last executing test programs: 2m25.800951764s ago: executing program 0 (id=340): syz_emit_ethernet(0x7d, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffff0000420d000086dd60fec00000473a00200000000000000000000000000102009078000000006018b0880000020000000000"], 0x0) io_uring_setup(0xcfe, &(0x7f00000003c0)={0x0, 0x0, 0x2000, 0x6, 0x289}) r0 = syz_io_uring_setup(0xb71, &(0x7f0000000080)={0x0, 0x0, 0x400, 0xc, 0x2d2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x6) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00005b4000/0x2000)=nil, 0x2000, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0x1000100000, 0x12) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000080)=0x12, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0xda7a22dd6402d221, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8, 0x4) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m25.700639964s ago: executing program 0 (id=349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 2m25.699937831s ago: executing program 0 (id=352): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 2m25.640684508s ago: executing program 0 (id=355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m25.590396911s ago: executing program 0 (id=357): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) close(r2) 2m25.330436009s ago: executing program 0 (id=369): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usbip_server_init(0x1) 2m25.285507223s ago: executing program 32 (id=369): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usbip_server_init(0x1) 1m18.980570952s ago: executing program 4 (id=2528): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0) 1m18.888579598s ago: executing program 4 (id=2529): creat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1m18.768905087s ago: executing program 4 (id=2532): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000100)=[r1, r2, r2], 0x3, 0x800}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000009e0000009500"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x60000}]}, 0x28}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', @broadcast}) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x58, 0x30, 0x871a15abc695fb3d, 0x4c, 0x0, {}, [{0x44, 0x1, [@m_gact={0x40, 0x1d, 0x0, 0x0, {{0x9}, {0x4}, {0x11, 0x6, "17512cea0700000000000000ac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x58}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084040000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000000c00000002000000002000000000001304000080"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={'nicvf0\x00', 0x0}) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x10) (async) ioctl$TCFLSH(r7, 0x404c4701, 0x20000000) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0xf9) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000005c0)=0x3f) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x3) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)=0x3) 1m18.660857674s ago: executing program 4 (id=2533): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = dup(r0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000140)={0x36, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x40106308}], 0x0, 0x1000000, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121c82, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '', 0x3a, 'syz\x00', 0x3a, './file0'}, 0x2b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m18.560192732s ago: executing program 4 (id=2534): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x305800, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x52}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x6, r1, 0x0, r2}) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) mknod(0x0, 0x1, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r6, 0xc048aeca, &(0x7f0000000200)) 1m18.250787546s ago: executing program 4 (id=2535): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, &(0x7f0000002dc0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000009c0)={0x13, 0x10, 0xfa00, {&(0x7f00000007c0), r2, 0x1}}, 0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc12", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) 1m18.241102871s ago: executing program 33 (id=2535): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, &(0x7f0000002dc0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000009c0)={0x13, 0x10, 0xfa00, {&(0x7f00000007c0), r2, 0x1}}, 0x18) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc12", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) 1m18.200648994s ago: executing program 1 (id=2537): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 1m18.196934163s ago: executing program 1 (id=2539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16], 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200fcff907800000000e00000012001880b0008ffffffffffffffff000000000000"], 0x0) 1m18.128678275s ago: executing program 1 (id=2540): creat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1m18.017961259s ago: executing program 1 (id=2541): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = dup(r0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000140)={0x36, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper={0x40106308}], 0x0, 0x1000000, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121c82, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '', 0x3a, 'syz\x00', 0x3a, './file0'}, 0x2b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m17.899495294s ago: executing program 1 (id=2543): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (fail_nth: 3) 1m17.480162816s ago: executing program 1 (id=2552): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}]}}]}, 0x38}}, 0x44080) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xcf88, 0x44, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x6400}, 0x1c) 1m17.446473385s ago: executing program 34 (id=2552): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}]}}]}, 0x38}}, 0x44080) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xcf88, 0x44, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x6400}, 0x1c) 43.650433602s ago: executing program 6 (id=3009): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008801, &(0x7f00000000c0)={0x11, 0x3, r1, 0x1, 0xfd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) r2 = dup3(r0, r0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x10000, 0x0, 0x100, 0xffffffffffffffff, 0x4, '\x00', r1, r2, 0x4, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 39.869360256s ago: executing program 6 (id=3009): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008801, &(0x7f00000000c0)={0x11, 0x3, r1, 0x1, 0xfd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) r2 = dup3(r0, r0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x10000, 0x0, 0x100, 0xffffffffffffffff, 0x4, '\x00', r1, r2, 0x4, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 33.182077213s ago: executing program 6 (id=3009): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008801, &(0x7f00000000c0)={0x11, 0x3, r1, 0x1, 0xfd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) r2 = dup3(r0, r0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x10000, 0x0, 0x100, 0xffffffffffffffff, 0x4, '\x00', r1, r2, 0x4, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 32.389255731s ago: executing program 5 (id=3135): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) socket$inet6(0xa, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r4) sendmmsg$alg(r4, &(0x7f0000006c40)=[{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000080)="fd12499b9ea485b25b0f64a429ea08dd0c2bf2", 0x13}, {&(0x7f0000000400)="dfbd67ddbdd972fd8e3b404f00b02655d24e4ef870af4ca16a4b134c00d9482dc69cb5cedfa96a6eacb807e1faf3a90179f53591adb3b1514e96ec3d006d4ce304ed0f40ec5bd71081523e4152eaac4a35772e374c3efb05ae21385beea2a354753f32004fb85b3737eb43726a6ee214f1c93b702ecf85c382eeead7eda369c39bebb9725ccd838997f65397de9e0f943e570b7bd92c644e66433a585b79fce114fcc7ae53501bf3e771672cc7284eed4f085ebaf5a5e8edf9d6b73ebd6615e9b58796cec4e66ccca7345402fcd9e25355635e3e9e2a9a7a1377a7f729eba3480f5612d8efdc8cc8f4071f4b7a", 0xed}], 0x2, 0x0, 0x0, 0x404c0c0}], 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x8000}, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) r5 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x7fffffffffffffff}) r9 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x8082, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) 31.539883416s ago: executing program 5 (id=3136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x4}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r5) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x84}}, 0x8020) close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getpid() ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random='\a\x00'}) dup(r0) 31.539543273s ago: executing program 5 (id=3137): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8100) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = gettid() prlimit64(r2, 0x0, &(0x7f00000000c0)={0x0, 0x3}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000140)=0x7) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x3) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000180)={0x5, 0x3}) r4 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000001c0)=0x6ef, 0x4) ptrace$peekuser(0x3, r3, 0xc000000000000000) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000240)={0x0, 0x8, 0x3, &(0x7f0000000200)={0x13, "66ec8ab56d5ca1eab0456a1de57ac1a17c80800d90dd6a84e2c2dd2f5afa39559a"}}) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000280)={0x80}) prlimit64(r2, 0x4, &(0x7f0000000340)={0x6, 0x136e91f}, &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x501000, 0x0) r6 = geteuid() lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000500)={0x9, 0x7, {r2}, {0xffffffffffffffff}, 0x6, 0x1}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000000640)=0xe8) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r4, {0x0, 0x0}}, './file0\x00'}) statx(r5, &(0x7f0000000780)='./file0\x00', 0x1000, 0x4, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {0x1, 0x2}, [{0x2, 0x2, r6}, {0x2, 0x2, r7}, {0x2, 0x3, r8}, {0x2, 0x7, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x2, 0xee01}, {0x2, 0x1, r9}, {0x2, 0x7, r10}], {0x4, 0x2}, [{0x8, 0x5, r12}, {0x8, 0x1, r13}], {0x10, 0x2}, {0x20, 0x1}}, 0x74, 0x1) r14 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r14, &(0x7f0000000cc0)={&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/193, 0xc1}, {&(0x7f0000000ac0)=""/111, 0x6f}, {&(0x7f0000000b40)=""/59, 0x3b}, {&(0x7f0000000b80)=""/108, 0x6c}], 0x4, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000d00)={0x0, 0x8}, &(0x7f0000000d40)=0x8) mount$bind(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x8a800, 0x0) 31.439701867s ago: executing program 5 (id=3138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000264, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000a8f7ca68ce542479f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000100)) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f00000000c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = getpgrp(0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r9 = syz_open_dev$admmidi(&(0x7f0000002f00), 0x101, 0x640901) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002f40)={0x0, 0x0}) getresuid(&(0x7f0000002fc0)=0x0, &(0x7f0000003000), &(0x7f0000003040)) r12 = gettid() tkill(r12, 0xb) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000003080)=0x0) r14 = getpgid(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000030c0)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee01}}, './file0\x00'}) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f00000032c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000380)="0dd8d4f68d8b6f030d14ca0956", 0xd}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20, 0x1}}, {{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x10}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f00000005c0)="d3ed9a9efbcd48aa253b197f121e2f3c59a676a4820792264e01f1cbe3a74bb13e350b646c0b9203e276c6a53ac7dace6cec8b779028195700d06f0e46a7753b9ee446a5fb11b03668e74d86b2d930e2c3163fdf76c2acd0bf709821e9b40ef536697f433e4bbe8711ddd03ddc6bf5eec39ea02e4a1536aa52046c", 0x7b}, {&(0x7f00000006c0)="99b7926d88cd2db869303c567dfa170eb11944ac260230219800346048746db5c3086ef87bcccdaa29998831f23c76e9e963a3f3b3adf5fab4ec24bdd3183666ffb8c4c72a74ba024080cf0912cfc5099e697c243e2f314c64b09945fe858a8f172bd982a7a7b12df0320b0d6d649e964833a8b49a4041eb33c570", 0x7b}, {&(0x7f0000000740)="d37719a22717d14c37e256eaea0c73edc96f2d1ea69b1e8ef74bb8f8d54cbeebc0d13ba37279cfda01d8aef535dedf7d26ca04893505137c0e32bf3a96ff23c87a664eff3d35830ee8707bf096547936050b65ceae1e0bc7eee13507ff5028fd381d3f668167d5b1f798fb0770f033428dff757b08f7b471c97dcd5888d80c64f857f887c9e24462898d56dd80", 0x8d}], 0x4, &(0x7f0000001b00)=[@rights={{0x38, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r3, r0, r1, 0xffffffffffffffff, r5, r5, r5]}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r1, r5, r0, r3]}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff, r6, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, 0xffffffffffffffff}}}], 0x100, 0x10}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001c00)="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", 0x1000}, {&(0x7f00000009c0)="4673e28790", 0x5}, {&(0x7f0000000a00)="158b8e19f7cf9ba3cc9bb5632493fcaa609be131c9db8a8146d0fe562f4c3582807b992ac7a885cf61f5598d", 0x2c}, {&(0x7f0000002c00)="834109c3aec0354d8466e6d50c767918eb5412b371168d5ac2a3f36053ce545cb4354c71e9b2c85cad43d01ad1fff2e523af5e6eba0cc888c48dc18ebc60e4e172af87cba050911fe56e95b62197eb3d2b08b73c62795a906c05fd47ddec092442cf0e9dda123f1639af8bff34025a5e9544a1e93ee7462ff924dd5717505bee0fe3efff963665771f", 0x89}, {&(0x7f0000002cc0)="c6fb37316f9c64cb270c49f6d2fd9d99d59ea3d44c0a411905ff116bf8e8930688fb02b40c51181e1cb202ed072683a90c31e6fb6362e61dcdff4026814cab0e9fcec93461d6755ae1f928beceedf95cfae285617e1c45c69587320e7878f573d70fa9bc3f2b8f26c08bc6a3bbdac8481b42daf529d73ec7ad1795831dbe0867dbc87413f74f1e302031b3432eca4d95259e38cfbe84b3005c04f592559731", 0x9f}, {&(0x7f0000002d80)="347989cb7dc3cf4cdd211908c579b2bbb5e830980b51dd84d2f770227130340cbbf75f11ae8978da95546eeeea96c70610c34e16911f34a22868dcc2d537612514c4409a4fe1c8fd2e94ac8307f9773df6ad0dfea00a004b48152dfdf55351147b3dd65dabad909b440c564bb6aee7b05ce83eb7b78944802c0cacdd18281ac6085598e1fe6dae97844eb0dfe504224730041eea61f3425923745378b8c4565f7433f44d43ca686ac9172d95024dbc5a3a672b83c8d9255ece100ec1c6ff4d8ab6329f93f82177adeb8ca7269038ee216f705e16", 0xd4}], 0x6, &(0x7f00000031c0)=[@rights={{0x20, 0x1, 0x1, [r0, r1, r3, r0]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0xc8, 0x4000000}}], 0x3, 0x44000805) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r19 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) r20 = ioctl$KVM_CREATE_VCPU(r19, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r19, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0xc, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r20, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c00f4eceb8010000000f01c13e0fd92da047f050b9800000c00f3235000100000f30666565440fc7f70f22e6c744240033000000c744240200800000ff1c24c4627d1aa069ed126f66bad104b00bee", 0x5b}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r20, 0x4068aea3, &(0x7f0000000000)={0xc7, 0x0, 0xdaa}) ioctl$KVM_RUN(r20, 0xae80, 0x0) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 31.253470532s ago: executing program 5 (id=3140): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) sendmsg(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_secret(0x0) ftruncate(r1, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x13, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) mbind(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, 0x3) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800050000050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="401600000093"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1000202, 0xa, 0x4}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9f01040000000000000000000c0000000c00003d21590b2af500020000000000003000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) getpeername$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1d, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r6, @ANYBLOB="00000000ffff15192f30fcffffb602006c568b1400599c0000000000ab6ecd5b6137ec24d6d3aa57ac6a4e33891c5c8035d4b66ad3f81547a629023bb101f6dea7da7057a9c84fd5c4ae913b4a85bc8444d09b0081bc"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x60, '\x00', r8, @lsm, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x10, 0x1c77cf2, @void, @value}, 0x94) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r10 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x9, 0x2, 0x2, 0x9, 0x6, r10}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 28.850400714s ago: executing program 5 (id=3144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000500000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000005002100030000001400350064756d6d7930"], 0x3c}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) r2 = dup(r1) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0xbf, &(0x7f0000000200)=0x4) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 26.620414016s ago: executing program 3 (id=3162): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf, 0xffffff7f}, 0x6b87bd74ddbc3b6) 26.60062675s ago: executing program 3 (id=3163): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000380)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000240)={r1, 0x2, 0x8ec, 0x6, &(0x7f0000000180)=[{0x0, 0x5, 0x10, 0xab}, {0x800, 0x2, 0x1, 0x6}, {0x1, 0x9, 0x6, 0x9}, {0x6, 0x2, 0x7fff}, {0x7, 0x1, 0x8, 0x200}, {0x1000, 0x1, 0x3, 0x8}]}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x9ab8, 0x501880) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000100)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x4], [0x0, 0x0, 0x0, 0x40000], [0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000300)={r4}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000002c0)={r5}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080), 0xc) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 26.294793329s ago: executing program 6 (id=3009): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008801, &(0x7f00000000c0)={0x11, 0x3, r1, 0x1, 0xfd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) r2 = dup3(r0, r0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x10000, 0x0, 0x100, 0xffffffffffffffff, 0x4, '\x00', r1, r2, 0x4, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 25.773855486s ago: executing program 3 (id=3165): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) poll(&(0x7f00000002c0)=[{r0, 0x8110}], 0x1, 0x5) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = syz_open_dev$media(&(0x7f0000000340), 0x6e0, 0x882c0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="02006453cf4309aef9fe2b00891de0da5105edbcf420e190e36cad1b7f8aed2b5cba6b1886f7c2dc2d79f609d7422f7eabe9f74e04859fffc293bcdabc1102d6ad1483add832b024e25053076b2e1d54a5860d1692fc11cfcab37992041480fdc09e8aa3bdd66ddff7c0523aa1c937b0e70625e2a34e48715aa7b8bbd2404363a68747e36677c829ae774eac7a9f99f29c81530e1c4fd2", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2f, &(0x7f0000000040), 0x3b) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000240)=0x4) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000140)) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r6 = socket(0x2, 0x2, 0x6) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x4e22, @dev}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x0, 0xfffe}, 0x0) r7 = syz_open_dev$media(&(0x7f0000000380), 0xffffffff80000001, 0x2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'new '}, 0x1a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f00000003c0)) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) r9 = fsmount(r1, 0x0, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) 25.670197025s ago: executing program 3 (id=3167): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file1\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x3, 0x0, 0xa, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="fba7020000000000000004000000"], 0x14}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000b00)=ANY=[@ANYBLOB="852000f9d7b0a3cae4b8c68011ec0bf7bc54acf9ffff", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b79dfc3ec770ec2def9c4444057f0000008500000082000000852000", @ANYBLOB="33cc0d4aa6e83244", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000"], &(0x7f0000000600)='GPL\x00', 0x7, 0xb9, &(0x7f0000000680)=""/185, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0x9, 