last executing test programs: 1m15.690345377s ago: executing program 1 (id=198): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6aeeafac6b1195e3a2a07b7e7608b3a26ff", 0x30) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$can_raw(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100), &(0x7f0000000280)=@v3={0x3000000, [{0x2, 0x2}, {0x2, 0x1000}], r2}, 0x18, 0x1) chdir(&(0x7f0000000140)='./bus\x00') socketpair(0x1, 0x80001, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x4) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r5, 0x2}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x12a) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000380)={[0x7bd]}, 0x0, &(0x7f0000000500)={r7, r8+10000000}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1m14.770680268s ago: executing program 1 (id=210): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000140)={0x0, 0x0, @ioapic={0xeeee8000, 0x4, 0x0, 0x0, 0x0, [{}, {0xfd, 0x0, 0x0, '\x00', 0xf}, {0x0, 0x0, 0xfd}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {}, {0x0, 0x9}, {0x20, 0x0, 0x0, '\x00', 0x2}, {0x0, 0x2, 0x5, '\x00', 0x80}, {}, {0x9}, {0x40, 0x0, 0x40, '\x00', 0x3}, {}, {0x0, 0x0, 0x8}, {0x4}, {0x0, 0x9}, {0x0, 0x0, 0x4}, {}, {0x0, 0x5}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x6}]}}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000002b) 1m13.925055508s ago: executing program 1 (id=222): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x4e22, 0x4, @private2}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd600101000010110020000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 1m13.868675631s ago: executing program 1 (id=226): mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x1000000000000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xff], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xb, 0xd}, {0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xd0}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}]}]}]}}]}, 0x4c}}, 0x44840) r6 = socket$inet_tcp(0x2, 0x1, 0x0) accept4(r6, &(0x7f0000000540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x80, 0x80000) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_clone3(&(0x7f0000000480)={0x120000000, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000200), {0x41}, &(0x7f0000000240)=""/130, 0x82, &(0x7f0000000380)=""/205, &(0x7f0000000300)=[r0, 0x0, r2], 0x3, {r7}}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0xc0189436, &(0x7f0000000140)) 1m13.707197132s ago: executing program 1 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) (async) landlock_restrict_self(r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '+f'}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) (async) r5 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902"], 0x0) (async) write$usbip_server(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="00000003"], 0x35) 1m13.460996007s ago: executing program 1 (id=231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m13.426712145s ago: executing program 32 (id=231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 48.940443764s ago: executing program 2 (id=684): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x20, 0x70bd27, 0x9, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x79}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200010}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0xb, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40041}, 0x10000000) (async) r7 = syz_pidfd_open(0xffffffffffffffff, 0x0) r8 = pidfd_getfd(r7, r2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r4, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf5, 0x49}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x4) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40046201, &(0x7f0000000540)='wlan1\x00') ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7d}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9b, 0x50}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) (async) r11 = socket$kcm(0x29, 0x5, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, &(0x7f00000007c0)={"b7acf3cefba0b2068e4fdb5ebf381e4a507eb7b643e6fb5b88121e6feca1224564b5ae1ad851321ab75ba3c927f8d7c40d20b41ea6d7f6dc328375e2f6f2614d02640cc5e5efbafb2cd5c43c6d2ccffc6196c73562c0a7f206724b06df17f610e16efb54bc8518dc6cd6d93fec179a40601c384229079825269576ba5134b8283b49ed5e04e011205939129d032c7a9f6dc610b4f6b559cce5c1e404db7dd8600f99353a76eadc603576131dfc15426d9a6fe2bee8c6d0c8cdaff8c4abfafd249e5dad4f1b3be59038a29d623e5e45c92df8ab98fb514d38746925056b471b261ee65dbfd0c9b98028d292de36d7ab6942011af3cc5ff63a9ee88cbb95397674bb6e565dad05f81083759299055363027f0fe52ac503332605cf2cda78af75a992c18a792d58cb22e6597fe6cceb6362b0250f2bc2dd9d7fe079fa98fc7e61016dc4876c8d464728d93b93a7343cfd897b5d7b232309d55c860a1834beffb6124fd17efa104d2aaf8c56d56fd75761c85d89a659ba865db361d732fdba5320c4a123f12b9107062e75bb48dd16e04837a86c1eadd13d87aa992c8ca7338d6ce6fb95aa1fa6bfa095549efad584e3528f0ec8d9d87255109df5f03ec6e658eb610aa556daaf6afad3cd6094b060cb37b51eeea6ed3037f0217fa258620e9b28763405fac859ad3b828e526c5c44a721182967358779c05627ee69704e77ddaa8bf5e972a9b5b2951899a16f1cd714756da5ab441e2d31d58a7fac354d0639414680e615e7a77ac27a403389b72c173f0f3c1260ff6a2a9d18f84eca8e2b488704473942f100ca7dc32fe0908ae328797397d5f3a258ba2789d745cfb81d603fb5356e2c77c4d60f64ac6269d76cdd4a07910788c1e10ba9b3c2abc6c111f99cc57d0ba47faaeda0140f04a059f692182ee55541970387e439b2ea9e3fd0782e4a9cb532049c8b38b4805e68f9d4028acd7dc3ca0cdf4db2a708a0a4daec7bf434fe0a1d955d8a317d74cf302add80994c7d43e77fe1478f2168441ae6e419f373fe0b4cabce41574a5b923f5c8f893a953c45baf17eb37a2143725748d91c0830b15ea2ac7256208c9e01866d63ba4b45fad8a75b70867a62c791661a17d43914cb52fa605a13c10d2c1c0f74ab4c036e3e2b7e1138f4b237e36538f5ff473d5ef699d130c923aac5ea8a2c0066d6b1ca06622c0f51f6051cacbb9b26c35a9d35e2ee32a0a751caabff69ded50b8062bec41a99f27af7fd1533d83de187e286dcc91b81b519ac2d900d419192ad745c4ceb8c37675d476c818e099c9dd8589386f26cc2cede4ab0be744692d37bcd01a9a818d9560d72e8bfbf989227f98b14d99efbbeda5a0afd3efdde107c314e4351bea463d71bba3e9255a6cdeb7efd453a706f6e7987e87605dcb12231c72d509cdf1db81ee856ecf176e73a73e9fb7036"}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x70, r4, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x32}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "780ce1c1e70e9ebd1bd8733a38c842e0260c60d17cdb4957"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x894}, 0x28004083) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) getsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000d80)={@dev, 0x0}, &(0x7f0000000dc0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000e80)={'ip6gre0\x00', &(0x7f0000000e00)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0xae, 0x0, 0x8, @local, @local, 0x1, 0x0, 0x68000000, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000f40)={'ip6gre0\x00', &(0x7f0000000ec0)={'ip6tnl0\x00', 0x0, 0x29, 0x80, 0x0, 0x0, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8000, 0x8, 0x3}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000001080)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0xa8, r13, 0x300, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x35}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x503d}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) r17 = openat2$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x200042, 0xe1, 0x10}, 0x18) (async) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000001500)=0x0) sendmsg$netlink(r8, &(0x7f00000059c0)={&(0x7f0000001140)=@proc={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc, &(0x7f00000014c0)=[{&(0x7f0000001180)={0x264, 0x3e, 0x400, 0x70bd29, 0x25dfdbfd, "", [@generic="fbc802bfd44e0e85dd4dbb8e113a72a1d13732840f77a12dcccdfc5b60ce9f7cebb3592be73b7804a56d09ea90392dda6d31812743e2b7f594c7954c9e2602f276e1091d2d302e8ea656b7510d6c8c88cfa15819975ccf827391b4f81e2b5b4c0f77151bd05e2bbe11794dc49f3d4ae364a1b800cc1cc6b4c67018266fc72fe9581dd83fd1057a8ad9273e40582879ba123015e429f2dd61bd8f1c0c19ff0dd6cb0911ee281618127ec851ef728311ea7699cbf501592e9f23e4730e4638a9296ff32b039ff4c85f", @typed={0x8, 0xd, 0x0, 0x0, @u32=0x8001}, @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}, @nested={0x20, 0x98, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x140, 0x0, 0x0, @fd=r11}, @typed={0x8, 0x130, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0xc9}]}, @nested={0x147, 0x16, 0x0, 0x1, [@typed={0x14, 0x43, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0x145, 0x0, 0x0, @fd=r12}, @generic="828edfe7932638eef57d3ff636ffef35accc31d06263a0ed21f01df538aa0739cd11ee32b7638d39ee315b2777ebe21b57f99c5db3b05648426150fadefad16f0ec16e50ad45893420205ed746664adbf6c0f881eefb6aa3ff490e2949ccee50b0b78c3afd438434daabee470860ee9a600e9e03c9e1b04ac25ed1c7", @generic="da09218563528a5fdefee7c26575bdc00e4879c4265f8abe2d3d114b7a3f0cc1f6dde9f36a40ee86443b8b41b93ed3b1bc0371fdca388dd6d0d328db2bc7b769b7cd752d2f4ebdf239878fe86a543a0907ec580f40d431621c6a7cf6e48f21faa46cd1d71dcf5790c1ae875af0e56327fb718e29ff2d98e24b0fcfde260cb305587a3e3e", @typed={0x14, 0x4c, 0x0, 0x0, @ipv6=@local}, @generic="7a62b0f39beb48e1c6381d0f1afdb3f8a54658"]}, @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@empty}]}, 0x264}, {&(0x7f0000001400)={0xac, 0x3e, 0x8, 0x70bd26, 0x6, "", [@generic="ac9ce5a395be5b62b182ba173057c6ba2650b9931e3908d46579cf48febeb4d32d8760886755733fb4e7f3d48dac80eeedd3434492b0d52b96527aa178f17daf1355e840d1f8bf138f1b60e4eccd61f5be8885446b204cdd1f6edfe24ea3a602cb9e833bc59d427397be38b23925c03b898778fb2719a13b3c0fec0ea649531ee4a5564f10e0f778c833b2699e61c60a59d04c71fe131edbd159"]}, 0xac}], 0x2, &(0x7f00000058c0)=[@rights={{0x24, 0x1, 0x1, [r17, r8, r1, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r18}}}, @rights={{0x14, 0x1, 0x1, [r12]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r11, r6, r7, r6]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0xe0, 0x40040c5}, 0x8000) 48.879264111s ago: executing program 2 (id=685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000008ec0)={{0x12, 0x1, 0x110, 0x2b, 0x95, 0xd9, 0x8, 0x4e2, 0x1412, 0xca10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x8, 0x6, 0x62, 0x0, [], [{{0x9, 0x5, 0x9, 0x1, 0x200, 0x4, 0x8, 0xf8}}]}}]}}]}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000340), &(0x7f0000000380)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 45.80297941s ago: executing program 2 (id=736): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) mprotect(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x200000d) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000004680)={0x2020}, 0x2020) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1398, 0xffffffff, 0x11d8, 0x10f8, 0x0, 0xffffffff, 0xffffffff, 0x1300, 0x1300, 0x1300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00'}, 0x0, 0x10d0, 0x10f8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@loopback, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x143b) setuid(0xee00) ioctl$I2C_RETRIES(r1, 0x701, 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300)='M', 0x1, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000001400)=0x40, 0x12) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000e80007000000", @ANYRES32, @ANYBLOB="000000000a0005"], 0x28}}, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 45.700535595s ago: executing program 2 (id=737): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x6b0240, 0x102) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_clone(0x80002080, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) prctl$PR_SCHED_CORE(0x3e, 0x2, r4, 0x1, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0x0, 0x2, 0x9c1, 0x7, 0x0, [{0x80, 0x5, 0x8, '\x00', 0xdc}, {0x38, 0x6, 0x7, '\x00', 0x81}, {0x96, 0x3, 0x0, '\x00', 0x8}, {0xcd, 0x0, 0x4, '\x00', 0x4}, {0x6, 0xc0, 0x8, '\x00', 0xfe}, {0x30, 0xd, 0xe, '\x00', 0x3}, {0x80, 0x3, 0x9, '\x00', 0x2}, {0x64, 0x4, 0xfb}, {0x1, 0x40, 0x4, '\x00', 0x5}, {0x9, 0x4, 0x9, '\x00', 0x1}, {0xff, 0x6, 0x3, '\x00', 0x4}, {0x3, 0x4, 0x8, '\x00', 0x4}, {0x8, 0x7f, 0xfa, '\x00', 0xb7}, {0x9, 0x34, 0x0, '\x00', 0x4}, {0x2, 0xff, 0x3, '\x00', 0x7}, {0x8, 0xc5, 0x5}, {0x7, 0x8, 0x3, '\x00', 0x2}, {0x7, 0x40, 0xf, '\x00', 0x8}, {0x10, 0x6, 0xd, '\x00', 0x6}, {0x8, 0xd1, 0x8, '\x00', 0x81}, {0x6, 0x5, 0xc, '\x00', 0x56}, {0x1, 0x2a, 0x1, '\x00', 0x8}, {0x6, 0x80, 0x7, '\x00', 0x9}, {0xfe, 0x2e, 0x10, '\x00', 0x8}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_args={0xfffffffffffffcfe, 0x114, 0x1, {{0x0, 0x5}, {&(0x7f0000000400)=""/196, 0xc4}, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/182, 0xb6}], 0x1, 0x0, 0xfffffffffffffffd}}], 0x48}, 0x0) 45.599283404s ago: executing program 2 (id=741): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xa, 0x31, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @alu={0x4, 0x0, 0x0, 0xa, 0x2, 0xc, 0x8}, @jmp={0x5, 0x1, 0x9, 0x6, 0x0, 0xfffffffffffffeca, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, &(0x7f0000000140), {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "86f3"}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0xc, 0x48000, 0x8, {0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 45.279966769s ago: executing program 2 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0) umount2(0x0, 0x1) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}, {0xfffff78a, 0x6, 0x9, [0x9f7, 0x3, 0x1, 0x0, 0x4, 0xf, 0x8, 0x200]}, {0x1ff, 0x9, 0x1ff, [0x94f, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7fffffff, 0xf, [0xbf, 0x100, 0x0, 0x10000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x8, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]}) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x19ee0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x0, 0xfffe, 0x1, 0x3, 0x402, 0x6}) 45.174788237s ago: executing program 33 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0) umount2(0x0, 0x1) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x7, 0xfffff714, [0x9, 0x9, 0x1af, 0xb9a2, 0x1, 0x10, 0x8, 0x2]}, {0xfffff78a, 0x6, 0x9, [0x9f7, 0x3, 0x1, 0x0, 0x4, 0xf, 0x8, 0x200]}, {0x1ff, 0x9, 0x1ff, [0x94f, 0x1, 0x73e5d9cb, 0x9, 0x0, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7fffffff, 0xf, [0xbf, 0x100, 0x0, 0x10000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x8, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x0, 0x100, 0x4]}]}) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x19ee0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x0, 0xfffe, 0x1, 0x3, 0x402, 0x6}) 2.452712509s ago: executing program 5 (id=1370): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0xc0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1, 0x3, 0x6}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000240)={&(0x7f00000001c0)="80a89c539b21fdf7ee60eebc2b0ecc5fc0e09d2821b2f6459785ff66a9661b7cbf814b198db89decc0203b68131b9b0b90e21a968a2182af849a22887b70e2ed492433c434", 0x45, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000480)={0x1, 0x6, &(0x7f00000002c0)=[0x0, r2, r4, r5, 0x0, r6], &(0x7f0000000300)=[0x6, 0x8], &(0x7f0000000400)=[r7], &(0x7f0000000440)=[0x1, 0x8, 0xa622, 0x7ff], 0x0, 0xfffffffffffffdfe}) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f00000000c0)) 2.348525415s ago: executing program 5 (id=1373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf040000000000000000130000a70a0000df", @ANYRES32=r2, @ANYBLOB="0400130006001200000000000600b500850100000a00060008021100000000000500c20002000000"], 0x44}, 0x1, 0x0, 0x0, 0x30000c01}, 0x0) r3 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="250d4f075402", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x100, 0x8}}}}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.257977362s ago: executing program 5 (id=1378): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000010000100ffffffff"], 0x38}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x18}, 0x4000) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x5) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003d40), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r6, 0x3, '\x00', "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"}}, 0x110) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r7, 0x0, 0xfffffffffffffff9}, 0x18) r8 = socket(0x0, 0x2, 0x7d8) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x7, @empty, 0x10000}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@local, 0x4e23, 0x2, 0x4e24, 0x6, 0x2, 0x0, 0x20, 0x4}, {0x2, 0x7f, 0xba19, 0x10000, 0x0, 0x2, 0x9, 0x3}, {0x8, 0x8, 0xad7a, 0x1c}, 0x8001, 0x6e6bc0, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x0, 0x3, 0x1, 0x47, 0x8, 0x6, 0x7}}, 0xe8) syz_emit_ethernet(0x42, &(0x7f0000003b40)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60010700000c1000fc010000000000000000000000000000ff02000000000000000000000000000100000e22000c907801740001"], 0x0) 1.967964872s ago: executing program 3 (id=1387): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0x101, 0x870, {0x10, 0x1}, {0x46, 0x4}, @rumble={0x3, 0x8}}) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) recvfrom(r1, 0x0, 0x0, 0x240, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000003300)='./file0\x00', r0, &(0x7f0000003c40)='./file0/../file0\x00', 0x4) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$kcm(0x11, 0xa, 0x300) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x4b564d01, 0x0, 0x0}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x6b, 0x0, "b91e2f", 0x1, 0x2}]}}}, 0x12) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003c80)={'wg1\x00', 0x0}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003d00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r6, r0, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="18eca4731871dc09a41c11000000faffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1af8ff00000000bda100000000000097010000f8ffffffb702000008000000b70300000000000015000000060000006100000000000000bf91000000000000b5020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.766223338s ago: executing program 3 (id=1388): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="bc0000002b00010000faffffffffffffa9000080"], 0xbc}], 0x1}, 0x0) r0 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000180)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)="d753d9d735a0f7ec6289356b28b086d490c11bb6f3c2b3c7c4a79bc2c1738862116dc4ce31a624916cf8363032148ce44b4fd072d0258feb9544d6aa807a9f6866f8c37dae8500f080985072a2d3490a74e33a2517f717d5a1b8d38f070f0d950e663c28644418376319069f069082faf537ab77f3e50194b0fe29b637196b6569da4ed4a8d6315b42c073e3125e2ec2df98ec307013d137e0717abc08400dbd4e33114c2676ec40e4975970a9d51cb6451a47b06209ef6169c192f075cf96e262278ae5f1c6", 0xc6}, {&(0x7f00000003c0)="208b126e1818e701e4e3e1b0af9e29854f0602cb505111eff411dc6a32067ef09540e5e4ae990c58a577e8c306667cc3847a68e6919b4a015a54fe220280384f769170582469c5d868b992362562d26d9cb688001005543fd66a969a", 0x5c}, {&(0x7f0000000440)="33d62f6ea452a6076ed364744b03a16d84b0771d41f83fdbef6153225f1767438d84b5ab248a4c2921a4886dda4499940f092d5490f130afa34d2a31d26e27b795aad6eb2b89bcf9c42541c8cec0aada67973bf4993451a13dafde7318d955f4e857bda6bfa27654d9810d7edc0354548b7e449b155c8a9d610d948c0f20d658624680624f07c45ed64b5d6f0a8574e79a14088cd9fe9a9a10f0a55a016a5d5d", 0xa0}], 0x3, &(0x7f0000000500)=[{0x88, 0x107, 0x9, "80a44098ebecd7f629f7155694c7ce6f265b3011fbc54cb39e9d671afb510f1ac92e9462fffdaf6828f91b2731f2f76aecaf94e3237e9231110b90a0059f7bd2f7653772561994db532f0614f0b507c6e03b713125f2ac91fabea8defbd729ed4b021914d159746d492005d16579ad2c40b98fc530"}, {0x88, 0x10f, 0x2, "109cfbe01cdcdb9e50247cfa7cbe0ed130fb1e4474560516c5c071be041ef48536eb5e306c985fb4ebcd6689f4736ef25116d29dc86d0925189df00e22ae99a8c4eb38bf013e205e0add4c9dfebb04ddf4d5eddbf0e66f5e66ff809c33ab8427f5781135d587725d9cd2c51373c2b422bcd800a1b4"}, {0x1010, 0x11, 