last executing test programs: 2m45.535661889s ago: executing program 1 (id=361): r0 = socket(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x81, 0x0) sendmmsg$unix(r0, &(0x7f00000004c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) socket(0x1, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) (async) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x81, 0x0) (async) sendmmsg$unix(r0, &(0x7f00000004c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) (async) 2m45.471918695s ago: executing program 1 (id=365): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 2m44.510818922s ago: executing program 1 (id=377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) listen(r0, 0x8002) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 2m44.504215468s ago: executing program 1 (id=378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f0000000080)="dd85b04cd9d397f817bfc18895ca012d3894943a9ee5f1459cc8ae47610ef5c460cc579112df4c57c293cfa376097dbe754981f78f452e3072ad2d341737acf3705b78b56505b35f00fc6dfae06fc34d6b3c2c794aad24ad944b2858a779e14f0ab88a62100d11fc393181cfcdc6cfb1dd0a5987f7b7551bcf4b2c80d58c6eff0292a740d911a68bb9ffa863d2da256236eedccb88ad27edd4430d3220dbbbd3a3d93f33133d69614d3a273c1092ab11f1f4c05930ff669a148ee8abe35e2beeb506e852f96b5ded0be89930799da5c6d20f5c") r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x0) shutdown(r3, 0x1) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x202}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x0, 0x701801) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f00000003c0)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, @cb_func], &(0x7f0000000180)='GPL\x00', 0x9811, 0x4b, &(0x7f0000000200)=""/75, 0x40f00, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x5, 0x5, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, r6, r7, r8, r9, r10], 0x0, 0x10, 0x80000000, @void, @value}, 0x94) 2m44.423235755s ago: executing program 1 (id=381): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) getsockname$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x20) r1 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x40, 0x0, 0x7}) 2m44.371167131s ago: executing program 1 (id=383): r0 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x22, 0x4004, @fd=r0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) io_uring_enter(r0, 0x567, 0x20, 0x0, 0x0, 0x0) 2m28.216651195s ago: executing program 32 (id=383): r0 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x22, 0x4004, @fd=r0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) io_uring_enter(r0, 0x567, 0x20, 0x0, 0x0, 0x0) 2m22.626375763s ago: executing program 3 (id=735): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @remote}, 0x1c) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000180)=0x100, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@deltclass={0x3c, 0x29, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x1, 0xa}, {0xffff, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_RATE={0x6, 0x5, {0x50, 0x99}}, @tclass_kind_options=@c_red={0x8}]}, 0x3c}}, 0x48040) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r8, {0xffff, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d00000009000000050000000000400224010000", @ANYRES32=r2, @ANYBLOB="9e446c23ffff00000000000000762cabf64d00"/29, @ANYRES32=r8, @ANYRES32=r2, @ANYBLOB="00000000030000000200"/28], 0x50) getsockopt$inet_tcp_int(r6, 0x6, 0x5, 0x0, &(0x7f0000003600)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r6, @ANYBLOB="675e2546e3ce1f645744e2c68bca2e7e8fcbe214ce2594024c5d06337ab82bf8b9f9bfbcdd2b42432a18ed0a76912a863376ab956094c3d3a427d089dd70a51e1edff42466a09a697c4dc4daa5efd1365f5ce9f3974653a4f902817d6467dbdfc39fabe5d0299c5cd660c1762a1cd2ffc76dd7fa6029bb98c9348f96f7c67cea606cc2b8d02de395cd9f13b661e782ac3935925ea4b856e0eea6b6a4d445eedd9c2a8cecee0dd77e3bca4558631fd8b3040df041d9b0ddc6eaea26c03e5527e3baf136", @ANYBLOB="feffffff0000c7c0cd00"/20, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) iopl(0x3) setgid(0x0) write$cgroup_pid(r10, &(0x7f0000000200), 0x9) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r12 = openat$cgroup_freezer_state(r11, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r12, &(0x7f0000000080)='THAWED\x00', 0x7) r13 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 2m22.411996667s ago: executing program 3 (id=736): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/arp\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/133, 0x85}], 0x1, 0x4f, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$CDROM_CLEAR_OPTIONS(r2, 0x5321, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$sg(&(0x7f0000000040), 0x10, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdae, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x0, 0x3, 0xffffffff) r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000fff000/0x1000)=nil, 0x4000) get_mempolicy(0x0, 0x0, 0x7e, &(0x7f0000fff000/0x1000)=nil, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x700}}}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x2c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, @call={0x85, 0x0, 0x0, 0x7f}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', r7, 0x25, r0, 0x8, &(0x7f0000000300)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[r0, r1], &(0x7f0000000840)=[{0x3, 0x3, 0xb, 0xc}, {0x3, 0x2, 0x7, 0x8}, {0x4, 0x3, 0x1, 0xa}, {0x4, 0x2, 0xa, 0xa}, {0x4, 0x5, 0x2, 0x1}, {0x0, 0x1, 0x1, 0xc}, {0x3, 0x1, 0xd, 0x5}, {0x4, 0x4, 0x9, 0x7}], 0x10, 0x6349eb5a, @void, @value}, 0x94) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m22.348529076s ago: executing program 3 (id=739): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x94800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r2 = fsopen(&(0x7f0000000380)='udf\x00', 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0x57) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001e00), 0x2, 0x0) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r6) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4018, 0x2}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10801, 0x108) ftruncate(r8, 0x1) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) r11 = socket$can_j1939(0x1d, 0x2, 0x7) r12 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r12, &(0x7f0000000000)={0x1d, r10, 0x40000000, {0x1, 0xff, 0x3}, 0xff}, 0x18) dup(r7) sendmsg$can_j1939(r9, &(0x7f00000002c0)={&(0x7f0000000280)={0x1d, r10, 0xfffffffffffffffc, {0x0, 0x1ee, 0x3}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000100)='\x00', 0x1}, 0x1, 0x0, 0x0, 0x841}, 0x4400) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r5, 0xc1231000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x88c8) ioctl$CDROMVOLCTRL(r0, 0x31f, &(0x7f0000000140)={0xb0, 0x5, 0xa}) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x40010, r11, 0xeeeb5000) 2m22.347479634s ago: executing program 3 (id=741): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x9}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000040}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x9) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x160004ce) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000f6d68508b3cd50028191dddc741696a3495f2e8bd74a3f8f6fdaa512d32f5c9834ce2b89f2171306906cf33f7c18bec647d3b80ce86505d569e622f8ab9bddfaea709b47f923f5071ae1b8ec9f0a329efcad051c87ffb4828f778e557c487e8ffddbaa2f20bd1eacf24c9c851d38ea", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) 2m22.186785157s ago: executing program 3 (id=743): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@generic={0x71, 0x2, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0xee) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r7, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_virt_wifi\x00'}) sendto$packet(r5, &(0x7f00000001c0)="0b036800e0ff6400020047540064dec888a8", 0x12, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x8e59, 0xfffffffffffffffd, 0x3}) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000680)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@end]}}, @timestamp}}}}, 0x0) sendmsg$unix(r8, &(0x7f0000000540)={&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)="e903344fb4bd4c65557b78d383b2d591dc12752bd2c1207f9054fad0678b04ef5b58f794c83d3fbe09161ef10ab34ceac1e8bff8d08dad4c4de92002dd90235c22b9965b449afe2204dda7642e3bfdcc6d3ec0005b643ad211b660e7b0bca785d35cb1bc59864841cc32ebb5d9", 0x6d}, {&(0x7f0000000480)="17cd1e443c7667f5cc601278a7ccb303f15981dcd0d4dbda20bb2b7a6443bfe101ea3da40f4dc440fd01deda4c857e9954770a3620a68d012949d4d67b0d01a81d0a609544c625f21e235d39", 0x4c}], 0x2, 0x0, 0x0, 0x1}, 0x24004815) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="0f589fae3e16fbed95141aa2690cef8fa315a956683a85562f53e80f02214281baf17f879310d62f6e6107a8520379814ddedddc07a4935ddfd4bfe0f12a33eeb87588dc9cfef1656aeb0e37a2e41f3b72fc3d9e18e6600e661ea438d113f0cc0716fd909de245b660c4e403b591254769ce4bca571923b5cd587024f0e40d0865fce5c625604bc4bfebbd8331a963b260678e", @ANYBLOB="4629bdc2f5d181dcb98a814538cca8b6d5336d4c652ba0df59b9ae576b040f7f3ba836c9de5434cf9da439016d7578c3f454ed3f4ce393d023a775d0ffc587e00f0a5d208a3344e289dba446a749486ae28a07f989a6d5ba1268f0f94fe9caabfc14cae73826fa91217b53f060758bf70b05d8fd2a592ae9d3dfb30114bd63d0d8fd4ca14f2e288d904549fa34b8b05528fa30e122", @ANYRESDEC=0x0, @ANYRESDEC=r4, @ANYRES64=r3, @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0xc004) 2m22.025125452s ago: executing program 3 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361"]) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) chdir(0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0xfd) 2m21.992892576s ago: executing program 33 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361"]) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) chdir(0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0xfd) 2m10.239814168s ago: executing program 5 (id=929): mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='v7\x00', 0x6000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002c00)={0x51c, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @nested={0x4fd, 0x121, 0x0, 0x1, [@typed={0x14, 0x78, 0x0, 0x0, @ipv6=@empty}, @generic="65848cc3dae2c73e649b9bb81450f519c4ce17a903b273c7202090d9fbd5320a64015157caefafd62814431343702281e3f0937ee251d4bff2772439c29c3bde4e253fbe543516bcbe65a56fd715bd7cf9cab894e066c02758a51f327a6131d9", @generic="9666a15ef94a4cf14a2ba3f3fe9f61163216959b73902dce8ff3717596f74d45ebbc2a8f44591c9914151d23ad00da45a3f98ec0201cf043fc7a3e42802195b8ccaba262ac6be93b8ee425356c7042076a509784ea21a8d6e9c84da4b5481992a8e218eb41aaef03b4bd4b1a71978e27b113fd8e21c70c8085d24c3f03225287c92ec242fec4cf7831d8f0fe62d7d8f5011dd4bb69581b", @generic="24f5860f165e855fe3c6be9b6f682eac4b421783e1da58ff0d33e402581fa831312d5d037d8a1eb780738fe6254c556aff1a771ca681607c550d59d4158a95739cc256391f92b589d42f2e73c8b38a3f6fcfad67a9d764708ccdf2b9ddb3cd0057a7bf62bb63a60ef40aee84ac65bdf37f2bcf4a2a180fa6469719df8b7c03d365e731793974e803964be3fc48248e0e270696794a637b2f81e57747a12c", @nested={0x1a1, 0xce, 0x0, 0x1, [@typed={0x8, 0xc5, 0x0, 0x0, @str='(-/\x00'}, @typed={0x8, 0x132, 0x0, 0x0, @uid=r0}, @typed={0x8, 0x62, 0x0, 0x0, @pid=r1}, @generic="661863bb722d7394", @typed={0xaf, 0x79, 0x0, 0x0, @str='\x00e\x86\xad\xd5\xeb\xa2yQ\xfe\\Z\xcb\xf1\xeeZ{1\b\xe8\xec\xbd\x9c)@@\xc2\xe8\x02,m\x13#\x8f:\xe6\x19K\xc2\x12\xfd\xc3\xc5\xee\x90\a\x1a\x1d\xfb\x15\"\x14\xd6\x1b\x83\xbd\x91\xa7\xe1zG5\xae\xd6\x03\xde\xcd\xdc;sJ\xdfQ#ZB%\x84\xdaz)>\x19\x91\xfb\xda\xb6\xecoL^\x13\x81\xc1\xd0D\x05\x90t\xad\x9f\xc4z\xfa\x87\xa0\xfdt\xfdg\x81 \xe8\t\x19\x83\xccuQ=\xafA\x8d\x05\x97\xdd\x91\x13X]\xc7MK\x12\x92\x95Z\xa9\x88\xb2~\xde\xfa\x0f\x05U\xc1\x85\xa3\x15\x1f\xfd\x96J,O/Pg\xb5\x1b\xbd\xfe\x7f\xf1\t\xf6:r\xf2\xb2'}, @generic="4c1758d806cc3c6d425d417207efab7f4bfc0e9fc06d4a6fd346cd83c5bbcb0cc2e72b69b15312b3bee0bca013b9c568a67a584696979a4a759b14df8f56c982d884ffd8a8ea8603e08ad2d4504f2d671263b2908c176a65e2457db11be0a89d007e05aa20b7200ea3d88fb18dca05cce402502f8f991980c65410371d66ae8ca62b5f140b6221c1fcddc5509846c7e222bfcd9778e03b06b29c352773184b282ed5b9704c35821ce7307b9334d9bd20c62a9afa20dffa0c6cdbe8459e12d89c916a81ee3d", @typed={0x8, 0x7f, 0x0, 0x0, @str='-.9\x00'}]}, @generic="3e6a3ff94348f9b21a96402fa3d1ce9d249a07e0b332354e0a12f27b924a63d71e17c86c9047356aee5878090ff6238d5343e18dbe990ad0d42a366199156e2011a981dba60aa0e04e64640c05f73f226ea8bd31a66d9afb61414f0bb67f1845e240ce31968c31d7c2a6c9cb4fbc16d36725bf4a4ff278bdf590b4eb5bf010450e472de63de702957248950c", @typed={0x8, 0x9e, 0x0, 0x0, @u32=0x1000}, @nested={0x116, 0xcb, 0x0, 0x1, [@typed={0xe, 0xb9, 0x0, 0x0, @str='/dev/vcs#\x00'}, @typed={0xe, 0x11a, 0x0, 0x0, @str='/dev/vcs#\x00'}, @generic="b4c2402b6906c9060daac256faf76dfd921c78447e37f7818fba105bd0dfc8f7da19853380713676ad0c99e3b99f37c4ea84709d0bde9f486cf5bb6c4791b22865653b64870d86f8711b4c92458fbc925c2e491726a6eb73fbb087844a8c6d13935ecc9d631ec2be4d03bc2bcf936d7b263d551febad0f95fe4ac07d301d259fc1766340558058c3e5ef9555d187133979f7edc2ddbd0907c40c2baeef8caed3b35e1cb47d7e4aa1b5cf0b50f4d148adddae69095405a182758fbf76e812175b515cd23fa8b1a518f1794538ef6c8b8c84e1920de15c6efcd8300be63d2b6e03445ec9017686e229f82f", @typed={0x4, 0xc9}, @nested={0x4, 0xd0}, @generic]}]}]}, 0x51c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) recvfrom$ax25(r2, 0x0, 0x0, 0x40010011, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002180)) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[]) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000022c0), 0x2781, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = dup(r3) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) connect$inet6(r10, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r11, 0x29, 0xc8, 0x0, 0xc000000) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) write$P9_RGETLOCK(r12, &(0x7f0000000040)=ANY=[], 0xe6da) syz_open_dev$vcsn(&(0x7f0000002240), 0x4, 0x90400) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r13, 0x0, 0x8, &(0x7f0000000040)="e1", 0x1) getsockopt$inet_opts(r13, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000340)=0x10) 2m9.15983399s ago: executing program 5 (id=946): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000080)={0x9d8, r0, 0x700, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x17c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x6f, 0x3, "d0c6711f8927cea94342c35497d9ea49eefecdc29a6e83e77516960e730bce7b1e7224ecb6672510a2b2ab5b76c935673deb24866337b28a8b3e304d28c08fc6667e6fa03539385ae030a65764ab98872537030d60f7cf9c6fb7abd7aab6ac9d670cf0e3357b7179e1bdb8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1d, 0x3, "c49aca8e5c3a89b6cdb80662a2601a489ef712807d3c5f9f0d"}, @NL80211_FTM_RESP_ATTR_LCI={0xe0, 0x2, "336e82af948a47fc26668b09c92607cf33779f4c93f272dbf03d7f3a2f260c0d060c444126c122d651b6a47f362acafa8b083bf5a101ed0e463fe988dcc3eac298cb9fc5ee100fb44c856badc6e2a494e9123ebc89b485930959af8523fe61bec036a40ef6a8491a3a9b7f66fd69e4bb6df2a82a98626de62a225f5f4b98bbd1139a69b0fc07c80cbc7e7de387378537b3bfb79aafce6b0fd385fa96f647720b88e154ef8e240ed387b289bc37912826efa9c7ec61f62935631fddb64642b7fbca89c2edd4c8975108d2ee80a72bce4a2377b658b9cfa6f3d6f5f3e3"}]}, @NL80211_ATTR_BEACON_TAIL={0xbc, 0xf, [@dsss={0x3, 0x1, 0xb3}, @chsw_timing={0x68, 0x4, {0xfff, 0xf8c}}, @ibss={0x6, 0x2, 0x5}, @measure_req={0x26, 0x78, {0x4, 0x7, 0x4, "880d68f23caf865411a6d9e1d99a115170845cbf4219be030daa053a828493a95b9775e707183329e0b7b85afc2596a22e6275af62ff5ddb2a68f6c8c4adcce6378cb044a38b15b8c038f0c5a6f4abe7f9af93ba462ef11c3de04bc6b212ff570df798e7925df7dfd2414d8114d1f40513a94d015b"}}, @chsw_timing={0x68, 0x4, {0x8, 0x400}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x4f}, 0x4, 0x1, @device_a, 0x3592, 0x6, 0x9}}, @ibss={0x6, 0x2, 0x6}]}, @NL80211_ATTR_PROBE_RESP={0x6ce, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @mesh_chsw={0x76, 0x6, {0x6, 0x4, 0x19, 0x7}}, @mic={0x8c, 0x18, {0x33e, "70f6a2de961d", @long="1fd8eed89b728abdb10cc0052a6f459e"}}, @random={0x5, 0x12, "dd11b3c49261aef04a8999e97b3c0c65ab85"}, @channel_switch={0x25, 0x3, {0x1, 0xa, 0xf7}}]}, @NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@supported_rates, @dsss={0x3, 0x1, 0x30}, @rann={0x7e, 0x15, {{0x0, 0x13}, 0x0, 0x4, @broadcast, 0x7, 0x9, 0x2}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x46, 0x80, [@chsw_timing={0x68, 0x4, {0x930, 0x2}}, @challenge={0x10, 0x1, 0xc9}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0xf, 0x4, 0x401, 0xf}}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, {{}, 0xfe, 0x8, @broadcast, 0x200, @void, 0x2, 0xe3, @device_a, 0x9}}]}]}, 0x9d8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x84, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xe, 0x1, 0x800, 0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x5c, r1, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8000, 0x101, 0x8, 0x621f574c]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x20, 0x5]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0xce1b05b3f762c7f7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x154, 0x0, 0xc00, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x55}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x371}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x773}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51b88c7ffa7c1d6df5a5490a87ee9eba55402716c9"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x570c2ab8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r3 = syz_io_uring_complete(0x0) sendmsg$nl_route(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)=@ipv4_newnexthop={0x68, 0x68, 0x800, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x3}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5, 0x5, 0x4}}, @NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x40}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x30c6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7459}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xf}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7c}]}, @NHA_ID={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008045}, 0x40400c0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000011c0), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000001280)={&(0x7f0000001180), 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x38, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)=@ipv6_getanyicast={0x14, 0x3e, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x2800c880) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000013c0)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000001400)={[0x2, 0x3, 0x7, 0x9, 0x2, 0x5, 0x0, 0x200, 0x1, 0x1, 0x6, 0x8, 0x4, 0x76, 0x0, 0x4], 0xe6e51002, 0x44202}) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000002a40)=[{{&(0x7f00000014c0)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001600)=[{&(0x7f0000001500)="98c538916587c09073ca92f84a8748d2d2b6d7aa270bd9978ceb8e51683e9f266852b9f89cb8a9233128ae31cec25ad9eb22893c4a4f", 0x36}, {&(0x7f0000001540)="a46795fc329ae8", 0x7}, {&(0x7f0000001580)="591002b349489f33c6c8e8ceb9ef4faeb90f8fcccaf5401e9e02ea3877f905f096e060dba7e8ce56b20d718fdbee25f63e5a769d497fbf7e785102b985b3135bdc8503c9a0f5ad5254aff114a68d146b00f0ccf874ee95f2f9c0b935f6d54f29b340b85050cfe2884ec8acfb2445929213e8", 0x72}], 0x3}}, {{&(0x7f0000001640)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001680)="c0bd1cea", 0x4}, {&(0x7f00000016c0)="e79cd23222cdb72b1c15fc6c57b8f21293754648c4e04acff0cb5123d88804d335d042b37371b2cad20dc6041afe7abea2b4246eeeca897e47f0b642e164af498fcac391d38c38da764eb4e38c6af2422b14e6f2baf3a62f94e67a242d379bd383891423e3d02804b754acb9cf5655e1bad6fe1a09f9c7e6c538c6a08e7c0eeb011a4e2ac1e053e5d16cb60897f165c099656782b45d3d4769320c3f2e0bc6a7990aa7a992b93313908c20aec9de", 0xae}, {&(0x7f0000001780)="dd6ab27d2721bc8f3bc79fa96dfbe1930157e487c242a0ad2d67bdde2b05ec65dda8c3346c697a41e8d40d2abf9c99bbb0ff25432ebe4c49cb585b3eaa2a16de9c899fac18", 0x45}], 0x3, &(0x7f0000001840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}], 0x18}}, {{&(0x7f0000001880)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000029c0)=[{&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="ac8eba94320b40b8fb74b63c05e0f2b101e409f030dbc53ab1aa980c7e41a142cd4b135cd8f3fdfd97e05c447b1f5bd0c6cffd0b93d94e4ff2e40b300aa45a1b603e5d4a05ccb6334afc5f14351b5ed4f2c89dd1", 0x54}, {&(0x7f0000002940)="bc061388b2feba579221cc2517d79b500f7c66d29891a95894906496d2b8e3df60cd4b9e05478f971f7dcae0ea254d1dc94d65cfdbac12f224cda46c89deb6e9139dd956fc8b83c0f3db5e1d31f59531", 0x50}], 0x3, &(0x7f0000002a00)}}], 0x3, 0x10) r6 = syz_open_dev$ndb(&(0x7f0000002b00), 0x0, 0x200142) ioctl$NBD_DO_IT(r6, 0xab03) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002b80), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000002d00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0xd8, r7, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3b9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x3a}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) r8 = fsmount(r3, 0x0, 0x8) getsockname$packet(r8, &(0x7f0000002d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002d80)=0x14) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)={0x4c, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000844}, 0x800) getsockname$packet(r6, &(0x7f0000002f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002f40)=0x14) symlinkat(&(0x7f0000002f80)='./file0\x00', r3, &(0x7f0000002fc0)='./file0\x00') sendmsg$nl_route(r8, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000030c0)={&(0x7f0000003040)=@ipv6_deladdr={0x80, 0x15, 0x10, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x1c, 0xfe, r10}, [@IFA_FLAGS={0x8, 0x8, 0x183}, @IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0xd, 0x6d10, 0x7, 0x9}}, @IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_FLAGS={0x8, 0x8, 0x10}]}, 0x80}, 0x1, 0x0, 0x0, 0x8084}, 0x8000000) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x24, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x24}}, 0x24000000) 2m9.080438164s ago: executing program 5 (id=948): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x48100, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000480)={r3, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x19, "90737f0000fbffffffffffffff679495ffffeb"}) r5 = dup(r4) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x82f7, 0xe, "0000000000feff00"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000180)='net_prio.prioidx\x00', 0x0, 0x0) preadv2(r7, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) 2m8.995860101s ago: executing program 5 (id=952): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x40, 