last executing test programs: 5m14.482660529s ago: executing program 0 (id=271): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x618f81, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000040)={0x8, [0xffffffff, 0x0, 0x94a1], [{0x3, 0x3, 0x0, 0x0, 0x1}, {0xfffffffe, 0x0, 0x1, 0x1}, {0x8, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x2, 0x0, 0x1}, {0xd2a, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x4df, 0x1, 0x1, 0x0, 0x1}, {0xc, 0xa, 0x1, 0x0, 0x1}, {0x40, 0x3, 0x1}, {0xf, 0x5, 0x1, 0x1, 0x1}, {0xfffff4e4, 0x3, 0x0, 0x0, 0x1}, {0x80000000, 0x7, 0x1, 0x1}, {0x7, 0x6, 0x0, 0x1, 0x1}], 0x46}) connect$rds(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0xd2, 0xc00) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000001c0)) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000200)=0x7fffffffffffffff}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000280)={0xb}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x170, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb833}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xafa1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe22}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xf8, @mcast2, 0xc}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x43}, 0x200}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}]}]}, 0x170}}, 0x51) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000a0}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r4, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x400000, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc0844}, 0x400c804) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000006c0)={0x3, 0x0, [{0x2c2, 0x0, 0x2}, {0xb73, 0x0, 0x10000}, {0x9ad, 0x0, 0xffffffffffffffff}]}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000700)={0x10201, 0x4, 0xdddd1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil, 0x5, r1}) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x120) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000800), 0x101000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa8, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x43}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6a}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x18098}, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r3) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, r9, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "877697e39d"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b80), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000bc0)=0x0) sendmsg$NFC_CMD_SE_IO(r10, &(0x7f0000000d40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xe8, r11, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_SE_APDU={0xa1, 0x19, "2ce0ea1a451d7aa234331e9911a55fd36d9494f124b0f794b1eb2f295368cf9ea924e3349c201c2870af263e5fd9a03ec487b962dd0cd37a65d056bfe64fc7a898a00a3694872dbf5d010caa90886ace31ceb42d0e12b7c5431018d38517a0dec63d664b2e36f478030e401a8c2dc13552674c96b13b12e46bdfa82bfcee99b55333116dc91220aa9a8956757359cd9bf799db5145b9d298068ad46b20"}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24048080}, 0x4000080) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000d80)={0x2, 0x0, '\x00', [@pad1]}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000e80)=[@text64={0x40, &(0x7f0000000e00)="460f06c402b59e26c4e1e9d5be00000080b96f0b00000f328fe870cf4c2446cc66baf80cb84e1eb484ef66bafc0c66edb9f30900000f320f01c3b9800000c00f3235008000000f30450fc7bf0a000000", 0x50}], 0x1, 0x1, &(0x7f0000000ec0)=[@dstype3={0x7, 0xd}], 0x1) 5m14.381734875s ago: executing program 0 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000a40)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "70eae4", 0x8, 0x0, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@routing={0x0, 0x0, 0x5}]}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406441, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x3c) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x501001) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000200)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000240)={r5}) socket$kcm(0x2, 0xa, 0x2) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="8a", 0x1, 0x8001, 0x0, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r7) syz_clone(0x10802400, &(0x7f0000000700)="0566968281844bd4e6e9fad29e5432424bb717b3bc9f852c07fc031750b0c1d1226e130e1df5abf56a16798790bbe0b7ed61fbf40881025f3dc58716557affbeb9e5bd29b683e892e1f93d98935e01eaa4aa83695e4d6370f9497d688f6d536c84a1d76f3bfba9a10a010d14a372089390881056a3a54ea7eaccb0e21c58002f3cb317eafea881f8e5dc8ec8e741c3b4c7", 0x91, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000280)={0x0, @loopback, @dev}, &(0x7f0000000300)=0xc) 5m14.300784473s ago: executing program 0 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000040)=0x8, 0x4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000000000580200000000000005000000000000c0"]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r9}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fc07ffff000000000000000085000000410000008500000007000000957965e22ac0d9b8bf4ab64c2262404582c44a27da21cd1a2ae87ffd74ec77693b67166fd2da90fd96ef8182ba1a6288783972e07d0b60c69c9cbc031e43e36dde80660143437abc06f55046cca1ce497c767dd2c3cb8e763bad17f8fd043bcac6e85923eb7d5eafc48eef3864e2a2b1064f30d0472feced2da257ec7d76fcf376ae232f036d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000000)) read$FUSE(r8, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f2830ffff0e000000000000000003000000fdffffff00000000000000002e00"], 0x0, 0x46, 0x0, 0x6}, 0x20) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r13, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x2c, r12, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00032bbd7000fcdbdf251200000008000300", @ANYRES32=r15, @ANYBLOB="0c0099004f0e000009000000050019000f0000000c004300050000008ab400000c27dcfdb9412df127c2f8f778a6eabfb1fc2984eff3e0e49fb7468656cfae79d5e35be9c884760a93f6ee3c4af28af8ee6def429473626233995faec96879515d4b9289f40fb365dafddf6051f7fa909e8f320db1b6134083035faefb38ff7e80d23980e7b34785ec4ea5786bc946491a503f8f52199d54a5493bebc8a8c7a2f6434c42f55ee57598bd34887bb02fdb0c78eba31906f294"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000044) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) r16 = syz_clone(0xe1200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r16, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004040)={0xce4, 0x6, 0x4, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@typed={0x4}, @nested={0x935, 0x20, 0x0, 0x1, [@typed={0xa6, 0x12c, 0x0, 0x0, @binary="bd5595f705a5d31dd9a08d7cc0af1dc5f4c005d627ce430f68b41b8a7fc9583606560877b9565268bab335562d6fbcf88437bbb72594f52c48ba802c42763bf2e7fa12742033167ffea2000f99974ac180c695bbb1763798a28e6f0b4b1c52f1a44f364f10b5fb29329d8533216b10a2f13d22c585fe1aa6a4b0075319f47d2fb292ac1b67d9d48b1a721dd35e25c8bde45797be343808c23d99a7d718f6bff1772d"}, @generic="e5005c51e834711e511bef2884073a6ed41ce85d80266e21b70606ea31189f7eca81094e39502fd58ca34cd730dec2a2e6ddc39f3e29efe2b5a2ec6a75b197dbe5216197dbed555201842091f15e02a91decf0b862312af4366923f24540415e5f96958bfe5f39c6a105af8853f55c2e5624eaa9281979902fb20f91bf625a7e52659c3af21ae9e0e481a60226", @nested={0x2e1, 0x13}, @nested={0xf6, 0x102, 0x0, 0x1, [@typed={0xc, 0x75, 0x0, 0x0, @u64=0x5}, @generic="a8b6cdb098f478d6c3c291116789885d0a4628483063908535c5442f03dbadbe4f0447bd9415d77d8b71d2a4ad7ff10bd7bd1abdd1d2acec9cc7227ade48c53fe18e02b7b882f25101005246acbdd52e5af263efc60c819c90df14efbb050c924e252d993da373caba79629c9215cf7e27c54f71ff47857253c45fe31ea95f65468a090b7f9efbc20edd6da4c2f4645dc0ecc563ed87452a1f6877d14d0df22e2a85c124ba1e55a3007f308839e78262cd3a36d3fc93e5785a7aaf5550876bc3e2da85f2c1321b80d9dfccb42211e56e5efd5b8a8c133e4c7ba9abf6ad58f96d77522e4c56e1"]}, @nested={0x2a2, 0x99, 0x0, 0x1, [@generic="0cd444a5c99c4d996863a860bf17c784983e2898c0606dc026a7df5a88813c7d557e3b3720698f8dbea7b6616eab5b4b914917defb1a5583ef6d0a59b83b2b66c9d8441a0a01ebfff4405f259bc92ba9f6925f4332f3778d3f6d898342ed9e0258781008378016d6790161740777f370b3facbd75a067eaa2198076885818061677fe841fdb2e1d98cecbdc2f0889934c5d07c7fdfac00d05e0a", @nested={0x4, 0x12a}, @generic="ea81b23adbe0bbb90059d7e4b25a1e0a37700d1783bc2530edf6d6d59cd0a63c", @generic="ffcc7adf45696dc62c691c888d16abc6b1182e31b36726b83b0aa1240e53f2881b08fe9774bb7e192ef21a959a9c85a4ce926127d69482a25effc15ef3c42f881eaf447ea15038bbc30fb18a32623bd9a05be38ae32328b02722e13e2dd77df3e0e8995a1e6e78ee847ac868c0007f9902bb0be486ae0c881485895f05e6c65bbef9aa1cc8f510a68985e912cacfd3af0bcd6d701b4e66527f12ec81757e9a2ef2ccc603ac448d0b324dd74107c12d99d3d7f64cf99b0c1ac253323a109d37f6d14ed4cbc8917d5f015e6cba30c024d3437f019d9f368286ce56566dcd3f15763ffd74b3d0578f597ef894800a456a06", @generic="460127df182449f74851349b16b7297838e5ed02d6a3a58f", @generic="34d6719b5d59f4342472d2beb741b626544e397bd2a89350fa3c88b931677380533a0d8e5cc3f757d928789339a59fa51b239f91a13f957a567707bcc0ae2357b2b6ce49cfacf5739d46aef239374b561c592e445b62bb6c5d103289f01c7401d410d95942140a73bf0059485ca3edb3c2b2b58394ebb03ad11d6e83e486ba8f72d9990a7553c8bfa2699ff7fc3b401726b5a7d1b0e2749763a5cc47cb53b10f8b6e729795625145adf1b4930cef098c5a6cc26b9857b9bac1b4fa1cdbb4778ef3b631096f3e5a5650", @nested={0x4, 0x59}, @generic="25ef90270f92983408edbb5908759ed04ccfb9a3935eabb43cfc66b6f00bbd8e664ca2", @nested={0x4, 0xe8}]}, @generic="17ad06e7a67c2ea249f663d89f56bc7a3a4339c2178ed4377b7985896ddce7f94baab900a84624b68c6d08c3c7b6e43e32e2b6893469f399", @nested={0x141, 0x72, 0x0, 0x1, [@nested={0x4, 0x111}, @generic="7ac74df61dcd725c750ecae225991ad3aeff706789ef18d7f0b6cf888ceef274ddf7407257914416ab6a7f33dd301d30e1d84bea189189dd8917a4007a657950812f9e7bf0c7108a5b94069d478ac7ae86f82a2f026c570cf2b3d1c933326b7dfccdf088265c27cd4f1e06c643d639837ce19a3de9b1b0dc2537336bfcd9aa007597e7ea2b5c3a5992976a5975a5027da984103262fab9825db4ba2cdb7f1d90e49b1fd94e0fd45c02eaa6c9a928a0d4e29c811f4a5e63fb8a298bcc1b6863a4d1ddc70b7abfaea3e695", @generic="2413d0a71179d78ecdd1ab2e4add19c65ae08ecbb4ff6aafb9e2cfd26e2fa2dfda2e357b34", @generic="201c12110a369884eb713cfcc66251c4b84ddfa11d4939d60b88680c31eda24557494504095ec51ead534b3b2180c3a2967e749ae70ea9b105822b197d9c5c96f722e65640e5d5abe4ed"]}]}, @nested={0x393, 0x86a, 0x0, 0x1, [@typed={0x8, 0xbb, 0x0, 0x0, @ipv4=@multicast2}, @generic="5d8a73c6c3b579fb454b8eb71791645176846b443626f3", @nested={0x1c, 0xa, 0x0, 0x1, [@nested={0x4, 0x3}, @typed={0x9, 0x65, 0x0, 0x0, @str='[\'.}\x00'}, @nested={0x8, 0xcf, 0x0, 0x1, [@typed={0x4, 0xa8}]}]}, @nested={0xd2, 0xbd, 0x0, 0x1, [@typed={0x8, 0x8e, 0x0, 0x0, @str='GPL\x00'}, @generic, @generic="8aeb79835b1ce02c907136f344089376c6295dcb4dad1667d86335fe4859f25cefb65b394a491cac58ca736abd4e8ce93a8c3b42fce81f679a1f87ad7b4ffaae9aee1ec603365c96ef34e2b6c5011f431a59cf18f09269e2f0b51997c07c4c5e4f232f7e56f02e7de13dd113439878dc7774d0ea1da67534448365435b18456e5d5e7753becc8d712bbb5e2284b5bd11f322d5e9f76608045fac1382269d09a1d88715b961979006d959ef09779ebdc4b0164149be3198d37653c44a56429e29138f187647c2"]}, @typed={0x8, 0x49, 0x0, 0x0, @pid=r2}, @nested={0x270, 0xc4, 0x0, 0x1, [@typed={0x8, 0xa4, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x3c}, @nested={0x258, 0x5a, 0x0, 0x1, [@nested={0x4, 0x13e}, @generic="774d2880680873bca202f1c87cb6546f1c81d3369b5a5dc053a47e2f671aad16a2b0d2f3e42183057f3366126f9481ab200e8f46d61b3c84037a5edcb262db8f2d1c9716cc1affe01605cdf883b966cef924140e9f54cfea6d4e31a0525e94b9c0e3f7", @nested={0x4, 0x95}, @typed={0x6, 0xb8, 0x0, 0x0, @str='@\x00'}, @generic="c1cb62bbf85e3593fadd39bca8fa79fd8e5297e9fc288610aa81ebdfcaadd1ad1446e2048594bc10ccfab9d7de63e6cfdf368c2b1cc1ed9863bb5d03905850e72affe5c80a8d59758f47a63c1b487e86cc8825bdbceb31156fd1969598fef41d5a3ad915f7eabb5e3be30778f2db3b1116db29b957e47958c60af9407fdce375241d6e8d3677736815afa26b7ace88940ba89e493423bcb69f25e33b8921211e22bd2f4877519eea2b5072ad29637a37a5192722061a5f51842128c546e8cb602a6031c453228f3aa4ab5846dfba33abcc2cd57d69111c73ef663d0db58444dddfc51d391bccb5c6ec4e1e7fb624f9a33d680f4a69b4a8b41a", @typed={0xe2, 0x1b, 0x0, 0x0, @binary="9e3dd9f4558b7c98a562d874cf6acda5cc81af841d8100a2b511326b5d2753f038a80878f8bd79ef185ca6f46caeb1073cfe37895874cdb5710e26d081a0e3b7eef1938f556698f3e3306dd95424f282f1c41ba011e40a5b3ce29861e14acdc8d998326fd7e33926e49734dc6e37933be7904d832975a6778c47ad020644e827d78b4413b872e78c4d254c19847f7b508becf8ce17d116a2840feb5f323965c7ca8bfc83503e545f6713e60471396c2fb24d429da40e406fbb55f4c27ec55020ba446be90b47093f55b45d523656bc1fcb2ac1fde0760bccf3af423180d4"}, @nested={0x4, 0x58}]}, @typed={0x8, 0x57, 0x0, 0x0, @pid=r11}]}, @typed={0x8, 0xca7, 0x0, 0x0, @u32=0x5}]}]}, 0x236}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 5m11.250928463s ago: executing program 0 (id=325): r0 = socket$inet6(0xa, 0x1, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x2a, 0x7fffff7f}]}) close_range(r0, 0xffffffffffffffff, 0x2) socket$pptp(0x18, 0x1, 0x2) mkdir(&(0x7f00000000c0)='./file0\x00', 0x88) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x39, 0x1a, r1, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) r5 = dup(r4) read(r5, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f046}) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x30ee) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000000)) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xc82, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000000)={0xeffffffa, 0xb, 0xfffffff8, 0xfffffffc, 0x7f, "db5909003a00"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x13, "000000000047562c38f5ae896b00"}) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000100)={0xc631, 0x8, 0x2007, 0xb, 0x18, "e303201bb6000180000000000000ffe74400"}) r8 = syz_open_pts(r7, 0x400) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000080)=0x3) setreuid(0xee00, 0xee00) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda", 0x3}], 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2a40, 0x141) 5m11.112796332s ago: executing program 0 (id=326): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0x5525, 0xffff314d}, {0x6b, 0x9}]}, 0x14, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x3}, 0x28) mount$nfs4(&(0x7f0000000180)='\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f7765726469722c757070657970653d696d617369672c6d6561737572652c000081cafdcfeba15074e8ee6a4c7313ef"]) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5m10.91250242s ago: executing program 0 (id=327): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000006dc0)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, &(0x7f0000001380)=""/195, 0xc3}, 0xa}, {{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000001480)=""/112, 0x70}], 0x1, &(0x7f0000001500)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002500)=@hci, 0x80, 0x0, 0x0, &(0x7f0000002740)=""/214, 0xd6}, 0x9}, {{0x0, 0x0, &(0x7f00000033c0), 0x0, &(0x7f0000003400)=""/119, 0x77}, 0x6}, {{&(0x7f0000003480)=@hci, 0x80, &(0x7f0000005800)}, 0x5}], 0x5, 0x40000000, &(0x7f0000007000)) (async) recvmmsg(r0, &(0x7f0000006dc0)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, &(0x7f0000001380)=""/195, 0xc3}, 0xa}, {{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000001480)=""/112, 0x70}], 0x1, &(0x7f0000001500)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002500)=@hci, 0x80, 0x0, 0x0, &(0x7f0000002740)=""/214, 0xd6}, 0x9}, {{0x0, 0x0, &(0x7f00000033c0), 0x0, &(0x7f0000003400)=""/119, 0x77}, 0x6}, {{&(0x7f0000003480)=@hci, 0x80, &(0x7f0000005800)}, 0x5}], 0x5, 0x40000000, &(0x7f0000007000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) r1 = syz_io_uring_setup(0xa31, &(0x7f0000000480)={0x0, 0x8901, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @loopback}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x2007, @fd=r1, 0x100000001, 0x0, 0x0, 0x2, 0x1}) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x2007, @fd=r1, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000014) (async) fcntl$notify(r5, 0x402, 0x80000014) fcntl$notify(r5, 0x402, 0x3ef) mkdirat(r5, &(0x7f0000000000)='./file0\x00', 0x2) 5m10.873773196s ago: executing program 32 (id=327): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000006dc0)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, &(0x7f0000001380)=""/195, 0xc3}, 0xa}, {{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000001480)=""/112, 0x70}], 0x1, &(0x7f0000001500)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002500)=@hci, 0x80, 0x0, 0x0, &(0x7f0000002740)=""/214, 0xd6}, 0x9}, {{0x0, 0x0, &(0x7f00000033c0), 0x0, &(0x7f0000003400)=""/119, 0x77}, 0x6}, {{&(0x7f0000003480)=@hci, 0x80, &(0x7f0000005800)}, 0x5}], 0x5, 0x40000000, &(0x7f0000007000)) (async) recvmmsg(r0, &(0x7f0000006dc0)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, &(0x7f0000001380)=""/195, 0xc3}, 0xa}, {{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000001480)=""/112, 0x70}], 0x1, &(0x7f0000001500)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002500)=@hci, 0x80, 0x0, 0x0, &(0x7f0000002740)=""/214, 0xd6}, 0x9}, {{0x0, 0x0, &(0x7f00000033c0), 