0xf2b, "5b57ffc2499741f7fbe17d39dfa6dce6010ccffe3625ebd6ae43c437e1415d3ba18cb8cd8cc15cec9b2b477786070a122bbb70a78485de3f366fe255015a4d18567514f362c8f36eb72bea9141d9dec158fe6987acf33b30eaf8d266b66409c0c03827befce20cad9defd8425cf3c9f3ae54b63e23075679ab494d3cb492bd7d1440984a89c180b5d89e0dc2b1f8ae60128d5075014564288c368cb2e471a39e98d4cd74660a6b0496dc559f78ed266ac28d9f10ea05bc5aa1cbfe3f761060d5c649ba0966480108ff433081c500eb516fee6b25c86c882b82d50ad8ff9e7204de1a2f81d7a00e094cabcd051aabde8a23e72101112e5661f707db42825efc24703c954e426ffd363fb02e7f7295f7e76619fdbe64c0ec1b7908605a3d34fb676545a8e45bc0c34de442cfd457b899bf8222ee08d5511f3237f99b51fdfbefa427334849a61e20ef2fdbc9e3bf5fb77c61e1a53fd0f1e9861749346011e61977ad45d65fb0a30892c4b1c6428c12941bbc8684da5c9a4a26a9eefff20b8a872cf3ac031f671d227eab9e41b8296327a0a193d3ca5b945221ba781adfba163020b72c212cc9304b7919423e52931fe2d5c38a805f6f24b249006d0542ea7b063a3b1c020c5a0b0b8ebf1b782a80309f26052941e13f19c64c169ef2a7f6d69ce7328ccb46c418900526fe9319aa309a9049527034979d6080c850cac18b51973cbb907f81b5fdfcbdebec7a4a34d374cfc139aa9e745b0ced44615fc827368030a767571e1d6f9d38b978c465383209e943562c1742c1c043e918ee53fb4c31aaf557aa60667223e445abbb4f74b9d4ef45dc4165a59faef3aa967409e6be6d13d361a3efd712e8e46895831307eecd1a847d430c849c7ab6d588e8a883e94d36a87554109cb887e552f06586fa169db2e7635488a5465c58ed8df34212777c7d15b58635924f020a4da5095cb999d8891f20b3cd1f04603571eba8f5b79de0a30deb487d417bd24f39d8b06236b36fb58ef25a2613b184b6d70d582cbd3daeb4669e73caa3c0ce9eeb2361a49fa437af748201cc8b28411d3cb2b1778a4dce326417c7d73f03a1f75c1eef42aeb1bb59ca5aa1698772579e88e92cf15a95a93b187c4210e775630b3175e224c81287f01e128d208ba59b1f0ec351c404aa36e70473d704b751cb0cefb61e09fed9d754921759bb8ebcd41beb21ed3dad70dd442cdb2a84d4a2d6eda3d915e69fdea6d32cd12008afc32d62edc8f0c048035632602c619ecd47e95ef9a55c40611da9cf58967d2961bbebbfdeed426281e9bbc4e630adfaa7c5358c34b771b2a1c9f3de5fbbf556267bd51a5381051b43d21086cef5806470279624e6372d34074bb99c2991c6a5188ca27b3e39cbbcecbddf62629112c243352f305418c58290e4dd4f473968cf5ff5e1881605031bbacfc5eedb95aecbfdd7a15a5f7a0544966d2392bde47636fcf14da1656260dabeb5ecf676cd67fb75930017b90114ac21fabbaf655a5d8229adc27aaa241cd9fb65f9b97ce95952381babc11ea1dcfbf59e3a803a75a86fa118d1935dba77a95a961693e411980eb88b7abf07666b2211223f9f7dd67a9edfe1901b4e03a13d1d1f0e4d3b84f03d784dfce6dab22e28f252ec99888d43a4608d8bd277e7f8578c92c89e2702f6e39b85a0306a9a3db61c55d801a12796539a55b8e022a9c158710fdcc73f03abcc680f603eafd6950d0910ed940312020500eade6badcfe0b11d548261117da2625d9f72f46ca4bfc5d28a70c7c6b61ab708a08e1dbd485bd8fa0c62f305cd6ffa1e62ff2f2d1f62bcb49258e40e8f62cecf5e0c1346076fbce27610307d0562b8b2cf41867a15c5968e2d6b7ae9d1f37aadf94ad725122dd2e9d0ae214dd9250042f74bad9e0cc8bc7e32146e3c7eb6e57b7a39e774cf196749c3d09e97024ce772430f2eb14cfd265b15efe1ee867b20810f2903a93357c6b7ba5d581bc0e7611442edc29031276a50a4102c60c9a47be3136d0aaa2c7732d32939f10c6092fbf52b997b8995f0f73164e65bb680bd85a06fa08c5258d8eb27fa9a05ddcbab6af670435cb93890603617e30999600b5a9096714e07a097de105f424ec064b0cf4ce949d7110a0f41cfc624dbf78fa7041e485e51e2af0740ae8e4f56f774b1c17d3e2cc3d42ffafca1edeac1affb249676f47d53b0333aa58fc51927da8ef3d2f66683f34b743b76089b133ac243ab7a44544a7fbf46d1b1546e90cd0cfb9336b0dc299ef0eb94bdb6c720f55bb5a884f6248061b3a128838c4420f003eb49b3bc1cd598617914b0d46c558d830e3948d9c0e474911226bbdc470c66ae5581f0b38127e304bde079c07269c3b27943100fd6bd97e6ad0b23cf4a5d8c16ba1cdd978ed58bac87276cd10da97466b5cf3314c7bff635013f4b8d47f8cb6c4f8f75101a2fa8f2be7ae90e679918dc576a8b4c868c92605b76ad8044651e8d899e84a88d7d4c0135c88a30fdf9cbdb0408115cd8bcc0bf0a629cd398654cddee734289be79c9eb206623968790f07e8ec74b17361e4f6c96876c0c7eb52ac45ac88da5d6322c2a464043b57d5a1c39dc93f4bdd4d230c32b2559cb8afc25b865a6081ab749b7237f0ba43cc535568426b29bd73ef9e7e74cc38fca18bb25c3cbb0c6e7f653ae80155edd16e5282f7f65b91911c9301ba0d136f626e59dd393e6c6eb171a465f8a56a9b5e947c1f537a2cf2feafd594cf5328fca496f94b69cd77a85085a845ba4af698a55e4b8990bcda09757d075495bc6ee712fa1ac4176b29c427623f5704332279a607d29e651e86f10853a1ed9dc4a8431a46cbfb5d9c3b97ece39481cc487c5c6519071c5e8310581971697287878689bb36aee052c6d00fe3cf6544556b0019301baf31bcd9b7413b22a4acb21c30b8e1e318d6dbb2af8bdbc5a93d887fdf6bd83ef874f8ad0b55824172539cdc12451a3f8cc1b80eaabe0dd07ace33bd36cf420f065f4b45f69c45078082c672ac0ba328b1c2dca36e730d90301ce16e149647cb4d96a21e86126bb644904e1babbeea22f0c02be7338af7f94bd7b8fdc483e923a1f60173e600b40629a06a55b08fd237915cef1cad9800b149c49378af046916a64f06c445c70aa89bc37fdcc32f5ce75d4bb8454815db42c69d7c36f76c3de852f2f4fb0fb75025b9887836aee03e26ce3d73cd3d82392ac1d2296bcc344a40d2f722f1cd3c8558bd12fcacfab9510af1c8880040e9c106da144b0a0e439a95dde54bafba114c6fbed8a4695fb8fdbf9865f6a5c11852ee2d23d899cac1af5b84a69c426b5454448edf333fdaa7602e80e15d928545de5a264266f954b554f9cc4a72089fb08b99ac86ced9d70408c853c43e327a2f382ca42f34cce4e5742c37b9abb9281fe66f8526e659d4d55e332df9ec4e97607fded91734b22fe706cfd4b45de5167f68351c581a6b53613c98f5fd7c5bd477bc38a1abd85b0ff44c258cf9af4a366b0bf05fb8395fb19ba5f4c9028bb1c0b4467fd373d4d5ca948dbf6a554213e6d9227e44809a9f9669da87b59c315169b139049ba22de2c1fd74aa4621a790b02c321ebf9135526860db338c4cb49aaa2dc23d9e775de335a0079c8492855209b666c86b6fd0a9f1114db559f5507573e1838bc6c31bd6e305c0d04e0d848da6d97bf4cbbaf870ecd5086b56e232c7ea5847f8c65b17bf9c4fc0674aef646deaaec737dcadc9ed731ffbf3da2f015208837ff0edf1e1cee3171fb7fa109df573b541ecd9563b7585c6c88cf3037c5b44f3d59f9d0da6b5b5bd1446b81696e79429a1f22275e356f74a2693818cb2f8a3245fd3034005413aa56042f8314362f8297f4cbb682e8466b32cfde869ad0dcd440b3c1d41165df60966f39b6b1101c42c6a8b00219f8084a4c77e7f963c75aedec27e45fd8e6f138f8d7c7dc70027622dc762a4f5f7de6294251607253e5528c0ed7bd35319e456d177718283010a61a4c65df11e541102928764e83ce7cd67e4f92d65d796d8162ef9a0a85ef0503cc4073d043f09cab7112c9f1dc1cac21fdff44dd6f526b4a52725eb5279d400046fb0f50bc2f81268ed4ab23fc2ffb557bba5915c27a7d8310db5d9e925decb7354e33ed9826b3187e0c6b81df0b66f0dd6937f10a1fff64725125d238f55d7bfa948646ec03d816d25eba53805b92c2d7273c834896f480c4c33e2de039552a93ecdfc69c219ec45337dc4072673cd822056236bf0250379dadf54a79422c51db3a38062f39afb33443c94ed77b9a862440b439244d3cf678b649c22cd8b52e50713ded65068d1c050187379fa12e49f1e56690e8d5107d2aec9b20fa66f74b024b14d241cb2cb800cc640740e34d1bea824a9c1c5e41ea58041f1ba2a50cea69a534dbdf0773d31e0b6bf3cd9b06a1165c892ef3211cbb83bcb62b0b5528afe41eea3df1c479f25806aa23817147e2dc69d5f7c69a63db26089cf54b524f97bbe7401013cd1a8e98eb31fcf399b42ad06d0aa01e5594e3758b114c5927e6d4879cb6f2a0912dcdb5f80693f6647303ff7920ebf767fd9c12d9d2694ac7393dae4ba50760e76d26808401e11ef659dd6292fabfe4b810cf364eb77d4a51be772d41d2f799765baca4257c26823ef77c8f343308e09b950a8579ae4bb845f5dc214362db9859bdb099e2ef618e5b63e7744ea172eeb91a387309310b4cd6d1b0e1e5b11c12d11b7bb0facb22bbca43cb8bb60ce8e4a6aa8c4f6f051bb8510090e293324db614668c36cfec187e69fffad6918993b3c6f8accbf6d34764cf12287d8c87d98d710846fed41c297ff0a8b4bdbbdc206f8f09e60ad01fd3549118622f4249e6dc07aa8c039c5620c3c828cde74ebe9e8a804e7c7e33f6b7ebf99c816b433e4e90ba0105f63e7ded680649e3d3cc7a25450bdc803f13ae2e303665b9fe0fc9dd1a798d8c71befccf98451db4f808616882dd6b7e01dd22933e0bad8f2b967f93e598d18fdca1d09689b1429be16532dd1799dbcdfec9f8b41bdfbaf110157b200cb9b167683fcc2fa64a07cd045dc6ab718cda8274d80fcf9ae386f6d454153e938c7e6e6f4f4aa37288aff4b5431c701f6208b928a5454464e71b1e05c3bc3b22935aded018bddc9753d725d096cd579af20bdf43809218f13398506c147eef9a41e3feae532e72e99218040ee31d6faf9eee33339af51690763cab00d18e1deb9b480ab36ed860b7a1ad02e479df66451df2039122b8f8c6d0b292721b2a9ea5fd536d87ea26c452f19bb3ddf572316fad7685c2ad6a884391b52d02be096beabefd3587ea372f9f78194223d3068f777e54b4940eb44821e8dcd89c391874359c6c036a32d9162df2357dfd36379de9797c461beeed2abe7085ca389858d26f456790c6055cef198fe2b96a310173870956c4403ba816f6e088b618aa652792dfb25b0675b92ec5f4c1e888ce13f9f7a35cb4bc26cd95f53100dc35883bb5e77a0facdea5ccc7835b63ab5339cc9dd7b89edf577f6375228c30f968337165b158a3a5c232e22074541b0c9f0e866da9b4795607df5e7a48ba42faeabf003040cb199f2dfebcb0e1d342c7610cba72c495289779b98991b1b7318f9617c6957baca929d37d3b3761c6ca8923fcafdd649eaa1f635a328a93651a193f65cf00a378f4755adfd6e979ec4672e8dede78fbf4a50705a6bd8bc0b7da48846db9e297220a5851ea2e77114ab6c3275ad8a2f48319ea3660e9c510c973a1c13b84c758ea7f728598dc563007"}], 0x1120}, 0xc800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="bc0000002b00010000faffffffffffffa9000080"], 0xbc}], 0x1}, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000180)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)="d753d9d735a0f7ec6289356b28b086d490c11bb6f3c2b3c7c4a79bc2c1738862116dc4ce31a624916cf8363032148ce44b4fd072d0258feb9544d6aa807a9f6866f8c37dae8500f080985072a2d3490a74e33a2517f717d5a1b8d38f070f0d950e663c28644418376319069f069082faf537ab77f3e50194b0fe29b637196b6569da4ed4a8d6315b42c073e3125e2ec2df98ec307013d137e0717abc08400dbd4e33114c2676ec40e4975970a9d51cb6451a47b06209ef6169c192f075cf96e262278ae5f1c6", 0xc6}, {&(0x7f00000003c0)="208b126e1818e701e4e3e1b0af9e29854f0602cb505111eff411dc6a32067ef09540e5e4ae990c58a577e8c306667cc3847a68e6919b4a015a54fe220280384f769170582469c5d868b992362562d26d9cb688001005543fd66a969a", 0x5c}, {&(0x7f0000000440)="33d62f6ea452a6076ed364744b03a16d84b0771d41f83fdbef6153225f1767438d84b5ab248a4c2921a4886dda4499940f092d5490f130afa34d2a31d26e27b795aad6eb2b89bcf9c42541c8cec0aada67973bf4993451a13dafde7318d955f4e857bda6bfa27654d9810d7edc0354548b7e449b155c8a9d610d948c0f20d658624680624f07c45ed64b5d6f0a8574e79a14088cd9fe9a9a10f0a55a016a5d5d", 0xa0}], 0x3, &(0x7f0000000500)=[{0x88, 0x107, 0x9, "80a44098ebecd7f629f7155694c7ce6f265b3011fbc54cb39e9d671afb510f1ac92e9462fffdaf6828f91b2731f2f76aecaf94e3237e9231110b90a0059f7bd2f7653772561994db532f0614f0b507c6e03b713125f2ac91fabea8defbd729ed4b021914d159746d492005d16579ad2c40b98fc530"}, {0x88, 0x10f, 0x2, "109cfbe01cdcdb9e50247cfa7cbe0ed130fb1e4474560516c5c071be041ef48536eb5e306c985fb4ebcd6689f4736ef25116d29dc86d0925189df00e22ae99a8c4eb38bf013e205e0add4c9dfebb04ddf4d5eddbf0e66f5e66ff809c33ab8427f5781135d587725d9cd2c51373c2b422bcd800a1b4"}, {0x1010, 0x11, 0xf2b, "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"}], 0x1120}, 0xc800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) (async) 1.719663892s ago: executing program 3 (id=1389): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0040007e97000000"], 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x418a4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r3]) lgetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.origin\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') (async) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0040007e97000000"], 0x20}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x418a4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x5}]}}}]}, 0x3c}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000500)) (async) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r3]) (async) lgetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.origin\x00', 0x0, 0x0) (async) 1.51913664s ago: executing program 3 (id=1392): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000540)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000494}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) 1.449416866s ago: executing program 0 (id=1393): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.448423726s ago: executing program 0 (id=1394): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x2000000) 1.387351101s ago: executing program 0 (id=1395): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x47) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x6, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x400) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x7fff, 0x10, {{0xa, 0x4, 0x2, 0x3, 0x28, 0x66, 0x0, 0x7f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x13, 0xc8, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100, @rand_addr=0x64010100]}]}}}}}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000008a80)=@newtaction={0x48, 0x32, 0x829, 0xfffffffd, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x6011}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newaddr={0x4c, 0x14, 0x400, 0x70bd2d, 0x25dfdbfe, {0x2, 0x1f, 0xd, 0x0, r2}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8e11}, @IFA_LABEL={0x14, 0x3, 'veth1_virt_wifi\x00'}, @IFA_FLAGS={0x8, 0x8, 0x71a}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_LOCAL={0x8, 0x2, @private=0xa010100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 1.386312197s ago: executing program 5 (id=1396): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0x101, 0x870, {0x10, 0x1}, {0x46, 0x4}, @rumble={0x3, 0x8}}) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) recvfrom(r1, 0x0, 0x0, 0x240, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x129040, 0x0) move_mount(r0, &(0x7f0000003300)='./file0\x00', r0, &(0x7f0000003c40)='./file0/../file0\x00', 0x4) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$kcm(0x11, 0xa, 0x300) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x4b564d01, 0x0, 0x0}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x6b, 0x0, "b91e2f", 0x1, 0x2}]}}}, 0x12) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003c80)={'wg1\x00', 0x0}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003d00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r6, r0, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x9}, {}, {}, {0x15}}, @ldst={0x1, 0x0, 0x3}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.385998061s ago: executing program 0 (id=1397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$dsp(r2, &(0x7f0000000300)="55accc", 0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000fedbdf251400000018000180140002006e657464657673696d30000000000000080005000300000008000d000d0000080800090009000000080007"], 0x4c}}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}], {0x14, 0x10}}, 0x70}, 0x1, 0xe00}, 0x0) pipe2$9p(&(0x7f00000010c0), 0x4880) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008aec1, &(0x7f0000000000)) r5 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000001100), 0xc0000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000001140)={0x2, 0xa0}, 0x2) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f00000000c0)={{r5}, "3b6c37f7513012ed7a326f07283294709fe8d425dbe7e3049344e247cc9293aec843c1dd2603d7b3481e02a58b91d61138187405f17bf4ab00a89e5a8c47e9f11ce9cd29944c372a4108e38dfeb4a5d80d3d7800c732fe5bc415f44e371ce2b4e69e1bd8e42b568d56d7a0b0b962f0577f421652f7f37316d8ea235c82312dd9e5e990c945af361ddbcc91a755e8de0b7d489a05346778162f75931f9e24cbaefdafea92f16724cab687528826adbff4329a8ef9ea331ac869901e4d8659a1fa619ffd59e83eff3009ec27583aa2b0202cd965bbd70127239e36b4dd991a4fd58c785f3a7dd3388dae1be61c14316f07a2673496acb867eddab608ea2e4bd6b9dfdf83631f60b118b2d50156ccb3832fff37593fab855f63ea00d010b0cd817f5dc2e4b579219ace9cf1ccd44e9f5e732839d26fa596a80c43c1993944d2e591074a5c2f5ac9acd01a42353c7346c42f9187df111a578491a2075dec61230771baf227d2c041c6704b528979b14cae59cc47aa96457db98d9f308831c7161f87a3faff975cb07de08d857d8fa61c36469063a55a23e56cbe08acc3e80b5e5c165495bec71c853a69af694edcd66dcbffc5c8b7a71adf5977a84dde37059b9921fc0185cee1af6abd66d0fe119ea712c525eb168f21d0eed207f037e4717b558c3f104ef779b09bf74467f3b550853be5e43f3c58e68e26b5de31d157b98d67f81ff060decd2b5fceaee141cab31df274948c72776ffaf45a640a7e9ead003bd843864557c1a499992f65f882314520e714a325c8113ccdb946754a595c12eb883c8817b0b665e6080bfbba24ab80664d698512e6d69ff2f837b75f7a942d77ff9bc97f30422c44fec4120e851ff594a75a8f1702b9a4465ab42d99560c45fb779d8d25d0991c3002aca1d614c29d28579f1700f012515c7d892be00ad68f0e522f5e8c39a65b0faec7ec3ac19cb1376954cd9585fa1ae0fe7ea3b886f8b922b19de0a19cd2706cb04f49fd979af6f2196413537dc254c642a8892d8042cc81f7aeb6b55c3e57eeca9f98978dcd4f87d3d4da15825ff2c7ca6dd88691d91c333895cfd22ebf0a58dc3d30b9f70578819992aee94a12e8f4c85ecc2fc7245417541392e65ab66e2bfd478c62b8405d2068b1a8421d59e9c738cfe442929c811bac5f74dda39c49ca7cd42c915e8acb198ef0711ec3681e53c1bf14e6e96f823a462dece8314687b7a4cd390d2b2e185d7737f5082bb5a1902fff9523bf53a075f26a3e4591235472e24b8101e7f56ab924b06ffdcb66412873c445db1ae6a82e2fa2fc475bbabf2176c0be6853519abfa0da0f70a6902aecb2b624d99be5a423f25b7b9f56c7c08a2b50081d69d3a712eef94777e6198bfd0be0d77ac4aeb97d961464abb02e3f3553c82519d39d7812125a5310d942ab16f6766380a3eb2966db6893a13107995b7633bcb45dfea41bf9014c76ec0d1982012a1b68be929f9a7e9b187dcbfa7ca55b995cddce6f361a3d402a22072aa54032ed7f71d33496e96079ffa0bbcdf4e00c9fc2999317d767ffec9ccdc331c2ffa8ada5834aecf1c4397e504feceec7ec01a201de990662f6cfd29f64572c3be21cae4bd7ba2b6af0a0fe7c4dc9cf4f3bc095f717540573878995900756cef10db85796da5dfae1f3f5acc820b4314d4a336f7e69869b4df598b5b5e31dfaacb7592d2039fc81c99a5b69593fb2d3d529b1c4c4aaf8907a4c7d81737d59fb0d1a3f59ea5e29afce1eaf7c1f171002498eaaadb7ec3d62d6101cae1555be018abdbe7fa830ef63accb4270e78cb6345259dde3b0251d552292baa9fd189b4ce898da1aec42ad162056b9daa3e8485d7ac9d14a27b202b485b8fe91ee963f1fc1bf4de5c6dd209af02ec8f4f587615e196fe0ca850c3e23bb69be3a8f82ffae95bf4de4255473af4b10fccebeca8dce8a9f3cd9679d89c36e8b57e8689b61d5e3904bced2c902ee1eb60a61b9f91ac657382aa9110418184bd2a2494099a6b296870ba4d889b4d62020e7fe7333a3a0986de2e5e9f564291370e366cb8b88d2840e0a475567d908d59323849de72aa4b25185933b4b6715de40d1507184f55464052946e784fe98066cb6bcc605a0ad6def65c05ad2549468f2cf1f79ea7e522bbd52ef88d1d3e59105b319f5700f7d23007e7ce7fc818a234ca551e18e1de121040f02bc4b0ac27914ee354854df5cd614e9e238551554290f5001518a01d45b85aaa9c5ec60bc311bcd633d9fc47f55158773fe997a99ad02891c04cec90c7510e6434b28f7688997d251dcc18a990a0cf30a98835317cb44124945aad7a6508bc95742262f285dec266f653395de7a3e29a8aba13839095cf73484c024c0078925a91ae538af02ab4ca1eafc679b93a226cd3e6ba18c3d200c83cb3765669f411b876934e156ed4def33b6b87a4fbf86b10b25ef6e3bfea466c2e8f5136587cfffd16bf677d1057f3f4d9e3b53448f249a205d3c8a71208f0247c31dd392bb2647fb9ab8cc36875e9e973f2d1ccb9c5e2dd0590f6d20db29ba68fc136abc357d2e9eb5e47e4a247eb5fe919462f30bd2c9d4adb5dc840ef79662b2a14fed76166dd3416205e373d88b6f18628d4b6205336195024e37cd4ecae2b8fba04e3c139430a4eefd2764ef7270a8bb031b6652f39668687d1afb4340d06a780d7231e427df4c459a736e851eb6318d08517022d5f10a44dab4e05c7e1506a553579dc823ef85cc3c2867d150ecbbe51f3d30e754aab55908f319c0e6db23e9abfd5be1874c22b11bec9d39eeca4d5905f006db1b8325f2f750e1453657ce178d5ddf0a5483d428de8cf209061fbc03bc6a9db17811d5830ec3a4a7c87fe745edeacc9bc972aa1212aa91088e757b67bd6c009d0c31f1ffe1e0a66bc46a23c700a1daa7a68338321742b3fead584f26b71c0dbb1069ea1df95c8bf6ce278386e8c6f93418b159ab4ee2f1c5b35d67534fbddcdcd6c8a696f66dd542f8045a97b4b809b4f4bc3368e8df3c8067bf52c879c44fbb907c2d257820730a4154fec69d25207555b0e2732bf72fea78882449d4e4871ac75f35619ac383be867040336263d71bcb9bdd6a010cd0aebfbcb4cb24a86c243c21890065e92af1ed55bb85f1944d162b9fd3acc2918aeb12c29cad82b5094eeb1fd075c9e730af82337525ff567bd0335da9541a543c07b59b8b64f5089c09b200250c61e7e9e93d8ae0e0c3c3f4c35a92f60e33116ff049b27c4ee0818df26807de4b9e4fca9d8b5aace1cd5cae1b257565d256cf2e959e7a229e17bf278bb2cc73a76d16e719c1954e628b3eeb0d8c7b5f61effedcca446c62d7ca78eb935576ede31c6e72f30c767a3be50ae424d8718072cc7ecc74da37327663511736854ecba189c308f7e864d2bd84af417d594660ab709d9e2809d2e860baa8f7e94a0265bff739eec54c2b2a74364afaf5ed09c13a450d9c0e2e9ed2ce7fc4680b7d619d2ca1ce5b9a9078b7551961bc0155e00f8627cad99d619610bfa057e741ad930851c7bdd4cbbb7c3aaa20b399302e37656ae9386c4f66b4c17d77707851c13da28409fbb0bb1cbb41debc92d0bff838cc6135c9b939d5f970001ef3ab486e0fecfe014cd155cc6c9c274b3c62143f8bb9f9383b89b968d9b3b2d1d338ca9e4a675c22371464ed6d92affbf7ca7c0f87f451335f1fed397d990acd28ef641e62ff6e2593a6a54a2bb150c19713b406ff88008dae77016988de37a7e5a8f055c970625373e990defeff33173df9bdb9be80e2e43cc2b550378a8ada926a51e744635908fb946d508c59d127b3dc109aa3adb4a1e9ffa123b47e79311327d1be939fb8a81b4f94138836878788795dc7b1ca860bde4ec35ae3403119691d4c7e820688a79ad41af1605daee4c0cd3cf190063348f6a84d53e0c50e8ea8cd61906399ff2d6cf6f2c0a7e823e14f8b44ec9fa8a491d9a97077d186668629b70ce18238324a5fbaa68e917e61956b0ad6e841bcae908c37e318681a1fdc558b4d34100083e069eb0ceddeffb3094da46b28489f81b05f3fc9ff78d288b798007d7d349456391d495d78195d5ccec1ec4af61570327f9484ef58c67a92d14f897cbbe44b2650584c035b1569ab945601cd65bb9cc7318108880b009c17f23fc8ab892c65edf9cb56834b9f9a16c9c69ff6cd47a65258e4c6d8dab2632449124632868886ca2314dc0c189def63841538ff423e066b37748f2acc45fe99d99ebeffab9252534913d637272da0c5e05ae77692de2d762646c3deecd9c11756dcaa183f574ffe6d36bcf4787e54fc59899ebb6a519ede0cc97a2591927568e8495b09a58acb4972ec733ae82f26a0c7422a0cedf0085ffc23fd1c3d9f501eb97cacb76af092836b6557f35f52123bd37686b9849a7ae9bb4db951c1af5c7723819f66a8cacca87c611b5c8541578e1b8857f9b54a95c920f2561f56e8197b507a095a59e314727f51ea505cf5edc6cf3363c90775de8462d912b4dc0fc83a7fcd20a018cc17befe46e5f6f69db0980ebdbbd7337e7e994d18b99001e4aa673fb92abe58cdb5cbe6fe8910048c0225bb5dc64d320f8814789a154694f6d597492c058ec9b3a159de21056d28cb7815d6d25c78be2b7536900cc9276fb2b87b584aaccebaf6383572bab3136b46aae9ca33ec45bcec0bf1e76cd8dfa9f6f88510805a5c4f090a47f95c5d8eadc71afdf062a722ba7010d728c1b0cd1d29604009e58fa98ff379b0fad13eee7c9a4d35df87b99e477024da7a13b2abd42561a1e4a1d7161d1d9aa755b23f79f8aad33dc7afc58b05506f5d8126d1922d0ca7deb7d295387bee7de029da99e5b0d44aaee75a51f19c1691a4feb63502b97714c91c5a8098d908f8bfed4ee50093dcc2d187233948e8b74dc81e3d10e56fc82568300f3b390cc7d5b7b6977532aa5e4179282b0321d3c9ff35606aeee2d67f1fd37445da82327d36d86dc49d715cfda26aed4afa6a49657ad3dbe7a9106ec4e36b549f7ee6a523196e02e79014c609c88141f7417a156149901939938ec5cf6af4fb116573cd42b62e05c478f07d985a7c9b49809c9b567541bb89862ad3ab61f49caf6153b50cc35aeafff9d7fbbeef409bf05b2287bc6aa0f6beb02bc83eb2a41189a0f8f6966f921137082a292822bb2a825c4168bcfca671d0d7d00c6e12bb8722b86b16d19ae14af560b9c154ac6f21e2df8229844e790426f7d68401f3042b9412bbe22e99fd0a56aa9455ccb2e840a214053254f1b30ca69fa7afef53e6532689e113b45fca29399a9626c65740f08709f183a291f5aa0db6cc1bc4da91f331855d04e83b7e864abb4ad7c445ee06d80ee2f7100299b27f797a80243821370dea12376124781ac1dd9fae1f5cf2291077b16424bd6787bb7791f97071073b6cb69a47cb2c2f8fa349971ac8f42552c25f978356572fc81a0a0de75330a4a9a1d74a4f3cb05362c1f7aff54cc137c6f828207e2b425467b426688ab339478b47bf1618c0f2dd5baad11b7172277dd7fdce5ce5028857fee917b22121ae333b84dfac4b7203f603cf5e8498266b021d2e4472db27a8c3a3fac37de32294b654b08b6e76a334484b42147371d236d28ce533592c06091410bc027ebab76d968917b93123cdfc47654c1f9851822c1a9619b28f328212e0f0fbccc8a2cea40f1386c084df0182bacf44f267a06672c2ec44232173958d3a35bb4d74c1eb8d62488671e8eaf0d0efe7987f0d5642f6c0457055d3c9"}) 1.38580477s ago: executing program 3 (id=1398): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@hyper}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@my=0x0, 0x1}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1.328627132s ago: executing program 3 (id=1399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000700)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) write$P9_RSTATu(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="330200007d00000005f2000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x233) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r4) ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x100000001) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) dup(r8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902"], 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r10 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r10, 0x28, 0x6, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000000000000100000000000000050000000bedff000000000000000000"]) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r9, 0x0, 0x0) 1.239669152s ago: executing program 5 (id=1400): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x9, 0x6, 0x20363159, 0x5, 0xe, 0x2, 0x4, 0x2000f5e4, 0x0, 0x0, 0x2, 0x2}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e08ca7b0c"], 0xb) shutdown(r1, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x7, 'syzkaller0\x00', {0xe2}, 0x800}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="71756f74612c0084e45c60decae391009ea61c75514c08d8b7439b6448f3fc8c11939553b90b473eb23b1c8da317d7a31b33c92f7df9ccdb32734cd240b3dcdfdc7903ce44fb047f26247063456f0300"/91]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000007ba17d51d3d8ac3600000000000900020073797a30000000000c000780080012400006000805000500000000000d000300686173683a6d61630000000005000400000000000500010007"], 0x54}}, 0x10000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000700, 0xee00, &(0x7f0000000380)) dup(0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000300)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.23812991s ago: executing program 0 (id=1401): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000380)={0xa, @raw_data="b909ba1a76a9b247f6f990054dc739784cc15e23fd3e8693558e90aebd7f98a07356dad0945a42aa1481e7538a279a23ea8789a9af04a8d25cf240d03b22e514771ed4805363379609b0805b7deaafb95b4cf3493974de10c50cbe80ef84cbbd53ee69e370aecb85dfb71d41c2dd0bb21455de12b658a098cf4124cf0a1dfe2e0cf0994c7fe0e133b1133961102d9e66cab53420e57056e83a4238b47e4b924084f65310f2989977fd794d5cd94f75f32789fc27c2386b200c39764fefeb43d53f5379083ad9f176"}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf010004, 0xc5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9, '\x00', @p_u32=0x0}}) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="874be85b63f0e082e0ec1fcfaaaa5508c5789277907d67966792c1104f54d33fd05f4aab1e5ac3fa", 