0xd, 0xeb, {0xeb, 0x1, "0bafade1f6545ea4f435634f70c1d96f7563766e6c3634c586f33b90c63abd2d9bef052a8316740f20a72a95abf2e7b8e020b192f131e4fd38ae8fa5b485dbc6c68b497250414821eb25856dc253aa6cb790f0c45d68990d41b437a67a917c16130a93a3a2941af7ef11965b8d5b9025f1692c98fceb475db0d59f1322158322c1a871ecc0e14ce68683299d39ec9a5a2aa4add396082f1e5f835a045698df1db129d657bf73af5c3a4d9c6219bfa50754e36397f253350963b7f78224298c2497b51c910cdb9151d81b6a9107a8d28589582687e47f8249d9aff079a33d5c1804eb01ef23857d2ab8"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x5, "7fff7612"}, @global=@item_012={0x1, 0x1, 0x1, '$'}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xb1, 0x1, {0x22, 0x774}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x0, 0x14, 0x33, "59e4bdabd53e599c444013f02232686e3f56b207288e02e3818177d592ebda7fdfb4f6cf121c234d98d482ea042dbc516eea60"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000002c0)={0x20, 0x1, 0xf2, "b18a01dbe63dfa12e0a5cec3b2c1787b4e9916bdf3fb1f51f85387f78afcf9cb8f34e2bdbc67ebf2a9c56546f0389aa9453f86993cdb6747b0c42622b5d3de348c2a80f399d4403a1f59e7545b677e06ed2b3a4cc2483d7fe17818ddbe19a1cbb516ccaf7a78b684fd64ef9e6f3508f1fe8a449ea0272337c66e943809af4bcb17beb0ca6f2de18c97af7e53c5a6b35634e65f57ba2b92f1b2c6d846335cfccf48f617b5f3b1b4f26e074bba93b48676ce9ef8c7a0b71513f760f4e980161600e8bdbbee0eef1d4ffebf347c6329dfc6c70e77f99aab090b87af6f9bb6c36a33a8a41aba8360ac70dd4bc7dd7496c8bfc5c3"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x12}}) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000480)={0x0, @reserved}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x8, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x700, 0x2, 0x7d}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/crypto\x00', 0x0, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x20000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000900), 0x585003, 0x0) (async) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000900), 0x585003, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0x1}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x0, 0x7, 0x7, 0x50, 0x10}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0x1, 0x7, 0xfffffffffffffffe, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2a, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a80)=[r4, r5, 0x1, r6, r7, r8, r9, r10, r11], &(0x7f0000000ac0)=[{0x2, 0x1, 0xa, 0x4}, {0x0, 0x4, 0x6, 0x8}, {0x3, 0x3, 0x9, 0x4}, {0x1, 0x1, 0x3, 0xc}, {0x4, 0x3, 0xf, 0x2}], 0x10, 0xfffffa8a, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x0, 0x7, 0x7, 0x50, 0x10}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0x1, 0x7, 0xfffffffffffffffe, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2a, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a80)=[r4, r5, 0x1, r6, r7, r8, r9, r10, r11], &(0x7f0000000ac0)=[{0x2, 0x1, 0xa, 0x4}, {0x0, 0x4, 0x6, 0x8}, {0x3, 0x3, 0x9, 0x4}, {0x1, 0x1, 0x3, 0xc}, {0x4, 0x3, 0xf, 0x2}], 0x10, 0xfffffa8a, @void, @value}, 0x94) syncfs(r4) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r12, 0x0, 0x21010, r7, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000c00)={r10}, 0xc) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000c00)={r10}, 0xc) lsetxattr$trusted_overlay_opaque(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), &(0x7f0000000cc0), 0x2, 0x2) syz_io_uring_setup(0x6e0, &(0x7f0000000d00)={0x0, 0xa669, 0x20, 0x3, 0x170, 0x0, r11}, &(0x7f0000000d80), &(0x7f0000000dc0)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000e00), 0x1, 0x0) (async) r13 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000e00), 0x1, 0x0) r14 = getpid() stat(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)) (async) stat(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000002080)=[{{&(0x7f0000000e40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="77f63d87bc5d8743b084f8142f98a444079b5d905da65a5d7f53a9602d8c8b84c39913d9afc4bdda59aaa8618588a8e3ec7cbccf3cd921b224e42f42c1bccab136d8a37ab06f8f", 0x47}], 0x2, &(0x7f0000002040)=[@cred={{0x1c, 0x1, 0x2, {r14, 0x0, r15}}}], 0x20}}], 0x1, 0x4000000) io_uring_enter(r13, 0x534a, 0x582c, 0x78, &(0x7f00000020c0)={[0x2d]}, 0x8) connect$can_bcm(r5, &(0x7f0000002100), 0x10) (async) connect$can_bcm(r5, &(0x7f0000002100), 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002140), r5) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000002140), r5) sendfile(0xffffffffffffffff, r1, 0x0, 0x5) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000002180), &(0x7f00000021c0), 0x2, 0x2) (async) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000002180), &(0x7f00000021c0), 0x2, 0x2) 2m8.385760096s ago: executing program 5 (id=971): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x30314752, 0x0, 0x0, 0x0, 0x0, 0x2}}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x81) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x101, 0x8a}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 2m8.322635896s ago: executing program 5 (id=973): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="38de0000100013070000000000000000fe880000000000000000000000000101ff010000000000000000000800000001000000004e2340000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000003200000000000000000000000000ffffac141431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000a0004000000000000000000480002007863686163686132302d61726d00"/240], 0x138}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l'], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, &(0x7f0000000500)="bd57d6b87bc17845c69e11ae1644b9bd52b29b1240f4f3680bec2bd5381cb9fd88f5a7efd298d03fec7f9609883253e080a1c736356d9952c6d360b2092802d7e19fefef05cb3f21c0b74a565c57fd1da33d9c4750b3d98b8a240a1065b14bb1fbcf6fcdf992e6899c4ea44f93e0", 0x6e) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, &(0x7f0000000400)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "20e48560d99f00", 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="7472616e733d66642c72665ab6646e", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',k']) 1m52.280683298s ago: executing program 34 (id=973): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="38de0000100013070000000000000000fe880000000000000000000000000101ff010000000000000000000800000001000000004e2340000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000003200000000000000000000000000ffffac141431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000a0004000000000000000000480002007863686163686132302d61726d00"/240], 0x138}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l'], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, &(0x7f0000000500)="bd57d6b87bc17845c69e11ae1644b9bd52b29b1240f4f3680bec2bd5381cb9fd88f5a7efd298d03fec7f9609883253e080a1c736356d9952c6d360b2092802d7e19fefef05cb3f21c0b74a565c57fd1da33d9c4750b3d98b8a240a1065b14bb1fbcf6fcdf992e6899c4ea44f93e0", 0x6e) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, &(0x7f0000000400)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "20e48560d99f00", 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c00054000000000000000001400000010000100"/159], 0xa0}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="7472616e733d66642c72665ab6646e", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',k']) 1m4.934573555s ago: executing program 6 (id=1924): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) stat(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}]}) r0 = socket$kcm(0x10, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="2e00000011008188040f80ec19acbc0437177f3d1300000000000e000a09a60c979c91f349fc0009000000000000", 0x2e}], 0x1}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x60000, 0x50) 1m4.931767485s ago: executing program 6 (id=1926): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x30843) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3, 0x0, 0x0, 0x11}]}, {0x0, [0x0, 0x0, 0x30]}}, 0x0, 0x29, 0x0, 0x4, 0x0, 0x0, @void, @value}, 0x28) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r0, 0x2000) 1m4.862598053s ago: executing program 6 (id=1927): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xfe}, @raw32}], 0x1c) r2 = socket(0x11, 0x80a, 0x0) socket(0x3, 0x5, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000003400128009000100626f6e64000000002400028005001600000000000500110001000000080007"], 0x54}}, 0x0) 1m4.862352955s ago: executing program 6 (id=1928): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x161090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[], 0x200002e6) (async) fcntl$setpipe(r0, 0x407, 0x7000000) fcntl$setpipe(r0, 0x407, 0x100000) (async) mknodat$null(r0, &(0x7f0000000080)='./file0/../file0\x00', 0x200, 0x103) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m4.677646204s ago: executing program 6 (id=1929): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x220) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6) rename(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001f80)='./bus\x00') r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x44) 1m4.316629315s ago: executing program 6 (id=1932): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, 0x0, 0x8, 0x30bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x40000004, 0x0, 0x4, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x1c64, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000020000800) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000002100)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) write$char_usb(r4, &(0x7f0000000000)="46b2cf30e53a08ba78c37ce1430b961b4677e9f9530562b4f2f799165187d3fabd029f98a8b622ce2ec2f475cf94ae0bf5b9692adb12db028dff962612109aa31050f8fe886fb563962a4f9857cc77e5bf1081820a66b1da7a3a139bdc6318e7cf8591fa6fdb56f85b97037bf6c7c7892e03587e17382ff87b9f97aa05be63f110c8af84631d419564075d6ea6c36d4308a0d4d81d1f00908515dbb86d7d62b6692c740e182354652d03ff1eed45d9525fbbe2351962c2776200698d9d781ae476cf3d5cef273e163ca752e53fcfd0ed042450a3611f153032e1614d387fffae299cd432a941da23", 0xe8) bind$tipc(r0, 0x0, 0x0) 1m4.097860454s ago: executing program 35 (id=1932): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, 0x0, 0x8, 0x30bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x40000004, 0x0, 0x4, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x1c64, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000020000800) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000002100)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29caafb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73db3d9ac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df2e86cd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb287faf64bb7a3cfe3c28eb7c2335a3af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a7ef759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57e07105d1fa1efd44529b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3030000000000000091da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f60861ba308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4ec70c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485dddaa7c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca15111f0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3c86761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e8575c69401ea75d14e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0781d2d10b96519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4bae802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea5f8e81f61d5700005a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d9361704000000f9abab2d6935d54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343fa1fbbbeecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) write$char_usb(r4, &(0x7f0000000000)="46b2cf30e53a08ba78c37ce1430b961b4677e9f9530562b4f2f799165187d3fabd029f98a8b622ce2ec2f475cf94ae0bf5b9692adb12db028dff962612109aa31050f8fe886fb563962a4f9857cc77e5bf1081820a66b1da7a3a139bdc6318e7cf8591fa6fdb56f85b97037bf6c7c7892e03587e17382ff87b9f97aa05be63f110c8af84631d419564075d6ea6c36d4308a0d4d81d1f00908515dbb86d7d62b6692c740e182354652d03ff1eed45d9525fbbe2351962c2776200698d9d781ae476cf3d5cef273e163ca752e53fcfd0ed042450a3611f153032e1614d387fffae299cd432a941da23", 0xe8) bind$tipc(r0, 0x0, 0x0) 1m1.077378766s ago: executing program 0 (id=1817): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000140)={0x8, r1}) 57.809079225s ago: executing program 0 (id=1817): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000140)={0x8, r1}) 48.032806167s ago: executing program 0 (id=1817): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000140)={0x8, r1}) 41.160582273s ago: executing program 7 (id=1933): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x44}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1000}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2d6d5c008164e674}, 0x5) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}]}], {0x14, 0x10}}, 0x88}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x43, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x1, 0xa, 0x1, 0x7, 0x10, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xb, 0x6, 0x0, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffc0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f00000008c0)=""/4096, 0x41000, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x4, 0x3, 0x8, 0x4}, {0x1, 0x1, 0x2, 0x1}], 0x10, 0x80000001, @void, @value}, 0x90) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000300)='jbd2_shrink_checkpoint_list\x00', r6}, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x6}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x41}, 0x80) lsm_get_self_attr(0xf, 0x0, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f00000019c0)={0x1, 0x5, 0x9}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002340)={'vxcan1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r8, @ANYBLOB="da"], 0x20}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104005540000000000000480000", @ANYRES32=r8, @ANYBLOB='\v'], 0x20}}, 0x0) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 39.770444205s ago: executing program 7 (id=1933): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x44}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1000}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2d6d5c008164e674}, 0x5) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}]}], {0x14, 0x10}}, 0x88}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x43, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x1, 0xa, 0x1, 0x7, 0x10, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xb, 0x6, 0x0, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffc0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f00000008c0)=""/4096, 0x41000, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x4, 0x3, 0x8, 0x4}, {0x1, 0x1, 0x2, 0x1}], 0x10, 0x80000001, @void, @value}, 0x90) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000300)='jbd2_shrink_checkpoint_list\x00', r6}, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x6}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x41}, 0x80) lsm_get_self_attr(0xf, 0x0, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f00000019c0)={0x1, 0x5, 0x9}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002340)={'vxcan1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r8, @ANYBLOB="da"], 0x20}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104005540000000000000480000", @ANYRES32=r8, @ANYBLOB='\v'], 0x20}}, 0x0) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 38.326499915s ago: executing program 7 (id=1933): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x44}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1000}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2d6d5c008164e674}, 0x5) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}]}], {0x14, 0x10}}, 0x88}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x43, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x1, 0xa, 0x1, 0x7, 0x10, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xb, 0x6, 0x0, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffc0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f00000008c0)=""/4096, 0x41000, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x4, 0x3, 0x8, 0x4}, {0x1, 0x1, 0x2, 0x1}], 0x10, 0x80000001, @void, @value}, 0x90) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000300)='jbd2_shrink_checkpoint_list\x00', r6}, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x6}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x41}, 0x80) lsm_get_self_attr(0xf, 0x0, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f00000019c0)={0x1, 0x5, 0x9}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002340)={'vxcan1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r8, @ANYBLOB="da"], 0x20}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104005540000000000000480000", @ANYRES32=r8, @ANYBLOB='\v'], 0x20}}, 0x0) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 30.038146916s ago: executing program 0 (id=1817): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000140)={0x8, r1}) 28.030008367s ago: executing program 7 (id=1933): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x44}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1000}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2d6d5c008164e674}, 0x5) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}]}], {0x14, 0x10}}, 0x88}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x43, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x1, 0xa, 0x1, 0x7, 0x10, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xb, 0x6, 0x0, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffc0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f00000008c0)=""/4096, 0x41000, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x4, 0x3, 0x8, 0x4}, {0x1, 0x1, 0x2, 0x1}], 0x10, 0x80000001, @void, @value}, 0x90) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000300)='jbd2_shrink_checkpoint_list\x00', r6}, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x6}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x41}, 0x80) lsm_get_self_attr(0xf, 0x0, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f00000019c0)={0x1, 0x5, 0x9}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002340)={'vxcan1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r8, @ANYBLOB="da"], 0x20}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104005540000000000000480000", @ANYRES32=r8, @ANYBLOB='\v'], 0x20}}, 0x0) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 26.180068796s ago: executing program 7 (id=1933): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x44}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1000}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2d6d5c008164e674}, 0x5) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}]}], {0x14, 0x10}}, 0x88}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x43, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x1, 0xa, 0x1, 0x7, 0x10, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xb, 0x6, 0x0, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffc0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f00000008c0)=""/4096, 0x41000, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x4, 0x3, 0x8, 0x4}, {0x1, 0x1, 0x2, 0x1}], 0x10, 0x80000001, @void, @value}, 0x90) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000300)='jbd2_shrink_checkpoint_list\x00', r6}, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x6}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x41}, 0x80) lsm_get_self_attr(0xf, 0x0, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f00000019c0)={0x1, 0x5, 0x9}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002340)={'vxcan1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r8, @ANYBLOB="da"], 0x20}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104005540000000000000480000", @ANYRES32=r8, @ANYBLOB='\v'], 0x20}}, 0x0) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 17.315559988s ago: executing program 0 (id=1817): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000140)={0x8, r1}) 14.451132737s ago: executing program 7 (id=1933): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x44}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, 0x0, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1000}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2d6d5c008164e674}, 0x5) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}]}], {0x14, 0x10}}, 0x88}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x43, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x28}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x1, 0xa, 0x1, 0x7, 0x10, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xb, 0x6, 0x0, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffc0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f00000008c0)=""/4096, 0x41000, 0x69, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x4, 0x3, 0x8, 0x4}, {0x1, 0x1, 0x2, 0x1}], 0x10, 0x80000001, @void, @value}, 0x90) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000300)='jbd2_shrink_checkpoint_list\x00', r6}, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x6}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x41}, 0x80) lsm_get_self_attr(0xf, 0x0, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f00000019c0)={0x1, 0x5, 0x9}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002340)={'vxcan1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r8, @ANYBLOB="da"], 0x20}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000104005540000000000000480000", @ANYRES32=r8, @ANYBLOB='\v'], 0x20}}, 0x0) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0xd}]}, 0x18}], 0x1}, 0x0) 3.911721217s ago: executing program 0 (id=1817): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000140)={0x8, r1}) 2.922384524s ago: executing program 4 (id=2277): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000bc0)=@urb_type_iso={0x0, {0x1, 0x1}, 0x4, 0xe7, 0x0, 0x0, 0x2, 0x3, 0x2, 0x4, 0x5, 0x0, [{0x5, 0x1, 0x7fffffff}, {0x9, 0x5}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009c9abc0825105f0029fe0102030109021200caa700000009"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000002780)={@null, 0x9, 'dummy0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @random}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="780100003c000701fcffffff00000003047c000004003680600101"], 0x178}, 0x1, 0x0, 0x0, 0x48840}, 0xc000) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fd8c2c90b4"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000005) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x1c, &(0x7f0000000040)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.192351358s