flock_openafs}, {@dyn}, {@dyn}, {@flock_write}], [{@dont_hash}]}) 2m41.673011564s ago: executing program 2 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$inet6(0xa, 0x0, 0xb) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x350, 0xffffffff, 0xffffffff, 0x350, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xf97e}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xff], 'vlan0\x00', 'xfrm0\x00'}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x2, 0x5, 0x0, 0x0, 0x7, 0x2, 0x40, 0x80}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x4, 0x0, 0x1000, 0x6, 0x3}, {0x4}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x480) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x5a, 0xa, 0x0, "b75cbb1844038d2cd97c945462f31638b5394c00"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$video(&(0x7f0000002c40), 0x7fffffff, 0x0) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, &(0x7f0000000040)={0x4, "61a383835e7449d3f751591538e5fe23a81bcf9c307319290bd82a046f9c1290", 0x0, 0xfffffffd, 0x5, 0xff06ff, 0x0, 0x8}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000cb04000000000003002100000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e0001006970366772657461700000002000028014000700ff02000000000000000000000000000108000c00000000000a0001007e6ce56be2640000"], 0x60}}, 0x0) timer_getoverrun(0x0) 2m41.479256559s ago: executing program 2 (id=18): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES64, @ANYRESOCT, @ANYRES8=r2, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESHEX, @ANYRES16, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000a40)=@newqdisc={0x104, 0x24, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x4}, {0xfff1, 0x10}, {0x6, 0x10}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x0, 0x750e, 0xfffffff9, 0x2, 0x10001, 0x9, 0x6}}, {0x10, 0x2, [0x0, 0x1, 0x9, 0x5, 0x81, 0x7]}}, {{0x1c, 0x1, {0x50, 0x55, 0xea0, 0x7, 0x1, 0x7ded, 0x11, 0xa}}, {0x18, 0x2, [0x9, 0x5, 0x800, 0xf633, 0x1, 0x6, 0xc9ed, 0x1, 0x9, 0xf]}}, {{0x1c, 0x1, {0x3, 0xd4, 0x3ff, 0x3, 0x1, 0xd2, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x80, 0x2, 0x9, 0x10000, 0x0, 0x8000, 0x10, 0x6}}, {0x10, 0x2, [0x0, 0x1, 0xf10, 0x8, 0x5, 0x0]}}]}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x1, "dd41b270957aaedcf928f092c107e001"}}}]}, 0x104}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0800a0009e09000008009f0004000000050018011900000008002600800900000800a10005000000"], 0x44}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a817008847", 0x33fe0}], 0x1}, 0x0) r4 = accept$alg(r2, 0x0, 0x0) r5 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x1000000000204) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) recvmsg(r4, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x4c, 0x1a, 0x0, 0x25, 0x228, 0x258, 0x258, 0x228, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2, @loopback, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x108, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x3b0}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000580)=""/277, 0x115) lseek(r7, 0x400, 0x1) getdents64(r7, &(0x7f00000000c0)=""/162, 0xa2) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x62280100, &(0x7f0000000700)="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", 0x1bd, 0x0, 0x0, 0x0) 2m41.262700346s ago: executing program 2 (id=19): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$link(0x8, r0, r0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="eb06cd5b313c7d2de9f2cb4dbb042b68520bc82a08128b62c06ef0e2f678dd89b2", 0x21, r1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) keyctl$link(0x8, r0, r0) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="eb06cd5b313c7d2de9f2cb4dbb042b68520bc82a08128b62c06ef0e2f678dd89b2", 0x21, r1) (async) 2m37.912214026s ago: executing program 0 (id=54): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8}]}}]}, 0x38}}, 0x0) (async) r3 = inotify_init() ioctl$FITHAW(r3, 0xc0045878) 2m37.82220603s ago: executing program 0 (id=55): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x6}]}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r5, 0x5501) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/96, 0x60}], 0x2, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r3, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3b}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x11}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x4e24, 0x0, @mcast1}}, {{0xa, 0x4e20, 0x0, @private1, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x0, {0x0, 0xa}, {0x3}, @const={0x0, {0x0, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 2m36.962986527s ago: executing program 0 (id=67): syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000008004900002a004000000000907800000000ffffffff0000000001"], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)) r1 = gettid() tkill(r1, 0x12) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000000)={[0x40]}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000787000/0x3000)=nil, 0x3000}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x980800, 0x7}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffd}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x401}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 2m36.599727982s ago: executing program 0 (id=71): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001"], 0x5c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000008047c0000ec0000000c00018006000600800a0000100002800c00150007"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='qnx6\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000040)={0x33, {{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xf}}}, 0x88) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002400010000000000000000000000000006000400e9"], 0x24}}, 0x0) 2m36.532000564s ago: executing program 0 (id=72): openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000008c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400ff7f10005bd300"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000002000000080003003bfe3ac6102d", @ANYRES32=0x0, @ANYBLOB="0800a0009e09000008009f0004000000050018011900000008002600800900000800a10005000000"], 0x44}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a817008847", 0x33fe0}], 0x1}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x1000000000204) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) recvmsg(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x4c, 0x1a, 0x0, 0x25, 0x228, 0x258, 0x258, 0x228, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2, @loopback, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x108, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x3b0}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000580)=""/277, 0x115) lseek(r5, 0x400, 0x1) getdents64(r5, &(0x7f00000000c0)=""/162, 0xa2) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x62280100, &(0x7f0000000700)="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", 0x1bd, 0x0, 0x0, 0x0) 2m36.31244102s ago: executing program 0 (id=77): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000180)={0x80, 0x1, 'client0\x00', 0x1, "896c81dd59ff28d2", "e5dbc741536b0e2fbb12e9338ec8dcb3e07c903fc30e8a11d477e3fb04eb2f74", 0x3, 0x4}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) (async) ioctl$TIOCSETD(r0, 0x541b, &(0x7f0000000000)) 2m26.245908747s ago: executing program 32 (id=19): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$link(0x8, r0, r0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="eb06cd5b313c7d2de9f2cb4dbb042b68520bc82a08128b62c06ef0e2f678dd89b2", 0x21, r1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) keyctl$link(0x8, r0, r0) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r0) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="eb06cd5b313c7d2de9f2cb4dbb042b68520bc82a08128b62c06ef0e2f678dd89b2", 0x21, r1) (async) 2m21.222231261s ago: executing program 33 (id=77): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000180)={0x80, 0x1, 'client0\x00', 0x1, "896c81dd59ff28d2", "e5dbc741536b0e2fbb12e9338ec8dcb3e07c903fc30e8a11d477e3fb04eb2f74", 0x3, 0x4}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) (async) ioctl$TIOCSETD(r0, 0x541b, &(0x7f0000000000)) 1m46.651464887s ago: executing program 5 (id=409): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', '', [{0x20, '#! '}, {0x20, '.\'(,-!^($\xf1\xa6\x8d\x87.&\x19\x98\x88\x13\xb251\xd4h\xa4\x8dl3\x88\xd1\x9ebh\xd8\xbb\x1c\x98\xea\x02\x8c\x92\n\xae\x17\xe6T\xc4u\x1a\xb2\x12\xd4\xf9\xb8\xd8\xcd\xef\x7fQF\xeb'}, {0x20, '\x00t\x1c\xa0m\x0fu`\xce\x86\xcc\xe5\xfa\x93c\xeb0\xa4G\xa7s\xabJ\x12\xda\xf0;q\xc8\xde\xab:\x9f\xd3\xc0\x18\xa7\x96\x10Gu\x88\xddu\x17\x9e\'ap\xbfn\x809\xc59\x12\xccK\'\x9b9$!\x8b sc\x80z\xee\xe7\"G\x03\xfe\xa1(\x12\xc7\xa4;\xc1.4\r\xf4\xac\x01p\xedE\xc8\xe49ds]\xcd\x86\xc6\x05\xa3\x92\r*t\xd4K\xcaz\xbd6\x8dyy\x86\x94\xc1\x97\xa6\xfb\x89\xd5\xfeW\xd3n\t\x8e\x98\v\xa6\b\xf8~\xcaB\x9a\xd1sA\x10\xe3\x12\b\x05\xdd\xa1\xb4\xa8\xcem\xee\xb8\xbe\xcea\xcdy\xda\x8e\xed\xc6~\xbbxXekU\xbbh\xb1\xa6Z\x02#q\xa4rkc.v\xba{\"\x8a\x86\x8c\xb5\x126\xa3\xab\x90v\x98\x9d1\xbe\x9d\xe0\x85\x90\xa1\xd4\xb6N\xfea[\xb3\x11\xd0\x16\x00@/n,\xc8< \x8ft\x86{\xdc\x85\xde\xcf>\a\xac\xca\xa9\x06\x00\x00\x00'}, {0x20, '\x00\x00\x00\x00'}, {}]}, 0x13e) sendfile(r0, r1, 0x0, 0x88d) r2 = socket(0x840000000002, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000005940), 0x20000, 0x0) ioctl$SG_EMULATED_HOST(r3, 0x2201, &(0x7f000000b1c0)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000540)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="5825be57aff9352b356be67ca2746357d17879ae", 0x14}], 0x1}}], 0x2, 0x0) close_range(r1, r1, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r6 = socket(0x10, 0x3, 0x0) r7 = fcntl$getown(r1, 0x9) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000005200010000000000000000020000000c000100010000d10000000000"], 0x20}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x2, r7, 0x3, &(0x7f00000001c0)) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "97ae5334ea0fc624", "b606f1f37ed76c9a4dc541671a030037", "00ff00", "5e5ab3c9e3178430"}, 0x28) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000580)=@multiplanar_overlay={0xbcc, 0x1, 0x4, 0x0, 0xca2f, {0x77359400}, {0x5, 0x0, 0x2, 0x2, 0x8, 0x9, "879d31b1"}, 0x6, 0x3, {&(0x7f0000000240)=[{0x14000000, 0x6, {0x8001}}, {0x7ff, 0x7, {0x80}, 0x5}]}, 0x2, 0x0, r1}) 1m46.472503236s ago: executing program 5 (id=410): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e501, [{{0x9, 0x2, 0x5c}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x26, r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2, 0xffffffffffffffff, 0x1f}, 0xc) syz_usb_ep_read(r0, 0x9, 0x1f, &(0x7f0000000040)=""/31) syz_usb_ep_read(r0, 0x6, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e501, [{{0x9, 0x2, 0x5c}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) fanotify_init(0x200, 0x0) (async) fanotify_mark(r4, 0x1, 0x26, r3, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2, 0xffffffffffffffff, 0x1f}, 0xc) (async) syz_usb_ep_read(r0, 0x9, 0x1f, &(0x7f0000000040)=""/31) (async) syz_usb_ep_read(r0, 0x6, 0x0, 0x0) (async) 1m45.021947283s ago: executing program 5 (id=418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), 0x2004c0a, &(0x7f00000000c0)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x39, 0x65]}}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000180), 0x0}, 0x20) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m44.795402845s ago: executing program 5 (id=421): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x24048842, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2, 0x6}, 0x1c) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f0000000300)='./file0/file0\x00', r1, &(0x7f00000000c0)='./file1\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x101) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) move_mount(r3, &(0x7f00000003c0)='./file0/file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x11) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x8a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', r3, &(0x7f0000000240)='./file0/file0\x00', 0x272) r4 = syz_io_uring_setup(0x741d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2000}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000340)='./file0\x00') execveat(r2, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0xfffffffe, 0x8001, 0xcc5, 0x2}, 0x10) 1m44.591000979s ago: executing program 5 (id=422): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x589041, 0x0) ioctl$TIOCGPGRP(r0, 0x80186803, &(0x7f0000000100)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setfsuid(0xffffffffffffffff) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)="f10e2c99c51757a16c2b180237", 0xd}}, 0x0) recvmmsg(r2, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x61, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = getpid() sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000140)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001180)="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", 0x1000}, {&(0x7f00000000c0)="16732b9b15d71a613375c1d08fb1e094161ab38f1e85e937d3f16e4f544950cb6f54b4d1", 0x24}], 0x2, &(0x7f0000000200)=[{0x40, 0x110, 0x6, "861b0161c58106701fd482bc02d1b8d8412fe1199f1a048d416620e869ef1450a6e0cd2749b2fb0035956c1e"}, {0x80, 0xff, 0x1, "8b9bc692091eb7ed6cc49368f928bb98a2262cce2dc7a7f02df738bb06d15e7b433b230c116cce92462e4ed874f74619c31623370f7a74025e370a53cefb3e213394092b384c625aab41e832f8d0925072b9c6fd7321537ccd34b92db58c07f2eeba3db11b4c3a8549caebebf3ef7c"}, {0x88, 0x29, 0x9, "6b2dda2e1737d0ebb6a455fe36376003fbac12589ebf26d36c11dbfb6a82c3725a65c42bd87b407883ab19c89e8c24ee7cf9358b8a65a22f656ecf02779390e008bc360553286208ecc8294da3ea472fa1ec455bc9d486d91169b30e002e34110dbe246ddcf265bc291c3342b9a55e1e89cbe397f3b394"}, {0x78, 0x10d, 0x7, "4776d360dd6602b586b3a6fe6b28cb6c1d3e82fb0ab69c56df4c43710e52f00979b844749f948786faf3e1c395ce19caa9661b45ebd89a8b2ba503c4151be7f894793e42c668cda80dcdccaf7ddaf102d40bbc9aa08427c8a424cd8c065935b8431ca1fbf02b73"}, {0x108, 0x1, 0x7fffffff, "bc03f75e1a79f0062bc2363f2a253d8ffbd2dcc3caeb2fc20f9e648cc9fdbdc28fa8e93ea35331ba6de6c901ddd1e6f91a668802b760ef619a027595fd67800bcb59df65f5b847a4d1844f4d0298171e93a99fd12fdd0235f914222b694b3ec7070b5548704eb4cb0273d4516c9ab6d56e684ab9ddb5017ecb506f52a32cfa9783e435eec2356d93c8ca7591b467f86e0d14c8817c68eab9aff3ef671ad794594a143af324d508f04e37971f21ef3d0a2a405128df68054501317f77247b1a09f6a605a75a7db0e3944ea75afa8a80bb60f066dcf14b8d6db3296c8ed961a087f4c269033e79eb1a5af506193d3a2fe50a2b"}], 0x2c8}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a721dc9203c455c9393519f4a002a54a148755b7339ac2f6d003e1a6b2ce6bf9872f085189e1c84a9bee900fada65a4c46ed56fe098f9fbe4c23df36adc9f93151827b133d6a1794a8c204e002b8142de67372fc2b3f488feb9131c161105822a1b4e3b38f5879316393c8b8f25781aaf7180500598637598f3c2fa9e6e84eb2b066e80", 0x84}, {&(0x7f00000005c0)="76fb41d45c94d91f84423eaad417ce0476d8fb67e0078ad4fab8b7466fc740f15e113c7a37507fe07e4a90fcac9e202abdbb5300021c7279", 0x38}, {&(0x7f0000000600)="d884657cb911900352bbdbee69337a123f3d9b92570c6fb2d022da9c365642b2d8723e917e33506babfe38f91bec460091b404adc27deef678efb6e477574326622357bf363a9ca781ff3a9e1f51d76a7b978165b1e5f11b194c932bc3c023ba121ec18f7e9807088b6abf6ef0fbda806a85fe56e0e3ed7667f7cdc789e3", 0x7e}, {&(0x7f0000000680)="aa7a9d33997f0b8be2173769a5ed4bd06aced4d191a4bd08f3b1addc9cc0011f6a0a93a5b08cf5182d9606173144615a786075858366f3fd0777bfe788b814fd494dc25bf21e8231654dcf29f1d1f4074c514abe53dc84448cbd843aba86b8d3a83c98dad0cfb7615d984f2fa57e080449", 0x71}], 0x4, &(0x7f0000002180)=[{0x78, 0x6, 0x1de, "f7dce732c9109b7151d13d7b660bd0441f1b512779dbbc2f70dd6d3584e965e26a952adbf0a4a092574730ff20b8448dd937008b4818ec286623b3cae03568ab8b99060d9128e99cc5bed5c68edb45841394ca607beecf61683fe4208357e2a0129c6fa78c"}, {0x28, 0x111, 0x3, "0da9414ade886de57db54ddba325470f44e79fded5"}, {0x98, 0x111, 0x7, "cfaee5a9823dc59ff9e6905abce3180a14f1a714316525f55d52f3db027ee4355c93a4b6c213b0cb1084597dc6b0a335e773177cf92f424ff3f7e1dc63abf68e83dee247be3fb45c759b42ec633f0af9a63b22f3c308e0fcd345b83fc61922bee7965b3021d989e2d4786e9ed15ac0cd433d3f8f7276bf443c9dce8d6d644a13bdc0fd5a"}, {0xa0, 0x118, 0x278, "340958914d694e3851089061b0732ebe7db16f0b02d75884a81d2b42e9b767270bcdcb9511c8c2503ca847a1fe5bdce106ccb657c161922b060f3eb20c456760aa00cca65a64cda9aa50d1735f33c2957d3269a9de595c189c10ff99510ae63d539f27759b49346c1d77d03922a4b7fc14f1aa1dcccb1d46308ae810250a3ba8276d1be31fe4479f3385afac"}, {0xb0, 0x10e, 0x6, "2639f7541e22224eca1b3c35d0f34a79a1310dbae6c9f85fe6a5aa46c0be6bbfe2626739fd7b15e13d4b403f8dd2ab92508ada647510f48567c6e8ef85f295db871a4128f12901e1adcfa2106b7e85cf16bb1b45a3b2c413d869bc4cb35cb5152678485d0b83584c710356f0580909c78e5d8921de7ec8ab6ed2addbf5d6434ae86847d6fa158c3fdaba38b51df84cd1c0f1bbb02fea2d509dc2d6"}], 0x288}}], 0x2, 0x10) capget(&(0x7f0000000000)={0x19980330, r5}, &(0x7f0000000040)={0xc, 0xd, 0x174, 0x0, 0x9, 0x6}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) getsockname$packet(r6, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x3, @any, 0x491c, 0x1}, 0xe) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) 1m44.379907804s ago: executing program 5 (id=425): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000001c0)={@flat=@weak_binder, @flat=@weak_binder={0x77622a85, 0x0, 0x100000000}, @flat=@weak_handle}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000005d00)="bef083"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x44}}, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r6, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0x5008, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) clock_settime(0x8d71ca88fffffffd, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) 1m44.308138708s ago: executing program 34 (id=425): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000001c0)={@flat=@weak_binder, @flat=@weak_binder={0x77622a85, 0x0, 0x100000000}, @flat=@weak_handle}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000005d00)="bef083"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x44}}, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r6, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0x5008, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) clock_settime(0x8d71ca88fffffffd, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) 1m0.572086527s ago: executing program 3 (id=212): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa6000, 0x1a2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x101c}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x200, 0x2, 0x8d7, 0x101}, 0x1, 0xffffffff, 0x0, 0x3, 0x0, 0xa}}) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000eaffffff00000000000085000000000000009500000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_int(r7, 0x6, 0x11, &(0x7f0000000300), 0x4) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) dup3(r8, r7, 0x0) 52.629799012s ago: executing program 1 (id=574): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r0, &(0x7f00000000c0), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "4ec4ede91b85342d", "61cee8353d04564b88ea6d7655352be4", "b658bf3d", "7cb3e06fb3ef9ca1"}, 