0x0, &(0x7f0000003400)=""/119, 0x77}, 0x6}, {{&(0x7f0000003480)=@hci, 0x80, &(0x7f0000005800)}, 0x5}], 0x5, 0x40000000, &(0x7f0000007000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) r1 = syz_io_uring_setup(0xa31, &(0x7f0000000480)={0x0, 0x8901, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @loopback}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x2007, @fd=r1, 0x100000001, 0x0, 0x0, 0x2, 0x1}) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x2007, @fd=r1, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000014) (async) fcntl$notify(r5, 0x402, 0x80000014) fcntl$notify(r5, 0x402, 0x3ef) mkdirat(r5, &(0x7f0000000000)='./file0\x00', 0x2) 4m39.711717205s ago: executing program 2 (id=696): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000ac0)={{r1}, 0x0, 0x16, @inherit={0x0, 0x0}, @name="b5403e4be18ada7381c26aa9bd326809ac5e2473ae2c0d6bcff2420743a70e523aaa9483d6a8dd775e2610ed034677f3e00c1b5f1b1bc1d31f98ce3aed24132e96260c3fe34c165bcd498c66659b4c95df74c636b7c6d8e1b26a768e7cf4e71dd2bfeaa3f6aca7f6346e936cac9ad77d30d4aa1b019f86c6a89f8c64272ace2b7e002c6b692bae94c31658839af1092df1da7d0bb2ed8f3ca4a112e7e4432399372e50cc89faf9ca8c8e7c93f1582627fce66a826c631f417b2bb7dba32e39308cfdd29e6bd59dd2cd7f08973efe169812aa282ce8818f58de500c42c1e6f87cd23dc408af0e253ab57efa39148859cdda11aa714920bc50932aa20873123feaf6c51b0fbbdbd2dc42c8d24d1df9f020c42afbd4e95b9090e73547e54f2fbb57d770a5f5ed5e00a6aa01fdd98969c85f04cd4636de33e7684351fd5d4a27a743f440d477ab94bfe6d97ea6659067f0a49a18fc2b97d092e4ce07ed6a4a0d703765a1162fcf57867891a90189d804de26a8754ecd9765aca19ba74cca09e9fc88a09f3fabb7018846507d04abd6dd1ab451d93fdbc8501d4bb49232ed01df5616462e9917b97e18a513e3fdcd0ef197592dacc9bc038f6c2fcd3ebf733bbec155c264ebd2f6439ae4faac3577b0b7754fcbb4d5d8d3507dee68236313d5c3a97c6e934ca5f16f5a444d391ccc53b1e0f0ea344aed910dc6ef595262e41233f77f0cfbb449563ebb0151a296019859e9a010a545f307affcd1f0571baea84fc9fff8ebcb92854635f798f75618141c7b00aa18dd0c983be8f6ddf39f207a38c673375b90def5d51db093e9e9032dcfe12301a610837fdacb7d8c316760c9158ea5e5d864deb5724413a639b1ab9db2161c958914c55cdcc3556bd3b04431e75618d03cf8247575dd0ac7ac95501081dcdc94bbff5bc779d4a7de1fb7f2cfea0bb0db5e192228deaceb9441f897894d75368a0d6550dd915fcb1089717ac2f60f6a19184fbf69aa85a19d61aa6b0e133cf2296c80ec727d09428387105da17fe3f350f7203f0382e54005c1a6fe05def09a57ec9eff9381abfee560210010774a181e3a01d3e78ad8537dd5e5543d385af366777e20ac757f372c097e3a30d28a769ee243b0c9a482ca50f9ef59acbee7dca92017b414149f1448a53a18fe0c984e3e6f218c1abe759d74d72db4a9d406a085e1ccdafeb226b1da35f15c166cb9d7e91cb6cc5e52b70d465f7f845ab93652d0e0ad4d3945032b49ee1e01da580aee8c3b7e02245c836d5669ac39aef9465be51773d7585ddd205cc409df78b7c5d01d6932aaef865fae2685844859c08ea6c9d78ab0f3bbc27bf282ab42a5f984dad8a03d34a8640af07411124a7ea01cb7df67e5e725154b2149e92bb3540b9bdc92691737edfbc35ac08732e73abc3334cd90d3e89021cd99d237aea7dd5bf437c9f003587dac26bfe2e32d30f2a7d078c4e8f7046254b9a5913c492112fe8e1c58514a756446597ae361802ef2a521552a73ba16004692eaedb40cc41d563a566ff6c508246e59ec4e64718dc9defc8383885cb29ae1adcfefd7bc3fe8a054129c392a2218bab3785470378ab6000cca7d2e10bd7c5a23a865620d28d324b92e3d9b7332946f3d9b23a007331d5659b5066a47163d0c536061f6892771756d7eb675f569ad750d710946c836ae59dbc6772eecb285ba04ece08de64d5de766747e2db53f2238cf69b4a42d49f5bb151a63ed6599106cb975c424564332d5b8edf3d88b5b5c031f13cdde3a3c3430e7309791c4deb0c2a2a279787a01d1466d0e93e6b2fbc63c0c62dbcbcf37f552927e442e41e1e9dc773748545df0260211e99013a860afe7f656063ca858344ef0b789d83dbcf26d89dc01f4bf22add599724d4ab3be98e58797ab94b211a20df091420ef5588acf6c3e4c6f65810414f61bbe845b443c72342ba4d52bf9784294bb891b5ad79898f2df81d2aa675c4176aaacc0dfd961fe2573a154bcbae6bb01624e554f8747338385405db80540b6a4972427f662d4b3aac7388eab33fc7716f35f8250f41bd327e8a6fba3dfa26831c4e32dfa4a043dc74b4c5f124007943936542c7bee8525641858d2a507a2ffa9a256e2ef8af693da10de715e053d79319e0467b0e4b93a247cd7d6beb2f4f9010599ca3cb3651070c928fdc0d3c260ec37e61d97a6b789b7ffe4870e7431792c6a1f8162ea45f3cdeb485b9edc9142b9f15175fbce75fa09404032f0fc63d02b8220a10f2bb7b6c8496433dcfadfe10a6702203243df667f5acf593b8f6d9644b98245667204b08f4f217a9f5729d48cbb03b589bd99f618c667eef73df7065fec0cd490be1ef112d64101009c0d7e96a11e67d7df20f4e91327ad18d91021117158145e73f5a020d1e9b1eb82e43c39272081da914482829a9ef4cd93d3518ab32d8aa568aecf4b7b59de855adfaf32aef2f3ea77a527e52dad5a88e565c1c277d1c85e105ec3c188b85f06c25dfbb4b00c9ef92c9649f43b066899cf7babf7e714fad05d59c7ab2ec2a00d6d0cd0c07833857cc16d6afd50570e4b1dba28d46b659c5dbade86f36ba312d0033047949057851b7256ff6992109f9fd0b24930adcadcd057d1950ed61e7a6f252d4b00c214e57fc0ed5a5941c1de35ae414def9d4eb51bf97febc95a259f9130e2ff1588e7c426504f7be7d7a37f6bc6593abe1dceac1638a58f4c1f0210472c8ce8bee9c44a90832ca7ce13ca0124ae72a7f1e3ebd1256fc5a78c94a7dabfbbe601b3537f4e6ce84362de6c414e33ef96db58f7ac7bc5170479ad276fc9ed46d6680c14ce88613d00a0afcd4d0445e29b565adf6fd1cd4b76ca9b878169146ea1662410cc214fa644e14801e5716546780293d9d80300cee040112ccab19c9547919f566a64eeeb3180af522a657fb0d53e94a3a52ecf81ff35b549b0694f52b1f45e2998e08be2e0439f4b3e48197203d9e9ea72470f1106310f48036ea5dc49e3e834147ac18992f611e6addd2d631f2f509a8d5098e5d05e24813e81b2f70e2e84d6bbe55cd38336eaaee23313c2aa0f6a340a4aae6c441c673032415bfc08132c0f92c97a8c33aed08d51f30caafcb76bdf8ad4764839f4f13347a6fb038f7c0ef3031e1405d645015beee26a2c522bbb3599e6c07199d2b100e7e0a65cc423965cad35395f0d1c3f15156706e54c365419e85f46802f1376f0cf4da1536131f7784746b1ed3f5fddc3349a422590b2d77d252a95454664b332b2d0f34982b229b35ab295455062dbaf20974570e7d144cce10fcd9cbb7cfc0830b0bf5f5f08ec879790a575a9e46263a3384fb414746b30f1f6f1e9a6a1cb58ab440b776eb88af6886c74a65bfa6c15b19c3e208840cafc2ee5d71a513e24d486ba4a3933dfa7831f0a120650ceae7b8f899f6d1fe39ae97218a03b5976a28dc0b23743093fa0c2ba25bc056badae78d0d1120d4639c1f6ec63214b214185ee07c0183af5fd7a7fc40a9464a39235b2127c543c507f1a5ca91f1893f09fa027fa80134c2c67b3a2f9c03710ed80aa547f52a6009782406508c36edfee5a3b42255c9392ce0b1f186479e27328fd2641f1f3fc13fa5215e34a6db67795cbf4849df4552927430657cb9113d9a725d1f481e6c08a25dbaad62f1fc999befd894a790ede1bd8f3e51354434dce3d6a4a490c76925ab5bae85c5964db1b3f446be4ccb8a7f01a38853851419d35caeea2b1c9118a8479019162fa893a54e76c2637c74d3285b2279735611dd1089b00904e3a066b2077c8834db2ef8b113c05175fe4dedc51617e0c32cafdfb807ef8c2e0d6da253a1df3291309c937c3367bf5b2e775ae5cf12e6ed670adedb442332732cb35243769469707d05df065c2c7147434c473636ad555d54205f29bcada4d825a0e43be5c969cbeeca82c7b2c55b1dd96db4eaf14c391d32f824fa18ebfe78c3532078f4a39eaa9eddac11c6819316de8edf78c8f094619015e728cbd9727e3670721a754e2799f3e8c03acac5926b8d5284284adbb38570c697ed6b5fd139fb180f42a512c0dcd729bc37ce1b45b1997adcaf48cad3330a20a521b7b1d08a07e0ede37a2f2b5aa63e787e4997e215582bc5a0d37a3b5eb148fce8ab6c21c47cf0cbd1957f7f478452eba8c859708c1fef966ca28644f1bde576434f69f68ba973393f0c5ccaefe29bbe6a12249506d25e25193f2a8eab27f7d6f92bda391a64e2696379cbb2b9dbb48c83ef26608aeed166e581711cab711e26340337043a4fdd331934604bfc8ede2404c126c680d3592524dfdfc5856e3a9ad9829dbcd82afa8e995e9d5b97d3750ce71e214adef4d4d6cfd8dc4b9aeb4813e65af9ecc43ea3d29480ba965ef391af2632c5dbe22637b544d0f0885735f759cf02d56aea50b7c28da06ee20401b7a496d30f03f38fb4512c33570457146540feb7908f64c0d93c0c446a2907d9d5982e8e76fa1a695d338057ba849803c76c02f0a6a73a23c424680e9e179e50bde288c883f0c9555ad28950d3c0a49bc92fcf8f6cfe1153791541b8511c1a980b973a479628335733e23ad284a05003fc6f1b190c4fa197faf66cb95830ae53bb9d156ffe4da59f480ac495e34f18cba8c51633e83b542b55836e6209a5f7ca79cf4a0454bcf2883da259312533789c5e962be45d44d3fe75acc6f41260f621f1a6de4131f8db5f85d04dac357ab2a2a240510a40a4679247284d64325cb890ca4e7002dc31200085ea1941d617fa7f42cb5bd3e79e01930a739b0e4abc6721b8cf1c945df3444805a2b3d9d97c14fc36a1bd72c187d756b03d55dfc1f1a324c08707705aa76df3a041f50cd8dbb91dc10e53f7f0f5209adb67b8ce7f448870c3f236d88302348ca7ec6f43b2139854f8ab4de8a9cdfbe154ad779c21a0a7ce47f0edeac52e978c30185e1c8b84163b3d2d5eec1810201445176c69fdef568e8c7aa8a30b11a7cd6dabc9d6e4b6f1f740a4488181c2baa65b19a034053ad36bb7419d6fb4744b43c1b235e4b70b63dd40cd1ea3fae06675c16caea60c1516045ac8b84089542722139eebe182bd98edf8fad2a88a5c6dcdb8e95a196eef46772f263f777adb9348f93ca9ce80ddcdd6c6fe41b71706710d439f2e799dc2a6c8a3478c729a68715ab82f437ad3d02a91bc9251aa41361e3ec69ef14125715f8a091dcfeebda07cbc2d8006221b6cecfb48b6d1f16d1ee601c644c2bfa337cf4abce73129d3d31b68402048a946d67a7fda92f50c336d52ec4f359cde35c6154ff98f8e5cfcad4db04280d0dea088c51d0f46b88e6a39ff60c84c6cc835936debc36babd5e632898d57c57f26fe95f31dfa8f6b4f5a35356bf1d5aa67fe8317afd9d97cdc825b181578e47a7404a9c69c8b76c10a6dc5d7c469137a9700c1936f747b04a4cc2e379a67fc4f33565c19126365e1b4903afc1228705844222101448b1e5ad0f63feba5d87d7f4d5877baef3c356a27b2cef6e8dc679ea37478a847a60102a664198ebeaf9cd043bd066ef56ecf3bd9b77e56f7078f2355ebc9f21c489ae383a32c85941f143b26cbe82401da6a2810832542c3d47ae4387ed3fda739c8b9ae328d2f6bebdf86a8d79db7121618bb18b7e57625dbeb3e8365adf8334ee72742ff77b5688f030f665a5ac25bf1b7025fd4c3f3fded9850a2d043bd859416b70325c82d9"}) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40) 4m39.65241669s ago: executing program 2 (id=697): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x121202, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) 4m39.65225004s ago: executing program 2 (id=698): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="c4c1792e5b00b93d030000b80f00000066baf80cb814468282ef66bafc0cec0f30c4e3f917d3223e0f0766baf80cb8f12a7d82ef66bafc0cecfafaf54fb0b97c0ac4c37d1d61a2000832660fe08afcffffff0fc76e000fc73a", 0x59}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r0, 0x4068aea3, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000b0000040"]) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40c89}, 0x8004) 4m38.786870399s ago: executing program 2 (id=704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) 4m38.742422266s ago: executing program 2 (id=705): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xc0800, 0x80) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 4m38.682450604s ago: executing program 2 (id=706): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3fc, @empty, 0x1}, 0x1c) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x3c, 0xfffffffe, 0xffffffe8}, 0xc) 4m23.410516063s ago: executing program 33 (id=706): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3fc, @empty, 0x1}, 0x1c) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x3c, 0xfffffffe, 0xffffffe8}, 0xc) 3m13.770330748s ago: executing program 3 (id=1985): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @mss={0x2, 0x1ff80}, @sack_perm, @window={0x3, 0xfffe}, @sack_perm], 0x7) sendto$inet(r0, &(0x7f0000000380)='%', 0x1, 0x4000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) shutdown(r0, 0x1) 3m13.769446262s ago: executing program 3 (id=1987): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x35ff, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000180)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0, 0x0, 0x3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40040) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={0x0}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) 3m13.630835609s ago: executing program 3 (id=1995): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000200001030000001000000000020000000000000000000000080006000000c442772d16a81359082f5c1016ed78833b65713bc823afff32f582e4555d42b89da170868c08771aff2983014c20aea3f3b56d457afb36cffd14d44094"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}, @IFLA_MAP={0x24, 0xe, {0x9d, 0x9, 0xfffffffffffffff0, 0x2, 0x1, 0x5}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, &(0x7f0000000780)=ANY=[@ANYBLOB='stats=global']) 3m13.550327829s ago: executing program 3 (id=1998): r0 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x100) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x400, 0x4) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x0, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={r2, 0x7}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3ff, 0x44}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000400)=0x1, 0x4) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'wlan1\x00', 0x3a, '({/+$', 0x3a, './file0/file0', 0x3a, [0x43, 0x46, 0x50, 0x0, 0x4f, 0x46, 0x4f, 0x4f]}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close_range(r5, r1, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$TIOCEXCL(r0, 0x540c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000500)={r2, 0xa5}, &(0x7f0000000540)=0x8) read$qrtrtun(r1, &(0x7f0000000580)=""/161, 0xa1) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0/file0\x00', 0x0, 0x0, r5}, 0x18) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44000) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000007c0)={'geneve1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$char_usb(r1, &(0x7f0000000800)="abd154a605d92ff1ffc73fb7e56ea1f8472e1ae19805ff087deb5921f2797ea84b63011c0f8b9c1a86a1da7402962f57f17c07d819e62e6606ecfdc47a9fd163e310e78a37d43ae9e4b228b37b07d2e3bbb0224bb327ffcb1627d3858b593d2858f8900e4688763022ebafa4b9fbec8f92f7d87ac499050323b06cdea6cebae0b2d53cc34c7217646d4635295ba2abc4918820e8dd5871372bda027f7c5f06845b225fbd1d5b98402835f40747e1e99f509b201f8655a6aa373ebd55e47f4a0b1211ae54da9610e30319525642a8a50c701a5a659343e6bd57dd01fbcff2ba804667fcbbca", 0xe5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'gre0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r0, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000b40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf1b0}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x84}}, 0x40000) sendmmsg$inet_sctp(r1, &(0x7f0000001040)=[{&(0x7f0000000b80)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="311b25ad57e6e8e51d3233f5d605761294797c0bcf8c7add9ece321375ade8c6b5", 0x21}], 0x1, &(0x7f0000000c40)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @sndinfo={0x20, 0x84, 0x2, {0x5c5, 0x2, 0xffff, 0x81, r6}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x9, 0x582, 0x53ff, r6}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x20c, 0x6, 0x0, r2}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @prinfo={0x18}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndrcv={0x30, 0x84, 0x1, {0x6c, 0xbd, 0x4, 0x0, 0xf, 0xc0000000, 0x4, 0x8000, r6}}], 0x120, 0x40004}, {&(0x7f0000000d80)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0xf14}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000dc0)="6768cca21393d57af45f4d3861d5cd5887dfc4e262c309e54c291b2f7c41f2b849371fcd55612c0f9f9535199899a3e410ee49c49596128d6d69c6a98e7a542010f1b70d78db87949669540f2dc11fb97592ecd68b325bce2f297ce18759841eb3b6c2691668b4ac0b709630f60f69f5264ef0b372acb190826c0bfdb1c16833124527c7cca593eb11be0fc4ce485cb15aacc8c6301220e554", 0x99}], 0x1}, {&(0x7f0000000ec0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="3c99c30210ce05e210519803eb298bee608f76685a550c904b9f1ccd8d4a4aec4788adad56d5a1e4cd91b980fa810340198fa1e07c44898fc135440043513fc9d37237d71558cee0c157964b175e7716357ff79ae52fb3322d2eb21beb4f658c585921f068e904b65f40052c0caeabf1d154c827c0707f31f22f9e8667363dcf", 0x80}, {&(0x7f0000000f80)="a1cb0fb66735be47facaf8d467f7c98be992e37b5a230a8623ac8bcf55dbabeefc427f3009bdfff357d2", 0x2a}], 0x2, &(0x7f0000001000)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @authinfo={0x18, 0x84, 0x6, {0x59a}}], 0x30, 0x4000000}], 0x3, 0x40040) fstatfs(r7, &(0x7f0000001100)=""/111) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001180)={r2, 0x80, 0x20}, 0xc) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000011c0)={'veth0_macvtap\x00', 0x200}) 3m13.550083836s ago: executing program 3 (id=2000): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x4) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) 3m12.674725008s ago: executing program 3 (id=2026): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x181) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) write$P9_RCREATE(r1, &(0x7f0000000300)={0x18, 0x73, 0x2, {{0x40, 0x0, 0x8}, 0x8}}, 0x18) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@typed={0xa, 0x15, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) pwrite64(r0, &(0x7f0000000340)="96fe6bbf", 0x4, 0x1) write$dsp(r0, &(0x7f0000000c40)="1828", 0x2) 2m57.580697239s ago: executing program 34 (id=2026): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x181) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) write$P9_RCREATE(r1, &(0x7f0000000300)={0x18, 0x73, 0x2, {{0x40, 0x0, 0x8}, 0x8}}, 0x18) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@typed={0xa, 0x15, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) pwrite64(r0, &(0x7f0000000340)="96fe6bbf", 0x4, 0x1) write$dsp(r0, &(0x7f0000000c40)="1828", 0x2) 1m22.173802087s ago: executing program 6 (id=3488): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x1a0) fsopen(&(0x7f0000000100)='autofs\x00', 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x82000000003, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup(r0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x440000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @generic=0x7}) 