ago: executing program 4 (id=2283): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r3 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000180)="1219fa96af5d8f4ad8b532c10535bd4de87d771178368c553f1db9aaaee59076a74b6fbf8e8a6b075180a4d2125d19653530574b76af9372288ac23871fbb3fc21df519539a3e5384be27492c6b1528553fa8d6769b0c9dbb1deed6ef9abb9503e", 0x61) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0x4, 0x518223cd6bfb214c}, {0x8}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="2e00000011008188040f80ec19acbc0437177f3d1300000000000e000a09a60c979c91f349fc0009000000000000", 0x2e}], 0x1}, 0x0) 1.028112473s ago: executing program 2 (id=2284): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000100)=@deltfilter={0x114, 0x2d, 0x21, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0xffe0, 0x1}, {0x1, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xc0}}, @TCA_RATE={0x6, 0x5, {0xea, 0x4}}, @filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0xd4, 0x5, {0x7, 0x8, 0x6, 0x8, 0xb47, 0x3, 0x7, 0x40, [{0x7fff, 0x10001, 0x2, 0x6}, {0x1, 0x7, 0xeae, 0x8}, {0x5, 0x7f, 0xfffffffa, 0x8000}, {0x8, 0x23e, 0x0, 0x400}, {0x2, 0x9, 0xd}, {0xfffffffc, 0xb48b, 0x10, 0xfffffff9}, {0xffffcaef, 0x4, 0xfffffffe}, {0x7d, 0xffffffff, 0x8, 0x8}, {0x8, 0x4, 0x0, 0x5e3}, {0x1, 0x2, 0x9, 0x6}, {0xac, 0x6, 0x1, 0x6}, {0xf4d7, 0x1, 0xb7, 0xfff}]}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0xc800) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 64) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (rerun: 64) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)='c*', 0x2}], 0x1, 0x0, 0x0, 0x4090}, 0x0) (async, rerun: 32) read$alg(r1, &(0x7f0000003780)=""/4096, 0x1000) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r2, &(0x7f0000000340)=0x4) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async, rerun: 32) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (rerun: 32) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) (async) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000480), 0x1, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) recvmmsg(r0, &(0x7f0000007680)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000008c0)=""/233, 0xe9}, {&(0x7f00000009c0)=""/165, 0xa5}, {&(0x7f0000000a80)=""/208, 0xd0}, {&(0x7f0000000b80)=""/184, 0xb8}], 0x4}, 0x6c3}], 0x1, 0x40000100, 0x0) (rerun: 32) 792.126562ms ago: executing program 2 (id=2285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000000)='jffs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a80)={'dummy0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000011c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_TIOCOUTQ(r6, 0x5411, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x10) 704.590176ms ago: executing program 4 (id=2286): openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="1b0000001e005f0214f6fffffffffff80700"/27, 0x1b) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000700)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0xd4, 0x0, 0x0, 0x3, 0x18, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9483dda1af1ea80000000000000000000000deff00108bb932140000000000000000000800", "2809e8dbe108100000004ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600040061ac1a00", "90be8b1c55f96400", [0x7fc, 0xfffffffffffffffd]}}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000840)={0x0, 0x0}) r6 = epoll_create1(0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) unlinkat(r4, &(0x7f0000000040)='./cgroup/file0\x00', 0x200) close_range(r0, 0xffffffffffffffff, 0x0) 555.748636ms ago: executing program 2 (id=2287): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r0, &(0x7f0000000300)=""/154, 0x9a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="5e86c0b1a7b82799", 0x8}, {&(0x7f0000002640)="8913e5ca447649090a", 0x9}], 0x2, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000003640)=""/4096, 0x1000}], 0x2}}], 0x1, 0x41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x24, 0x64, 0xf31, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2, 0xf}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r5) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) 151.572502ms ago: executing program 2 (id=2288): r0 = getpgid(0xffffffffffffffff) capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0x8, 0x2, 0x7, 0x9, 0xff, 0x3}) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) pidfd_send_signal(r1, 0x3a, &(0x7f00000000c0)={0x21, 0xffffffff, 0xa023}, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000180)={{0x8365687, 0x8000}, 0x1}, 0x10) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = syz_pidfd_open(r0, 0x0) process_mrelease(r4, 0x0) ftruncate(r1, 0x8) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ftruncate(r5, 0x0) memfd_create(&(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000280)=0x9) sendto$ax25(r2, &(0x7f00000002c0)="148eefadc64490112e95deff0e736865bbd11af8ac2bb16fedc16a3f8750d1a142925fbe9bab0c014436269d6e072b9d78475f", 0x33, 0x40000, &(0x7f0000000300)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000380), 0xc0a40, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x2, 0x4}, {0x1ff, 0x5}}}}, 0x11) splice(r6, &(0x7f0000000400)=0x7, r5, &(0x7f0000000440)=0xb, 0x9, 0x4) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x88, 0xc8, 0x6, 0x5}}}, 0x9) r7 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000004c0)='/selinux/enforce\x00', 0x0, r3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6f}, @hci_ev_le_advertising_info={{}, {0x4, [{0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, "b2", 0xac}, {0x3, 0x0, @none, 0xa, "0a3c3c87dd1d29e432ae", 0x5b}, {0x0, 0x1, @any, 0x1e, "308a03d1b4dc06d5b3663286b99606d9a78daf0be2eddbcd4f321f6e8223", 0x2}, {0x4, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1c, "04709aad94891ca6094b5a230609c50f368e5892946157cca04193f1", 0x4}]}}}}, 0x72) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f00000005c0)=r0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000600), 0x22ca00, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r5) sendmsg$TIPC_NL_KEY_FLUSH(r8, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x174, r9, 0x25, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf2de}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdaba}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8854}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x50d8eb7e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8533}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f00000008c0)) 151.270381ms ago: executing program 4 (id=2289): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r2, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@allocspi={0x1dc, 0x16, 0x411, 0x0, 0x0, {{{@in6=@private2, @in=@private}, {@in6=@private1, 0x0, 0x33}, @in=@empty, {}, {}, {}, 0x8000000, 0x0, 0x2}, 0x0, 0xfdffff00}, [@sa={0xe4, 0x6, {{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x1, 0x4e20, 0x8, 0x2, 0x20, 0xa0}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0xcd}, @in6=@mcast2, {0x4, 0x2, 0x6, 0x2, 0x7, 0x4, 0xa, 0xeb}, {0x8001, 0xc, 0x4, 0x9}, {0x5, 0x3, 0xd15}, 0x70bd2c, 0x3505, 0xa, 0x0, 0x1, 0x2}}]}, 0x1dc}}, 0x0) 6.876391ms ago: executing program 2 (id=2290): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5332, &(0x7f0000000400)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000540)={0x0, 0x3, {0x1, 0x2, 0x1, 0x2, 0x6}, 0x7}) (async) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) close(r3) (async) fsopen(&(0x7f0000000080)='nfs\x00', 0x1) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) 4.016335ms ago: executing program 2 (id=2291): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1b}, 0x60) getpeername$packet(r1, 0x0, &(0x7f0000000400)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) close_range(r2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x220) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e21, 0x9, @mcast1, 0x3ff}}, 0x0, 0x0, 0x2b, 0x0, "3a941bb4fcecbe76abff8e466a82652d06a2492005f09a7efaceef706f0885d482018fb1bdc8cdfbb52983d839808319c282eef178b3d226cede7fbb38143c26001e3c89a29b729cd60961f7c496382d"}, 0xd8) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r4, 0x0) creat(0x0, 0x6) rename(0x0, 0x0) r7 = dup3(r6, r4, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x44) 513.325µs ago: executing program 4 (id=2292): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x58}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x400d, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 32) 0s ago: executing program 4 (id=2293): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10f0c3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x13c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000002300)={0xdddd0000, 0xc000}) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000012c0)={{r1}, "ca2781dcc640c4e1d16eae336a5fd6ec39ce50e2d6a6b1ded6863276f83ce72432cda4e2944013133aee5ace233eeab5f895f3cc44f4255bd23fae9da8042508a2a93f3df82443d8ac71221ea93d13bc63cecdf976e146c522635a6de987b6ee5e85b9ad992c5449e9f707d03c66a77d4003a500b0a66f4fc7a570cc17332eed8f1a5cf3ff2fa6026c22f5c4abf1daf94f9fe9f9898020ab76f67f575aaaa56bfce0347730bc6c7b69ae869c4156b9eb188526e3dfe8e6129104306153687d07e93919e56f2a52a387ef243d43ec154c259f9ba2d87665490d4dbae3ea03756645ec8a0c171f566c5919278580119e77affc6ae481368d290a6c407df07814eb546d6f602e9ff62ba8d8555983bbb1620e9dbc4fbe5525516bed0dc51530b706bfacfe9222757fe1d8bb95e787903ade29025883a3343635061edea28ad8260a175cf87313a6a5d987dc809cccc3f06e466ca6efffac9870880f18eb7f1b48ab11bf8c6df6ad3863b89b1e5dd7947c2b6fe88a621b531d53382722befab36b1710af147a32e92666e9b379dccb6047f52ab65c8b4e7eb67eabd5a8e5e85bc9d7be6b1e931aae0b3a5d3bff332354e8ddd4498ce80fc8e6d63232197a2b1a4f18d3b30ee7b85c1f162fa06a2a025fce1a509e7a6c16925d94f98d218082e10dd7060c7a0b9e3fd5e81234d727598f99545be3a92d369c39b25854912599cbd7a041ccbc487e81481d76654a7e6fb58bf7080ea5406efe8594008daaa44de389cab4b10a2214b7ed93d9ffbc05e2ea0362408f974431d89e3e0e3765e4b6ad53c841b241de80541595545da793bac4d321dc8efece847e9053244e2fea2e00e6bb96c8496d2fc38d69de3642834b5607817a62a16314a78b0fe9eb111699bfb8aef913cb1ea32e66574293f645fde56963ac037b586f5845f9a6985022e1f169e99e6af355b0925663efcdf35123fc172da68c65957460742d9eb8a8e8bbda4246628df625146411cfcd3a0255e0d2978f1b78b3be8e27ace6bca06c815d314d5d34ad917a9bbd95c9b6ef52cd715cda5c77f005038cbeeb4bdf928c31d2fefb9535905bd9e9a317a360def1d27b52b6f02568af9b316593d922a6c69de6edbc753022f4156ac1a20d8425cbed916330ae6a5054e3997900fae194e2a7085750484eca9cae638745f75736bde6f5552403c4ac96c2150d7d200295db970bceaf278e4cef2d6d7baa392c7aa8b3a5e062f458521708c25514f957ecfc58b3035cc62e79f4c4d9948963ca7fd298a7d49de2b051976e52d9646c762035801e23ef80c0a4778eff1431ccd527341ce5d25fb0564559f3014802de7208b9736d6ca829ec33fa5b42acc42cc9bc15807c3706b12eecf0127832b74af7eff9fc094be9a73f2ff3e6a8b58e9699367c38e2a42677149138dff8513c409e5ed53a283b3499c895831fb297f94987dec5af85badbcfdec1786ba2d0794ad57a581ceccb6a89a4334f67f8507cc3798cd0c9fdb4070d14aa8e0aa7c7569c9ba5a54dcf9e3a36bbe55bf2236f62132fb8bc3c37a1acac2cf8f8d34b9d3a9d4ce85b56b1ccf565d081f415435d2bf3854d134a4c97c5b836348c5d2bf30fabc7d61ff5962eab17a663752cc0b0e9eef813f1df42b6659c56c5bd269c77d2979b2f638946fa9cdf94f13017c2686fb9ca1db3ef44f144cc0fbe72fb0d8f68561b0411631dcc8df578a0b289b68fb2e115b58c05c974ee228b8e960e02cdbcad18dad3af3f35e5ffc5fa0a9340df8afadded35f6e172af96abbb88623fedae342eea585e294b8ec5e207e6e9724fb52c0e92b0f9374068da252d2af78026c4980130c7818ac8003d5cd5e78dd0b3a04784d8cf38ee845b850257f2dd8fa4363863e60e2efa4a123cbaa52429c83c910c8bee7217a9aafbb127c0e8e7b10eba42a5bbea8e3a3237e23c88d2e27762409b7c3dbbd7a867bd1acd7f1d257bd6374d9a4cebf938090cf6da2a49f61fce0193d092c4b058c6dd1567fa460ea6c0abca83dbbbfa3693ffb467f37420ade26f2ace581659de6afe608b2bb345244089724ea5b5bfbef419d319feebe077b8c994d1c3b7b64380c0e64890a875dfcb8809cd120d3f08263b1c9c80526fa38b31862cea737a83dd1796505d685d6da54c001b136e5319d1f36f3a224a877770ba845b63073d3089fbe50b3bfbe831752d2734c7051d65df69550e1f896ca444538e5417b044b8907a2f2a4de760bf88fd97377dd5d984d82c9ab5f63e9a921d3ad06ee01ff0d321c226cef3851d7b047d306b60289a53de43c347aae09b7eaa5742216b6b7048160116a4b4f374b3f1ac1615d45aa8a212f1614e1de71576f799b0da6b15e8ae401721a16835f1be756a9d3976df944e93fd98fac2ed697d09d4da834017f29ce33f2bac60c7bfbee87fbc1229aec725d3d0cee18040f7a350330ebf62f0025684ac5008a55c17d48663906bf0b94ee5ee976749bebc6825c8ba801dbff150f66dc392e259a6eee77523ccb69074b9751fbcab8780742bc6dd5e171ecf02b2455e9e032dad1e5717dfc7d6886cc62409be7f7486bec4b277e45643ddc1cdcf925302f5e3a42e8b3a61f26b6828c6ef799e8f402935e128404982db856c74b74c336ed7553e587d88415269bbc73e483c62e7a42eb5ddf86c30308bc21c5960dbbbb968f171a261c143435972e8ecf63849545eec8b42c328533831eee50d492cfd98f3b940fa76baac30fc97e99a1033c17cd1c6c592fd2e4f82f58bac8e893e49452459e3aa9f78384b7a966dce5124d4c57bb37e423e21fe83fbface00572fe2ee9e4dfea6bbcdda9dce5bab5c280b637a877a529c7ce5d51a33222fa01214c204fe6290cd6229d1933d5bd8b928e3f5212a86567a54d057a0f124cce95323747f48d73bc6996b4f4fadbcd38ec1a75f32b701198d960fe0739899402309a5caa4c8042e33a37dffee2456ea01d5f5ce709e763514d1176be71f56dba349cd9034df9d91924ece8c4a9deef3c08d8940a2a9faa0c5d0ee42c5aeccc2046fd23848f2df299d0f6d9a586553c83abe404410c7887ade47a615d19870232ca586b3787eabd4eb024b26eb6fafc4be912158984deaf7da8d94f47d9edcb6da6e32f6e74bc54ce20d02ab80ee55b447e167810d8cce397e284ad07b6ce502dd176726ea6930a7f2f62fce1499d05476a36a21443cbb35141cb3678b783a71940a6822841cf0b0445bf14f7253aa02c3efa5125bffc14ffa4a6bfeab167d72ca560b2221ce8b4d16383c5013b21bd3930f27f44361c8183269e99f5e0f0fadd6e44554af3b5d5e30611c7271df89528f08f83c32ed86c197586c38800be4473bf743b86052f81c24fb473b389dafcb941969893cbc6012bd592c2da4686cf1a606ec2743d05619f7ddafb5184e1b93e70e2d52adceb0a4db15f3c4dd36272098cc12433af46bb70618a898813ac03612a64316f4a2b38dfc2c4ccd0170dc237b0bc49030ee8c427562cee65e38651bff16d0199a1600a2444f3e3337420aae14229d20e9fffe719a406c8d29ed55d2f81661bc84d7f4736b1b4968ff037edd9da2a10215fd7db6abcec9e3642262d481c7cce5f44ae182ad72aa7444fdff388b0239eb36b5e26bef7283b77842844cc4ef2ad09dd44cce8c3736c04c0d801b2bc3f21593915f6ed40043876eb9ba6cd5e247c0db2a8dfada153737a6930e2965a4cbfd3b947e5323c129ff76dbe39e6f1eed65e3e7a97270f453e72c5c69991eb88de8d213f726ab28a87bda603cfab24d651fdf45eae4af07be234eb28e3e9d8cd9d11ab1fde3475915e1e8342128f68d9b82e2b02980891d848fb8d7156480e03678f6913346dccbb8966bf0639db1044b67392a8e521363a594952bfb6a8ad14f180c7a409eb1b1e997988b0b446d5467aee77279dcb840553e259a1081777ecad93a30abe075b64134d8aec73d6ebffb3950fff457443fc3468241d93c42b3beb430ba97c490af1e2b629ab1461af383467805ee61943943fe235d4461642c151439ce7c3fc4bc064b591c62f6bf95e436524fc6738a8767ce00a82a4e773e05cbdccbdad155cb65a98a5196d2190ab627fcfce4789e8fbfd515f44eaef47b400f336e34bfabad45669a4730fda845add14a9a2c298f95c8068bea0e12def8a1155a3ca31b46cc7a2f02d7051e4795c90bbfa172943cb39295edcc7b5c203a46fcd5dacd4d7cd058bc2d68a2aa7ee96a733456a3f19f08f85dffd7e109a39d2c8e389044862fc219bee2b0bee379b823fce6bc1f1cb3a575c6cdbfaca3108097a1a2532980f561d9d778e5d12327bb94be7beebda80cc18442a4b5d14248334f2b28dc4269ba1326217fe85cd85313cd59ca315ddb14cee2556d6c49c668b8146d46777789a100c66cec78303c78c5e899ec2e41e75a0d25054ed7faff996098f933cf057142536acbf1627cac164323f916be4e88440040a9a78a8921d452f6eddcde67d3eb224737189940139e1e4bdee4803cc1f7e26d92741b635bc09a5b4062a909002ad31c36c04556e3f426b87c3fe8377d317d0321c311016ac2129205a03ef5965566b30871d16aeb7a0da02ae37e4d3d42cfb885199601c1630cd23c872b7c4f194883d3be3cd1945609bd0cd32374f38eede6677071ef5b6f538a3eaee3a06676c9865efaeee8a331ac037952ccd3b29d79f191ae8e4a51035e338b50af349973c558f03308528247949b8856b62e55cd60a7bc4c7a52e7aaa22bd9d30bcf0f8dfd657be179b0b61bd066fcdfbf542fcaf73eeb07fdfaa8bb439f23ca970fb69e9c42fdb3161568be9499e8f827274ab1059aec0cca9ebf60d4f754b4ad83de37622ba24359d1a41558996ef2cb3ffc0c2e216a955cfba53fb33385ac60c0017dfd2dc7afd61222f1a5d1ae8f281d938791a11ddeea94ce22faf294481ab98c4996278e7259e41a7578398f0184b69326153cc8fcc07f5f66bb1cd399183ef8eb883553cd4993a90711dd1cd6b3550ce4e14f0fbdcc4fb08cf81e1749773ebac0081de83f768f36f1395e4adf2178dd1a085f732b764a08dd78a8d85420194f83f6361ef95139c83b6ed168e1f3a0d4a26b2258c71412f5207422d4189a3d5e18e61e896c0b5dcca0ce9f1296f22783b402c4323b8d1cc137b372094f09404991a3ceb7d1d820226350011a11883f1b7823dee7b285585d9c0ec0c1c53b91e15ed82719d469a2f1d22d2ec285118997ad1ab8990f8d203a5c29c5dfe56954e1fcd39a0de3c599746a284d1fb4ee471b0ea2037c9fa9d6ab82899f047e959960e7f15d937f5b97aa1145f3085396a2fe8c8940cf18fc7ab96d6b65166d6958a1b66d4c55623dd31d7db2990154d6d936db581aaa6e30a5544462513fc6dfb37fdf01180f5414af44d645755e0080f46f38c329e0f940e05149843efe88d5b7ce44cd10d0449662c4167da28b57a15e5c1f3c7c4fb4fb139dd40daa59945e43ba1d263ee09499a968ffdd80f6f78d8ecb4cfe4e8ffa5c66cd1f2a0c4df637599d4c3b61bf2123304e6d3a2cc5d523bbdec382357d451b29248097db51ca4622b3e1d11312ef0508a0f137971678f3905e410594739427504d94fe0602cd5520169412969912bf433b0ac225a49f39991fd93bbea10ade6d55b7094b17b6c3a5e5b751a0b792b41295401c71982ca5e04b6581de695d1d1af77f099aa8b6d675da60b72c8429e9a08f1106d958e1ad6665cfd7d8e1b15ee213d1b038466114d75733091fc98181"}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$packet(0x11, 0x2, 0x300) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r12 = syz_open_dev$loop(&(0x7f0000002e00), 0x7, 0x20001) ioctl$LOOP_SET_BLOCK_SIZE(r12, 0x4c09, 0x10000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0x1ff]}}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000022c0)) r13 = dup(r3) write$UHID_INPUT(r13, &(0x7f00000000c0)={0x8, {"4ee81482ade746204cbe5efcc81aff8caf5b093bd36acdac991d7ba56848b36ec1037d5dbd4f92c25d8e1cba8c04d897105cf4d3b788d171a786567bc9398c4cbcca697a3b6f5e770c06d75733276088fa06a72b365f58e42650c0fd2312c62fe9498599ffc755063622c0bef952ba7c2c1fdc43bd6c55ef5182f6aa526ca90327c480793e89415bc90499a8911a33850b45d94406eff6ad946010ee2bbb77aa2fa83e7b63ae4004cbeb32f3d65c25672cf04318435d4ab207d06c1a9b5e82a963eadca405f261ea754a4977d1de8cd3857dfeca6b8de5ed675a8045be600210d2853572e505f5800f811005f97fac8a915748fa206eee0f8e09ebff47612070f86b76f0c29d03a762f9759aa90b66c8b1c40382f0a7d7664288fa1bdb2574b53a6713f7d89f749cbf54ab703e137cb4ff1e7b495fd33c04610b67390074c2e06b0a5b2779923ec0445df829ab11566d7f7693a4e9886f1661ad7aec75daa4bd31917c7d0e03608c65623485c3ba83b22e8f2bc179b0d2098eb8594b1dfef0dfe8dc89709e7ad9b5fe1e9a55bc44f6f221e22daed917fdc7b80379df5f66f3035876292a7c4e636e981e8cb37bc38973b37f7cd39fe072212473a04b3c73262565dc6d2e6555434ed06cb170f1d17f733176e74f5fee54ea2127b4c08c901c5c572d1b786f173f458490f022abae2f34d3d16d21700d463ae2ff4acce06ab35dc291a8afec8cb335e25b9678d87a5ee25422f1879f96c82f8bcce3af2b6e49be5251451fa899144de8579c0a9f4566c1f49020c11d4e7aa1b953bbd58546b76668b34bc55479f2dc61392037a510655fa71b33ba8911a80941dea0362e1adda45694f9418b2fa8bcd5bfaa4207746753193acc4fe8dbb0f9aae1079dcd762944b6abede8100b733097aa72e54ff595013cddaf40f96feb813c5599648e4891b3bc8a5c691e388f0acd905aad06c0efee0affa16089d43289be581cafc541f272bd39187c9af5e6a844e432999df7ef534441202a9bba4495d0c61703dc9ad5a637b1ef26d8a1491defbacf46dac01528a13171216766c4d4a6957e1cdd23585edc114dd0cfb111112514f2212805d2e04d06aaec0c373eba054e7531d65a24c2cc30c6f77a00813d7ad444b58eb741cf3b511bb1ac8d867ca8689c5a6ba2563947290206c713cf8a23c958b55431d148bdb1ae6b33438980e54c396899c6815eca1e0bf6588db80a02b679494194e28e685916eae86396ea44cfda85677b2aa1bb2c32a5ee5c786f4e555146b14a2b296332f44cbc4c10d43bffe4735a12d5010b970429d338302fde347f4575e4b6102a4f2f46f18e4ef0b7477dcf88ab7d207f877daf63ea6198ecf3dde06a49f42002e8fa922d6dfe75619e2f4f988ed6d82fceb2bea5746f43b36b1bd448d38df6886560c83dd6680220699a2fadcec46e9ecb5bee70cbd45cf33248f9df66970bde59e4edb042d33585c65f2e944f2b37bdbb340f414f850e27b7bf670255cd5538b48025e5ceeba2642f94d045aa1498fc57c98bc8ecd30b0c988a48089ad7290ab54b73130d4db1896e95381f088f94da66609bf8e6796bdc7bc511e3f8a8d680bca6aa8c20bc43d7e566a4b78b5234dfae78be84fdb07f41e1da7acbcd3d1e32dbee4ff469fe31c2092bd78d68b193dcaef749c6af29710e5c368a84c0727d1c3f528d3a7b41710e7e6aad5f52890ca42491ba769a4a24b0628a8444f0fe975a4cd6658b13e40b79f490ab57948eaaccefd10a9ea09d9620d4837f452d8f12b6df0fab2e91f5ac994dcfaa1cd9874981e5ce7e01cce035927a17a1ef9cbcce6d3f2be5c3a25493b50fe20e3bd1d95444f7d57fe297eb1719b85ffd2684a27079dde6d0c986e456d53fbb9c02d7fc050728da59c72eebda5d34766f915ad2b5c96e7931f18dc179a08bb5686c61f9b43b58851b24251f72c57b8fbe3ef1e8dc9a84526cd236a17fba51ad9c6b07ba750747b321ab0e5e37181b9af55cf85a8e85fb5f254c0a7958e7de3b451d2106854834e2b562c3f422fa1abf7f095eb06e458a1a2a8d4f300ebe47c5d050061e3c9b2736aa1af386432887c8ac4241e1f165bb0e791e0d848ff48be7f1ff6f92bac38df1c5c103833261cb3a42f682bdf1dcc13c8e57ae74d9950448de921b2e9baaba08e2e35fc1d4e01892448fd3eab199b02cc00c4fbd987d104a9f4c6cbc3c55eaef8fd0243a418693f04c582ff2dc3d3f8902ece00c4db54908f78bfc5dd23e2c9c8c4439ca98c2f013036f8fce856a67f1182f2f300c44f864243e55c97080255ce9fcc6eab4ace98594cf036cd70e2045365df75aa53825aa240d6929a598ce9394bc5845c93679b8aff2395cf32a876d99f097b0c367adece09f709157e54f862811201686f1722644e0f54b113a93a7f6c3af747d909053de8798f28ad4a525131107bb0c8a8359a8c8f9dc9ff942d2c2cbd7375d298f2c80389576c0a0de7a9277ce8cc670ce05b3bf3d8ec496b2dce52fc034453c8ca2c8aaa7169aa0d30b023e81208335cc8ecc9e04994bdbfc48425d25d0cf534bc6f29718df8fd62a6ba25a56746efa07948f8f4b0417882c507aa2b52fb435173f47e1e6d9bfcb0f4a27a389772c2139c84d251b0f13b14ed8ca1d3ae563e6919b30ddf7d94f6a39e5f2e41065c3875b9953c0fb2436b0ac0a1f8b5159a0c48ef8c066a857b1cfe39f27ce490f745d9823d1a9b0daa3837e9e5d1ba1af1a09f215bb86ee3e631c05e134c8db720df8de1d7d3a72265bc55e8078b5d399b711a6db92a5d9a9876ac0aecc1be3223af9204e92d070758d0f2712f84ab386755e371fc5af836fe3e6ad637ed02a0f4f78c48488799323fcbcff04c69df02773a5ac1423d4c6c2d7f978683ea823e22f60fb0bac265b165b24bbfe98526e90decafa9cdfd3bd40347211a76335e468f9561cf70834780a454ae4a489afdfe668f9e1f994ff2105c7a47af2127d26e7907f6f5936ca9ed7b681089da2d518620c3169175a6954b6b9cdb931bc29de0ec57c79d62a03c7a9730096f9f142a2a8e2d3d2fbe6c07d377a219f3bdb43c692e033b5db50f0598495f158e68c08da96c5bd6590aecd068218cf1f0ae396e53a710b1df5854a5573a9ca0e1d1063f9e8b6065c025bd303e2a78121487c3f9f8845a0973baa9612b1b7a7b0f60cc376885a60a4445bfcfa160d5ca2bbcf518f7dbdee17e712fe0c77996b5346531581ed76fd64a424f90bea094b422816e6b37618e6ccf0f41820d8fd6aa16f2cee1da172bfb4da934419e6ea004ace0f9f0e7b1b6224a365d9af5c3a7645d4733a6c419289829c309daa39aa24c4761c583ca55637fe94b9d18de69c7a815f21d2b26b241c223704dee03877898c0bdb23f59b98d8bf36b55f029f91b516fc8fe1faad6210426b6e43e3567f9e6b395448b610a2ea68618b31c495c0a77219de90737ac7f873fcbc36c91950a43b7f89167f07b7fe86b3b6c9dc193467a7ea281e7c492002a64ed27c24a4dee2b0010221c8bc6f129fafc256f83a93538b41d4ce993f4cd49957a253edc4809b47d8c456d3eae6f38375ed0bd69d9a8cfbffd67000aa86af04d26e003d70949f4c870e2f878fe5551ae2df961f66b068cbbbdde9806b88bfc15f96cec2a743bd196d8a0f10579a930d46ab04b9a6f511134318c32683d95282e952e9489343e7dac3a59d4abcba560d0b16c3c0a6f5aa288b140c7faf4b024b22697f9464df15e2bf0844b4e1cc2028ce5e5ff43b5d3388255e4ab3d46593759f0972a03712a35c79327349f4047e084b9fe64d28a06342f5e9332e1f0984e3fc61ac378c3a3a998497047804fa3752a9c65b0e809a5942dd55a1798c382116e11c0a8096e7ee986313062d42c69ad9d1519a2597a475dca244a4c9ab90410d866f408e725c328e66859b60797301afe947fbd883b5d982d3e09fec98a84c833143f48eef6db997de96bcab71b5a3a4891cc374e63ba2bc5deb08173e95425775b5e379c7e7d1b048fa7d71c60b1ffa6bf5a8807a4ff3b3263100986bb73fd86942a61bc70398cde294a840e372f03a94e75f61e2fe972e2dd8268ac1b91ffb310421aecaf138d23f71c783989617f33f3a8a5891cf80840eae26e527a180fbbc127845de3ca80197c56cc5ce368a36db78b9cfdaae5777cfb39fb4dc7d861b38e84920f74c65da5e4d25d9855608199dceee93d406bb99bb564a709c211c6f5787a794860a27651d004b3d1164f757cc401eaa124bfeeb27440eb48f530805471435f0a43510ae30eafab56b95f8a398b834d54e1ace4c6cf6f8152872e7fe6c2011142827f0590cea60a6a4972fff39fb200ec35614a4bffd1306cb745cf17705416752c9eba4be7eb4c4875035f11accad1e0c1a7313841693bdbe9aa5779cbee36d001596cb787c04eb7e5e3bb5c6751843b553fe98a4539452c69276c2a89424cff5814b1f3d5c60b57016d301dac724885e32bdf3b028f2320c5857768a0efc319b4ee9ee0e1ebe7d80bbafc7a7c0cc1f3bf04feb195aebef9e21b97389c5c14c12c2881b1c6dfe5b6f328b9231fca9f015a275f0ee6bcdd42488a12a831d625372e9e97ba2ff0b2b3cbd49ebceb67ce2f1b9924cc367b41fa3a5da97603ee055bdb5a8771d9a8e03b80d5b53a42e625d910878069764191abff079f50445f0c00f88b352e4716efd1060c491c5c72f91af8269cdaeae63ecdfc5ad111c447bb6f6b1ee78b8c62a55cc664e2e43112bd80cc7a68ee863485f55c95dbb615a5a207a3fa9da9820760d31c04a8fbf98966622da986aac18699d93cae16df8ba0408b06febdc2e60fe06086937ffdf6b090b0a983ea80a45749f4bb36d49b7bd41ec7030e205ed2e9ab83e2c53c36b338e77808e020f1f0fb62935bf9318094ddb9322d3bd317fc19bcf628f5b4d5ae826a44baaf0b5f443f8bf158e2dbd9752ab73e24e75b462b6ef656b3b7ce1650d75f423f36df729c9e533ccbdb806fd46fc5a1e99ba2a122f2d82562ddcb60f190ebb03152c782bbc4f6b803f28943cee4e5aaaf7e2d753bc3d9f70c70917c3f3d8c4c6ca226ea92ee10b1e2ccf1c196c5bb59bd6e787cefaeb7551d71d79523aef8d02f49c15bdc67abaa8d56b95437802cf0e1d76d778e319b4f54e6cf573952fa93b498c16d191359f7f18bfb6afd1adbf8d1233a4540cbe0d34c3ca1b6818c8c75ec513aada4267ca7b645baf0520d35bd4f63cfc27be0afbef80a5871665dc4d06e443671b81eb5953e3a3ef824ea08f8d175a7b8c24fb35877075598d229091e7206b618414146162d85203e27fb81c2596c92e1254f968d5e9900885bbdb0aa59f4125dd54e9fbbdc2b206ef623e11430de17c16e84665ee7b845fc7ca66374b6d85d485fe1fcca30fa0657bd166217d8c3049e52918be9d0cd15a91e6df64fc1fe7d0422191612812f28c3426474aadaf46c56eb45a1dc868179ed2954f4d6f2e22aaef821a8e1a2c6e7db83390ac43ab6bbab04cc932c8042910c4a5d693d786230d3b92fdd8a46f44713b63563f31ee9c7087408e45ff44aa847ddf635c42f7dfe253b7f99dd3e2d4e660e4cebf794d3ecb7104973330c9939ec030f9df237b8424606f1e60c54d3b06e27186568cb0bfdc87928e1d199d72638819b5c26925810693f5c18fff69dd6d14922a4100d2fd9ac2821b1ccb9ad8326eeb8bc3b4633fd37487f3441c433247c6c6a74c3a88a52f53770d272710851d397ed9bfa0461d008ccc117c2581948dada25d880b08", 