0x28) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x58}}, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) (rerun: 32) getsockopt$ax25_int(r2, 0x101, 0x6, 0xffffffffffffffff, &(0x7f0000000000)=0xff76) 48.311423075s ago: executing program 3 (id=212): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa6000, 0x1a2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x101c}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x200, 0x2, 0x8d7, 0x101}, 0x1, 0xffffffff, 0x0, 0x3, 0x0, 0xa}}) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000eaffffff00000000000085000000000000009500000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_int(r7, 0x6, 0x11, &(0x7f0000000300), 0x4) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) dup3(r8, r7, 0x0) 41.621481264s ago: executing program 1 (id=574): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r0, &(0x7f00000000c0), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "4ec4ede91b85342d", "61cee8353d04564b88ea6d7655352be4", "b658bf3d", "7cb3e06fb3ef9ca1"}, 0x28) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x58}}, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) (rerun: 32) getsockopt$ax25_int(r2, 0x101, 0x6, 0xffffffffffffffff, &(0x7f0000000000)=0xff76) 38.56065426s ago: executing program 3 (id=212): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa6000, 0x1a2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x101c}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x200, 0x2, 0x8d7, 0x101}, 0x1, 0xffffffff, 0x0, 0x3, 0x0, 0xa}}) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000eaffffff00000000000085000000000000009500000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_int(r7, 0x6, 0x11, &(0x7f0000000300), 0x4) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) dup3(r8, r7, 0x0) 31.56070893s ago: executing program 1 (id=574): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r0, &(0x7f00000000c0), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "4ec4ede91b85342d", "61cee8353d04564b88ea6d7655352be4", "b658bf3d", "7cb3e06fb3ef9ca1"}, 0x28) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x58}}, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) (rerun: 32) getsockopt$ax25_int(r2, 0x101, 0x6, 0xffffffffffffffff, &(0x7f0000000000)=0xff76) 28.96501245s ago: executing program 3 (id=212): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa6000, 0x1a2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x101c}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x200, 0x2, 0x8d7, 0x101}, 0x1, 0xffffffff, 0x0, 0x3, 0x0, 0xa}}) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000eaffffff00000000000085000000000000009500000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_int(r7, 0x6, 0x11, &(0x7f0000000300), 0x4) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) dup3(r8, r7, 0x0) 21.733088177s ago: executing program 1 (id=574): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r0, &(0x7f00000000c0), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "4ec4ede91b85342d", "61cee8353d04564b88ea6d7655352be4", "b658bf3d", "7cb3e06fb3ef9ca1"}, 0x28) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x58}}, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) (rerun: 32) getsockopt$ax25_int(r2, 0x101, 0x6, 0xffffffffffffffff, &(0x7f0000000000)=0xff76) 20.70268094s ago: executing program 1 (id=574): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r0, &(0x7f00000000c0), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "4ec4ede91b85342d", "61cee8353d04564b88ea6d7655352be4", "b658bf3d", "7cb3e06fb3ef9ca1"}, 0x28) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x58}}, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) (rerun: 32) getsockopt$ax25_int(r2, 0x101, 0x6, 0xffffffffffffffff, &(0x7f0000000000)=0xff76) 19.089407763s ago: executing program 3 (id=212): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa6000, 0x1a2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x101c}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x200, 0x2, 0x8d7, 0x101}, 0x1, 0xffffffff, 0x0, 0x3, 0x0, 0xa}}) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000eaffffff00000000000085000000000000009500000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_int(r7, 0x6, 0x11, &(0x7f0000000300), 0x4) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) dup3(r8, r7, 0x0) 10.637236934s ago: executing program 1 (id=574): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r0, &(0x7f00000000c0), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "4ec4ede91b85342d", "61cee8353d04564b88ea6d7655352be4", "b658bf3d", "7cb3e06fb3ef9ca1"}, 0x28) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x58}}, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) (rerun: 32) getsockopt$ax25_int(r2, 0x101, 0x6, 0xffffffffffffffff, &(0x7f0000000000)=0xff76) 9.009569407s ago: executing program 3 (id=212): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$vim2m(0x0, 0x3fe, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa6000, 0x1a2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=unix']) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x101c}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x200, 0x2, 0x8d7, 0x101}, 0x1, 0xffffffff, 0x0, 0x3, 0x0, 0xa}}) r7 = creat(&(0x7f0000000140)='./bus\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000eaffffff00000000000085000000000000009500000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_int(r7, 0x6, 0x11, &(0x7f0000000300), 0x4) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) dup3(r8, r7, 0x0) 3.641284732s ago: executing program 6 (id=876): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xe7}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x65}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040011}, 0x10) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r2, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) fstat(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)=@polexpire={0x370, 0x1b, 0x200, 0x70bd27, 0x25dfdbff, {{{@in=@rand_addr=0x64010100, @in=@multicast2, 0x4e24, 0xfff, 0x4e22, 0x1, 0xa, 0x20, 0x20, 0x89, 0x0, r4}, {0x4fb4, 0x7fff, 0x80, 0x5, 0x0, 0x2, 0x7, 0x200}, {0x8, 0x8000000000000001, 0x3ff, 0x6af}, 0x8000, 0x6e6bbc, 0x2, 0x1}, 0x1}, [@lifetime_val={0x24, 0x9, {0x3, 0x2, 0x1, 0x6}}, @algo_auth_trunc={0x69, 0x14, {{'cbcmac-aes-ce\x00'}, 0xe8, 0x60, "0050e79442cd5d96680f4e8acaf77b461e45f6e12d6dc7a4320ff8a164"}}, @encap={0x1c, 0x4, {0x1, 0x4e20, 0x4e24, @in6=@empty}}, @policy={0xac, 0x7, {{@in=@multicast1, @in6=@remote, 0x4e21, 0x8, 0x4e23, 0x81, 0xa, 0x80, 0xa0}, {0x6, 0x81, 0x6, 0x4, 0xfffffffffffffff8, 0x7fffffff, 0xfffffffffffffff7, 0xd}, {0x3, 0xfffffffffffffff7, 0x1800}, 0x0, 0x6e6bb4, 0x1, 0x0, 0x1, 0x1}}, @algo_comp={0x11b, 0x3, {{'lzs\x00'}, 0x698, "bc923b7ee3e18e3cbd42fe49df622e7319c8f71f14508d8c4a7ad886b178c770c2406faec74261cfedbf0d4ff72c7fb0d053542c1158dd32fa5c82d421018075335c69b6940745a74f39aa8d7a6a287226932887abee1ebcc473f057fa699e3e5cd5da2a37d1568e01f505fb11facadacda3136d6953874b8e3aa5c7d3840d237f4b97195633bc381ffe4c3c98e575985405a5d7c079e890388d5c86958fd46561f434f760212c8b3a8ed30bf1f60a1ef53c63014ab81fd2dfcc73ff7b43c3b2fbf97b650018ac22ea5482d6a4a19b1594b643"}}, @address_filter={0x28, 0x1a, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x2, 0x3, 0x1}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x2}, @lastused={0xc, 0xf, 0x3ff}]}, 0x370}, 0x1, 0x0, 0x0, 0x10}, 0x48884) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000740)={0x0, 0x8}) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r6, 0x800, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c010}, 0x1) socket$packet(0x11, 0x2, 0x300) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000900)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x40000) r8 = socket(0x15, 0x4, 0x9) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000c80)={0x4, 0x0, [{0xf000, 0xc1, &(0x7f0000000a00)=""/193}, {0x1, 0x48, &(0x7f0000000b00)=""/72}, {0xdddd0000, 0x9c, &(0x7f0000000b80)=""/156}, {0xffff1000, 0x19, &(0x7f0000000c40)=""/25}]}) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r2, 0x0, 0x8f, 0x79, &(0x7f0000000d40)="c8ed60fa1ae7e0e13c0d6b968f0c5705962efd5a73f3ea62a725cc5192feb97486bace60e5d2dfa7c2a775fd54c2f40afb6a51ed208ac1cc474953f1c59793eefb563f03afb7e3d1e3ffe7fbffdcf4b5ed0fbfd7b4cb92b1cdfff0072de2ae894658006366e1bf8a81d5b996699565195104336ac4e1c124f3fc525067090e45c7b0ddc2b8b9e6de61b0f1ac648765", &(0x7f0000000e00)=""/121, 0x438, 0x0, 0xca, 0xe, &(0x7f0000000e80)="f4e135c412f33ab838778f97f1db63dafd0706cbf6101d4f8ee12f7add6f530fb5c0115a1951e58370ec672fd898ca16f42c133fd8f32f0722719c7832b90ba43d71d3c75710fa50cdd2a208ba062eba8d31a7d86010e7e9810055ad6d5c9d2d6c8d8425bfcaa21b18fa00934c4473563adcfa4275a584fdbc7f34b32272f49e7cd23670082f6eb6829bea081020b3d9178e87877aa48907d78d270690a1bcee877974001c4f69c2042173e182b4a563ae18a23f4fab91c4b51dda29445a7aa3c57727a9dbc1d03af9a6", &(0x7f0000000f80)="70cbac5fd27aa84a5746a6c35dd2", 0x2}, 0x50) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000001040)=0x0) r10 = syz_clone3(&(0x7f0000002280)={0x268a00000, &(0x7f0000001080), &(0x7f00000010c0)=0x0, &(0x7f0000001100), {0x3f}, &(0x7f0000001140)=""/4096, 0x1000, &(0x7f0000002140)=""/235, &(0x7f0000002240)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r2}}, 0x58) r12 = socket$tipc(0x1e, 0x2, 0x0) kcmp(r9, r11, 0x4, r12, r5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002300)) r13 = socket$xdp(0x2c, 0x3, 0x0) getpeername$inet6(r8, &(0x7f0000002340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000002380)=0x1c) ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f00000023c0)=0x2) ioctl$FAT_IOCTL_GET_VOLUME_ID(r13, 0x80047213, &(0x7f0000002400)) r14 = fsmount(r2, 0x0, 0x79) ioctl$SIOCX25CALLACCPTAPPRV(r14, 0x89e8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002480)={r10, r2, 0x0, 0x9, &(0x7f0000002440)='}.&\',:!]\x00'}, 0x30) 3.400741735s ago: executing program 6 (id=878): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89fe, &(0x7f0000000040)={'wg2\x00', @multicast}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x2, r1}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000ecffffff00009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) open(&(0x7f0000000480)='./file0\x00', 0x200, 0x4ebfac6bbaf796d) setuid(0xee01) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x6e}], 0x1, 0x0) r7 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000000c0)="f00fb35f6982b98300be67260f01cbf30f2cafb98329520066b8faffffff0f23c80f21f86635080040000f23f8660fb46f0e66b9a50a00000f32660f0134f4", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b1bd25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fddbdf251800000040000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100898e111070023611908d2907b65e46ff51ca5a91000000000000000436408df2f404b56ecb1b27c813fd99a6606b883fedc53391bc019dbf0b78b03f0953f31e8e9cfc3beaa3f0a57d25b8aa056f", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300010000001400020076657468315f746f5f626f6e64000000"], 0x54}, 0x1, 0x0, 0x0, 0x20040002}, 0x80) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0xfecb, 0xc, 0x0, 0x1, r6}]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000e21fe2184be843ff69010000000000000000000066bc9fe662e78c3ef75607e4bf68b6ff89dabf8581ac836af4e023d0c981980b20f4a6567266f097a4489a7fea1e18195d55b2bf994d6f90c748ca15fc56b5a21b2adc89bbea504d23958927f7f79628a959eaacef32bc527da2", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 911.386371ms ago: executing program 6 (id=880): r0 = socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1b5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000d00)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xff, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x7, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) vmsplice(r3, &(0x7f0000000940)=[{&(0x7f0000000440)="5ede9350a053bf744a5f38e5850f29ef28b6337862592838ec236a0f82e4da74a3acf400eaa1408c83dcf0ed8ba47a4618e29416e4ee69214cef949ee756e260c96ec2572ccc68d0078680bb8dd0f0b49417c473f12e7af8cb1db8b6b4656664d2d25632b9ca98a41d7e0c466f8e327e8106f0f3b2b1484210663f4227e919775ce953df8a0c59329b6e637667b8f365d0c125cf36170489f5e95b06553ded6df971cb66a7d0dc7b1e2f8eb2775001d48481e7734fc02e3d59e86e7b0be85ba574e1414e1b7dcaa99f323d2b510fd0e9a2dedaaae7b63e0f8032159ee0a423a28e14c3", 0xe3}, {&(0x7f0000000540)="bd2cfaf9e83095d3ebc73e8abb769b510a1f47d2529fa5ca69e431fca161b9d11921e02018f2964ffb8c87810586ffa6a537ed7000b7955de44c47c21bc9c4b0c996114c6c4a58ecf973eeeee6bbe1ca9e0a6fa335edc2d029", 0x59}, {&(0x7f00000005c0)="174219784e20d1e34290ab857bc201785eba2ae3b62c95893b590416bc59f3e594c2abd58b134cadac8cb3059ad291f74b657db1c314218a7501e20bf5893c2fb4286a0ad35d5c8b53f1b7ea8f78a831a3f1a0eca57025599ff7f48049ce51f0ad3b45285a82ebe26e38f7d9133c4e15872362b6530d32d209da36dea4285039c7333f901f7d55dec7d753deb399af2cda815b28a3dd424c580d3ec43c77304befc362d3cb4097880bdbdf1e43", 0xad}, {&(0x7f0000000680)="fa2e4a0f320c5016683661af9930ae2358695674ff2b770c7692f6cab190d06cc66e2ed6fff735eb0df9d6dd00000c4d2419b0b8900a9e8b0819b68075f1b5374cbcc420e8239f0d341e4c1dc93894de7aa65a81bbea83d51fc856180b1082dada7cb35bb3493dbbcf89067d68daa195c9fe0de957008cce6fc1682d06e40f265df71bd40e7736b7bd2f708e7a3e7e85f83607be3e47f0127701a55d520d6bd0459916d42b204cf1293a489a4a59e66b88cfbd08bdacf7a6152cc8e435dde615639e6abf21259fa499229d5e3de50fa54740edfa", 0xd4}, {&(0x7f00000007c0)="3e197868685c262e402d7ae488d22fe39521efc06c560f82020b648eb55a3f4ca5c2bfc632290d38561a26db675dc029f28e6119cd8c3d47233aa1fe268b513cdec8e08763841db19596a72a85b25913e587817b526f267212bae1ecf87f9f2a72165e08a6c6a3dfe7f80cd0eec8103cb32ae9bdd922030679d82e16824ce31d873dcaf238e407c24f5416", 0x8b}, {&(0x7f0000000880)="03bcd675c592c0fc3c0d233b944dcd7c946a56ae66d90209ef5ba61cc8a5b32145708c85041f4d7a4da62bf022a8e56a1fc4a302151b6901692c6541d900a5c8aeea26ff39d1cfc043bb83135f1264f405048f82d5bfc35c4cd24425b2b27335533633ff1942843e28c37ad80f74f6d26dd24b304c283830cedc5b0ac4f2b10f7cfa013ffb845ef29956e3699784b8e52fba3687d8da50e4ff4026f3ab513426", 0xa0}, {0xfffffffffffffffe}], 0x7, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e10b594700000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0xb2874bdda755f839}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r5, &(0x7f0000000340)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1400) mmap(&(0x7f0000785000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x88f43000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000019c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x0, "aee2f19a960d6d67c929b372b498f8f5"}}}]}, 0x44}}, 0x0) 681.58706ms ago: executing program 4 (id=881): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@broadcast}}, {{@in6}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8) (async) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) 678.97148ms ago: executing program 4 (id=882): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7fdfffffffffffff, 0x8080) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x7584, &(0x7f0000000040)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000005c0)=0x0) syz_io_uring_setup(0x60e6, &(0x7f0000000200), &(0x7f0000001b40)=0x0, &(0x7f0000001b00)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x2003, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x6, 0x9, 0x1, 0x7c}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 351.050091ms ago: executing program 4 (id=883): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd26}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001800010000001000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007000000100016800c0001"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtaction={0x50, 0x30, 0xcac229faa96ee7df, 0x70bd26, 0x0, {}, [{0x3c, 0x1, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="e02a141b0fc1"}]}, {0x4}, {0xc, 0x4, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 297.407499ms ago: executing program 4 (id=884): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0xfd12}}, 0x4000001) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000f1ff000000004e0800000000000000650f0002006e657464657673696d3000000800ab000000000008000b00000000000600110000000000000000000000000000000a5479f34be5110212ae342113489c222515d5fd1ba8a07005cf5d7ceb7819ec27e1ab18788e8b8afd514d7b"], 0x4c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000400)={'bond_slave_1\x00', 0x20}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x10}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000003c0)={r6, 0xff31, 0xf643}, 0x8) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x4, 0x0, &(0x7f0000000040)) 283.141276ms ago: executing program 4 (id=885): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x82, 0xaec, 0x0, 0x0, 0x3c, 0xfe54}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x4, 0x4, 0x80000001, 0x400, r4, 0x1, '\x00', 0x0, r5, 0x5, 0x2, 0x1, 0x5, @void, @value, @void, @value}, 0x50) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x11, r0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x82, 0xaec, 0x0, 0x0, 0x3c, 0xfe54}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x4, 0x4, 0x80000001, 0x400, r4, 0x1, '\x00', 0x0, r5, 0x5, 0x2, 0x1, 0x5, @void, @value, @void, @value}, 0x50) (async) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) 70.777305ms ago: executing program 6 (id=886): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002500000008002f00000000000a0001007770616e3100000005002a0028e10000"], 0x30}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x14801, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000280)={0x0, 0x1}, 0xc) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r7, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000004000000001500000008002c000000000008000300", @ANYRES32=r11, @ANYBLOB="9e34cbbc2d457a9d74e24e24"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r13) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r13, 0x0, 0x20045004) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r13, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r14, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, r7, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x20, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x5) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000040)=""/234, &(0x7f0000000180)=0xea) 1.067635ms ago: executing program 6 (id=887): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)="af195c6bbcd5c868abc300981ecade97d8465ec17bb6cc5315c424a2f60bae1897f68c77c6f21800000000000000052b882416eee58cad283f47c42908cf65153aefb82b7aa514ca98a88c4f3debfb05c1d84606d38c4721785a78f9180eab44a8c12be9383ad4f321e748c55c8bee880f90346ac88a638cc39efb770ef9ae47a9fad297b7da9c7a9c30137218771e077f06a21aefc3fce9031394245980ce7a6d5af74a15511a07f41e8a77e0e665cff857f6dfd78b5d9e77a7af849008334891f5b0816aea911ae4984448b8c0c98466b2624f8bd4db81b45184df33490620e6847d5b6d70e553d5bcb82d7c139258d1ad8ad9afcb8a2f5eeb8a8ebfb627f39fb8317626e3d043916ab67f5e64df59ab9e4aa1aba52b0ca3812af2ecf2032f5c833b17cc39650c9173300eb0b70b3dcdc80bddceb298d2128e209e41e2825fc90f86fad29aa3017dc693e38e50bf20c036c15cac11c0e3fa84eb899d7c8ff02fdaa555b894fcfac941a0aceeddaf786204da317cea05a4d86cac9f15d7ee19aea9e4a8ec334a2dd7231e5552c9e031715df515a62b20170e69cbded81c601612510db6bee87dc1919228765a0f88443834f81d9e9d70c0d8ff0ad1d50b1af5103334dd7d4ec7746579eeed107f51cd5a2b06a35f9e78733f0d5664cfb7d673d8bf7b082354e40473748a2ac0598fd7f6befe", 