0x28}, {&(0x7f0000000a00)="5f9e47770000aa4544f932fba51ae04f71994f377a57faa7fd0d65f04b61eeb16750a69c38154ea400c5780e7e8dfc3129944450fcbcabebe47a22d268ca97267cbc1f2f75ec1ba35539eb9d0cb2691e203896bd170eefb646d0e70d471cddf46252739de0d61bbaf01251c7167da04f9aeb67ffd0934c97238a205caf3d14d0cb2a8bafb6ce16248ee6a3e76a803315f0d0e1420116c54d86fc5538ede7078b7070314e17f60113b8dee965d59ac3be2a7640e9044fad0874180d407df446d445f010181acbb5654feed388e69dde87f76ec2dd878bb6b83053573912820a89c047cbd4b36e493b0ab623744be925b5a6d015833a6498a445d61c4e9a27f997c27867d5ac7ac49ec1819680be7a05b1d595c86413d87a59385810d524c233aad29c9392f4f953cc514ae350419def2be8e48f6f0c9ae7b99df3ffcffa1e8c858c62a321ded4afa84681201815cf6de74c5ac310454af7dc0021199edeade9f54ea41b2bf03f5c3e274e2a081b6aff17aa7e1fd3cf79368b8feef3f5fd702303896946fc1e8664ce595c504db684c8621308a923182862cb865a31f42c8cae1af1be47667acf49706517b6527651c571f6e19b3cfff0ab1903ea041216a5d3176de8384bb8578a23781ae50a2ee716d9c6432ca59642399bd23d589c07bb7f19fb806d959fd28ed916ee4b5a4d9cd475d68114df961f7e14f95da6d52e479a0d001a1ceaf1b3da444f918d2738afb5bb2bd3511dacc680cad171976f303702647dddb39743bab98bd687069b2fd35ad4883cd5bc1a40e1ae30412a65302ebdbed692399734842d5e4a1b5b96368ddf9cd5e135e3f23e1f5bc6a0451a503912cd8694d1c310f0903bd5321dbeb8bffd5b8e9edb9682ebe75a4b8c3e7669091b6768501a58e81e1d365108fd7182faa14c98cdba42b8c97248497b2fb8184dab441f32371e1034ccb80472f73da795aace52887b5e746a8590404d24fe6f534627c4697f7b121bab9c2b55b21b8fb7f56e03d5e808df05eeadae9877944742b8e10351f2e273ad67c8827524c31d3bd170eaddc36eac642015d66c263841552744e507cf2bd5973337f2e3c27b70f205c483410420399ebc4e5c5cd20a1b7f84faab3cec6ce9612cd0b9a4f97e0c0fbef9d23fba3b22f972e9df2dc0191e395c1b1c5410882a637beb6454b5754e56e4638fec1573fbcd2872356669f6bd2f25a2153db6e25db6dce0dc5d20039456ebe8624ef9e59c8b49c993e6084281ec69d0f72130d08fd5b839a42edd80135935034bf7bf26f2cfd8bb2a50d7f7900e802eaf3bef99176771b8ca6a9444888535f89fe3437d690710ccda1d10d6eb908af9726db36c9ed1a8acde6b5640686e6bf0a5e43d4ff449a73b8a1f4ab08bb2bb7ed849d1078f43d4480afee62e190fa5cbeaad750a0bd679ed22b36a504fcb55c22e31433d3ef5d5862c8cbe9d8a06c71d258144cf1c80b13722f6f5d921440a73adbb8dbd78c4c23468426700f231584a3dd8e282af22fdff0d1240013a8c29b9793fd55a0eb1d389d82a880eb5f3af339c3133a6a8a97774480b2ae4bce963e47eabd60626d5117704c38da2a673eb5076675a63a8de81ad5173cc513b97ba68c516e53da0561720509a823715dcc1f20cccde4b107084e87ace940dafd0180b95848ff4ab1f2e22d685e70e846fab560fe41fe2d736c238590f85e57e9b53bb8d70a6546ef942e6fff7dcc995e8eb19974e043557852bf4391de1bf4983d5d440c03c256d127ff8438790ccaa2cff534c928c89d0018c1dc439b7fe7cc554c5fe21cc853ed78e7e5f1af011e6fa99a74baa90b8a8c48616d3518a2df0d02e8b87a5fc57ebc71cdd8cd411859016b30d4896c36cc2667170cce0d7ae42aa135c9c30ba553016ea7f7532d55d3c0bfd13973dae81bf2fc7aaf5fe63ca63dc37953a6c5d093edce16a580b879bd6c2aee62683cc10a4e2246ed4d6cea9212a6d968d62d343c5d5ae3a514af2d961f9908ca880520837133ff64e11b3a17072f7dd471d5509ae8c5ce93d3044e3649334a7f7abf88ac1d3926489407ba43ea912c193c6c67c98b3169f9579131a3c6983b509865643dfb8c2d6cd073a5eb5ffb9e23bc81e930b0fbecf23169df5197f8720cb00e72ff546cda9491a7f21db2a5aae8e3b2ba4f041ba5788597d4084b1bdf3a8419f358c4fa3689b70f0dba170f30c15fe162e89507064812991f39b5cc0d370c4f4f1a09202a7fcd6849d384b958b57199d52b097af7b6fb30ef1bee876fd09113bc52ca9040d32df82252991ce2b45da7aed7794b5f337b39bedd12bfa5d167f3b7989ef1303614de5a9dfe1355ba2b34044d467178cb03cd6c1da7974ab6e6fe58366c2d4bc4c924b2c668ab30acc7dda60b90b9c1721d71f699420a5930e7ac3fdb22601a5f4671501ccc778b353cdb11f60d24b972816e2211729fa8828ee2a6f5a1a60671362cb4eb1f6d248ccefc3f699f7d81370503e4f3a76f2c6ae19132f048ff8399db7244cc6318a1da55af4924f2469a42e3029049086806a93ae1e02dab37913670d3efcdbd86d4b644f950e2ecf35a360783986c48c8a8a5b19336eb4b444aa8263e9db7771300194adea61041f8a462f8da32fc9389fe11ee4a26d543db573b427b28ab613ad741fd5967a9dba27642723f06920c23919d5d59223b1feaa8945c1e18cbeffb6810213d62641a6cca0d873d376c093ef7df2652003ab46d7e36d88ea196beed510dc29c5159a514149ee22f08837639e4a477bff998f80b5921685a18346cbb5e0ff6b8302d9949059b17c02ecc37aae9e371fde56028441206df6c0034b85c088eafc32ef450955b1b2053c2d4841837ac81ef7fb09d9ee272424f1afc2315439e30422c2bb6179366ae29b88e0fad982c89ee5b566e288f2e4aad567aea3471430592ab6b5f1520f8d7a277b655e8e76d1bb9275c6f1a503aa9ad7ee867e6fc55379ad3f7e738367c11f58025aff92fc017bdddfa8d1c9d361aeae7e5924e62d1d498893af0e953dcc3267373c740655b5bf0b23c94122c3d418ff92d913cf4e17ec041b7322632cb3d6b57de97ed32746f60576b9434dc9765d100cc2551e479790b8d19a5ac247977b79a902e1ecdf2217eff1bf9e5e74297148191a058fe324c268772d4574ec46b27372ae4029cc5f3be50df1ed98f1a79625e2cdf9d650527764b2bd1911f25c44b89a7dc0302ff8cf7f98b219c5a244fe31a2b8fb4c50f8a37fb106a6f10ffe438d85d068c562b4a701d5e8bc066e9d80e3675058ae2c5079be4688b279b109c6cbec90a92b70025ac985d11659657258c9d87237a75a6695b22b6c9f041553e9ea116478441edf66a9b2ce77ad211fe66c1e34e51c3756f50e2d031275f7048ab33f05da8e79dc3b4c63472921fc4a0b2e420fa9bf6ba44acd3af2ffe4833c0d9ec31f649e2a684b5bb9cfb8cce58f9cb22cee197f67d430580996438a7c561a8cd94461373c2b3afe0c0e4fce776e49062fbcaf560cb5b9928cace60285971ada68dc531f65b9b6e51a75d8ceb9ae273f317165c22cdf366126b4be8d71647a0ce575bc77c9b6727b10f995fd7f7a475e238953d10d58bde519e9f463b4c534876906564593cbf83c0f32bb3807959fc7d3518549c4ce37a9db6a7815b7eaa06ca6e2fef7e54c2ed0c1cbcad3e7a8c9ca17725031166c354a0e8f26c80c6bae85111af5b270795d90bb045ac629394499ad43b8b127220229641448ad1803ba6f4c190d67e4d63cab740f8c045aa2d9f161e24cefbfd306f201559939ae76718794a19d20912637bf942b97028f1d13fc25428e29f1a4168ada2d52208e04e89f0c2b801581e2b10f01db5f17eb2b0498e6fe2a8f5586b4cead1aa38d9ba9d58042a4c3050bcbc0dc5bcecfaad69d96acb47caba23651bdd2593cd804819063a428af448c0822e5ac1a6a018804ce7487ce3b94040e596e43166abbdc94fbf3f060057632f42448afa4b847688c250d4ea16f953a6a56346f6a54a7a87eba081275147a52a8ffb3459bc8026abd4e0f823aa0b94f495db0e08ddbddbc302c606447d7a27f29e5eccdfd2855c90c0b9c503d0c6646aa13f90f9762f66ac46cc7c96915081b66ce23d811211bb64b98e622bfa5c83ab75e94823327893d0e206dc6820a0dbdf1199d8cc418afffab07404af9cc48f88626d8622c3330ad56780725609d86ac08584dc95951da743f747107d4f248b86c76f1de131351571b76de439dc08ca46b90d21815d73ca0d7a7d8178fec632eaa5599facf5bb252e7e43c5acb181ad50b82ad77a11109be941d429093422fac60387bef425ef47ede1e5a4ecb2f72d02f49577a526539324ade0123ad105b82e7adb7d55b8bbacd00a700762af48efaf4213c4ee542226156a6fa3983dbd6a632df61daf95a5673cf375af5f7f7178205bcd8c0d922d85c37778a83ee9aa9afd8e7cb06b7f18c098e419206569452fa12a34f0841529afeff64339a1bef5eccea9d77ff428a37d2a0eb048d05be9cad86e52e564efefa71e5d8ea8538d33c23292764ac1beae0bb6a5a8d5164ef7eb971e4b7946786f959e69a11b468194fadce0b81b2dda1fff277f9e3bd20e25a2d8fa82265eea018abf9f5684026eaaf4b777283d46dae10eb16492e6db92d0cf455e1152d25675e426ffae0619c5a420c79210c87a4f43197c37dbd4fbc1357b08f12487dcaa276e0aae3b7414cf6bec757e4170495f6f3d4dc1f5e44c77015674ea78a12a32a35916b9653b4f2d596c54cb2f3958bbe47a3f1ba4a22e8c867dfc9178b7c44fbe25a4243bf29308bfb25db73ffee2b94ff6d572a68ea8964cd9dd421966fbeff5a192f9c8f3375eccfbc514613b95ce9fa19b80776a9af954107cc9ee313c745f4f421b06d3f2dbe0de60b37c6bc312bba2a9d453d325dda53650916f561d470b4ecc607aacb5dcb3529cc6af34ef65df1bec6ad647bca7035b57cf2e392d3f8574a8b5e1ca363e81c128b242b568d77dd27cc67bbeb4b33a7a16514fe47ec1caebcf2569327390125921b2e4341615614b4ba771f41ff22064b64c6eb65d97f69710c3484914104ccc32780f05c901cf9925789275401d89b295829fc2cdcd196ca7cb537ee312b9ebfbde8a2596e567c1c75a7f01fcd0daaa247fa2995a7947cdcc1344ade641874c8184506ceda397ac0799c928b58a25c2a6e33ee515465c7494b594e15fae5e6b44a8bf6f2fa78cd5ac02f13b92803e6c3dd8d95f8fc7f4a51bfb241fa84863c73e62d78dd6d1eb8c32c7ba66536444113a2e4f8a0df0987f1a227c92bcd068a2c4dd51cac53617a422d590d015fb0c647cc1c7335a1915cf123fa487f6a283d2053f4f1251c0bcbf83590eb21610096a3f8ba7a795487e9c3ffb7ecf3be8757d1c8cac01a32ccd818167fa8f816b8bb9676d3c2abc85baffb4ecc2c885b4fd0d556e579c907d972e06af0f2a5739c325b6c49e6defca9c8f287bfc94d3fb124129bdbfe6adbedbcad14aa22f01b3d20f4a1d216c8c0cc98ec1755098d790f1924c35481cd8ad82c3f597f8307f2bcc804da61c2d170501925a430dede82176ab30f85388348473aa369aa9e1685104c355cd59e9a1c300a38f014e4068fbfc93375d02220b744233c0b0ad52ac3ec65068b72aabdd84f79fb07eba5d6f1316a1c87a1d22435de77df1c0a11538f9aa45f4de344dbacad7aaadebd8d82ee2e6c188ddfd6cf1e9caa14f99aa3f715ac300abf3707b96a11ffeda9a3cf19df6fe6a2db", 0x1000}], 0x2, 0xaa52, 0xa64b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="080000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c0002800500160001000000"], 0x3c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) recvmmsg(r2, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40010022, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x71, 0x34, 0x6, [@fwd={0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1, 0x2}]}]}}, 0x0, 0x52, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_acct\x00') 1.159403508s ago: executing program 4 (id=1403): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r4, @ANYRES32], 0x1c}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x2b, &(0x7f0000000c00), &(0x7f0000002000)=0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xd, 0xf}, {0x7ffa, 0x1}, {0xd, 0x3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4040004) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f00000001c0)=0x7, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1.030066335s ago: executing program 4 (id=1404): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) getsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x14, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffc0, 0xb}}}}]}, 0x40}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x38, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5d7a000600"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x4}]}]}, 0x38}}, 0x0) 1.029670283s ago: executing program 4 (id=1405): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a60008007d7600fc020000000000000000000000000000fe800000000000000000000000000002000000000000"], 0x0) write$dsp(r0, &(0x7f00000002c0)="81567c60c30ad3", 0x7) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb, 0x8012, r0, 0x0) close(r0) 440.172236ms ago: executing program 4 (id=1406): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r0) creat(&(0x7f0000002dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ab) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet_sctp(r0, &(0x7f0000000c00)=[{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @local, 0x6}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000040)="445670d86dd12e8a9232fe56d0c314b846b1f00a380e030ddb91710d2c74ddea1035b005a83041ebfda64d74975755a5985045c14891f40a080dd42c4c6edba85dab15e6ea535dec6df363c54035415470557dfbb075004ba506d144a59f1fe15c", 0x61}, {&(0x7f0000000100)="5e97330734f15391e2d89b1d672dc992e7ab757f438613ceba68eca4d6af3d71cf49db721cf21c30c70eceed942e5ca75f12b0f9ea1a766563a7d4fc7a44a66ca1fc3b58fd", 0x45}, {&(0x7f0000000180)="c6cefc8c1a9ccce81597c82506a4d1a345c490ab210929459140d2c69bc05013b51bafcb389a22705e98c69b1108a08ec26b6c173f5f42c94441adb80d13bd6353b2c86a54", 0x45}, {&(0x7f0000000200)="8ea4014f97095aef76657b06eab4b47ae29e72c477663f8b90aea91da848be6260096c487bca391c035590945b385c4bc1ca96abf7cd1218f03e1095f6d0da3464cc681a2e9f302b62b38907896e3a8ef71e2cbc188359c2f7e943ab591005c29d66a7aac792aca66c2faec98af24ac3dcb62428bef537282e445c51ea884669b01bc11f9d61e35eead2d9ca2f03d06d8d0f6acd83e23cfdfff30404fc5771f79635dd4112e51e539ce0ee305df7f0208f9eeef4641255e42e2fb96659cee2cc717af8f8fdc811423be0005a89ea92478c1e82b805c0e1f95e83a1acd8efe61aebf93c", 0xe3}, {&(0x7f0000000300)="41a95c6311934377cbe64e45db1978bbad33262b1ab33db866cb1fa21526235b30f3493692970a20e7427840b1d7a854e5f9c5e657f184b5861c420e7527246fae99320441ab963914bac934d7b2428ab6c224cf9e3900ebc60e5419cfde17772687d9c527c4cb572092340e6d2e4f8439ed084f137f377e160dc2a7fd2fc47db0a351124a8802cae87393ccf139ddc6e87c6981e7f57b7bfc82d2e0c3ffb92f02639d0b2e6c879a8dee9af107bec6ebd67bb54078711a74c419ff811973da580f886bda9c61b0113d", 0xc9}, {&(0x7f0000000400)="214a3575aa5f89dd345e86dbf2a0968fea94fb3556fa834e101623f0134063a4812de95059f41bd6fd6888537d7af3029ec53e198e9c624a28775c1660b564c76b582c9bf909b82b50a5c19f1f2bf9fe3ec534ee2010dafb2795f8e42407c85afb1241f5a1f6c145c3ac33d608fdda4165b87b7af82bbd569278fbadfb185d14d410e8748364b4e1d07a46b8aa725290cfe9bbe218792e90e6de9943b40a4f01d2dcf2d5da7a39a1307b44843baf36365d0438aa73af528456fe33ebf8f8ab356c749604084051fb30f3d1c12c497c00146c0416e2ecd2fa16422ed7c7be4c688bbbcccc48f3a2ada1243d61cff2ba020c365df6", 0xf4}, {&(0x7f0000000500)="3f4701df5503bc382c3e31f6341b0772af86f572b5d4dbc2f29ee9dde11b178e38a7bf51d09fcf56bab7a889325e", 0x2e}, {&(0x7f0000000540)="9ffa9e6959c45c24c41f8eccaf44c6f4a12c6b59c10a895dcf21a77b168d8f664e24cece0ef6eb41097d3d4aef96e9a65cae9cb2c0afcae8f3a3d889d34f3f94628064dab09682c152f8db5238dcd6c29f4d97c61e951c5cfa6b785d7356af5f026b68e1c7e711994e53da2a1de0c7c57413f1129ff8b82da948a468163fa448442496ff0ed4ac6528f63722c824b1cc393a9c2cc7b4f0e80e06581ea33895aa76dab4ba083a06215c90e4459d3a4593a7c62de67bf67e54b256f7bad807bc7133172ef4e61bd81b47a333f35422b8c9716c7c5ef3040127315cba97e4208842", 0xe0}, {&(0x7f0000000640)="f562c563355b02afa6d76d19bd3888c05b2867a7b32c7bafc65e8598762e223a4e5271af1aba71d88b95fb906d4d26952b57f3b663e38a0a654864843e66bba13072c08ca2d0aa7ab70482672bc8fe360c2a59eb0c8c3ef3e7a978741d05e28a8f53573eb47ceed82f83579d50aa8570781a133b04ee3c49344653b3d42a28", 0x7f}], 0x9, &(0x7f0000000780)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}], 0x18, 0x40000}, {&(0x7f00000007c0)=@in6={0xa, 0x4e23, 0xffff8001, @ipv4={'\x00', '\xff\xff', @local}, 0x3ff}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000800)="c478f13acbde3c08bb07d72ea87769ebd8188a6974786c10a52aa2f556a08a815149618f28237288b0d2654fdb32450567a9511c150ded", 0x37}, {&(0x7f0000000840)="cd864e3d6d3910330697a34fcc5ae2fe361daaf83a780d6d8dc4e845b6f1b80d293b5e2b69062e4637a5df41f26a77ee0dfad0a9f107b8e729684ab00a49eda5a568bc20309192b2317faeb95cf9020c9fda3ad6873e207e38", 0x59}, {&(0x7f00000008c0)="8b87641d12f5c3994180229e77a4cc404510a4ecaaeccbd4c6df95be7631ee213bb40ae7ec4c89f669200fff38b01bdc56b22a5eaa12f65d052036b4c2383d4a49eeca3c7638ff237d09f8780d4854019681611fca6e68dccab49b93893cf0fba52d90bf826db7f92ec6dd6a1c7c67c706e873c00880eb9acb670a13b8859c4c4216b952899881a152bb23b5ef4c09c11033", 0x92}, {&(0x7f0000000980)="ffefc118e7f5a8f8c092938c534f97e4fe9e2e0c6f234771169029ffff1ed011fb3096e1d54f4fd84fdbc8e6cc68b6ab9b45a12f5c41321e59fd22e2e3b96cfe1249658487aa", 0x46}, {&(0x7f0000000a00)="1bbaf6ad72b2f52f57618d36a4f32cbc1011def0c5e323fa1a1218eb6a996fa2b3c5e751e01ee4bb22dd097a924237021b9f0fe97b681f39261f54d8654227b9624bbf3b726a50e048cd846db602d8346a77e296dd728fa07905a52f7f9597aede3d17a4049b0dc4cc683591b632452f8563e07446bdf3da1b892ee2515dfd4caf10a3c7f322ac6d3f125781b91dfbb504ef31b258e9aa8ff9f6ed167055de39814951963bcbffbcfcd973fbeb62b1083022bcba31cd8d8d87beea87017768c4773162257440d2012128461fe1cb49d097f11554ea7b4560ef191ce0a2f9538981c7", 0xe2}, {&(0x7f0000000b00)="b6c709ee0ecda64e408aa32d18d1a2d340e55413ae8c0875cb9b93d26a33870d5b6254b2d3e7d6d00bf604058e42a67fd801d0619d66f5e0f60f42c9fd", 0x3d}], 0x6, &(0x7f0000000bc0)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x20, 0x40}], 0x2, 0x40) 390.255835ms ago: executing program 4 (id=1407): r0 = fsopen(&(0x7f0000000080)='udf\x00', 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000100), 0x209843, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@hyper}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@my=0x0, 0x1}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000001c0)=0xb0000) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000040)={{@host, 0x1}, 0xffffffffffffffff, 0x76, 0x8, 0x7}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) recvmsg(r6, &(0x7f00000003c0)={&(0x7f0000000140)=@caif=@dgm, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f00000001c0)}, {&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/24, 0x18}], 0x4, &(0x7f0000000380)=""/28, 0x1c}, 0x10040) 389.866816ms ago: executing program 0 (id=1408): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_pidfd_open(r1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) setns(r2, 0x6000000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000000000207000000fffffffff8"]) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d00)=@newtaction={0x1370, 0x30, 0x21, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x1, 0x4, 0x40}}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}, {0x130c, 0x1, [@m_gact={0x124, 0x10, 0x0, 0x0, {{0x9}, {0x4}, {0xf6, 0x6, "c9c1942ed6246ac1f69821066f851ae4131332b0f77a17f7c3ccfcfb6d7ebe4146d0175f733bedbfcab9ab302a33adb9e299fbf83dbc76a01e8d19b8a811e954cf6d39a72d0070d625220c581421a25434ab8edf8a6b88294e4beaa7593066634b9d2028daac236ef70d063ee1f6667499821476192d889d9fb78cf79b155ffee71837075384e180bee67b5aa157dac551bff5cf7783f8c3f21c047f9e9f2a6c2628bb0614e453fb89cf87d767dc80d06e63be297f1f9c76075273f213da47c94b488481362389e02059b5e7e53d644eed36f5b16ea9981749507409f54fc96416a05f9ef1c39a3edf78a059a3e31a980dd7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x1a8, 0x3, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xb56, 0x5, 0xfff, 0x400}, 0x10}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0xd, 0xffffffffffffffff, 0x38000, 0x3}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x3ff, 0xffffffffffffffff, 0x80000001, 0x5}, 0x5}}]}, {0x105, 0x6, "84d7fe9078f13eec82a3d9329aa015d408a8868fdfdb3e8063450cc4912306ee3c9251ffe2f87f0000004b94b92d7ce6f2b8e9b9c5332f27cd9694bf8084f8be4a29aa02c47ac90aa913fda1f5da086c51ab3be7abe6025948d455918b22634ba5b7903193b5348edbb092e8d4246105a83ea0d7f4847e232fc42eb1f285b27d72f40495871aaf5908550100000000000000eef5af342bc150cf62411d28c5451b1cc30301a5e30f0ff4935d0feff4458ac75f5b372dc85571602b25bae9dbe43dc0a77f36343d3e6fe24132f040bad1d6e38d862689c5daae0272383fe0ef14a5fe029df60de030f60191676587fc430185697a43e18977ac04d0f2f391dac0cc"}, {0xc}, {0xc, 0x8, {0x0, 0x4}}}}, @m_gact={0x103c, 0x3, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xa9c, 0x10000000}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x1370}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0xf, 0x4000000, [{}]}]}}, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000800d901"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000000), 0x20, &(0x7f0000000040)=ANY=[@ANYRES64]) 327.560236ms ago: executing program 4 (id=1409): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0x101, 0x870, {0x10, 0x1}, {0x46, 0x4}, @rumble={0x3, 0x8}}) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) recvfrom(r1, 0x0, 0x0, 0x240, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000003300)='./file0\x00', r0, &(0x7f0000003c40)='./file0/../file0\x00', 0x4) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r3, r3, 0x0, 0xb) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8000, &(0x7f00000008c0)={[], [{@uid_lt}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@measure}]}) chdir(&(0x7f00000000c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$kcm(0x11, 0xa, 0x300) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r5) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240088c0}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x4b564d01, 0x0, 0x0}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x6b, 0x0, "b91e2f", 0x1, 0x2}]}}}, 0x12) r9 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000ffff030000400001010106408b090400060107010200090502000290088f71c9c1c000000000000000"], &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0xfd, 0x5, 0xa9, 0x8, 0xb}, 0x69, &(0x7f0000000300)={0x5, 0xf, 0x69, 0x1, [@generic={0x64, 0x10, 0x3, "5e1039c67e4c80005bd09ace92982be96b61fe68285cd6392133c2551b800c43e5a6cc47b03a27446313755428aa3f2b8125f1e2ab91f4fc8626f57f7d5727983cbffc5c56f880869414b4f00bbfb9f715842fd029655418b1f8f8b786ee48a7e3"}]}, 0x7, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x820}}, {0xf1, &(0x7f0000000540)=@string={0xf1, 0x3, "459ad838d9e776d4d3584439ff56998220f5457424034d0c28210a5684ec59841b1bd6ab97387589c80c2f803908f149a688a941b192daf1d7b027bea829735c4d15e3368494d893aeb69a3c2a3bcf3d95c319c217ff2796484495eeb87742c1ba1156c654eb29ee1aecf43a73e11dd1f1e41a8e2c39236ab9ef9faf6cbd0d83ee2604bf5ffa61c309623fff062fb689c1e12bce2dee21100ba694aaa25226057d979b0e199752f9f922f7a6b88965a6430bc5335cd3058d9d25dd5e5adac3d4dca26a6fdf8ac2907bbf3e202143451f26dcc10a04c06820d1cfc7799d1e475ddcb79642a68f75389cf1ac4315b57d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2001}}, {0x8e, &(0x7f0000000700)=@string={0x8e, 0x3, "c2134ccb22129017ea5d565dea0c25d1a9eee4a274a3b7330fdb1d3100ecf4a36d84a97cc2b45e71ef8a06b52de0bb428a6f8c7197a7b215a1d7bb64e5b3a8b5343fc1990076619528f2ebb1643d6b4695490ee72d4b8cc1abd512ce53988769acb2c23d927c22ec0dc26c22ff498418fed15d957ba104181c0850b4ecbb883bbbe1e1ad0a3716d15d9f3aa6"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_disconnect(r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000003c80)={'wg1\x00'}) 0s ago: executing program 5 (id=1410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0xc}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) epoll_create(0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0001040080a001005400128008000100736974004800028008000300ac1414bb08000c000008000014000b00fe800000000000001a000000000000aa060011004e210000060008002f000000060011004e22000006000d"], 0x74}}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0xc}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) (async) epoll_create(0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0001040080a001005400128008000100736974004800028008000300ac1414bb08000c000008000014000b00fe800000000000001a000000000000aa060011004e210000060008002f000000060011004e22000006000d"], 0x74}}, 0x50) (async) kernel console output (not intermixed with test programs): tes in process `syz.3.476'. [ 78.213032][ T7575] block nbd4: NBD_DISCONNECT [ 78.235267][ T7575] tun0: tun_chr_ioctl cmd 1074025675 [ 78.237195][ T7575] tun0: persist enabled [ 78.239353][ T7575] tun0: tun_chr_ioctl cmd 1074025675 [ 78.242240][ T7575] tun0: persist disabled [ 78.391487][ T7580] netlink: 'syz.4.479': attribute type 1 has an invalid length. [ 78.393905][ T7580] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.479'. [ 78.500004][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 78.503604][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 78.656573][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'. [ 78.715098][ T7595] netlink: 'syz.3.484': attribute type 10 has an invalid length. [ 78.717667][ T7595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.484'. [ 