0x80000001, 0x4}, 0x10, 0x1f01d, 0xffffffffffffffff, 0x2, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000800)=[{0x3, 0x4, 0x7, 0x9}, {0x1, 0x2, 0x0, 0x8}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRESDEC=r2, @ANYRES32=r5, @ANYBLOB="03b42438ff420b9d45af80af308ea69eead179310db7ef024d7d9fe5b1559d3a0836d65eb7616fd0cb16edcf0d0a67255c010000002d6ed7cba266", @ANYRES64=r4], 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x199100a, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r8 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, 0x0, &(0x7f0000000200)) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x901091, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) r11 = eventfd(0x75) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r10, 0x4004af07, &(0x7f0000000240)=r11) ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af20, &(0x7f0000000040)={0x1, r11}) 25.610378471s ago: executing program 3 (id=3169): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 25.378199594s ago: executing program 3 (id=3170): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f00000006c0)={0x189, 0x12, &(0x7f0000000ac0)}) r4 = syz_clone(0x1002000, &(0x7f0000006e40), 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x100) (async) r5 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900), 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0xce20, @multicast2}, 0x10) (async) bind$inet(r5, &(0x7f0000e15000)={0x2, 0xce20, @multicast2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) r6 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000380), &(0x7f0000000880)="2e44a20e223772d13d074707f6a6a325fa39e68007a5eb89080000000000000b18d19e5ade17ebbaa50001a82044d2a2225e597a6e8c0c9ac1bee2f489aae1e2063a4d1983fd0bf0f29a86ba06", 0x4d, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r6, r8, r7}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES64=r1, @ANYRESHEX=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES64=r1, @ANYRESHEX=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listen(r5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b"], 0x38}}, 0x0) (async) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b"], 0x38}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r11}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) process_vm_writev(r4, &(0x7f00000070c0)=[{&(0x7f0000006fc0)=""/230, 0xe6}], 0x1, &(0x7f00000072c0)=[{&(0x7f0000007140)=""/174, 0xae}], 0x1, 0x0) setresuid(0x0, r2, 0x0) (async) setresuid(0x0, r2, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r13 = syz_open_procfs$userns(r4, &(0x7f0000000140)) syz_clone3(&(0x7f0000000580)={0xc0000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240), {0x22}, &(0x7f0000000700)=""/63, 0x3f, &(0x7f00000004c0)=""/161, &(0x7f0000000400)=[r4, r4, r4, r4], 0x4}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="540000005a0002002cbd7000fcdbdf250008000200", @ANYRES32=r4, @ANYBLOB="087ada89", @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000200", @ANYRESHEX, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="0800020a", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20048451) 25.353791418s ago: executing program 35 (id=3170): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f00000006c0)={0x189, 0x12, &(0x7f0000000ac0)}) r4 = syz_clone(0x1002000, &(0x7f0000006e40), 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x100) (async) r5 = socket$inet(0x2, 0x1, 0x100) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900), 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0xce20, @multicast2}, 0x10) (async) bind$inet(r5, &(0x7f0000e15000)={0x2, 0xce20, @multicast2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) r6 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000380), &(0x7f0000000880)="2e44a20e223772d13d074707f6a6a325fa39e68007a5eb89080000000000000b18d19e5ade17ebbaa50001a82044d2a2225e597a6e8c0c9ac1bee2f489aae1e2063a4d1983fd0bf0f29a86ba06", 0x4d, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r6, r8, r7}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="3500000003000000000000000000000195000008000000003cee095d5c4325f8a9edd458c5a9d4b74486e974c676f2fcb6d12a08f477ca2b69cab5f5d4a87635ce5c785ed140e83efe8c48a6c148669580b7a6fb0af49175d8991119dfdc6df590b2344ff6371dee316eed32758a160cedc0f8a4ee1b6668752aafc7de7e40cb273ae8b2c3de4fe48da70d61ec7330118e10799d16f4d5613587f57841d65c5bb1abbc80d48ed7e1c8dab9bfde6e0553d1d38e689a77406883e11f3b08005351760b01167b28f6216eb5963029669cebf9a91e29c37f55de1ebe97cab685b0cf2205b94f2b6c931f022a0fbf3a8a20d43a15acb5b6f09a60f2d2", @ANYRES32=r1, @ANYRES64=r1, @ANYRESHEX=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES64=r1, @ANYRESHEX=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listen(r5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b"], 0x38}}, 0x0) (async) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b"], 0x38}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r11}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) process_vm_writev(r4, &(0x7f00000070c0)=[{&(0x7f0000006fc0)=""/230, 0xe6}], 0x1, &(0x7f00000072c0)=[{&(0x7f0000007140)=""/174, 0xae}], 0x1, 0x0) setresuid(0x0, r2, 0x0) (async) setresuid(0x0, r2, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r13 = syz_open_procfs$userns(r4, &(0x7f0000000140)) syz_clone3(&(0x7f0000000580)={0xc0000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240), {0x22}, &(0x7f0000000700)=""/63, 0x3f, &(0x7f00000004c0)=""/161, &(0x7f0000000400)=[r4, r4, r4, r4], 0x4}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="540000005a0002002cbd7000fcdbdf250008000200", @ANYRES32=r4, @ANYBLOB="087ada89", @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000200", @ANYRESHEX, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="0800020a", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20048451) 19.099354772s ago: executing program 6 (id=3009): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008801, &(0x7f00000000c0)={0x11, 0x3, r1, 0x1, 0xfd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) r2 = dup3(r0, r0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x10000, 0x0, 0x100, 0xffffffffffffffff, 0x4, '\x00', r1, r2, 0x4, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 12.893287711s ago: executing program 36 (id=3144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000500000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000005002100030000001400350064756d6d7930"], 0x3c}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) r2 = dup(r1) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0xbf, &(0x7f0000000200)=0x4) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 9.829405604s ago: executing program 6 (id=3009): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008801, &(0x7f00000000c0)={0x11, 0x3, r1, 0x1, 0xfd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) r2 = dup3(r0, r0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x10000, 0x0, 0x100, 0xffffffffffffffff, 0x4, '\x00', r1, r2, 0x4, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 5.569574282s ago: executing program 8 (id=3282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) r5 = socket$inet(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) (async) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) socket$kcm(0x10, 0x400000002, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, &(0x7f00000004c0)={0x4, 0x28, '\x00', 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES64]) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r11 = dup(r10) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000002000000ff000040"]) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x80, 0x700, 0x0, 0x3, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x65, 0x0, 0x2, 0x2f, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x34, 0xe8, 0x3, 0x1, [{@private=0xa010100, 0x7}, {@loopback}, {@broadcast, 0x943f}, {@local}, {@empty, 0x2ba}, {@empty, 0x81}]}]}}}}}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000010000000600000080000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000400000009f8586c9ab454df1f3979047c2778e36328426a5ee454d872fa6cd0ddbc09ec0ef32f19370beaae09561c9ca810bb05e1092cac6927bc3c5b21ce6bd71b763cd7c03a8f39ca2fa56588e445a9f8dcd8de012c7edbf26b58e801cc692bfb6b477bacd44d340dbf269caa75235f3b3089e164aec45150550bc59e264", @ANYRES32=r12, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000004000000040000000900000000000000", @ANYRES32=r13, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000004b34743e30400010969d81d6100000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.660255458s ago: executing program 8 (id=3288): ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f00000000c0)={0x23, 0x5, &(0x7f0000000fc0)="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"}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0xe, 0x0, 0x0, 0x0, 0x3}, 0xc002) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff000085000000030000009500"/65], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='mm_collapse_huge_page_isolate\x00', r4}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000200)=r4, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000200)=r4, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) (async) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000400)=ANY=[]) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000400)=ANY=[]) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 3.599298835s ago: executing program 8 (id=3289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000003400128009000100626f6e64000000002400028005001600000000000500110001000000080007"], 0x54}}, 0x0) 3.498982973s ago: executing program 8 (id=3292): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}]}, 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x25}]}, 0x80}, 0x1, 0x0, 0x0, 0x48815}, 0x4004000) 3.270136296s ago: executing program 8 (id=3297): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000002c0)={0x1, 0x0, @pic={0x0, 0xfe, 0x0, 0x4, 0x0, 0x77, 0x8, 0x1, 0x6, 0x0, 0x2, 0xbb, 0x0, 0x40}}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x5, 0x69, 0x0, 0x0, 0x8000000, 0xfffffffffffff800, 0x4], 0x0, 0x2c0710}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000040)="91b511c61c832ce8071c50819383a32b3ab13a8bcbd3f0dc137d", 0x1a}, {&(0x7f0000000700)="46789a01ee725f84a611e6247250b280530b6f8b7feab481a7dcdd61a147f774fcd744627880055fa5e18224e963786503eec545a41380fd18e0688db8dc160b7a8bf4c3d9935e63560bc452788d16b5f6c873c904e6c9252c98868ced285003942fb01a7b1ef5d398804f4c0ed29695ad68d166330567d63d431d7f0db5acb6864708379cdef3e740939559c5d7b82f825b01bf016ab79ce431c2218854f43ae829601f728eb6a1c10a8a23", 0xac}], 0x2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$inet6(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="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", 0xfb}, {&(0x7f0000000400)="00d7dcfa632a50c7e2ca9e926aeeec4fd3a058afd83637984e4fc7799bb4d0a6d9952b4862fc0945febba09dd36d7d003a3f2bee15f73ecad8dcced49ebac0ee82b73e666fca9ee06e8fc276d930ca363e81ded9ab4bcfcfc746dde920ce0abd805d7a1139f2a0c3f865aecd944ba7dcc411355fe0fe30c6cc64fd3cc4bbefee8c1796025bb0a941efb1f7992b1f24f68f515efddd644231ab042280db0adc93716380eaf6595835be9246bd9db97a73a284f3bc2dcfeb22599809286d6a441d01abf014aba8eefcf9340f040a0bd5b63b3786b599938d86334cb1aec10768baebac305c82b7be492d10bc022fce5c4c0cff2dd7abe171558eb482156e5472f8eb8c3c4bb1750f00c0ffb2abe4bb3468f3e07bfc15f5ebbd7affadadc5047d2c82b1d075abb7c70d7a305dff7966a8f115699f773442b9b7d57173872ad693d7090b7d946c03ef5f2664400ec4f99b646a21af47f083d9b22fbfaaca86ec515a3298e94f69392bb3bd0af1ef49c7065e8ced08ade3bed0f72e9796f8365623fb405eb5a7b7ca84eb9acb24c58a1cb13c21474eb50c51f664156f53fb44a99ec636d673516c5de2a8bcf8827d6fee81b9b0c414f0eb2db33f5c8ea413b27a6db22b5090e55b9969178a5bb37bc047f59882521d0a730189c48cedd7a6571878ab68ef9fa96bc8a32f50f0c58b1e73828b9ff4194b481b72ef0cc8a0c0bc680f5ef6c81af6da535032e813a47f57f7c3eaf713c07507fa1645bc06989ceb43c0c48dcf92fb37057d4e0adece1e8b4d5b71ebb4b2b3732ecae1dae529e18056b2c21995ec2051a1453fc435c17a7a864c6761453d71d0368cc163dde0dd2423079c3b461b1271404bbb7cce5214b9733c24fb8b48c185a1d2790284848da41a6ddff3b7356ba9ed03ceb3cf346a65b4565e3a6b4dca9ff6955cc8689fc2804b0b34f45fadbd7fab3265f4d8e52c2b0fe0dc4714af1f9d3b2ca9ef9ae1a24c79ac01162ad54ee28bf1aba50a5c395f5a5632c361b070e38b", 0x2d6}], 0x2}, 0x40001080) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "fd9192068590ef44", "4ded6853efa14266912ec2cb350be183", "15861006", "84d6d4ab8749281f"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ppoll(&(0x7f0000001240)=[{r3, 0x6203}], 0x1, 0x0, 0x0, 0x0) 2.865580221s ago: executing program 2 (id=3302): socket(0x10, 0x3, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x391080, 0x1a1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x38, r1, 0x731, 0x4, 0x25dfdbff, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}]}, 0x38}, 0x1, 0x2}, 0x81) (async) r2 = socket(0x28, 0x5, 0xa) (async) prctl$PR_SET_DUMPABLE(0x4, 0x1) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(0xffffffffffffffff, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) (async) r7 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r7, 0x40044900, 0x7) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001200)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000002000a000200eb3025"], 0x28}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x48000000, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) connect$vsock_stream(r2, &(0x7f0000000440), 0x10) (async) r9 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r9, 0x0, 0x0, 0x40022020, 0x0, 0x0) r10 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x8000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000140)="42b68ab9bc28", 0x6}], 0x2}, 0x4044010) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x260, 0x0, 0x0, 0x1c8, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x2d}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0xf4}}}, {{@ip={@rand_addr, @private, 0x0, 0xff000000, 'macvtap0\x00', 'bridge_slave_0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010100, 0xff000000, 0xff, 'ip6gretap0\x00', 'ip6erspan0\x00', {}, {0x75816b9d8404136c}, 0x0, 0x3, 0x18}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100001000000000000000000ffffffff000000000000000000000000e0000087000000000000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001e0006000000"], 0x140}}, 0x0) socket$packet(0x11, 0x2, 0x300) 2.864353104s ago: executing program 2 (id=3303): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) syz_socket_connect_nvme_tcp() (async) r2 = syz_socket_connect_nvme_tcp() listen(r2, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x25) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r6, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r6, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) (async) write$vga_arbiter(r6, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000240)={0x7, 0x0, r5, 0xfbfbfbfb}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000240)={0x7, 0x0, r5, 0xfbfbfbfb}) accept4(r0, 0x0, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) 2.716590819s ago: executing program 2 (id=3304): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000100), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x1) r2 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r3, r3}, &(0x7f00000002c0)=""/37, 0x25, &(0x7f0000000380)={&(0x7f0000000100)={'md5-generic\x00'}}) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40010, r1, 0xf29d7000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{\x8e]/!\x80--]/+(%%[\xdf[(*'}}, {@obj_role={'obj_role', 0x3d, 'syz\x00'}}, {@uid_eq={'uid', 0x3d, r5}}, {@smackfshat={'smackfshat', 0x3d, '9p\x00'}}, {@subj_role={'subj_role', 0x3d, 'upperdir'}}, {@seclabel}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000180)='./file0\x00') r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x1) mount$tmpfs(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f00000003c0), 0x420, &(0x7f00000004c0)={[{@huge_advise}, {@huge_never}, {@inode32}, {@huge_within_size}, {@inode64}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x32, 0x67, 0x78, 0x35, 0x0, 0x30, 0x34]}}, {@quota}, {@mpol={'mpol', 0x3d, {'bind'}}}, {@gid={'gid', 0x3d, r6}}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@hash}, {@smackfsdef={'smackfsdef', 0x3d, '\xcb\\'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@flag='rw'}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) 2.509917566s ago: executing program 2 (id=3305): syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x2000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x5608, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x4, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3fffffffffffffff, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc874, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000200)={0x100, r7}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0], 0x50}}, 0x0) 2.358062843s ago: executing program 2 (id=3306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1a8000, 0xa, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x3000}, {0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x1, 0x9, 0x0, 0xfd}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x2, 0x3}, {0x0, 0xeeee8000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0x80000a, 0x0, 0x3000, [0x800000000, 0x0, 0x1a7ff4f4]}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000a80)="3dfeb167f3ccc51b8ec0ba896a6d39292279e90f7abfdaee0f52b8a3554c9122ce1f6ed327282ad8c2d74bb1a770183e755b9f37cc301f5392a0e4831635410fe4b2a8e6bdb04d5d", 0x1f00, 0x48) syz_clone(0x7080100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x8140aecc, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 2.149386043s ago: executing program 2 (id=3307): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x648881, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x306, 0xff3f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x70, 0xff, [{{0x9, 0x4, 0x0, 0xdf, 0x1, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x6c, 0x5, 0x1, {0x22, 0xb4}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x9d, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x6, 0xd, 0x1}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xbf, 0x4, 0x9, 0xff, 0xad}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "9adf214d6d4ff746856812ca1ac5b79c"}]}}) syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x2e4c40) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/42, 0x2a}], 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 660.298001ms ago: executing program 7 (id=3313): r0 = io_uring_setup(0xc34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000140)={&(0x7f0000002000), 0x0, 0x3}, 0x1) (async) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = fcntl$dupfd(r0, 0x0, r1) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r2, &(0x7f0000001b00), 0xfffffd9d) (async) close_range(r0, 0xffffffffffffffff, 0x0) 659.219148ms ago: executing program 7 (id=3314): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x805) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000280), 0x80000000, 0x402000) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f000000e0c0)=""/102394, 0x18ffa}], 0x1, 0xfffffffe, 0xffffffff) openat$nullb(0xffffffffffffff9c, 0x0, 0x48882, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 279.777905ms ago: executing program 7 (id=3315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000002c0)={0x24, r1, 0x31, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}, 0x24}}, 0x0) 278.999391ms ago: executing program 8 (id=3316): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x18, 0x13, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(r1, &(0x7f00000031c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect(0x6, 0xc85, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x6f, 0xfe, 0x74, 0xff, 0xd8e, 0x3762, 0x85c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc73, 0x4, 0x0, 0x4, 0x80, 0x0, [{{0x9, 0x4, 0x99, 0xb, 0xf, 0x8e, 0xb1, 0x7, 0xba, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "9b8702a9"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x200, 0xac}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0xf4, 0xf9}, @country_functional={0xc, 0x24, 0x7, 0x4a, 0x4, [0x9, 0x3ff, 0x7]}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '`'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x8, 0xff}, [@dmm={0x7, 0x24, 0x14, 0x0, 0x4}, @mbim={0xc, 0x24, 0x1b, 0xd, 0x1, 0x5, 0x1, 0x40, 0x82}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x1c, 0x2}, @obex={0x5, 0x24, 0x15, 0xaf}]}], [{{0x9, 0x5, 0x2, 0x0, 0x20, 0x0, 0x53, 0xb, [@generic={0xc4, 