0x1f3}], 0x2}}], 0x1, 0x4048840) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0xc000000, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070000000000000000000c00000008000300", @ANYRES32=r3, @ANYBLOB="0a000c0008021100000000002c0050800400050011000100cabee339084eeef16f162471f40000000800070000000000050002"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)="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", 0x1f3}], 0x2}}], 0x1, 0x4048840) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0xc000000, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070000000000000000000c00000008000300", @ANYRES32=r3, @ANYBLOB="0a000c0008021100000000002c0050800400050011000100cabee339084eeef16f162471f40000000800070000000000050002"], 0x54}}, 0x0) (async) 513.289µs ago: executing program 4 (id=888): syz_open_dev$ndb(&(0x7f00000004c0), 0x0, 0x88001) syz_open_dev$ndb(0x0, 0x0, 0x480000) r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x40400, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmod000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,max_read=0x0000000000000008,max_read=0x0000000000000000,default_permissions,fscontext=user_u,\x00']) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x414000002) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000005c0), 0x77, 0x101301) userfaultfd(0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@mcast1={0xff, 0x2}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x400, 0x2, 0x4296015a}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000340)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000207b9e000000ff0300000c5de3fe402ad9418800000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800", @ANYRES8=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000299a9c9b55053352123c4f3b9802818815e5ffedba00bca6f9b0125b3f3f806ea661c0e580f4fa2f8e75cc3285bac20605cc7048e5cdc168aecd4f194f8a2d17db03dc56b23038ff89f367a2ba9a393139ce0cda3eebad3d4ef977ebd3fc6fcd62c4716616eabe2a3084b5685c6e210f94913e796740c290b33"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYRESOCT=r7, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 6 (id=889): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x3, 0x1, {0x0}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) (async, rerun: 32) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000000)={0x8, 'veth0_to_hsr\x00', {'bridge_slave_0\x00'}, 0x942a}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200040, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0x208) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async, rerun: 32) fcntl$setown(r5, 0x8, 0xffffffffffffffff) (async, rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000014c0), &(0x7f0000001500)=0x4) (async) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e", 0x15, 0x1, 0x0, 0x0) (async) r7 = dup(r4) (async) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xf}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r8, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x9e20, 0xc, 0x134, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r7, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000011c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000001200)=[0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f0000001280)=[{}], 0x8, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.4.672'. [ 155.618785][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.627647][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.631476][ T1140] bond0 (unregistering): Released all slaves [ 155.635467][ T5948] Bluetooth: hci0: command tx timeout [ 155.666099][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.668935][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.671534][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.674038][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.678131][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.680918][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.683851][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.687060][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.690409][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.702624][ T9293] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 155.708130][ T9293] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 155.717389][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.720415][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.723109][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.728621][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.731111][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.733734][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.736314][ T9165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.739278][ T9165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.743933][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.748266][ T9165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.750455][ T9165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.752567][ T9165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.754813][ T9165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.871580][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.879672][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.894598][ T3768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.905393][ T3768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.154199][ T9325] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 156.163808][ T1140] hsr_slave_0: left promiscuous mode [ 156.167695][ T1140] hsr_slave_1: left promiscuous mode [ 156.170612][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.173445][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.177301][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.180697][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.218490][ T1140] veth1_macvtap: left promiscuous mode [ 156.220004][ T1140] veth0_macvtap: left promiscuous mode [ 156.221493][ T1140] veth1_vlan: left promiscuous mode [ 156.222924][ T1140] veth0_vlan: left promiscuous mode [ 156.835655][ T5948] Bluetooth: hci2: command tx timeout [ 157.355857][ T9346] netlink: 36 bytes leftover after parsing attributes in process `syz.6.681'. [ 157.360537][ T39] audit: type=1400 audit(1730851708.441:725): avc: denied { getopt } for pid=9345 comm="syz.6.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 157.375276][ T39] audit: type=1400 audit(1730851708.451:726): avc: denied { append } for pid=9345 comm="syz.6.681" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 157.406921][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 157.536976][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 157.948098][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.962339][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.985125][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.011530][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.014586][ T5946] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.022986][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.289460][ T9346] Falling back ldisc for ttyprintk. [ 158.618606][ T39] audit: type=1400 audit(1730851709.701:727): avc: denied { bind } for pid=9356 comm="syz.6.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 158.658130][ T39] audit: type=1400 audit(1730851709.731:728): avc: denied { map } for pid=9362 comm="syz.6.684" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.669737][ T39] audit: type=1400 audit(1730851709.751:729): avc: denied { execute } for pid=9362 comm="syz.6.684" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.750279][ T9373] netlink: 32 bytes leftover after parsing attributes in process `syz.4.686'. [ 158.901213][ T9193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.910918][ T9193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.915755][ T5948] Bluetooth: hci2: command tx timeout [ 158.916903][ T9193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.923764][ T9193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.930164][ T9351] chnl_net:caif_netlink_parms(): no params data found [ 158.985559][ T829] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 159.068309][ T9351] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.071242][ T9351] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.078745][ T9351] bridge_slave_0: entered allmulticast mode [ 159.083795][ T9351] bridge_slave_0: entered promiscuous mode [ 159.086526][ T9351] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.090700][ T9351] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.092809][ T9351] bridge_slave_1: entered allmulticast mode [ 159.096747][ T9351] bridge_slave_1: entered promiscuous mode [ 159.134709][ T9351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.141431][ T9193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.145433][ T9351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.145493][ T829] usb 11-1: Using ep0 maxpacket: 8 [ 159.150785][ T829] usb 11-1: config 251 has an invalid interface number: 29 but max is 0 [ 159.154477][ T829] usb 11-1: config 251 has no interface number 0 [ 159.158264][ T829] usb 11-1: config 251 interface 29 altsetting 71 has an invalid descriptor for endpoint zero, skipping [ 159.161173][ T829] usb 11-1: config 251 interface 29 altsetting 71 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 159.164426][ T829] usb 11-1: config 251 interface 29 has no altsetting 0 [ 159.166627][ T829] usb 11-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice= a.8d [ 159.169283][ T829] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.223299][ T9351] team0: Port device team_slave_0 added [ 159.226461][ T9351] team0: Port device team_slave_1 added [ 159.261358][ T9193] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.263919][ T9351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.266033][ T9351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.273305][ T9351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.277183][ T9351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.279192][ T9351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.286764][ T9351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.308636][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.310804][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.363138][ T1140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.382258][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.385534][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.387476][ T829] usb 11-1: string descriptor 0 read error: -71 [ 159.391454][ T829] usb-storage 11-1:251.29: USB Mass Storage device detected [ 159.401287][ T9351] hsr_slave_0: entered promiscuous mode [ 159.406255][ T9351] hsr_slave_1: entered promiscuous mode [ 159.407917][ T829] usb-storage 11-1:251.29: Quirks match for vid 054c pid 0069: 1 [ 159.411342][ T9351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.414007][ T9351] Cannot create hsr debugfs directory [ 159.495847][ T829] usb 11-1: USB disconnect, device number 10 [ 159.541508][ T9193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.632415][ T9193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.654748][ T9193] veth0_vlan: entered promiscuous mode [ 159.663939][ T9193] veth1_vlan: entered promiscuous mode [ 159.680916][ T9193] veth0_macvtap: entered promiscuous mode [ 159.685817][ T9193] veth1_macvtap: entered promiscuous mode [ 159.695200][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.700370][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.703927][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.708169][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.711852][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.715817][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.719642][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.723429][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.727643][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.740304][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.744883][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.750415][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.754715][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.758632][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.762825][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.767361][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.770647][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.774925][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.784706][ T9193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.790275][ T9193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.793444][ T9193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.797336][ T9193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.852291][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.854942][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.877218][ T3768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.880055][ T3768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.087801][ T1140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.187984][ T5948] Bluetooth: hci0: command tx timeout [ 160.395707][ T1140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.472151][ T1140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.605400][ T1140] bridge_slave_1: left allmulticast mode [ 160.607267][ T1140] bridge_slave_1: left promiscuous mode [ 160.608941][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.612707][ T1140] bridge_slave_0: left allmulticast mode [ 160.614776][ T1140] bridge_slave_0: left promiscuous mode [ 160.616995][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.816409][ T39] audit: type=1400 audit(1730851711.891:730): avc: denied { unmount } for pid=8058 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 160.869218][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.697'. [ 161.026333][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.032664][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.037754][ T1140] bond0 (unregistering): Released all slaves [ 161.073440][ T9437] IPVS: Error joining to the multicast group [ 161.462536][ T1140] hsr_slave_0: left promiscuous mode [ 161.480586][ T1140] hsr_slave_1: left promiscuous mode [ 161.502601][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.504591][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.507942][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.509960][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.536928][ T1140] veth1_macvtap: left promiscuous mode [ 161.539128][ T1140] veth0_macvtap: left promiscuous mode [ 161.541051][ T1140] veth1_vlan: left promiscuous mode [ 161.542779][ T1140] veth0_vlan: left promiscuous mode [ 162.275859][ T5948] Bluetooth: hci0: command tx timeout [ 162.707581][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 162.840165][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 162.993391][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.024066][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.047368][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.057971][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.079383][ T5946] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 163.082223][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.992076][ T9351] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 163.996152][ T9351] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 164.014212][ T9351] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 164.034152][ T9351] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 164.044681][ T9491] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.051097][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 164.084593][ T39] audit: type=1400 audit(2000000002.779:731): avc: denied { append } for pid=9488 comm="syz.4.709" path="/234/file0/cgroup.kill" dev="9p" ino=36832021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.092439][ T39] audit: type=1400 audit(2000000002.779:732): avc: denied { map } for pid=9488 comm="syz.4.709" path="/234/file0/cgroup.kill" dev="9p" ino=36832021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.097411][ T9489] 9pnet_virtio: no channels available for device syz [ 164.102447][ T39] audit: type=1400 audit(2000000002.799:733): avc: denied { mounton } for pid=9488 comm="syz.4.709" path="/234/file0/file0" dev="9p" ino=36832010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.118312][ T9480] chnl_net:caif_netlink_parms(): no params data found [ 164.257108][ T9480] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.260184][ T9480] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.263149][ T9480] bridge_slave_0: entered allmulticast mode [ 164.268662][ T9480] bridge_slave_0: entered promiscuous mode [ 164.273226][ T9480] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.276482][ T9480] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.279466][ T9480] bridge_slave_1: entered allmulticast mode [ 164.282730][ T9480] bridge_slave_1: entered promiscuous mode [ 164.318276][ T9480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.324291][ T9480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.345540][ T5948] Bluetooth: hci0: command tx timeout [ 164.363835][ T9480] team0: Port device team_slave_0 added [ 164.368542][ T9480] team0: Port device team_slave_1 added [ 164.403260][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.406744][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.418881][ T9480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.433173][ T9351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.438225][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.441133][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.450941][ T9480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.504165][ T9351] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.511950][ T9480] hsr_slave_0: entered promiscuous mode [ 164.513966][ T9480] hsr_slave_1: entered promiscuous mode [ 164.516189][ T9480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.518949][ T9480] Cannot create hsr debugfs directory [ 164.542858][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.545560][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.551233][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.553153][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.607800][ T1140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.708498][ T1140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.773620][ T1140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.776163][ T39] audit: type=1400 