78.723628][ T7595] geneve0: left allmulticast mode [ 78.725801][ T7595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.729156][ T7595] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.732279][ T7595] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.734975][ T7595] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.741314][ T7595] geneve0: entered allmulticast mode [ 78.743607][ T7595] team0: Port device geneve0 added [ 78.826053][ T7598] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 78.900569][ T7599] netlink: 40 bytes leftover after parsing attributes in process `syz.3.485'. [ 78.935716][ T5940] Bluetooth: hci1: unexpected event for opcode 0x040d [ 79.070844][ T7615] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001 [ 79.271361][ T7622] block nbd2: shutting down sockets [ 79.369606][ T7633] ata3.00: invalid multi_count 1 ignored [ 79.423931][ T7633] input: syz0 as /devices/virtual/input/input11 [ 79.801057][ T7647] usb usb1: usbfs: process 7647 (syz.2.498) did not claim interface 0 before use [ 79.875427][ T7653] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 79.878159][ T7653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.965900][ T7664] (unnamed net_device) (uninitialized): (slave erspan0): Device is not bonding slave [ 79.969015][ T7664] (unnamed net_device) (uninitialized): option active_slave: invalid value (erspan0) [ 80.016095][ T7673] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 80.073325][ T7681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.180772][ T7700] loop6: detected capacity change from 0 to 524287999 [ 80.184819][ T7700] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.188393][ T7700] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.195155][ T7700] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.198522][ T7700] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.202319][ T7700] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.206152][ T7700] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.209585][ T7700] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.214290][ T7700] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.218135][ T7700] ldm_validate_partition_table(): Disk read failed. [ 80.223557][ T7700] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.227503][ T7700] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.231410][ T7700] Dev loop6: unable to read RDB block 0 [ 80.234100][ T7700] loop6: unable to read partition table [ 80.236240][ T7700] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 80.262365][ T5940] Bluetooth: hci2: ACL packet too small [ 80.278542][ T7710] afs: Unknown parameter 'f5\xYlock [ 83.715278][ T7862] dump_stack_lvl+0x16c/0x1f0 [ 83.715319][ T7862] should_fail_ex+0x512/0x640 [ 83.715339][ T7862] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 83.715357][ T7862] should_failslab+0xc2/0x120 [ 83.715370][ T7862] __kmalloc_cache_noprof+0x6a/0x3e0 [ 83.715385][ T7862] ? __vb2_init_fileio+0x253/0x1100 [ 83.715403][ T7862] __vb2_init_fileio+0x253/0x1100 [ 83.715418][ T7862] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.715432][ T7862] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 83.715445][ T7862] ? __pollwait+0x271/0x490 [ 83.715462][ T7862] vb2_core_poll+0x486/0x700 [ 83.715478][ T7862] vb2_poll+0x33/0x150 [ 83.715493][ T7862] vb2_fop_poll+0x10f/0x2c0 [ 83.715507][ T7862] ? __pfx_vb2_fop_poll+0x10/0x10 [ 83.715520][ T7862] v4l2_poll+0x160/0x320 [ 83.715533][ T7862] ? __pfx_v4l2_poll+0x10/0x10 [ 83.715542][ T7862] do_sys_poll+0x523/0xe00 [ 83.715562][ T7862] ? __pfx_do_sys_poll+0x10/0x10 [ 83.715589][ T7862] ? find_held_lock+0x2b/0x80 [ 83.715602][ T7862] ? __pfx___pollwait+0x10/0x10 [ 83.715618][ T7862] ? __pfx_pollwake+0x10/0x10 [ 83.715651][ T7862] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 83.715666][ T7862] ? set_user_sigmask+0x21b/0x2b0 [ 83.715679][ T7862] ? __pfx_set_user_sigmask+0x10/0x10 [ 83.715690][ T7862] ? __fget_files+0x20e/0x3c0 [ 83.715708][ T7862] __x64_sys_ppoll+0x254/0x2d0 [ 83.715724][ T7862] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 83.715739][ T7862] ? ksys_write+0x1b9/0x240 [ 83.715754][ T7862] ? __pfx_ksys_write+0x10/0x10 [ 83.715768][ T7862] ? rcu_is_watching+0x12/0xc0 [ 83.715784][ T7862] do_syscall_64+0xcd/0x260 [ 83.715799][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.715863][ T7862] RIP: 0033:0x7f6081b8e969 [ 83.715875][ T7862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.715885][ T7862] RSP: 002b:00007f607f9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 83.715895][ T7862] RAX: ffffffffffffffda RBX: 00007f6081db5fa0 RCX: 00007f6081b8e969 [ 83.715904][ T7862] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000300 [ 83.715910][ T7862] RBP: 00007f607f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 83.715916][ T7862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.715922][ T7862] R13: 0000000000000000 R14: 00007f6081db5fa0 R15: 00007ffe625f4fe8 [ 83.715938][ T7862] [ 83.925740][ T40] audit: type=1400 audit(1746384911.755:34083): avc: denied { mount } for pid=7874 comm="syz.0.575" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 83.934550][ T40] audit: type=1400 audit(1746384911.755:34084): avc: denied { mounton } for pid=7874 comm="syz.0.575" path="/file0" dev="bpf" ino=20702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 83.945607][ T40] audit: type=1400 audit(1746384911.755:34085): avc: denied { connect } for pid=7882 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.977953][ T7894] __nla_validate_parse: 139 callbacks suppressed [ 83.977964][ T7894] netlink: 36 bytes leftover after parsing attributes in process `syz.4.580'. [ 84.011793][ T5940] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.024501][ T7899] block nbd2: NBD_DISCONNECT [ 84.038763][ T7902] syz.4.583: attempt to access beyond end of device [ 84.038763][ T7902] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 84.043260][ T7902] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 84.088964][ T7909] warn_alloc: 1 callbacks suppressed [ 84.088977][ T7909] syz.4.585: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 84.111872][ T7909] CPU: 2 UID: 0 PID: 7909 Comm: syz.4.585 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 84.111905][ T7909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.111912][ T7909] Call Trace: [ 84.111917][ T7909] [ 84.111921][ T7909] dump_stack_lvl+0x16c/0x1f0 [ 84.111939][ T7909] warn_alloc+0x248/0x3a0 [ 84.111962][ T7909] ? __pfx_warn_alloc+0x10/0x10 [ 84.111983][ T7909] ? __get_vm_area_node+0x1b9/0x300 [ 84.111996][ T7909] ? __get_vm_area_node+0x1e5/0x300 [ 84.112012][ T7909] __vmalloc_node_range_noprof+0x1110/0x1540 [ 84.112031][ T7909] ? xskq_create+0xfb/0x1d0 [ 84.112046][ T7909] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 84.112064][ T7909] ? xskq_create+0xfb/0x1d0 [ 84.112076][ T7909] vmalloc_user_noprof+0x6b/0x90 [ 84.112089][ T7909] ? xskq_create+0xfb/0x1d0 [ 84.112100][ T7909] xskq_create+0xfb/0x1d0 [ 84.112113][ T7909] xsk_setsockopt+0x684/0x840 [ 84.112124][ T7909] ? __pfx_xsk_setsockopt+0x10/0x10 [ 84.112137][ T7909] ? selinux_socket_setsockopt+0x6a/0x80 [ 84.112152][ T7909] ? __pfx_xsk_setsockopt+0x10/0x10 [ 84.112162][ T7909] do_sock_setsockopt+0x221/0x470 [ 84.112175][ T7909] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 84.112195][ T7909] __sys_setsockopt+0x1a0/0x230 [ 84.112207][ T7909] __x64_sys_setsockopt+0xbd/0x160 [ 84.112216][ T7909] ? do_syscall_64+0x91/0x260 [ 84.112229][ T7909] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.112242][ T7909] do_syscall_64+0xcd/0x260 [ 84.112256][ T7909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.112268][ T7909] RIP: 0033:0x7f13bd38e969 [ 84.112276][ T7909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.112286][ T7909] RSP: 002b:00007f13bb1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.112296][ T7909] RAX: ffffffffffffffda RBX: 00007f13bd5b5fa0 RCX: 00007f13bd38e969 [ 84.112303][ T7909] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 84.112309][ T7909] RBP: 00007f13bd410ab1 R08: 0000000000000004 R09: 0000000000000000 [ 84.112315][ T7909] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 84.112320][ T7909] R13: 0000000000000000 R14: 00007f13bd5b5fa0 R15: 00007ffccf17c9f8 [ 84.112333][ T7909] [ 84.115654][ T7909] Mem-Info: [ 84.192692][ T7909] active_anon:6836 inactive_anon:0 isolated_anon:0 [ 84.192692][ T7909] active_file:2719 inactive_file:12651 isolated_file:0 [ 84.192692][ T7909] unevictable:1768 dirty:121 writeback:0 [ 84.192692][ T7909] slab_reclaimable:11633 slab_unreclaimable:72608 [ 84.192692][ T7909] mapped:23970 shmem:2466 pagetables:896 [ 84.192692][ T7909] sec_pagetables:300 bounce:0 [ 84.192692][ T7909] kernel_misc_reclaimable:0 [ 84.192692][ T7909] free:507186 free_pcp:2457 free_cma:0 [ 84.207309][ T7909] Node 0 active_anon:27344kB inactive_anon:0kB active_file:10868kB inactive_file:50596kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:95872kB dirty:484kB writeback:0kB shmem:6328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12112kB pagetables:3584kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB [ 84.218906][ T7909] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 84.230587][ T7909] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 84.239095][ T7909] lowmem_reserve[]: 0 1238 1238 1238 1238 [ 84.240919][ T7909] Node 0 DMA32 free:424860kB boost:0kB min:27576kB low:34468kB high:41360kB reserved_highatomic:0KB active_anon:27344kB inactive_anon:0kB active_file:10868kB inactive_file:50596kB unevictable:3536kB writepending:484kB present:2080628kB managed:1268568kB mlocked:0kB bounce:0kB free_pcp:5456kB local_pcp:2092kB free_cma:0kB [ 84.250787][ T7909] lowmem_reserve[]: 0 0 0 0 0 [ 84.252190][ T7909] Node 1 Normal free:1586984kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:8kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:5592kB local_pcp:0kB free_cma:0kB [ 84.260740][ T7909] lowmem_reserve[]: 0 0 0 0 0 [ 84.262272][ T7909] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 84.266700][ T7909] Node 0 DMA32: 6*4kB (UE) 17*8kB (UME) 68*16kB (ME) 115*32kB (UME) 103*64kB (UME) 36*128kB (UME) 33*256kB (UM) 25*512kB (UME) 13*1024kB (UME) 5*2048kB (UM) 89*4096kB (UM) = 425472kB [ 84.272648][ T7909] Node 1 Normal: 10*4kB (UM) 54*8kB (UME) 20*16kB (UME) 89*32kB (UME) 46*64kB (UME) 17*128kB (UME) 5*256kB (UE) 2*512kB (ME) 1*1024kB (U) 5*2048kB (UME) 382*4096kB (M) = 1587000kB [ 84.278098][ T7909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.280970][ T7909] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.283720][ T7909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.286823][ T7909] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.290141][ T7909] 17836 total pagecache pages [ 84.291922][ T7909] 0 pages in swap cache [ 84.293251][ T7909] Free swap = 124996kB [ 84.294521][ T7909] Total swap = 124996kB [ 84.295831][ T7909] 1048443 pages RAM [ 84.297029][ T7909] 0 pages HighMem/MovableOnly [ 84.298454][ T7909] 281970 pages reserved [ 84.299811][ T7909] 0 pages cma reserved [ 84.330123][ T7932] netlink: 88 bytes leftover after parsing attributes in process `syz.4.586'. [ 84.334696][ T7932] netlink: 'syz.4.586': attribute type 3 has an invalid length. [ 84.341067][ T7932] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.586'. [ 84.653502][ T7966] tipc: Started in network mode [ 84.655210][ T7966] tipc: Node identity d1, cluster identity 4711 [ 84.657093][ T7966] tipc: Node number set to 209 [ 84.661932][ T7966] tipc: Cannot configure node identity twice [ 85.024086][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.599'. [ 85.289321][ T8024] 9pnet: Limiting 'msize' to 512000 as this is the maximum supported by transport virtio [ 85.483375][ T7966] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 85.521763][ T8046] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.524877][ T8046] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.527897][ T8046] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.530861][ T8046] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 85.533928][ T8046] geneve2: entered promiscuous mode [ 85.536497][ T8046] geneve2: entered allmulticast mode [ 85.602688][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'. [ 85.640507][ T8055] futex_wake_op: syz.3.614 tries to shift op by 32; fix this program [ 85.658842][ T8057] netlink: 'syz.0.615': attribute type 10 has an invalid length. [ 85.664275][ T8057] veth1_macvtap: left promiscuous mode [ 85.700094][ T5940] Bluetooth: hci1: command 0x0405 tx timeout [ 85.702106][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.730843][ T8065] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 85.750801][ T7992] orangefs_mount: mount request failed with -4 [ 85.796626][ T8071] program syz.0.621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.805833][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 85.820592][ T8075] xt_hashlimit: size too large, truncated to 1048576 [ 85.832258][ T8076] xt_hashlimit: size too large, truncated to 1048576 [ 85.855014][ T8081] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 85.892603][ T8083] bond0: option ad_select: unable to set because the bond device is up [ 85.945188][ T8086] Bluetooth: hci0: service_discovery: too big uuid_count value 20168 [ 85.995313][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 85.995324][ T40] audit: type=1400 audit(1746384913.825:34091): avc: denied { map } for pid=8090 comm="syz.0.628" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 86.007541][ T40] audit: type=1400 audit(1746384913.825:34092): avc: denied { execute } for pid=8090 comm="syz.0.628" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 86.041936][ T8093] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 86.044757][ T8093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.049960][ T8093] vhci_hcd vhci_hcd.0: Device attached [ 86.053617][ T8094] usbip_core: unknown command [ 86.055523][ T8094] vhci_hcd: unknown pdu 0 [ 86.057478][ T8094] usbip_core: unknown command [ 86.061485][ T40] audit: type=1400 audit(1746384913.895:34093): avc: denied { create } for pid=8092 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 86.062957][ T64] vhci_hcd: stop threads [ 86.070704][ T64] vhci_hcd: release socket [ 86.073919][ T64] vhci_hcd: disconnect device [ 86.324238][ T8099] cgroup: Unknown subsys name 'cpuset' [ 86.356078][ T40] audit: type=1400 audit(1746384914.185:34094): avc: denied { listen } for pid=8100 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 86.363881][ T40] audit: type=1400 audit(1746384914.185:34095): avc: denied { accept } for pid=8100 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 86.615510][ T8104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.850853][ T8113] IPv6: sit2: Disabled Multicast RS [ 86.853025][ T8113] sit2: entered allmulticast mode [ 86.880093][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 86.910384][ T40] audit: type=1400 audit(1746384914.735:34096): avc: denied { ioctl } for pid=8116 comm="syz.0.638" path="socket:[20219]" dev="sockfs" ino=20219 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.921078][ T40] audit: type=1400 audit(1746384914.755:34097): avc: denied { read } for pid=8116 comm="syz.0.638" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 86.928181][ T40] audit: type=1400 audit(1746384914.755:34098): avc: denied { open } for pid=8116 comm="syz.0.638" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 86.940051][ T8122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.639'. [ 86.942962][ T8122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.639'. [ 87.030140][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 87.033134][ T10] usb 8-1: config 0 has an invalid interface number: 145 but max is 0 [ 87.035670][ T10] usb 8-1: config 0 has no interface number 0 [ 87.041664][ T10] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 87.044458][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.046946][ T10] usb 8-1: Product: syz [ 87.048366][ T10] usb 8-1: Manufacturer: syz [ 87.053019][ T10] usb 8-1: SerialNumber: syz [ 87.057410][ T10] usb 8-1: config 0 descriptor?? [ 87.063537][ T10] hub 8-1:0.145: bad descriptor, ignoring hub [ 87.065464][ T10] hub 8-1:0.145: probe with driver hub failed with error -5 [ 87.069958][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.145/input/input12 [ 87.081151][ T8133] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.105113][ T8135] netlink: 'syz.0.643': attribute type 2 has an invalid length. [ 87.107735][ T8136] netlink: 'syz.0.643': attribute type 2 has an invalid length. [ 87.251292][ T8142] netlink: 'syz.2.645': attribute type 4 has an invalid length. [ 87.314711][ T8146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1805 sclass=netlink_route_socket pid=8146 comm=syz.3.633 [ 87.344873][ T40] audit: type=1326 audit(1746384915.175:34099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8138 comm="syz.4.646" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13bd38e969 code=0x0 [ 87.353789][ T40] audit: type=1326 audit(1746384915.185:34100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8138 comm="syz.4.646" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13bd38e969 code=0x0 [ 87.480389][ T5974] usb 8-1: USB disconnect, device number 11 [ 87.585502][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.650'. [ 87.770393][ T5940] Bluetooth: hci1: command 0x0405 tx timeout [ 87.778707][ T8179] overlayfs: workdir and upperdir must be separate subtrees [ 87.779748][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.849424][ T8186] overlayfs: conflicting options: userxattr,verity=on [ 87.878817][ T8193] sp0: Synchronizing with TNC [ 88.032506][ T8199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.663'. [ 88.269987][ T8223] netlink: 'syz.0.671': attribute type 1 has an invalid length. [ 88.531706][ T8242] syzkaller1: entered promiscuous mode [ 88.533726][ T8242] syzkaller1: entered allmulticast mode [ 88.623781][ T8247] Cannot find map_set index 0 as target [ 88.926518][ T8257] SELinux: Context is not valid (left unmapped). [ 89.178642][ T8275] bridge_slave_0: left promiscuous mode [ 89.180593][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.184474][ T8275] bridge_slave_1: left allmulticast mode [ 89.186388][ T8275] bridge_slave_1: left promiscuous mode [ 89.188326][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.196367][ T8275] bond0: (slave bond_slave_0): Releasing backup interface [ 89.198931][ T8275] bond_slave_0: left promiscuous mode [ 89.204083][ T8275] bond0: (slave bond_slave_1): Releasing backup interface [ 89.206857][ T8275] bond_slave_1: left promiscuous mode [ 89.211022][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.213484][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.217614][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.221346][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.247705][ T8237] 9pnet_fd: p9_fd_create_tcp (8237): problem connecting socket to 127.0.0.1 [ 89.334806][ T8281] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 89.366441][ T8280] __nla_validate_parse: 5 callbacks suppressed [ 89.366459][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 89.372457][ T8280] netlink: 'syz.0.686': attribute type 30 has an invalid length. [ 89.381817][ T8280] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.385756][ T8280] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.389418][ T8280] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.392778][ T8280] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.398376][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 89.404072][ T8280] netlink: 'syz.0.686': attribute type 30 has an invalid length. [ 89.465768][ T8211] kexec: Could not allocate control_code_buffer [ 89.529962][ T57] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 89.548649][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 89.675545][ T8301] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 89.677998][ T8301] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.680002][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 89.684289][ T8301] vhci_hcd vhci_hcd.0: Device attached [ 89.684746][ T57] usb 7-1: config 2 interface 0 has no altsetting 0 [ 89.695256][ T57] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 89.698643][ T8302] vhci_hcd: unknown pdu 1 [ 89.709472][ T106] vhci_hcd: stop threads [ 89.710533][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.712940][ T106] vhci_hcd: release socket [ 89.713866][ T57] usb 7-1: Product: syz [ 89.715244][ T106] vhci_hcd: disconnect device [ 89.724078][ T57] usb 7-1: Manufacturer: syz [ 89.725574][ T57] usb 7-1: SerialNumber: syz [ 89.755053][ T8307] binder: 8306:8307 ioctl c0286405 2000000000c0 returned -22 [ 89.755068][ T8308] binder: 8306:8308 ioctl c0286405 2000000000c0 returned -22 [ 89.760285][ T8307] tmpfs: Unknown parameter 'usrquotafs/binder0' [ 89.764603][ T8307] ieee802154 phy0 wpan0: encryption failed: -22 [ 89.851530][ T5943] Bluetooth: hci1: command 0x0405 tx timeout [ 89.851564][ T5940] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.870491][ T8311] binder: 8306:8311 ioctl c0303e03 200000000380 returned -22 [ 89.879022][ T8313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.697'. [ 89.932862][ T8275] Driver unsupported XDP return value 0 on prog (id 69) dev N/A, expect packet loss! [ 89.939078][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 90.082311][ T8328] overlayfs: missing 'lowerdir' [ 90.146174][ T8330] loop6: detected capacity change from 0 to 524287999 [ 90.272153][ T5943] Bluetooth: hci2: unexpected event for opcode 0x202d [ 90.452110][ T8348] netlink: 'syz.0.709': attribute type 1 has an invalid length. [ 90.484272][ T8348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.507242][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 90.881350][ T8375] Bluetooth: hci0: service_discovery: too big uuid_count value 20168 [ 90.886867][ T8375] SELinux: failed to load policy [ 91.025773][ T8381] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 91.029103][ T8381] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.719'. [ 91.061067][ T8382] binder_alloc: 8376: binder_alloc_buf, no vma [ 91.114437][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 91.114449][ T40] audit: type=1400 audit(1746384918.945:34111): avc: denied { append } for pid=8390 comm="syz.4.722" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.138055][ T40] audit: type=1400 audit(1746384918.965:34112): avc: denied { lock } for pid=8386 comm="syz.0.721" path="socket:[24601]" dev="sockfs" ino=24601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 91.263584][ T40] audit: type=1400 audit(1746384919.095:34113): avc: denied { map } for pid=8404 comm="syz.0.726" path="pipe:[24617]" dev="pipefs" ino=24617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 91.406302][ T40] audit: type=1400 audit(1746384919.235:34114): avc: denied { write } for pid=8412 comm="syz.0.728" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 91.929876][ T5943] Bluetooth: hci1: command 0x0405 tx timeout [ 92.100503][ T8408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.177292][ T8413] syz.0.728 (8413) used greatest stack depth: 20504 bytes left [ 92.203265][ T57] usb 7-1: USB disconnect, device number 11 [ 92.277540][ T40] audit: type=1400 audit(1746384920.105:34115): avc: denied { watch } for pid=8434 comm="syz.4.735" path="/121" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.291727][ T40] audit: type=1400 audit(1746384920.105:34116): avc: denied { watch_sb } for pid=8434 comm="syz.4.735" path="/121" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.293390][ T8438] xt_l2tp: missing protocol rule (udp|l2tpip) [ 92.298417][ T40] audit: type=1400 audit(1746384920.105:34117): avc: denied { create } for pid=8434 comm="syz.4.