0x1, "effd73160b41eeae9eff757b0ca6bb3741d05a53bf6611aae85285afa1b4891cc7252432fb629ad4469cd0557290788687021e882ddab718dc8caea01d2a307a0c83a5e4e41107a5e1d535849907aaa65cf10f63d1b28a0692b35c8b0e277c7d5e07897fc6692ca713873020cadfd4d5872fd35eb3bb87e21b3c285f729579505f2800d28f87cabe90486fa7cdea59e39b98a5021a896d28bd66976249e61867cfd1686d99ce115ba3eac6d3981f7328ebdade09520a8d73f729d0e3456fd53194ce"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x10, 0x0, 0x4e}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x7, 0x3}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x5, 0x6, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0xa, 0x81, 0x7}}, {{0x9, 0x5, 0xd, 0x1d, 0x0, 0x63, 0xfa, 0xe}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x4, 0xbd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x9}, @generic={0x4d, 0x5, "4b90718e2d2e8eafab156b61a23de0acdbd3d7f0aad2f12399b1e4b4e3f3fdbcd7c7f0e793b89c5f851e8c3008debd5de89408e85570a2d8a9e39b42e124f0394235f117dbba8fa869c368"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x4, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x1}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x5, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x2}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x7, 0x8, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0xdb, 0xc0, 0x68, [@generic={0xe7, 0x24, "0342a2d674da1263c605968f26910c05f3b7ca097dee651df7abe31d38f6e1e3bd37deaa98fa0df397ba57be9d9b826d1cb5816203aa4e5d8e7805b5ee0c135588770c36f0f1b92340671d1566fcd7d6c81740832cadea70fa1001674933a42b0a08a111065a857589a1040cad2f5bcd8db4dea4486b10238ac5a38af48ecfb98ac93508432c3187395c86ad71bb7046b263cc66b19a5ee39402cdee813c1db32bd3a4e0891eabbbf0d8001d05ce70eb6d89b55c8728fd7870acc1c60f68dcb6417664bbe46d359cab647c5c218263adc35e172064b716e3cbfd1138c569cf4751dcf604d7"}, @generic={0xc0, 0x24, "adb7010eb563913c8baae6fad97e42b821abc1bf59d5cfa595effd7a85abaf5945bdf0b080421a8a915edda10ff15e69ecdd406c27dfb32871ac9d4eb77cf14094d6a8dcb317e6c639c7d3fa6b67bedab4b127573e318c08d137de0d9f0add61bae5257e526841646fa6b713eeb8799dd3e8e5fb75a31f8578f30b4d85959bbd1ec95f8b5699129f3488132535b66f6e506c3b796888b594f23e01462477873ed782cc76629025efd6e5cee6be7a12dd7a992ea49af7d44e070b01bc3de5"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x9, 0xb0, 0xcb, [@generic={0xdb, 0xd, "a8c0e86e530d1fe4dab1a41147149492536c18d533770dcb12e58ae8f35f396ac2d208780475205dedff9e8216f4fd96e2aec910f5ff8d031ace149984982fe8964672137682df48cdc1d6e02a77ed3f0653b924968cf6dd9dbebecf30099cd7f79a24d0e72a609f8512926af9f3711d1314d6f734d585b1f64c3e5845c9e7b0b437cda026d68d2865aea4e9682129dd1c77d26dbca97edf0aa9d9dc9cc57e210eeb96ebb630a2ce919e0186966a00310dad2820ce7cf4540bf0bd89f1fbcb8c5fe250cc7a4cd96594512d0a4482988116a9f9253604d4e10f"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x7, 0x4, 0x7f, [@generic={0xf4, 0xf, "0f99efbe2e80d94821cbdaba919f4bf85674147a462db14facd800658f083098b5bb9840c3896d8df9510593252b5eea0c0ccc5084bee02639bdb6c69c6cf7845610e8541355cbe31d78f2df01ca316e993e419752f71d368521a7c4bc466d050fab270d7359eadf4852b95aee4d3d13a0205c84ada9bdfad0d1b2183ed2a10dfdb21b988d46a3344825d186e66d239f5469aa3cb36e7a55737cae08e7cbe7ea45037b79a793ba89e4a23222e2636847dd3aae50c66bd480228c363bce08bd1815c82287d35e97c15e6c842a3b207a77ab5dacc4fdf0bd600d14ee7d72b5f89a4cd8e904a39c7545c48ba759624d65331ac1"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xe, 0x7}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0xc, 0x2, 0xe}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x1, 0x8, 0xa, [@generic={0xb0, 0x30, "6e42b6aed3d4eabf10f36afc2f73d7a1d155f96fe592d0456263e4bd721647edecc02a941ef3675c72ceefd05eb6320de73b9196e2032fd4b8b7aacb051953a84303c9cc57ea4207279feb00738ba6a58ab71a4f9f537041b88b700e03d2a8f5f5d340d1abcb64db41ccb5f812e7311a47155ddeb0d23b0b2b37e734f9ac8fe9c463dfcc8789e074c32a1db792ce871b8ed43712560b138f3260fcf52d75eb014fecca84c2e3aecb6c9a5f7d8ce6"}, @generic={0xcb, 0x30, "924284b9f00f31d8671d719a92360aab2b57ff8bde33b527fc4d5d9cbf810f906a03c43ec5ca8fee066a81d45514a3d320b503c6845bba36083a65347509fd45bd29599a1119caa143fb5d00612dca2abcd61d5f0511e5297604aac5b6ca2919019c0ebdcb6a62be7b073a871091afa91b3dd35cb5e9509842a6d7f8ccf7e5a3b24883ac8ba597fa222a913d4c7aeaf558fbb8d62f9daa06e48517dd420b63aae25f3eadc193c52fd213ab9963425d13ac5b2100dd2a69f11fe50996f49d56597521d5129d681051ba"}]}}]}}, {{0x9, 0x4, 0xc, 0x1, 0x2, 0xa0, 0x6, 0x58, 0x7f, [], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0x2, 0x1, 0x86}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0x7, 0xb2, [@generic={0x48, 0x24, "3ffa079be9b80c9fcdb027dcf4e8a974a986b22ddf4989c96c24f23c6c9e9b9607b6c1179a46045e16348fd00e78e569643d5c78aa9f1cf184ec96e5d24911718b42782f227f"}, @generic={0xc1, 0x21, "47b623b3f3673a4f1aa88ad5f7b0e446c0abd4c1e8d17fe5c5afa35889f8abb5622bd1069a80195e51e9c0da101b13f1cf4948b6e6ca9636ef01c87463b852c7cd8b16e04d6af252a8a9f0079cd1a368a50848d42d590fbf05be5040b0df0ca6342b1291bdb6e8f0c5e3fb1e425ea10fb9dbaa7ca611d196eb3f61d30e885db752e525754b4220fab5371a57651f242720237706fc3f575989250602c006cd2889fed24439648f4f0286387cea7536b63b4b07233ddf0461eb172021c956bc"}]}}]}}, {{0x9, 0x4, 0xab, 0x18, 0xc, 0x26, 0xa0, 0x13, 0xb7, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, '_@E'}, {0x5, 0x24, 0x0, 0x3ce}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0xfffd, 0x8}, [@country_functional={0xe, 0x24, 0x7, 0x4, 0x0, [0x2, 0x10, 0x3, 0x5]}]}], [{{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x8, 0xa9, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x47, 0xf1, 0x6c9f}]}}, {{0x9, 0x5, 0xc, 0x2, 0x650, 0x40, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x2}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x0, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x0, 0x8, 0x9, [@generic={0x59, 0x9, "5a7643749608b9643cb87fe1f6e238e8da125b3a3b45ecb93393f5f7623cb7f9a2df8a04668e55354874651c4284d357873b4d2b301c4fefb33cbfe84f78e0fe3fb44380092ab44800cd4ea38b0fc07ce3daa48055faaa"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x9, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0xd}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7, 0xc, 0x1}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x1, 0x1, 0x8, [@generic={0x4e, 0x3, "991bcde170c6d336aee4c217661687f43fd72e4d438f2eb811e2a14bff85e988d9e8d8cd5757293069570db40ab91e78e189983432bb38743ffce231fccdd5f7e9cb5ad0686218d84408acc0"}, @generic={0x21, 0x2, "c6b651252f47c837dc9994b725bb23706fdefd1aa01bbc5b8df7ab252fe511"}]}}, {{0x9, 0x5, 0x7, 0x16, 0x3ff, 0xff, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x20d9}, @generic={0xbf, 0x23, "5e32d20115ae5bd1449ab42cfbfb2fbae5257394546a9ec3954e789021c465911f87a124f6da3e99b4ba1486f1a85c3f103886575bf56f1011d4f6309d63978b68b1bb3b175d6a526214ba8e80e7b68422d9067b412081b3fa1b3d825ad33d26f95aa87fc52619112e8c54257177968e32c06e9fe4fb171b36c76bffe0c946d7b6298b1dca060b21b47a93a386307529d32e900409cce97dafed46c91f216297185acbe3a38b9d6905f7972a4299fe1eeba8ed0a7ddf8b826a2547301d"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x40, 0x5, 0x4f, 0x2, [@generic={0x90, 0x23, "59a54053f25015b682faca431b7e5af7214ae58ac6d878570cc398d46928836401da06ef2673c46c5df88a56a6e04512c34f1485e806e30d91c5e4494aeae3f6a50dc20d3569de77d9cf81bad50d655f6e2a2d34b7572173583a6a809b1798835ac82fdbea63d307b6c94e7ae454ed16ed90fbc7baf3a787999cbaf3a8819d2ff17a5223d83cbb4653c42586ba3a"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x9, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x15}]}}, {{0x9, 0x5, 0x4, 0x8ac36996dd0f6eba, 0x200, 0x7f, 0x80, 0x8, [@generic={0xb7, 0xedef2a6a8c831e3d, "7bd7a61c6081d781ef0ecf0906c6b2b1f71a540b9a647145ef37acab34f8e0f6a3c72f929b8a854495fbf56bf758e2105c717e845c9f10f953cc712152a30a21ad726f14d28e1054f0a07abe908d99f343fef5a70be3ce5263081dba3bb85a0272a83532861a71400c118d4ea805a3b6ee30ababc775a763ab14319bd815aece4e16b81ed1fb08aad0e7b7d8d06d237b270d37a8fe7736c72b7d1af97782b220e9efa5aa238c37413bc697b6236267c2a285cfbdc2"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x40, 0x8, 0x4, [@generic={0x36, 0x9, "9de4a114227e8757521ae5d23488d4f895ec8a77a72b5da99d157fee1cf61103e4a9f46ba061e89eb05ff228aa9a7d412441ef04"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x3ff}]}}]}}, {{0x9, 0x4, 0xc9, 0x7, 0x2, 0xf7, 0x51, 0xab, 0x5, [@hid_hid={0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xe5b}}, @generic={0x24, 0x5, "40150922c6a507917e0f0a20708fb30fb8f04fa054f9359b20be69a2ea2c8916e541"}], [{{0x9, 0x5, 0x7, 0x3, 0x40, 0x4, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x10}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0xfa, 0x57, 0x4}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x0, 0x4, 0x9, 0x8, 0xe}, 0x51, &(0x7f0000000100)={0x5, 0xf, 0x51, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "df33f8445a4e23f039582ad73d64c709"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0xd, 0x10}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x3, 0x40, 0xfffd, 0x1e}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x5, 0x1ef00, 0x200, [0x3f0f, 0x3ff7, 0xc00f, 0xffc000]}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x7, 0xf, 0xa53}]}, 0x1, [{0x48, &(0x7f0000000180)=@string={0x48, 0x3, "b7e744bc463d7b115a7ace04bebf0bdc76d1a61ff9df93e1fa51db2a6689155b229f802e3d1edb0694c22f555d9e34e5d6071c307d638df8062bfd1c4a342b0602955f06fdd4"}}]}) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'wpan4\x00'}) 230.019143ms ago: executing program 7 (id=3317): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x100000000, 0x8, 0x1, 0x1, 0x5, 0xffffffffffffffff, 0x6, 0x5, 0x4, 0x4, 0xf77, 0x80000001, 0x0, 0x5, 0x35], 0x4, 0x85a15}) syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001040), 0x33a0c1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000001080)={{0x3, 0x2}, {0x9, 0x2}, 0xd, 0x1, 0xf9}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x20000084) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2ec, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004841}, 0x4810) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 90.297494ms ago: executing program 7 (id=3318): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x7fff, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x2002, 0x6, 0xfffffffd, 0x46, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x0, 0x0, 0x4e22, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x800000}, {}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in6=@mcast1, 0x800, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f00000003c0)={0x74, 0x0, 0xeeb287d3c6e2a73d}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000000280)={0x2, 0x1, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/75, 0x4b}, {&(0x7f0000000100)=""/245, 0xf5}], &(0x7f0000000240)=[0xb7, 0x3, 0x1, 0x9, 0x401]}, 0x20) 0s ago: executing program 7 (id=3319): r0 = userfaultfd(0x801) mmap(&(0x7f0000736000/0x4000)=nil, 0x4000, 0x1000002, 0x4000010, 0xffffffffffffffff, 0x287a8000) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) move_pages(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[&(0x7f00001bf000/0x4000)=nil, &(0x7f000063a000/0x14000)=nil], &(0x7f0000000200)=[0x7, 0x6, 0x81, 0x3, 0x5, 0xfff, 0xd981132, 0x4, 0x1, 0xfffffffc], &(0x7f0000000240)=[0x0], 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80081, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x5a1002, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0x10000}, {0x6, 0x8}, 0xab4, [0x5, 0x7a, 0x1, 0x4000000005, 0x40, 0x66, 0x1, 0x5f, 0x2, 0xfffffffffffffffe, 0x2010, 0x4, 0x6, 0xffdffffffffffff7, 0x621, 0x7]}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000000)={0x0, [[0x7fff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x0, 0x0, 0xc000, 0x5], [0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0x2]], '\x00', [{}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5f08, 0x6}, {}, {}, {}, {}, {0x4, 0x8}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000180)) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000000)=0xb6de, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={[{@name={'name', 0x3d, '.'}}, {@name={'name', 0x3d, 'mask'}}]}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@overlay={0xffffffff, 0x3, 0x4, 0x4000, 0x1000, {0x77359400}, {0x5, 0x0, 0x2, 0x5, 0x80, 0x3, "c56f0f0f"}, 0xfffffff5, 0x3, {}, 0x80000000, 0x0, r3}) mprotect(&(0x7f0000379000/0x3000)=nil, 0x3000, 0x5) kernel console output (not intermixed with test programs): comm="syz.3.3028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 152.613141][ T40] audit: type=1400 audit(2000000053.199:3947): avc: denied { bind } for pid=13587 comm="syz.3.3029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 152.640150][T13588] binder_alloc: 13587: binder_alloc_buf, no vma [ 152.780350][ T40] audit: type=1326 audit(2000000053.369:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13590 comm="syz.2.3030" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b937fed9 code=0x7ffc0000 [ 152.786355][ T40] audit: type=1326 audit(2000000053.369:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13590 comm="syz.2.3030" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b937fed9 code=0x7ffc0000 [ 152.792179][ T40] audit: type=1326 audit(2000000053.369:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13590 comm="syz.2.3030" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f87b937fed9 code=0x7ffc0000 [ 152.809032][ T40] audit: type=1326 audit(2000000053.369:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13590 comm="syz.2.3030" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b937fed9 code=0x7ffc0000 [ 152.816704][ T40] audit: type=1326 audit(2000000053.369:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13590 comm="syz.2.3030" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87b937fed9 code=0x7ffc0000 [ 152.822562][ T40] audit: type=1326 audit(2000000053.369:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13590 comm="syz.2.3030" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87b937fed9 code=0x7ffc0000 [ 152.856094][ T5931] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 152.876246][ T5931] usb 10-1: Using ep0 maxpacket: 8 [ 152.879661][ T5931] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 152.882190][ T5931] usb 10-1: can't read configurations, error -61 [ 153.004955][ T5931] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 153.026622][T13588] syz.3.3029 (13588): drop_caches: 2 [ 153.026687][ T5931] usb 10-1: Using ep0 maxpacket: 8 [ 153.032330][ T5931] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 153.034415][ T5931] usb 10-1: can't read configurations, error -61 [ 153.043110][ T5931] usb usb10-port1: unable to enumerate USB device [ 153.154302][T13607] netlink: 'syz.3.3034': attribute type 13 has an invalid length. [ 153.158334][T13607] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 153.161477][T13607] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 153.163529][T13607] gretap1: entered promiscuous mode [ 153.165159][T13607] gretap1: entered allmulticast mode [ 153.220567][T13610] binder: 13609:13610 ioctl c0306201 200003c0 returned -22 [ 153.262535][T13612] overlayfs: failed to set uuid (145/file1, err=-1); falling back to uuid=null. [ 153.266418][T13612] overlayfs: failed to verify upper root origin [ 153.436133][T13626] dlm: no locking on control device [ 153.437709][T13626] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 153.445802][T13626] CIFS: Unable to determine destination address [ 153.624264][T13644] program syz.3.3045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.680514][T13650] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 153.682223][T13650] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 153.684642][T13650] vhci_hcd vhci_hcd.0: Device attached [ 153.700112][T13651] vhci_hcd: connection closed [ 153.700321][ T12] vhci_hcd: stop threads [ 153.702859][ T12] vhci_hcd: release socket [ 153.704110][ T12] vhci_hcd: disconnect device [ 153.737281][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 153.739712][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 154.403001][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3057'. [ 154.407346][T13690] vlan2: entered allmulticast mode [ 154.488872][ T1172] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.613147][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3059'. [ 154.625878][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.630658][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.633664][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.636681][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.639361][ T5939] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.641786][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.665220][T13701] lo speed is unknown, defaulting to 1000 [ 154.724048][T13713] syz.3.3061 (13713) used obsolete PPPIOCDETACH ioctl [ 154.739837][ T1139] bond0: (slave bond_slave_0): interface is now down [ 154.741815][ T1139] bond0: (slave bond_slave_1): interface is now down [ 154.743528][ T1139] bond0: (slave batadv_slave_0): interface is now down [ 154.750509][T13716] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 154.752240][T13716] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 154.754746][T13716] vhci_hcd vhci_hcd.0: Device attached [ 154.763962][T13717] usbip_core: unknown command [ 154.766287][T13717] vhci_hcd: unknown pdu 2147549184 [ 154.767635][T13717] usbip_core: unknown command [ 154.769356][T13298] bond0: (slave bond_slave_0): interface is now down [ 154.771129][T13298] bond0: (slave bond_slave_1): interface is now down [ 154.772879][T13298] bond0: (slave batadv_slave_0): interface is now down [ 154.773174][T13308] vhci_hcd: stop threads [ 154.776084][T13308] vhci_hcd: release socket [ 154.777428][T13308] vhci_hcd: disconnect device [ 154.779735][T13298] bond0: now running without any active interface! [ 154.790075][T13701] chnl_net:caif_netlink_parms(): no params data found [ 154.860050][T13701] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.861960][T13701] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.863823][T13701] bridge_slave_0: entered allmulticast mode [ 154.866280][T13701] bridge_slave_0: entered promiscuous mode [ 154.868745][T13701] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.870636][T13701] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.872534][T13701] bridge_slave_1: entered allmulticast mode [ 154.874532][T13701] bridge_slave_1: entered promiscuous mode [ 154.893200][T13701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.899207][T13701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.921469][T13701] team0: Port device team_slave_0 added [ 154.926535][T13701] team0: Port device team_slave_1 added [ 154.947258][T13701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.949104][T13701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.956335][T13701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.960354][T13701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.962168][T13701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.968934][T13701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.007687][T13701] hsr_slave_0: entered promiscuous mode [ 155.010472][T13701] hsr_slave_1: entered promiscuous mode [ 155.013027][T13701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.016122][T13701] Cannot create hsr debugfs directory [ 155.562947][T13740] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.565191][T13740] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.569345][T13740] bridge0: entered allmulticast mode [ 155.592150][ T1139] Bluetooth: hci2: Frame reassembly failed (-84) [ 155.597025][T13740] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.597145][ T5938] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 155.598927][T13740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.604928][T13740] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.608083][T13740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.611347][T13740] bridge0: entered promiscuous mode [ 155.757359][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 155.757370][ T40] audit: type=1400 audit(2000000056.349:3971): avc: denied { create } for pid=13750 comm="syz.3.3072" name="#1b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 155.764281][ T40] audit: type=1400 audit(2000000056.349:3972): avc: denied { link } for pid=13750 comm="syz.3.3072" name="#1b" dev="tmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 155.767177][T13751] batman_adv: batadv0: Adding interface: erspan1 [ 155.770305][ T40] audit: type=1400 audit(2000000056.349:3973): avc: denied { rename } for pid=13750 comm="syz.3.3072" name="#1c" dev="tmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 155.772249][T13751] batman_adv: batadv0: Not using interface erspan1 (retrying later): interface not active [ 155.888500][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3073'. [ 155.890836][T13756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3073'. [ 155.893253][T13756] netlink: 'syz.3.3073': attribute type 7 has an invalid length. [ 155.998753][ T1172] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.058655][ T1172] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.172059][ T1172] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.296228][ T1172] bridge_slave_1: left allmulticast mode [ 156.297737][ T1172] bridge_slave_1: left promiscuous mode [ 156.299253][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.303859][ T1172] bridge_slave_0: left allmulticast mode [ 156.306183][ T1172] bridge_slave_0: left promiscuous mode [ 156.308235][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.594104][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.599723][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.603404][ T1172] bond0 (unregistering): Released all slaves [ 156.723828][T13774] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3077'. [ 156.724193][T13775] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3077'. [ 156.729712][ T5938] Bluetooth: hci1: command tx timeout [ 156.779078][T13778] nfs4: Unknown parameter 'tcp»»»' [ 156.853272][T13782] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.859995][T13782] netlink: 'syz.3.3079': attribute type 1 has an invalid length. [ 156.862319][T13782] netlink: 'syz.3.3079': attribute type 3 has an invalid length. [ 156.864356][T13782] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3079'. [ 156.882682][T13782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.884623][T13782] IPv6: NLM_F_CREATE should be set when creating new route [ 156.886601][T13782] IPv6: NLM_F_CREATE should be set when creating new route [ 156.890457][T13782] sit0: entered promiscuous mode [ 156.893594][T13782] netlink: 'syz.3.3079': attribute type 1 has an invalid length. [ 156.895848][T13782] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3079'. [ 156.924560][T13790] SELinux: security policydb version 18 (MLS) not backwards compatible [ 156.924957][ T40] audit: type=1400 audit(2000000057.509:3974): avc: denied { load_policy } for pid=13789 comm="syz.3.3080" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 156.933798][T13790] SELinux: failed to load policy [ 157.033502][ T1172] hsr_slave_0: left promiscuous mode [ 157.037641][ T40] audit: type=1400 audit(2000000057.629:3975): avc: denied { bind } for pid=13798 comm="syz.3.3082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 157.042017][ T1172] hsr_slave_1: left promiscuous mode [ 157.048007][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.050787][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.053899][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.056066][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.096568][ T1172] veth1_macvtap: left promiscuous mode [ 157.098064][ T1172] veth0_macvtap: left promiscuous mode [ 157.099431][ T1172] veth1_vlan: left promiscuous mode [ 157.100810][ T1172] veth0_vlan: left promiscuous mode [ 157.346628][ T5931] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 157.499171][ T5931] usb 8-1: Using ep0 maxpacket: 8 [ 157.501801][ T5931] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 157.503953][ T5931] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.506625][ T5931] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.509165][ T5931] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.511679][ T5931] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.516802][ T5931] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.519999][ T5931] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.607413][ T5939] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 157.717889][T13809] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 157.727962][T13809] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.730938][T13809] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 157.740848][ T5931] usb 8-1: usb_control_msg returned -32 [ 157.742382][ T5931] usbtmc 8-1:16.0: can't read capabilities [ 157.916843][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 158.008548][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 158.118279][T13816] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 158.637751][T13814] vcan0: entered allmulticast mode [ 158.695226][T13701] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 158.712282][T13701] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 158.719884][T13701] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 158.722975][T13701] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 158.788968][T13701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.796135][T13701] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.803996][T13307] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.805998][T13307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.810906][T13307] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.812801][T13307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.814914][ T5939] Bluetooth: hci1: command tx timeout [ 158.939801][T13701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.040280][T13701] veth0_vlan: entered promiscuous mode [ 159.044507][T13701] veth1_vlan: entered promiscuous mode [ 159.060480][T13701] veth0_macvtap: entered promiscuous mode [ 159.063497][T13701] veth1_macvtap: entered promiscuous mode [ 159.071094][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.073887][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.077277][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.079939][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.082470][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.085404][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.087944][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.090616][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.093135][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.095834][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.098591][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.101304][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.103919][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.106868][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.110266][T13701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.116113][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.118911][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.121432][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.124198][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.128104][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.131135][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.133678][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.137289][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.139816][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.142563][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.145151][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.148014][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.150593][T13701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.153315][T13701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.156487][T13701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.161725][T13858] __nla_validate_parse: 66 callbacks suppressed [ 159.161735][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3091'. [ 159.168007][T13701] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.170316][T13701] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.172650][T13701] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.175469][T13701] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.235402][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.237507][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.247016][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.249370][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.436783][ T40] audit: type=1400 audit(2000000060.029:3976): avc: denied { ioctl } for pid=13861 comm="syz.5.3092" path="socket:[41859]" dev="sockfs" ino=41859 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.443563][ T40] audit: type=1400 audit(2000000060.029:3977): avc: denied { prog_load } for pid=13861 comm="syz.5.3092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 159.450239][ T40] audit: type=1400 audit(2000000060.029:3978): avc: denied { prog_run } for pid=13861 comm="syz.5.3092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 159.455360][ T40] audit: type=1400 audit(2000000060.039:3979): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 159.464896][ T40] audit: type=1400 audit(2000000060.039:3980): avc: denied { search } for pid=5334 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.473301][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3095'. [ 159.615255][T13882] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 159.893773][T13895] overlayfs: failed to resolve './file1': -2 [ 159.896746][T13895] overlayfs: failed to resolve './file1': -2 [ 160.123738][T11906] usb 8-1: USB disconnect, device number 5 [ 160.719340][T13987] netlink: 'syz.3.3108': attribute type 4 has an invalid length. [ 160.802878][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 160.802889][ T40] audit: type=1400 audit(2000000061.389:4036): avc: denied { read write } for pid=13989 comm="syz.3.3109" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 160.814695][ T40] audit: type=1400 audit(2000000061.389:4037): avc: denied { open } for pid=13989 comm="syz.3.3109" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 160.825479][ T40] audit: type=1400 audit(2000000061.409:4038): avc: denied { create } for pid=13991 comm="syz.5.3110" name="#23" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 160.831103][ T40] audit: type=1400 audit(2000000061.419:4039): avc: denied { link } for pid=13991 comm="syz.5.3110" name="#23" dev="tmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 160.837364][ T40] audit: type=1400 audit(2000000061.419:4040): avc: denied { rename } for pid=13991 comm="syz.5.3110" name="#24" dev="tmpfs" ino=795 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 160.845917][ T40] audit: type=1400 audit(2000000061.439:4041): avc: denied { unmount } for pid=12092 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 160.864579][T13996] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3111'. [ 160.865803][ T40] audit: type=1400 audit(2000000061.459:4042): avc: denied { ioctl } for pid=13995 comm="syz.5.3111" path="socket:[42965]" dev="sockfs" ino=42965 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.899032][ T40] audit: type=1400 audit(2000000061.489:4043): avc: denied { bind } for pid=14001 comm="syz.3.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.899065][T14003] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 160.908411][T14003] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3113'. [ 160.945271][ T40] audit: type=1400 audit(2000000061.539:4044): avc: denied { read } for pid=14004 comm="syz.3.3114" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 160.951317][ T40] audit: type=1400 audit(2000000061.539:4045): avc: denied { open } for pid=14004 comm="syz.3.3114" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 160.999410][T14008] netlink: 'syz.5.3115': attribute type 17 has an invalid length. [ 161.001583][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3115'. [ 161.003920][T14008] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3115'. [ 161.092808][T14017] FAULT_INJECTION: forcing a failure. [ 161.092808][T14017] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 161.096677][T14017] CPU: 0 UID: 0 PID: 14017 Comm: syz.5.3118 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 161.099552][T14017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.102234][T14017] Call Trace: [ 161.103067][T14017] [ 161.103805][T14017] dump_stack_lvl+0x16c/0x1f0 [ 161.105088][T14017] should_fail_ex+0x497/0x5b0 [ 161.106254][T14017] _copy_from_user+0x2e/0xd0 [ 161.107410][T14017] copy_msghdr_from_user+0x99/0x160 [ 161.108807][T14017] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 161.110342][T14017] ___sys_sendmsg+0xff/0x1e0 [ 161.111576][T14017] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.112938][T14017] ? __pfx_lock_release+0x10/0x10 [ 161.114260][T14017] ? trace_lock_acquire+0x14e/0x1f0 [ 161.115725][T14017] ? __fget_files+0x206/0x3a0 [ 161.116969][T14017] __sys_sendmsg+0x16e/0x220 [ 161.118192][T14017] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.119572][T14017] do_syscall_64+0xcd/0x250 [ 161.120770][T14017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.122315][T14017] RIP: 0033:0x7facd0f7fed9 [ 161.123481][T14017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.128392][T14017] RSP: 002b:00007facd1da0058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.130532][T14017] RAX: ffffffffffffffda RBX: 00007facd1145fa0 RCX: 00007facd0f7fed9 [ 161.132580][T14017] RDX: 06b87bd74ddbc3b6 RSI: 0000000020000200 RDI: 0000000000000003 [ 161.134577][T14017] RBP: 00007facd1da00a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.136618][T14017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.138677][T14017] R13: 0000000000000000 R14: 00007facd1145fa0 R15: 00007ffe8bd7cb78 [ 161.140739][T14017] [ 161.180090][T13298] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.241566][T14023] tmpfs: Bad value for 'mpol' [ 161.256041][T14021] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.342352][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.346789][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.349610][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.353537][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.357678][ T5938] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.359681][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.375676][T14027] lo speed is unknown, defaulting to 1000 [ 161.482425][T14027] chnl_net:caif_netlink_parms(): no params data found [ 161.560758][T14027] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.563143][T14027] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.565699][T14027] bridge_slave_0: entered allmulticast mode [ 161.568437][T14027] bridge_slave_0: entered promiscuous mode [ 161.571157][T14027] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.573109][T14027] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.575597][T14027] bridge_slave_1: entered allmulticast mode [ 161.577662][T14027] bridge_slave_1: entered promiscuous mode [ 161.613341][T14027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.618616][T14027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.659610][T14027] team0: Port device team_slave_0 added [ 161.662383][T14027] team0: Port device team_slave_1 added [ 161.680733][T14055] FAULT_INJECTION: forcing a failure. [ 161.680733][T14055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.683910][T14055] CPU: 2 UID: 0 PID: 14055 Comm: syz.3.3128 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 161.686554][T14055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.689362][T14055] Call Trace: [ 161.690245][T14055] [ 161.691029][T14055] dump_stack_lvl+0x16c/0x1f0 [ 161.692240][T14055] should_fail_ex+0x497/0x5b0 [ 161.693450][T14055] _copy_from_user+0x2e/0xd0 [ 161.694680][T14055] ____sys_sendmsg+0x590/0xc90 [ 161.695942][T14055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.697345][T14055] ___sys_sendmsg+0x135/0x1e0 [ 161.698596][T14055] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.699965][T14055] ? __pfx_lock_release+0x10/0x10 [ 161.701290][T14055] ? trace_lock_acquire+0x14e/0x1f0 [ 161.702641][T14055] ? __fget_files+0x206/0x3a0 [ 161.703867][T14055] __sys_sendmsg+0x16e/0x220 [ 161.705104][T14055] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.706456][T14055] do_syscall_64+0xcd/0x250 [ 161.707665][T14055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.709202][T14055] RIP: 0033:0x7f313497fed9 [ 161.710369][T14055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.715346][T14055] RSP: 002b:00007f31356ff058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.717513][T14055] RAX: ffffffffffffffda RBX: 00007f3134b45fa0 RCX: 00007f313497fed9 [ 161.719542][T14055] RDX: 06b87bd74ddbc3b6 RSI: 0000000020000200 RDI: 0000000000000003 [ 161.721598][T14055] RBP: 00007f31356ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.723648][T14055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.725720][T14055] R13: 0000000000000000 R14: 00007f3134b45fa0 R15: 00007ffcb0369e28 [ 161.727799][T14055] [ 161.741980][T14027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.743836][T14027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.750830][T14027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.759526][T14058] batadv0: entered promiscuous mode [ 161.762095][T14058] team0: entered promiscuous mode [ 161.763409][T14058] team_slave_0: entered promiscuous mode [ 161.768628][T14060] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 161.769877][T14058] team_slave_1: entered promiscuous mode [ 161.771438][T14060] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 161.776655][T14060] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 161.776690][T14058] hsr1: entered promiscuous mode [ 161.778665][T14060] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 161.779966][T14058] hsr1: entered allmulticast mode [ 161.783492][T14058] batadv0: entered allmulticast mode [ 161.785799][T14058] team0: entered allmulticast mode [ 161.787234][T14058] team_slave_0: entered allmulticast mode [ 161.788728][T14058] team_slave_1: entered allmulticast mode [ 161.790711][T14027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.792592][T14027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.799739][T14027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.825010][T14027] hsr_slave_0: entered promiscuous mode [ 161.827445][T14027] hsr_slave_1: entered promiscuous mode [ 161.829324][T14027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.832307][T14027] Cannot create hsr debugfs directory [ 161.983285][T14072] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 162.094984][ T5931] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 162.264961][ T5931] usb 8-1: Using ep0 maxpacket: 16 [ 162.267940][ T5931] usb 8-1: config 0 has no interfaces? [ 162.269446][ T5931] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 162.272061][ T5931] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.275759][ T5931] usb 8-1: config 0 descriptor?? [ 162.496430][T10680] usb 8-1: USB disconnect, device number 6 [ 162.753009][T13298] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.827071][T13298] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.900179][T13298] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.990834][T13298] bridge_slave_1: left allmulticast mode [ 162.992785][T13298] bridge_slave_1: left promiscuous mode [ 162.994739][T13298] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.997708][T13298] bridge_slave_0: left allmulticast mode [ 162.999592][T13298] bridge_slave_0: left promiscuous mode [ 163.001194][T13298] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.304985][ T834] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 163.314467][T13298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.318433][T13298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.321872][T13298] bond0 (unregistering): Released all slaves [ 163.455066][ T5939] Bluetooth: hci1: command tx timeout [ 163.466115][ T834] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.469087][ T834] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 163.475885][ T834] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.478425][ T834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.481265][ T834] usb 10-1: Product: syz [ 163.482802][ T834] usb 10-1: Manufacturer: syz [ 163.484474][ T834] usb 10-1: SerialNumber: syz [ 163.662639][T13298] hsr_slave_0: left promiscuous mode [ 163.671323][T13298] hsr_slave_1: left promiscuous mode [ 163.673365][T13298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.676254][T13298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.678618][T13298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.680615][T13298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.692192][T14086] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 163.715702][T13298] veth1_macvtap: left promiscuous mode [ 163.717690][T13298] veth0_macvtap: left promiscuous mode [ 163.719164][T13298] veth1_vlan: left promiscuous mode [ 163.720583][T13298] veth0_vlan: left promiscuous mode [ 164.301601][T14086] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 164.475159][T13298] team0 (unregistering): Port device team_slave_1 removed [ 164.505823][ T834] cdc_mbim 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 164.507544][ T834] cdc_mbim 10-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 164.509472][ T834] cdc_mbim 10-1:1.0: setting rx_max = 2048 [ 164.564398][T13298] team0 (unregistering): Port device team_slave_0 removed [ 164.709602][ T834] cdc_mbim 10-1:1.0: setting tx_max = 184 [ 164.711640][ T834] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 164.732991][ T834] wwan wwan0: port wwan0mbim0 attached [ 165.240742][ T834] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 42:42:42:42:42:42 [ 165.248045][ T834] usb 10-1: USB disconnect, device number 12 [ 165.251565][ T834] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 165.367157][ T834] wwan wwan0: port wwan0mbim0 disconnected [ 165.370817][T14027] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 165.391734][T14027] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 165.408711][T14027] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 165.412317][T14027] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 165.464342][T14027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.473221][T14027] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.479625][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.481501][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.486115][T13307] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.487983][T13307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.528488][ T5939] Bluetooth: hci1: command tx timeout [ 165.531296][ T56] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=56 comm=kworker/1:1 [ 165.612076][T14027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.711549][T14027] veth0_vlan: entered promiscuous mode [ 165.715467][T14027] veth1_vlan: entered promiscuous mode [ 165.726084][T14027] veth0_macvtap: entered promiscuous mode [ 165.729584][T14027] veth1_macvtap: entered promiscuous mode [ 165.735642][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.738330][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.740880][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.743600][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.746586][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.749253][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.751853][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.754575][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.757143][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.759804][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.762346][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.765663][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.768184][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.770851][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.774043][T14027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.777822][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.780491][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.783005][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.786103][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.790600][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.793339][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.796199][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.798877][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.801431][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.804073][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.806663][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.809328][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.811828][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.814470][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.817618][T14027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.823969][T14027] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.826673][T14027] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.828984][T14027] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.831225][T14027] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.859814][T13307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.861955][T13307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.873386][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.873653][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 165.873662][ T40] audit: type=1400 audit(2000000066.459:4138): avc: denied { mount } for pid=14158 comm="syz.3.3148" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 165.877082][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.886667][ T40] audit: type=1400 audit(2000000066.479:4139): avc: denied { mounton } for pid=14027 comm="syz-executor" path="/syzkaller.bOvaQU/syz-tmp" dev="sda1" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 165.886916][T14159] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 165.894017][ T40] audit: type=1400 audit(2000000066.479:4140): avc: denied { mount } for pid=14027 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 165.899801][T14159] binder: 14158:14159 ioctl c018620c 20000000 returned -1 [ 165.902925][ T40] audit: type=1400 audit(2000000066.479:4141): avc: denied { mount } for pid=14027 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 165.915165][ T40] audit: type=1400 audit(2000000066.479:4142): avc: denied { mounton } for pid=14027 comm="syz-executor" path="/syzkaller.bOvaQU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 165.921773][ T40] audit: type=1400 audit(2000000066.479:4143): avc: denied { mounton } for pid=14027 comm="syz-executor" path="/syzkaller.bOvaQU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=47594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 165.929133][ T40] audit: type=1400 audit(2000000066.489:4144): avc: denied { mounton } for pid=14027 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 165.935136][ T40] audit: type=1400 audit(2000000066.489:4145): avc: denied { mount } for pid=14027 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 165.940937][ T40] audit: type=1400 audit(2000000066.489:4146): avc: denied { mounton } for pid=14027 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 165.947229][ T40] audit: type=1400 audit(2000000066.489:4147): avc: denied { getopt } for pid=14158 comm="syz.3.3148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.122134][T14168] cgroup: release_agent respecified [ 166.124374][T14168] cgroup: release_agent respecified [ 166.129079][T14168] cgroup: release_agent respecified [ 166.130572][T14168] cgroup: release_agent respecified [ 166.132082][T14168] cgroup: release_agent respecified [ 166.133577][T14168] cgroup: release_agent respecified [ 166.135420][T14168] cgroup: release_agent respecified [ 166.136879][T14168] cgroup: release_agent respecified [ 166.138326][T14168] cgroup: release_agent respecified [ 166.139758][T14168] cgroup: release_agent respecified [ 166.141219][T14168] cgroup: release_agent respecified [ 166.142654][T14168] cgroup: release_agent respecified [ 166.144138][T14168] cgroup: release_agent respecified [ 166.145749][T14168] cgroup: release_agent respecified [ 166.147198][T14168] cgroup: release_agent respecified [ 166.148649][T14168] cgroup: release_agent respecified [ 166.150091][T14168] cgroup: release_agent respecified [ 166.151532][T14168] cgroup: release_agent respecified [ 166.153037][T14168] cgroup: release_agent respecified [ 166.155296][T14168] cgroup: release_agent respecified [ 166.157199][T14168] cgroup: release_agent respecified [ 166.159033][T14168] cgroup: release_agent respecified [ 166.160812][T14168] cgroup: release_agent respecified [ 166.163140][T14168] cgroup: release_agent respecified [ 166.165283][T14168] cgroup: release_agent respecified [ 166.167115][T14168] cgroup: release_agent respecified [ 166.168934][T14168] cgroup: release_agent respecified [ 166.171181][T14168] cgroup: release_agent respecified [ 166.173215][T14168] cgroup: release_agent respecified [ 166.175132][T14168] cgroup: release_agent respecified [ 166.176937][T14168] cgroup: release_agent respecified [ 166.178793][T14168] cgroup: release_agent respecified [ 166.180622][T14168] cgroup: release_agent respecified [ 166.182442][T14168] cgroup: release_agent respecified [ 166.184236][T14168] cgroup: release_agent respecified [ 168.062521][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.583582][T14215] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.589568][T14215] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.591086][T14212] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 168.591501][T14215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.602791][T14215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3166'. [ 168.650430][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.654376][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.659216][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.664589][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.668000][ T5938] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 168.670870][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.723362][T14222] lo speed is unknown, defaulting to 1000 [ 168.824631][T14222] chnl_net:caif_netlink_parms(): no params data found [ 168.894964][T14222] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.899245][T14222] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.901554][T14222] bridge_slave_0: entered allmulticast mode [ 168.903659][T14222] bridge_slave_0: entered promiscuous mode [ 168.906193][T14222] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.908019][T14222] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.909919][T14222] bridge_slave_1: entered allmulticast mode [ 168.911936][T14222] bridge_slave_1: entered promiscuous mode [ 168.943379][T14222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.948828][T14222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.978603][T14222] team0: Port device team_slave_0 added [ 168.981420][T14222] team0: Port device team_slave_1 added [ 168.999974][T14222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.001810][T14222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.009183][T14222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.012726][T14222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.014515][T14222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.022081][T14222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.068172][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.072534][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.081139][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.085798][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.086438][T14222] hsr_slave_0: entered promiscuous mode [ 169.088451][ T5938] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.091524][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.091551][T14222] hsr_slave_1: entered promiscuous mode [ 169.102414][T14222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.104822][T14222] Cannot create hsr debugfs directory [ 169.122692][T14232] lo speed is unknown, defaulting to 1000 [ 169.241102][T14232] chnl_net:caif_netlink_parms(): no params data found [ 169.325896][T14232] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.328862][T14232] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.330743][T14232] bridge_slave_0: entered allmulticast mode [ 169.334949][T14232] bridge_slave_0: entered promiscuous mode [ 169.337641][T14232] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.339512][T14232] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.341535][T14232] bridge_slave_1: entered allmulticast mode [ 169.343578][T14232] bridge_slave_1: entered promiscuous mode [ 169.377998][T14232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.381544][T14232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.412478][T14232] team0: Port device team_slave_0 added [ 169.415280][T14232] team0: Port device team_slave_1 added [ 169.432447][T14232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.434241][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.441542][T14232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.445278][T14232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.447069][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.453561][T14232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.486564][T14232] hsr_slave_0: entered promiscuous mode [ 169.489107][T14232] hsr_slave_1: entered promiscuous mode [ 169.503487][T14232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.505862][T14232] Cannot create hsr debugfs directory [ 169.771118][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.827244][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.887299][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.980672][ T11] bridge_slave_1: left allmulticast mode [ 169.982704][ T11] bridge_slave_1: left promiscuous mode [ 169.984778][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.989913][ T11] bridge_slave_0: left allmulticast mode [ 169.991773][ T11] bridge_slave_0: left promiscuous mode [ 169.996260][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.290541][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.294691][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.304520][ T11] bond0 (unregistering): Released all slaves [ 170.472890][T14254] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 170.726962][ T5939] Bluetooth: hci1: command tx timeout [ 170.789270][ T11] hsr_slave_0: left promiscuous mode [ 170.791363][ T11] hsr_slave_1: left promiscuous mode [ 170.804195][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.806499][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.809751][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.814973][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.843312][T14279] netlink: 'syz.2.3178': attribute type 39 has an invalid length. [ 170.878332][ T11] veth1_macvtap: left promiscuous mode [ 170.880171][ T11] veth0_macvtap: left promiscuous mode [ 170.882035][ T11] veth1_vlan: left promiscuous mode [ 170.883782][ T11] veth0_vlan: left promiscuous mode [ 170.899316][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 170.899332][ T40] audit: type=1400 audit(2000000071.489:4170): avc: denied { watch } for pid=14278 comm="syz.2.3178" path="/125" dev="tmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 170.919495][T14280] overlayfs: invalid origin (0000) [ 171.135794][ T5939] Bluetooth: hci2: command tx timeout [ 171.702172][ T11] team0 (unregistering): Port device team_slave_1 removed [ 171.790043][ T11] team0 (unregistering): Port device team_slave_0 removed [ 172.525806][T14232] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 172.534815][T14232] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 172.538715][T14232] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 172.542512][T14232] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 172.596799][T14222] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 172.613753][T14222] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 172.618759][T14222] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 172.629817][T14222] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 172.683806][T14232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.695267][T14232] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.700307][T13298] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.702238][T13298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.710489][T14222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.715688][T13298] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.717513][T13298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.732153][T14222] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.756578][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.758459][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.761960][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.763777][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.815183][ T5939] Bluetooth: hci1: command tx timeout [ 172.882787][T14222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.891331][T14232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.034505][T14222] veth0_vlan: entered promiscuous mode [ 173.066977][T14222] veth1_vlan: entered promiscuous mode [ 173.075627][T14232] veth0_vlan: entered promiscuous mode [ 173.082054][T14232] veth1_vlan: entered promiscuous mode [ 173.095979][T14222] veth0_macvtap: entered promiscuous mode [ 173.103686][T14222] veth1_macvtap: entered promiscuous mode [ 173.112097][T14232] veth0_macvtap: entered promiscuous mode [ 173.114736][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.117594][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.120001][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.122555][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.125429][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.128373][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.130921][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.133623][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.139924][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.142469][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.146250][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.149017][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.151350][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.153838][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.161855][T14222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.171721][T14232] veth1_macvtap: entered promiscuous mode [ 173.176260][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.179647][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.181394][ T40] audit: type=1400 audit(2000000073.769:4171): avc: denied { create } for pid=14304 comm="syz.2.3182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.182802][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.191160][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.193673][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.196439][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.198993][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.201671][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.204235][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.205140][ T5939] Bluetooth: hci2: command tx timeout [ 173.207502][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.210675][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.213170][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.215804][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.218236][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.221320][T14222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.226969][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.229764][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.232091][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.234646][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.237835][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.240521][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.243041][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.245975][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.248511][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.251189][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.253751][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.256770][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.259302][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.261979][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.264539][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.267638][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.270813][T14232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.276992][T14222] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.279272][T14222] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.281524][T14222] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.283837][T14222] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.294802][ T40] audit: type=1400 audit(2000000073.879:4172): avc: denied { connect } for pid=14304 comm="syz.2.3182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.295242][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.302700][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.306189][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.308899][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.311410][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.314110][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.316791][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.319359][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.321806][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.324487][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.327197][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.329823][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.332340][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.335083][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.337580][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.340232][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.343444][T14232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.346804][T14232] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.349117][T14232] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.351375][T14232] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.353716][T14232] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.358051][ T40] audit: type=1400 audit(2000000073.949:4173): avc: denied { write } for pid=14304 comm="syz.2.3182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.398918][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.401097][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.427031][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.429077][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.436329][T13298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.438620][T13298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.476345][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.478787][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.552260][ T40] audit: type=1400 audit(2000000074.139:4174): avc: denied { read } for pid=14304 comm="syz.2.3182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.745004][ T40] audit: type=1400 audit(2000000074.329:4175): avc: denied { watch } for pid=14322 comm="syz.7.3183" path="/sys/power/pm_trace" dev="sysfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 173.750872][ T40] audit: type=1400 audit(2000000074.329:4176): avc: denied { watch_sb watch_reads } for pid=14322 comm="syz.7.3183" path="/sys/power/pm_trace" dev="sysfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 173.925602][ T40] audit: type=1400 audit(2000000074.519:4177): avc: denied { getopt } for pid=14328 comm="syz.7.