audit(2000000003.479:734): avc: denied { setattr } for pid=9532 comm="syz.6.713" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 164.792145][ T9351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.824987][ T9351] veth0_vlan: entered promiscuous mode [ 164.830928][ T9351] veth1_vlan: entered promiscuous mode [ 164.852783][ T1140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.872671][ T9351] veth0_macvtap: entered promiscuous mode [ 164.878700][ T9351] veth1_macvtap: entered promiscuous mode [ 164.888775][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.894479][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.898587][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.902529][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.906065][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.908786][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.911620][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.915458][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.920104][ T9351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.932323][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.935703][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.938607][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.941823][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.945256][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.950234][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.954034][ T9351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.957712][ T9351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.961326][ T9351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.967847][ T9351] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.970974][ T9351] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.974417][ T9351] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.978737][ T9351] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.047205][ T1140] bridge_slave_1: left allmulticast mode [ 165.049763][ T1140] bridge_slave_1: left promiscuous mode [ 165.052247][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.060375][ T1140] bridge_slave_0: left allmulticast mode [ 165.062369][ T1140] bridge_slave_0: left promiscuous mode [ 165.064166][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.226718][ T5948] Bluetooth: hci2: command tx timeout [ 165.484274][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.491568][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.495784][ T1140] bond0 (unregistering): Released all slaves [ 165.714469][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.717017][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.736191][ T3768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.740710][ T3768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.813732][ T9556] Mount JFS Failure: -22 [ 165.817317][ T9556] jfs_mount failed w/return code = -22 [ 165.862169][ T1140] hsr_slave_0: left promiscuous mode [ 165.875002][ T1140] hsr_slave_1: left promiscuous mode [ 165.879544][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.882014][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.884689][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.890104][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.923313][ T1140] veth1_macvtap: left promiscuous mode [ 165.925719][ T1140] veth0_macvtap: left promiscuous mode [ 165.927709][ T1140] veth1_vlan: left promiscuous mode [ 165.929290][ T1140] veth0_vlan: left promiscuous mode [ 166.236205][ T9571] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.316031][ T9576] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.722'. [ 166.319661][ T9576] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0 [ 166.374194][ T9580] virtio-fs: tag <(null)> not found [ 166.496159][ T9580] syz.6.724 (9580): drop_caches: 2 [ 166.511605][ T39] audit: type=1400 audit(2000000005.219:735): avc: denied { remount } for pid=9579 comm="syz.6.724" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 166.513018][ T9582] virtio-fs: tag <(null)> not found [ 167.142873][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 167.286708][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 167.310242][ T5948] Bluetooth: hci2: command tx timeout [ 168.239124][ T9578] netlink: 'syz.4.723': attribute type 1 has an invalid length. [ 168.241705][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.725'. [ 168.244119][ T9586] netlink: 3 bytes leftover after parsing attributes in process `syz.6.725'. [ 168.435463][ T9480] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.440060][ T9480] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.444737][ T9480] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.449023][ T9480] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.482343][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.508773][ T9480] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.517618][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.520071][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.526552][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.528533][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.633198][ T9480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.654285][ T9480] veth0_vlan: entered promiscuous mode [ 168.662159][ T9480] veth1_vlan: entered promiscuous mode [ 168.703513][ T1166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.712202][ T9480] veth0_macvtap: entered promiscuous mode [ 168.717281][ T9480] veth1_macvtap: entered promiscuous mode [ 168.723737][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.726800][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.729362][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.731992][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.734436][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.737301][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.739766][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.744206][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.748059][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.752478][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.755157][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.757839][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.761721][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.764864][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.768130][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.770646][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.773343][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.776979][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.781937][ T9480] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.784139][ T9480] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.786830][ T9480] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.789313][ T9480] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.823068][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.826105][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.836550][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.839039][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.934417][ T9618] xt_hashlimit: size too large, truncated to 1048576 [ 168.936173][ T39] audit: type=1400 audit(2000000007.639:736): avc: denied { getopt } for pid=9615 comm="syz.4.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 168.998882][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.003728][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.006931][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.009908][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.011970][ T5946] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.013986][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.046432][ T1140] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 169.098693][ T9629] chnl_net:caif_netlink_parms(): no params data found [ 169.162857][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.164933][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.168053][ T9629] bridge_slave_0: entered allmulticast mode [ 169.170208][ T9629] bridge_slave_0: entered promiscuous mode [ 169.173326][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.175226][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.178461][ T9629] bridge_slave_1: entered allmulticast mode [ 169.180674][ T9629] bridge_slave_1: entered promiscuous mode [ 169.204821][ T9629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.209542][ T9629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.234272][ T9629] team0: Port device team_slave_0 added [ 169.237827][ T9629] team0: Port device team_slave_1 added [ 169.286385][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.288121][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.294801][ T9629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.305924][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.308108][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.315689][ T9629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.344822][ T9629] hsr_slave_0: entered promiscuous mode [ 169.347597][ T9629] hsr_slave_1: entered promiscuous mode [ 169.350055][ T9629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.352384][ T9629] Cannot create hsr debugfs directory [ 169.762787][ T9648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9648 comm=syz.6.734 [ 169.975839][ T1166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.075779][ T1166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.132724][ T1166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.279302][ T1166] bridge_slave_1: left allmulticast mode [ 170.281094][ T1166] bridge_slave_1: left promiscuous mode [ 170.282981][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.286977][ T1166] bridge_slave_0: left allmulticast mode [ 170.288438][ T1166] bridge_slave_0: left promiscuous mode [ 170.290131][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.568924][ T9656] netlink: 'syz.6.736': attribute type 12 has an invalid length. [ 170.571929][ T9656] netlink: 197276 bytes leftover after parsing attributes in process `syz.6.736'. [ 170.675082][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.688141][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.692648][ T1166] bond0 (unregistering): Released all slaves [ 170.712969][ T39] audit: type=1400 audit(2000000009.409:737): avc: denied { setopt } for pid=9657 comm="syz.4.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 170.770519][ T9658] overlayfs: failed to resolve './file0': -2 [ 171.042473][ T39] audit: type=1400 audit(2000000009.739:738): avc: denied { bind } for pid=9669 comm="syz.6.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 171.048349][ T39] audit: type=1400 audit(2000000009.759:739): avc: denied { connect } for pid=9669 comm="syz.6.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 171.065504][ T5948] Bluetooth: hci0: command tx timeout [ 171.119479][ T1166] hsr_slave_0: left promiscuous mode [ 171.133359][ T1166] hsr_slave_1: left promiscuous mode [ 171.140274][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.145460][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.150228][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.153000][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.204421][ T1166] veth1_macvtap: left promiscuous mode [ 171.207102][ T1166] veth0_macvtap: left promiscuous mode [ 171.208517][ T1166] veth1_vlan: left promiscuous mode [ 171.210177][ T1166] veth0_vlan: left promiscuous mode [ 171.336466][ T9679] input: syz0 as /devices/virtual/input/input15 [ 172.376465][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 172.493440][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 172.824798][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.832585][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.845741][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.873024][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.877337][ T5946] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 172.879820][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.155811][ T5948] Bluetooth: hci0: command tx timeout [ 173.587835][ T9693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9693 comm=syz.4.745 [ 173.596671][ T9629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.652534][ T9693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9693 comm=syz.4.745 [ 173.661946][ T9629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.672502][ T9629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.681702][ T9629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.774335][ T9629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.781253][ T9686] chnl_net:caif_netlink_parms(): no params data found [ 173.819615][ T9729] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 173.824252][ T9729] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.749'. [ 173.855977][ T39] audit: type=1400 audit(2000000012.559:740): avc: denied { rename } for pid=9728 comm="syz.4.749" name="file0" dev="overlay" ino=36832010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.875031][ T39] audit: type=1400 audit(2000000012.559:741): avc: denied { unlink } for pid=9728 comm="syz.4.749" name="bus" dev="overlay" ino=36834685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.887066][ T9736] 9pnet_virtio: no channels available for device syz [ 173.890204][ T9736] overlayfs: overlapping lowerdir path [ 173.900780][ T39] audit: type=1400 audit(2000000012.559:742): avc: denied { write open } for pid=9728 comm="syz.4.749" path=2F202864656C6574656429 dev="tmpfs" ino=1414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.911552][ T39] audit: type=1400 audit(2000000012.599:743): avc: denied { setattr } for pid=9728 comm="syz.4.749" name="#1414" dev="tmpfs" ino=1414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.925369][ T39] audit: type=1400 audit(2000000012.599:744): avc: denied { read } for pid=9728 comm="syz.4.749" dev="tmpfs" ino=1414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.928263][ T9629] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.933448][ T39] audit: type=1400 audit(2000000012.599:745): avc: denied { link } for pid=9728 comm="syz.4.749" name="#1414" dev="tmpfs" ino=1414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.956375][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.959221][ T9686] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.961872][ T9686] bridge_slave_0: entered allmulticast mode [ 173.965103][ T9686] bridge_slave_0: entered promiscuous mode [ 173.973327][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.976297][ T9686] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.978582][ T9686] bridge_slave_1: entered allmulticast mode [ 173.980571][ T9686] bridge_slave_1: entered promiscuous mode [ 174.024062][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.026368][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.047425][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.049791][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.094805][ T9686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.105138][ T9686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.166826][ T9747] syz.4.751: attempt to access beyond end of device [ 174.166826][ T9747] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 174.172588][ T9747] (syz.4.751,9747,3):ocfs2_get_sector:1769 ERROR: status = -5 [ 174.175616][ T9747] (syz.4.751,9747,3):ocfs2_sb_probe:749 ERROR: status = -5 [ 174.181351][ T9747] (syz.4.751,9747,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 174.184572][ T9747] (syz.4.751,9747,3):ocfs2_fill_super:1178 ERROR: status = -5 [ 174.247778][ T9686] team0: Port device team_slave_0 added [ 174.270565][ T9686] team0: Port device team_slave_1 added [ 174.388555][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.390555][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.397740][ T9686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.440969][ T1166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.458433][ T39] audit: type=1400 audit(2000000013.159:746): avc: denied { getopt } for pid=9764 comm="syz.6.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 174.470662][ T9686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.472511][ T9686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.481315][ T9686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.589475][ T1166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.634458][ T9686] hsr_slave_0: entered promiscuous mode [ 174.637975][ T9686] hsr_slave_1: entered promiscuous mode [ 174.640788][ T9686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.642838][ T9686] Cannot create hsr debugfs directory [ 174.672185][ T9629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.692730][ T1166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.790408][ T1166] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.868388][ T9629] veth0_vlan: entered promiscuous mode [ 174.879842][ T9629] veth1_vlan: entered promiscuous mode [ 174.929188][ T9629] veth0_macvtap: entered promiscuous mode [ 174.942756][ T9629] veth1_macvtap: entered promiscuous mode [ 174.969257][ T1166] bridge_slave_1: left allmulticast mode [ 174.971387][ T1166] bridge_slave_1: left promiscuous mode [ 174.973427][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.979559][ T1166] bridge_slave_0: left allmulticast mode [ 174.981567][ T1166] bridge_slave_0: left promiscuous mode [ 174.983443][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.995866][ T5948] Bluetooth: hci2: command tx timeout [ 175.226843][ T5948] Bluetooth: hci0: command tx timeout [ 175.424887][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.429615][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.433126][ T1166] bond0 (unregistering): Released all slaves [ 175.441817][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.444691][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.448554][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.451533][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.453955][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.456546][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.458985][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.462289][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.469414][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.535272][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.538774][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.543284][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.555788][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.558755][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.561887][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.565096][ T9629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.567894][ T9629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.578177][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.581664][ T9629] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.584509][ T9629] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.592520][ T9629] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.595544][ T9629] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.744613][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'. [ 175.784956][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.788116][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.813664][ T9794] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 175.817996][ T9796] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 175.889490][ T39] audit: type=1400 audit(2000000014.589:747): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=127.0.0.1 src=36320 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 175.895872][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.900983][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.909804][ T39] audit: type=1400 audit(2000000014.589:748): avc: denied { search } for pid=9805 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.920463][ T39] audit: type=1400 audit(2000000014.589:749): avc: denied { read } for pid=9629 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.943076][ T39] audit: type=1400 audit(2000000014.589:750): avc: denied { write } for pid=9629 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.950780][ T39] audit: type=1400 audit(2000000014.589:751): avc: denied { setopt } for pid=9800 comm="syz.6.