0x1000}}, 0x1006) ioctl$KVM_REGISTER_COALESCED_MMIO(r13, 0x4010ae67, &(0x7f0000000000)={0xeeef0000, 0x5000, 0x1}) kernel console output (not intermixed with test programs): 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 167.850031][ T6257] usb 11-1: config 0 interface 0 has no altsetting 0 [ 167.853637][ T6257] usb 11-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 167.856294][ T6257] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.858633][ T6257] usb 11-1: Product: syz [ 167.860038][ T6257] usb 11-1: Manufacturer: syz [ 167.861424][ T6257] usb 11-1: SerialNumber: syz [ 167.864191][ T6257] usb 11-1: config 0 descriptor?? [ 168.072644][ T832] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 168.081604][ T6257] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input18 [ 168.085546][ T5339] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 168.090029][ T5339] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 168.118640][ T5339] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 168.122536][ T5339] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 168.137489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.142159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.146821][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.151505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.156098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.159814][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.163759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.167326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.170912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.174374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.312620][ T30] usb 11-1: USB disconnect, device number 6 [ 168.336178][ T832] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.336416][ T39] kauditd_printk_skb: 97 callbacks suppressed [ 168.336429][ T39] audit: type=1400 audit(265377.476:12831): avc: denied { create } for pid=12774 comm="syz.6.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 168.338851][ T832] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 168.406682][ T832] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.409315][ T832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 168.412424][ T832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 168.428866][T12785] overlay: Bad value for 'workdir' [ 168.457627][ T832] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.460277][ T832] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.462592][ T832] usb 7-1: Product: syz [ 168.463817][ T832] usb 7-1: Manufacturer: syz [ 168.495492][ T832] cdc_wdm 7-1:1.0: skipping garbage [ 168.497474][ T832] cdc_wdm 7-1:1.0: skipping garbage [ 168.514199][ T832] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 168.516611][ T832] cdc_wdm 7-1:1.0: Unknown control protocol [ 168.589138][ T6002] psmouse serio3: Failed to reset mouse on : -5 [ 168.721604][ T30] usb 7-1: USB disconnect, device number 23 [ 168.799194][ T39] audit: type=1400 audit(265377.907:12832): avc: denied { execute } for pid=12811 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 168.806804][ T39] audit: type=1400 audit(265377.907:12833): avc: denied { execute_no_trans } for pid=12811 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 168.911851][ T5293] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.919495][ T5293] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.929381][ T5293] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.940111][ T5293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 168.943915][ T5293] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 168.947021][ T5293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.959367][ T39] audit: type=1400 audit(265378.056:12834): avc: denied { mounton } for pid=12812 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 168.967877][T12812] Failed to initialize the IGMP autojoin socket (err -2) [ 169.121858][T12812] chnl_net:caif_netlink_parms(): no params data found [ 169.187030][T12812] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.189115][T12812] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.191231][T12812] bridge_slave_0: entered allmulticast mode [ 169.193645][T12812] bridge_slave_0: entered promiscuous mode [ 169.197926][T12812] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.200083][T12812] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.202252][T12812] bridge_slave_1: entered allmulticast mode [ 169.204582][T12812] bridge_slave_1: entered promiscuous mode [ 169.238749][T12812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.276146][T12812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.280428][ T39] audit: type=1400 audit(265378.356:12835): avc: denied { bind } for pid=12821 comm="syz.2.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.295849][ T39] audit: type=1400 audit(265378.365:12836): avc: denied { write } for pid=12821 comm="syz.2.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.317830][ T39] audit: type=1400 audit(265378.393:12837): avc: denied { write } for pid=12824 comm="syz.2.1820" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 169.353834][T12812] team0: Port device team_slave_0 added [ 169.359391][T12812] team0: Port device team_slave_1 added [ 169.386846][T12812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.389439][T12812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.400922][T12812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.404922][T12812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.407556][T12812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.418161][T12812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.458177][T12812] hsr_slave_0: entered promiscuous mode [ 169.460762][T12812] hsr_slave_1: entered promiscuous mode [ 169.464350][T12812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.466582][T12812] Cannot create hsr debugfs directory [ 169.586306][T12812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.591239][ T5984] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 169.673144][T12812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.751090][ T5984] usb 7-1: Using ep0 maxpacket: 16 [ 169.754466][ T5984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 169.768419][ T5984] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 169.771069][ T5984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.774381][T12812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.781371][ T5984] usb 7-1: Product: syz [ 169.783186][ T5984] usb 7-1: Manufacturer: syz [ 169.784590][ T5984] usb 7-1: SerialNumber: syz [ 169.787183][ T5984] usb 7-1: config 0 descriptor?? [ 169.790205][ T5984] hub 7-1:0.0: bad descriptor, ignoring hub [ 169.792064][ T5984] hub 7-1:0.0: probe with driver hub failed with error -5 [ 169.795880][ T5984] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input20 [ 169.821001][ T5984] input: failed to attach handler mousedev to device input20, error: -5 [ 169.877640][ T5293] Bluetooth: hci4: unexpected event for opcode 0x200d [ 169.878383][T12812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.882549][T12830] __nla_validate_parse: 1 callbacks suppressed [ 169.882560][T12830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1822'. [ 169.888073][ T39] audit: type=1400 audit(265378.926:12838): avc: denied { write } for pid=12829 comm="syz.4.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 169.890392][T12829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.009656][T12812] netdevsim netdevsim0 netdevsim0: renamed from eth6 [ 170.021498][T12812] netdevsim netdevsim0 netdevsim1: renamed from eth7 [ 170.028215][T12812] netdevsim netdevsim0 netdevsim2: renamed from eth8 [ 170.036979][T12812] netdevsim netdevsim0 netdevsim3: renamed from eth9 [ 170.063475][T12812] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.065832][T12812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.068008][T12812] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.070069][T12812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.136162][ T1327] usb 7-1: USB disconnect, device number 24 [ 170.149416][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.154289][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.183054][T12812] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.206718][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.208863][T11226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.216095][ T799] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.218255][ T799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.348314][T12812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.401790][T12812] veth0_vlan: entered promiscuous mode [ 170.409745][T12812] veth1_vlan: entered promiscuous mode [ 170.445134][T12812] veth0_macvtap: entered promiscuous mode [ 170.452195][T12812] veth1_macvtap: entered promiscuous mode [ 170.480343][T12812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.483469][T12812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.486281][T12812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.491112][T12812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.494192][T12812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.497324][T12812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.501035][T12812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.504031][T12812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.506780][T12812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.509696][T12812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.515956][T12812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.521374][T12812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.524369][T12812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.527252][T12812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.530229][T12812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.533865][T12812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.536871][T12812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.539655][T12812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.542747][T12812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.549041][T12812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.568131][T12812] wireguard: wg0: Could not create IPv4 socket [ 170.577596][T12812] wireguard: wg1: Could not create IPv4 socket [ 170.581985][T12812] wireguard: wg2: Could not create IPv4 socket [ 170.848315][ T39] audit: type=1400 audit(265379.824:12839): avc: denied { getopt } for pid=12848 comm="syz.4.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 170.856527][ T39] audit: type=1400 audit(265379.834:12840): avc: denied { map } for pid=12848 comm="syz.4.1825" path="socket:[41256]" dev="sockfs" ino=41256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.932087][ T5984] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 172.113899][ T5984] usb 9-1: Using ep0 maxpacket: 16 [ 172.116685][ T5984] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.119855][ T5984] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.123486][ T5984] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 172.126572][ T5984] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.129776][ T5984] usb 9-1: config 0 descriptor?? [ 172.136151][ T5984] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input21 [ 172.140614][T12884] Failed to initialize the IGMP autojoin socket (err -2) [ 172.347370][T12880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.352696][T12880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.355696][ T5984] usb 9-1: USB disconnect, device number 7 [ 172.690981][ T6002] misc userio: Buffer overflowed, userio client isn't keeping up [ 172.942940][ T5293] Bluetooth: hci1: unexpected event for opcode 0x203d [ 172.945178][ T6947] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 172.948148][ T5293] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 172.950471][ T77] Bluetooth: hci0: Frame reassembly failed (-84) [ 173.010875][T12918] No control pipe specified [ 173.215698][T12923] hpfs: hpfs_map_sector(): read error [ 173.492758][ C0] net_ratelimit: 70785 callbacks suppressed [ 173.492769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.492832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.494666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.498060][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.501382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.504877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.508101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.511677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.514856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 173.518316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 173.819352][T12948] trusted_key: encrypted_key: insufficient parameters specified [ 173.849551][ T6002] input: PS/2 Generic Mouse as /devices/serio3/input/input19 [ 173.908752][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 173.908769][ T39] audit: type=1400 audit(265382.687:12855): avc: denied { mount } for pid=12949 comm="syz.2.1856" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 174.091515][ T6002] psmouse serio3: Failed to enable mouse on [ 174.497996][T12957] netlink: 'syz.6.1857': attribute type 15 has an invalid length. [ 174.500275][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1857'. [ 174.630169][ T39] audit: type=1400 audit(265383.351:12856): avc: denied { unmount } for pid=5946 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 175.139231][ T5293] Bluetooth: hci0: command 0x1003 tx timeout [ 175.141603][ T64] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 175.267014][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.276344][ T5293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.282761][ T5293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.297299][ T5293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.299781][ T5293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 175.302014][ T5293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.323684][T12990] Failed to initialize the IGMP autojoin socket (err -2) [ 175.580911][ T39] audit: type=1400 audit(265384.258:12857): avc: denied { connect } for pid=13013 comm="syz.2.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.666740][T13022] can0: slcan on ttyS3. [ 175.721125][ T5293] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 175.952319][T13022] can0 (unregistered): slcan off ttyS3. [ 176.007453][T13039] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 176.170080][T13037] tipc: Failed to obtain node identity [ 176.197870][T13039] can0: slcan on ptm0. [ 176.229575][T13037] tipc: Enabling of bearer rejected, failed to enable media [ 176.232188][T13042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1868'. [ 176.303754][ T39] audit: type=1400 audit(265384.922:12858): avc: denied { read } for pid=13043 comm="syz.6.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.328369][T13038] can0 (unregistered): slcan off ptm0. [ 176.780792][ T77] Bluetooth: Error in BCSP hdr checksum [ 176.788131][ T39] audit: type=1400 audit(265385.381:12859): avc: denied { create } for pid=13062 comm="syz.2.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 176.807719][ T39] audit: type=1400 audit(265385.381:12860): avc: denied { bind } for pid=13062 comm="syz.2.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 176.953458][ T39] audit: type=1400 audit(265385.530:12861): avc: denied { ioctl } for pid=13068 comm="syz.6.1874" path="socket:[42815]" dev="sockfs" ino=42815 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 177.069723][ T7004] Bluetooth: Error in BCSP hdr checksum [ 177.184656][T13088] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.1878'. [ 177.214023][ T39] audit: type=1400 audit(265385.783:12862): avc: denied { read } for pid=13087 comm="syz.6.1878" name="file0" dev="9p" ino=40372936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 177.238607][ T39] audit: type=1400 audit(265385.783:12863): avc: denied { open } for pid=13087 comm="syz.6.1878" path="/155/file0/file0" dev="9p" ino=40372936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 177.270093][ T35] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 177.296360][ T64] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 177.298454][ T39] audit: type=1400 audit(265385.858:12864): avc: denied { open } for pid=13096 comm="syz.2.1877" path="/dev/ttyq9" dev="devtmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 177.299286][ T64] Bluetooth: hci1: Injecting HCI hardware error event [ 177.311820][ T64] Bluetooth: hci1: hardware error 0x00 [ 177.416972][T13101] [U] [ 177.417828][T13101] [U] [ 177.418740][T13101] [U] [ 177.419759][T13101] [U] [ 177.420602][T13101] [U] [ 177.421433][T13101] [U] [ 177.422233][T13101] [U] öYžu [ 177.423135][T13101] [U] ­ÛóÉ ‹ªö>q$ÔðÅy‡ÀODX:™Ì´-»ÅOϱõ°k'L÷ç˜ÃOEÊ}$+Ìt9­’×¹æ;ÿt}t4ófÕ+·þŠci±Õ}ÂF4’H]Ã{xñ Éñd( TÊV]®PŽÇ §÷ÐFbCÕ=b$E}ÁP6“ý *p}ÔOÊäåÒ³Ÿ­Qè›þüHÞѶM8|ÃZ÷h»ZÍÍ›:3¬ÃþÜ´¹Õ´}T)ùcßù›¯›­ØéUd}ž]êH 8Ÿ·è.YŽX žT÷¿bd_ú“¼™%\ÙˆƺÃ~›&Çf·‚­ÕPúÄc2+Ž¿u~Pë±PÉá4Ø—,$ûG˜-¸<]L¶À9¾ L«ÚÆtm+¯ ºë[f¦m£;Ó®9v,úÎkéL3ˆÚRˆÓ [ 177.431795][T13101] [U] (‚ßxSÑ›C*Ç„0‘”РÜë5×ÞÕ, ½Á@çÃk'$\^/ [ 177.437663][ T35] usb 9-1: Using ep0 maxpacket: 32 [ 177.440471][ T35] usb 9-1: config 0 has no interfaces? [ 177.442212][ T35] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 177.444904][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.448375][ T5948] Bluetooth: hci0: command tx timeout [ 177.451552][ T35] usb 9-1: config 0 descriptor?? [ 177.466686][T13101] [U] °dcúà„26ñÍâ ÕÂ-7½j}ù/9!AˆB^'³0§\°ªž?ãpÊÔcU@›À'n®ãÛÜa'ƒCžêˤåëØÕãTŽX§Ù`Idм7ŔƀÏLši䘽roŠ9#b—m‘Š¨ë¶¡Û~#m)%@Eiªšª:p¥D–r§×u8zeí¹t·ái(úÏóá—þA½ qöõµ{{¿=”6ƒL‡Эžw”áªþ5ö± [ 177.473707][T13101] [U] U„6ôü£‡·øcv§,ÖÈa,…È÷|xçòôÔ½$Ïêm—™$í©×á’±ºFš=ݦüNÎÙÊU̸¢0¾`ÖýE+ùq8eÿáÞ5|Íj6 Ä/CmÀÖçâðüÀ|r ·,4ìäXïñ¢È°q#ëqÎŽ³ÿ)/‰Gß¡|1¶Z [ 177.478220][T13101] [U] VÖåxFÅhÁ;\R]¹RBýt×ÌØ£äÝÔ¾žê»£iVæB(|xe2JI_Mt¸P~f s"e1öZ'(‚ÔªI‡.ެæ4Ù‘­ð\†fH Ä(9€ÙÚ¥©BNÿÒ²½+ðVݰAsÑ´ã/ÖðQ‰`‰“AcÃê‘­ªwî•êfáó1·~iùô{áQÑ¢hjzÛP-ÛóêÅ¿ÀÆ@Iä|ü˜‘‡æåæ}L23P†6Ì1Ú< ÜËïSÍM~ÒÀ¢ÈíÓ§«˜´ø¬[›‡}^¹²¶“5šðÄE®%=FÏf-Í_ßÓ]ø§LQûø•»vl0À3è"󃔤f]R îièØˆˆ)) /¾àª¼®‚ [ 177.494098][T13101] [U] ¼®¤yó7T÷ Ú,Ëš¤VŽ•qÙK̘e õ¤ZÕËŠ‘ËÜÖaÒ¬&o#ÒN?ç [ 177.496164][T13101] [U] /Ń&pt ÝÚêßðàf÷šÞŒuXÑ,eVZj [ 177.497683][T13101] [U] 1£û©È=×¶wÀ˜wE?•‘oðw'FŸÖ]s=ÃñB& ™û¾Vã¾çä±Ê(Ç:˜™fáB"¯u£xÅO+& [ 177.500652][T13101] [U] ­mˆ«³;ÿÇ䮼59KÛÖa‚ä ˆòU)j>ÊûïU¿¾Ïxlúúq [ 177.502965][T13101] [U] 8–»îýÎ [ 177.503913][T13101] [U] Å)ŠðâñÇY¸Iüúêë¡lƤZÉ> ÊäüêLšÖ&®Å‰\Rí‘l!ÕÞËw0³"¼+Gä”2£½–¥C ]‘¥íç-»% [ 177.506701][T13101] [U] XF Rj‡ýû [ 177.507718][T13101] [U] Jõ [ 177.508557][T13101] [U] 0º‰0 HÕvž ¯™ž© ™'0»¤ÀÈ»¶ï~·<0:5†oû©À¨[YÂ0isO„þµ9<Ûg+Θý¤g†õ{ù®ÙœfëaÜ Û!‹þ8 ÍÐàè•Fe0#ñ“ [ 177.511664][T13101] [U] L«âlxòƒ‰å8~ÂÈçÈ+!»÷MŸÚýÑÓ¿¨ÌˆRÂc¸_¯î´Nö7*ØáMBæz±uf˜ç‚SmåLäì$õ«àÓ]y­£¾8i¡ [ 177.515052][T13101] [U] ò3G}¸öµ;ÿŽ£añ [ 177.516192][T13101] [U] (JŒQ‰Uë M„w‰SåhêÌ{ì±ÉA²°Ó“]–œrOª÷Û=&ä8uNµ [ 177.518114][T13101] [U] PÅiùAáTP9oì3Ù(¦>Æ8B6ˆä¶VwPeð—ïÙr¯ù6¤§ÂpÔ1í¼SeB®íCŸÎL HÒß‹r¦l‚ u]ñ(<^ªYÊ£G±ÉþåE#‹XCºà» bêÑPÀ¹ûuÝ) [ 177.521615][T13101] [U] ®7×°Æ!eÛD{ÿp¢MyªªœLƼî“:‰Ÿ‰\']§š2“?e8pÚ”W±êò‘±q€º›—õŸ~w½rÂqH/Jdô½ðUî+èKŸî†yýðùú£ëÅyØ0ª§· 5ãÜ ;Dxot:fbÅ~¨‘(øá+íù~ J f [ 177.525726][T13101] [U] H~èaÿ¦ºÿJùwòË¢c¡›x+K§›¶nJ•ã}©ì‰“>bóªe [ 177.527611][T13101] [U] F& [ 177.528478][T13101] [U] ‘ÀãGºDãL©øþoùž.