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 173.967249][ T40] audit: type=1400 audit(2000000074.559:4178): avc: denied { map } for pid=14330 comm="syz.7.3185" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 173.973512][ T40] audit: type=1400 audit(2000000074.559:4179): avc: denied { execute } for pid=14330 comm="syz.7.3185" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.131280][T14305] syz.2.3182 (14305): drop_caches: 2 [ 174.561554][T14339] netlink: 'syz.2.3187': attribute type 10 has an invalid length. [ 174.563820][T14339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.571169][T14339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.577023][T14339] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 175.119916][T14364] cgroup: name respecified [ 175.121919][T14364] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 175.124512][T14364] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 175.234134][T13298] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.285251][ T5939] Bluetooth: hci2: command tx timeout [ 175.882122][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.885003][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.888238][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.890838][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.893040][ T5938] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 175.895418][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.912925][T14388] lo speed is unknown, defaulting to 1000 [ 175.971884][T14390] PM: Enabling pm_trace changes system date and time during resume. [ 175.971884][T14390] PM: Correct system time has to be restored manually after resume. [ 175.977432][T14390] ptrace attach of "/syz-executor exec"[14380] was attempted by "/syz-executor exec"[14390] [ 176.043725][T14388] chnl_net:caif_netlink_parms(): no params data found [ 176.087502][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 176.087512][ T40] audit: type=1400 audit(2000000076.679:4193): avc: denied { create } for pid=14403 comm="syz.2.3203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 176.087776][T14388] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.094873][ T40] audit: type=1400 audit(2000000076.679:4194): avc: denied { setopt } for pid=14403 comm="syz.2.3203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 176.097634][T14388] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.103685][T14388] bridge_slave_0: entered allmulticast mode [ 176.106413][T14388] bridge_slave_0: entered promiscuous mode [ 176.109060][T14388] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.110941][T14388] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.112841][T14388] bridge_slave_1: entered allmulticast mode [ 176.114914][T14388] bridge_slave_1: entered promiscuous mode [ 176.136565][T14388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.140190][T14388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.167207][T14388] team0: Port device team_slave_0 added [ 176.169937][T14388] team0: Port device team_slave_1 added [ 176.192856][T14388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.195625][T14388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.203038][T14388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.212465][T14388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.214627][T14388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.223332][T14388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.252486][T14388] hsr_slave_0: entered promiscuous mode [ 176.254765][T14388] hsr_slave_1: entered promiscuous mode [ 176.256462][ T25] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 176.259537][T14388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.261545][T14388] Cannot create hsr debugfs directory [ 176.418272][ T25] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 176.420776][ T25] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.422923][ T25] usb 12-1: Product: syz [ 176.424151][ T25] usb 12-1: Manufacturer: syz [ 176.425586][ T25] usb 12-1: SerialNumber: syz [ 176.431054][ T25] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 176.455269][ T25] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 176.870396][T14398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.874398][T14398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.877389][T14398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.879809][T14398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.882990][T14398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.887596][T14398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.891556][T14398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.894698][T14398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.970009][ T40] audit: type=1400 audit(2000000077.559:4195): avc: denied { create } for pid=14406 comm="syz.2.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 176.975087][ T40] audit: type=1400 audit(2000000077.559:4196): avc: denied { append } for pid=14406 comm="syz.2.3204" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 177.106941][T11906] usb 12-1: USB disconnect, device number 2 [ 177.205602][T13298] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.288782][T13298] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.365189][ T5939] Bluetooth: hci2: command tx timeout [ 177.385940][T13298] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.515095][T13298] bridge_slave_1: left allmulticast mode [ 177.517078][T13298] bridge_slave_1: left promiscuous mode [ 177.519015][T13298] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.524579][T13298] bridge_slave_0: left allmulticast mode [ 177.525132][ T25] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive [ 177.528181][T13298] bridge_slave_0: left promiscuous mode [ 177.530548][T13298] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.530790][ T25] ath9k_htc: Failed to initialize the device [ 177.538869][T11906] usb 12-1: ath9k_htc: USB layer deinitialized [ 177.669361][ T40] audit: type=1400 audit(2000000078.259:4197): avc: denied { load_policy } for pid=14413 comm="syz.7.3205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 177.789490][ T40] audit: type=1400 audit(2000000078.379:4198): avc: denied { write } for pid=14415 comm="syz.7.3206" name="/" dev="9p" ino=36449017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.809243][ T40] audit: type=1400 audit(2000000078.379:4199): avc: denied { add_name } for pid=14415 comm="syz.7.3206" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.822355][ T40] audit: type=1400 audit(2000000078.379:4200): avc: denied { create } for pid=14415 comm="syz.7.3206" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 177.834720][ T40] audit: type=1400 audit(2000000078.379:4201): avc: denied { associate } for pid=14415 comm="syz.7.3206" name="cpuacct.usage_sys" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 177.841135][ T40] audit: type=1400 audit(2000000078.379:4202): avc: denied { read append open } for pid=14415 comm="syz.7.3206" path="/11/file0/cpuacct.usage_sys" dev="9p" ino=36449105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 177.901308][T13298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.906378][T13298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.909972][T13298] bond0 (unregistering): Released all slaves [ 177.925208][ T5939] Bluetooth: hci1: command tx timeout [ 178.377601][T13298] hsr_slave_0: left promiscuous mode [ 178.379668][T13298] hsr_slave_1: left promiscuous mode [ 178.382313][T13298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.384303][T13298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.392649][T13298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.394796][T13298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.446696][T13298] veth1_macvtap: left promiscuous mode [ 178.448230][T13298] veth0_macvtap: left promiscuous mode [ 178.449829][T13298] veth1_vlan: left promiscuous mode [ 178.451277][T13298] veth0_vlan: left promiscuous mode [ 178.460916][T14452] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 178.582886][T14465] FAULT_INJECTION: forcing a failure. [ 178.582886][T14465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.586434][T14465] CPU: 2 UID: 0 PID: 14465 Comm: syz.7.3213 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 178.589316][T14465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.592984][T14465] Call Trace: [ 178.593864][T14465] [ 178.594767][T14465] dump_stack_lvl+0x16c/0x1f0 [ 178.596337][T14465] should_fail_ex+0x497/0x5b0 [ 178.597935][T14465] _copy_to_user+0x32/0xd0 [ 178.599447][T14465] rng_dev_read+0x1f4/0x800 [ 178.601133][T14465] ? __pfx_virtio_read+0x10/0x10 [ 178.602960][T14465] ? __pfx_rng_dev_read+0x10/0x10 [ 178.604893][T14465] ? bpf_lsm_file_permission+0x9/0x10 [ 178.606868][T14465] ? security_file_permission+0x71/0x210 [ 178.608916][T14465] ? __pfx_rng_dev_read+0x10/0x10 [ 178.610751][T14465] vfs_readv+0x6bf/0x890 [ 178.612308][T14465] ? __pfx___lock_acquire+0x10/0x10 [ 178.613830][T14465] ? find_held_lock+0x2d/0x110 [ 178.615091][T14465] ? __pfx_vfs_readv+0x10/0x10 [ 178.616325][T14465] ? __fget_files+0x1fc/0x3a0 [ 178.617568][T14465] ? __pfx_lock_release+0x10/0x10 [ 178.618885][T14465] ? __fget_files+0x206/0x3a0 [ 178.620104][T14465] ? do_preadv+0x1b1/0x270 [ 178.621196][T14465] do_preadv+0x1b1/0x270 [ 178.622333][T14465] ? __pfx_do_preadv+0x10/0x10 [ 178.623586][T14465] do_syscall_64+0xcd/0x250 [ 178.624794][T14465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.626362][T14465] RIP: 0033:0x7f8e2317fed9 [ 178.627528][T14465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.633032][T14465] RSP: 002b:00007f8e23ebc058 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 178.635182][T14465] RAX: ffffffffffffffda RBX: 00007f8e23345fa0 RCX: 00007f8e2317fed9 [ 178.637268][T14465] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000005 [ 178.639563][T14465] RBP: 00007f8e23ebc0a0 R08: 00000000ffffffff R09: 0000000000000000 [ 178.641531][T14465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.643530][T14465] R13: 0000000000000000 R14: 00007f8e23345fa0 R15: 00007fffc37929f8 [ 178.645739][T14465] [ 179.394050][T13298] team0 (unregistering): Port device team_slave_1 removed [ 179.495997][T13298] team0 (unregistering): Port device team_slave_0 removed [ 180.015049][ T5939] Bluetooth: hci1: command tx timeout [ 180.324701][T14388] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 180.338035][T14388] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 180.342789][T14388] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 180.361829][T14483] syzkaller0: entered promiscuous mode [ 180.363856][T14483] syzkaller0: entered allmulticast mode [ 180.369390][T14458] syzkaller0: tun_net_xmit 48 [ 180.371177][T14388] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 181.606893][ T5938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.618984][ T5938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.626255][ T5938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.640062][ T5938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.643068][ T5938] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 181.645888][ T5938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.999398][T14486] bridge2: entered promiscuous mode [ 182.001345][T14486] bridge2: entered allmulticast mode [ 182.033378][T14489] lo speed is unknown, defaulting to 1000 [ 182.051598][T14388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.068190][T14388] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.074411][T13302] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.076144][T14494] openvswitch: netlink: nsh attr 8192 is out of range max 3 [ 182.076666][T13302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.078540][T14494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.087327][T13302] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.089737][T13302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.095359][ T5939] Bluetooth: hci1: command tx timeout [ 182.111830][T14494] openvswitch: netlink: nsh attr 8192 is out of range max 3 [ 182.114079][T14494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.150511][T14388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.151708][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 182.151717][ T40] audit: type=1400 audit(2000000082.739:4213): avc: denied { ioctl } for pid=14498 comm="syz.7.3223" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 182.168649][ T40] audit: type=1400 audit(2000000082.759:4214): avc: denied { setopt } for pid=14498 comm="syz.7.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.174443][T14501] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.177714][T14501] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.180690][T14501] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.183647][T14501] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.189628][T14501] vxlan0: entered promiscuous mode [ 182.191283][T14501] vxlan0: entered allmulticast mode [ 182.214522][ T40] audit: type=1400 audit(2000000082.799:4215): avc: denied { accept } for pid=14504 comm="syz.7.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.225164][ T40] audit: type=1400 audit(2000000082.809:4216): avc: denied { read } for pid=14500 comm="syz.2.3224" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.247804][T14489] chnl_net:caif_netlink_parms(): no params data found [ 182.279253][T14512] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3226'. [ 182.281956][ T40] audit: type=1400 audit(2000000082.869:4217): avc: denied { watch_reads } for pid=14510 comm="syz.7.3226" path="/23" dev="tmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 182.294893][ T40] audit: type=1400 audit(2000000082.879:4218): avc: denied { bind } for pid=14510 comm="syz.7.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 182.302898][ T40] audit: type=1400 audit(2000000082.879:4219): avc: denied { connect } for pid=14510 comm="syz.7.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 182.326522][ T40] audit: type=1400 audit(2000000082.919:4220): avc: denied { create } for pid=14518 comm="syz.7.3227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 182.333215][T14489] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.335528][T14489] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.337004][ T40] audit: type=1400 audit(2000000082.919:4221): avc: denied { setopt } for pid=14518 comm="syz.7.3227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 182.337551][T14489] bridge_slave_0: entered allmulticast mode [ 182.344497][T14489] bridge_slave_0: entered promiscuous mode [ 182.356530][T14489] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.358487][T14489] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.360440][T14489] bridge_slave_1: entered allmulticast mode [ 182.362612][T14489] bridge_slave_1: entered promiscuous mode [ 182.363805][T14521] FAULT_INJECTION: forcing a failure. [ 182.363805][T14521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.374582][T14521] CPU: 1 UID: 0 PID: 14521 Comm: syz.7.3228 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 182.377394][T14521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.380149][T14521] Call Trace: [ 182.381032][T14521] [ 182.381809][T14521] dump_stack_lvl+0x16c/0x1f0 [ 182.383048][T14521] should_fail_ex+0x497/0x5b0 [ 182.384285][T14521] _copy_to_user+0x32/0xd0 [ 182.385486][T14521] rng_dev_read+0x1f4/0x800 [ 182.386694][T14521] ? __pfx_virtio_read+0x10/0x10 [ 182.387990][T14521] ? __pfx_rng_dev_read+0x10/0x10 [ 182.389309][T14521] ? bpf_lsm_file_permission+0x9/0x10 [ 182.390708][T14521] ? security_file_permission+0x71/0x210 [ 182.392176][T14521] ? __pfx_rng_dev_read+0x10/0x10 [ 182.393461][T14521] vfs_readv+0x6bf/0x890 [ 182.394577][T14521] ? __pfx___lock_acquire+0x10/0x10 [ 182.395926][T14521] ? find_held_lock+0x2d/0x110 [ 182.397202][T14521] ? __pfx_vfs_readv+0x10/0x10 [ 182.398453][T14521] ? __fget_files+0x1fc/0x3a0 [ 182.399677][T14521] ? __pfx_lock_release+0x10/0x10 [ 182.401003][T14521] ? __fget_files+0x206/0x3a0 [ 182.402227][T14521] ? do_preadv+0x1b1/0x270 [ 182.403393][T14521] do_preadv+0x1b1/0x270 [ 182.404505][T14521] ? __pfx_do_preadv+0x10/0x10 [ 182.405799][T14521] do_syscall_64+0xcd/0x250 [ 182.406999][T14521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.408542][T14521] RIP: 0033:0x7f8e2317fed9 [ 182.409714][T14521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.414669][T14521] RSP: 002b:00007f8e23ebc058 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 182.416808][T14521] RAX: ffffffffffffffda RBX: 00007f8e23345fa0 RCX: 00007f8e2317fed9 [ 182.418887][T14521] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000005 [ 182.420931][T14521] RBP: 00007f8e23ebc0a0 R08: 00000000ffffffff R09: 0000000000000000 [ 182.422963][T14521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.425004][T14521] R13: 0000000000000000 R14: 00007f8e23345fa0 R15: 00007fffc37929f8 [ 182.427045][T14521] [ 182.463718][T14388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.469859][T14489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.475666][T14489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.500833][T14525] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3229'. [ 182.504125][T14525] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3229'. [ 182.508301][T14525] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3229'. [ 182.511494][T14525] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3229'. [ 182.513870][T14525] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3229'. [ 182.521979][T14489] team0: Port device team_slave_0 added [ 182.525490][T14489] team0: Port device team_slave_1 added [ 182.560465][T14489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.562340][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.574480][T14489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.578341][T14489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.580127][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.583091][T14532] xt_CT: No such helper "pptp" [ 182.599585][T14489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.642759][T14489] hsr_slave_0: entered promiscuous mode [ 182.645776][T14489] hsr_slave_1: entered promiscuous mode [ 182.647819][T14489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.649807][T14489] Cannot create hsr debugfs directory [ 182.650479][ T40] audit: type=1400 audit(2000000083.239:4222): avc: denied { bind } for pid=14535 comm="syz.7.