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.958425][ T39] audit: type=1400 audit(2000000014.609:752): avc: denied { append } for pid=5340 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 175.967185][ T39] audit: type=1400 audit(2000000014.609:753): avc: denied { mounton } for pid=9629 comm="syz-executor" path="/syzkaller.Bo9f7i/syz-tmp" dev="sda1" ino=1961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 175.974954][ T39] audit: type=1400 audit(2000000014.609:754): avc: denied { mount } for pid=9629 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.980590][ T9811] nbd: must specify a size in bytes for the device [ 175.987532][ T39] audit: type=1400 audit(2000000014.609:755): avc: denied { mounton } for pid=9629 comm="syz-executor" path="/syzkaller.Bo9f7i/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 175.995925][ T39] audit: type=1400 audit(2000000014.629:756): avc: denied { mount } for pid=9629 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 176.003724][ T1166] hsr_slave_0: left promiscuous mode [ 176.005951][ T1166] hsr_slave_1: left promiscuous mode [ 176.010008][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.011981][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.016025][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.019447][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.057956][ T1166] veth1_macvtap: left promiscuous mode [ 176.059392][ T1166] veth0_macvtap: left promiscuous mode [ 176.061011][ T1166] veth1_vlan: left promiscuous mode [ 176.062663][ T1166] veth0_vlan: left promiscuous mode [ 177.075546][ T5948] Bluetooth: hci2: command tx timeout [ 177.121588][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 177.247168][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 178.140003][ T9811] netlink: 32 bytes leftover after parsing attributes in process `syz.6.765'. [ 178.162073][ T9812] netlink: 32 bytes leftover after parsing attributes in process `syz.6.765'. [ 178.216154][ T5946] Bluetooth: hci0: sending frame failed (-49) [ 178.221797][ T5948] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 178.266255][ T9686] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.271947][ T9686] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.299145][ T9686] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.305012][ T9686] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.383946][ T9686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.398246][ T9686] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.408713][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.411090][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.416946][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.419207][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.546055][ T9686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.570446][ T9686] veth0_vlan: entered promiscuous mode [ 178.575071][ T9686] veth1_vlan: entered promiscuous mode [ 178.589675][ T9686] veth0_macvtap: entered promiscuous mode [ 178.593084][ T9686] veth1_macvtap: entered promiscuous mode [ 178.599256][ T9686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.601993][ T9686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.604539][ T9686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.607985][ T9686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.610524][ T9686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.613193][ T9686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.615833][ T9686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.618740][ T9686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.622148][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.629583][ T9686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.632315][ T9686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.634896][ T9686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.637951][ T9686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.640770][ T9686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.643521][ T9686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.646493][ T9686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.649216][ T9686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.652538][ T9686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.676211][ T1166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.688089][ T9686] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.690619][ T9686] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.692856][ T9686] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.695707][ T9686] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.726981][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.729940][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.739515][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.743292][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.059546][ T1166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.161250][ T1166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.193887][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.199256][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.202311][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.209571][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.215058][ T5946] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 179.218599][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.231659][ T9840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9840 comm=syz.4.769 [ 179.257255][ T1166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.363806][ T9838] chnl_net:caif_netlink_parms(): no params data found [ 179.481090][ T9838] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.484686][ T9838] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.492301][ T9838] bridge_slave_0: entered allmulticast mode [ 179.495136][ T9838] bridge_slave_0: entered promiscuous mode [ 179.506278][ T9838] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.509297][ T9838] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.512197][ T9838] bridge_slave_1: entered allmulticast mode [ 179.516694][ T9838] bridge_slave_1: entered promiscuous mode [ 179.549153][ T9838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.556684][ T9838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.614871][ T9838] team0: Port device team_slave_0 added [ 179.631650][ T9838] team0: Port device team_slave_1 added [ 179.682119][ T9838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.684255][ T9838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.702255][ T9838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.708297][ T9838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.711343][ T9838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.721085][ T9838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.725606][ T1166] bridge_slave_1: left allmulticast mode [ 179.727247][ T1166] bridge_slave_1: left promiscuous mode [ 179.728950][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.737314][ T1166] bridge_slave_0: left allmulticast mode [ 179.738828][ T1166] bridge_slave_0: left promiscuous mode [ 179.740375][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.184026][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.192149][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.198035][ T1166] bond0 (unregistering): Released all slaves [ 180.285670][ T7388] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 180.327282][ T9838] hsr_slave_0: entered promiscuous mode [ 180.330280][ T9838] hsr_slave_1: entered promiscuous mode [ 180.332578][ T9838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.335949][ T9838] Cannot create hsr debugfs directory [ 180.449534][ T7388] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.452721][ T7388] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.462793][ T7388] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.466581][ T7388] usb 9-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 180.469620][ T7388] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.481943][ T7388] usb 9-1: config 0 descriptor?? [ 180.490876][ T1166] hsr_slave_0: left promiscuous mode [ 180.495750][ T1166] hsr_slave_1: left promiscuous mode [ 180.499451][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.502362][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.506566][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.509645][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.558524][ T1166] veth1_macvtap: left promiscuous mode [ 180.560208][ T1166] veth0_macvtap: left promiscuous mode [ 180.562019][ T1166] veth1_vlan: left promiscuous mode [ 180.563481][ T1166] veth0_vlan: left promiscuous mode [ 180.656808][ T9876] netlink: 48 bytes leftover after parsing attributes in process `syz.6.774'. [ 180.892106][ T9867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.773'. [ 180.896669][ T39] kauditd_printk_skb: 105 callbacks suppressed [ 180.896683][ T39] audit: type=1400 audit(2000000019.599:862): avc: denied { read } for pid=9865 comm="syz.4.773" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.905555][ T39] audit: type=1400 audit(2000000019.599:863): avc: denied { open } for pid=9865 comm="syz.4.773" path="/dev/input/event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.912075][ T39] audit: type=1400 audit(2000000019.609:864): avc: denied { ioctl } for pid=9865 comm="syz.4.773" path="/dev/input/event2" dev="devtmpfs" ino=947 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.924615][ T7388] usbhid 9-1:0.0: can't add hid device: -71 [ 180.926847][ T7388] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 180.938503][ T7388] usb 9-1: USB disconnect, device number 17 [ 180.942657][ T39] audit: type=1400 audit(2000000019.649:865): avc: denied { ioctl } for pid=9883 comm="syz.4.777" path="socket:[43660]" dev="sockfs" ino=43660 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.314543][ T5948] Bluetooth: hci0: command tx timeout [ 181.859365][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 182.004813][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 182.539564][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.586510][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.591202][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.594864][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.611134][ T5946] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 182.614307][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.095660][ T9888] netdevsim netdevsim4: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 183.221685][ T39] audit: type=1400 audit(2000000021.919:866): avc: denied { map_create } for pid=9897 comm="syz.4.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 183.229020][ T39] audit: type=1400 audit(2000000021.919:867): avc: denied { map_read map_write } for pid=9897 comm="syz.4.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 183.286503][ T9893] chnl_net:caif_netlink_parms(): no params data found [ 183.321929][ T39] audit: type=1400 audit(2000000022.019:868): avc: denied { ioctl } for pid=9908 comm="syz.6.781" path="socket:[46197]" dev="sockfs" ino=46197 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 183.385684][ T5948] Bluetooth: hci0: command tx timeout [ 183.404233][ T39] audit: type=1400 audit(2000000022.099:869): avc: denied { create } for pid=9919 comm="syz.6.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.411676][ T39] audit: type=1400 audit(2000000022.099:870): avc: denied { write } for pid=9919 comm="syz.6.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.446365][ T39] audit: type=1400 audit(2000000022.149:871): avc: denied { bind } for pid=9915 comm="syz.4.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.448664][ T9916] netlink: 5300 bytes leftover after parsing attributes in process `syz.4.782'. [ 183.454918][ T9916] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 183.527411][ T9893] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.530147][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.532646][ T9893] bridge_slave_0: entered allmulticast mode [ 183.538892][ T9893] bridge_slave_0: entered promiscuous mode [ 183.543026][ T9893] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.544896][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.547382][ T9893] bridge_slave_1: entered allmulticast mode [ 183.549382][ T9893] bridge_slave_1: entered promiscuous mode [ 183.586962][ T9893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.610316][ T9893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.679856][ T9838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 183.698837][ T9893] team0: Port device team_slave_0 added [ 183.701631][ T9838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 183.718135][ T9893] team0: Port device team_slave_1 added [ 183.761881][ T9838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 183.775971][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.778754][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.805410][ T9893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.810023][ T9838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 183.832930][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.838661][ T9929] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 183.840152][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.877528][ T9893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.019921][ T9893] hsr_slave_0: entered promiscuous mode [ 184.027661][ T9893] hsr_slave_1: entered promiscuous mode [ 184.031194][ T9893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.033388][ T9893] Cannot create hsr debugfs directory [ 184.125151][ T1166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.224429][ T1166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.269119][ T9838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.295758][ T9838] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.301537][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.303784][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.310225][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.312564][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.344635][ T1166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.417774][ T9964] netlink: 'syz.4.791': attribute type 5 has an invalid length. [ 184.420674][ T9966] netlink: 'syz.6.792': attribute type 12 has an invalid length. [ 184.473743][ T1166] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.496350][ T9838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.632393][ T9838] veth0_vlan: entered promiscuous mode [ 184.649175][ T9838] veth1_vlan: entered promiscuous mode [ 184.668377][ T5948] Bluetooth: hci2: command tx timeout [ 184.715972][ T1166] bridge_slave_1: left allmulticast mode [ 184.717886][ T1166] bridge_slave_1: left promiscuous mode [ 184.720059][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.728288][ T1166] bridge_slave_0: left allmulticast mode [ 184.730035][ T1166] bridge_slave_0: left promiscuous mode [ 184.731607][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.929458][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 185.185915][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.191497][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.195870][ T1166] bond0 (unregistering): Released all slaves [ 185.249001][ T9838] veth0_macvtap: entered promiscuous mode [ 185.252586][ T9838] veth1_macvtap: entered promiscuous mode [ 185.276596][ T9838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.280216][ T9838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.282828][ T9838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.285781][ T9838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.288666][ T9838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.291773][ T9838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.291968][ T9996] overlay: filesystem on ./file0 is read-only [ 185.294508][ T9838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.303006][ T9838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.329316][ T9838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.390895][ T9838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.394686][ T9838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.398486][ T9838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.402725][ T9838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.403205][T10000] netlink: 'syz.4.800': attribute type 5 has an invalid length. [ 185.407014][ T9838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.413871][ T9838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.418345][ T9838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.423192][ T9838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.427868][ T9838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.460916][T10000] : entered promiscuous mode [ 185.464602][ T9838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.472293][ T9838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.477589][ T5948] Bluetooth: hci0: command tx timeout [ 185.478547][ T9838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.482169][ T9838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.594399][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.602465][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.619957][ T3768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.622740][ T3768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.670604][ T1166] hsr_slave_0: left promiscuous mode [ 185.673658][ T1166] hsr_slave_1: left promiscuous mode [ 185.678152][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.682131][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.686656][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.689472][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.730249][ T1166] veth1_macvtap: left promiscuous mode [ 185.733865][ T1166] veth0_macvtap: left promiscuous mode [ 185.735729][ T1166] veth1_vlan: left promiscuous mode [ 185.737323][ T1166] veth0_vlan: left promiscuous mode [ 186.745695][ T5948] Bluetooth: hci2: command tx timeout [ 186.948790][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 187.077942][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 188.110443][ T9893] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 188.133284][ T9893] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.155388][ T9893] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.173896][ T9893] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 188.213830][T10042] netlink: 'syz.4.807': attribute type 2 has an invalid length. [ 188.232301][T10042] netlink: 'syz.4.807': attribute type 1 has an invalid length. [ 188.234938][T10042] netlink: 'syz.4.807': attribute type 2 has an invalid length. [ 188.247564][ T9893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.267860][ T9893] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.280365][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.283470][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 188.283477][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.283488][ T39] audit: type=1400 audit(2000000026.979:895): avc: denied { bind } for pid=10041 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.300541][ T39] audit: type=1400 audit(2000000026.979:896): avc: denied { setopt } for pid=10041 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.303411][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.307677][T10050] netlink: 68 bytes leftover after parsing attributes in process `syz.6.808'. [ 188.308148][T10050] netlink: 76 bytes leftover after parsing attributes in process `syz.6.808'. [ 188.316608][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.323948][ T39] audit: type=1400 audit(2000000026.979:897): avc: denied { write } for pid=10041 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.366969][ T39] audit: type=1400 audit(2000000027.059:898): avc: denied { append } for pid=10045 comm="syz.6.808" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 188.485075][ T9893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.513065][ T9893] veth0_vlan: entered promiscuous mode [ 188.521183][ T9893] veth1_vlan: entered promiscuous mode [ 188.542017][ T9893] veth0_macvtap: entered promiscuous mode [ 188.555046][ T9893] veth1_macvtap: entered promiscuous mode [ 188.568512][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.573811][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.578756][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.582372][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.587020][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.591109][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.594719][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.599347][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.604471][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.616592][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.620783][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.624312][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.628057][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.632081][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.636188][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.640049][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.644551][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.650135][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.658453][ T9893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.661795][ T9893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.665040][ T9893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.668605][ T9893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.714872][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.717400][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.761892][ T1166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.783366][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.785924][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.129086][ T39] audit: type=1400 audit(2000000027.829:899): avc: denied { create } for pid=10058 comm="syz.6.809" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.133184][T10062] netlink: 'syz.4.810': attribute type 4 has an invalid length. [ 189.135108][ T39] audit: type=1400 audit(2000000027.829:900): avc: denied { write } for pid=10058 comm="syz.6.809" name="file0" dev="tmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.145210][T10062] netlink: 'syz.4.810': attribute type 17 has an invalid length. [ 189.145545][ T39] audit: type=1400 audit(2000000027.829:901): avc: denied { open } for pid=10058 comm="syz.6.809" path="/152/file0" dev="tmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.155282][ T39] audit: type=1400 audit(2000000027.829:902): avc: denied { ioctl } for pid=10058 comm="syz.6.809" path="/152/file0" dev="tmpfs" ino=858 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.163010][ T39] audit: type=1400 audit(2000000027.849:903): avc: denied { bind } for pid=10059 comm="syz.4.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.169285][ T39] audit: type=1400 audit(2000000027.849:904): avc: denied { unlink } for pid=8058 comm="syz-executor" name="file0" dev="tmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 189.200034][ T1166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.226830][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.233615][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.236826][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.240086][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.243294][ T5946] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 189.247372][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.253495][T10070] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 189.312935][ T1166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.419247][T10064] kernel profiling enabled (shift: 63) [ 189.421142][T10064] profiling shift: 63 too large [ 189.608167][ T1166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.721524][ T1166] bridge_slave_1: left allmulticast mode [ 189.723176][ T1166] bridge_slave_1: left promiscuous mode [ 189.724730][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.728123][ T1166] bridge_slave_0: left allmulticast mode [ 189.729683][ T1166] bridge_slave_0: left promiscuous mode [ 189.731850][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.117183][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.121646][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.125789][ T1166] bond0 (unregistering): Released all slaves [ 190.166864][T10079] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.169731][T10079] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.171534][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.814'. [ 190.172021][T10079] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.177464][T10079] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.180518][T10079] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.182882][T10079] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.185216][T10079] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.203065][T10079] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.205245][T10079] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.207883][T10079] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.250775][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.254581][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.259433][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.267160][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.271216][ T5946] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 190.275156][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.286513][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 190.325021][T10099] fuse: Unknown parameter 'groupOid' [ 190.511068][T10087] chnl_net:caif_netlink_parms(): no params data found [ 190.587150][ T1166] hsr_slave_0: left promiscuous mode [ 190.587569][ T1166] hsr_slave_1: left promiscuous mode [ 190.591487][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.594043][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.600612][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.602605][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.633557][ T1166] veth1_macvtap: left promiscuous mode [ 190.635071][ T1166] veth0_macvtap: left promiscuous mode [ 190.640240][ T1166] veth1_vlan: left promiscuous mode [ 190.641923][ T1166] veth0_vlan: left promiscuous mode [ 191.532139][T10124] syz.4.819 (10124): drop_caches: 1 [ 191.919092][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 192.063800][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 192.355656][ T5948] Bluetooth: hci0: command tx timeout [ 192.666313][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 192.710207][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 192.749933][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 192.767578][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 192.782025][ T5946] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 192.793072][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.236997][T10087] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.240413][T10087] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.243957][T10087] bridge_slave_0: entered allmulticast mode [ 193.248097][T10087] bridge_slave_0: entered promiscuous mode [ 193.260775][T10087] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.262915][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.265830][T10087] bridge_slave_1: entered allmulticast mode [ 193.269640][T10087] bridge_slave_1: entered promiscuous mode [ 193.298790][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 193.298804][ T39] audit: type=1400 audit(2000000031.999:930): avc: denied { write } for pid=10198 comm="syz.4.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.341258][T10087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.351286][T10199] bond0: entered promiscuous mode [ 193.353201][T10199] bond_slave_0: entered promiscuous mode [ 193.355087][T10199] bond_slave_1: entered promiscuous mode [ 193.362560][ T39] audit: type=1400 audit(2000000032.059:931): avc: denied { create } for pid=10200 comm="syz.6.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 193.364134][T10087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.372727][ T39] audit: type=1400 audit(2000000032.079:932): avc: denied { getopt } for pid=10198 comm="syz.4.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 193.380610][ T39] audit: type=1400 audit(2000000032.089:933): avc: denied { bind } for pid=10200 comm="syz.6.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 193.454643][T10087] team0: Port device team_slave_0 added [ 193.461075][T10087] team0: Port device team_slave_1 added [ 193.507862][T10087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.510487][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.518650][T10087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.527806][T10087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.532038][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.539687][ T39] audit: type=1400 audit(2000000032.229:934): avc: denied { connect } for pid=10210 comm="syz.4.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 193.545800][T10087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.589022][T10218] kernel profiling enabled (shift: 17) [ 193.611494][T10087] hsr_slave_0: entered promiscuous mode [ 193.613686][T10087] hsr_slave_1: entered promiscuous mode [ 193.618986][T10087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.621710][T10087] Cannot create hsr debugfs directory [ 193.694758][ T39] audit: type=1400 audit(2000000032.389:935): avc: denied { read } for pid=10225 comm="syz.6.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 193.704437][ T39] audit: type=1400 audit(2000000032.399:936): avc: denied { create } for pid=10225 comm="syz.6.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 193.722563][ T39] audit: type=1400 audit(2000000032.419:937): avc: denied { read } for pid=10225 comm="syz.6.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 193.727286][T10188] chnl_net:caif_netlink_parms(): no params data found [ 193.876800][ T1166] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.917906][ T39] audit: type=1400 audit(2000000032.619:938): avc: denied { create } for pid=10237 comm="syz.6.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 193.925142][ T39] audit: type=1400 audit(2000000032.619:939): avc: denied { setopt } for pid=10237 comm="syz.6.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 193.980197][T10240] cgroup: subsys name conflicts with all [ 194.034712][ T1166] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.037897][ T1409] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.049935][T10188] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.055460][T10188] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.059838][T10188] bridge_slave_0: entered allmulticast mode [ 194.062240][T10188] bridge_slave_0: entered promiscuous mode [ 194.066656][T10188] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.068812][T10188] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.070912][T10188] bridge_slave_1: entered allmulticast mode [ 194.073619][T10188] bridge_slave_1: entered promiscuous mode [ 194.140350][ T1166] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.150577][T10188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.158573][T10188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.204983][T10188] team0: Port device team_slave_0 added [ 194.245501][T10188] team0: Port device team_slave_1 added [ 194.278656][ T1166] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.328614][T10188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.330584][T10188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.338095][T10188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.342859][T10188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.345174][T10188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.356184][T10188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.418991][T10188] hsr_slave_0: entered promiscuous mode [ 194.421773][T10188] hsr_slave_1: entered promiscuous mode [ 194.424792][T10188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.429489][T10188] Cannot create hsr debugfs directory [ 194.435590][ T5948] Bluetooth: hci0: command tx timeout [ 194.460317][T10246] xt_hashlimit: size too large, truncated to 1048576 [ 194.532184][ T1166] bridge_slave_1: left allmulticast mode [ 194.534325][ T1166] bridge_slave_1: left promiscuous mode [ 194.536724][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.541874][ T1166] bridge_slave_0: left allmulticast mode [ 194.544261][ T1166] bridge_slave_0: left promiscuous mode [ 194.549033][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.987772][ T5948] Bluetooth: hci2: command tx timeout [ 195.034667][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.047965][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.053002][ T1166] bond0 (unregistering): Released all slaves [ 195.104323][T10087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.109379][T10251] jfs: Unrecognized mount option "gid=" or missing value [ 195.130642][T10087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.185005][T10087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.220170][T10087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.245262][T10253] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.834'. [ 195.249989][T10253] net_ratelimit: 57 callbacks suppressed [ 195.250003][T10253] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 195.379462][T10087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.394023][T10087] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.400129][T10164] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.402705][T10164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.411814][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.414270][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.436477][ T1166] hsr_slave_0: left promiscuous mode [ 195.438568][ T1166] hsr_slave_1: left promiscuous mode [ 195.440621][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.442676][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.445262][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.448260][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.475189][ T1166] veth1_macvtap: left promiscuous mode [ 195.478209][ T1166] veth0_macvtap: left promiscuous mode [ 195.480240][ T1166] veth1_vlan: left promiscuous mode [ 195.482130][ T1166] veth0_vlan: left promiscuous mode [ 195.662468][T10267] can: request_module (can-proto-4) failed. [ 196.505641][ T5948] Bluetooth: hci0: command tx timeout [ 196.725464][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 196.883488][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 197.066888][ T5948] Bluetooth: hci2: command tx timeout [ 197.933385][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.836'. [ 198.067657][T10279] xt_hashlimit: size too large, truncated to 1048576 [ 198.307545][T10087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.310190][T10188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.322450][T10188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.336265][T10188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.340682][T10188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.385156][T10087] veth0_vlan: entered promiscuous mode [ 198.414355][T10087] veth1_vlan: entered promiscuous mode [ 198.438836][T10188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.457967][T10188] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.473181][T10087] veth0_macvtap: entered promiscuous mode [ 198.483352][T10087] veth1_macvtap: entered promiscuous mode [ 198.494857][T10150] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.497478][T10150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.512024][T10150] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.514473][T10150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.529872][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 198.529889][ T39] audit: type=1400 audit(2000000037.229:959): avc: denied { mount } for pid=10315 comm="syz.4.844" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 198.532564][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.545379][ T39] audit: type=1400 audit(2000000037.249:960): avc: denied { mounton } for pid=10315 comm="syz.4.844" path="/296/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 198.554314][ T39] audit: type=1400 audit(2000000037.249:961): avc: denied { read } for pid=10315 comm="syz.4.844" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 198.555524][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.566984][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.570931][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.574129][ T39] audit: type=1400 audit(2000000037.249:962): avc: denied { open } for pid=10315 comm="syz.4.844" path="/296/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 198.582535][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.582554][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.585809][ T5948] Bluetooth: hci0: command tx timeout [ 198.590622][T10087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.591261][ T39] audit: type=1400 audit(2000000037.249:963): avc: denied { watch } for pid=10315 comm="syz.4.844" path="/296/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 198.595070][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.600395][ T39] audit: type=1400 audit(2000000037.309:964): avc: denied { unmount } for pid=6513 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 198.604767][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.618589][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.621753][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.625262][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.629850][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.646087][T10087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.654178][T10323] xt_hashlimit: Unknown mode mask FF0, kernel too old? [ 198.654847][T10087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.660762][T10087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.663455][T10087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.667067][T10087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.707935][T10326] openvswitch: netlink: Flow actions attr not present in new flow. [ 198.748456][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.750511][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.772386][T10164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.774676][T10164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.856328][ T39] audit: type=1400 audit(2000000037.559:965): avc: denied { read } for pid=10344 comm="syz.4.