1m21.585994886s ago: executing program 6 (id=3490): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f029, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004001900000000000c0001800600060088"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4845}, 0x8040) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}]}, 0x64}, 0x1, 0x0, 0x0, 0x8040}, 0x40010) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = timerfd_create(0x0, 0x0) timerfd_settime(r9, 0x3, &(0x7f0000000140), 0x0) close_range(r9, 0xffffffffffffffff, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x38) (async) r11 = syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) ptrace(0x4206, r11) ptrace(0x8, r11) (async) waitid(0x0, 0x0, 0x0, 0x40000004, 0x0) (async) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r12, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f0000000000)=""/221) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r7) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="79b6be0640a3154ae8ba434e9577cf46a0e77a8d067ffe6f3d0c314ee85b8953685fefe3670b2f5836f950a9c0c8cc37754805b3b417012e22c2dd4a3bb09978be90080a85c8ec336a994ab6ab57ed567d85a9c48b74a270c391f0a4b791792200f55f", @ANYRES16=r13, @ANYBLOB="01002abd7000fcdbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000020}, 0x4) 1m20.645199102s ago: executing program 6 (id=3498): utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0xea60}}) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x88000, 0x1) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x100, 0xaf06fb3b52ccde3b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r3, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x10, 0x1, 0x8}}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x2, 0x52, {0xffffffffffffffff}, {r1}, 0x7, 0x40}) fcntl$lock(r4, 0x5, &(0x7f0000000380)={0x1, 0x3, 0x5, 0xb, r5}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f00000003c0)={0x61c}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f0000000400)='./file0\x00', r6}, 0x18) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4000, r2}, 0x18) acct(&(0x7f0000000540)='./file0\x00') setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000580)=r4, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000680)={'sit0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0xd, 0x5, {{0x1a, 0x4, 0x0, 0x9, 0x68, 0x9, 0x0, 0x1, 0x29, 0x0, @remote, @empty, {[@lsrr={0x83, 0x13, 0x76, [@multicast2, @remote, @empty, @local]}, @timestamp_prespec={0x44, 0x3c, 0x29, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x81}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@loopback, 0x6}, {@loopback, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xfff}, {@loopback, 0x4}]}, @ra={0x94, 0x4}, @end]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0xff, 0x0}, 0x8) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r7, r8, 0x25, 0x1, @val=@target_btf_id=r9}, 0x14) readv(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000740)=""/4, 0x4}, {&(0x7f0000000780)=""/229, 0xe5}, {&(0x7f0000000880)=""/229, 0xe5}, {&(0x7f0000000980)=""/157, 0x9d}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001b40)={'ip6tnl0\x00', &(0x7f0000001ac0)={'syztnl2\x00', r8, 0x29, 0x4, 0xf2, 0x1, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x20, 0x5, 0x2}}) ioctl$SNDCTL_MIDI_INFO(r6, 0xc074510c, &(0x7f0000001b80)={"7ae329c912ba5583c5110393845ec553ee7429794c956fc50ab1ac40f42a", 0x0, 0x80, 0x3, [0x3, 0x7fffffff, 0x3, 0x6, 0xffffffff, 0xfffffff9, 0x2, 0x8, 0x4, 0x6, 0x0, 0x7, 0x40, 0x5, 0x2, 0x3, 0x3, 0x8]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000001c00)={0x3180, r7}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001c40)={0xffffffffffffffff, r8, 0x25, 0x2, @void}, 0x10) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000001c80)={0x2, 0x8000000000000001}) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x0, 0xc4) writev(r11, &(0x7f0000001dc0)=[{&(0x7f0000001d00)="dd781d0718d01cc5020d980e6d71215f641f8e459f13c2d5e9774ef879db3396d1109487187c23973dd73cca3bf080e3267cece46b88793b9dcc885f75756343196a541078eb88c08f26bf6da0ad692fa74ed736a100ab408ead5c2ab6f78787546fc4f086e80446644ad0953cd73fcd0db230e0bbab488ddc45", 0x7a}, {&(0x7f0000001d80)="fd391de2dd14d12e88d04a0ec16d01e25987885f7d9772b08b8fe96504cba3ec4754ad4e031322fe8d28", 0x2a}], 0x2) r12 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r12, &(0x7f00000023c0)={&(0x7f0000001e00)=@nfc, 0x80, &(0x7f0000002340)=[{&(0x7f0000001e80)=""/250, 0xfa}, {&(0x7f0000001f80)=""/109, 0x6d}, {&(0x7f0000002000)=""/216, 0xd8}, {&(0x7f0000002100)=""/84, 0x54}, {&(0x7f0000002180)=""/154, 0x9a}, {&(0x7f0000002240)=""/89, 0x59}, {&(0x7f00000022c0)=""/112, 0x70}], 0x7}, 0x3143) close_range(r7, r10, 0x0) r13 = syz_open_pts(r6, 0x200000) syz_open_pts(r13, 0x0) 1m20.570742325s ago: executing program 6 (id=3500): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406441, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtfilter={0x470, 0x2c, 0x8, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1, 0xffff}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x444, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip_vti0\x00'}, @TCA_FW_POLICE={0x42c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xfffffff7, 0x8000, 0xd1, 0x6, 0x6, 0x9, 0xffffffff, 0x9, 0x7fff, 0x4, 0x81, 0x4, 0x81, 0xdf3, 0x3, 0x1, 0x8, 0x800, 0x4, 0x3, 0x6, 0x3, 0x0, 0x5, 0x9, 0x3, 0x4, 0x0, 0x7, 0x1, 0x3, 0x8f9, 0x5, 0x0, 0x7, 0xd, 0x8cd2, 0x11, 0x4, 0x800, 0x6, 0x7, 0x4, 0x7fff, 0xffffffff, 0x1, 0x6, 0x1, 0xb, 0x10, 0x0, 0x70, 0x60, 0x0, 0x4, 0x1, 0x5, 0x200000, 0x7, 0x7, 0xc, 0xfffffffd, 0x5, 0x1, 0x2bc3729a, 0x4, 0xf, 0x1, 0x0, 0x1, 0x8001, 0x80, 0xf00, 0xfffffff8, 0x3ff, 0x9, 0x7, 0x6, 0x13e, 0xee, 0x9, 0x3, 0x2, 0x3, 0x8001, 0x2, 0x7, 0x1000, 0x7fff, 0x200, 0x10000, 0xffffffc0, 0x4, 0x9, 0x0, 0x0, 0x8, 0xfd, 0x9, 0x4, 0x6, 0x3, 0x3, 0x100, 0x1, 0x10000, 0x2, 0x3, 0x4, 0x5, 0x8000, 0x4, 0x9, 0x1800, 0x0, 0x7, 0x100, 0x7, 0x200, 0x3, 0x80, 0x0, 0x7f, 0x7, 0x3, 0x1, 0xd81, 0x0, 0x2, 0x4, 0x200, 0xc3af, 0x35e5f41d, 0x4, 0x5, 0x2, 0x6, 0x7d, 0x5, 0xff000000, 0x34f, 0x7f, 0x7, 0xd, 0xb4, 0x3, 0x0, 0x97, 0x0, 0xfffffffb, 0xfffffffc, 0x5, 0xffff, 0x7, 0x6, 0x200, 0x401, 0x0, 0x7, 0x2, 0x8, 0xce3f, 0xfff, 0x8, 0x8, 0x200, 0x2, 0x4, 0x80000000, 0x4, 0x7e, 0x2, 0x2, 0x9d0, 0x1ff, 0x9, 0x8, 0x0, 0x8, 0x8, 0x7, 0x3ff, 0x9, 0x6, 0xb134, 0x8, 0x4, 0xffffffff, 0x8, 0x8, 0xae, 0x4, 0x8, 0x80000001, 0x10, 0x7a2d, 0x7, 0xe, 0x4, 0x9, 0x9, 0x1, 0xeb76, 0x1, 0x528a, 0x7, 0x6, 0x3000, 0x9, 0x2e, 0xa6, 0x2, 0x4, 0x1, 0x7ff, 0x6, 0x4, 0x80, 0x4, 0x2, 0x2bca, 0xfffffff5, 0x7, 0x778, 0xf, 0x10000, 0x7f, 0x1, 0x2, 0xd, 0x0, 0x9, 0xffffffff, 0x0, 0x4, 0x6, 0x20, 0xfffff800, 0x4, 0x4, 0x2, 0x2, 0x6, 0x7, 0x7, 0x2, 0x8, 0xfff, 0x10000, 0x2, 0xb, 0xffffffff, 0x58a9, 0x7f, 0xd7d]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8}]}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 1m20.474208603s ago: executing program 6 (id=3501): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x4102, 0x2d) symlinkat(&(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000100)='./file0\x00') setxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) open(&(0x7f0000000000)='./file0\x00', 0x4102, 0x2d) (async) symlinkat(&(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000100)='./file0\x00') (async) setxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) (async) 1m20.473695823s ago: executing program 6 (id=3502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004090}, 0x20000800) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x31}, @void, @val={0xc, 0x99, {0x8, 0x20}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x92790281c60cd16d}, 0x8000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x1411, 0x8, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000090) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000003c0)={0x6, 0x7, {0x2, @struct={0xc1, 0x7f}, 0x0, 0x3, 0x64, 0xffff, 0x4, 0x7, 0x82, @struct={0x3}, 0x6, 0xffffff95, [0x1, 0x9, 0xc02, 0x2, 0x6, 0x2]}, {0x0, @struct={0x5b7, 0x800}, 0x0, 0x5, 0xd5, 0xd363, 0x16, 0x7ff, 0x0, @usage=0x7f, 0x8, 0xfffffeff, [0xfffffffffffffffd, 0xc, 0xb04b, 0x96, 0x7, 0x7]}, {0x1, @usage=0x37f, 0x0, 0x0, 0x1095, 0x547, 0x0, 0x9, 0x420, @usage=0x400, 0x4, 0x2, [0x3ff, 0x100000000, 0xfffffffffffffba3, 0x1ff, 0x1, 0x1]}, {0x9, 0xbf41, 0x5}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000007c0)={r4, 0x8, 0x1}) vmsplice(r0, &(0x7f0000000f40)=[{&(0x7f0000000bc0)="7eb9392bb4169306999dbe545f78caec82fcc5ba7ca885eac1cbec8103490d744631d5978f6c3de3ed2c542da5fd549cb033a6089744099ef3a521dc5b62f80a4ff2b441f86e8fa3508aac4a01e89703108c716f6402cfa962ecd68a30b2616f0c9d9926f079e9aca3888d4037ffe8ceadd98c1988770160f08abfa536168e2194d32e554fdd4500b568cc3af69f9243e64a76c04b3b9ef6b920", 0x9a}, {&(0x7f0000000c80)="dc8a8eeaeabe3bd8294a586668492f6e18e31e5bb7b5d8d316d1178e05624371dd6ac9f74ccda57a706eac760d9a7f0ebdbb34918a680814af73d1123a9605a611ebf18f2baa055d591107f8c0c3adab8fa19e69da64851c32e19fac035b76690ce641a53725516ee2e661816b4bf04f8a3a5d8e9ca977c1cce04779fa1ec1fcc70e00e64914199fa7b45b61ab3bf4982d36f37fd53669b103ee9f9ec201d94d0de87919379f5aa36976026201d9df7ecc0cd977b577b6b1fa596506fa4ed1124c9fc5c51b9d", 0xc6}, {&(0x7f0000000d80)="fecd29b264ab484847dc26b66d7e2e203dac18694671f1d4bea84f08e054dabf5bca0026c4d5a50fcd4a369094f538e6eeff9b17827bcf3020c4cc8e492f0d6c", 0x40}, {&(0x7f0000000dc0)="8c610d85aafe78ec243032ecdf65cb2bcbc025d451890b0ade3dd673b7400e9e84ac29820d45529b445bf1265e091588e3cb5eeb9336e34ac2e08cfdd910f16e09f6b4ef74868761595fb077e1f95193a80864736a5ed98b4984a3e8a92d85d42644bd864476c234548140378c27343c800f69a2dc68f5e22cb00f027f172f98caf251c380e8e3c176375c20a86aa02b33d884590fbf1e9d89a4e4fcf87f0bedc89870ba43a9790703961301da59222c582b145971668b93b1e02ccd4401f203c44fae4adc3822c18bd5194d1b2abf98153367f555bd8e0efc4dfdea6b042bd86c96ec6f45706edcf5117798e35e", 0xee}, {&(0x7f0000000ec0)="021f379d191c3cebd28d63c78a3f8a47618363673331513dfdae32dc16abc3c51792", 0x22}, {&(0x7f0000000f00)="0b16854a21abd58c0954b90cf824bc1f37e597f8c64e74183198", 0x1a}], 0x6, 0x1) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x38, r3, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1004c010}, 0x8000) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000010c0)={0x800, "3bda8e77497b9f93cef5283c29a1f8ad8c7aed21864b7658dd1e6bd6a475c001", 0x5, 0x2, 0x8, 0x8, 0x2, 0x2, 0x6, 0xdb}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001180), r0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x44, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040c0) syz_genetlink_get_family_id$gtp(&(0x7f00000012c0), r0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001300), 0x4182) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, &(0x7f0000001340)) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000013c0)={0xb9, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001440), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r7, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000090}, 0x4040000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001540), r0) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001580), 0x2001, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x6f}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0xc804}, 0x40) syncfs(r0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r11, &(0x7f0000002200)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000021c0)={&(0x7f0000002000)={0x188, r8, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x188}}, 0x10) 1m4.418861053s ago: executing program 35 (id=3502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004090}, 0x20000800) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x31}, @void, @val={0xc, 0x99, {0x8, 0x20}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x92790281c60cd16d}, 0x8000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x1411, 0x8, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000090) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000003c0)={0x6, 0x7, {0x2, @struct={0xc1, 0x7f}, 0x0, 0x3, 0x64, 0xffff, 0x4, 0x7, 0x82, @struct={0x3}, 0x6, 0xffffff95, [0x1, 0x9, 0xc02, 0x2, 0x6, 0x2]}, {0x0, @struct={0x5b7, 0x800}, 0x0, 0x5, 0xd5, 0xd363, 0x16, 0x7ff, 0x0, @usage=0x7f, 0x8, 0xfffffeff, [0xfffffffffffffffd, 0xc, 0xb04b, 0x96, 0x7, 0x7]}, {0x1, @usage=0x37f, 0x0, 0x0, 0x1095, 0x547, 0x0, 0x9, 0x420, @usage=0x400, 0x4, 0x2, [0x3ff, 0x100000000, 0xfffffffffffffba3, 0x1ff, 0x1, 0x1]}, {0x9, 0xbf41, 0x5}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000007c0)={r4, 0x8, 0x1}) vmsplice(r0, &(0x7f0000000f40)=[{&(0x7f0000000bc0)="7eb9392bb4169306999dbe545f78caec82fcc5ba7ca885eac1cbec8103490d744631d5978f6c3de3ed2c542da5fd549cb033a6089744099ef3a521dc5b62f80a4ff2b441f86e8fa3508aac4a01e89703108c716f6402cfa962ecd68a30b2616f0c9d9926f079e9aca3888d4037ffe8ceadd98c1988770160f08abfa536168e2194d32e554fdd4500b568cc3af69f9243e64a76c04b3b9ef6b920", 0x9a}, {&(0x7f0000000c80)="dc8a8eeaeabe3bd8294a586668492f6e18e31e5bb7b5d8d316d1178e05624371dd6ac9f74ccda57a706eac760d9a7f0ebdbb34918a680814af73d1123a9605a611ebf18f2baa055d591107f8c0c3adab8fa19e69da64851c32e19fac035b76690ce641a53725516ee2e661816b4bf04f8a3a5d8e9ca977c1cce04779fa1ec1fcc70e00e64914199fa7b45b61ab3bf4982d36f37fd53669b103ee9f9ec201d94d0de87919379f5aa36976026201d9df7ecc0cd977b577b6b1fa596506fa4ed1124c9fc5c51b9d", 0xc6}, {&(0x7f0000000d80)="fecd29b264ab484847dc26b66d7e2e203dac18694671f1d4bea84f08e054dabf5bca0026c4d5a50fcd4a369094f538e6eeff9b17827bcf3020c4cc8e492f0d6c", 0x40}, {&(0x7f0000000dc0)="8c610d85aafe78ec243032ecdf65cb2bcbc025d451890b0ade3dd673b7400e9e84ac29820d45529b445bf1265e091588e3cb5eeb9336e34ac2e08cfdd910f16e09f6b4ef74868761595fb077e1f95193a80864736a5ed98b4984a3e8a92d85d42644bd864476c234548140378c27343c800f69a2dc68f5e22cb00f027f172f98caf251c380e8e3c176375c20a86aa02b33d884590fbf1e9d89a4e4fcf87f0bedc89870ba43a9790703961301da59222c582b145971668b93b1e02ccd4401f203c44fae4adc3822c18bd5194d1b2abf98153367f555bd8e0efc4dfdea6b042bd86c96ec6f45706edcf5117798e35e", 0xee}, {&(0x7f0000000ec0)="021f379d191c3cebd28d63c78a3f8a47618363673331513dfdae32dc16abc3c51792", 0x22}, {&(0x7f0000000f00)="0b16854a21abd58c0954b90cf824bc1f37e597f8c64e74183198", 0x1a}], 0x6, 0x1) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x38, r3, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1004c010}, 0x8000) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000010c0)={0x800, "3bda8e77497b9f93cef5283c29a1f8ad8c7aed21864b7658dd1e6bd6a475c001", 0x5, 0x2, 0x8, 0x8, 0x2, 0x2, 0x6, 0xdb}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001180), r0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x44, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040c0) syz_genetlink_get_family_id$gtp(&(0x7f00000012c0), r0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001300), 0x4182) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, &(0x7f0000001340)) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000013c0)={0xb9, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001440), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r7, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000090}, 0x4040000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001540), r0) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001580), 0x2001, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x6f}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0xc804}, 0x40) syncfs(r0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r11, &(0x7f0000002200)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000021c0)={&(0x7f0000002000)={0x188, r8, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x188}}, 0x10) 15.849162527s ago: executing program 1 (id=4406): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000002c0)={0x1d, r1, 0x8000000000000003, {}, 0x2}, 0x18) (async) bind$can_j1939(r0, &(0x7f00000002c0)={0x1d, r1, 0x8000000000000003, {}, 0x2}, 0x18) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ocfs2\x00', 0x21000d, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xffff, 0x3}, {0xfff1, 0x56e7de01af07971a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000680011000000"], 0x18}, 0x1, 0x0, 0x0, 0x8090}, 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000680011000000"], 0x18}, 0x1, 0x0, 0x0, 0x8090}, 0x1) r2 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@caif, &(0x7f0000000080)=0x80, 0x800) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000d40)=@security={'security\x00', 0xe, 0x4, 0x498, 0xffffffff, 0x1e8, 0xf8, 0x0, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "95dc", 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xff, 0x2, [0x24, 0x2b, 0x2e, 0x1a, 0x3d, 0x30, 0x37, 0x27, 0x10, 0x2e, 0x1b, 0xf, 0xd, 0x33, 0x2c, 0x26], 0x2, 0x1, 0x4}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0xa80, 0x30, 0x1, 0x1}}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x4, 0x5}}}}, {{@uncond, 0x0, 0x1b8, 0x218, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e23], [0x4e21, 