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.743860][T14540] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3233'. [ 182.763949][T14388] veth0_vlan: entered promiscuous mode [ 182.784728][T14388] veth1_vlan: entered promiscuous mode [ 182.803545][T14489] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 182.807665][T14543] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 182.810497][T14543] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 182.816230][T14489] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 182.820944][T14489] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 182.828976][T14489] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 182.840493][T14388] veth0_macvtap: entered promiscuous mode [ 182.847828][T14388] veth1_macvtap: entered promiscuous mode [ 182.859853][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.862522][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.865732][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.868444][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.870869][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.873551][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.876617][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.879191][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.881688][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.884384][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.887818][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.890508][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.893037][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.896074][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.900356][T14388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.903989][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.907342][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.909848][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.912509][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.915237][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.917783][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.920283][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.922943][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.926179][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.928855][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.931376][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.934040][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.937251][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.939917][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.942430][T14388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.945575][T14388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.948655][T14388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.954739][T14388] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.957486][T14388] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.959740][T14388] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.961992][T14388] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.017784][T14458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.020682][T14458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.031393][T14489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.062285][T13301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.063043][T14489] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.064822][T13301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.071711][T13300] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.073546][T13300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.075952][T14547] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3235'. [ 183.087950][T14547] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3235'. [ 183.093504][T13300] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.095799][T13300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.217828][T14489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.314485][T14569] xt_hashlimit: size too large, truncated to 1048576 [ 183.316992][T14569] xt_hashlimit: max too large, truncated to 1048576 [ 183.330932][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3240'. [ 183.378137][T14489] veth0_vlan: entered promiscuous mode [ 183.383277][T14489] veth1_vlan: entered promiscuous mode [ 183.399460][T14489] veth0_macvtap: entered promiscuous mode [ 183.402601][T14489] veth1_macvtap: entered promiscuous mode [ 183.410523][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.413319][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.415996][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.418647][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.421148][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.423903][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.427571][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.430315][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.432898][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.435722][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.442637][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.446391][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.448951][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.451809][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.454257][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.458518][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.461875][T14489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.470834][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.473582][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.476483][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.479185][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.482567][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.486345][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.488704][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.491373][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.493958][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.497195][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.499964][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.503602][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.507589][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.511301][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.514764][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.518873][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.522331][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.529256][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.533250][T14489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.538597][T14489] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.541733][T14489] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.545334][T14489] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.548595][T14489] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.573043][T14580] netlink: 'syz.2.3241': attribute type 28 has an invalid length. [ 183.588353][T14580] netlink: 'syz.2.3241': attribute type 3 has an invalid length. [ 183.611556][T14459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.613728][T14459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.646376][T14458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.649019][T14458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.687290][ T5939] Bluetooth: hci4: command tx timeout [ 184.139219][T14616] FAULT_INJECTION: forcing a failure. [ 184.139219][T14616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.143417][T14616] CPU: 0 UID: 0 PID: 14616 Comm: syz.2.3251 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 184.146404][T14616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 184.149476][T14616] Call Trace: [ 184.150506][T14616] [ 184.151493][T14616] dump_stack_lvl+0x16c/0x1f0 [ 184.152786][T14616] should_fail_ex+0x497/0x5b0 [ 184.154364][T14616] _copy_to_user+0x32/0xd0 [ 184.155893][T14616] rng_dev_read+0x1f4/0x800 [ 184.157229][T14616] ? __pfx_virtio_read+0x10/0x10 [ 184.158586][T14616] ? __pfx_rng_dev_read+0x10/0x10 [ 184.160208][T14616] ? bpf_lsm_file_permission+0x9/0x10 [ 184.161860][T14616] ? security_file_permission+0x71/0x210 [ 184.163261][T14616] ? __pfx_rng_dev_read+0x10/0x10 [ 184.164656][T14616] vfs_readv+0x6bf/0x890 [ 184.165855][T14616] ? __pfx___lock_acquire+0x10/0x10 [ 184.167214][T14616] ? find_held_lock+0x2d/0x110 [ 184.168378][T14616] ? __pfx_vfs_readv+0x10/0x10 [ 184.169803][T14616] ? __fget_files+0x1fc/0x3a0 [ 184.170982][T14616] ? __pfx_lock_release+0x10/0x10 [ 184.172419][T14616] ? __fget_files+0x206/0x3a0 [ 184.173627][T14616] ? do_preadv+0x1b1/0x270 [ 184.174854][T14616] do_preadv+0x1b1/0x270 [ 184.176080][T14616] ? __pfx_do_preadv+0x10/0x10 [ 184.177578][T14616] do_syscall_64+0xcd/0x250 [ 184.179000][T14616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.181133][T14616] RIP: 0033:0x7f87b937fed9 [ 184.182750][T14616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.188120][T14616] RSP: 002b:00007f87ba1f3058 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 184.190425][T14616] RAX: ffffffffffffffda RBX: 00007f87b9545fa0 RCX: 00007f87b937fed9 [ 184.192458][T14616] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000005 [ 184.194514][T14616] RBP: 00007f87ba1f30a0 R08: 00000000ffffffff R09: 0000000000000000 [ 184.196542][T14616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.198616][T14616] R13: 0000000000000000 R14: 00007f87b9545fa0 R15: 00007fffab45ce18 [ 184.201475][T14616] [ 184.357641][T14627] lo speed is unknown, defaulting to 1000 [ 184.837880][ T1141] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.240460][T14642] fuse: Bad value for 'fd' [ 185.250310][T11340] udevd[11340]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 185.287809][T14646] tipc: Started in network mode [ 185.289580][T14646] tipc: Node identity ac14140f, cluster identity 4711 [ 185.291935][T14646] tipc: New replicast peer: 255.255.255.255 [ 185.294266][T14646] tipc: Enabled bearer , priority 10 [ 185.297436][T14647] 9pnet_fd: Insufficient options for proto=fd [ 185.356788][T14649] syzkaller0: entered promiscuous mode [ 185.358260][T14649] syzkaller0: entered allmulticast mode [ 185.364757][T14649] syzkaller0: tun_net_xmit 1280 [ 185.371109][T14649] syzkaller0: create flow: hash 3780100007 index 1 [ 185.374051][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.385182][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.388439][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.392045][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.396112][ T5938] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 185.398871][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.441208][T14648] syzkaller0: delete flow: hash 3780100007 index 1 [ 185.495718][ T25] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 185.645022][ T25] usb 12-1: Using ep0 maxpacket: 8 [ 185.647537][ T25] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 185.649816][ T25] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.652326][ T25] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.654814][ T25] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.657879][ T25] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.661244][ T25] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.663538][ T25] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.779306][ T5939] Bluetooth: hci4: command tx timeout [ 185.881729][ T25] usb 12-1: usb_control_msg returned -32 [ 185.883336][ T25] usbtmc 12-1:16.0: can't read capabilities [ 186.151084][T14653] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.209748][T14653] input: syz0 as /devices/virtual/input/input13 [ 186.249422][T14655] ipt_REJECT: TCP_RESET invalid for non-tcp [ 186.410249][T11906] tipc: Node number set to 2886997007 [ 186.457672][ T1020] usb 12-1: USB disconnect, device number 3 [ 187.009787][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.014132][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.021982][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.023954][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.026195][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.028123][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.030036][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.032046][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.033933][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.041428][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.043948][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.046587][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.048520][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.050564][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.052499][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.054415][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.057237][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.059206][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.061157][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.063437][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.065477][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.067959][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.070378][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.072266][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.074528][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.076617][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.078656][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.080916][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.083300][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.085680][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.087625][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.089562][T10680] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 187.099145][T10680] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz0] on syz0 [ 187.162896][ T1141] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.174714][T14650] lo speed is unknown, defaulting to 1000 [ 187.184090][T14663] xt_cgroup: xt_cgroup: no path or classid specified [ 187.210031][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 187.210045][ T40] audit: type=1400 audit(2000000087.799:4249): avc: denied { getopt } for pid=14662 comm="syz.7.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.331214][T14669] xt_CONNSECMARK: invalid mode: 0 [ 187.332328][ T1141] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.445610][ T5939] Bluetooth: hci1: command tx timeout [ 187.471869][T14675] CIFS mount error: No usable UNC path provided in device string! [ 187.471869][T14675] [ 187.492369][T14684] unknown channel width for channel at 909000KHz? [ 187.494052][T14684] unknown channel width for channel at 909000KHz? [ 187.496977][T14684] unknown channel width for channel at 909000KHz? [ 187.515309][T14675] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 187.515820][ T1141] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.559066][T14650] chnl_net:caif_netlink_parms(): no params data found [ 187.683059][T14650] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.687330][T14650] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.689821][T14650] bridge_slave_0: entered allmulticast mode [ 187.692622][T14650] bridge_slave_0: entered promiscuous mode [ 187.697966][T14650] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.700410][T14650] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.702872][T14650] bridge_slave_1: entered allmulticast mode [ 187.705768][T14650] bridge_slave_1: entered promiscuous mode [ 187.816699][T14650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.824102][T14650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.851552][ T5939] Bluetooth: hci4: command tx timeout [ 187.854547][ T1141] bridge_slave_1: left allmulticast mode [ 187.856181][ T1141] bridge_slave_1: left promiscuous mode [ 187.857713][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.868188][ T1141] bridge_slave_0: left allmulticast mode [ 187.870138][ T1141] bridge_slave_0: left promiscuous mode [ 187.871692][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.898252][ T40] audit: type=1400 audit(2000000088.489:4250): avc: denied { open } for pid=14705 comm="syz.2.3275" path="/dev/ptyq9" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 187.905240][ T40] audit: type=1400 audit(2000000088.489:4251): avc: denied { ioctl } for pid=14705 comm="syz.2.3275" path="/dev/ptyq9" dev="devtmpfs" ino=136 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 188.368020][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.372223][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.377211][ T1141] bond0 (unregistering): Released all slaves [ 188.475402][T14650] team0: Port device team_slave_0 added [ 188.487832][T14650] team0: Port device team_slave_1 added [ 188.590446][T14650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.592971][T14650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.601442][T14650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.608510][T14650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.610473][T14650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.617649][T14650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.619923][T14713] netlink: 'syz.7.3277': attribute type 1 has an invalid length. [ 188.623014][T14713] netlink: 'syz.7.3277': attribute type 4 has an invalid length. [ 188.626718][T14713] __nla_validate_parse: 2 callbacks suppressed [ 188.626728][T14713] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.3277'. [ 188.673577][T14727] tmpfs: Bad value for 'mpol' [ 188.740604][T14732] netlink: 'syz.8.3282': attribute type 4 has an invalid length. [ 188.781464][T14650] hsr_slave_0: entered promiscuous mode [ 188.785059][T14650] hsr_slave_1: entered promiscuous mode [ 188.787005][T14650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.789776][T14650] Cannot create hsr debugfs directory [ 188.796280][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'. [ 188.901846][ T1141] hsr_slave_0: left promiscuous mode [ 188.923431][ T1141] hsr_slave_1: left promiscuous mode [ 188.929061][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.931028][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.933702][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.935779][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.940402][ T40] audit: type=1400 audit(2000000089.529:4252): avc: denied { create } for pid=14740 comm="syz.2.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 188.954557][ T40] audit: type=1400 audit(2000000089.539:4253): avc: denied { ioctl } for pid=14740 comm="syz.2.3284" path="socket:[54602]" dev="sockfs" ino=54602 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 188.966833][ T1141] veth1_macvtap: left promiscuous mode [ 188.968801][ T1141] veth0_macvtap: left promiscuous mode [ 188.970299][ T1141] veth1_vlan: left promiscuous mode [ 188.971830][ T1141] veth0_vlan: left promiscuous mode [ 189.055175][ T40] audit: type=1400 audit(2000000089.629:4254): avc: denied { listen } for pid=14747 comm="syz.2.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.099296][ T40] audit: type=1400 audit(2000000089.689:4255): avc: denied { accept } for pid=14747 comm="syz.2.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.104935][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3286'. [ 189.505343][ T40] audit: type=1400 audit(2000000090.099:4256): avc: denied { read } for pid=14751 comm="syz.7.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 189.537773][ T5939] Bluetooth: hci1: command tx timeout [ 189.804697][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 189.903886][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 189.929215][ T5939] Bluetooth: hci4: command tx timeout [ 190.611024][T14748] bridge0: port 3(macvlan2) entered blocking state [ 190.612898][T14748] bridge0: port 3(macvlan2) entered disabled state [ 190.614694][T14748] macvlan2: entered allmulticast mode [ 190.624947][T14748] bridge0: entered allmulticast mode [ 190.633770][T14748] macvlan2: left allmulticast mode [ 190.635256][T14748] bridge0: left allmulticast mode [ 190.661217][ T40] audit: type=1400 audit(2000000091.249:4257): avc: denied { read } for pid=14756 comm="syz.8.