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 198.871939][T10188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.894260][T10188] veth0_vlan: entered promiscuous mode [ 198.899859][T10188] veth1_vlan: entered promiscuous mode [ 198.918077][T10188] veth0_macvtap: entered promiscuous mode [ 198.922476][T10188] veth1_macvtap: entered promiscuous mode [ 198.930203][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.933242][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.939466][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.942444][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.945802][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.948955][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.951814][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.954922][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.960146][T10188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.968432][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.971451][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.974267][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.980424][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.983351][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.986312][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.989033][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.992027][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.995828][T10188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.001340][T10188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.003859][T10188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.007268][T10188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.009728][T10188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.063218][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.070712][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.083464][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.086163][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.402699][T10150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.957666][T10150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.324192][ T39] audit: type=1400 audit(2000000039.019:966): avc: denied { create } for pid=10354 comm="syz.6.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 200.332574][ T39] audit: type=1400 audit(2000000039.029:967): avc: denied { setopt } for pid=10354 comm="syz.6.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 200.339998][ T39] audit: type=1400 audit(2000000039.029:968): avc: denied { bind } for pid=10354 comm="syz.6.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 200.429113][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.434103][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.437960][T10371] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.855'. [ 200.438827][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.440822][T10371] netlink: 'syz.4.855': attribute type 2 has an invalid length. [ 200.444778][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.449832][ T5946] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.452784][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.485952][T10374] netlink: 56 bytes leftover after parsing attributes in process `syz.4.856'. [ 200.531498][T10378] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26011 sclass=netlink_xfrm_socket pid=10378 comm=syz.4.857 [ 200.533382][T10150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.592989][T10379] ptm ptm30: ldisc open failed (-12), clearing slot 30 [ 200.633200][T10368] chnl_net:caif_netlink_parms(): no params data found [ 200.715106][ T6735] libceph: connect (1)[c::]:6789 error -101 [ 200.718928][ T6735] libceph: mon0 (1)[c::]:6789 connect error [ 200.736980][T10368] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.739713][T10368] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.743486][T10368] bridge_slave_0: entered allmulticast mode [ 200.748413][T10368] bridge_slave_0: entered promiscuous mode [ 200.751739][T10368] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.753888][T10368] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.756787][T10368] bridge_slave_1: entered allmulticast mode [ 200.759127][T10368] bridge_slave_1: entered promiscuous mode [ 200.784437][T10368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.789154][T10368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.829713][T10368] team0: Port device team_slave_0 added [ 200.833623][T10368] team0: Port device team_slave_1 added [ 200.866420][T10368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.868701][T10368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.877905][T10368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.883078][T10368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.886309][T10368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.896465][T10368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.915557][ T25] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 200.941926][T10368] hsr_slave_0: entered promiscuous mode [ 200.944839][T10368] hsr_slave_1: entered promiscuous mode [ 200.953060][T10368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.956246][T10368] Cannot create hsr debugfs directory [ 200.977815][T10150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.983439][ T6735] libceph: connect (1)[c::]:6789 error -101 [ 200.985183][ T6735] libceph: mon0 (1)[c::]:6789 connect error [ 201.112853][ T25] usb 9-1: unable to get BOS descriptor or descriptor too short [ 201.116707][ T25] usb 9-1: config 1 has an invalid interface number: 222 but max is 0 [ 201.119749][ T25] usb 9-1: config 1 has no interface number 0 [ 201.122435][ T25] usb 9-1: config 1 interface 222 altsetting 7 endpoint 0xD has invalid maxpacket 1024, setting to 8 [ 201.126623][ T25] usb 9-1: config 1 interface 222 has no altsetting 0 [ 201.138879][ T25] usb 9-1: string descriptor 0 read error: -22 [ 201.140528][ T25] usb 9-1: New USB device found, idVendor=19d2, idProduct=1057, bcdDevice= 9.6c [ 201.142995][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.153690][T10400] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 201.163078][ T25] option 9-1:1.222: GSM modem (1-port) converter detected [ 201.200741][T10150] bridge_slave_1: left allmulticast mode [ 201.203885][T10150] bridge_slave_1: left promiscuous mode [ 201.206535][T10150] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.210577][T10150] bridge_slave_0: left allmulticast mode [ 201.212457][T10150] bridge_slave_0: left promiscuous mode [ 201.215119][T10150] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.369122][ T829] usb 9-1: USB disconnect, device number 18 [ 201.371676][ T829] option 9-1:1.222: device disconnected [ 201.506113][ T64] libceph: connect (1)[c::]:6789 error -101 [ 201.508300][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 201.533258][T10407] ceph: No mds server is up or the cluster is laggy [ 201.670777][T10150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.675178][T10150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.679766][T10150] bond0 (unregistering): Released all slaves [ 201.977192][T10150] hsr_slave_0: left promiscuous mode [ 201.980015][T10150] hsr_slave_1: left promiscuous mode [ 201.982813][T10150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.987109][T10150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.990037][T10150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.992674][T10150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.034511][T10150] veth1_macvtap: left promiscuous mode [ 202.036816][T10150] veth0_macvtap: left promiscuous mode [ 202.038988][T10150] veth1_vlan: left promiscuous mode [ 202.040941][T10150] veth0_vlan: left promiscuous mode [ 202.506615][ T5946] Bluetooth: hci0: command tx timeout [ 202.689762][T10433] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 202.693162][T10433] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 202.703262][T10433] vhci_hcd vhci_hcd.0: Device attached [ 202.705207][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.750145][ T5948] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.760882][T10436] vhci_hcd: connection closed [ 202.761269][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.772347][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.775411][T10386] vhci_hcd: stop threads [ 202.776120][ T5948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 202.778661][T10386] vhci_hcd: release socket [ 202.780023][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.781227][T10386] vhci_hcd: disconnect device [ 203.351921][T10150] team0 (unregistering): Port device team_slave_1 removed [ 203.499310][T10150] team0 (unregistering): Port device team_slave_0 removed [ 204.595724][ T5946] Bluetooth: hci0: command tx timeout [ 204.749454][T10368] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 204.761674][T10368] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 204.776886][T10368] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 204.781313][T10438] chnl_net:caif_netlink_parms(): no params data found [ 204.800623][T10368] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 204.915514][ T5946] Bluetooth: hci2: command tx timeout [ 204.924730][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 204.924814][ T39] audit: type=1400 audit(2000000043.619:977): avc: denied { write } for pid=10457 comm="syz.4.868" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 204.925943][T10438] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.932129][ T39] audit: type=1400 audit(2000000043.629:978): avc: denied { append } for pid=10457 comm="syz.4.868" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 204.934205][T10438] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.947353][T10438] bridge_slave_0: entered allmulticast mode [ 204.949612][T10438] bridge_slave_0: entered promiscuous mode [ 204.956028][T10438] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.958286][T10438] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.961996][T10438] bridge_slave_1: entered allmulticast mode [ 204.964419][T10438] bridge_slave_1: entered promiscuous mode [ 205.004799][T10438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.011088][T10438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.080477][T10438] team0: Port device team_slave_0 added [ 205.091980][T10438] team0: Port device team_slave_1 added [ 205.106665][T10368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.160513][T10438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.163428][T10438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.172594][T10438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.218214][T10150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.240424][T10438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.242931][T10438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.245120][ T39] audit: type=1400 audit(2000000043.939:979): avc: denied { create } for pid=10465 comm="syz.4.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 205.252047][T10438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.259071][ T39] audit: type=1400 audit(2000000043.939:980): avc: denied { write } for pid=10465 comm="syz.4.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 205.269329][ T39] audit: type=1400 audit(2000000043.969:981): avc: denied { bind } for pid=10465 comm="syz.4.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 205.274483][ T39] audit: type=1400 audit(2000000043.969:982): avc: denied { watch watch_reads } for pid=10465 comm="syz.4.870" path="/proc/1030" dev="proc" ino=52254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 205.320328][ T39] audit: type=1400 audit(2000000044.019:983): avc: denied { sqpoll } for pid=10468 comm="syz.4.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 205.331620][T10438] hsr_slave_0: entered promiscuous mode [ 205.334606][T10438] hsr_slave_1: entered promiscuous mode [ 205.346845][T10438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.349321][T10438] Cannot create hsr debugfs directory [ 205.352469][T10368] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.372285][T10150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.395260][ T39] audit: type=1400 audit(2000000044.089:984): avc: denied { shutdown } for pid=10472 comm="syz.6.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 205.405913][ T39] audit: type=1400 audit(2000000044.109:985): avc: denied { setopt } for pid=10468 comm="syz.4.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.416022][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.419212][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.423765][T10473] netlink: 256 bytes leftover after parsing attributes in process `syz.6.872'. [ 205.453452][T10150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.479362][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.481455][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.551759][T10150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.561501][ T39] audit: type=1400 audit(2000000044.259:986): avc: denied { bind } for pid=10476 comm="syz.6.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 205.680200][T10368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.689942][T10150] bridge_slave_1: left allmulticast mode [ 205.692369][T10150] bridge_slave_1: left promiscuous mode [ 205.695585][T10150] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.698875][T10150] bridge_slave_0: left allmulticast mode [ 205.700439][T10150] bridge_slave_0: left promiscuous mode [ 205.702023][T10150] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.748498][T10488] program syz.6.874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.088845][T10150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.093520][T10150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.098469][T10150] bond0 (unregistering): Released all slaves [ 206.135040][T10489] mac80211_hwsim hwsim28 : renamed from wlan1 [ 206.267451][T10368] veth0_vlan: entered promiscuous mode [ 206.291092][T10368] veth1_vlan: entered promiscuous mode [ 206.313070][T10368] veth0_macvtap: entered promiscuous mode [ 206.321890][T10368] veth1_macvtap: entered promiscuous mode [ 206.334006][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.340920][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.344038][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.349758][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.353119][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.357540][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.360578][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.363258][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.367197][T10368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.414774][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.419021][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.421815][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.424601][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.427302][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.429963][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.432490][T10368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.435880][T10368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.439516][T10368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.487234][T10368] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.490516][T10368] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.492689][T10368] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.494942][T10368] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.526747][T10150] hsr_slave_0: left promiscuous mode [ 206.530363][T10150] hsr_slave_1: left promiscuous mode [ 206.536732][T10150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.538740][T10150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.541605][T10150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.543557][T10150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.577086][T10150] veth1_macvtap: left promiscuous mode [ 206.579471][T10150] veth0_macvtap: left promiscuous mode [ 206.581565][T10150] veth1_vlan: left promiscuous mode [ 206.583297][T10150] veth0_vlan: left promiscuous mode [ 206.675943][ T5946] Bluetooth: hci0: command tx timeout [ 206.995447][ T5946] Bluetooth: hci2: command tx timeout [ 207.659402][T10150] team0 (unregistering): Port device team_slave_1 removed [ 207.792700][T10150] team0 (unregistering): Port