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 92.317162][ T8438] netlink: 'syz.2.736': attribute type 5 has an invalid length. [ 92.391316][ T8447] Bluetooth: (null): Invalid header checksum [ 92.457348][ T40] audit: type=1400 audit(1746384920.285:34118): avc: denied { create } for pid=8458 comm="syz.3.740" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.465089][ T40] audit: type=1400 audit(1746384920.295:34119): avc: denied { mounton } for pid=8458 comm="syz.3.740" path="/233/file0" dev="tmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.493429][ T40] audit: type=1400 audit(1746384920.325:34120): avc: denied { unlink } for pid=5938 comm="syz-executor" name="file0" dev="tmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.839508][ T8488] netlink: 48 bytes leftover after parsing attributes in process `syz.4.751'. [ 92.843378][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.970956][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.000515][ T8496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.755'. [ 93.034064][ T8496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.755'. [ 93.039434][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.046215][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.049904][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.052921][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.055963][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.064811][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.066359][ T8502] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 93.071401][ T8502] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 93.216903][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.241153][ T8520] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 93.256835][ T8499] chnl_net:caif_netlink_parms(): no params data found [ 93.431508][ T8540] openvswitch: netlink: Key type 6662 is out of range max 32 [ 93.436512][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.438603][ T8542] openvswitch: netlink: Key type 6662 is out of range max 32 [ 93.439363][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.461871][ T8499] bridge_slave_0: entered allmulticast mode [ 93.465289][ T8499] bridge_slave_0: entered promiscuous mode [ 93.473686][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.475983][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.478321][ T8499] bridge_slave_1: entered allmulticast mode [ 93.484109][ T8499] bridge_slave_1: entered promiscuous mode [ 93.523039][ T8544] tc_dump_action: action bad kind [ 93.552058][ T8499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.556583][ T8499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.580005][ T1328] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 93.646098][ T8499] team0: Port device team_slave_0 added [ 93.662073][ T8499] team0: Port device team_slave_1 added [ 93.729796][ T1328] usb 9-1: Using ep0 maxpacket: 8 [ 93.735182][ T1328] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 93.739101][ T1328] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.744009][ T1328] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.748054][ T1328] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.751768][ T1328] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.756400][ T1328] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.759988][ T1328] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.979910][ T1328] usb 9-1: usb_control_msg returned -32 [ 93.982397][ T1328] usbtmc 9-1:16.0: can't read capabilities [ 94.000257][ T13] bond0 (unregistering): Released all slaves [ 94.066836][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.070281][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.082449][ T8499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.089048][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.092599][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.107809][ T8499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.205917][ T8499] hsr_slave_0: entered promiscuous mode [ 94.209139][ T8499] hsr_slave_1: entered promiscuous mode [ 94.212993][ T8499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.216091][ T8499] Cannot create hsr debugfs directory [ 94.257957][ T13] hsr_slave_0: left promiscuous mode [ 94.262170][ T13] hsr_slave_1: left promiscuous mode [ 94.290506][ T13] veth1_macvtap: left promiscuous mode [ 94.292736][ T13] veth0_macvtap: left promiscuous mode [ 94.295132][ T13] veth1_vlan: left allmulticast mode [ 94.297745][ T13] veth1_vlan: left promiscuous mode [ 94.300174][ T13] veth0_vlan: left promiscuous mode [ 95.143475][ T5940] Bluetooth: hci3: command tx timeout [ 95.450009][ T8555] vlan3: entered promiscuous mode [ 95.451662][ T8555] bridge0: entered promiscuous mode [ 95.453474][ T8555] vlan2: entered promiscuous mode [ 95.455121][ T8555] bond0: entered promiscuous mode [ 95.457164][ T8555] vlan3: entered allmulticast mode [ 95.458991][ T8555] bridge0: entered allmulticast mode [ 95.610963][ T8561] No source specified [ 95.627426][ T8499] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.637264][ T8499] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.653982][ T8499] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.660298][ T8499] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.728235][ T8499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.747455][ T8499] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.757130][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.759727][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.767098][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.769926][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.904420][ T8499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.942848][ T8578] tmpfs: Bad value for 'mpol' [ 95.974435][ T5940] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 96.027766][ T8499] veth0_vlan: entered promiscuous mode [ 96.034319][ T8499] veth1_vlan: entered promiscuous mode [ 96.053649][ T8499] veth0_macvtap: entered promiscuous mode [ 96.058866][ T8499] veth1_macvtap: entered promiscuous mode [ 96.073922][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.078392][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.084256][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.101176][ T8499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.105519][ T8499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.110864][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.121353][ T8499] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.123951][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 96.123961][ T40] audit: type=1400 audit(1746384923.955:34138): avc: denied { append } for pid=8588 comm="syz.0.776" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.125009][ T8499] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.142127][ T8499] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.145792][ T8499] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.194113][ T8591] overlayfs: conflicting lowerdir path [ 96.207363][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.210974][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.224496][ T24] usb 9-1: USB disconnect, device number 7 [ 96.255118][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.258369][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.302583][ T5943] block nbd0: Receive control failed (result -32) [ 96.399851][ T8602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.779'. [ 96.579118][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.781'. [ 96.582996][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 96.589030][ T8612] ipvlan2: entered allmulticast mode [ 96.591490][ T8612] veth0_vlan: entered allmulticast mode [ 96.635654][ T40] audit: type=1400 audit(1746384924.465:34139): avc: denied { mount } for pid=8615 comm="syz.4.784" name="/" dev="ramfs" ino=23363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 96.647286][ T40] audit: type=1400 audit(1746384924.475:34140): avc: denied { mounton } for pid=8615 comm="syz.4.784" path="/file0" dev="ramfs" ino=24368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 96.705625][ T8617] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 96.708127][ T8617] overlayfs: failed to set xattr on upper [ 96.710956][ T8617] overlayfs: ...falling back to redirect_dir=nofollow. [ 96.713807][ T8617] overlayfs: ...falling back to metacopy=off. [ 96.716226][ T8617] overlayfs: ...falling back to index=off. [ 96.718162][ T8617] overlayfs: ...falling back to uuid=null. [ 96.753094][ T8629] overlayfs: failed to resolve './file1': -2 [ 97.081957][ T8649] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 97.085423][ T8649] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 97.176974][ T8653] sctp: [Deprecated]: syz.0.795 (pid 8653) Use of int in maxseg socket option. [ 97.176974][ T8653] Use struct sctp_assoc_value instead [ 97.190060][ T10] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 97.209977][ T5943] Bluetooth: hci3: command tx timeout [ 97.270627][ T8658] program syz.3.799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.277265][ T8660] overlayfs: failed to resolve './file1': -2 [ 97.287455][ T8662] [U] v3f"S/4:XTzWtlW= [ 97.345384][ T40] audit: type=1400 audit(1746384925.175:34141): avc: denied { write } for pid=8664 comm="syz.3.800" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 97.351291][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.356045][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 97.359441][ T10] usb 9-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 97.363304][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.368415][ T10] usb 9-1: config 0 descriptor?? [ 97.371918][ T8644] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 97.378019][ T8668] netlink: 'syz.5.801': attribute type 5 has an invalid length. [ 97.527601][ T40] audit: type=1400 audit(1746384925.355:34142): avc: denied { ioctl } for pid=8676 comm="syz.3.804" path="socket:[24547]" dev="sockfs" ino=24547 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 97.659722][ T836] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 97.730540][ T8685] support for cryptoloop has been removed. Use dm-crypt instead. [ 97.749225][ T8685] nvme_fabrics: missing parameter 'transport=%s' [ 97.752423][ T8685] nvme_fabrics: missing parameter 'nqn=%s' [ 97.789982][ T836] usb 10-1: device descriptor read/64, error -71 [ 98.029815][ T836] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 98.159986][ T836] usb 10-1: device descriptor read/64, error -71 [ 98.246641][ T8697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=8697 comm=syz.0.809 [ 98.269925][ T836] usb usb10-port1: attempt power cycle [ 98.276119][ T8696] could not allocate digest TFM handle [ 98.303133][ T40] audit: type=1400 audit(1746384926.135:34143): avc: denied { setopt } for pid=8701 comm="syz.0.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.311149][ T40] audit: type=1400 audit(1746384926.135:34144): avc: denied { ioctl } for pid=8701 comm="syz.0.810" path="socket:[23485]" dev="sockfs" ino=23485 ioctlcmd=0x4dfb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.318373][ T40] audit: type=1400 audit(1746384926.135:34145): avc: denied { name_bind } for pid=8701 comm="syz.0.810" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 98.335066][ T40] audit: type=1400 audit(1746384926.135:34146): avc: denied { node_bind } for pid=8701 comm="syz.0.810" saddr=fc00::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 98.484532][ T40] audit: type=1400 audit(1746384926.315:34147): avc: denied { create } for pid=8703 comm="syz.0.811" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 98.610855][ T836] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 98.630305][ T836] usb 10-1: device descriptor read/8, error -71 [ 98.869718][ T836] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 98.890241][ T836] usb 10-1: device descriptor read/8, error -71 [ 98.898897][ T8709] trusted_key: syz.3.812 sent an empty control message without MSG_MORE. [ 99.000440][ T836] usb usb10-port1: unable to enumerate USB device [ 99.164536][ T8722] overlayfs: failed to resolve './file1': -2 [ 99.253826][ T8724] xt_hashlimit: size too large, truncated to 1048576 [ 99.290113][ T5940] Bluetooth: hci3: command tx timeout [ 99.367929][ T8729] syzkaller1: entered promiscuous mode [ 99.370355][ T8729] syzkaller1: entered allmulticast mode [ 99.893054][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 99.895021][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 99.897983][ T8737] program syz.0.820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.898598][ T10] usb 9-1: USB disconnect, device number 8 [ 99.904652][ T8737] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.820'. [ 99.908308][ T8737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.820'. [ 99.933670][ T5940] Bluetooth: hci1: unexpected event for opcode 0x2019 [ 99.966219][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.822'. [ 100.452811][ T8752] netlink: 276 bytes leftover after parsing attributes in process `syz.4.824'. [ 100.456621][ T5940] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 101.369950][ T5288] Bluetooth: hci3: command 0x0419 tx timeout [ 101.593796][ T8791] netlink: 596 bytes leftover after parsing attributes in process `syz.4.835'. [ 101.622740][ T8793] xt_l2tp: wrong L2TP version: 0 [ 101.744497][ T8806] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 101.845733][ T8813] netlink: 'syz.0.843': attribute type 16 has an invalid length. [ 101.848936][ T8813] netlink: 'syz.0.843': attribute type 3 has an invalid length. [ 101.852825][ T8813] netlink: 'syz.0.843': attribute type 1 has an invalid length. [ 101.855909][ T8813] netlink: 'syz.0.843': attribute type 2 has an invalid length. [ 101.858984][ T8813] netlink: 10950 bytes leftover after parsing attributes in process `syz.0.843'. [ 101.923293][ T8814] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 102.009803][ T1458] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 102.159783][ T1458] usb 9-1: Using ep0 maxpacket: 8 [ 102.164786][ T1458] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 102.167389][ T1458] usb 9-1: config 179 has no interface number 0 [ 102.169448][ T1458] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 102.174023][ T1458] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 102.177540][ T1458] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 55, changing to 9 [ 102.181295][ T1458] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8496, setting to 1024 [ 102.185992][ T1458] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 102.191512][ T1458] usb 9-1: config 179 interface 65 has no altsetting 0 [ 102.193931][ T1458] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 102.196737][ T1458] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.201656][ T8808] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 102.217464][ T1458] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input14 [ 102.262527][ T5333] input input14: unable to receive magic message: -110 [ 102.271562][ T5333] input input14: unable to receive magic message: -32 [ 102.275731][ T5333] input input14: unable to receive magic message: -32 [ 102.280185][ T5333] input input14: unable to receive magic message: -32 [ 102.290845][ T5333] input input14: unable to receive magic message: -32 [ 102.297209][ T5333] input input14: unable to receive magic message: -32 [ 102.406676][ T1328] usb 9-1: USB disconnect, device number 9 [ 102.406830][ C2] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 102.411599][ T1328] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 102.448927][ T8819] : entered promiscuous mode [ 102.569753][ T5940] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 102.581968][ T8756] sp0: Synchronizing with TNC [ 102.605913][ T8829] overlayfs: failed to resolve './file0': -2 [ 102.800473][ T8834] QAT: failed to copy from user. [ 102.802643][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.847'. [ 102.996334][ T8837] program syz.0.849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.226329][ T8850] binder: BC_ACQUIRE_RESULT not supported [ 103.228874][ T8850] binder: 8848:8850 ioctl c0306201 200000000100 returned -22 [ 103.276170][ T8854] vlan2: entered promiscuous mode [ 103.277892][ T8854] bond0: entered promiscuous mode [ 103.279529][ T8854] bond_slave_0: entered promiscuous mode [ 103.282506][ T8854] bond_slave_1: entered promiscuous mode [ 103.345890][ T8858] overlayfs: failed to resolve './file1': -2 [ 103.460198][ T5940] Bluetooth: hci3: command 0x0419 tx timeout [ 103.471213][ T8868] trusted_key: encrypted_key: master key parameter 'ecrypt(y+fs' is invalid [ 103.570674][ T8879] syzkaller1: entered allmulticast mode [ 103.592351][ T8881] ALSA: mixer_oss: invalid OSS volume '' [ 103.597236][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 103.597249][ T40] audit: type=1400 audit(1746384931.425:34149): avc: denied { mount } for pid=8880 comm="syz.4.864" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 103.601768][ T8879] syzkaller0: entered promiscuous mode [ 103.612136][ T8879] syzkaller0: entered allmulticast mode [ 103.613486][ T40] audit: type=1400 audit(1746384931.435:34150): avc: denied { setattr } for pid=8880 comm="syz.4.864" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.629337][ T40] audit: type=1400 audit(1746384931.455:34151): avc: denied { unmount } for pid=6708 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 103.676696][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.866'. [ 103.681055][ T8886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.729269][ T40] audit: type=1400 audit(1746384931.555:34152): avc: denied { view } for pid=8885 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 103.736190][ T8886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.850683][ T8889] syzkaller0: entered promiscuous mode [ 103.852562][ T8889] syzkaller0: entered allmulticast mode [ 103.888873][ T40] audit: type=1400 audit(1746384931.715:34153): avc: denied { mounton } for pid=8890 comm="syz.4.868" path="/159/file0/file0" dev="bpf" ino=26099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=file permissive=1 [ 103.939296][ T8891] overlayfs: conflicting options: userxattr,metacopy=on [ 103.939340][ T8895] overlayfs: conflicting options: userxattr,metacopy=on [ 103.987921][ T40] audit: type=1400 audit(1746384931.815:34154): avc: denied { bind } for pid=8890 comm="syz.4.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.995799][ T40] audit: type=1400 audit(1746384931.825:34155): avc: denied { unmount } for pid=6708 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 104.010329][ T5940] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 104.013880][ T5940] Bluetooth: hci1: Injecting HCI hardware error event [ 104.017404][ T5940] Bluetooth: hci1: hardware error 0x00 [ 104.152344][ T8915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.873'. [ 104.194160][ T40] audit: type=1400 audit(1746384932.025:34156): avc: denied { read } for pid=8918 comm="syz.4.876" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.202373][ T40] audit: type=1400 audit(1746384932.025:34157): avc: denied { open } for pid=8918 comm="syz.4.876" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.549786][ T40] audit: type=1400 audit(1746384932.375:34158): avc: denied { setopt } for pid=8936 comm="syz.3.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.603125][ T8949] random: crng reseeded on system resumption [ 105.702742][ T8953] overlayfs: failed to resolve './file1': -2 [ 105.716764][ T8949] Unrecognized hibernate image header format! [ 105.720628][ T8949] PM: hibernation: Image mismatch: architecture specific data [ 105.811244][ T8955] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 105.935907][ T8963] netlink: 204 bytes leftover after parsing attributes in process `syz.4.887'. [ 106.089810][ T5940] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 106.230240][ T5975] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 106.333497][ T8978] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.399320][ T8980] syzkaller1: entered promiscuous mode [ 106.400133][ T5975] usb 9-1: Using ep0 maxpacket: 8 [ 106.401179][ T8980] syzkaller1: entered allmulticast mode [ 106.404294][ T5975] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.407995][ T5975] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 106.411563][ T5975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.419092][ T5975] usb 9-1: config 0 descriptor?? [ 106.627294][ T5975] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 106.831890][ T8966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.838456][ T1328] usb 9-1: USB disconnect, device number 10 [ 106.840753][ T8985] overlayfs: conflicting lowerdir path [ 106.923247][ T78] Bluetooth: hci4: Frame reassembly failed (-84) [ 106.924686][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 106.936393][ T8987] overlayfs: workdir and upperdir must reside under the same mount [ 106.941459][ T8987] netlink: 68 bytes leftover after parsing attributes in process `syz.0.896'. [ 107.267935][ T8990] netlink: 16 bytes leftover after parsing attributes in process `syz.5.897'. [ 107.276605][ T8990] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.417719][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.899'. [ 108.513434][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'. [ 108.723401][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 108.723411][ T40] audit: type=1400 audit(1746384936.555:34163): avc: denied { connect } for pid=9033 comm="syz.4.