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.692840][T14763] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3289'. [ 190.750934][ T40] audit: type=1400 audit(2000000091.339:4258): avc: denied { mount } for pid=14767 comm="syz.2.3290" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 190.757148][T14768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=56 sclass=netlink_tcpdiag_socket pid=14768 comm=syz.2.3290 [ 191.173066][T14808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3298'. [ 191.209618][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3299'. [ 191.357193][T14821] Bluetooth: hci5: Frame reassembly failed (-84) [ 191.364539][T13301] Bluetooth: hci5: Frame reassembly failed (-84) [ 191.492699][T14840] 9pnet_fd: p9_fd_create_unix (14840): problem connecting socket: éq‰Y’3aK: -111 [ 191.507100][T14840] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 191.511707][T14842] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 191.604217][T14848] overlay: Unknown parameter 'smackfsfloor' [ 191.606122][ T5938] Bluetooth: hci1: command tx timeout [ 191.646478][T14650] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 191.651781][T14650] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 191.663764][T14650] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 191.667560][T14650] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 191.704651][T14650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.711258][T14650] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.716958][T14458] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.718958][T14458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.723949][T14459] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.726014][T14459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.833467][T14650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.910645][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3305'. [ 191.938094][T14650] veth0_vlan: entered promiscuous mode [ 191.948477][T14650] veth1_vlan: entered promiscuous mode [ 191.963546][T14650] veth0_macvtap: entered promiscuous mode [ 191.970444][T14650] veth1_macvtap: entered promiscuous mode [ 191.980147][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.980647][T14872] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.982983][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.988642][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.991468][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.994041][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.997018][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.999613][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.002166][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.004678][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.007700][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.010144][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.012813][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.016686][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.019455][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.022025][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.025751][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.029108][T14650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.034587][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.038594][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.041162][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.043860][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.047339][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.050886][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.054389][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.057914][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.060430][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.063026][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.065720][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.068634][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.071314][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.074067][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.076925][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.079684][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.082277][T14650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.085897][T14650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.089189][T14650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.093492][T14650] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.096541][T14650] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.098889][T14650] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.101228][T14650] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.149372][T14459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.152055][T14459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.170761][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.172895][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.365130][ T5939] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 193.440785][T14877] tipc: Started in network mode [ 193.442114][T14877] tipc: Node identity ac14140f, cluster identity 4711 [ 193.443945][T14877] tipc: New replicast peer: 255.255.255.255 [ 193.446341][T14877] tipc: Enabled bearer , priority 10 [ 193.485023][T14879] netlink: 'syz.7.3309': attribute type 126 has an invalid length. [ 193.488182][T14879] netlink: 1284 bytes leftover after parsing attributes in process `syz.7.3309'. [ 193.491621][T14879] openvswitch: netlink: Missing key (keys=40, expected=80) [ 193.676564][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 193.676575][ T40] audit: type=1400 audit(2000000094.269:4271): avc: denied { search } for pid=5652 comm="dhcpcd" name="netdev:wlan3" dev="debugfs" ino=54985 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 193.927572][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.048415][ T40] audit: type=1404 audit(2000000094.639:4272): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 194.054787][ T40] audit: type=1400 audit(2000000094.639:4273): avc: denied { read write } for pid=14232 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 194.065320][ T40] audit: type=1404 audit(2000000094.649:4274): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 194.070713][ T40] audit: type=1400 audit(2000000094.649:4275): avc: denied { prog_load } for pid=14921 comm="syz.8.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.091390][ T40] audit: type=1400 audit(2000000094.649:4276): avc: denied { map_create } for pid=14921 comm="syz.8.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.104921][ T40] audit: type=1400 audit(2000000094.649:4277): avc: denied { bpf } for pid=14921 comm="syz.8.3316" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.114260][ T40] audit: type=1400 audit(2000000094.649:4278): avc: denied { map_read map_write } for pid=14921 comm="syz.8.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.131611][ T40] audit: type=1400 audit(2000000094.649:4279): avc: denied { read write } for pid=14921 comm="syz.8.3316" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.140157][ T40] audit: type=1400 audit(2000000094.649:4280): avc: denied { open } for pid=14921 comm="syz.8.3316" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.326804][T14458] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.400210][T14932] ================================================================== [ 194.402410][T14932] BUG: KASAN: vmalloc-out-of-bounds in acpi_nfit_ctl+0x19e8/0x1cf0 [ 194.404763][T14932] Read of size 4 at addr ffffc90005d3b030 by task syz.7.3319/14932 [ 194.408749][T14932] [ 194.409611][T14932] CPU: 1 UID: 0 PID: 14932 Comm: syz.7.3319 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 194.413208][T14932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.416436][T14932] Call Trace: [ 194.417364][T14932] [ 194.418145][T14932] dump_stack_lvl+0x116/0x1f0 [ 194.419387][T14932] print_report+0xc3/0x620 [ 194.420562][T14932] ? __virt_addr_valid+0x5e/0x590 [ 194.421892][T14932] kasan_report+0xd9/0x110 [ 194.423062][T14932] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 194.424422][T14932] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 194.426099][T14932] acpi_nfit_ctl+0x19e8/0x1cf0 [ 194.427721][T14932] ? trace_contention_end+0xee/0x140 [ 194.429544][T14932] ? __mutex_lock+0x1cc/0xa60 [ 194.431071][T14932] ? __pfx_acpi_nfit_ctl+0x10/0x10 [ 194.432697][T14932] ? nd_ioctl+0xf7a/0x18c0 [ 194.434207][T14932] ? __pfx___mutex_lock+0x10/0x10 [ 194.435940][T14932] ? __pfx___mutex_lock+0x10/0x10 [ 194.437444][T14932] ? __might_fault+0xe3/0x190 [ 194.438703][T14932] nd_ioctl+0x13bc/0x18c0 [ 194.439846][T14932] ? __pfx_acpi_nfit_clear_to_send+0x10/0x10 [ 194.441502][T14932] ? __pfx_nd_ioctl+0x10/0x10 [ 194.442757][T14932] ? __pfx_lock_release+0x10/0x10 [ 194.444094][T14932] ? selinux_file_ioctl+0x180/0x270 [ 194.445574][T14932] ? selinux_file_ioctl+0xb4/0x270 [ 194.446942][T14932] ? __pfx_bus_ioctl+0x10/0x10 [ 194.448230][T14932] __x64_sys_ioctl+0x190/0x200 [ 194.449534][T14932] do_syscall_64+0xcd/0x250 [ 194.450764][T14932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.452373][T14932] RIP: 0033:0x7f8e2317fed9 [ 194.453578][T14932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.458687][T14932] RSP: 002b:00007f8e23ebc058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.460878][T14932] RAX: ffffffffffffffda RBX: 00007f8e23345fa0 RCX: 00007f8e2317fed9 [ 194.462972][T14932] RDX: 0000000020000180 RSI: 00000000c008640a RDI: 0000000000000008 [ 194.465147][T14932] RBP: 00007f8e231f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 194.467236][T14932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.469351][T14932] R13: 0000000000000000 R14: 00007f8e23345fa0 R15: 00007fffc37929f8 [ 194.471468][T14932] [ 194.472305][T14932] [ 194.472956][T14932] The buggy address belongs to the virtual mapping at [ 194.472956][T14932] [ffffc90005d3b000, ffffc90005d3d000) created by: [ 194.472956][T14932] nd_ioctl+0xf14/0x18c0 [ 194.477125][T14932] [ 194.477820][T14932] The buggy address belongs to the physical page: [ 194.479415][T14932] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888032b82700 pfn:0x44bce [ 194.482117][T14932] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 194.483923][T14932] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 194.486313][T14932] raw: ffff888032b82700 0000000000000000 00000001ffffffff 0000000000000000 [ 194.488581][T14932] page dumped because: kasan: bad access detected [ 194.490466][T14932] page_owner tracks the page as allocated [ 194.492022][T14932] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), pid 14932, tgid 14931 (syz.7.3319), ts 194400199096, free_ts 194381096545 [ 194.497605][T14932] post_alloc_hook+0x2d1/0x350 [ 194.499347][T14932] get_page_from_freelist+0xfce/0x2f80 [ 194.501313][T14932] __alloc_pages_noprof+0x223/0x25b0 [ 194.503218][T14932] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 194.505123][T14932] alloc_pages_bulk_array_mempolicy_noprof+0x250/0x11f0 [ 194.507457][T14932] __vmalloc_node_range_noprof+0x517/0x1530 [ 194.509515][T14932] vmalloc_noprof+0x6b/0x90 [ 194.511098][T14932] nd_ioctl+0xf14/0x18c0 [ 194.512689][T14932] __x64_sys_ioctl+0x190/0x200 [ 194.514419][T14932] do_syscall_64+0xcd/0x250 [ 194.516058][T14932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.518184][T14932] page last free pid 30 tgid 30 stack trace: [ 194.520341][T14932] free_unref_page+0x661/0x1080 [ 194.522123][T14932] kasan_depopulate_vmalloc_pte+0x63/0x80 [ 194.524167][T14932] __apply_to_page_range+0x5fd/0xd30 [ 194.526078][T14932] kasan_release_vmalloc+0xd1/0xe0 [ 194.527925][T14932] purge_vmap_node+0x1d1/0xa40 [ 194.529676][T14932] __purge_vmap_area_lazy+0x9bf/0xc10 [ 194.531632][T14932] drain_vmap_area_work+0x27/0x40 [ 194.533469][T14932] process_one_work+0x9c5/0x1ba0 [ 194.535253][T14932] worker_thread+0x6c8/0xf00 [ 194.536951][T14932] kthread+0x2c1/0x3a0 [ 194.538437][T14932] ret_from_fork+0x45/0x80 [ 194.540085][T14932] ret_from_fork_asm+0x1a/0x30 [ 194.541912][T14932] [ 194.542813][T14932] Memory state around the buggy address: [ 194.544839][T14932] ffffc90005d3af00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 194.547678][T14932] ffffc90005d3af80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 194.550473][T14932] >ffffc90005d3b000: 00 00 00 00 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 194.553402][T14932] ^ [ 194.555328][T14932] ffffc90005d3b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 194.558190][T14932] ffffc90005d3b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 194.561093][T14932] ================================================================== [ 194.566328][T10681] tipc: Node number set to 2886997007 [ 194.567237][T14932] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 194.567251][T14932] CPU: 1 UID: 0 PID: 14932 Comm: syz.7.3319 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 194.567275][T14932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.567287][T14932] Call Trace: [ 194.567293][T14932] [ 194.567301][T14932] dump_stack_lvl+0x3d/0x1f0 [ 194.567331][T14932] panic+0x71d/0x800 [ 194.567361][T14932] ? __pfx_panic+0x10/0x10 [ 194.567391][T14932] ? preempt_schedule_thunk+0x1a/0x30 [ 194.567412][T14932] ? preempt_schedule_common+0x44/0xc0 [ 194.567441][T14932] check_panic_on_warn+0xab/0xb0 [ 194.567459][T14932] end_report+0x117/0x180 [ 194.567482][T14932] kasan_report+0xe9/0x110 [ 194.567504][T14932] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 194.567530][T14932] ? acpi_nfit_ctl+0x19e8/0x1cf0 [ 194.567552][T14932] acpi_nfit_ctl+0x19e8/0x1cf0 [ 194.567573][T14932] ? trace_contention_end+0xee/0x140 [ 194.567597][T14932] ? __mutex_lock+0x1cc/0xa60 [ 194.567622][T14932] ? __pfx_acpi_nfit_ctl+0x10/0x10 [ 194.567641][T14932] ? nd_ioctl+0xf7a/0x18c0 [ 194.567663][T14932] ? __pfx___mutex_lock+0x10/0x10 [ 194.567686][T14932] ? __pfx___mutex_lock+0x10/0x10 [ 194.567713][T14932] ? __might_fault+0xe3/0x190 [ 194.567741][T14932] nd_ioctl+0x13bc/0x18c0 [ 194.610741][T14932] ? __pfx_acpi_nfit_clear_to_send+0x10/0x10 [ 194.612905][T14932] ? __pfx_nd_ioctl+0x10/0x10 [ 194.614652][T14932] ? __pfx_lock_release+0x10/0x10 [ 194.616410][T14932] ? selinux_file_ioctl+0x180/0x270 [ 194.617746][T14932] ? selinux_file_ioctl+0xb4/0x270 [ 194.619029][T14932] ? __pfx_bus_ioctl+0x10/0x10 [ 194.620300][T14932] __x64_sys_ioctl+0x190/0x200 [ 194.621565][T14932] do_syscall_64+0xcd/0x250 [ 194.622743][T14932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.624306][T14932] RIP: 0033:0x7f8e2317fed9 [ 194.625948][T14932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.631535][T14932] RSP: 002b:00007f8e23ebc058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.633685][T14932] RAX: ffffffffffffffda RBX: 00007f8e23345fa0 RCX: 00007f8e2317fed9 [ 194.636021][T14932] RDX: 0000000020000180 RSI: 00000000c008640a RDI: 0000000000000008 [ 194.638038][T14932] RBP: 00007f8e231f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 194.640060][T14932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.642055][T14932] R13: 0000000000000000 R14: 00007f8e23345fa0 R15: 00007fffc37929f8 [ 194.644000][T14932] [ 194.645675][T14932] Kernel Offset: disabled [ 194.647256][T14932] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:50:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a744a40 RCX=ffffffff818df8bc RDX=ffff888020ae4880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90004157990 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000006 R12=ffffed100d4e8949 R13=0000000000000001 R14=ffff88806a744a48 R15=ffff88806a63fe40 RIP=ffffffff819a0702 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8e20ff6d58 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd1cf0f80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25225f4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25225f4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25225f4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25225f4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25225f4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25225f4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000178 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000178 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851ca555 RDI=ffffffff9ab10be0 RBP=ffffffff9ab10ba0 RSP=ffffc9000327f598 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666666 R12=0000000000000000 R13=0000000000000064 R14=ffffffff851ca4f0 R15=0000000000000000 RIP=ffffffff851ca57f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8e23ebc6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8e23163ca0 CR3=0000000047d9c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffe0000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e231f4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e231f4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e231f4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e231f4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e231f4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8e231f4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000070 314431436d63702f 646e732f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000053 124412434e40530c 474d500c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000f 0000000000000000 0000000000000000 0000000000000258 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a83f5a8 RCX=1ffff1100d507ebf RDX=00000000000002f0 RSI=ffff88806a83f5a8 RDI=ffff88806a83ebc0 RBP=ffff88806a83f5fc RSP=ffffc90004a37ad0 R8 =0000000000000000 R9 =fffffbfff20be25a R10=ffffffff905f12d7 R11=0000000000000000 R12=ffff88806a83ebc0 R13=ffff88806a83ebc0 R14=ffff88806a83f5f8 R15=ffff88806a83f5e8 RIP=ffffffff8171c2d0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f25203d4fb8 CR3=0000000029e8e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=59ec239488a4cb09 8aff2f6d78bccb5d 59ec239488a4cb09 8aff2f6d78bccb5d 59ec239488a4cb09 8aff2f6d78bccb5d 59ec239488a4cb09 8aff2f6d78bccb5d ZMM18=77efb8d4d8da4631 673b8124071bb643 77efb8d4d8da4631 673b8124071bb643 77efb8d4d8da4631 673b8124071bb643 77efb8d4d8da4631 673b8124071bb643 ZMM19=790f000000000000 0000000000000006 790f000000000000 0000000000000005 790f000000000000 0000000000000004 790f000000000000 0000000000000003 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=b91f95c3b91f95c3 b91f95c3b91f95c3 b91f95c3b91f95c3 b91f95c3b91f95c3 b91f95c3b91f95c3 b91f95c3b91f95c3 b91f95c3b91f95c3 b91f95c3b91f95c3 ZMM22=a59d3f27a59d3f27 a59d3f27a59d3f27 a59d3f27a59d3f27 a59d3f27a59d3f27 a59d3f27a59d3f27 a59d3f27a59d3f27 a59d3f27a59d3f27 a59d3f27a59d3f27 ZMM23=be966e5bbe966e5b be966e5bbe966e5b be966e5bbe966e5b be966e5bbe966e5b be966e5bbe966e5b be966e5bbe966e5b be966e5bbe966e5b be966e5bbe966e5b ZMM24=ef68eeabef68eeab ef68eeabef68eeab ef68eeabef68eeab ef68eeabef68eeab ef68eeabef68eeab ef68eeabef68eeab ef68eeabef68eeab ef68eeabef68eeab ZMM25=b98d5851b98d5851 b98d5851b98d5851 b98d5851b98d5851 b98d5851b98d5851 b98d5851b98d5851 b98d5851b98d5851 b98d5851b98d5851 b98d5851b98d5851 ZMM26=8895e2f58895e2f5 8895e2f58895e2f5 8895e2f58895e2f5 8895e2f58895e2f5 8895e2f58895e2f5 8895e2f58895e2f5 8895e2f58895e2f5 8895e2f58895e2f5 ZMM27=68edc9b568edc9b5 68edc9b568edc9b5 68edc9b568edc9b5 68edc9b568edc9b5 68edc9b568edc9b5 68edc9b568edc9b5 68edc9b568edc9b5 68edc9b568edc9b5 ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=fa0e0000fa0e0000 fa0e0000fa0e0000 fa0e0000fa0e0000 fa0e0000fa0e0000 fa0e0000fa0e0000 fa0e0000fa0e0000 fa0e0000fa0e0000 fa0e0000fa0e0000 info registers vcpu 3 CPU#3 RAX=00000000001a11b7 RBX=0000000000000003 RCX=ffffffff8b2a0759 RDX=0000000000000000 RSI=ffffffff8b6cd840 RDI=ffffffff8bd1b6a0 RBP=ffffed1003a5b488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d2da440 R14=ffffffff905f12d0 R15=0000000000000000 RIP=ffffffff8b2a1b3f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3d2398 CR3=0000000049696000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffab45d1a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f87b93f4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f87b93f4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f87b93f4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f87b93f4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f87b93f4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f87b93f4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000c0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000c0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000