device team_slave_0 removed [ 208.748026][ T5946] Bluetooth: hci0: command tx timeout [ 208.885471][T10514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.890030][T10514] batadv_slave_0: entered allmulticast mode [ 209.031408][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.037271][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.065561][ T5946] Bluetooth: hci2: command tx timeout [ 209.171182][T10438] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 209.172303][T10164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.177242][T10164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.184960][T10438] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 209.197811][T10438] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 209.202284][T10438] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 209.235135][T10438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.254619][T10438] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.301640][T10537] loop5: detected capacity change from 0 to 7 [ 209.304359][T10537] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.309662][T10537] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.312974][T10537] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.317752][T10160] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.319984][T10160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.326673][T10537] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.329063][T10537] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.331383][T10537] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.333573][T10537] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.336191][T10160] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.336259][T10160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.341090][T10537] ldm_validate_partition_table(): Disk read failed. [ 209.345146][T10537] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.347513][T10537] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.350173][T10537] Buffer I/O error on dev loop5, logical block 0, async page read [ 209.352224][T10537] Dev loop5: unable to read RDB block 0 [ 209.353821][T10537] loop5: unable to read partition table [ 209.356821][T10537] loop5: partition table beyond EOD, truncated [ 209.359053][T10537] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 209.359053][T10537] ) failed (rc=-5) [ 209.477713][T10438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.499682][T10438] veth0_vlan: entered promiscuous mode [ 209.506901][T10438] veth1_vlan: entered promiscuous mode [ 209.530760][T10438] veth0_macvtap: entered promiscuous mode [ 209.534093][T10438] veth1_macvtap: entered promiscuous mode [ 209.541233][T10438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.544776][T10438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.548642][T10438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.551676][T10438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.554926][T10438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.558136][T10438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.561609][T10438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.576807][T10438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.579970][T10438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.582793][T10438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.587309][T10438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.590871][T10438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.594802][T10438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.599069][T10438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.602811][T10438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.610671][T10438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.616117][T10438] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.619091][T10438] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.621961][T10438] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.624545][T10438] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.658273][T10554] netlink: 56 bytes leftover after parsing attributes in process `syz.4.884'. [ 209.689123][T10164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.691668][T10164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.711648][T10164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.713890][T10164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.906004][T10565] pim6reg: entered allmulticast mode [ 209.941253][T10567] netlink: 'syz.6.887': attribute type 12 has an invalid length. [ 210.005680][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 210.005691][ T39] audit: type=1400 audit(2000000048.709:993): avc: denied { create } for pid=10573 comm="syz.6.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 210.024278][ T39] audit: type=1400 audit(2000000048.719:994): avc: denied { read } for pid=10571 comm="syz.4.888" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 210.032353][T10576] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 210.034670][T10576] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 210.038692][ T39] audit: type=1400 audit(2000000048.719:995): avc: denied { open } for pid=10571 comm="syz.4.888" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 210.048806][T10576] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 210.059357][T10576] vimc vimc.0: subdev_call error Scaler [ 210.061781][T10577] netlink: 'syz.4.888': attribute type 10 has an invalid length. [ 210.062070][T10576] ------------[ cut here ]------------ [ 210.065811][T10576] WARNING: CPU: 3 PID: 10576 at drivers/media/v4l2-core/v4l2-subdev.c:455 call_s_stream+0x2df/0x350 [ 210.069705][T10576] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 210.071290][T10576] CPU: 3 UID: 0 PID: 10576 Comm: syz.6.889 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 210.073310][ T39] audit: type=1400 audit(2000000048.769:996): avc: denied { write } for pid=5927 comm="syz-executor" path="pipe:[3831]" dev="pipefs" ino=3831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 210.078060][T10576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 210.078077][T10576] RIP: 0010:call_s_stream+0x2df/0x350 [ 210.078108][T10576] Code: c1 ea 03 80 3c 02 00 75 75 48 8b bb 08 01 00 00 44 89 e2 48 c7 c6 20 4e 4e 8c e8 ac 3e 3b fe e9 54 fe ff ff e8 32 aa 15 fa 90 <0f> 0b 90 e9 cb fe ff ff 4c 89 f7 e8 a1 33 77 fa e9 48 fd ff ff e8 [ 210.078125][T10576] RSP: 0018:ffffc90003617a68 EFLAGS: 00010293 [ 210.078143][T10576] RAX: 0000000000000000 RBX: ffff888108387820 RCX: ffffffff8777ce9e [ 210.078154][T10576] RDX: ffff888029548000 RSI: ffffffff8777d11e RDI: 0000000000000000 [ 210.078166][T10576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.078176][T10576] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 210.078187][T10576] R13: 0000000000000000 R14: ffff888108387998 R15: ffffffff87ca74a0 [ 210.078199][T10576] FS: 00007f806918f6c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 210.078230][T10576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.078244][T10576] CR2: 00007f806918fd58 CR3: 00000000478b4000 CR4: 0000000000352ef0 [ 210.078256][T10576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 210.078266][T10576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 210.078278][T10576] Call Trace: [ 210.078284][T10576] [ 210.078292][T10576] ? __warn+0xea/0x3d0 [ 210.078316][T10576] ? call_s_stream+0x2df/0x350 [ 210.078339][T10576] ? report_bug+0x3c0/0x580 [ 210.078380][T10576] ? handle_bug+0x54/0xa0 [ 210.078396][T10576] ? exc_invalid_op+0x17/0x50 [ 210.078414][T10576] ? asm_exc_invalid_op+0x1a/0x20 [ 210.078436][T10576] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 210.078465][T10576] ? call_s_stream+0x5e/0x350 [ 210.078486][T10576] ? call_s_stream+0x2de/0x350 [ 210.078507][T10576] ? call_s_stream+0x2df/0x350 [ 210.078529][T10576] ? call_s_stream+0x2de/0x350 [ 210.078549][T10576] ? __pfx_call_s_stream+0x10/0x10 [ 210.078571][T10576] vimc_streamer_pipeline_terminate+0x218/0x320 [ 210.078595][T10576] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 210.078623][T10576] vimc_streamer_s_stream+0x650/0x9a0 [ 210.078656][T10576] vimc_capture_start_streaming+0xa1/0x130 [ 210.078679][T10576] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 210.078702][T10576] vb2_start_streaming+0x15f/0x5a0 [ 210.078724][T10576] ? __bitmap_weight+0xdc/0x110 [ 210.078752][T10576] vb2_core_streamon+0x2a7/0x450 [ 210.078775][T10576] vb2_ioctl_streamon+0xf4/0x170 [ 210.078797][T10576] __video_do_ioctl+0xaf0/0xf00 [ 210.078821][T10576] ? __pfx___video_do_ioctl+0x10/0x10 [ 210.078837][T10576] ? __might_fault+0xe3/0x190 [ 210.078869][T10576] video_usercopy+0x4ce/0x1600 [ 210.078889][T10576] ? __pfx___video_do_ioctl+0x10/0x10 [ 210.078909][T10576] ? __pfx_video_usercopy+0x10/0x10 [ 210.078941][T10576] v4l2_ioctl+0x1ba/0x250 [ 210.078959][T10576] ? __pfx_v4l2_ioctl+0x10/0x10 [ 210.078978][T10576] __x64_sys_ioctl+0x18f/0x220 [ 210.079002][T10576] do_syscall_64+0xcd/0x250 [ 210.079019][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.079044][T10576] RIP: 0033:0x7f806837e719 [ 210.079059][T10576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.079075][T10576] RSP: 002b:00007f806918f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.079093][T10576] RAX: ffffffffffffffda RBX: 00007f8068536130 RCX: 00007f806837e719 [ 210.079105][T10576] RDX: 0000000020000000 RSI: 0000000040045612 RDI: 0000000000000003 [ 210.079116][T10576] RBP: 00007f80683f139e R08: 0000000000000000 R09: 0000000000000000 [ 210.079126][T10576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.079137][T10576] R13: 0000000000000001 R14: 00007f8068536130 R15: 00007ffc73a26758 [ 210.079160][T10576] [ 210.079169][T10576] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 210.079179][T10576] CPU: 3 UID: 0 PID: 10576 Comm: syz.6.889 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 210.079199][T10576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 210.079208][T10576] Call Trace: [ 210.079214][T10576] [ 210.079220][T10576] dump_stack_lvl+0x3d/0x1f0 [ 210.079237][T10576] panic+0x71d/0x800 [ 210.079258][T10576] ? __pfx_panic+0x10/0x10 [ 210.079279][T10576] ? show_trace_log_lvl+0x29d/0x3d0 [ 210.079298][T10576] ? check_panic_on_warn+0x1f/0xb0 [ 210.079321][T10576] ? call_s_stream+0x2df/0x350 [ 210.079341][T10576] check_panic_on_warn+0xab/0xb0 [ 210.079363][T10576] __warn+0xf6/0x3d0 [ 210.079384][T10576] ? call_s_stream+0x2df/0x350 [ 210.079404][T10576] report_bug+0x3c0/0x580 [ 210.079430][T10576] handle_bug+0x54/0xa0 [ 210.079445][T10576] exc_invalid_op+0x17/0x50 [ 210.079462][T10576] asm_exc_invalid_op+0x1a/0x20 [ 210.079484][T10576] RIP: 0010:call_s_stream+0x2df/0x350 [ 210.079505][T10576] Code: c1 ea 03 80 3c 02 00 75 75 48 8b bb 08 01 00 00 44 89 e2 48 c7 c6 20 4e 4e 8c e8 ac 3e 3b fe e9 54 fe ff ff e8 32 aa 15 fa 90 <0f> 0b 90 e9 cb fe ff ff 4c 89 f7 e8 a1 33 77 fa e9 48 fd ff ff e8 [ 210.079521][T10576] RSP: 0018:ffffc90003617a68 EFLAGS: 00010293 [ 210.079536][T10576] RAX: 0000000000000000 RBX: ffff888108387820 RCX: ffffffff8777ce9e [ 210.079548][T10576] RDX: ffff888029548000 RSI: ffffffff8777d11e RDI: 0000000000000000 [ 210.079558][T10576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.079566][T10576] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 210.079577][T10576] R13: 0000000000000000 R14: ffff888108387998 R15: ffffffff87ca74a0 [ 210.079588][T10576] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 210.079616][T10576] ? call_s_stream+0x5e/0x350 [ 210.079640][T10576] ? call_s_stream+0x2de/0x350 [ 210.079664][T10576] ? call_s_stream+0x2de/0x350 [ 210.079684][T10576] ? __pfx_call_s_stream+0x10/0x10 [ 210.079705][T10576] vimc_streamer_pipeline_terminate+0x218/0x320 [ 210.079728][T10576] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 210.079751][T10576] vimc_streamer_s_stream+0x650/0x9a0 [ 210.079778][T10576] vimc_capture_start_streaming+0xa1/0x130 [ 210.079799][T10576] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 210.079820][T10576] vb2_start_streaming+0x15f/0x5a0 [ 210.079839][T10576] ? __bitmap_weight+0xdc/0x110 [ 210.079860][T10576] vb2_core_streamon+0x2a7/0x450 [ 210.079880][T10576] vb2_ioctl_streamon+0xf4/0x170 [ 210.079899][T10576] __video_do_ioctl+0xaf0/0xf00 [ 210.079918][T10576] ? __pfx___video_do_ioctl+0x10/0x10 [ 210.079933][T10576] ? __might_fault+0xe3/0x190 [ 210.079962][T10576] video_usercopy+0x4ce/0x1600 [ 210.079980][T10576] ? __pfx___video_do_ioctl+0x10/0x10 [ 210.079997][T10576] ? __pfx_video_usercopy+0x10/0x10 [ 210.080028][T10576] v4l2_ioctl+0x1ba/0x250 [ 210.080044][T10576] ? __pfx_v4l2_ioctl+0x10/0x10 [ 210.080061][T10576] __x64_sys_ioctl+0x18f/0x220 [ 210.080082][T10576] do_syscall_64+0xcd/0x250 [ 210.080101][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.080124][T10576] RIP: 0033:0x7f806837e719 [ 210.080135][T10576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.080151][T10576] RSP: 002b:00007f806918f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.080168][T10576] RAX: ffffffffffffffda RBX: 00007f8068536130 RCX: 00007f806837e719 [ 210.080178][T10576] RDX: 0000000020000000 RSI: 0000000040045612 RDI: 0000000000000003 [ 210.080188][T10576] RBP: 00007f80683f139e R08: 0000000000000000 R09: 0000000000000000 [ 210.080198][T10576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.080208][T10576] R13: 0000000000000001 R14: 00007f8068536130 R15: 00007ffc73a26758 [ 210.080229][T10576] [ 210.088578][T10576] Kernel Offset: disabled VM DIAGNOSIS: 00:09:21 Registers: info registers vcpu 0 CPU#0 RAX=000000315aa30b79 RBX=ffffffff93793000 RCX=0000003160c83746 RDX=0000000000000006 RSI=0000000000000001 RDI=ffffffff93793000 RBP=00000000c4ebd7a4 RSP=ffffc90000007d40 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000006 R13=ffff88806a73fa58 R14=ffff888026250000 R15=ffff88806a73f9b8 RIP=ffffffff8b233d78 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c413e83 CR3=00000000473ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf677f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf677f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf677f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf677f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf677f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faf677f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000100 0000000b0081a113 04bcac59ec800f04 888100100000002e ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f2d000280020000 000f000a000e0000 0000000001000000 000b0081a11304bc ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9500000033000000 8500000000000004 b700000008000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a6000000000000a2 bc00000000fff88a 7b00000000000008 b700000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 330b290c7496e713 49f910e2c685564b 08a3e2ab6e611647 2cd6fcc63fbd7e97 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 efd4d3baeea3cde0 9c1393a3a92b7a36 9ff88f03236bc53d b07dd1a2f894f1d4 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec8a16dc5c8e04c7 5c6020ac5b28c35c e7f8a24f0f580e1c 66ea06f8f3b32501 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9b6fca0ba0dbfe5f 5e81182880b9f3c4 2321355350b5c9a9 9902000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc900064e0000 RBX=0000000000000000 RCX=ffff888027740fb0 RDX=000000000000009d RSI=ffffffff864c0596 RDI=ffff888027741188 RBP=0000000000000001 RSP=ffffc900008b0b88 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=0000000000004e20 R14=ffff888027740fb0 R15=0000000000000001 RIP=ffffffff864c05d3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4c8dc8fd00 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffdfc72ce9c CR3=00000000353bc000 CR4=00352ef0 DR0=0000000000000621 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=7095708970957089 7095708970957089 7095708970957089 7095708970957089 7095708970957089 7095708970957089 7095708970957089 7095708970957089 ZMM22=8d48fe8f8d48fe8f 8d48fe8f8d48fe8f 8d48fe8f8d48fe8f 8d48fe8f8d48fe8f 8d48fe8f8d48fe8f 8d48fe8f8d48fe8f 8d48fe8f8d48fe8f 8d48fe8f8d48fe8f ZMM23=0c3657480c365748 0c3657480c365748 0c3657480c365748 0c3657480c365748 0c3657480c365748 0c3657480c365748 0c3657480c365748 0c3657480c365748 ZMM24=9a57ac769a57ac76 9a57ac769a57ac76 9a57ac769a57ac76 9a57ac769a57ac76 9a57ac769a57ac76 9a57ac769a57ac76 9a57ac769a57ac76 9a57ac769a57ac76 ZMM25=790f2496790f2496 790f2496790f2496 790f2496790f2496 790f2496790f2496 790f2496790f2496 790f2496790f2496 790f2496790f2496 790f2496790f2496 ZMM26=b8c72486b8c72486 b8c72486b8c72486 b8c72486b8c72486 b8c72486b8c72486 b8c72486b8c72486 b8c72486b8c72486 b8c72486b8c72486 b8c72486b8c72486 ZMM27=2c00ed7e2c00ed7e 2c00ed7e2c00ed7e 2c00ed7e2c00ed7e 2c00ed7e2c00ed7e 2c00ed7e2c00ed7e 2c00ed7e2c00ed7e 2c00ed7e2c00ed7e 2c00ed7e2c00ed7e ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=c0040000c0040000 c0040000c0040000 c0040000c0040000 c0040000c0040000 c0040000c0040000 c0040000c0040000 c0040000c0040000 c0040000c0040000 info registers vcpu 2 CPU#2 RAX=00000000001c2ae9 RBX=0000000000000002 RCX=ffffffff8b235439 RDX=0000000000000000 RSI=ffffffff8b6cd040 RDI=ffffffff8bd1b2c0 RBP=ffffed1003b5b000 RSP=ffffc90000197e08 R8 =0000000000000001 R9 =ffffed100d507025 R10=ffff88806a83812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801dad8000 R14=ffffffff905f5908 R15=0000000000000000 RIP=ffffffff8b23681f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005d1a6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc73a26af0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80683f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80683f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80683f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80683f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80683f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80683f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b84c5 RDI=ffffffff9aaeac40 RBP=ffffffff9aaeac00 RSP=ffffc900036173c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000065 R14=ffffffff850b8460 R15=0000000000000000 RIP=ffffffff850b84ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f806918f6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f806918fd58 CR3=00000000478b4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000305f6576616c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80683f223b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80683f2248 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80683f2242 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80683f2256 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80683f22dc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f80683f23ba ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f806850c488 00007f806850c480 00007f806850c478 00007f806850c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f806906d100 00007f806850c440 00007f806850c458 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f806850c498 00007f806850c490 00007f806850c488 00007f806850c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000