å)ÌðÒG,zX0eâ÷ÚNõчçF0ÁˆÚcõšÃPf76ü›]·)œ˜GÉt¥c`¬U´T väõîbrý²ã üJþs­€¦EW«úæƒU‰îÅ™÷_F¤†#—1â/šÌx9E~¤ýj»¥Ø%ik}BíĜئÌ] fíÕ›¦ ”¯ïø–,6jÎû¡ÔBBTúFƒa͸'—¼Çé[`Cgj~Ùÿ™g%äZåðžcIG†ñc¹Í‹TÕpM­›0:—јóÆ*ˆ þÛ‹Ù”rBÐÝÝ1ŸºÍ?›"µé t£¹Ef}?#ù½è/WåèÚe×ô„—qUa:þj@…˜}æ·ñWqü:7<ék­‘Êd–ÈÔoÎwà [ 177.537908][T13101] [U] QCºì|E{dÂa²Óx‚þùYGU,¾DÀ’3½Id8Pʼn³Ý–Ø÷©byp,EbȱNrêÌT˜ï [ 177.541152][T13101] [U] Xh•¯¾wÜOñ¿3 Ë‚Û1¡*ë?õ=¯¡À¤¦WáÔ/ßù [ 177.543425][T13101] [U] ØÐ_{Ã2.y.†êg¦ûoþ¼ƒ¥•üý]­¹´#Å’­×aBñãµÊæHnñ­k™d™½€CÆ­W ÿ™|o‰ßG:‚4§”[¿ [ 177.547829][T13101] [U] …ˆE‡ç¶ [ 177.549350][T13101] [U] Rá‚ [ 177.550675][T13101] [U] _”ñv]ö\:¶H™urJD‚Ih•}Hbü´ëJF´€]¼”ô'•Þ_ºÞ/‡+è‘‹@ç)È31,;ÚˆP6 ÿBÑ|C(ùx UváÕwÜW¿Ì-ອx*¨é#ݳ-FË"gÝ%!2Å [ 177.555903][T13101] [U] á&V‹#*Dt'äúJsŸ PÒMMu¦é 2Ý5E®Nq^2ä1ZVÁ´,¢êæ‘i±îú˜ÑŠŽ2G«$d‘.1šyC÷r´«m¡x—Ráû÷»ágª|¤wKìšé$¸K^ˆ¤­ƒo6î[ [ 177.562336][T13101] [U] ÀqpÉV’tÓ¦üLŽÀ¿ˆÃ!´Ö.…$6ÊºèÆ¢Œä­Z•F„ï+¨ýa®·ð [ 177.565129][T13101] [U] (ÒO.¶z»€|‰,ýy'ÇMÊIE€cwJ«PgöÄ·?Îk´˜·©5qn:¡Ú„d‹ .1ä¨f·Í–röý!ÖB[[…ÄôÑ2¯¦¿j­E¼ [ 177.569646][T13101] [U] 6ö?šgSí&™Ëžp~?™DäUOgæƒTâàyµ/*Zê‚ÒJ?©ƒ [ 177.572231][T13101] [U] “*\:!ï_›iIß’ *:AA²“~ä@Ù¾¬o2XdLHØ—-±´W á1R:¡Õ-‚³™çÛ_0má‡6V¸Ô [ 177.575850][T13101] [U] ;úªÞ9w rejected, failed to enable media [ 179.649851][ T39] audit: type=1400 audit(265388.056:12882): avc: denied { execute } for pid=13191 comm="syz.2.1907" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.806454][ T39] audit: type=1400 audit(265388.206:12883): avc: denied { lock } for pid=13199 comm="syz.6.1908" path="socket:[45623]" dev="sockfs" ino=45623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 179.824168][T13200] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1908'. [ 179.834668][T13200] team0: Device gtp0 is of different type [ 179.968254][T13206] block nbd6: not configured, cannot reconfigure [ 180.153137][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1914'. [ 180.239784][ T39] audit: type=1400 audit(265388.608:12884): avc: denied { write } for pid=13240 comm="syz.6.1916" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.321784][T13248] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 180.325917][ T39] audit: type=1400 audit(265388.692:12885): avc: denied { read } for pid=13247 comm="syz.6.1917" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 180.334385][T13248] overlay: filesystem on ./bus not supported as upperdir [ 180.336898][ T39] audit: type=1400 audit(265388.692:12886): avc: denied { open } for pid=13247 comm="syz.6.1917" path="/166/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 180.351016][ T39] audit: type=1400 audit(265388.692:12887): avc: denied { search } for pid=13247 comm="syz.6.1917" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 180.365084][ T39] audit: type=1400 audit(265388.692:12888): avc: denied { write } for pid=13247 comm="syz.6.1917" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 180.375653][ T39] audit: type=1400 audit(265388.739:12889): avc: denied { unmount } for pid=10278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 180.506418][T13258] netlink: 4420 bytes leftover after parsing attributes in process `syz.2.1919'. [ 180.513962][T13258] netlink: 4420 bytes leftover after parsing attributes in process `syz.2.1919'. [ 180.642347][ T39] audit: type=1400 audit(265388.982:12890): avc: denied { bind } for pid=13270 comm="syz.2.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.668798][ T5293] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 181.088979][T13299] bond0: option ad_select: unable to set because the bond device is up [ 181.159184][ T35] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 181.307709][ T35] usb 9-1: device descriptor read/64, error -71 [ 181.547342][T13332] program syz.2.1930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.574944][ T35] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 181.679855][ T77] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.735640][ T35] usb 9-1: device descriptor read/64, error -71 [ 181.791485][T13351] 9pnet_virtio: no channels available for device [ 181.811092][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.816766][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.819577][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.824276][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.827549][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 181.829838][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.853386][ T35] usb usb9-port1: attempt power cycle [ 181.901091][ T77] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.920461][T13352] Failed to initialize the IGMP autojoin socket (err -2) [ 182.235093][ T77] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.243506][ T35] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 182.278752][ T35] usb 9-1: device descriptor read/8, error -71 [ 182.332399][ T77] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.558488][ T35] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 182.586247][ T35] usb 9-1: device descriptor read/8, error -71 [ 182.606000][ T77] bridge_slave_0: left allmulticast mode [ 182.608499][ T77] bridge_slave_0: left promiscuous mode [ 182.610939][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.638047][ T77] bridge_slave_1: left allmulticast mode [ 182.639745][ T77] bridge_slave_1: left promiscuous mode [ 182.641447][ T77] bridge1: port 1(bridge_slave_1) entered disabled state [ 182.709952][ T35] usb usb9-port1: unable to enumerate USB device [ 182.836618][ T64] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 182.885591][T13385] overlayfs: failed to resolve './file1': -2 [ 183.578220][ T77] bond0 (unregistering): left promiscuous mode [ 183.580066][ T77] bond_slave_0: left promiscuous mode [ 183.581798][ T77] bond_slave_1: left promiscuous mode [ 183.583496][ T77] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 183.600831][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.618615][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.633543][ T77] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 183.652896][ T77] bond0 (unregistering): Released all slaves [ 183.734749][ T77] tipc: Left network mode [ 184.033773][ T64] Bluetooth: hci3: command tx timeout [ 184.100708][T13426] syz.2.1944: attempt to access beyond end of device [ 184.100708][T13426] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 184.120853][T13426] FAT-fs (nbd2): unable to read boot sector [ 184.204738][ C1] net_ratelimit: 103563 callbacks suppressed [ 184.204751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.204783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.206649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.210052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.213343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.216662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.220068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.223394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.226740][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.230041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.292485][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.295964][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.298830][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.310298][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.317241][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.320436][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.323741][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.336335][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.339265][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.343847][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.359513][ T77] batadv0: left promiscuous mode [ 184.402311][ T77] hsr_slave_0: left promiscuous mode [ 184.409821][ T77] hsr_slave_1: left promiscuous mode [ 184.416263][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.421249][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.425983][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.428352][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.486624][ T77] veth1_macvtap: left promiscuous mode [ 184.488633][ T77] veth0_macvtap: left promiscuous mode [ 184.490356][ T77] veth1_vlan: left promiscuous mode [ 184.493384][ T77] veth0_vlan: left promiscuous mode [ 184.606906][ T25] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 184.771719][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 184.791518][ T25] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 184.794094][ T25] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.804437][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.807268][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.810073][ T25] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.813762][ T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.835512][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.069961][ T25] usb 7-1: usb_control_msg returned -32 [ 185.071723][ T25] usbtmc 7-1:16.0: can't read capabilities [ 185.096873][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.101265][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.105125][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.118653][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.122003][ T5948] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 185.124519][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.211750][T13471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.221900][T13471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.257641][ T64] Bluetooth: hci3: command tx timeout [ 186.424678][ T77] team0 (unregistering): Port device team_slave_1 removed [ 186.541019][ T77] team0 (unregistering): Port device team_slave_0 removed [ 187.286552][ T64] Bluetooth: hci0: command tx timeout [ 187.502602][ T25] usb 7-1: USB disconnect, device number 25 [ 187.644010][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.647305][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.650161][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.653201][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.655961][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.659580][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.672405][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 187.672414][ T39] audit: type=1400 audit(265395.567:12901): avc: denied { write } for pid=5336 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.682076][ T39] audit: type=1400 audit(265395.567:12902): avc: denied { remove_name } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.688492][ T39] audit: type=1400 audit(265395.567:12903): avc: denied { rename } for pid=5336 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 187.700748][ T39] audit: type=1400 audit(265395.567:12904): avc: denied { add_name } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.707139][ T39] audit: type=1400 audit(265395.567:12905): avc: denied { unlink } for pid=5336 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 187.708806][T13486] __nla_validate_parse: 1 callbacks suppressed [ 187.708814][T13486] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1957'. [ 187.713721][ T39] audit: type=1400 audit(265395.567:12906): avc: denied { create } for pid=5336 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 187.729068][T13463] Failed to initialize the IGMP autojoin socket (err -2) [ 187.750391][T13352] wireguard: wg0: Could not create IPv4 socket [ 187.755236][T13352] wireguard: wg1: Could not create IPv4 socket [ 187.758637][T13352] wireguard: wg2: Could not create IPv4 socket [ 187.843141][ T39] audit: type=1400 audit(265395.726:12907): avc: denied { relabelfrom } for pid=13463 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 187.862630][ T39] audit: type=1400 audit(265395.726:12908): avc: denied { relabelto } for pid=13463 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 188.314085][ T39] audit: type=1400 audit(265396.166:12909): avc: denied { map } for pid=13524 comm="syz.2.1964" path="/dev/video4" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 188.329178][ T39] audit: type=1400 audit(265396.166:12910): avc: denied { execute } for pid=13524 comm="syz.2.1964" path="/dev/video4" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 188.425029][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.434790][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.440655][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.446161][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.448859][ T5948] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 188.453969][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.474878][T13533] Failed to initialize the IGMP autojoin socket (err -2) [ 189.133457][T13586] afs: Unknown parameter '>ž§nû@' [ 189.135691][T13586] afs: Unknown parameter 'dkn' [ 189.161828][T13590] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1973'. [ 189.231666][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1973'. [ 189.290864][T13600] netlink: 'syz.4.1973': attribute type 1 has an invalid length. [ 189.293137][T13600] netlink: 'syz.4.1973': attribute type 3 has an invalid length. [ 189.297175][T13600] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1973'. [ 189.516523][T13595] lo speed is unknown, defaulting to 1000 [ 189.521728][T13595] lo speed is unknown, defaulting to 1000 [ 189.523710][T13595] lo speed is unknown, defaulting to 1000 [ 189.560723][ C1] net_ratelimit: 105008 callbacks suppressed [ 189.560735][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.560742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.562703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.566102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.569339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.572583][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.575912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.579382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.582791][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.586198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.590242][T13595] infiniband sz1: set active [ 189.597913][ T6257] lo speed is unknown, defaulting to 1000 [ 189.600000][T13595] infiniband sz1: added lo [ 189.602704][T13595] sz1: rxe_create_qp: returned err = -2 [ 189.606292][T13595] infiniband sz1: Couldn't create ib_mad QP1 [ 189.608449][T13595] infiniband sz1: Couldn't open port 1 [ 189.622438][T13595] RDS/IB: sz1: added [ 189.623739][T13595] smc: adding ib device sz1 with port count 1 [ 189.628160][T13595] smc: ib device sz1 port 1 has pnetid [ 189.630116][T12882] lo speed is unknown, defaulting to 1000 [ 189.632441][T13595] lo speed is unknown, defaulting to 1000 [ 189.673157][T13595] lo speed is unknown, defaulting to 1000 [ 189.951587][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.957143][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.959841][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.962278][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.964570][ T64] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 189.966749][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.318036][T13595] lo speed is unknown, defaulting to 1000 [ 190.326692][T13629] Failed to initialize the IGMP autojoin socket (err -2) [ 190.395451][ T6257] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 190.467432][T13595] lo speed is unknown, defaulting to 1000 [ 190.556848][ T6257] usb 7-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 190.562961][ T6257] usb 7-1: config 1 interface 0 has no altsetting 0 [ 190.566998][ T6257] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 190.569665][ T6257] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.572088][ T6257] usb 7-1: Product: syz [ 190.573312][ T6257] usb 7-1: Manufacturer: syz [ 190.574857][ T6257] usb 7-1: SerialNumber: syz [ 190.580321][T13640] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 190.621924][ T5948] Bluetooth: hci0: command tx timeout [ 190.636990][T13595] lo speed is unknown, defaulting to 1000 [ 190.762709][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.768053][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.772884][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.776514][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.798298][ T64] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 190.802794][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.814831][ T6257] usb 7-1: USB disconnect, device number 26 [ 190.838169][T13669] Failed to initialize the IGMP autojoin socket (err -2) [ 190.858411][T13533] netdevsim netdevsim0 netdevsim0: renamed from eth14 [ 190.888122][T13533] netdevsim netdevsim0 netdevsim1: renamed from eth15 [ 190.954926][T13533] netdevsim netdevsim0 netdevsim2: renamed from eth16 [ 190.982377][T13533] netdevsim netdevsim0 netdevsim3: renamed from eth17 [ 191.101758][T13699] Bluetooth: MGMT ver 1.23 [ 191.214368][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.222214][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.227341][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.235432][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.241733][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.248143][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.253405][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.260253][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.270100][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.276796][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.282513][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.289030][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.295536][T13533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.302358][T13533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.325051][T13533] wireguard: wg0: Could not create IPv4 socket [ 191.328639][T13533] wireguard: wg1: Could not create IPv4 socket [ 191.332592][T13533] wireguard: wg2: Could not create IPv4 socket [ 191.515563][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.529576][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.532651][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.534967][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.537219][ T64] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 191.540198][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.594594][T13726] Failed to initialize the IGMP autojoin socket (err -2) [ 191.690164][T13739] kvm: emulating exchange as write [ 192.145058][T13768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13768 comm=syz.4.1988 [ 192.927884][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.933567][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.936366][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.940898][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.943694][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.946588][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.949412][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.955967][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.960851][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.963719][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.966454][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.969381][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.976649][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.979579][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.994789][T13726] wireguard: wg0: Could not create IPv4 socket [ 192.998981][T13726] wireguard: wg1: Could not create IPv4 socket [ 193.002507][T13726] wireguard: wg2: Could not create IPv4 socket [ 193.248181][T13831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1991'. [ 193.471777][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 193.471787][ T39] audit: type=1400 audit(265400.983:12916): avc: denied { shutdown } for pid=13862 comm="syz.4.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.402634][ T39] audit: type=1400 audit(265401.853:12917): avc: denied { wake_alarm } for pid=13927 comm="syz.4.2005" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.409559][T13929] netlink: 'syz.4.2005': attribute type 1 has an invalid length. [ 194.412111][ T39] audit: type=1400 audit(265401.862:12918): avc: denied { write } for pid=13927 comm="syz.4.2005" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 194.424470][T13929] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.431640][T13929] bond2: (slave gretap1): making interface the new active one [ 194.434566][T13929] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 194.504042][T13924] program syz.2.2004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.673007][ T39] audit: type=1400 audit(265402.106:12919): avc: denied { setopt } for pid=13974 comm="syz.2.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.682821][T13979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2007'. [ 194.916774][ C1] net_ratelimit: 102698 callbacks suppressed [ 194.916785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.916862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.918677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.921996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.925271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.928476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.931828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.935080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.938465][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.941719][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.229860][ T39] audit: type=1400 audit(265402.639:12920): avc: denied { append } for pid=14006 comm="syz.4.2014" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 195.672746][ T5948] Bluetooth: hci2: command 0x0419 tx timeout [ 195.936887][T14034] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2018'. [ 196.204718][T14056] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 196.208327][T14055] gfs2: path_lookup on ™6(ï+‰d‹QÌnB´!eU‚çVè!š`:Ñ 8×DSEíÄðÃÄèÎ Áy|YT¢®{-€íê°”,mb/ returned error -2 [ 196.238092][ T39] audit: type=1400 audit(265403.574:12921): avc: denied { bind } for pid=14058 comm="syz.4.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.367124][ T39] audit: type=1400 audit(265403.696:12922): avc: denied { create } for pid=14068 comm="syz.4.