0x4e21], [0x2, 0x9, 0x7, 0x2, 0xb2ef, 0x0, 0xbe8, 0x5, 0x10, 0x7fffffff, 0x0, 0x2, 0xc5f, 0x6, 0x0, 0x9, 0x800000, 0x5, 0x517a, 0x7, 0x3, 0x5, 0x40, 0x9, 0x3, 0x2, 0x79, 0xe, 0xce, 0xffffffff, 0x9f19, 0x6, 0x1, 0x10, 0x5a, 0x6, 0x94, 0xb1e9, 0x5c, 0x0, 0x6, 0x6, 0x5, 0x6, 0x9, 0x4, 0x8, 0xd, 0x7b0, 0x1000, 0x785c39a, 0x3, 0xb7aa, 0x4, 0x0, 0x7, 0x2, 0x7, 0x6, 0x5fd4, 0x800, 0x5, 0x2, 0x1], 0x3, [{0xf9, 0x5, 0xf}, {0x4, 0x7, 0x6}, {0x4, 0xf1, 0xb}, {0x5, 0x1, 0x7}], 0x0, 0x2, 0x6}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xb953, 0x4, [0x3f, 0x3f, 0x26, 0x3f, 0x11, 0x28, 0x8, 0x1d, 0xb, 0x34, 0x28, 0x33, 0x2b, 0x31, 0x10, 0x15], 0x2, 0x80000000, 0x3fb8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x54b) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x10000}, 0x94) getpid() (async) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) (async) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) (async) setns(r7, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000040)='proc\x00', 0x8, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) r10 = openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000240), 0x12) (async) write$cgroup_pid(r10, &(0x7f0000000240), 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 15.644952647s ago: executing program 1 (id=4407): r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @in={0x2, 0x4e23, @broadcast}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x2, 0x4}}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x10}, 0xf, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='veth1_to_hsr\x00', 0x5, 0x100, 0x6}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000300)=@v={0x93, 0x3, 0x80, 0x0, @generic}) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000080)=@in={0x2, 0x4e20, @local}, 0x80, 0x0}, 0x40) 15.644710137s ago: executing program 1 (id=4408): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = fsmount(r0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20801, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008059}, 0x4000080) r10 = epoll_create1(0x0) epoll_wait(r10, &(0x7f0000000480)=[{}], 0x1, 0x10000200) socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_pwait(r10, &(0x7f0000000040)=[{}], 0x1, 0xea5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000180)=0xaa46) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x1d2}}, 0x20}}, 0x0) 5.54814766s ago: executing program 5 (id=4522): r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x34, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x8, 0xb, 0x0, 0x1, [@nested={0x4, 0x95}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000080)={0x57, 0x2}) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x8) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x82502, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000006180)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0xf800000000000001, 0x2, 0xfffffffffffffffe, 0x0, 0x1, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x55e867cb, 0x6000, 0x0, 0x0, r8, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000440)={0x50, 0x0, r7, {0x7, 0x29, 0x81, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0xae, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, r10, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(r5, &(0x7f0000000380)={0x130, 0x0, r7, {0x2, 0x9, 0x0, '\x00', {0x10000, 0xfffffffb, 0x8, 0x400, r10, r11, 0xa000, '\x00', 0x48, 0x5, 0x3, 0x5, {0x9, 0xfff}, {0x172, 0x2}, {0x81, 0xffff}, {0xffffffff00000001, 0x3f42bde7}, 0x1, 0x2, 0x2, 0x8001}}}, 0x130) ppoll(&(0x7f0000000980)=[{r5, 0x4104}], 0x1, 0x0, 0x0, 0x0) write$FUSE_STATX(r5, &(0x7f0000000b00)={0x130, 0xfffffffffffffffe, 0x0, {0x19, 0x38, 0x0, '\x00', {0x400, 0x7, 0x0, 0x4591, 0xee00, 0x0, 0x2000, '\x00', 0x800007ff, 0x0, 0x0, 0x1, {0x1d1, 0xffff}, {0x4, 0x45a}, {0x7}, {0x10, 0xe}, 0x7, 0xfffffffb, 0x618, 0x9}}}, 0x130) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r12, &(0x7f0000004ec0)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.546865416s ago: executing program 7 (id=4523): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000814) 5.425401643s ago: executing program 7 (id=4524): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x86, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x1000, &(0x7f0000000a40)='grpquota') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe1f00000000000008000f00fe000000", 0x24) r4 = socket$inet6(0xa, 0x80000, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x9, 0x2f, &(0x7f00000002c0)="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"}) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 5.424459329s ago: executing program 5 (id=4525): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) r2 = socket(0x1d, 0x800, 0x3a) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000000)=0x43, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x6e6bbe, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r8, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x45) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x3, 0x0, 0x2, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r11 = socket$vsock_stream(0x28, 0x1, 0x0) r12 = syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@decrefs={0x4008630a}], 0x0, 0x0, 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) connect$vsock_stream(r11, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x3ff, 0x2, 0x0, 0x0, 0x1, 0x6, 0x8, 0xad, 0x4, 0x83, 0xff, 0x0, 0x17, 0x4, 0x0, [0x0, 0xffffc]}}) syz_usb_connect$cdc_ecm(0x0, 0x175, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000ff2505a1a44000010203010902630101010680040904000803020600050724060000cd9705240002000d240f019803000007000aad000f06241a800000f524139a0ee8b964973308ce0e0cb1c5ed1787eff9aeea39374f72267ebf24498f6eebc1b7c1573b268450689bbcdce1eeba4247505780bc08772e1195ae5aa3e8820da4a421d2d39683e146e9ae552b1e70305c26323b1ad1a225e4cf603cb50217deb6d11591fb6e85174cf596f0f9abf207e3aa4be06442dd3d09c56cc7f7f3bcbdd2e0ed603bdcba3ba6afce115f7e36574fa2d91f9aa8f99d2e491aa31534343b32087200b9551f8af9cbbf0c4a0a17dbe1f8953046d211a1454aadb17204f5487aaf825f27633e51c20a32725ceff52fa5a8a208cb49673d69ab6f468f602e8936df99122b51bafeee34f3b2c245b8ea121b0c24f40800ff000a0c0f0004052415000005240102040c241b0800040003080b000209058103000221021009058202ff030340f10905030200020157"], &(0x7f0000000c40)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x6, 0x4, 0x7, 0x10, 0x96}, 0x4c, &(0x7f0000000700)={0x5, 0xf, 0x4c, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "b985b2039e0976042744224787a22f21"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x2, 0xff58, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x9, 0x4, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3f, 0x0, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "d6f9c0956a6f35147f772495431d8670"}]}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x180a}}, {0xb5, &(0x7f0000000780)=@string={0xb5, 0x3, "a8f46d622b5628af45ff4c295d9e72ddfd43f735d06b1a33cebb9a8edf24d2be91df8b6ef15f97bc49dc16db406daa798ffce53ff1699ab15dc69c13d75ef028f3c74b0f80eba02eb16a8add942080da931aa474412689f7aa0c7085bf2f81c837551e248263b45ad219687a35ff6bbe009be95bca805546f344a0a96ef9dbaad4a6e6eee059441db3f55682c6bef97ec4722487c239293c65fc131d036c4afcd7aed3030e664dd03133157a4fadb97d1e9f4d"}}, {0xc3, &(0x7f0000000840)=@string={0xc3, 0x3, "a9e9371409c8a0746909827cf9e92f82f9c97b526f31a19d9023f949a8f1a002f3f2c8c7026232517995236f23cacdc85e9372ef42f263522a09f2b18ca3df8f76443e96f486020d5581cd6110f4babcfa4df7ad2e9ddc3d9387daeaea85274e66bfbe4d755ffa459de8cbdbed8b8d981a6167fae556d5c136b37ff8b6e0be36d306905c52a91a943ddc3c20476afffc73ba11ad5feff9fcdcf15b6e2f612293c814da10c8822414e78fb4c01c4f76866df05c266cbb09a0fc6b1ff96cd610d494"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x47, &(0x7f0000000a00)=@string={0x47, 0x3, "48822310914fadc8210051656b06d1452ae1e71de3a7ebd514d67036b82ac115d2898800c1b09f1c43cf49b2bc22de2a0409861626f0b12a28c7d85a647433e1bc59fa1c0c"}}, {0xb3, &(0x7f0000000a80)=@string={0xb3, 0x3, "c61b1103f49e533aa17d3c3ad5b50d8272fcc000d6cb326e23c34f6a32f93041d18ed808ccde186c6e7d24dbff46021a15194810eeee408930aa17783fcfe251c6f0cd342026855d2e10e5644d83ceaad09e61f2f690faf656e1badbaac7b52d58485ea07324644db2e71d56f1767628a6091b0fd3773e5db1c44d4a2463c6e5cc3f5c8d3fd76ea1f04a5487c458106892153d38ae3a602257dfc4852b36824442087e3c4a3e7a9a7f87da1158049259b0"}}]}) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r12, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r11, @ANYBLOB="00000051080600"/31], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.350096703s ago: executing program 7 (id=4527): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'wlan0\x00'}}, 0x1e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) 5.286718209s ago: executing program 7 (id=4528): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fe80000000283a0000000000000000bbe000000280000000000000000002000000000000000000000a00400000000000b09a45707f787095f714ca003e6f79c9ff5ea7edab79739a91e1a5e081142a86e02074f45c8c58289b58557be6", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000"], 0xb8}}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x62002, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x62002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x2}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='subflow_check_data_avail\x00', r4, 0x0, 0x200000}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='subflow_check_data_avail\x00', r4, 0x0, 0x200000}, 0x18) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081) (async) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) getsockname(r1, 0x0, &(0x7f0000000080)) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000166000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r9, 0x4068aea3, &(0x7f0000000200)={0x80, 0x0, 0x3}) (async) ioctl$KVM_CAP_MAX_VCPU_ID(r9, 0x4068aea3, &(0x7f0000000200)={0x80, 0x0, 0x3}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000168000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="65660fc736b9230200000f320fc5b0040040000f0f10970fe8fa6466baf80cb82cf59b88ef66bafc0cb000eec4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae8266bac10c66ba004066ef66b8296c", 0x69}], 0x1, 0x0, 0x0, 0x0) 3.832657786s ago: executing program 1 (id=4531): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) acct(&(0x7f00000005c0)='./file0/file0\x00') madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x51, 0xa}) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008400)="9bbd22b09fbd2fb35c4f7fd619bd3f7c64ac7b8ebe80ae3d5dcd944f2b79b2842d41aae592aa845deef381a80aa7000f8ec7ad6835a2b2bd7ed495fe7708123c7ca939e44487767828a5540224c52f7759c76928a175cde8c466344c4e61cb1357369d39eeec5c10cc9ed903b5bf5e851caa15dc6cfbaf077b10bc33c50dfcdd1568e5dd22687fa5d27245c36f46720886a604aa7bcee412c6f4c81c00494b5edb406b12962be767a244f1111281ac50796ce046e8817563d60f095fd6b33e9f5214180cd24101b202df4a4e62cea9ef6a9592eabca774407b89cd6c9caf17d68c847a7782be6c9d327267cc1e16b22f1a4f6c695dfa15a7e996f51070c66dd9cb7ac18432239b8dc180a80c13af3b912c12a38e581584906aa2bcad8f8280e0ee33a77b5c62e13fe5914b67f181b0814cef360fbcfb5359a4f8864640d0aa1daf6c1c3fb42ad066d3b4e875caf74d7305cda51c9f7b1a8daf737cf88815b148363445e1f008000000b4b402a8eed7ad3d2e1f304f3b4658bf6aa1d0ab381de53bad621f9c9bd0e173845ae01d70ab29ba41130e64b872da5bd8f3d5451d3ac83219ede2870aca306595b25794d1bbe211822f35ef5fe723dcb4c6d93eaafc6ab33cfca9a706e297fb74a384548499a80ec36d2e84ec14bd8aefad4fa4e907c464331c93d196be202117d5a5a32df60b632650153aa698577e61dbf40c1f5e6547eafaaef0884826af5451f2b36bfa5f4bf19694bd78c9c788a6cc534ee2860ec20bc107b38c3a779ceb468e0a1260d22950ffab2ec9e2a5a255b62fa3373ccfe6ea4e08bfbfcffb9a83e3d2d2b43604362778f7c13f25e3771168af6383930b95b66c624b52d8690d868d3a38057a5ec3c5f2c58f2df49c3459e02db42c1c195723c0c9b5ad2a3ada677548d0bac7e492a3e304d1591aa57671fb62f35aec55639f869a84dce1172e5dfdb905bc7601325abb63b070ce3164b1e41422a728f17f4a711c92ff2b86fddf698637c4c6a68090a8f858af81f3542f3ab180329a018debe6d6ae2abe87024e5ef4c2ad70aec80fafea78e45db2e83e171ef10108377675bd7cfca148dc488f735da15d99cb458ed37b23535f572f0f2b053053bd0e7758c3d7956f7ba812d6099bfc3d4c1ca1adc8687bf308c4450987f6a5e19ee44da0d2be18ccfb540c6e73cce2d2518c3b5047491e67a965f0aaf3aa40ac80b1c5ba599b934f00a58c832417ebf5b0a6ae240e82e7dcbd7a26ba1510ba18f3ae053f2154a6ce1285e89c4a61de3678ad098e327dc50907ce3360adb5197bd87651aee3982fa2bfee595fe7c65a41cef22308bb25169f69918aab5686cfb604ad36773babfa7f10d8e519b38c03fa5566209f7bc157d957eaf19eb015be54a90254e2af44942990f577ae1057212c5c5443a1f94a8f2004195ff623a411fc75a3c8b6f236f44215c2479b95abf0ace41ab9a6abaddbe4c524910e69b2079dc84d0742377b8106eb5accd294808acafbccd1e58748c3aa2c0598bf26ad850402b150bd409aff39142adb1aaf2a239cec020b9db50c64b0237ab6e8637fec4038997635fe37d1668d59ba429da7153a0bcca25b4f17145c17894c58d773fa710472b16f2bc10f22535a656d4920221beb1cfe05ea501e8973b5da9fcbed991a055f975896f23d9404a2521733806a507f0f9ec9a6a4d7558536ffc20e4b4aee4c64a8906b0678ee08771717e58e8b4914c873283dcbd9ee1c4531c54768b91f13ac89e068306f8213325267e780d085393ca537e7809eaece0766731103b20e82bff4c93b7d26703733775daf296088fea8fd8319a2a7c3737a732cafb852189d64642bc23dac076bc204fa94a077ce4448ddb03b902a03f93f89068415b224cb88b7b8bb357282312f53f6b4e85af6b3cac0ffa8b97e5cecfd68f239a02c2cd46378c81ab2aead8d6c0a294504dd850c7e274ab1228b31bebc69e547cefad34883256633e4868f05295f55f3d4b1478ea51f7ad8a6b417e69963ed63ef01c1ff38bcd1c4021c1ade7f244e6cadc0eba641b0dea1b459e6f9f44d46c1732cea0144caf86439f4d7fb12ba24d2fa40fa94fb88b61252e336692f322c27a0a77ef81a08947de399ec7304e27b27259e32cd1d3abb5d2e3a76514792001d00fba8fc8beb88cf17235d9c28664e3a6c458000a5c7afef521c9001c2dfcde37edf6536341f392f1321b79b599327b8b2b2a77ebd03e0ec1a1604f25d61b41053f520d1982a8cf5cfb9bbf870ee995ea5420e790e2ab0034b55779b9125779bc5e5d0997b80b3369cfc931e3498fd9e294c10468e0a2375f69774d21e7b73dc4da2a5d314c05ec53228768b8a8ffd65d198f5a01a69acaff78fb3949de9860279d8b3f8de626014d7e0c941c2b31218878ceec30ad572de29b34095946788cd58eef8841d76af16731be640b437eaedd7ad38b7a4a0190f79950b60476a9197d56b456d466bb37822753790ce9d7b4c4abb929bf71ff2e49c6d0ca24ea4ae69c140a4926475d1ae9ac23e19a35ec68087507ab89b54912da66ca9949ceb7599845b91e4a93533b66841250818d9c45c6ec8f42ea95d5c0408023dfdcc1fdb9072d1c654089e6b115b9c2a3644c44834e0d92f5d77d0120d937e87c25fe4009d10b3c4cd6dd8662e29bb8cab13eed5a0fc4ee37896fe9a55dd60700d926047b6f041ea74abb9cc6022fd0236d6190f14531ce6edb0c4fbeef03621b61591131318f5637e57d325e12279c0e2e8949d6f5d6f8c7eb9dd0a199333cdc6a9b5edb245b360513cd3f0258dd641ad9fbead8cabdefb76ab6727d1a2a4d9a3a9997eb9e8abf6bcdc0ad4fd96089a35c09c5e65491cfaea8dc0435a2c395cd0f4bc016b4d0bbaca58c8e3f501b64b8cc69c105c29ace6e5424316850781bc3366e92039ad7252bf8293b9ca227e67bb4ec0c56fda7fef8d6c604886999eaa553a44016503edc00e363ddb409ef57642df4847012ea49ee38fc3fc9a4bd2ed71c944e1483089d6ba48009f2931f10000000000000002b469951cc8b84bbabc4f8ae1d1538061841898d02eae7795fbc9a1b919fa6898c0a8788ca5e77727ef60978b29630a74ed7f183dbacba8ab2f92a4af09b955266f72a908d6703699155108602f63542e0807fe6c13a7152652015ea75316ff56faee5b5f49e6bc01a85f28139afa2e50b10f370a2d5afa19306433a7ff5051de4b112588b9cb8c499c381e469fd83efc15d84dedd41a3bf57b1e8406d588f73ccfc5a0caa70ca9424be0f44f6a694b2230045cf15a8aa0eec1706a51d7f8e7e629f65f9ba232602edfae26df589adb1fec36f81fd86afbd02f79f3b5914c209588b82d292277adaa97c4e68eb20841d33603596072975c8aec91d090c56898aa41710fda2d4696da86b79b9f47a2c875755e9fc9d230f971c2d5284f3e401c748f2e75f5d537b0b593c8e97c498bcb2fedc846e49d0183a15e3424dfc0093c39d1644f2b4b4e49306e8e77a44d006c19f4dc4b0f36ff2bc3452840dd012bb238a79f0699c2f1078634e462a65d4458e9cba6a728bf6be3bf377f793828ee16153e62d432f91d911ccf45f546ba1746b55ca3e44a69dc444d2c85ccbcb5fd47ca7acfb55707674e08bc24d471b91a3c578d0b9890f034e3eaefeb9ea1db15474698dc6b84c3fc2e7a916b0ae90abfa3dea205013398393afa639f4b8545a1b7d50979f73b7a05a457a02335f420df57db60e081111f242df9375e61f7eadcb427b9794770e6791919bd527af1c972dbeb6ac304c9a450c4fd95d478610e2121b802e1bee84f6ccea3c7fc1a2ab4412ddd82c66b5036732c27f77311307d78306a137d8c437ee9d4711328780528f09313f41a64ee547c3f64e0973c9511309121838af913c782bae812cf0a1131818d3650406f34473986034fd69e7ba0c6dd199243324d103693d31fcf0ba29b3262049456a08efea1c8c0ae73f5e5ff0f3eb52805abbabba0755a9e34e5fc1f0a2c4fd1793cc9ff1d8ea10a1acc2788b9703746e96be176ac358c4a18fe399c0a65f955cfe799dfbd155edec413093a5c9defefc88dbbff2582d73282e6eb5d839eccad5667cb56b5fa1f76252a0b7d181b27a000ab281ec86678d92badcb6035fee52c166aa1fa8767db8928a451e9b15804e1c95ea7fb047ea3acbbb4d0fcea400eeefa0196524b3cfe1dbab2ab76d5d7b595b0ef8ec7e31ec4ebde01c438bf4c676e6cddfedadb73c002e3b83d6ec09bd48404f49235ea56c51b7b378338d9a5067f2353cc43c1f37dbd3b1f48514df51d64c536456cf8ee1acc3953e8076cf6cae2d827cf4f94d8f20744aeccacd86c3368e381ebdc47d1364f251842e66c2932927314e2bae663bb83df11e627d142d4eed812febb06a3c3856cc12a6ce1a33bddee122a4d5a6c6c0cc3502627b31fa45c2902e0b670d9e5a4d30bcd208011fa92d313f7974372ae5dff3f9ce8a44d189c63ae6e33a5beb6444a96e425ba70a83339909b5c01b3566378cc89e1a77b97c1989a2e9e2901f9469311af108d8ffb09