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.801680][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'. [ 108.910977][ T9039] FAULT_INJECTION: forcing a failure. [ 108.910977][ T9039] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.916612][ T9039] CPU: 3 UID: 0 PID: 9039 Comm: syz.4.915 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 108.916634][ T9039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.916644][ T9039] Call Trace: [ 108.916650][ T9039] [ 108.916657][ T9039] dump_stack_lvl+0x16c/0x1f0 [ 108.916703][ T9039] should_fail_ex+0x512/0x640 [ 108.916733][ T9039] _copy_from_user+0x2e/0xd0 [ 108.916756][ T9039] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 108.916776][ T9039] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 108.916795][ T9039] ? __lock_acquire+0xaa4/0x1ba0 [ 108.916829][ T9039] do_ipv6_getsockopt+0x217/0x2f50 [ 108.916852][ T9039] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 108.916878][ T9039] ? avc_has_perm+0x11a/0x1c0 [ 108.916894][ T9039] ? __pfx_avc_has_perm+0x10/0x10 [ 108.916913][ T9039] ? __lock_acquire+0xaa4/0x1ba0 [ 108.916940][ T9039] ? sock_has_perm+0x259/0x2f0 [ 108.916964][ T9039] ? ipv6_getsockopt+0x126/0x280 [ 108.916980][ T9039] ? find_held_lock+0x2b/0x80 [ 108.916997][ T9039] ipv6_getsockopt+0x126/0x280 [ 108.917023][ T9039] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 108.917045][ T9039] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 108.917068][ T9039] do_sock_getsockopt+0x3fc/0x800 [ 108.917092][ T9039] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 108.917108][ T9039] ? __fget_files+0x204/0x3c0 [ 108.917144][ T9039] __sys_getsockopt+0x12f/0x260 [ 108.917164][ T9039] __x64_sys_getsockopt+0xbd/0x160 [ 108.917181][ T9039] ? do_syscall_64+0x91/0x260 [ 108.917202][ T9039] ? lockdep_hardirqs_on+0x7c/0x110 [ 108.917222][ T9039] do_syscall_64+0xcd/0x260 [ 108.917245][ T9039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.917262][ T9039] RIP: 0033:0x7f13bd38e969 [ 108.917275][ T9039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.917290][ T9039] RSP: 002b:00007f13bb1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 108.917306][ T9039] RAX: ffffffffffffffda RBX: 00007f13bd5b5fa0 RCX: 00007f13bd38e969 [ 108.917316][ T9039] RDX: 0000000000000018 RSI: 0000000000000029 RDI: 0000000000000003 [ 108.917327][ T9039] RBP: 00007f13bb1f6090 R08: 0000200000000240 R09: 0000000000000000 [ 108.917338][ T9039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.917348][ T9039] R13: 0000000000000000 R14: 00007f13bd5b5fa0 R15: 00007ffccf17c9f8 [ 108.917369][ T9039] [ 108.969892][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 108.969915][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 109.002539][ T40] audit: type=1400 audit(1746384936.835:34164): avc: denied { remount } for pid=9040 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 109.084816][ T40] audit: type=1400 audit(1746384936.915:34165): avc: denied { ioctl } for pid=9044 comm="syz.4.918" path="socket:[28802]" dev="sockfs" ino=28802 ioctlcmd=0x8b05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.292194][ T40] audit: type=1400 audit(1746384937.125:34166): avc: denied { create } for pid=9061 comm="syz.4.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 109.301892][ T40] audit: type=1400 audit(1746384937.135:34167): avc: denied { getopt } for pid=9061 comm="syz.4.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 109.571941][ T9069] bridge0: port 2(syz_tun) entered blocking state [ 109.574776][ T9069] bridge0: port 2(syz_tun) entered disabled state [ 109.577858][ T9069] syz_tun: entered allmulticast mode [ 109.582846][ T9069] syz_tun: entered promiscuous mode [ 109.586602][ T9069] bridge0: port 2(syz_tun) entered blocking state [ 109.590230][ T9069] bridge0: port 2(syz_tun) entered forwarding state [ 109.616411][ T9072] tmpfs: Bad value for 'mpol' [ 109.617680][ T40] audit: type=1400 audit(1746384937.445:34168): avc: denied { mounton } for pid=9066 comm="syz.4.925" path="/196/file0/file0" dev="9p" ino=35913950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.300608][ T1121] sr 2:0:0:0: [sr0] tag#12 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 110.303855][ T1121] sr 2:0:0:0: [sr0] tag#12 Sense Key : Illegal Request [current] [ 110.306535][ T1121] sr 2:0:0:0: [sr0] tag#12 Add. Sense: Invalid command operation code [ 110.309547][ T1121] sr 2:0:0:0: [sr0] tag#12 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 110.313332][ T1121] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 110.317165][ T1121] buffer_io_error: 7 callbacks suppressed [ 110.317173][ T1121] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 110.371332][ T9125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.942'. [ 110.387559][ T9124] mkiss: ax0: crc mode is auto. [ 110.444081][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.943'. [ 110.478363][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.943'. [ 110.719362][ T40] audit: type=1400 audit(1746384938.545:34169): avc: denied { append } for pid=9152 comm="syz.0.951" name="sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.720765][ T9153] program syz.0.951 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.773834][ T40] audit: type=1400 audit(1746384938.605:34170): avc: denied { relabelfrom } for pid=9152 comm="syz.0.951" name="" dev="pipefs" ino=27547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 110.939718][ T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 110.962212][ T9162] ]: renamed from wg0 (while UP) [ 111.089869][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 111.093969][ T24] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 111.096834][ T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 111.100693][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 111.104513][ T24] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 111.108525][ T24] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 111.112179][ T24] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.116513][ T24] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.120053][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.333319][ T24] usb 10-1: GET_CAPABILITIES returned 0 [ 111.335480][ T24] usbtmc 10-1:16.0: can't read capabilities [ 111.420412][ T40] audit: type=1400 audit(1746384939.245:34171): avc: denied { setopt } for pid=9170 comm="syz.3.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 111.535194][ C2] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 111.541349][ T9148] usbtmc 10-1:16.0: Unable to send data, error -71 [ 111.544328][ C0] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 111.547224][ C0] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 111.550589][ C0] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 111.553633][ C0] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 111.557328][ T9147] usbtmc 10-1:16.0: Unable to send data, error -71 [ 111.576319][ T6019] usb 10-1: USB disconnect, device number 6 [ 112.295074][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.960'. [ 112.484382][ T9200] netlink: 'syz.3.965': attribute type 21 has an invalid length. [ 112.487374][ T9200] netlink: 'syz.3.965': attribute type 6 has an invalid length. [ 112.491561][ T9200] netlink: 132 bytes leftover after parsing attributes in process `syz.3.965'. [ 112.503266][ T9200] tun0: tun_chr_ioctl cmd 1074025678 [ 112.505417][ T9200] tun0: group set to 0 [ 112.589499][ T40] audit: type=1400 audit(1746384940.415:34172): avc: denied { mount } for pid=9203 comm="syz.3.967" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 112.646043][ T9214] netlink: 'syz.4.970': attribute type 1 has an invalid length. [ 112.649148][ T9214] netlink: 'syz.4.970': attribute type 3 has an invalid length. [ 112.655592][ T9214] netlink: 224 bytes leftover after parsing attributes in process `syz.4.970'. [ 112.661572][ T9213] NILFS (nullb0): couldn't find nilfs on the device [ 112.663528][ T9214] dvmrp5: entered allmulticast mode [ 112.840993][ T9227] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 112.843064][ T9227] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.846365][ T9227] vhci_hcd vhci_hcd.0: Device attached [ 112.920877][ T5980] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 113.089927][ T836] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 113.121071][ T5980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.125664][ T5980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.129545][ T5980] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.135277][ T5980] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.138674][ T5980] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.143453][ T5980] usb 9-1: config 0 descriptor?? [ 113.410162][ T5975] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 113.582146][ T5975] usb 5-1: config 1 interface 0 has no altsetting 0 [ 113.586820][ T5975] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 113.591054][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.594439][ T5975] usb 5-1: Product: syz [ 113.596133][ T5975] usb 5-1: Manufacturer: syz [ 113.598028][ T5975] usb 5-1: SerialNumber: syz [ 113.756560][ T9214] dvmrp5: left allmulticast mode [ 113.854901][ T5980] usbhid 9-1:0.0: can't add hid device: -71 [ 113.856928][ T5980] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 113.860744][ T5980] usb 9-1: USB disconnect, device number 11 [ 114.129052][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 114.129069][ T40] audit: type=1400 audit(1746384941.955:34177): avc: denied { getopt } for pid=9262 comm="syz.5.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 114.367510][ T40] audit: type=1400 audit(1746384942.195:34178): avc: denied { watch watch_reads } for pid=9251 comm="syz.0.982" path="/dev/urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 114.383403][ T9268] random: crng reseeded on system resumption [ 114.512211][ T40] audit: type=1400 audit(1746384942.345:34179): avc: denied { ioctl } for pid=9267 comm="syz.4.988" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 114.563614][ T40] audit: type=1400 audit(1746384942.395:34180): avc: denied { search } for pid=9267 comm="syz.4.988" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.849387][ T9228] vhci_hcd: connection reset by peer [ 115.861541][ T1141] vhci_hcd: stop threads [ 115.863312][ T1141] vhci_hcd: release socket [ 115.864786][ T40] audit: type=1400 audit(1746384943.695:34181): avc: denied { connect } for pid=9274 comm="syz.3.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.866823][ T1141] vhci_hcd: disconnect device [ 115.873336][ T40] audit: type=1400 audit(1746384943.695:34182): avc: denied { setopt } for pid=9274 comm="syz.3.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.193977][ T5975] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 116.209856][ T5975] usb 5-1: USB disconnect, device number 6 [ 116.217568][ T9286] netlink: 'syz.0.994': attribute type 2 has an invalid length. [ 116.218664][ T5975] usblp0: removed [ 116.256285][ T5940] block nbd5: Receive control failed (result -107) [ 116.290554][ T9288] nbd5: detected capacity change from 0 to 6 [ 116.294575][ T8153] block nbd5: Dead connection, failed to find a fallback [ 116.297033][ T8153] block nbd5: shutting down sockets [ 116.298747][ T8153] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.301651][ T8153] Buffer I/O error on dev nbd5, logical block 0, async page read [ 116.304168][ T8153] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.307048][ T8153] Buffer I/O error on dev nbd5, logical block 0, async page read [ 116.309597][ T8153] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.312336][ T8153] Buffer I/O error on dev nbd5, logical block 0, async page read [ 116.315614][ T8153] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.318950][ T8153] Buffer I/O error on dev nbd5, logical block 0, async page read [ 116.322034][ T8153] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.324881][ T8153] Buffer I/O error on dev nbd5, logical block 0, async page read [ 116.327290][ T8153] ldm_validate_partition_table(): Disk read failed. [ 116.329611][ T8153] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.333908][ T8153] Buffer I/O error on dev nbd5, logical block 0, async page read [ 116.336444][ T8153] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.339220][ T8153] Buffer I/O error on dev nbd5, logical block 0, async page read [ 116.343924][ T8153] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.346754][ T8153] Buffer I/O error on dev nbd5, logical block 0, async page read [ 116.349502][ T8153] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.353882][ T8153] Buffer I/O error on dev nbd5, logical block 0, async page read [ 116.356316][ T8153] Dev nbd5: unable to read RDB block 0 [ 116.357300][ T9294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.358297][ T8153] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 116.361940][ T9294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.364594][ T8153] Buffer I/O error on dev nbd5, logical block 0, async page read [ 116.371016][ T8153] nbd5: unable to read partition table [ 116.373346][ T8153] nbd5: partition table beyond EOD, truncated [ 116.378500][ T9288] ldm_validate_partition_table(): Disk read failed. [ 116.384352][ T9288] Dev nbd5: unable to read RDB block 0 [ 116.386847][ T9288] nbd5: unable to read partition table [ 116.388734][ T9288] nbd5: partition table beyond EOD, truncated [ 116.391675][ T8153] ldm_validate_partition_table(): Disk read failed. [ 116.394224][ T8153] Dev nbd5: unable to read RDB block 0 [ 116.396480][ T8153] nbd5: unable to read partition table [ 116.398454][ T8153] nbd5: partition table beyond EOD, truncated [ 116.447627][ T9294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.452268][ T9294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.468990][ T9297] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 116.473556][ T9297] bond0: (slave gre0): Error -95 calling set_mac_address [ 116.527644][ T9294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.532676][ T9294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.555329][ T40] audit: type=1400 audit(1746384944.385:34183): avc: denied { override_creds } for pid=9296 comm="syz.5.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 116.610404][ T9294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.614732][ T9294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.706798][ T9294] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.710596][ T9294] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.724278][ T9294] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.727615][ T9294] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.738385][ T9294] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.741943][ T9294] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.755548][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.758588][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.759429][ T9294] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.762188][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.764788][ T9294] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.767096][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.774283][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.777204][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.779387][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.783057][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.785332][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.787594][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.790620][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.793432][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.795674][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.797913][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.812164][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.815119][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.818095][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.821934][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.824212][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.826551][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.828799][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.831610][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.836023][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.838664][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.841044][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.843270][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.845459][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.847715][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.850287][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.852551][ T5975] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 116.857488][ T5975] hid-generic 0001:0000:0000.0006: hidraw1: HID vffff7f.ff Device [syz0] on syz0 [ 116.884206][ T40] audit: type=1400 audit(1746384944.715:34184): avc: denied { setopt } for pid=9312 comm="syz.0.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 117.020555][ T9325] netlink: 'syz.4.1008': attribute type 25 has an invalid length. [ 117.026429][ T40] audit: type=1400 audit(1746384944.855:34185): avc: denied { transfer } for pid=9324 comm="syz.4.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 117.056683][ T9328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.060692][ T9328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1009'. [ 117.136543][ T40] audit: type=1400 audit(1746384944.965:34186): avc: denied { bind } for pid=9338 comm="syz.5.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.146798][ T9340] netlink: 'syz.5.1012': attribute type 10 has an invalid length. [ 117.149616][ T9340] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1012'. [ 117.176510][ T9340] team0: Port device geneve0 added [ 117.245314][ T9345] 9pnet_fd: Insufficient options for proto=fd [ 117.332169][ T9359] overlayfs: failed to resolve './file1': -2 [ 117.348038][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1021'. [ 117.644776][ T5940] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 117.661300][ T9386] futex_wake_op: syz.4.1028 tries to shift op by -1; fix this program [ 117.708743][ T9388] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1029'. [ 117.978612][ T9399] nfs: Bad value for 'source' [ 118.128168][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1036'. [ 118.204092][ T1244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.207665][ T1244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.244798][ T9416] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 118.259847][ T836] vhci_hcd: vhci_device speed not set [ 118.477073][ T9433] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1043'. [ 118.558633][ T9439] tmpfs: Cannot change global quota limit on remount [ 118.631678][ T9446] bond0: (slave rose0): Enslaving as an active interface with an up link [ 118.727361][ T9455] overlayfs: failed to resolve './file1': -2 [ 118.818959][ T9459] netlink: 'syz.5.1053': attribute type 29 has an invalid length. [ 118.823788][ T9459] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1053'. [ 118.838051][ T9459] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1053'. [ 118.848155][ T9459] netlink: 'syz.5.1053': attribute type 29 has an invalid length. [ 119.183485][ T9473] netlink: 'syz.0.1057': attribute type 1 has an invalid length. [ 119.186746][ T9473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.243216][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 119.243227][ T40] audit: type=1400 audit(1746384947.075:34193): avc: denied { read } for pid=9474 comm="syz.0.1058" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.255836][ T40] audit: type=1400 audit(1746384947.075:34194): avc: denied { open } for pid=9474 comm="syz.0.1058" path="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.305423][ T40] audit: type=1400 audit(1746384947.135:34195): avc: denied { write } for pid=9476 comm="syz.0.1059" name="/" dev="configfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 119.883683][ T9492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9492 comm=syz.4.1064 [ 119.888079][ T40] audit: type=1400 audit(1746384947.715:34196): avc: denied { getopt } for pid=9491 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.895987][ T40] audit: type=1400 audit(1746384947.725:34197): avc: denied { accept } for pid=9491 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.025974][ T40] audit: type=1400 audit(1746384947.855:34198): avc: denied { name_connect } for pid=9500 comm="syz.4.1067" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 120.045578][ T40] audit: type=1400 audit(1746384947.875:34199): avc: denied { mounton } for pid=9500 comm="syz.4.1067" path="/248/file0" dev="tmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.050784][ T9505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1068'. [ 120.144374][ T9513] sp0: Synchronizing with TNC [ 120.221908][ T9465] Set syz1 is full, maxelem 65536 reached [ 120.254691][ T9518] sctp: [Deprecated]: syz.3.1072 (pid 9518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.254691][ T9518] Use struct sctp_sack_info instead [ 120.261171][ T40] audit: type=1400 audit(1746384948.095:34200): avc: denied { append } for pid=9517 comm="syz.3.1072" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 120.312319][ T9521] overlayfs: failed to resolve './file1': -2 [ 120.317823][ T9522] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 120.322642][ T9522] cramfs: wrong magic [ 120.358463][ T9528] netlink: 