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 196.477935][ T6002] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 196.659359][ T6002] usb 7-1: Using ep0 maxpacket: 8 [ 196.662852][ T6002] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.665677][ T6002] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 196.668164][ T6002] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 196.672485][ T6002] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 196.680833][ T6002] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 196.683374][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.687507][ T6002] hub 7-1:1.0: bad descriptor, ignoring hub [ 196.689349][ T6002] hub 7-1:1.0: probe with driver hub failed with error -5 [ 196.693062][ T6002] cdc_wdm 7-1:1.0: skipping garbage [ 196.694639][ T6002] cdc_wdm 7-1:1.0: skipping garbage [ 196.696669][ T6002] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 196.698373][ T6002] cdc_wdm 7-1:1.0: Unknown control protocol [ 197.026759][ T6002] usb 7-1: USB disconnect, device number 27 [ 197.123229][T14055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.137890][T14055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.386296][ T6002] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 197.569156][ T6002] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.572062][ T6002] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 197.574651][ T6002] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 197.577741][ T6002] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 197.581591][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.588216][T14056] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 197.596337][ T6002] hub 7-1:1.0: bad descriptor, ignoring hub [ 197.598511][ T6002] hub 7-1:1.0: probe with driver hub failed with error -5 [ 197.602108][ T6002] cdc_wdm 7-1:1.0: skipping garbage [ 197.603682][ T6002] cdc_wdm 7-1:1.0: skipping garbage [ 197.605822][ T6002] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 197.607552][ T6002] cdc_wdm 7-1:1.0: Unknown control protocol [ 197.921423][ T6002] usb 7-1: USB disconnect, device number 28 [ 198.655438][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.662868][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.667399][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.673169][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.677888][ T5948] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 198.680900][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.698747][T14199] Failed to initialize the IGMP autojoin socket (err -2) [ 198.786757][T14203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14203 comm=syz.4.2034 [ 198.872362][T14204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14204 comm=syz.4.2034 [ 199.895320][ T39] audit: type=1400 audit(265406.998:12923): avc: denied { ioctl } for pid=14214 comm="syz.2.2037" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x5382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 200.272734][ C0] net_ratelimit: 106050 callbacks suppressed [ 200.272745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.272785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.274644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.278507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.281247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.284829][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.288272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.291582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.295006][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 200.298595][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 200.547255][ T39] audit: type=1400 audit(265407.606:12924): avc: denied { setopt } for pid=14237 comm="syz.4.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 200.679086][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.696859][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.699651][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.704372][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.706770][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 200.708919][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.731142][T14251] Failed to initialize the IGMP autojoin socket (err -2) [ 200.768903][T14256] netlink: 'syz.4.2042': attribute type 2 has an invalid length. [ 200.775243][T14256] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2042'. [ 200.882386][ T64] Bluetooth: hci0: command tx timeout [ 200.889952][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2043'. [ 200.898886][T14258] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2043'. [ 200.905772][T14258] geneve2: entered promiscuous mode [ 200.907334][T14258] geneve2: entered allmulticast mode [ 201.122806][T14268] overlayfs: failed to resolve './file1': -2 [ 201.799776][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.805826][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.810443][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.815352][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.818350][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 201.823901][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.841942][T14305] Failed to initialize the IGMP autojoin socket (err -2) [ 202.910399][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.918240][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.921742][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.926484][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.928906][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 202.931104][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.947304][T14377] Failed to initialize the IGMP autojoin socket (err -2) [ 203.022652][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.024535][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.105878][ T5948] Bluetooth: hci0: command tx timeout [ 204.563109][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.570789][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.573626][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.575960][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.578758][ T64] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 204.580935][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.595441][T14449] Failed to initialize the IGMP autojoin socket (err -2) [ 204.764909][ T39] audit: type=1326 audit(265411.553:12925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.4.2057" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0d85d29 code=0x7ffc0000 [ 204.771933][ T39] audit: type=1326 audit(265411.553:12926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.4.2057" exe="/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fdbd0d85d29 code=0x7ffc0000 [ 204.779583][ T39] audit: type=1326 audit(265411.553:12927): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.4.2057" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0d85d29 code=0x7ffc0000 [ 204.788731][ T39] audit: type=1326 audit(265411.553:12928): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14443 comm="syz.4.2057" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd0d85d29 code=0x7ffc0000 [ 204.891146][ T6002] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 205.032011][ T6002] usb 7-1: device descriptor read/64, error -71 [ 205.297392][ T6002] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 205.329481][ T5948] Bluetooth: hci0: command tx timeout [ 205.447425][ T6002] usb 7-1: device descriptor read/64, error -71 [ 205.577171][ T6002] usb usb7-port1: attempt power cycle [ 205.628766][ C0] net_ratelimit: 103430 callbacks suppressed [ 205.628777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.628883][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.630693][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.634195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.637566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.641042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.644416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.647820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.651211][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.654700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.951538][ T6002] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 205.955324][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 205.960737][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 205.965053][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 205.968299][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 205.970569][ T64] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 205.972905][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.975100][ T6002] usb 7-1: device descriptor read/8, error -71 [ 205.984410][T14532] Failed to initialize the IGMP autojoin socket (err -2) [ 206.249722][ T6002] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 206.281385][ T6002] usb 7-1: device descriptor read/8, error -71 [ 206.398704][ T6002] usb usb7-port1: unable to enumerate USB device [ 207.301508][ T39] audit: type=1400 audit(265413.929:12929): avc: denied { map } for pid=14576 comm="syz.4.2063" path="/345" dev="tmpfs" ino=1991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 207.320490][ T39] audit: type=1400 audit(265413.929:12930): avc: denied { execute } for pid=14576 comm="syz.4.2063" path="/345" dev="tmpfs" ino=1991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 207.375910][T14583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2064'. [ 207.404757][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.411498][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.414886][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.418260][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.420968][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 207.423285][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.436817][T14584] Failed to initialize the IGMP autojoin socket (err -2) [ 207.553114][ T64] Bluetooth: hci0: command tx timeout [ 208.102257][T14199] netdevsim netdevsim0 netdevsim0: renamed from eth14 [ 208.115492][T14199] netdevsim netdevsim0 netdevsim1: renamed from eth15 [ 208.133491][T14199] netdevsim netdevsim0 netdevsim2: renamed from eth16 [ 208.161162][T14199] netdevsim netdevsim0 netdevsim3: renamed from eth17 [ 208.370630][T14199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.374450][T14199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.380108][T14199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.383924][T14199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.388405][T14199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.392358][T14199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.397324][T14199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.404396][T14199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.409486][T14199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.416179][T14199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.420720][T14199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.424507][T14199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.428140][T14199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.432090][T14199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.442492][T14199] wireguard: wg0: Could not create IPv4 socket [ 208.445551][T14199] wireguard: wg1: Could not create IPv4 socket [ 208.448541][T14199] wireguard: wg2: Could not create IPv4 socket [ 209.102431][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.106734][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.109435][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.111762][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.115024][ T5948] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.117953][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.135594][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'. [ 209.185467][T14632] Failed to initialize the IGMP autojoin socket (err -2) [ 209.203049][T14641] loop7: detected capacity change from 0 to 16384 [ 209.320815][T14645] syz.2.2069: attempt to access beyond end of device [ 209.320815][T14645] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 209.324473][T14645] FAT-fs (nbd2): unable to read boot sector [ 209.455608][T14651] 9pnet: Could not find request transport: 0xffffffffffffffff [ 209.511006][ T39] audit: type=1400 audit(265415.996:12931): avc: denied { write } for pid=14640 comm="syz.2.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 209.519489][T14651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2071'. [ 209.548623][T14651] netdevsim netdevsim4: Direct firmware load for ÿ failed with error -2 [ 209.561876][T14651] netdevsim netdevsim4: Falling back to sysfs fallback for: ÿ [ 209.597508][T14654] netlink: 'syz.4.2071': attribute type 13 has an invalid length. [ 209.608391][T14654] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 209.618011][T14654] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 209.620276][T14654] gretap2: entered promiscuous mode [ 209.621824][T14654] gretap2: entered allmulticast mode [ 210.131081][T14682] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2072'. [ 210.134633][T14682] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2072'. [ 210.165537][ T39] audit: type=1400 audit(265416.604:12932): avc: denied { setopt } for pid=14685 comm="syz.2.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 210.302724][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.305751][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.308546][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.317026][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.319833][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.323497][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.326305][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.329214][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.339375][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.342376][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.346653][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.349629][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.352352][T14632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.358843][T14632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.379972][T14632] wireguard: wg0: Could not create IPv4 socket [ 210.384694][T14632] wireguard: wg1: Could not create IPv4 socket [ 210.395960][T14632] wireguard: wg2: Could not create IPv4 socket [ 210.984820][ C0] net_ratelimit: 100722 callbacks suppressed [ 210.984832][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.984939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.986749][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.990233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.993610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.997049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.000376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.003796][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.007231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.010634][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.193815][ T39] audit: type=1400 audit(265417.568:12933): avc: denied { create } for pid=14737 comm="syz.2.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 211.203633][T14742] Failed to initialize the IGMP autojoin socket (err -2) [ 211.209317][ T39] audit: type=1400 audit(265417.577:12934): avc: denied { sys_admin } for pid=14737 comm="syz.2.2075" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 211.403956][ T39] audit: type=1400 audit(265417.764:12935): avc: denied { read } for pid=14762 comm="syz.4.2080" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 211.418546][ T39] audit: type=1400 audit(265417.764:12936): avc: denied { open } for pid=14762 comm="syz.4.2080" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 211.438556][ T39] audit: type=1400 audit(265417.764:12937): avc: denied { ioctl } for pid=14762 comm="syz.4.2080" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 212.123354][T14809] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2084'. [ 212.127781][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 212.133316][T14809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2084'. [ 212.663269][ T57] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 212.847695][ T57] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 212.850271][ T57] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 212.853254][ T57] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 212.856204][ T57] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 212.859434][ T57] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 212.863841][ T57] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 212.867466][ T57] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 212.869822][ T57] usb 9-1: Product: syz [ 212.871094][ T57] usb 9-1: Manufacturer: syz [ 212.879948][ T57] cdc_wdm 9-1:1.0: skipping garbage [ 212.881596][ T57] cdc_wdm 9-1:1.0: skipping garbage [ 212.889624][ T57] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 212.891432][ T57] cdc_wdm 9-1:1.0: Unknown control protocol [ 213.095711][T10973] usb 9-1: USB disconnect, device number 13 [ 213.206347][T14885] bond0: entered promiscuous mode [ 213.207815][T14885] bond_slave_0: entered promiscuous mode [ 213.209875][T14885] bond_slave_1: entered promiscuous mode [ 213.212203][T14885] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 213.226881][T14885] bond0: left promiscuous mode [ 213.228328][T14885] bond_slave_0: left promiscuous mode [ 213.232704][T14885] bond_slave_1: left promiscuous mode [ 213.378298][T14895] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 213.380240][T14895] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 213.383534][T14895] vhci_hcd vhci_hcd.0: Device attached [ 213.385609][T14896] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 213.388162][ T7005] vhci_hcd: stop threads [ 213.389468][ T7005] vhci_hcd: release socket [ 213.391852][ T7005] vhci_hcd: disconnect device [ 214.181668][ T39] audit: type=1400 audit(265420.365:12938): avc: denied { bind } for pid=14906 comm="syz.4.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.183406][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2096'. [ 214.232682][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'. [ 214.333437][T14920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14920 comm=syz.2.2099 [ 214.340281][T14920] netlink: 'syz.2.2099': attribute type 11 has an invalid length. [ 214.342859][T14920] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2099'. [ 214.469951][T14923] block nbd4: Device being setup by another task [ 214.542427][T14940] overlayfs: failed to clone lowerpath [ 214.593254][T14945] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2104'. [ 214.597883][T14945] overlayfs: failed to clone upperpath [ 214.648371][T14950] netlink: 'syz.2.2105': attribute type 2 has an invalid length. [ 215.067297][T14989] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 14989 comm: syz.2.2113) [ 215.072122][ T39] audit: type=1800 audit(265421.197:12939): pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2113" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=51740 res=0 errno=0 [ 215.083068][T14989] netlink: 'syz.2.2113': attribute type 1 has an invalid length. [ 215.085324][T14989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2113'. [ 215.175461][ T5948] block nbd4: Receive control failed (result -32) [ 215.176049][T14917] block nbd4: shutting down sockets [ 216.008283][T15033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.012462][T15033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.030210][T15033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.032848][T15033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.039327][T15033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.052560][T15033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.055621][T15033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.058139][T15033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.060748][T15033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.067505][T15033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.084763][T12882] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 216.340736][ C0] net_ratelimit: 103616 callbacks suppressed [ 216.340747][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.340837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.342649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:6a:95:37:8d:21, vlan:0) [ 216.346139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.349506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.352964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.356688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 216.360015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.363436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:6a:95:37:8d:21, vlan:0) [ 216.366874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 216.605618][ T39] audit: type=1400 audit(265422.628:12940): avc: denied { ioctl } for pid=15059 comm="syz.4.2118" path="socket:[52234]" dev="sockfs" ino=52234 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 216.715851][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.724170][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.739996][T15058] 9p: Unknown access argument 18446744073709551615: -34 [ 216.744139][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.763876][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.774774][ T64] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.782808][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.805327][T15065] Failed to initialize the IGMP autojoin socket (err -2) [ 216.823580][ T64] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 216.870064][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2122'. [ 216.878964][T15082] macsec0: entered promiscuous mode [ 216.927176][T15084] Failed to initialize the IGMP autojoin socket (err -2) [ 217.059989][ T39] audit: type=1400 audit(265423.059:12941): avc: denied { audit_write } for pid=15083 comm="syz.4.2123" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 217.060083][ T64] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 217.170086][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2123'. [ 217.297235][ T39] audit: type=1400 audit(265423.274:12942): avc: denied { ioctl } for pid=15098 comm="syz.4.2125" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 217.322394][T15101] overlayfs: failed to resolve './file0': -2 [ 217.322468][ T39] audit: type=1400 audit(265423.292:12943): avc: denied { setopt } for pid=15100 comm="syz.4.