e2fdf7e036ffe243f741f972b3bf4987e5357b9bf6a2dd2152afd38aceb0379616c20eb2f5dd55224dd6eba0ede705e0b5ddc478f3f430137dd482b049ab059889cd99e2f9e8ec9a93dc46a45a91a7e83e0ba3381265bb7ad865d38a7f2a78e3d0166cb8991fe68ddd69d16037d709486e1ca6b82305eb1b8049d6bd3feb614dcdd2d6681cabb1ce8cbb2973788eacbd8b86dc6474cf758a8df04368b50892145e0c5a38420af39a24e861f149fa357e103c2261e12e8c3c1765ec5989b7b3fafcb701817f3188589ab90bdd5e3639ff3e8dce970d9e11e342fb5fa615f31f92d82dad8bc246c8d110721f9d95f2b6929e1b0748928dfd6e62b2689347a1d067a8317aebb488dfbe599d4c0bae7d7fc4979dfc1d630e32652ae39e7d10806da0eeb18c30961619024c5d2deca5f65138423fe0d7196db681d01936209fd2131b4b57d74be0cf7e59b7cfbe33094e8dcff731c89d619d94a84f63d930e46880a2e9d45eee741082752c83dca96135bf29d35fdd4fd75d0bc58ea1a290ad9f4576256df7812ce408cfd3beb89758137065425f07c1bfe2c62d050ff303197f0ed01057ca9d58f18db1aad542905dd26d584aa47953275cd62ced0cefcee714dc0ea6e08bb639d436d0ebe312c5c5bd20977ce7944853b681ae71dda0780691c8ad142047b5fbc821f0f5292330e8e9e2f7a4d7e8b42e85cc35923bde0041d1d0a5a5c96962b4ff99c1bf88ca1bb3ebfdf96a89e8ebc4992cb3ca27bdcc1ca80f52d78f344090126b32a4c6cb42ca281cd14e5de431ef4d5a64993083e85c4e2a8bc9dd9ce18a70d12f4d59fade9c3794abb679f6014dda15126b66e04bc3055870cdef12ff9d43e18ce948d58cf02ef065d8647054905232d525000dab5999cbd6ebe212d32d2c80599b79428f77b27ffb53eae6eb755cf786a4566e02435eacf932db4201aaab7d5a0a4cb44e95c1674cdbb48fdd02136b65177e5fc1bbd6b63e6eb65c12730ee9b495be6d27a5f05c4b2a4c99afbc25efb61ac1a051b1260bed695350b1f305850d699b501806b34e5334f184bc847153aee13892d8397bfd4104ff0f2abe211ff01df42c28fa7650e0e1c72a4b91403bb127abe163d367e6f9b16b0b671c4cf2c76dd5041c0256a84de0a52641dea1f5ae2d036de136eabaf5fefce8a678b71f6ad6b8ce19da13e1c9a6d0262e6f88de33e1b6ed427f6c9e3ddc3065aa892d986fafb7718ec842c9f00dca0c750dcfa80b6f87c6e60d5dcfde176495066aaa547f3353edb3a1abd10d15cbb92b40e4ad5072d29ae1628acecb532b36c6baf4b5af55628a7850d12ea32bfb79a39f3f54ccbde37c99b61563502039a204ee848998e8f327c1f67bff899d4c06346f7fd47755374e1ac6eb6682b922cdc594c4f4c274d259f965218b4d4d71140f93ba328a1d5d9e6a9714835faafe8eddad1222fd8423c9f0aba7d348e57d533686954e0dfd0dc2133cd685f6c06d7e641fc71126943971a721f3fe62e145a40d4e0baeca04bc6e285a220aff92ebd8513456ca19e15fcce7b0172c44edb1a6b5b80feaaab986921033da2d09499ebcbbd2a02d7d6609c7c51b2944b6e062966d838e36d895a07f420a9c8879024dd23bca910e292f1e3bfb968454c50eedafb63b4901cc369aebb1ad439c1213fbaa6db03618f7358445492c83a0cf06211635ae4d7da841fc923dfa16e681cb3d1593706cc8a67b3cb5908e33562159af99f69f805bc251ea6bb01f3360efd86ff198c7c6cd46e6ba6c9f0d43228b4a9919e3d59d58111bbd299073bfbb10143dd6d1ab332bff605e133adc91f01977397be4e584c662e541ff428fc6446f49e3cc6a3567049922b043591d3a890e7d2be8358a22cd2ce168b631f6a863a3ab64fff52654befd1e38adf2e5df935dae73236a2a6dd1c85ae55fdb126f394c340aa6d2ddb2863a8b9b4ebd5bc41b69ba704a9e1ea60814771774d22d3876377d4e389b8a86e5de267646a684e93e7e273050401c007bc91f2e1a24a20e3c732fe5a67ecf155de295dd6b12e01ccc7b46f5b298af30a2b73512b5aaf3b5b0393fb5d888c3779047984ec69fb308e68f8c3bc5db797dca978592a14a97f9ddaba08d0286aa412b2cd067b625db60180e404a428b7929509b1239e6a266c737d83ba0fba35c256e86b446b8a23312fe0fdcd220536b62488f4f8198b63eca167ab1602da2a6dcffc6eb838e0576fe4518e79f1b1a84fc526b1bdbd2111fb1ff7ed1f2fe422eef43597a2fdacb418a62962ec9c29d5fbe69425dc9373cd093f1b55a3297ec5ad515a5103f62b21299048759321868e51a890c314b08cc227b8b2d8f4fa9bb46a095b11cad830aa64bd6719b215b86a63851e99b949ea1c88ee9d06900818496e6195c29eb16cb3bcf522924d69a5e8eb9c0166928ed9eec0e26151903b08539ddae09c0fcd8d1d4386b919cd6235b17f95025e71791d03b3b82e8dc5f778f6c88a7fab5c18e37cfebbeeb9950433dd0ab0d62c7bc19636977722b0aebb7f3c2922086205783132607973df951d5aaf0daceb0824683b3b81a93ca4df16691c03308c4cb041126e995ec70294b57cd23019e50b05733ad39d7ee1d88d837e2e152433925877bdf54413d4a17ead6d3df87005e17a4bf4d8afc9a77d3059a6dd18bbdcaa1710313cec1ac69efd5177c702138fae70f81f27857094e6a269c4dd0eab3acbc74a52607ab890958778534dd136c7c6f2c8a54d194ee82d69a1781db65356f21498783815beb97438c6aabf268ae734288c7283a741b8734caa8771114f44bb1b7e649630877e18663a2cf2b41f1252035ce05094a6fe9dfd571ade2fcd7769b2ebe15ba79b9a9182da09390e752c628cfe531460b5eeed03fce13532d8ea33f33cef98035f3b921bd83672365495599d50177c9d641d7f3d1d99821802167ff48e636bc9faa200512cde00e8bca8d566c4fa91fc7408cfd2cd1010e4e2e6eb8677c0f0d51e52f68cb64b10b31ed55730c2ae2a78c1978ea138d33f84e0db4a4d046f260880c7749f45805cf1a1b0d4b392742dee43b5ec91d78bd586fe7237e7515f7f0be70f0ed8641214a2355ce888f85c4d8072a5bfc57bab423206de7ab49f8cbde332a1d4b9837773f44a8923858855716721146cada79c581070dbfb3a53bd9c13ffc75b94c338e929a202597ba8408c4ef360630301ee80fc648687d7d5eff51e0bc0a0b3b5b18e633e6730b3acf86a3a34a22aa9ab1367aaa447bb23e9b2100993583c46b9d5ccc1443f8cc2dd2bb07a64a0cbcd142bc44d26e0a5271a6d5af3568ddad172df09272a6097f901921723e8786807da23968b585804fe5a41e94deb3d9dc4069a1ad1cb0f52bd1cae687807df01a1fbe26442cb80dacf61f50e93fca12c9bfbd7e0dc7fe90fb2783ff0df4525969af851839d8dee7115d6010d7ca5565a921ea9bbef7c0987bb1224ecedfdbf9c9256822738d5c7b56036fda0615514146d32a9a3b247f848b6b9782c879aafe22e6060902fd0f49033b6c5419c3dc001ce257e9e6b902f4ce3497b331ca8e669b569a03784547dd9a3ce08bb44ef98e7eb564fbfb7c42b79508d12f93406392a422bd377e1ca208bc93be50e18f3b8daf1545a49f291e86047967d5961c20694e6ce3af71c15ff5afb27635c47e88d16f5ea16efe35f78e402077b0201e1e48b21fc40fed6ae942373da5d49b2be8a0b320113221bb7cad503516ea2af3cc8418aa53bdcf3cbff028f9cb4b1b7a3a9ead9e86e28b8e8252e3ad6de8272a16bee4a358dfff2e2efdd9e25e409eb715586b369093a303663554610680d7175652917a22f9eaec6678fff8c030a0b40e43c42dd6745460e2d08780e516661f8d3c54d30723e849d92355d25ef70ad4f1f4f27aecd5231e0a5a832b7d4a395421a61e949fb059cddd8069e32c8872a1bb7beddc78e426cd14cf6c2001b992dfaaf6e53869881c6963ed018dd3b063be5dae2bdc99fc7c26afdb6142ebd5c3f2d5056828dac7acace9d12c3f5228159292dab681fb754a92e7f7af33bb3b25fa85b8018e46b034469e750c9e20c891dc2929830e37ab43d4ddf57d06c34977e54e923a65578bdc66362eeceb5617835f7690efb60720d113348b1dfab4d2f26686f670f05bcbb4f998d4c48a821d1d8f08c3d51193ea51a538ad8ef303d07e263e96d50d70f9492984b51af87f9b5e8af13393fb1cd0159be29149cade47b11ea4296383531aa00c6e8ec7a6d1cf55303257fb125214eae7d9d54bd8d26bec5d2d5aa4779321ae01051cb7e33c54148ebacbc7092f5ea7196559328c32fb674d9a84a055ffeb7283496ad3dbfa07cee420f0ca10d2a4ac9beeef58980f9b2a0ebc7f9531e59cfa8b6fb216cd9604989ff3f1e7bf11c081afa1b806c3f383f3a3f92e31508574ba916f813490bf70891e88046e658a422c76fd337ddeceb409f46fce4b4046b5c7e6dc99883b57a4d9b273fda7800af6b5fbed3aa753c1ec33a4c8c5fdd26578e23108e43e933078517a37f655115e5901ac88d8f53b3aa23b3bd8bbe29a2181543be86fea34c79ffc66c6f1b6e64092b4c6d6d4ea30e3a98e2b0f09dee7b8eb0cd48b0a8a1415f9c2ebbd52c7ea65dfa9235e513b348ef8fa6cef16fa54f2514318e5b3b7aa18712202b59991340b37291436597dbe64146c6be04b46e9021a4a0d926552f2bdd3af76915fb177c9534c5453d0ebb9f261275c2075c4d133bbee85bf43c2b6901a701b02affa810609ba04e5f2de9418cf59ba451186876f6b8e5f2f0b9c324b6525ae1fe60ba935ab42ce60dba23549515034156e3dd8eda6ac9064ffc0518e317266a39aabe53dc2db76c13edb74111b97aeb8db268248b7a39fcc197afa7cd77fc67f7e46f848b00ac928b818facf5572d73338849cc2939f9f2194771604cb7f65645cc91a45645531306576ad7d3f854bf901570e721df8ebf4c3c04147660905bbfec0e50889ff4060a8053ee7085f48e12d4222b51ad841f822dcbe52ab88032fc4288e3e44f77bc673a7ba7b979760988aa7022d5460adca5151fd59c39f5d9e744662b917b52c9fdc2f313a6ef1549ff5e205926a60bbe31a76bc88489259b41c8816e61da3c75a0a1c94227d779d75a7268ea7b50abf219dd61ae92d5e13850d1ab5e51784f4b96298ce2eb3b3bf33c03c0a95a72e8b3933b79c3d18357124df7e0f7d99429a80bd97d0edb83f2fe638cb9081384d4b29d80b7178aaba8aa0a09b3743ca664557d3dc6d7e6f7a78f4b1cfcc6c0341794b5c49d76b5974fbdba19d0fdfee0a9dd39e7245ca0dc0ef33b09d0fcf0c4b31cab9a0cd5257f2f849a08162052818e5269c16812e7b0bd2cab8d1265deaba07259f3c36b73982973f373fa17bb7c6601aed5e16618ee760be125e4a0f927fdfebb0a76e5a78fd5e524f71e794e21b3782b48234a6e7eeae677c5bff4ec6eb403729f1452bfd59aea767df48e43b8dbf0c1e4f05b483b48170ae707a672a36887b11b53505457f2d3607db31c6d0c941199e5b3b2e55983e5ecbf71cd0302517590b5455a1de29441fe537055de1fc825b24eca9fe647556e6e8b1b2cb6b1f01dd437328eb5dd442dee1bad29a3c3d333e076c2441d164009c26280ba3d1299651f30628d2a31e9a5fff5a0577aed2a255ed919329bc8d8969187a8bb58b7f6e9c94ef01773d74638ade95dbd2ab820c6fa62db1e9e906abd46f22c919a8c7e5ffa0979258ad418b5111b119d668b3e3bf3d9a0b8b2910b5cfc4d301341b56e7f5920362e2e0f34cbd882ca3af65c4af44615e25aedfc3f660aa5de3058dcd0ffa42f6ca9bb0eca9ac276263894d074ce93d68d84d8b453adce98a9562bc7d85e2e9dda1b13c86e345983daebe5ea6fcfc22cc30cc9da517b8dd090986267e93936b9bb5fecdb337b3a52eb134855dc4f3883c8fc39332c93901eaca70be9cdf9cd2e075f190be29726ffe97d06f337a0cf9d796a562fa4ae905706188a5fc5ed1152156519fe5ea0eb7dc0d2327c5e3f8e9c134db8563525a9b0aefada63a0bd50d8acfab5f2db169e828f725f825ff2b3464dcbab76d5b9b556f171320f7abe47b18a65ba474a64b6fa766937fee1eb8dc0d1602d326363c20dd1e1d17e2ff3f081406640025eb576cd3b3f03eb82a8667d7ce70a3d026fc5a98fbaffa978f68e52fb07da0d70d97e10c620b1d73f3ac11c32446a782b7627d4ebf4d44552cec25741f11cf2285721c8b054c291d987340ff3e2f989d45f5a3e34d413e3e91ada49127a8cafcf86629c59eeca15e004815a0429dec7b1ab30ea57d7720c695eee4cd678c1c41da30194ace06fe7da9feecd795f9a5122ed7e2ea66c106f8ae8cc12edddb24903151c536363151e615fc2d504fabe9de44b605d4ac3d483e1fee4d3e631204ca833792a168d1a9289530c2b7883320b5149a1a9bf36344f903429f5c4f3a8efa4b3c55280954505435b251a05978c0a511cd737b4a37bd163f12be04dfb9216d8535962654cdefba38ecd19c3ec2f18a8f03d1f8893e6fad55be75694f0be4065a0592356aa7310606359696189a834bac7cbaab260bd303729343a31cd28732d3c8149724280127156a8631ff492285f149451dc021a310122a77a3e21f22e45acd214792b205ee82f30bca3f066cc05ca3c40dca2bb9b158423ee03bf28996284215722ecb7e6cb0d256bc1bf2d2571ec3baafac8b84845f92dc8d88d27f8957c71590a9c56703f4d158f2fa7b813c480f5bcfbd5db0e47a8097e24f1d5f2091eae4b608329b0c31a82bdd02f645ce0484215c11266d89c5671138a819f249278399b16b6396bf06fc1a3501b235d8e450acb6b0ae50ae254ad4a7f1f95daab3c9a9819e72fda00e28d3f3df651d73c7204086d3fb07fb8f4577a0479defa3f3772cc91d81646ed88923522406793fa1b074aa498a9eddeb824d3cf2bc0f2a971c24203fa6f9f2bb4ea059a6ef00", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x80, {0x1fffffffffffffc, 0x2, 0x5, 0xfffffffffffffffe, 0xa003, 0x1ff, {0x4, 0x9, 0x6, 0x4, 0x2, 0x3f42, 0xc06, 0x6, 0xfffffffe, 0x2000, 0x0, 0x0, r2, 0xa6e, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.715407562s ago: executing program 1 (id=4532): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@remote, @null, @null, @netrom, @remote, @bcast, @netrom]}, &(0x7f00000000c0)=0x48) r2 = io_uring_setup(0x36ff, &(0x7f00000003c0)={0x0, 0x8cbb, 0x1, 0x3, 0x84}) r3 = syz_io_uring_setup(0x649d, &(0x7f0000000000)={0x0, 0xbb99, 0x12240, 0x0, 0x32e, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000000440)={r3}, 0x1) accept$ax25(r1, &(0x7f0000000100)={{0x3, @netrom}, [@default, @rose, @rose, @remote, @default, @default, @netrom, @rose]}, &(0x7f00000002c0)=0x48) getpeername$ax25(r1, &(0x7f0000000340)={{0x3, @default}, [@null, @default, @default, @netrom, @rose, @default, @rose, @rose]}, &(0x7f00000001c0)=0x44) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0xf, 0x4}}}, 0x24}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000880)=0x3) 3.714821165s ago: executing program 1 (id=4533): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xfffd}, 0x90) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r2]) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001002cbd7000f6dbdf2500000000", @ANYRES32=r6, @ANYBLOB="0000000023820000050021"], 0x28}, 0x1, 0x0, 0x0, 0x3000c054}, 0x24000004) 2.524337712s ago: executing program 4 (id=4535): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="9e6810e9a06adaea0815a6379b91060f11b1"}], 0x4b}, 0x40008002) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) r4 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)=[@exit_looper], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="9e6810e9a06adaea0815a6379b91060f11b1"}], 0x4b}, 0x40008002) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) (async) dup3(r1, 0xffffffffffffffff, 0x80000) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)=[@exit_looper], 0x0, 0x0, 0x0}) (async) 2.432582245s ago: executing program 4 (id=4536): r0 = io_uring_setup(0x7023, &(0x7f0000000280)={0x0, 0x2800226, 0x40, 0x0, 0x14a}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000080)) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) (async) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x52, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000021000100000000000000000002002000000000000d000000080002"], 0x44}}, 0x20004053) (async) write$eventfd(r1, &(0x7f0000000100)=0x400, 0x8) 2.272078049s ago: executing program 4 (id=4537): ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, &(0x7f0000000240)=0x1d4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000500)={'syz0\x00', {0x88, 0x7, 0x1, 0x100}, 0x9, [0xb, 0x3, 0x2, 0x994, 0x28, 0x5, 0x8, 0x3, 0x0, 0x3, 0x1b7, 0x1877, 0x1effd624, 0x10000, 0x4, 0x9, 0x7, 0x7, 0x3, 0x8, 0xfff0, 0x6, 0x7, 0xa5ea, 0x66, 0xb, 0x5, 0x5, 0x4, 0x3f8, 0x80000000, 0xa, 0x7, 0x1ff, 0x400, 0x4, 0x7fffffff, 0xa, 0x7, 0x9, 0x5, 0x22db, 0x5, 0x50f62b01, 0x8, 0xcff, 0x5982, 0xd, 0x4, 0x1000, 0x9, 0xf, 0x9, 0xfffffff8, 0x80, 0x7ff, 0x7, 0xea92, 0x2, 0xf, 0x0, 0x1, 0x7, 0x1], [0x8000, 0xde3a, 0x3, 0x4, 0x7, 0x3, 0x2, 0x0, 0x3, 0x8, 0x7, 0x6, 0x100, 0x0, 0xf0f, 0xfffffff7, 0xb4, 0xe, 0x2, 0x2, 0xc52, 0x7, 0x5, 0xf4e, 0x8001, 0x9, 0x2, 0x987, 0x1, 0x9b, 0x4, 0x8, 0x0, 0x5, 0x3, 0x1, 0x4, 0xfff, 0xffffffff, 0xb8, 0x6, 0x5097, 0xcf40, 0x3, 0x8, 0x6, 0x1, 0x7, 0x8b, 0x8, 0xf61, 0x5, 0xe, 0xf, 0x3, 0x7fff, 0x3, 0x4, 0x0, 0x6, 0x7f, 0x21b, 0x9, 0x4], [0x1, 0x9, 0xfffffffc, 0x4, 0xa5, 0xfffffffb, 0xfffffff7, 0x401, 0x7f, 0x3, 0x6, 0x79, 0x1, 0x7, 0x83, 0x3, 0x7f, 0x8, 0x22, 0x6, 0xfbff7fff, 0x4, 0x40, 0x63e5, 0x5, 0x401, 0x5, 0xfc000000, 0x5db, 0x1160, 0x9, 0x7ba, 0x0, 0x59, 0x7, 0x8, 0x401, 0x800003ff, 0x7, 0x80000001, 0x6, 0x195e41e9, 0x6, 0x400, 0x200, 0x3, 0x8, 0x9018, 0x6a9, 0x7ff, 0x2009, 0x80000000, 0x8, 0x610, 0xb, 0xc, 0x6, 0x6, 0x7, 0x6, 0x2, 0x4, 0x69, 0x8], [0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x4, 0x2, 0x6, 0xfffffef8, 0x0, 0x5, 0x8, 0x7, 0x4, 0x5, 0x8, 0x8, 0x1, 0x3, 0x1, 0x4, 0x1ff, 0x35, 0x1, 0x4, 0x3, 0x7f, 0x4, 0x3, 0x9, 0x2, 0x1, 0x81, 0x8, 0x40, 0x2d3, 0xff, 0x2, 0x2, 0x0, 0x3, 0x1, 0x3, 0xffffffff, 0x4, 0x1, 0x1, 0x6d1, 0x0, 0x328, 0x8, 0x2, 0x3, 0x8, 0x3, 0x1, 0x5, 0x8aec, 0x9, 0xfff, 0xffffffff, 0x2e202fe9]}, 0x45c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) 2.121688523s ago: executing program 5 (id=4538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000009c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)={0x50, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="f303ace20192264086495c533f8f4ec774f75e47", @ANYRES16=r0, @ANYBLOB="030226bd7000fddbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a80"], 0x2c}, 0x1, 0x0, 0x0, 0x4e808}, 0x4000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r7) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="e911", @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000600040003000000"], 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x20000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) 2.036460541s ago: executing program 5 (id=4539): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@uuid_auto}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', &(0x7f0000000440), 0x1000) (async) openat(r0, &(0x7f0000000000)='./file1\x00', 0x280400, 0x0) 1.974304862s ago: executing program 5 (id=4540): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x2, 0x6, 0x0, 0x7}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = epoll_create1(0x0) r3 = socket(0x2, 0x80802, 0x0) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0xab7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) shutdown(r3, 0x0) shutdown(r3, 0x1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd8, r5, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xa4, 0x3, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x8d, 0x1, "f42b47c2b5e58df495d308082fada1cb05df39d168e088b14bdef779e92dccdb13813fff64f5bab7f3b67c2abe7bcb1de509ee1912b78ce883dbf7f5a66128e9265bdaf5ea50e6c02fa67b03f305b2ff57f9921b6d0a1453a53456aac0504aabfced65daa30650d77892633292d9f672a83ef87e20e65d4dde216df37a5c733a77b0ad8aea6a49423f"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xc73}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xd}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40004}, 0x1) 1.97395566s ago: executing program 7 (id=4541): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000000000)=0x43, 0x4) (async) r1 = syz_open_dev$media(&(0x7f0000000040), 0x43, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newchain={0x24, 0x64, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0x9, 0xffe0}, {0xfff2, 0x1}}}, 0x24}}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x30, r7, 0xb97534d5fe9704cf, 0xfffffffe, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x5]}]}, 0x30}}, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.108719328s ago: executing program 5 (id=4542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_XDP={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x8044) 1.108169333s ago: executing program 7 (id=4543): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001a00010a00000000000000000200000008"], 0x1c}}, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000000)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 1.031029701s ago: executing program 36 (id=4542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_XDP={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x8044) 97.511817ms ago: executing program 4 (id=4545): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x1020004, r1, 0x80000}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x48, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) 3.156904ms ago: executing program 4 (id=4546): msgget$private(0x0, 0x40) r0 = msgget$private(0x0, 0x285) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x8, 0x0) (async) msgrcv(r0, 0x0, 0x0, 0x3, 0x3800) 0s ago: executing program 4 (id=4547): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c00a5afd2728a74f1664cac31b9ba0c0000000200000000000000f692000604b508000000"], 0x0, 0x26}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000ffa000/0x3000)=nil) kernel console output (not intermixed with test programs): tclass=chr_file permissive=1 [ 308.300260][ T40] audit: type=1400 audit(1758860965.683:1526): avc: denied { name_bind } for pid=16162 comm="syz.4.3551" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 308.311305][ T40] audit: type=1400 audit(1758860965.683:1527): avc: denied { ioctl } for pid=16162 comm="syz.4.3551" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 308.419088][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 308.422571][ T5923] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 308.425229][ T5923] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.428270][ T5923] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.431482][ T5923] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.434579][ T5923] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.438559][ T5923] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.441355][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.492079][ T40] audit: type=1326 audit(1758860965.880:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16167 comm="syz.5.3553" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f301698eec9 code=0x0 [ 308.572178][ T40] audit: type=1400 audit(1758860965.954:1529): avc: denied { write } for pid=16169 comm="syz.5.3554" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 308.603659][ T40] audit: type=1400 audit(1758860965.982:1530): avc: denied { read } for pid=16174 comm="syz.5.3555" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 308.660453][ T5923] usb 6-1: usb_control_msg returned -32 [ 308.662391][ T5923] usbtmc 6-1:16.0: can't read capabilities [ 309.238475][T16193] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3562'. [ 309.526365][T16202] 9pnet_virtio: no channels available for device syz [ 309.535198][T16203] 9pnet_virtio: no channels available for device syz [ 309.807945][T16221] tmpfs: Unknown parameter 'usrquotax' [ 309.811662][T16221] Bluetooth: Short BCSP packet [ 311.088361][ T9] usb 6-1: USB disconnect, device number 43 [ 311.235158][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3572'. [ 311.235160][T16229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3572'. [ 311.235180][T16229] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3572'. [ 311.238414][T16230] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3572'. [ 311.775939][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 311.936381][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 311.943772][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 311.947559][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 311.951283][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 311.955145][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 6688, setting to 1024 [ 311.960003][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 311.964164][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.969154][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 311.971946][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.011112][ T5331] Bluetooth: hci4: command 0x1003 tx timeout [ 312.011144][ T5981] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 312.061920][T16245] overlayfs: overlapping lowerdir path [ 312.065077][T16246] overlayfs: overlapping lowerdir path [ 312.168476][T16253] 9pnet_virtio: no channels available for device syz [ 312.197129][ T9] usb 6-1: usb_control_msg returned -32 [ 312.199232][ T9] usbtmc 6-1:16.0: can't read capabilities [ 312.225154][ T838] usb 6-1: USB disconnect, device number 44 [ 312.248293][T16261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3583'. [ 312.280593][T16261] macsec1: entered promiscuous mode [ 312.335216][T16268] tmpfs: Unknown parameter 'usrquotax' [ 312.407606][T16275] comedi comedi3: comedi_config --init_data is deprecated [ 312.413922][T16275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3589'. [ 312.753131][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3594'. [ 312.757067][T16291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3594'. [ 312.766235][T16292] : entered promiscuous mode [ 312.839312][T16301] netlink: 'syz.5.3597': attribute type 10 has an invalid length. [ 312.842149][T16301] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3597'. [ 312.894529][T16301] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 312.944912][T16308] PM: Enabling pm_trace changes system date and time during resume. [ 312.944912][T16308] PM: Correct system time has to be restored manually after resume. [ 313.924277][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 313.924292][ T40] audit: type=1400 audit(1758860970.959:1560): avc: denied { setopt } for pid=16336 comm="syz.5.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 314.491352][ T5981] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 314.491896][ T5331] Bluetooth: hci4: command 0x1003 tx timeout [ 314.590634][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3598'. [ 314.592037][T16360] fuse: Bad value for 'fd' [ 314.593718][T16358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3598'. [ 314.709996][ T40] audit: type=1400 audit(1758860971.698:1561): avc: denied { create } for pid=16362 comm="syz.4.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 314.726526][ T40] audit: type=1400 audit(1758860971.707:1562): avc: denied { write } for pid=16362 comm="syz.4.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 314.935326][T16366] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3619'. [ 314.974141][T16369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3620'. [ 314.999832][T16369] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16369 comm=syz.1.3620 [ 315.123711][T16374] overlayfs: missing 'lowerdir' [ 315.167188][T16374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35361 sclass=netlink_route_socket pid=16374 comm=syz.4.3622 [ 315.229369][ T40] audit: type=1400 audit(1758860972.184:1563): avc: denied { accept } for pid=16382 comm="syz.5.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 315.237426][ T40] audit: type=1400 audit(1758860972.184:1564): avc: denied { getopt } for pid=16382 comm="syz.5.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 315.281936][T16385] tmpfs: Unknown parameter 'usrquotax' [ 315.675286][ T40] audit: type=1400 audit(1758860972.596:1565): avc: denied { mount } for pid=16398 comm="syz.4.3629" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 315.850961][T16399] /dev/sr0: Can't open blockdev [ 315.922413][ T40] audit: type=1400 audit(1758860972.830:1566): avc: denied { read } for pid=16401 comm="syz.4.3630" laddr=fe80::b lport=34651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 315.984799][T16405] sp0: Synchronizing with TNC [ 316.088689][T16412] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 316.128695][ T40] audit: type=1400 audit(1758860973.026:1567): avc: denied { ioctl } for pid=16413 comm="syz.4.3634" path="socket:[69948]" dev="sockfs" ino=69948 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.207535][ T40] audit: type=1400 audit(1758860973.101:1568): avc: denied { setopt } for pid=16423 comm="syz.4.3636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 316.270216][ T40] audit: type=1400 audit(1758860973.157:1569): avc: denied { listen } for pid=16425 comm="syz.1.3637" path=0000224E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 316.290321][T16426] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3637'. [ 316.458428][ T838] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 316.531425][T16431] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3639'. [ 316.618866][ T838] usb 9-1: Using ep0 maxpacket: 16 [ 316.622696][ T838] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.626230][ T838] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 316.631659][ T838] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 316.635001][ T838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.638690][ T838] usb 9-1: config 0 descriptor?? [ 316.644347][ T838] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 316.859250][ T838] usb 9-1: USB disconnect, device number 26 [ 317.484725][ T5331] Bluetooth: hci4: command 0x1003 tx timeout [ 317.489782][ T5981] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 317.660002][T16459] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input34 [ 317.748422][ T5331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.757175][ T5331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.767706][ T5331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.780724][ T5331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.791529][ T5331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.919459][T16469] __nla_validate_parse: 2 callbacks suppressed [ 317.919476][T16469] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3651'. [ 319.121073][T16471] sctp: [Deprecated]: syz.1.3652 (pid 16471) Use of int in max_burst socket option. [ 319.121073][T16471] Use struct sctp_assoc_value instead [ 319.175449][T16477] sp0: Synchronizing with TNC [ 319.222420][T16483] tmpfs: Unknown parameter 'usrquotax' [ 319.241164][T16462] chnl_net:caif_netlink_parms(): no params data found [ 319.253576][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3654'. [ 319.257476][T16486] mkiss: ax0: crc mode is auto. [ 319.258035][T16480] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3654'. [ 319.353952][T16486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3653'. [ 319.369695][T16462] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.372864][T16462] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.375921][T16462] bridge_slave_0: entered allmulticast mode [ 319.379902][T16462] bridge_slave_0: entered promiscuous mode [ 319.383710][T16462] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.386377][T16462] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.388855][T16462] bridge_slave_1: entered allmulticast mode [ 319.391462][T16462] bridge_slave_1: entered promiscuous mode [ 319.431848][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 319.431863][ T40] audit: type=1400 audit(1758860976.113:1584): avc: denied { ioctl } for pid=16490 comm="syz.5.3656" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 319.461560][T16462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.469712][T16462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.514791][T16462] team0: Port device team_slave_0 added [ 319.520464][T16462] team0: Port device team_slave_1 added [ 319.541726][T16495] netlink: 'syz.5.3657': attribute type 11 has an invalid length. [ 319.554523][T16462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.557265][T16462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.568383][T16462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.575553][T16462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.578033][T16462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.587843][T16462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.629318][T16462] hsr_slave_0: entered promiscuous mode [ 319.631664][T16462] hsr_slave_1: entered promiscuous mode [ 319.765274][T16462] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 319.770077][T16462] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 319.779311][T16462] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 319.785583][T16462] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 319.803114][T16462] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.806032][T16462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.808893][T16462] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.811086][T16462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.844726][T16462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.858555][T11247] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.863267][T11247] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.883903][T16462] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.892704][T11238] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.895143][T11238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.901490][T11247] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.904582][T11247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.965166][ T5331] Bluetooth: hci4: command tx timeout [ 320.053236][T16462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.194045][T16462] veth0_vlan: entered promiscuous mode [ 320.198812][T16462] veth1_vlan: entered promiscuous mode [ 320.213331][T16462] veth0_macvtap: entered promiscuous mode [ 320.217578][T16462] veth1_macvtap: entered promiscuous mode [ 320.232332][T16462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.238299][T16462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.249313][T11239] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.253689][T11239] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.257493][T11239] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.261695][T11239] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.315063][T11239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.318602][T11239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.340737][T11250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.344101][T11250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.353212][ T40] audit: type=1400 audit(1758860976.973:1585): avc: denied { mounton } for pid=16462 comm="syz-executor" path="/syzkaller.KPEDob/syz-tmp" dev="sda1" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 320.362979][ T40] audit: type=1400 audit(1758860976.973:1586): avc: denied { mounton } for pid=16462 comm="syz-executor" path="/syzkaller.KPEDob/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 320.373892][ T40] audit: type=1400 audit(1758860976.973:1587): avc: denied { mounton } for pid=16462 comm="syz-executor" path="/syzkaller.KPEDob/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=71906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 320.385116][ T40] audit: type=1400 audit(1758860976.992:1588): avc: denied { mounton } for pid=16462 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 320.395036][ T40] audit: type=1400 audit(1758860976.992:1589): avc: denied { mount } for pid=16462 comm="syz-executor" name="/" dev="gadgetfs" ino=7800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 320.494105][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.496833][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.560242][ T40] audit: type=1400 audit(1758860977.170:1590): avc: denied { ioctl } for pid=16539 comm="syz.4.3664" path="/dev/binderfs/binder0" dev="binder" ino=11 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 320.571067][ T40] audit: type=1400 audit(1758860977.170:1591): avc: denied { set_context_mgr } for pid=16539 comm="syz.4.3664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 320.579164][ T40] audit: type=1400 audit(1758860977.189:1592): avc: denied { map } for pid=16539 comm="syz.4.3664" path="/dev/binderfs/binder0" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 320.633662][ T40] audit: type=1400 audit(1758860977.235:1593): avc: denied { getopt } for pid=16543 comm="syz.4.