'syz.3.1077': attribute type 1 has an invalid length. [ 120.389061][ T9528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.522878][ T40] audit: type=1800 audit(1746384948.355:34201): pid=9543 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1083" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=29581 res=0 errno=0 [ 120.533442][ T40] audit: type=1800 audit(1746384948.355:34202): pid=9544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1083" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=29581 res=0 errno=0 [ 120.567881][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1085'. [ 120.575974][ T9551] syzkaller1: entered promiscuous mode [ 120.577797][ T9551] syzkaller1: entered allmulticast mode [ 120.584180][ T9551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20224 sclass=netlink_route_socket pid=9551 comm=syz.5.1085 [ 120.588684][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1085'. [ 120.603644][ T9555] NILFS (nbd3): device size too small [ 120.611972][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'. [ 121.003132][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.005515][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.007810][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.011447][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.013740][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.015983][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.018718][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.021783][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.024156][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.026738][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.029220][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.031848][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.034382][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.036867][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.039396][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.042775][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.045746][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.048272][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.053274][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.055690][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.058094][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.060754][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.063069][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.065372][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.067773][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.070080][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.072295][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.074551][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.076896][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.079153][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.081904][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.084127][ T6019] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 121.089005][ T6019] hid-generic 0001:0000:0000.0007: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 121.127715][ T9594] overlayfs: failed to resolve './file1': -2 [ 121.262307][ T9600] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 121.315297][ T9604] xt_hashlimit: size too large, truncated to 1048576 [ 121.356961][ T9607] input: syz0 as /devices/virtual/input/input16 [ 121.402079][ T9610] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 121.518820][ T9617] Set syz1 is full, maxelem 65536 reached [ 121.907039][ T9643] overlayfs: missing 'workdir' [ 121.913080][ T9643] fuse: Bad value for 'fd' [ 122.022143][ T9649] netlink: 'syz.4.1122': attribute type 10 has an invalid length. [ 122.028670][ T9649] batman_adv: batadv0: Adding interface: team0 [ 122.031239][ T9649] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.039467][ T9649] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 122.045882][ T9649] fuse: Bad value for 'fd' [ 122.047747][ T9649] fuse: Bad value for 'fd' [ 122.327910][ T9661] overlayfs: failed to resolve './file1': -2 [ 122.519114][ T9672] netlink: 'syz.4.1132': attribute type 1 has an invalid length. [ 122.593775][ T9675] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 122.614526][ T9675] bond6: entered promiscuous mode [ 122.616877][ T9675] bond6: entered allmulticast mode [ 122.620448][ T9675] 8021q: adding VLAN 0 to HW filter on device bond6 [ 122.871728][ T9695] sctp: [Deprecated]: syz.0.1140 (pid 9695) Use of int in maxseg socket option. [ 122.871728][ T9695] Use struct sctp_assoc_value instead [ 122.877487][ T5940] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 123.123726][ T9706] __nla_validate_parse: 3 callbacks suppressed [ 123.123737][ T9706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1145'. [ 123.243021][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1149'. [ 123.246620][ T9716] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1149'. [ 123.275248][ T9721] FAT-fs (nullb0): bogus number of reserved sectors [ 123.277520][ T9721] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 123.315997][ T9723] xt_hashlimit: size too large, truncated to 1048576 [ 123.321478][ T9725] tmpfs: Unknown parameter 'usrquota' [ 123.406921][ T9730] input: syz0 as /devices/virtual/input/input17 [ 123.417265][ T9730] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 123.419523][ T9730] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 123.431077][ T9730] vhci_hcd vhci_hcd.0: Device attached [ 123.447803][ T9731] vhci_hcd: connection closed [ 123.449414][ T1147] vhci_hcd: stop threads [ 123.453025][ T1147] vhci_hcd: release socket [ 123.454357][ T1147] vhci_hcd: disconnect device [ 123.521056][ T9734] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1154'. [ 123.562127][ T9734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1154'. [ 123.607123][ T9737] openvswitch: netlink: EtherType 0 is less than min 600 [ 123.647455][ T5940] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 123.987576][ T9757] IPv6: sit2: Disabled Multicast RS [ 123.994963][ T9757] sit2: entered allmulticast mode [ 124.044912][ T9760] tipc: Started in network mode [ 124.046752][ T9760] tipc: Node identity 4, cluster identity 4711 [ 124.048681][ T9760] tipc: Node number set to 4 [ 124.106702][ T9767] netlink: 'syz.0.1165': attribute type 29 has an invalid length. [ 124.127290][ T9767] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.250925][ T40] kauditd_printk_skb: 104 callbacks suppressed [ 124.250941][ T40] audit: type=1400 audit(1746384952.075:34307): avc: denied { connect } for pid=9782 comm="syz.3.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.267939][ T40] audit: type=1400 audit(1746384952.085:34308): avc: denied { name_connect } for pid=9782 comm="syz.3.1169" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 124.277354][ T40] audit: type=1400 audit(1746384952.085:34309): avc: denied { create } for pid=9782 comm="syz.3.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.286848][ T40] audit: type=1400 audit(1746384952.085:34310): avc: denied { ioctl } for pid=9782 comm="syz.3.1169" path="socket:[34884]" dev="sockfs" ino=34884 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.296778][ T9788] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 124.334169][ T40] audit: type=1400 audit(1746384952.165:34311): avc: denied { connect } for pid=9791 comm="syz.3.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.343074][ T40] audit: type=1400 audit(1746384952.165:34312): avc: denied { read write } for pid=9791 comm="syz.3.1174" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 124.357002][ T40] audit: type=1400 audit(1746384952.165:34313): avc: denied { open } for pid=9791 comm="syz.3.1174" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 124.386744][ T9793] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1174'. [ 124.420337][ T9796] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 124.425265][ T40] audit: type=1400 audit(1746384952.255:34314): avc: denied { unlink } for pid=9795 comm="syz.0.1175" name="#4d" dev="tmpfs" ino=1575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 124.433193][ T40] audit: type=1400 audit(1746384952.255:34315): avc: denied { mount } for pid=9795 comm="syz.0.1175" name="/" dev="overlay" ino=1570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 124.441834][ T40] audit: type=1400 audit(1746384952.265:34316): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 124.589915][ T9825] macvlan0: entered promiscuous mode [ 124.754301][ T9843] overlayfs: failed to resolve './file1': -2 [ 125.130857][ T9853] batman_adv: batadv0: Adding interface: dummy0 [ 125.132860][ T9853] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.140751][ T9853] batman_adv: batadv0: Interface activated: dummy0 [ 125.323420][ T9856] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 125.326957][ T9856] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 125.334908][ T9858] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 125.338562][ T9858] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 125.757921][ T9866] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 125.912116][ T9870] netlink: 'syz.5.1199': attribute type 39 has an invalid length. [ 125.971860][ T9878] xt_hashlimit: size too large, truncated to 1048576 [ 126.092129][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'. [ 126.116414][ T9892] overlayfs: failed to resolve './file1': -2 [ 126.186911][ T9897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.281538][ T9904] loop2: detected capacity change from 0 to 7 [ 126.288007][ T8153] Dev loop2: unable to read RDB block 7 [ 126.290382][ T8153] loop2: AHDI p1 p2 p3 [ 126.292055][ T8153] loop2: partition table partially beyond EOD, truncated [ 126.297030][ T8153] loop2: p1 start 1601398130 is beyond EOD, truncated [ 126.300521][ T8153] loop2: p2 start 1702059890 is beyond EOD, truncated [ 126.305842][ T9904] Dev loop2: unable to read RDB block 7 [ 126.308125][ T9904] loop2: AHDI p1 p2 p3 [ 126.310920][ T9904] loop2: partition table partially beyond EOD, truncated [ 126.313991][ T9904] loop2: p1 start 1601398130 is beyond EOD, truncated [ 126.316700][ T9904] loop2: p2 start 1702059890 is beyond EOD, truncated [ 126.360201][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 126.384990][ T9921] fuse: Unknown parameter '' [ 126.400903][ T9923] openvswitch: netlink: Unknown key attributes 2 [ 126.587863][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 126.737297][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1222'. [ 126.753578][ T9945] netlink: 'syz.4.1226': attribute type 10 has an invalid length. [ 126.760109][ T9945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.769425][ T9945] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 127.275754][ T9967] netlink: 'syz.5.1233': attribute type 4 has an invalid length. [ 127.284070][ T9967] netlink: 'syz.5.1233': attribute type 4 has an invalid length. [ 127.288707][ T9969] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.289338][ T9970] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.614876][ T9989] hpfs: Bad magic ... probably not HPFS [ 127.640206][ T6019] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.749341][ T9995] netlink: 'syz.3.1243': attribute type 10 has an invalid length. [ 127.752151][ T9995] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 127.758342][ T9995] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 127.761709][ T9995] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.790090][ T6019] usb 5-1: Using ep0 maxpacket: 16 [ 127.793429][ T6019] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 127.799757][ T6019] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 127.802316][ T6019] usb 5-1: can't read configurations, error -61 [ 127.909763][ T5975] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 127.929867][ T6019] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 127.948496][ T5940] Bluetooth: hci2: unexpected event for opcode 0x0809 [ 128.021030][T10015] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 128.023861][T10015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.059775][ T5975] usb 9-1: Using ep0 maxpacket: 16 [ 128.063522][ T5975] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 128.070053][ T5975] usb 9-1: config 0 has no interface number 0 [ 128.072205][ T5975] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.075907][ T5975] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 128.080809][ T5975] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 128.083840][ T5975] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 128.086708][ T5975] usb 9-1: Product: syz [ 128.088169][ T5975] usb 9-1: SerialNumber: syz [ 128.089738][ T6019] usb 5-1: Using ep0 maxpacket: 16 [ 128.092287][ T6019] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 128.092736][ T5975] usb 9-1: config 0 descriptor?? [ 128.096140][ T6019] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 128.105049][ T6019] usb 5-1: can't read configurations, error -61 [ 128.108084][ T5975] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 128.110308][ T6019] usb usb5-port1: attempt power cycle [ 128.112141][ T5975] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input18 [ 128.302514][ T9993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.311248][ T9993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.336514][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 128.337387][ T835] usb 9-1: USB disconnect, device number 12 [ 128.339010][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 128.449791][ T6019] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 128.481273][ T6019] usb 5-1: Using ep0 maxpacket: 16 [ 128.483846][ T6019] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 128.488919][ T6019] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 128.492119][ T6019] usb 5-1: can't read configurations, error -61 [ 128.619810][ T6019] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 128.641483][ T6019] usb 5-1: Using ep0 maxpacket: 16 [ 128.643615][ T6019] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 128.647146][ T6019] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 128.649607][ T6019] usb 5-1: can't read configurations, error -61 [ 128.651864][ T6019] usb usb5-port1: unable to enumerate USB device [ 128.940722][ T835] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 128.998389][ T5940] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 129.054897][T10037] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 129.057646][T10037] overlayfs: failed to set xattr on upper [ 129.059563][T10037] overlayfs: ...falling back to redirect_dir=nofollow. [ 129.062040][T10037] overlayfs: ...falling back to metacopy=off. [ 129.064526][T10037] overlayfs: ...falling back to index=off. [ 129.066666][T10037] overlayfs: ...falling back to uuid=null. [ 129.067071][T10039] Bluetooth: hci4: Frame reassembly failed (-84) [ 129.262154][ T40] kauditd_printk_skb: 88 callbacks suppressed [ 129.262165][ T40] audit: type=1400 audit(1746384957.095:34405): avc: denied { setopt } for pid=10048 comm="syz.3.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.298892][ T40] audit: type=1400 audit(1746384957.125:34406): avc: denied { accept } for pid=10052 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.299882][ T5943] Bluetooth: hci2: unexpected event for opcode 0x0c23 [ 129.396937][T10056] __nla_validate_parse: 4 callbacks suppressed [ 129.396955][T10056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1262'. [ 129.442876][ T40] audit: type=1400 audit(1746384957.275:34407): avc: denied { add_name } for pid=10059 comm="syz.3.1263" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.449382][ T40] audit: type=1400 audit(1746384957.275:34408): avc: denied { create } for pid=10059 comm="syz.3.1263" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 129.457442][ T40] audit: type=1400 audit(1746384957.275:34409): avc: denied { associate } for pid=10059 comm="syz.3.1263" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 129.474147][T10062] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1265'. [ 129.479492][ T40] audit: type=1400 audit(1746384957.305:34410): avc: denied { ioctl } for pid=10061 comm="syz.4.1265" path="net:[4026533485]" dev="nsfs" ino=4026533485 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 129.516156][ T40] audit: type=1400 audit(1746384957.345:34411): avc: denied { create } for pid=10063 comm="syz.4.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.522601][ T40] audit: type=1400 audit(1746384957.355:34412): avc: denied { write } for pid=10063 comm="syz.4.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.530931][T10064] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 129.531988][ T40] audit: type=1400 audit(1746384957.365:34413): avc: denied { create } for pid=10063 comm="syz.4.1266" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 129.560906][ T40] audit: type=1400 audit(1746384957.375:34414): avc: denied { associate } for pid=10063 comm="syz.4.1266" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 129.590028][T10066] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1264'. [ 129.591037][T10068] pim6reg9: entered allmulticast mode [ 129.919780][ T5980] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 130.091127][ T5980] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 130.093898][ T5980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.097846][ T5980] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 130.100890][ T5980] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 130.103470][ T5980] usb 9-1: Manufacturer: syz [ 130.105996][ T5980] usb 9-1: config 0 descriptor?? [ 130.159714][ T5980] rc_core: IR keymap rc-hauppauge not found [ 130.161597][ T5980] Registered IR keymap rc-empty [ 130.164245][ T5980] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 130.168288][ T5980] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input19 [ 130.382727][ T63] usb 9-1: USB disconnect, device number 13 [ 131.024723][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'. [ 131.139942][ T5943] Bluetooth: hci4: command 0xfc11 tx timeout [ 131.140961][ T5940] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 131.644703][T10138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1289'. [ 131.655460][T10138] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 131.682010][T10145] overlayfs: failed to resolve './file1': -2 [ 131.836812][T10155] netlink: 'syz.0.1294': attribute type 1 has an invalid length. [ 131.933042][T10171] QAT: failed to copy from user cfg_data. [ 131.977260][T10171] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1299'. [ 132.246994][T10210] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 132.310105][T10215] sctp: [Deprecated]: syz.0.1314 (pid 10215) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.310105][T10215] Use struct sctp_sack_info instead [ 132.375479][T10220] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 132.386088][T10220] CIFS: Unable to determine destination address [ 132.429115][T10227] vfat: Unknown parameter ')' [ 132.431900][T10226] delete_channel: no stack [ 132.467762][T10231] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.472153][T10231] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.475604][T10231] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.478515][T10231] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.483002][T10231] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.486308][T10231] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.491527][T10231] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.500167][T10229] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.504066][T10231] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.507042][T10231] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.573218][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.575868][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.617123][T10243] cgroup: Need name or subsystem set [ 132.649788][ T5975] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 132.811974][ T5975] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.816108][ T5975] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.820999][ T5975] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.825442][ T5975] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.828678][ T5975] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.834874][ T5975] usb 9-1: config 0 descriptor?? [ 132.875674][T10251] ALSA: seq fatal error: cannot create timer (-19) [ 133.217717][T10255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1329'. [ 133.244299][T10257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.244674][ T5975] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 133.247033][T10257] IPv6: NLM_F_CREATE should be set when creating new route [ 133.251001][ T5975] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 133.252545][T10257] IPv6: NLM_F_CREATE should be set when creating new route [ 133.252565][T10257] IPv6: NLM_F_CREATE should be set when creating new route [ 133.262665][ T5975] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 133.265123][ T5975] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 133.268752][ T5975] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 133.272058][ T5975] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 133.274415][ T5975] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 133.277063][ T5975] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 133.280650][ T5975] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 133.289165][ T5975] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 133.302786][T10260] syz.0.1331: attempt to access beyond end of device [ 133.302786][T10260] sr0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 133.308086][T10260] isofs_fill_super: bread failed, dev=sr0, iso_blknum=16, block=16 [ 133.460513][T10264] netlink: 'syz.0.1333': attribute type 10 has an invalid length. [ 133.480582][T10264] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 133.483735][T10264] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 133.489302][T10264] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 133.500137][ T1147] bridge0: port 1(vlan2) entered blocking state [ 133.502282][ T1147] bridge0: port 1(vlan2) entered forwarding state [ 133.514639][ T63] usb 9-1: USB disconnect, device number 14 [ 133.670092][T10266] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1336'. [ 133.739114][T10271] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1334'. [ 133.769117][T10275] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 133.928775][T10284] overlayfs: failed to resolve './file1': -2 [ 134.044431][ T5940] Bluetooth: hci2: SCO packet too small [ 134.078936][T10292] bond0: mtu less than device minimum [ 134.151286][T10299] tmpfs: Unknown parameter 'usrquotaWa'%6U;qB&ð ){ylNl6w_JXb_Cɇ [7x"Ye<-ΕpDL?)LtwnҫdN٢fu_w ' [ 134.152163][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1346'. [ 134.161944][T10296] bridge_slave_1: left allmulticast mode [ 134.164219][T10296] bridge_slave_1: left promiscuous mode [ 134.166760][T10296] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.175005][T10296] bridge_slave_0: left allmulticast mode [ 134.176777][T10296] bridge_slave_0: left promiscuous mode [ 134.178826][T10296] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.599757][ T835] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 134.749889][ T835] usb 9-1: Using ep0 maxpacket: 8 [ 134.752600][T10311] hsr0: entered allmulticast mode [ 134.754218][T10311] hsr_slave_0: entered allmulticast mode [ 134.756156][T10311] hsr_slave_1: entered allmulticast mode [ 134.758666][ T835] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.762880][ T835] usb 9-1: config 0 has no interface number 0 [ 134.765336][ T835] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.770326][ T835] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 134.773789][ T835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.779505][ T835] usb 9-1: config 0 descriptor?? [ 134.791953][ T835] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 134.875478][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 134.875502][ T40] audit: type=1326 audit(1746384962.705:34463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10317 comm="syz.0.1352" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feacfd8e969 code=0x0 [ 134.987337][ T40] audit: type=1400 audit(1746384962.815:34464): avc: denied { write } for pid=10307 comm="syz.4.1348" name="iowarrior0" dev="devtmpfs" ino=3082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 135.069700][ T40] audit: type=1400 audit(1746384962.895:34465): avc: denied { ioctl } for pid=10327 comm="syz.5.1355" path="socket:[36552]" dev="sockfs" ino=36552 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 135.077841][ T40] audit: type=1400 audit(1746384962.905:34466): avc: denied { ioctl } for pid=10307 comm="syz.4.1348" path="socket:[34764]" dev="sockfs" ino=34764 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.088351][T10339] SELinux: policydb version 1402900228 does not match my version range 15-34 [ 135.088353][ T40] audit: type=1400 audit(1746384962.915:34467): avc: denied { load_policy } for pid=10327 comm="syz.5.1355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 135.098968][T10342] overlayfs: failed to resolve './file1': -2 [ 135.100176][T10339] SELinux: failed to load policy [ 135.105029][ T40] audit: type=1400 audit(1746384962.935:34468): avc: denied { create } for pid=10327 comm="syz.5.