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.333931][T15101] overlayfs: overlapping lowerdir path [ 217.678637][ T39] audit: type=1400 audit(265423.638:12944): avc: denied { bind } for pid=15120 comm="syz.4.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 217.933697][T12882] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 218.019555][ T39] audit: type=1400 audit(265423.957:12945): avc: denied { nlmsg_write } for pid=15128 comm="syz.2.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 218.028396][ T39] audit: type=1400 audit(265423.957:12946): avc: denied { module_load } for pid=15128 comm="syz.2.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 218.034036][T15129] Invalid ELF header type: 0 != 1 [ 218.043765][ T39] audit: type=1400 audit(265423.975:12947): avc: denied { getopt } for pid=15128 comm="syz.2.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 218.095671][T12882] usb 9-1: config 0 has an invalid interface number: 106 but max is 3 [ 218.098097][T12882] usb 9-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 218.100577][T12882] usb 9-1: config 0 has an invalid interface number: 196 but max is 3 [ 218.102891][T12882] usb 9-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 218.115725][T12882] usb 9-1: config 0 has an invalid interface number: 79 but max is 3 [ 218.118114][T12882] usb 9-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 218.120981][T12882] usb 9-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 218.123517][T12882] usb 9-1: config 0 has no interface number 0 [ 218.125279][T12882] usb 9-1: config 0 has no interface number 1 [ 218.133103][T12882] usb 9-1: config 0 has no interface number 2 [ 218.134903][T12882] usb 9-1: config 0 interface 106 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 218.138288][T12882] usb 9-1: config 0 interface 106 altsetting 47 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 218.141453][T12882] usb 9-1: config 0 interface 106 altsetting 47 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 218.144760][T12882] usb 9-1: config 0 interface 196 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 218.148120][T12882] usb 9-1: config 0 interface 196 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 218.151255][T12882] usb 9-1: config 0 interface 196 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 218.154286][T12882] usb 9-1: config 0 interface 196 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 218.157389][T12882] usb 9-1: config 0 interface 196 altsetting 2 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 218.160903][T12882] usb 9-1: config 0 interface 196 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 218.163986][T12882] usb 9-1: config 0 interface 196 altsetting 2 has an invalid endpoint descriptor of length 5, skipping [ 218.168178][T12882] usb 9-1: config 0 interface 196 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 218.171550][T12882] usb 9-1: config 0 interface 196 altsetting 2 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 218.174908][T12882] usb 9-1: config 0 interface 196 altsetting 2 endpoint 0x8F has invalid maxpacket 1023, setting to 64 [ 218.178046][T12882] usb 9-1: config 0 interface 196 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 218.181496][T12882] usb 9-1: config 0 interface 196 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 218.186844][T12882] usb 9-1: config 0 interface 196 altsetting 2 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 218.190915][T12882] usb 9-1: config 0 interface 79 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 218.194805][T12882] usb 9-1: config 0 interface 106 has no altsetting 0 [ 218.196824][T12882] usb 9-1: config 0 interface 196 has no altsetting 0 [ 218.198770][T12882] usb 9-1: config 0 interface 79 has no altsetting 0 [ 218.202368][T12882] usb 9-1: New USB device found, idVendor=1b3d, idProduct=0191, bcdDevice=a1.d7 [ 218.205012][T12882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.207370][T12882] usb 9-1: Product: syz [ 218.208600][T12882] usb 9-1: Manufacturer: 挨⋷︯麕₨ã¿á„´ë¯¢ç†œì‚‡ê áƒ´á½¥æŠáµ„놉ൌᄭ긹ë•膀霎୙៦𥉉䫱쑓æ ã¡ã­”껔따鼃ёå´è®´ì£œá³á¸³è¡‹ì“Œã¤é§ŽæŸ€èªç¦¤Ð´é¼™ì§•ê”䦩㊕纞汪ì¢Òᥪퟟ좖锃䪕ä—è‘å‹ì¶«ä°ì½›å™­á—“⚵附雾礀媻⦨糗딫ࠅ޽ꯕä”ⷿ饰ã®í†šãᯫ鉖ì´ãˆ–⫊施个轰பᔣ멭詄답쵭糶듫 [ 218.218206][T12882] usb 9-1: SerialNumber: syz [ 218.226086][T12882] usb 9-1: config 0 descriptor?? [ 218.229735][T15121] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 218.460296][T12882] ftdi_sio 9-1:0.106: FTDI USB Serial Device converter detected [ 218.474736][T12882] ftdi_sio ttyUSB0: unknown device type: 0xa1d7 [ 218.480992][T12882] ftdi_sio 9-1:0.196: FTDI USB Serial Device converter detected [ 218.483424][T12882] ftdi_sio ttyUSB1: unknown device type: 0xa1d7 [ 218.489885][T12882] ftdi_sio 9-1:0.79: FTDI USB Serial Device converter detected [ 218.492560][T12882] ftdi_sio ttyUSB2: unknown device type: 0xa1d7 [ 218.504779][T12882] usb 9-1: USB disconnect, device number 15 [ 218.509442][T12882] ftdi_sio 9-1:0.106: device disconnected [ 218.513760][T12882] ftdi_sio 9-1:0.196: device disconnected [ 218.516334][T12882] ftdi_sio 9-1:0.79: device disconnected [ 218.996410][T15065] netdevsim netdevsim0 netdevsim0: renamed from eth14 [ 219.013475][ T64] Bluetooth: hci0: command tx timeout [ 219.021036][T15065] netdevsim netdevsim0 netdevsim1: renamed from eth15 [ 219.051418][T15065] netdevsim netdevsim0 netdevsim2: renamed from eth16 [ 219.078475][T15065] netdevsim netdevsim0 netdevsim3: renamed from eth17 [ 219.222900][T15177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.305679][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.318253][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.321442][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.331824][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.338625][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.367373][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.403651][T15182] Failed to initialize the IGMP autojoin socket (err -2) [ 219.444332][T15065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.447342][T15065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.450130][T15065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.457285][T15065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.460901][T15065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.466471][T15065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.470130][T15065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.473848][T15065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.478000][T15065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.481710][T15065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.485471][T15065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.489083][T15065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.492607][T15065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.496307][T15065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.557988][T15065] wireguard: wg0: Could not create IPv4 socket [ 219.562768][T15065] wireguard: wg1: Could not create IPv4 socket [ 219.567471][T15065] wireguard: wg2: Could not create IPv4 socket [ 221.079592][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 221.079602][ T39] audit: type=1400 audit(265426.819:12952): avc: denied { mounton } for pid=15238 comm="syz.4.2144" path="/385/file0" dev="tmpfs" ino=2211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 221.093117][T15239] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 221.147351][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.154659][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.157584][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.160695][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.165452][ T64] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.167639][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.450721][T15241] Failed to initialize the IGMP autojoin socket (err -2) [ 221.604023][T15267] 9pnet_fd: p9_fd_create_tcp (15267): problem creating socket [ 221.696711][ C1] net_ratelimit: 101178 callbacks suppressed [ 221.696722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.696796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.698612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.702003][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.705403][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.708781][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:6a:95:37:8d:21, vlan:0) [ 221.712210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.715580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.719115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.722434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.783003][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 221.895383][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2156'. [ 221.898081][T15296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2156'. [ 221.901177][T15296] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2156'. [ 222.206634][ T39] audit: type=1400 audit(265427.866:12953): avc: denied { accept } for pid=15320 comm="syz.2.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 222.213393][T15322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2160'. [ 222.260433][T15322] 8021q: adding VLAN 0 to HW filter on device bond4 [ 222.654338][T15347] can: request_module (can-proto-0) failed. [ 222.677651][T15347] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2161'. [ 222.685490][T15347] netlink: 'syz.4.2161': attribute type 6 has an invalid length. [ 222.688705][T15347] netlink: 'syz.4.2161': attribute type 5 has an invalid length. [ 222.693816][T15347] netlink: 'syz.4.2161': attribute type 4 has an invalid length. [ 222.704027][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2161'. [ 222.856603][T15358] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2162'. [ 223.018994][T15375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2168'. [ 223.041158][T15375] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.097491][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 223.375276][ T5948] Bluetooth: hci0: command tx timeout [ 223.409828][T15378] netlink: 'syz.4.2168': attribute type 10 has an invalid length. [ 223.412173][T15378] netlink: 'syz.4.2168': attribute type 19 has an invalid length. [ 223.513694][T15385] overlayfs: failed to clone upperpath [ 223.732295][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.735560][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.738945][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.742124][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.745198][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.748499][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.756849][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.759933][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.767294][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.776108][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.779766][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.780051][ T39] audit: type=1400 audit(265429.335:12954): avc: denied { create } for pid=15404 comm="syz.2.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 223.783509][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.795768][ T39] audit: type=1400 audit(265429.344:12955): avc: denied { write } for pid=15404 comm="syz.2.2174" path="socket:[54597]" dev="sockfs" ino=54597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 223.802173][T15241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.806265][T15241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.842043][T15241] wireguard: wg0: Could not create IPv4 socket [ 223.845380][T15241] wireguard: wg1: Could not create IPv4 socket [ 223.849303][T15241] wireguard: wg2: Could not create IPv4 socket [ 224.086601][T15416] netlink: 'syz.2.2179': attribute type 5 has an invalid length. [ 224.118524][ T39] audit: type=1400 audit(265429.653:12956): avc: denied { checkpoint_restore } for pid=15418 comm="syz.2.2180" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.691359][T15444] vlan0: entered promiscuous mode [ 225.215232][T15459] netlink: 'syz.2.2192': attribute type 3 has an invalid length. [ 225.287135][T15469] overlayfs: failed to clone upperpath [ 225.566800][T15497] netlink: 'syz.2.2199': attribute type 10 has an invalid length. [ 227.052785][ C0] net_ratelimit: 99657 callbacks suppressed [ 227.052796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.052893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.054701][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:6a:95:37:8d:21, vlan:0) [ 227.058084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.061404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.064916][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.068310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.071697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.075061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:6a:95:37:8d:21, vlan:0) [ 227.078499][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.216310][T15547] fuse: Unknown parameter 'Ñ.£L¥!li„fd' [ 228.427918][ T39] audit: type=1400 audit(265433.685:12957): avc: denied { write } for pid=15555 comm="syz.4.2206" name="001" dev="devtmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 228.456354][T15556] usb usb4: usbfs: interface 0 claimed by hub while 'syz.4.2206' sets config #8 [ 228.459838][T15556] netlink: 'syz.4.2206': attribute type 43 has an invalid length. [ 228.530208][T15565] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 228.533060][ T39] audit: type=1400 audit(265433.788:12958): avc: denied { load_policy } for pid=15564 comm="syz.4.2208" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 228.538985][T15565] SELinux: failed to load policy [ 229.451175][T15614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59034 sclass=netlink_route_socket pid=15614 comm=syz.4.2209 [ 229.456814][T15614] ipip0: entered promiscuous mode [ 229.481121][ T39] audit: type=1400 audit(265434.676:12959): avc: denied { setopt } for pid=15610 comm="syz.2.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 229.498584][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.504900][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.509666][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.513491][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.516567][ T64] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 229.518764][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.541283][ T39] audit: type=1400 audit(265434.723:12960): avc: denied { remount } for pid=15610 comm="syz.2.2210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 229.803858][T15622] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.826613][T15617] Failed to initialize the IGMP autojoin socket (err -2) [ 230.041927][T15622] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.136090][ T39] audit: type=1400 audit(265435.284:12961): avc: denied { mount } for pid=15639 comm="syz.2.2217" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 230.210209][T15622] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.384874][T15652] __nla_validate_parse: 3 callbacks suppressed [ 230.384888][T15652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2220'. [ 230.395709][T15622] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.523313][T15622] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.550326][T15622] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.556824][T15622] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.577828][T15622] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.704932][ T39] audit: type=1400 audit(265435.817:12962): avc: denied { unmount } for pid=8757 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 230.741355][T15665] netlink: 'syz.2.2224': attribute type 3 has an invalid length. [ 230.743517][T15665] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2224'. [ 230.788710][ T39] audit: type=1400 audit(265435.892:12963): avc: denied { mounton } for pid=15666 comm="syz.4.2225" path="/403/file0" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 230.855030][ T39] audit: type=1400 audit(265435.958:12964): avc: denied { unmount } for pid=8757 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 231.133983][T15691] netlink: 'syz.2.2230': attribute type 13 has an invalid length. [ 231.176606][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2231'. [ 231.241586][T15695] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2231'. [ 231.681984][ T5948] Bluetooth: hci0: command tx timeout [ 232.408733][ C1] net_ratelimit: 103520 callbacks suppressed [ 232.408746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.408802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.410679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.414114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:6a:95:37:8d:21, vlan:0) [ 232.417526][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.420877][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.424217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.427608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.431054][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 232.434433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:6a:95:37:8d:21, vlan:0) [ 232.702881][T15617] netdevsim netdevsim0 netdevsim0: renamed from eth14 [ 232.733767][T15617] netdevsim netdevsim0 netdevsim1: renamed from eth15 [ 232.758399][T15617] netdevsim netdevsim0 netdevsim2: renamed from eth16 [ 232.976935][T15617] netdevsim netdevsim0 netdevsim3: renamed from eth17 [ 233.427929][T15777] 9pnet_fd: p9_fd_create_unix (15777): problem connecting socket: ./file2: -2 [ 233.431628][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.442745][T15777] debugfs: Bad value for 'uid' [ 233.444154][T15777] debugfs: Bad value for 'uid' [ 233.445396][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.450201][ T39] audit: type=1400 audit(265438.371:12965): avc: denied { mount } for pid=15769 comm="syz.4.2238" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 233.451106][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.465015][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.468757][ T64] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.470857][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.494063][T15780] Failed to initialize the IGMP autojoin socket (err -2) [ 233.496290][ T39] audit: type=1400 audit(265438.371:12966): avc: denied { remount } for pid=15769 comm="syz.4.2238" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 233.523359][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.526327][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.529056][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.532094][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.534881][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.537835][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.540747][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.547206][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.551236][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.554777][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.557740][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.560970][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.564074][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.567044][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.641992][T15617] wireguard: wg0: Could not create IPv4 socket [ 233.647174][T15617] wireguard: wg1: Could not create IPv4 socket [ 233.656436][T15617] wireguard: wg2: Could not create IPv4 socket [ 234.315282][ T39] audit: type=1400 audit(265439.194:12967): avc: denied { unmount } for pid=8757 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 234.535514][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2243'. [ 234.546236][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2243'. [ 234.744493][T15807] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 234.744493][T15807] The task syz.2.2244 (15807) triggered the difference, watch for misbehavior. [ 234.892831][T15808] can0: slcan on ttyS3. [ 234.943441][T15808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2245'. [ 235.690912][ T64] Bluetooth: hci3: command tx timeout [ 235.970889][T15811] can0 (unregistered): slcan off ttyS3. [ 237.182165][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.191262][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.194069][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.197190][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.201620][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.204986][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.207818][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.224209][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.242254][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.245274][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.248715][T15891] rdma_rxe: rxe_newlink: failed to add lo [ 237.259595][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.263739][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.266630][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.275046][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.304218][T15780] wireguard: wg0: Could not create IPv4 socket [ 237.317151][T15780] wireguard: wg1: Could not create IPv4 socket [ 237.328852][T15780] wireguard: wg2: Could not create IPv4 socket [ 237.404001][T15899] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2255'. [ 237.764761][ C1] net_ratelimit: 104521 callbacks suppressed [ 237.764774][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.764875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:6a:95:37:8d:21, vlan:0) [ 237.766703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.770105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.773554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.777010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 