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 320.776471][ T5972] Bluetooth: hci0: unexpected event for opcode 0x200c [ 320.967909][T16576] netlink: 'syz.7.3678': attribute type 10 has an invalid length. [ 320.979084][T16576] veth0_vlan: left promiscuous mode [ 320.984984][T16576] veth0_vlan: entered promiscuous mode [ 320.990788][T16576] team0: Device veth0_vlan failed to register rx_handler [ 321.419013][ T5981] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 321.420840][ T5972] Bluetooth: hci5: command 0x1003 tx timeout [ 321.459815][ T34] hid_parser_main: 4101 callbacks suppressed [ 321.459828][ T34] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.466027][ T34] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.469168][ T34] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.471868][ T34] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.474935][ T34] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.477362][ T34] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.479707][ T34] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.482057][ T34] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.485291][ T34] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.488220][ T34] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 321.493865][ T34] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.03 Device [syz1] on syz1 [ 321.743765][T16616] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3692'. [ 321.855458][T16625] tmpfs: Unknown parameter 'usrquotax' [ 321.970307][T16627] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3697'. [ 322.118303][T16629] 9pnet_virtio: no channels available for device syz [ 322.121420][T16627] 9pnet_virtio: no channels available for device syz [ 322.189292][ T5972] Bluetooth: hci4: command tx timeout [ 322.561449][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3704'. [ 322.701748][ T5972] Bluetooth: hci1: command 0x0c20 tx timeout [ 322.760505][T16662] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3707'. [ 323.489649][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3710'. [ 323.495181][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3710'. [ 323.498557][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3710'. [ 323.501500][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3710'. [ 324.070106][ T5981] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 324.360435][T16687] bond0: (slave rose0): Enslaving as an active interface with an up link [ 324.412768][ T5981] Bluetooth: hci4: command tx timeout [ 324.480101][T16694] btrfs: Unknown parameter 'acl»«¨ñ±ýÌ|»a§Í¹tN×ùšíâ¾!ÌýÄéO†„³¤óTÚšy^–3N }ÿpñ˜€7²í:¯W\ ˆØñFh@xAmYýîS%’‰tÑ-­™ÚÄL?' [ 324.484667][T16692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3718'. [ 324.543571][T16699] tmpfs: Unknown parameter 'usrquotax' [ 324.547945][T16699] Bluetooth: Short BCSP packet [ 324.801446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 324.861282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 325.581226][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 325.581238][ T40] audit: type=1400 audit(1758860981.866:1622): avc: denied { create } for pid=16713 comm="syz.5.3725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 325.589826][ T40] audit: type=1400 audit(1758860981.866:1623): avc: denied { read } for pid=16713 comm="syz.5.3725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 325.745754][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3729'. [ 325.749458][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3729'. [ 325.752262][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3729'. [ 325.784993][T16727] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3729'. [ 325.790693][T16728] binder: 16726:16728 ioctl c0306201 0 returned -14 [ 325.790908][T16730] binder: 16726:16730 ioctl c0306201 0 returned -14 [ 325.824115][T16733] netlink: 'syz.7.3731': attribute type 30 has an invalid length. [ 325.837074][T16733] netlink: 'syz.7.3731': attribute type 30 has an invalid length. [ 325.847661][T16733] netlink: 'syz.7.3731': attribute type 30 has an invalid length. [ 325.859321][T16733] netlink: 'syz.7.3731': attribute type 30 has an invalid length. [ 325.870592][T16733] netlink: 'syz.7.3731': attribute type 30 has an invalid length. [ 325.886488][T16733] netlink: 'syz.7.3731': attribute type 30 has an invalid length. [ 325.902801][T16733] netlink: 'syz.7.3731': attribute type 30 has an invalid length. [ 325.915620][T16733] netlink: 'syz.7.3731': attribute type 30 has an invalid length. [ 325.943015][T16733] netlink: 'syz.7.3731': attribute type 30 has an invalid length. [ 325.966698][T16733] netlink: 'syz.7.3731': attribute type 30 has an invalid length. [ 326.110770][ T40] audit: type=1400 audit(1758860982.352:1624): avc: denied { bind } for pid=16764 comm="syz.1.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.175835][T16777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3736'. [ 326.305435][ T40] audit: type=1400 audit(1758860982.548:1625): avc: denied { write } for pid=16794 comm="syz.5.3739" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 326.314449][ T40] audit: type=1400 audit(1758860982.548:1626): avc: denied { ioctl } for pid=16794 comm="syz.5.3739" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x70cc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 326.328036][T16802] team0: Device hsr_slave_0 failed to register rx_handler [ 326.342908][ T40] audit: type=1400 audit(1758860982.576:1627): avc: denied { accept } for pid=16809 comm="syz.5.3741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 326.373032][ T40] audit: type=1400 audit(1758860982.605:1628): avc: denied { setopt } for pid=16813 comm="syz.1.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 326.636189][ T5331] Bluetooth: hci4: command tx timeout [ 326.695766][T16847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49505 sclass=netlink_route_socket pid=16847 comm=syz.5.3746 [ 326.721601][ T5981] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 326.724533][ T40] audit: type=1400 audit(1758860982.941:1629): avc: denied { ioctl } for pid=16849 comm="syz.7.3747" path="socket:[73330]" dev="sockfs" ino=73330 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 326.747764][ T40] audit: type=1400 audit(1758860982.960:1630): avc: denied { create } for pid=16854 comm="syz.7.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 326.756547][ T40] audit: type=1400 audit(1758860982.960:1631): avc: denied { write } for pid=16854 comm="syz.7.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 326.795458][T16855] 9pnet_virtio: no channels available for device syz [ 326.798754][T16857] 9pnet_virtio: no channels available for device syz [ 326.805912][T16863] ip6tnl1: entered promiscuous mode [ 326.809306][T16863] ip6tnl1: entered allmulticast mode [ 326.835475][T16868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.925261][T16877] tmpfs: Bad value for 'gid' [ 326.930116][T16877] tmpfs: Bad value for 'gid' [ 326.935957][T16884] binder: BINDER_SET_CONTEXT_MGR already set [ 326.938613][T16884] binder: 16883:16884 ioctl 4018620d 200000000100 returned -16 [ 326.941902][T16884] binder: BINDER_SET_CONTEXT_MGR already set [ 326.944113][T16884] binder: 16883:16884 ioctl 4018620d 200000000100 returned -16 [ 326.947625][T16884] binder: BINDER_SET_CONTEXT_MGR already set [ 326.949542][T16884] binder: 16883:16884 ioctl 4018620d 200000000100 returned -16 [ 327.014468][T16891] vlan2: entered promiscuous mode [ 327.016124][T16891] gretap0: entered promiscuous mode [ 327.152159][T16908] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.154536][T16908] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.556855][T16934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16934 comm=syz.7.3768 [ 327.561653][T16908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.577739][T16908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.171033][T11247] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.173878][T11247] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.178335][T11247] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.181297][T11247] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.184510][T11247] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.187832][T11247] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.197964][T11247] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.201494][T11247] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.208832][ T53] hid (null): invalid report_size 1673590033 [ 328.217225][ T53] hid (null): invalid report_size 376642481 [ 328.223440][ T53] hid (null): unknown global tag 0xc [ 328.225314][ T53] hid (null): unknown global tag 0xd [ 328.227024][ T53] hid (null): unknown global tag 0xd [ 328.229325][ T53] hid (null): unknown global tag 0xc [ 328.231659][ T53] hid (null): bogus close delimiter [ 328.234439][ T53] hid_parser_main: 73 callbacks suppressed [ 328.234449][ T53] hid-generic E791:0008:0002.000E: unknown main item tag 0x4 [ 328.239068][ T53] hid-generic E791:0008:0002.000E: unknown main item tag 0x2 [ 328.242763][ T53] hid-generic E791:0008:0002.000E: invalid report_size 1673590033 [ 328.245305][ T53] hid-generic E791:0008:0002.000E: item 0 4 1 7 parsing failed [ 328.248229][ T53] hid-generic E791:0008:0002.000E: probe with driver hid-generic failed with error -22 [ 328.299009][T16942] (syz.1.3774,16942,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 328.549186][T16969] binder: 16968:16969 ioctl c018620c 200000000040 returned -22 [ 329.176427][T17000] __nla_validate_parse: 9 callbacks suppressed [ 329.176443][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3795'. [ 329.601846][T17027] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 329.606621][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3802'. [ 329.852407][T17053] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 329.962329][T17072] vxfs: WRONG superblock magic 00000000 at 1 [ 329.968065][T17072] vxfs: WRONG superblock magic 00000000 at 8 [ 329.970910][T17072] vxfs: can't find superblock. [ 329.982859][T17072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3814'. [ 329.985771][T17072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3814'. [ 330.039190][T17076] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3816'. [ 330.649616][T17096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3823'. [ 330.653303][T17098] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3824'. [ 330.838079][T17110] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 330.841282][T17110] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 331.155558][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 331.155570][ T40] audit: type=1400 audit(1758860987.076:1676): avc: denied { create } for pid=17126 comm="syz.7.3834" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 331.226640][ T40] audit: type=1400 audit(1758860987.151:1677): avc: denied { unlink } for pid=16462 comm="syz-executor" name="file0" dev="tmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 331.409113][T17136] 9pnet_virtio: no channels available for device syz [ 331.611712][T17147] batadv_slave_1: entered promiscuous mode [ 331.614742][T17147] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3840'. [ 331.618293][T17147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8464 sclass=netlink_route_socket pid=17147 comm=syz.7.3840 [ 331.622308][T17148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8464 sclass=netlink_route_socket pid=17148 comm=syz.7.3840 [ 331.629274][T17146] batadv_slave_1: left promiscuous mode [ 331.951761][ T40] audit: type=1400 audit(1758860987.824:1678): avc: denied { write } for pid=17153 comm="syz.1.3842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 331.992648][T11244] bridge_slave_1: left allmulticast mode [ 331.994481][T11244] bridge_slave_1: left promiscuous mode [ 331.996386][T11244] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.001378][T11244] bridge_slave_0: left allmulticast mode [ 332.003639][T11244] bridge_slave_0: left promiscuous mode [ 332.005531][T11244] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.088014][T11244] bond1 (unregistering): (slave gretap1): Releasing active interface [ 332.090793][ T40] audit: type=1400 audit(1758860987.955:1679): avc: denied { setattr } for pid=17155 comm="syz.1.3843" name="NETLINK" dev="sockfs" ino=74157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 332.092559][T17157] overlayfs: workdir and upperdir must reside under the same mount [ 332.098376][ T40] audit: type=1400 audit(1758860987.955:1680): avc: denied { mount } for pid=17155 comm="syz.1.3843" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 332.324757][ T40] audit: type=1400 audit(1758860988.180:1681): avc: denied { create } for pid=17162 comm="syz.7.3845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 332.336562][ T40] audit: type=1400 audit(1758860988.189:1682): avc: denied { sys_admin } for pid=17162 comm="syz.7.3845" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 332.431788][T17171] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3847'. [ 332.461897][T11244] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.519252][T11244] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.559444][T11244] . (unregistering): Released all slaves [ 332.570865][T11244] bond0 (unregistering): Released all slaves [ 332.668371][T11244] bond1 (unregistering): Released all slaves [ 332.674580][T11244] bond2 (unregistering): Released all slaves [ 332.706317][ T40] audit: type=1400 audit(1758860988.526:1683): avc: denied { unmount } for pid=11733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 332.755146][T11244] : left promiscuous mode [ 332.843786][ T40] audit: type=1400 audit(1758860988.657:1684): avc: denied { connect } for pid=17176 comm="syz.1.3849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 332.852465][T17177] veth0_macvtap: mtu less than device minimum [ 332.872171][ T40] audit: type=1400 audit(1758860988.685:1685): avc: denied { write } for pid=17189 comm="syz.7.3853" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 332.897044][T11244] tipc: Left network mode [ 332.933875][T17193] tmpfs: Cannot change global quota limit on remount [ 333.135888][ T5981] Bluetooth: hci4: command tx timeout [ 333.228824][T17205] validate_nla: 61 callbacks suppressed [ 333.228842][T17205] netlink: 'syz.1.3857': attribute type 10 has an invalid length. [ 333.235368][T17205] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3857'. [ 333.440223][T11244] hsr_slave_0: left promiscuous mode [ 333.443894][T11244] hsr_slave_1: left promiscuous mode [ 333.446867][T11244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.451153][T11244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.579558][ T61] usb 12-1: new low-speed USB device number 2 using dummy_hcd [ 333.753917][ T61] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 333.757253][ T61] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 333.761755][ T61] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.766579][ T61] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 333.771282][ T61] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 333.776994][ T61] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 333.787387][ T61] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 333.791999][ T61] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.796987][ T61] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 333.802817][ T61] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 333.808700][ T61] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 333.812028][ T61] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 333.816519][ T61] usb 12-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.821633][ T61] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 333.826273][ T61] usb 12-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 333.834346][ T61] usb 12-1: string descriptor 0 read error: -22 [ 333.837228][ T61] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 333.841042][ T61] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.852893][ T61] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 334.242425][T11244] team0 (unregistering): Port device team_slave_1 removed [ 334.318402][T11244] team0 (unregistering): Port device team_slave_0 removed [ 334.988262][ T61] usb 12-1: USB disconnect, device number 2 [ 335.045415][T17235] __nla_validate_parse: 3 callbacks suppressed [ 335.045425][T17235] netlink: 33828 bytes leftover after parsing attributes in process `syz.1.3866'. [ 335.252209][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3869'. [ 335.315449][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3869'. [ 335.319338][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3869'. [ 335.323267][T17244] lo: Master is either lo or non-ether device [ 335.327412][ T5870] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 335.372445][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3870'. [ 335.484294][T17257] tap0: tun_chr_ioctl cmd 1074025675 [ 335.486620][T17257] tap0: persist enabled [ 335.491855][T17257] tap0: tun_chr_ioctl cmd 1074025675 [ 335.494074][T17257] tap0: persist disabled [ 335.506328][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3873'. [ 335.523675][ T5870] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 335.526087][ T5870] usb 9-1: can't read configurations, error -71 [ 335.541373][T17253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3873'. [ 