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 135.107168][ T835] usb 9-1: USB disconnect, device number 15 [ 135.117372][ T40] audit: type=1400 audit(1746384962.935:34469): avc: denied { bind } for pid=10327 comm="syz.5.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 135.117642][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1355'. [ 135.190382][T10346] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input20 [ 135.263189][T10349] SELinux: policydb string length 14080 does not match expected length 8 [ 135.266625][T10349] SELinux: failed to load policy [ 135.268876][T10349] SELinux: policydb version 642923184 does not match my version range 15-34 [ 135.272612][T10349] SELinux: failed to load policy [ 135.373730][ T5940] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 135.461301][T10365] cgroup: Unknown subsys name 'func' [ 135.538093][ T40] audit: type=1400 audit(1746384963.365:34470): avc: denied { create } for pid=10368 comm="syz.5.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 135.546623][ T40] audit: type=1400 audit(1746384963.365:34471): avc: denied { write } for pid=10368 comm="syz.5.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 135.637868][ T40] audit: type=1400 audit(1746384963.465:34472): avc: denied { read write } for pid=10373 comm="syz.3.1368" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 135.732692][T10387] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 135.745746][T10391] netlink: 'syz.0.1374': attribute type 142 has an invalid length. [ 135.848156][T10413] netlink: 'syz.3.1380': attribute type 1 has an invalid length. [ 135.884147][T10413] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.910286][ T5974] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 135.937879][T10422] atomic_op ffff888050cc0198 conn xmit_atomic 0000000000000000 [ 136.059791][ T5974] usb 9-1: Using ep0 maxpacket: 8 [ 136.062945][ T5974] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 136.065579][ T5974] usb 9-1: config 0 has no interface number 0 [ 136.070127][ T5974] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.073552][ T5974] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 136.079713][ T5974] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 136.083535][ T5974] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 136.086523][ T5974] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 136.090980][ T5974] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 136.093776][ T5974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.098770][ T5974] usb 9-1: config 0 descriptor?? [ 136.106796][ T5974] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 136.108910][T10436] overlayfs: failed to resolve './file1': -2 [ 136.248719][ T5940] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 136.312984][T10383] ldusb 9-1:0.55: Couldn't submit interrupt_in_urb -90 [ 136.319346][ T836] usb 9-1: USB disconnect, device number 16 [ 136.334029][ T836] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 136.522670][T10449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1390'. [ 136.556455][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'. [ 136.693937][T10464] overlayfs: failed to resolve './file1': -2 [ 136.861342][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'. [ 136.864036][T10477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1401'. [ 136.922214][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1403'. [ 137.040039][ T5975] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 137.191910][ T5975] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.196220][ T5975] usb 10-1: config 0 has no interfaces? [ 137.200330][ T5975] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 137.204116][ T5975] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 137.206815][ T5975] usb 10-1: Product: syz [ 137.208143][ T5975] usb 10-1: Manufacturer: syz [ 137.211083][ T5975] usb 10-1: config 0 descriptor?? [ 137.431165][ T5940] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 137.522014][ T1458] usb 10-1: USB disconnect, device number 7 [ 137.728750][T10496] syz.4.1409: attempt to access beyond end of device [ 137.728750][T10496] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 137.737327][T10496] overlay: Unknown parameter 'uid<00000000000000000000' [ 137.898741][T10493] kvm_intel: kvm [10492]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2bf00000001 [ 137.990011][ T836] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 138.058517][T10498] loop2: detected capacity change from 0 to 7 [ 138.067049][T10498] Dev loop2: unable to read RDB block 7 [ 138.069312][T10498] loop2: unable to read partition table [ 138.071946][T10498] loop2: partition table beyond EOD, truncated [ 138.075565][T10498] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 138.119808][ T836] usb 9-1: device descriptor read/64, error -71 [ 138.130558][T10498] [ 138.131604][T10498] ====================================================== [ 138.134143][T10499] IPv6: sit1: Disabled Multicast RS [ 138.134462][T10498] WARNING: possible circular locking dependency detected [ 138.139270][T10498] 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 Not tainted [ 138.143596][T10498] ------------------------------------------------------ [ 138.146735][T10498] syz.5.1410/10498 is trying to acquire lock: [ 138.149178][T10498] ffff88801c68e1e0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 138.153358][T10498] [ 138.153358][T10498] but task is already holding lock: [ 138.156342][T10498] ffff888106ba27a8 (&q->q_usage_counter(io)#19){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 138.160815][T10498] [ 138.160815][T10498] which lock already depends on the new lock. [ 138.160815][T10498] [ 138.165004][T10498] [ 138.165004][T10498] the existing dependency chain (in reverse order) is: [ 138.168660][T10498] [ 138.168660][T10498] -> #3 (&q->q_usage_counter(io)#19){++++}-{0:0}: [ 138.172128][T10498] blk_alloc_queue+0x619/0x760 [ 138.174127][T10498] blk_mq_alloc_queue+0x179/0x290 [ 138.176400][T10498] __blk_mq_alloc_disk+0x29/0x120 [ 138.178638][T10498] loop_add+0x496/0xb70 [ 138.180631][T10498] loop_init+0x164/0x270 [ 138.182578][T10498] do_one_initcall+0x120/0x6e0 [ 138.184658][T10498] kernel_init_freeable+0x5c2/0x900 [ 138.186866][T10498] kernel_init+0x1c/0x2b0 [ 138.188785][T10498] ret_from_fork+0x45/0x80 [ 138.190694][T10498] ret_from_fork_asm+0x1a/0x30 [ 138.192710][T10498] [ 138.192710][T10498] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 138.195484][T10498] fs_reclaim_acquire+0x102/0x150 [ 138.197694][T10498] kmem_cache_alloc_noprof+0x53/0x3b0 [ 138.200194][T10498] __kernfs_iattrs+0xbc/0x3f0 [ 138.202335][T10498] __kernfs_setattr+0x4d/0x3c0 [ 138.204395][T10498] kernfs_iop_setattr+0xda/0x120 [ 138.206559][T10498] notify_change+0x6a6/0x1230 [ 138.208644][T10498] do_truncate+0x15b/0x220 [ 138.210600][T10498] path_openat+0x2761/0x2d40 [ 138.212714][T10498] do_filp_open+0x20b/0x470 [ 138.214817][T10498] do_sys_openat2+0x11b/0x1d0 [ 138.216977][T10498] __x64_sys_openat+0x174/0x210 [ 138.219115][T10498] do_syscall_64+0xcd/0x260 [ 138.221054][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.223553][T10498] [ 138.223553][T10498] -> #1 (iattr_mutex){+.+.}-{4:4}: [ 138.226487][T10498] __mutex_lock+0x199/0xb90 [ 138.228453][T10498] __kernfs_iattrs+0x2b/0x3f0 [ 138.230724][T10498] __kernfs_setattr+0x4d/0x3c0 [ 138.233013][T10498] kernfs_iop_setattr+0xda/0x120 [ 138.235197][T10498] notify_change+0x6a6/0x1230 [ 138.237321][T10498] do_truncate+0x15b/0x220 [ 138.239326][T10498] path_openat+0x2761/0x2d40 [ 138.241435][T10498] do_filp_open+0x20b/0x470 [ 138.243476][T10498] do_sys_openat2+0x11b/0x1d0 [ 138.245667][T10498] __x64_sys_openat+0x174/0x210 [ 138.247941][T10498] do_syscall_64+0xcd/0x260 [ 138.250117][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.252837][T10498] [ 138.252837][T10498] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 138.256254][T10498] __lock_acquire+0x1173/0x1ba0 [ 138.258499][T10498] lock_acquire+0x179/0x350 [ 138.260572][T10498] down_read+0x9b/0x480 [ 138.262580][T10498] kernfs_iop_getattr+0x9c/0xf0 [ 138.264913][T10498] vfs_getattr_nosec+0x2a9/0x430 [ 138.267290][T10498] vfs_getattr+0x4a/0x60 [ 138.269347][T10498] loop_query_min_dio_size.isra.0+0x120/0x260 [ 138.271996][T10498] lo_ioctl+0x1d33/0x27e0 [ 138.274002][T10498] blkdev_ioctl+0x274/0x6d0 [ 138.276103][T10498] __x64_sys_ioctl+0x190/0x200 [ 138.278313][T10498] do_syscall_64+0xcd/0x260 [ 138.280488][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.283260][T10498] [ 138.283260][T10498] other info that might help us debug this: [ 138.283260][T10498] [ 138.287332][T10498] Chain exists of: [ 138.287332][T10498] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#19 [ 138.287332][T10498] [ 138.293149][T10498] Possible unsafe locking scenario: [ 138.293149][T10498] [ 138.296319][T10498] CPU0 CPU1 [ 138.298482][T10498] ---- ---- [ 138.300707][T10498] lock(&q->q_usage_counter(io)#19); [ 138.302894][T10498] lock(fs_reclaim); [ 138.305489][T10498] lock(&q->q_usage_counter(io)#19); [ 138.308687][T10498] rlock(&root->kernfs_iattr_rwsem); [ 138.310958][T10498] [ 138.310958][T10498] *** DEADLOCK *** [ 138.310958][T10498] [ 138.314291][T10498] 3 locks held by syz.5.1410/10498: [ 138.316374][T10498] #0: ffff888025fba368 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x2a9/0x27e0 [ 138.319989][T10498] #1: ffff888106ba27a8 (&q->q_usage_counter(io)#19){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 138.324723][T10498] #2: ffff888106ba27e0 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 138.329468][T10498] [ 138.329468][T10498] stack backtrace: [ 138.331877][T10498] CPU: 0 UID: 0 PID: 10498 Comm: syz.5.1410 Not tainted 6.15.0-rc4-syzkaller-00309-g081bc61f9312 #0 PREEMPT(full) [ 138.331900][T10498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.331912][T10498] Call Trace: [ 138.331918][T10498] [ 138.331925][T10498] dump_stack_lvl+0x116/0x1f0 [ 138.331950][T10498] print_circular_bug+0x275/0x350 [ 138.331976][T10498] check_noncircular+0x14c/0x170 [ 138.332002][T10498] __lock_acquire+0x1173/0x1ba0 [ 138.332029][T10498] lock_acquire+0x179/0x350 [ 138.332053][T10498] ? kernfs_iop_getattr+0x9c/0xf0 [ 138.332079][T10498] ? __pfx___might_resched+0x10/0x10 [ 138.332102][T10498] down_read+0x9b/0x480 [ 138.332125][T10498] ? kernfs_iop_getattr+0x9c/0xf0 [ 138.332149][T10498] ? find_held_lock+0x2b/0x80 [ 138.332167][T10498] ? __pfx_down_read+0x10/0x10 [ 138.332189][T10498] ? kernfs_root+0xee/0x2a0 [ 138.332215][T10498] kernfs_iop_getattr+0x9c/0xf0 [ 138.332261][T10498] vfs_getattr_nosec+0x2a9/0x430 [ 138.332278][T10498] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 138.332303][T10498] vfs_getattr+0x4a/0x60 [ 138.332320][T10498] loop_query_min_dio_size.isra.0+0x120/0x260 [ 138.332343][T10498] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 138.332364][T10498] ? mark_held_locks+0x49/0x80 [ 138.332392][T10498] ? __pfx_autoremove_wake_function+0x10/0x10 [ 138.332417][T10498] ? blk_freeze_queue_start+0xec/0x140 [ 138.332436][T10498] lo_ioctl+0x1d33/0x27e0 [ 138.332458][T10498] ? __lock_acquire+0x5ca/0x1ba0 [ 138.332483][T10498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.332502][T10498] ? __pfx_lo_ioctl+0x10/0x10 [ 138.332521][T10498] ? find_held_lock+0x2b/0x80 [ 138.332539][T10498] ? avc_has_extended_perms+0x33a/0x1090 [ 138.332557][T10498] ? avc_has_extended_perms+0x47c/0x1090 [ 138.332575][T10498] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 138.332601][T10498] ? kasan_quarantine_put+0x10a/0x240 [ 138.332626][T10498] ? lockdep_hardirqs_on+0x7c/0x110 [ 138.332647][T10498] ? find_held_lock+0x2b/0x80 [ 138.332668][T10498] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.332696][T10498] ? blkdev_common_ioctl+0x1dd/0x2480 [ 138.332713][T10498] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.332740][T10498] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 138.332762][T10498] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 138.332785][T10498] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 138.332810][T10498] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 138.332835][T10498] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 138.332866][T10498] ? __pfx_lo_ioctl+0x10/0x10 [ 138.332884][T10498] blkdev_ioctl+0x274/0x6d0 [ 138.332898][T10498] ? __pfx_blkdev_ioctl+0x10/0x10 [ 138.332914][T10498] ? selinux_file_ioctl+0x180/0x270 [ 138.332937][T10498] ? selinux_file_ioctl+0xb4/0x270 [ 138.332962][T10498] ? __pfx_blkdev_ioctl+0x10/0x10 [ 138.332978][T10498] __x64_sys_ioctl+0x190/0x200 [ 138.333000][T10498] do_syscall_64+0xcd/0x260 [ 138.333022][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.333039][T10498] RIP: 0033:0x7f474fd8e969 [ 138.333052][T10498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.333068][T10498] RSP: 002b:00007f474dbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.333083][T10498] RAX: ffffffffffffffda RBX: 00007f474ffb5fa0 RCX: 00007f474fd8e969 [ 138.333094][T10498] RDX: 0000000000000005 RSI: 0000000000004c06 RDI: 0000000000000004 [ 138.333104][T10498] RBP: 00007f474fe10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 138.333114][T10498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.333124][T10498] R13: 0000000000000000 R14: 00007f474ffb5fa0 R15: 00007ffd8a4d2868 [ 138.333139][T10498] [ 138.359752][ T836] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 138.579745][ T836] usb 9-1: device descriptor read/64, error -71 [ 138.689900][ T836] usb usb9-port1: attempt power cycle [ 139.029869][ T836] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 139.050482][ T836] usb 9-1: device descriptor read/8, error -71 [ 139.300261][ T836] usb 9-1: new low-speed USB device number 20 using dummy_hcd [ 139.320244][ T836] usb 9-1: device descriptor read/8, error -71 [ 139.430141][ T836] usb usb9-port1: unable to enumerate USB device VM DIAGNOSIS: 18:56:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f56b5 RDI=ffffffff9adf94e0 RBP=ffffffff9adf94a0 RSP=ffffc90007f96fa8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e35312e36 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9adf94a0 R15=ffffffff854f5650 RIP=ffffffff854f56df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f474dbf66c0 ffffffff 00c00000 GS =0000 ffff8880d69df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000100 CR3=0000000028e3b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8a4d2bf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f474fe11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f474fe11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f474fe11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f474fe11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f474fe11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f474fe11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000025a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 000000000000025a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000012152c RBX=0000000000000001 RCX=ffffffff8b6cd419 RDX=ffffed100d4a65be RSI=ffffffff8bf48260 RDI=ffffffff81919901 RBP=ffffed1003ad0488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d682440 R14=ffffffff90850510 R15=0000000000000000 RIP=ffffffff8b6cbcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6adf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f474fd72720 CR3=00000000254e4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556320d0c8 000055556320cb40 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556320a75e 000055556320a3b0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffdb08000371 8082100020808080 1000048004060273 f60023706f6f6c2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffed080480030010 0006800401000002 08060601679e02b0 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060a0106cc001000 048004040607b400 73666769666e6f63 01ffffffffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001808010000ffe c080040c0140e000 1000001000001000 0c10000100000608 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101000000080602 0103ec0010000100 000008060480a410 0016100001808010 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000ffec080040c01 40e0001000001000 0010000c10000100 000608060a0106cc ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000480040406 07b4007366676966 6e6f6301ffffffff ffffffffed080480 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300100006800401 0000020806060167 9e02b080080006e0 0330100006d00300 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65686361630a3432 302e30303632203a 09097a484d207570 630a666666666666 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30203a096469206c 616369737968700a 424b203438333631 203a09657a697320 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63207570630a3020 3a09096469206572 6f630a34203a0973 676e696c6269730a ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6574636972747365 726e752064697076 2074706520636970 61762066746d2072 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636d765f776f6461 6873206469762067 65725f6369706176 2074736575675f64 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6572746365707320 31765f6572746365 7073203a09097367 75620a6c6d702073 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6269652073677061 7773207373617079 625f65726f74735f 636570732032765f info registers vcpu 2 CPU#2 RAX=00000000001012b4 RBX=0000000000000002 RCX=ffffffff8b6cd419 RDX=ffffed100d4c65be RSI=ffffffff8bf48260 RDI=ffffffff81919901 RBP=ffffed1003ad0910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d684880 R14=ffffffff90850510 R15=0000000000000000 RIP=ffffffff8b6cbcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f474dbd5d58 CR3=0000000024b6a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000000 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef84e54e0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63732030 3033313d6f6e6920 225f666461737665 3a223d6f653d2000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000114964 RBX=0000000000000003 RCX=ffffffff8b6cd419 RDX=ffffed100d4e65be RSI=ffffffff8bf48260 RDI=ffffffff81919901 RBP=ffffed1003b53000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=ffffffff9adbffb8 R12=0000000000000003 R13=ffff88801da98000 R14=ffffffff90850510 R15=0000000000000000 RIP=ffffffff8b6cbcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000028e3b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f474fe11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f474fe11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f474fe11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f474fe11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f474fe11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f474fe11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f474ff83488 00007f474ff83480 00007f474ff83478 00007f474ff83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4750aed100 00007f474ff83440 00007f474ff83458 00007f474ff834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f474ff83498 00007f474ff83490 00007f474ff83488 00007f474ff83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 000000000000025a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000