237.780421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.784681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:6a:95:37:8d:21, vlan:0) [ 237.788445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 237.792836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 241.799799][ T39] audit: type=1400 audit(268006.198:12968): avc: denied { map } for pid=16011 comm="syz.4.2273" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 241.829976][ T39] audit: type=1400 audit(268006.198:12969): avc: denied { execute } for pid=16011 comm="syz.4.2273" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 241.923093][T16012] x86/PAT: syz.4.2273:16012 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 243.120751][ C1] net_ratelimit: 100654 callbacks suppressed [ 243.120763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.121196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:6a:95:37:8d:21, vlan:0) [ 243.123011][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.125889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.129096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.132391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.135661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.138950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:6a:95:37:8d:21, vlan:0) [ 243.142414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.145765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.216778][ T39] audit: type=1400 audit(268007.517:12970): avc: denied { watch watch_reads } for pid=16049 comm="syz.2.2279" path="pipe:[728]" dev="pipefs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 243.317497][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.327637][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.336915][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.339202][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.342227][ T64] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 243.344828][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.576587][T16055] Failed to initialize the IGMP autojoin socket (err -2) [ 243.772918][ T57] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 243.934672][ T57] usb 9-1: Using ep0 maxpacket: 8 [ 243.959324][ T57] usb 9-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 243.961956][ T57] usb 9-1: config 167 has 0 interfaces, different from the descriptor's value: 202 [ 243.972379][ T57] usb 9-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 243.975050][ T57] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.982001][ T57] usb 9-1: Product: syz [ 243.983255][ T57] usb 9-1: Manufacturer: syz [ 243.984600][ T57] usb 9-1: SerialNumber: syz [ 244.036435][ T39] audit: type=1326 audit(268008.284:12971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16089 comm="syz.2.2282" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f53585d29 code=0x0 [ 244.208179][T16064] netlink: 'syz.4.2277': attribute type 1 has an invalid length. [ 244.213625][ T57] usb 9-1: USB disconnect, device number 16 [ 244.962842][T16113] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2283'. [ 245.203297][ T39] audit: type=1400 audit(268009.378:12972): avc: denied { ioctl } for pid=16131 comm="syz.2.2285" path="socket:[57960]" dev="sockfs" ino=57960 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 245.476026][T16141] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 245.526247][ T64] Bluetooth: hci0: command tx timeout [ 245.623518][T16141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2287'. [ 245.744991][T16141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16141 comm=syz.2.2287 [ 246.242813][T16173] [ 246.243600][T16173] ====================================================== [ 246.245636][T16173] WARNING: possible circular locking dependency detected [ 246.247768][T16173] 6.13.0-syzkaller #0 Not tainted [ 246.249252][T16173] ------------------------------------------------------ [ 246.252900][T16173] syz.4.2293/16173 is trying to acquire lock: [ 246.255000][T16173] ffff888025485f00 (&q->limits_lock){+.+.}-{4:4}, at: loop_reconfigure_limits+0x407/0x8c0 [ 246.258732][T16173] [ 246.258732][T16173] but task is already holding lock: [ 246.261539][T16173] ffff8880254858b0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x8f5/0x18b0 [ 246.265166][T16173] [ 246.265166][T16173] which lock already depends on the new lock. [ 246.265166][T16173] [ 246.269146][T16173] [ 246.269146][T16173] the existing dependency chain (in reverse order) is: [ 246.272773][T16173] [ 246.272773][T16173] -> #5 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 246.276245][T16173] blk_mq_submit_bio+0x1fb6/0x24c0 [ 246.278521][T16173] __submit_bio+0x384/0x540 [ 246.280528][T16173] submit_bio_noacct_nocheck+0x698/0xd70 [ 246.282708][T16173] submit_bio_noacct+0x93a/0x1e20 [ 246.284796][T16173] mpage_readahead+0x41d/0x590 [ 246.286951][T16173] read_pages+0x1a8/0xdc0 [ 246.288981][T16173] page_cache_ra_unbounded+0x3dc/0x750 [ 246.291310][T16173] page_cache_ra_order+0x8f2/0xc80 [ 246.293498][T16173] page_cache_sync_ra+0x4b4/0x9c0 [ 246.295721][T16173] filemap_get_pages+0xd7b/0x1be0 [ 246.298045][T16173] filemap_splice_read+0x5cc/0xd00 [ 246.300343][T16173] do_splice_read+0x282/0x370 [ 246.302440][T16173] splice_direct_to_actor+0x2a4/0xa40 [ 246.304840][T16173] do_splice_direct+0x178/0x250 [ 246.306988][T16173] do_sendfile+0xaed/0xe30 [ 246.308987][T16173] __x64_sys_sendfile64+0x1da/0x220 [ 246.310938][T16173] do_syscall_64+0xcd/0x250 [ 246.312420][T16173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.314271][T16173] [ 246.314271][T16173] -> #4 (mapping.invalidate_lock#2){++++}-{4:4}: [ 246.316860][T16173] down_read+0x9a/0x330 [ 246.318232][T16173] filemap_fault+0x62c/0x2820 [ 246.319746][T16173] __do_fault+0x10a/0x490 [ 246.321254][T16173] do_pte_missing+0xebd/0x3e00 [ 246.322774][T16173] __handle_mm_fault+0x103c/0x2a40 [ 246.324952][T16173] handle_mm_fault+0x3fa/0xaa0 [ 246.326861][T16173] do_user_addr_fault+0x7a3/0x13f0 [ 246.328541][T16173] exc_page_fault+0x5c/0xc0 [ 246.330106][T16173] asm_exc_page_fault+0x26/0x30 [ 246.331730][T16173] _copy_from_iter+0x380/0x1560 [ 246.333295][T16173] tipc_msg_build+0x308/0x1120 [ 246.334849][T16173] __tipc_sendstream+0x6fa/0x1190 [ 246.336455][T16173] tipc_sendstream+0x4f/0x70 [ 246.337921][T16173] sock_write_iter+0x4fe/0x5b0 [ 246.339448][T16173] vfs_write+0x5ae/0x1150 [ 246.340900][T16173] ksys_write+0x207/0x250 [ 246.342385][T16173] do_syscall_64+0xcd/0x250 [ 246.343849][T16173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.345728][T16173] [ 246.345728][T16173] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 246.347890][T16173] __might_fault+0x11b/0x190 [ 246.349392][T16173] _copy_from_user+0x29/0xd0 [ 246.351266][T16173] __blk_trace_setup+0xa8/0x180 [ 246.353422][T16173] blk_trace_ioctl+0x163/0x290 [ 246.355131][T16173] blkdev_ioctl+0x109/0x6d0 [ 246.356620][T16173] __x64_sys_ioctl+0x190/0x200 [ 246.358146][T16173] do_syscall_64+0xcd/0x250 [ 246.359651][T16173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.362013][T16173] [ 246.362013][T16173] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 246.365062][T16173] __mutex_lock+0x19b/0xa60 [ 246.367074][T16173] blk_mq_init_sched+0x42b/0x640 [ 246.369336][T16173] elevator_init_mq+0x2cd/0x420 [ 246.371458][T16173] add_disk_fwnode+0x113/0x1300 [ 246.373667][T16173] sd_probe+0xa86/0x1000 [ 246.375657][T16173] really_probe+0x23e/0xa90 [ 246.377691][T16173] __driver_probe_device+0x1de/0x440 [ 246.380088][T16173] driver_probe_device+0x4c/0x1b0 [ 246.382271][T16173] __device_attach_driver+0x1df/0x310 [ 246.384680][T16173] bus_for_each_drv+0x157/0x1e0 [ 246.386872][T16173] __device_attach_async_helper+0x1d3/0x290 [ 246.389534][T16173] async_run_entry_fn+0x9c/0x530 [ 246.391752][T16173] process_one_work+0x9c5/0x1ba0 [ 246.393992][T16173] worker_thread+0x6c8/0xf00 [ 246.396105][T16173] kthread+0x2c1/0x3a0 [ 246.397922][T16173] ret_from_fork+0x45/0x80 [ 246.399401][T16173] ret_from_fork_asm+0x1a/0x30 [ 246.401061][T16173] [ 246.401061][T16173] -> #1 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 246.403670][T16173] blk_queue_enter+0x50f/0x640 [ 246.405259][T16173] blk_mq_alloc_request+0x59b/0x950 [ 246.406954][T16173] scsi_execute_cmd+0x1da/0xf40 [ 246.408566][T16173] read_capacity_16+0x213/0xe10 [ 246.410633][T16173] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 246.412691][T16173] sd_probe+0x904/0x1000 [ 246.414148][T16173] really_probe+0x23e/0xa90 [ 246.415644][T16173] __driver_probe_device+0x1de/0x440 [ 246.417414][T16173] driver_probe_device+0x4c/0x1b0 [ 246.419125][T16173] __device_attach_driver+0x1df/0x310 [ 246.421421][T16173] bus_for_each_drv+0x157/0x1e0 [ 246.423561][T16173] __device_attach_async_helper+0x1d3/0x290 [ 246.426091][T16173] async_run_entry_fn+0x9c/0x530 [ 246.428317][T16173] process_one_work+0x9c5/0x1ba0 [ 246.430470][T16173] worker_thread+0x6c8/0xf00 [ 246.432443][T16173] kthread+0x2c1/0x3a0 [ 246.434314][T16173] ret_from_fork+0x45/0x80 [ 246.436281][T16173] ret_from_fork_asm+0x1a/0x30 [ 246.438385][T16173] [ 246.438385][T16173] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 246.440945][T16173] __lock_acquire+0x249e/0x3c40 [ 246.442551][T16173] lock_acquire.part.0+0x11b/0x380 [ 246.444195][T16173] __mutex_lock+0x19b/0xa60 [ 246.445764][T16173] loop_reconfigure_limits+0x407/0x8c0 [ 246.447564][T16173] lo_ioctl+0x901/0x18b0 [ 246.448997][T16173] blkdev_ioctl+0x276/0x6d0 [ 246.450754][T16173] __x64_sys_ioctl+0x190/0x200 [ 246.452505][T16173] do_syscall_64+0xcd/0x250 [ 246.454013][T16173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.455941][T16173] [ 246.455941][T16173] other info that might help us debug this: [ 246.455941][T16173] [ 246.458910][T16173] Chain exists of: [ 246.458910][T16173] &q->limits_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#24 [ 246.458910][T16173] [ 246.463493][T16173] Possible unsafe locking scenario: [ 246.463493][T16173] [ 246.466297][T16173] CPU0 CPU1 [ 246.468332][T16173] ---- ---- [ 246.470033][T16173] lock(&q->q_usage_counter(io)#24); [ 246.471684][T16173] lock(mapping.invalidate_lock#2); [ 246.474267][T16173] lock(&q->q_usage_counter(io)#24); [ 246.476614][T16173] lock(&q->limits_lock); [ 246.477940][T16173] [ 246.477940][T16173] *** DEADLOCK *** [ 246.477940][T16173] [ 246.480446][T16173] 3 locks held by syz.4.2293/16173: [ 246.482054][T16173] #0: ffff888025833b60 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x771/0x18b0 [ 246.484736][T16173] #1: ffff8880254858b0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x8f5/0x18b0 [ 246.487884][T16173] #2: ffff8880254858e8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x8f5/0x18b0 [ 246.491483][T16173] [ 246.491483][T16173] stack backtrace: [ 246.493352][T16173] CPU: 2 UID: 0 PID: 16173 Comm: syz.4.2293 Not tainted 6.13.0-syzkaller #0 [ 246.496521][T16173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.500412][T16173] Call Trace: [ 246.501421][T16173] [ 246.502330][T16173] dump_stack_lvl+0x116/0x1f0 [ 246.504157][T16173] print_circular_bug+0x419/0x5d0 [ 246.506168][T16173] check_noncircular+0x31a/0x400 [ 246.508230][T16173] ? __pfx_check_noncircular+0x10/0x10 [ 246.510411][T16173] ? add_lock_to_list+0x17d/0x390 [ 246.512436][T16173] __lock_acquire+0x249e/0x3c40 [ 246.514070][T16173] ? __pfx___lock_acquire+0x10/0x10 [ 246.516102][T16173] ? __pfx_lock_release+0x10/0x10 [ 246.517909][T16173] ? trace_lock_acquire+0x14e/0x1f0 [ 246.519447][T16173] lock_acquire.part.0+0x11b/0x380 [ 246.521212][T16173] ? loop_reconfigure_limits+0x407/0x8c0 [ 246.522910][T16173] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 246.524992][T16173] ? rcu_is_watching+0x12/0xc0 [ 246.526867][T16173] ? trace_lock_acquire+0x14e/0x1f0 [ 246.528873][T16173] ? avc_has_perm+0x11b/0x1c0 [ 246.530705][T16173] ? loop_reconfigure_limits+0x407/0x8c0 [ 246.532898][T16173] ? lock_acquire+0x2f/0xb0 [ 246.534367][T16173] ? loop_reconfigure_limits+0x407/0x8c0 [ 246.536067][T16173] __mutex_lock+0x19b/0xa60 [ 246.537432][T16173] ? loop_reconfigure_limits+0x407/0x8c0 [ 246.539098][T16173] ? __pfx_mark_lock+0x10/0x10 [ 246.540628][T16173] ? loop_reconfigure_limits+0x407/0x8c0 [ 246.542322][T16173] ? selinux_sb_statfs+0x1e6/0x2b0 [ 246.543886][T16173] ? __pfx___mutex_lock+0x10/0x10 [ 246.545433][T16173] ? shmem_statfs+0x1bb/0x3f0 [ 246.546971][T16173] ? vfs_statfs.part.0.isra.0+0x208/0x270 [ 246.549216][T16173] ? loop_reconfigure_limits+0x407/0x8c0 [ 246.551474][T16173] loop_reconfigure_limits+0x407/0x8c0 [ 246.553661][T16173] ? hlock_class+0x4e/0x130 [ 246.555493][T16173] ? mark_lock+0xb5/0xc60 [ 246.557258][T16173] ? __pfx___lock_acquire+0x10/0x10 [ 246.559328][T16173] ? __pfx_mark_lock+0x10/0x10 [ 246.561237][T16173] ? lock_acquire.part.0+0x11b/0x380 [ 246.563355][T16173] ? __pfx_loop_reconfigure_limits+0x10/0x10 [ 246.565753][T16173] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 246.568126][T16173] ? lockdep_hardirqs_on+0x7c/0x110 [ 246.570154][T16173] ? lo_ioctl+0x8f5/0x18b0 [ 246.571886][T16173] lo_ioctl+0x901/0x18b0 [ 246.573565][T16173] ? __pfx_lo_ioctl+0x10/0x10 [ 246.575410][T16173] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 246.577727][T16173] ? tomoyo_path_number_perm+0x298/0x590 [ 246.579970][T16173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.581874][T16173] ? blkdev_common_ioctl+0x1d9/0x2220 [ 246.584021][T16173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.586331][T16173] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 246.588505][T16173] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 246.590006][T16173] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 246.591923][T16173] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 246.593867][T16173] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 246.595935][T16173] ? __pfx_lock_release+0x10/0x10 [ 246.597428][T16173] ? __pfx_lo_ioctl+0x10/0x10 [ 246.598821][T16173] blkdev_ioctl+0x276/0x6d0 [ 246.600147][T16173] ? __pfx_blkdev_ioctl+0x10/0x10 [ 246.601650][T16173] ? selinux_file_ioctl+0x180/0x270 [ 246.603206][T16173] ? selinux_file_ioctl+0xb4/0x270 [ 246.604703][T16173] ? __pfx_blkdev_ioctl+0x10/0x10 [ 246.606421][T16173] __x64_sys_ioctl+0x190/0x200 [ 246.608380][T16173] do_syscall_64+0xcd/0x250 [ 246.610014][T16173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.612070][T16173] RIP: 0033:0x7fdbd0d85d29 [ 246.613700][T16173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.620348][T16173] RSP: 002b:00007fdbd1ae0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.623464][T16173] RAX: ffffffffffffffda RBX: 00007fdbd0f76320 RCX: 00007fdbd0d85d29 [ 246.626284][T16173] RDX: 0000000000010000 RSI: 0000000000004c09 RDI: 000000000000000d [ 246.628581][T16173] RBP: 00007fdbd0e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 246.630851][T16173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.633135][T16173] R13: 0000000000000000 R14: 00007fdbd0f76320 R15: 00007ffeb19bdfa8 [ 246.635966][T16173] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 246.654151][ T39] audit: type=1400 audit(268010.725:12973): avc: denied { write } for pid=5932 comm="syz-executor" path="pipe:[3766]" dev="pipefs" ino=3766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 246.744263][T16173] Invalid logical block size (65536) [ 247.004259][T16173] bond0: (slave syz_tun): Releasing backup interface [ 247.749886][ T64] Bluetooth: hci0: command tx timeout [ 248.476712][ C1] net_ratelimit: 123468 callbacks suppressed [ 248.476726][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.476793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.478565][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.482517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:6a:95:37:8d:21, vlan:0) [ 248.485967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.490228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.493664][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.498193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.501553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.504901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.832713][ C0] net_ratelimit: 159867 callbacks suppressed [ 253.832726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.832790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.834676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.839062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.842403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:6a:95:37:8d:21, vlan:0) [ 253.846884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.850214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.854855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.858108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.861552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) VM DIAGNOSIS: 00:36:47 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff888029758b40 RCX=1ffffffff20bf5f6 RDX=ffff88801d290000 RSI=fffff52000026d23 RDI=ffffffff815c5a44 RBP=1ffff92000026d6a RSP=ffffc90000136b10 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff905f7c97 R11=0000000000000b92 R12=0000000000000000 R13=0000000000000010 R14=ffff888029758b98 R15=ffff88804f10cf98 RIP=ffffffff89fdfa14 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c32540c CR3=0000000032988000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefee000 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055ad7fad7bf0 000055ad7fac0e20 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b0883316dab6e6f 737326db560840b8 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737302 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 000055ad7fac0d00 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e313a302d312f31 6273752f302e6431 3a30303a30303030 2f30303a30303030 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 187bf0421ed81d1c 000055a8257b5527 0000000000000031 0000000000000030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a373236303a4c22 09cf34302e796e70 7d646a752d322f32 6273750e372e6431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7fbffffe3cfffffe 7fffffff3f7d7fff 7fffffff7ffa7ff7 7fffffff3f7f7677 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633383a3a2632 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 187500341e681d1c 0000556e25303369 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000002f 183200311e321d1c 0000302e252e3030 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=00000000dead4ead RBX=ffffffff9aa0d180 RCX=ffffffff84a5b3cf RDX=0000000000000000 RSI=ffffffff8bd21720 RDI=ffffffff9aa0d184 RBP=1ffff920000d0c88 RSP=ffffc90000686438 R8 =0000000000000000 R9 =fffffbfff20bef92 R10=ffffffff905f7c97 R11=0000000000000b92 R12=ffffffff9aa0d178 R13=0000000000000c77 R14=0000000000000000 R15=ffff8880410d9e00 RIP=ffffffff817732ba RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005584d8ad5300 CR3=0000000028a14000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=ad8caed32efd26f2 98fec26c3afef1b6 ad8caed32efd26f2 98fec26c3afef1b6 ad8caed32efd26f2 98fec26c3afef1b6 ad8caed32efd26f2 98fec26c3afef1b6 ZMM18=c7aec286ba99bb58 3a1ff93fca796afd c7aec286ba99bb58 3a1ff93fca796afd c7aec286ba99bb58 3a1ff93fca796afd c7aec286ba99bb58 3a1ff93fca796afd ZMM19=a60c000000000000 0000000000000012 a60c000000000000 0000000000000011 a60c000000000000 0000000000000010 a60c000000000000 000000000000000f ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=98fec26c98fec26c 98fec26c98fec26c 98fec26c98fec26c 98fec26c98fec26c 98fec26c98fec26c 98fec26c98fec26c 98fec26c98fec26c 98fec26c98fec26c ZMM22=2efd26f22efd26f2 2efd26f22efd26f2 2efd26f22efd26f2 2efd26f22efd26f2 2efd26f22efd26f2 2efd26f22efd26f2 2efd26f22efd26f2 2efd26f22efd26f2 ZMM23=ad8caed3ad8caed3 ad8caed3ad8caed3 ad8caed3ad8caed3 ad8caed3ad8caed3 ad8caed3ad8caed3 ad8caed3ad8caed3 ad8caed3ad8caed3 ad8caed3ad8caed3 ZMM24=ca796afdca796afd ca796afdca796afd ca796afdca796afd ca796afdca796afd ca796afdca796afd ca796afdca796afd ca796afdca796afd ca796afdca796afd ZMM25=3a1ff93f3a1ff93f 3a1ff93f3a1ff93f 3a1ff93f3a1ff93f 3a1ff93f3a1ff93f 3a1ff93f3a1ff93f 3a1ff93f3a1ff93f 3a1ff93f3a1ff93f 3a1ff93f3a1ff93f ZMM26=ba99bb58ba99bb58 ba99bb58ba99bb58 ba99bb58ba99bb58 ba99bb58ba99bb58 ba99bb58ba99bb58 ba99bb58ba99bb58 ba99bb58ba99bb58 ba99bb58ba99bb58 ZMM27=c7aec286c7aec286 c7aec286c7aec286 c7aec286c7aec286 c7aec286c7aec286 c7aec286c7aec286 c7aec286c7aec286 c7aec286c7aec286 c7aec286c7aec286 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a60c0000a60c0000 a60c0000a60c0000 a60c0000a60c0000 a60c0000a60c0000 a60c0000a60c0000 a60c0000a60c0000 a60c0000a60c0000 a60c0000a60c0000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851bf415 RDI=ffffffff9ab15b20 RBP=ffffffff9ab15ae0 RSP=ffffc90005726e18 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff851bf3b0 R15=0000000000000000 RIP=ffffffff851bf43f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fdbd1ae06c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdbd1adff98 CR3=0000000060536000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2e8a91e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f53602a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f53602aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f53602aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f53602ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f53602b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f53602c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff888031b80a00 RCX=ffffffff891e0310 RDX=ffff88801d6ec880 RSI=0000000000000000 RDI=0000000000000004 RBP=dffffc0000000000 RSP=ffffc900006deb48 R8 =0000000000000004 R9 =0000000000000000 R10=00000000ffffffff R11=0000000000000b92 R12=0000000000000000 R13=ffffc900006dee20 R14=ffff888032853980 R15=00000000ffffffff RIP=ffffffff819a144c RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2ae0d7 CR3=000000002a7f6000 CR4=00352ef0 DR0=000000000000126c DR1=0000000000000003 DR2=0000000000000081 DR3=0000000000000002 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2e8a91e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f53602a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f53602aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f53602aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f53602ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f53602b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f53602c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000