335.599987][T17263] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3876'. [ 335.614205][T17261] syz.5.3875 (17261): drop_caches: 2 [ 335.654028][T17272] tmpfs: Bad value for 'mpol' [ 335.674349][T17268] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 335.679664][T17268] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3877'. [ 335.861018][T17286] FAULT_INJECTION: forcing a failure. [ 335.861018][T17286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.867283][T17286] CPU: 2 UID: 0 PID: 17286 Comm: syz.1.3885 Not tainted syzkaller #0 PREEMPT(full) [ 335.867300][T17286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 335.867307][T17286] Call Trace: [ 335.867311][T17286] [ 335.867315][T17286] dump_stack_lvl+0x16c/0x1f0 [ 335.867354][T17286] should_fail_ex+0x512/0x640 [ 335.867376][T17286] _copy_from_iter+0x29f/0x1720 [ 335.867394][T17286] ? __alloc_skb+0x200/0x380 [ 335.867407][T17286] ? __pfx__copy_from_iter+0x10/0x10 [ 335.867422][T17286] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 335.867438][T17286] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 335.867458][T17286] netlink_sendmsg+0x829/0xdd0 [ 335.867475][T17286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.867495][T17286] ____sys_sendmsg+0xa98/0xc70 [ 335.867512][T17286] ? copy_msghdr_from_user+0x10a/0x160 [ 335.867526][T17286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.867549][T17286] ___sys_sendmsg+0x134/0x1d0 [ 335.867563][T17286] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.867592][T17286] __sys_sendmsg+0x16d/0x220 [ 335.867606][T17286] ? __pfx___sys_sendmsg+0x10/0x10 [ 335.867624][T17286] ? fput+0x9b/0xd0 [ 335.867641][T17286] do_syscall_64+0xcd/0x4e0 [ 335.867662][T17286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.867673][T17286] RIP: 0033:0x7f0953b8eec9 [ 335.867682][T17286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.867693][T17286] RSP: 002b:00007f0954ab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.867704][T17286] RAX: ffffffffffffffda RBX: 00007f0953de5fa0 RCX: 00007f0953b8eec9 [ 335.867711][T17286] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 335.867717][T17286] RBP: 00007f0954ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 335.867724][T17286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.867730][T17286] R13: 00007f0953de6038 R14: 00007f0953de5fa0 R15: 00007ffd0a4abf18 [ 335.867744][T17286] [ 335.884183][T17289] trusted_key: encrypted_key: master key parameter '' is invalid [ 335.890271][T17288] 9pnet_fd: p9_fd_create_tcp (17288): problem connecting socket to 127.0.0.1 [ 335.996623][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3891'. [ 336.134609][T17317] FAULT_INJECTION: forcing a failure. [ 336.134609][T17317] name failslab, interval 1, probability 0, space 0, times 0 [ 336.139409][T17317] CPU: 3 UID: 0 PID: 17317 Comm: syz.4.3895 Not tainted syzkaller #0 PREEMPT(full) [ 336.139432][T17317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 336.139442][T17317] Call Trace: [ 336.139448][T17317] [ 336.139454][T17317] dump_stack_lvl+0x16c/0x1f0 [ 336.139480][T17317] should_fail_ex+0x512/0x640 [ 336.139504][T17317] should_failslab+0xc2/0x120 [ 336.139524][T17317] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 336.139542][T17317] ? skb_clone+0x190/0x3f0 [ 336.139566][T17317] skb_clone+0x190/0x3f0 [ 336.139587][T17317] netlink_deliver_tap+0xabd/0xd30 [ 336.139613][T17317] netlink_unicast+0x64c/0x870 [ 336.139637][T17317] ? __pfx_netlink_unicast+0x10/0x10 [ 336.139668][T17317] netlink_sendmsg+0x8d1/0xdd0 [ 336.139709][T17317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.139740][T17317] ____sys_sendmsg+0xa98/0xc70 [ 336.139766][T17317] ? copy_msghdr_from_user+0x10a/0x160 [ 336.139786][T17317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.139825][T17317] ___sys_sendmsg+0x134/0x1d0 [ 336.139848][T17317] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.139899][T17317] __sys_sendmsg+0x16d/0x220 [ 336.139928][T17317] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.139965][T17317] do_syscall_64+0xcd/0x4e0 [ 336.139988][T17317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.140004][T17317] RIP: 0033:0x7f9f29d8eec9 [ 336.140017][T17317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.140033][T17317] RSP: 002b:00007f9f2ac1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.140048][T17317] RAX: ffffffffffffffda RBX: 00007f9f29fe5fa0 RCX: 00007f9f29d8eec9 [ 336.140059][T17317] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 336.140068][T17317] RBP: 00007f9f2ac1d090 R08: 0000000000000000 R09: 0000000000000000 [ 336.140078][T17317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.140087][T17317] R13: 00007f9f29fe6038 R14: 00007f9f29fe5fa0 R15: 00007ffd0931f308 [ 336.140110][T17317] [ 336.269473][T17325] @: renamed from vlan0 [ 336.310484][T17329] No source specified [ 336.418852][T17332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.498070][T17345] FAULT_INJECTION: forcing a failure. [ 336.498070][T17345] name failslab, interval 1, probability 0, space 0, times 0 [ 336.502402][T17345] CPU: 3 UID: 0 PID: 17345 Comm: syz.7.3904 Not tainted syzkaller #0 PREEMPT(full) [ 336.502425][T17345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 336.502437][T17345] Call Trace: [ 336.502444][T17345] [ 336.502450][T17345] dump_stack_lvl+0x16c/0x1f0 [ 336.502477][T17345] should_fail_ex+0x512/0x640 [ 336.502514][T17345] ? __kmalloc_noprof+0xbf/0x510 [ 336.502535][T17345] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 336.502562][T17345] should_failslab+0xc2/0x120 [ 336.502583][T17345] __kmalloc_noprof+0xd2/0x510 [ 336.502607][T17345] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 336.502640][T17345] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 336.502668][T17345] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 336.502718][T17345] ? bpf_lsm_capable+0x9/0x10 [ 336.502743][T17345] ? security_capable+0x7e/0x260 [ 336.502766][T17345] ? ns_capable+0xd7/0x110 [ 336.502789][T17345] genl_rcv_msg+0x55c/0x800 [ 336.502818][T17345] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.502844][T17345] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 336.502862][T17345] ? __pfx_nl80211_get_key+0x10/0x10 [ 336.502885][T17345] ? __pfx_nl80211_post_doit+0x10/0x10 [ 336.502924][T17345] netlink_rcv_skb+0x155/0x420 [ 336.502946][T17345] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.502972][T17345] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.503006][T17345] ? netlink_deliver_tap+0x1ae/0xd30 [ 336.503032][T17345] genl_rcv+0x28/0x40 [ 336.503054][T17345] netlink_unicast+0x5aa/0x870 [ 336.503081][T17345] ? __pfx_netlink_unicast+0x10/0x10 [ 336.503114][T17345] netlink_sendmsg+0x8d1/0xdd0 [ 336.503141][T17345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.503174][T17345] ____sys_sendmsg+0xa98/0xc70 [ 336.503201][T17345] ? copy_msghdr_from_user+0x10a/0x160 [ 336.503222][T17345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.503261][T17345] ___sys_sendmsg+0x134/0x1d0 [ 336.503285][T17345] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.503339][T17345] __sys_sendmsg+0x16d/0x220 [ 336.503361][T17345] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.503392][T17345] ? fput+0x9b/0xd0 [ 336.503419][T17345] do_syscall_64+0xcd/0x4e0 [ 336.503444][T17345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.503463][T17345] RIP: 0033:0x7f09e0d8eec9 [ 336.503477][T17345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.503495][T17345] RSP: 002b:00007f09e1d0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.503513][T17345] RAX: ffffffffffffffda RBX: 00007f09e0fe5fa0 RCX: 00007f09e0d8eec9 [ 336.503524][T17345] RDX: 0000000000000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 336.503534][T17345] RBP: 00007f09e1d0a090 R08: 0000000000000000 R09: 0000000000000000 [ 336.503543][T17345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.503552][T17345] R13: 00007f09e0fe6038 R14: 00007f09e0fe5fa0 R15: 00007ffc63f51398 [ 336.503573][T17345] [ 336.639871][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 336.639888][ T40] audit: type=1400 audit(1758860992.211:1700): avc: denied { read write } for pid=17346 comm="syz.4.3905" dev="9p" ino=268435458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 336.652296][ T40] audit: type=1400 audit(1758860992.211:1701): avc: denied { open } for pid=17346 comm="syz.4.3905" path="/231/file0" dev="9p" ino=268435458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 336.760354][T17357] Bluetooth: Short BCSP packet [ 336.789470][ T40] audit: type=1400 audit(1758860992.342:1702): avc: denied { map } for pid=17358 comm="syz.4.3907" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 336.796977][ T40] audit: type=1400 audit(1758860992.342:1703): avc: denied { execute } for pid=17358 comm="syz.4.3907" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.073129][ T40] audit: type=1400 audit(1758860992.613:1704): avc: denied { write } for pid=17363 comm="syz.4.3911" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 337.073264][T17364] random: crng reseeded on system resumption [ 337.083329][ T40] audit: type=1400 audit(1758860992.613:1705): avc: denied { open } for pid=17363 comm="syz.4.3911" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 337.090556][ T40] audit: type=1400 audit(1758860992.623:1706): avc: denied { firmware_load } for pid=11244 comm="kworker/u32:20" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 337.098204][T17364] mkiss: ax0: crc mode is auto. [ 337.099745][ T40] audit: type=1400 audit(1758860992.623:1707): avc: denied { ioctl } for pid=17363 comm="syz.4.3911" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 337.363536][T17380] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 337.367630][T17381] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 337.511786][T17383] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 337.514583][T17383] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 337.517432][T17383] vhci_hcd vhci_hcd.0: Device attached [ 337.521259][T17390] usbip_core: unknown command [ 337.523135][T17390] vhci_hcd: unknown pdu 787703364 [ 337.525240][T17390] usbip_core: unknown command [ 337.527250][T11239] vhci_hcd: stop threads [ 337.529258][T11239] vhci_hcd: release socket [ 337.531513][T11239] vhci_hcd: disconnect device [ 337.576059][ T40] audit: type=1400 audit(1758860993.090:1708): avc: denied { read } for pid=17392 comm="syz.4.3919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 338.176914][T17415] sp0: Synchronizing with TNC [ 338.252588][T17419] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 338.391503][T17433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=228 sclass=netlink_route_socket pid=17433 comm=syz.4.3933 [ 338.932083][ T40] audit: type=1326 audit(1758860994.353:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17463 comm="syz.4.3944" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f29d8eec9 code=0x7ff80000 [ 338.951591][ T5981] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 338.953759][ T5331] Bluetooth: hci5: command 0x1003 tx timeout [ 339.022877][T17473] overlay: ./file0 is not a directory [ 339.109653][T17482] overlayfs: missing 'lowerdir' [ 339.817052][T11237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.822096][T11237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.842448][ T838] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.890365][T17539] block nbd7: Attempted send on invalid socket [ 339.895132][T17539] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.899082][T17539] exFAT-fs (nbd7): unable to read boot sector [ 339.901260][T17539] exFAT-fs (nbd7): failed to read boot sector [ 339.903233][T17539] exFAT-fs (nbd7): failed to recognize exfat type [ 339.965813][T17542] veth0_vlan: left promiscuous mode [ 339.970507][T17542] veth0_vlan: entered promiscuous mode [ 340.384196][ T838] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.403819][T17562] macsec3: entered promiscuous mode [ 340.494536][T17567] __nla_validate_parse: 46 callbacks suppressed [ 340.494550][T17567] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3984'. [ 340.504561][T17568] block nbd5: Attempted send on invalid socket [ 340.506874][T17568] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 340.511652][T17568] XFS (nbd5): SB validate failed with error -5. [ 340.919743][ T838] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.939667][T17587] netlink: 'syz.5.3989': attribute type 12 has an invalid length. [ 340.945959][T17587] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.3989'. [ 340.995703][T17589] gfs2: gfs2 mount does not exist [ 340.998749][T17588] netlink: 'syz.5.3989': attribute type 12 has an invalid length. [ 341.002151][T17588] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.3989'. [ 341.084110][T17591] netlink: 'syz.5.3990': attribute type 29 has an invalid length. [ 341.088198][T17591] netlink: 'syz.5.3990': attribute type 29 has an invalid length. [ 341.092141][T17591] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3990'. [ 341.343365][T17609] syz.5.3995 (17609): drop_caches: 2 [ 341.517202][ T5331] Bluetooth: hci5: command 0x1003 tx timeout [ 341.517224][ T5981] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 341.559774][T17621] netlink: 'syz.1.3998': attribute type 11 has an invalid length. [ 341.566038][T17621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17621 comm=syz.1.3998 [ 341.625713][T17623] netlink: 'syz.1.3999': attribute type 5 has an invalid length. [ 341.801617][T17632] ./bus: Can't lookup blockdev [ 341.855047][T17636] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 341.877407][T17638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=17638 comm=syz.1.4006 [ 342.056382][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 342.056400][ T40] audit: type=1400 audit(1758860997.281:1722): avc: denied { associate } for pid=17655 comm="syz.5.4012" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 342.158730][ T5870] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 342.248104][T17671] IPVS: length: 184 != 24 [ 342.303244][ T40] audit: type=1400 audit(1758860997.505:1723): avc: denied { append } for pid=17682 comm="syz.5.4019" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 342.311115][ T40] audit: type=1400 audit(1758860997.515:1724): avc: denied { sqpoll } for pid=17682 comm="syz.5.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 342.314667][T17683] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 342.320486][ T5870] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 342.324170][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 342.325220][T17683] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 342.328131][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 342.334194][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 342.337855][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 342.342638][ T5870] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 342.346160][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.352758][ T5870] usb 6-1: config 0 descriptor?? [ 342.355729][T17646] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 342.473860][ T40] audit: type=1400 audit(1758860997.664:1725): avc: denied { read } for pid=17689 comm="syz.7.4020" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 342.489196][ T40] audit: type=1400 audit(1758860997.664:1726): avc: denied { open } for pid=17689 comm="syz.7.4020" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 342.500584][ T40] audit: type=1400 audit(1758860997.664:1727): avc: denied { ioctl } for pid=17689 comm="syz.7.4020" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 342.523439][T17698] IPVS: length: 184 != 24 [ 342.791655][ T5870] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 342.798588][ T5870] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 343.010137][T17646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.012999][T17646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.024203][T17646] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 343.028501][ T5923] usb 6-1: USB disconnect, device number 45 [ 343.086258][T17727] FAULT_INJECTION: forcing a failure. [ 343.086258][T17727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.093574][T17727] CPU: 3 UID: 0 PID: 17727 Comm: syz.4.4029 Not tainted syzkaller #0 PREEMPT(full) [ 343.093596][T17727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 343.093606][T17727] Call Trace: [ 343.093612][T17727] [ 343.093618][T17727] dump_stack_lvl+0x16c/0x1f0 [ 343.093669][T17727] should_fail_ex+0x512/0x640 [ 343.093702][T17727] _copy_to_user+0x32/0xd0 [ 343.093731][T17727] simple_read_from_buffer+0xcb/0x170 [ 343.093753][T17727] proc_fail_nth_read+0x197/0x240 [ 343.093777][T17727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 343.093799][T17727] ? rw_verify_area+0xcf/0x6c0 [ 343.093825][T17727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 343.093842][T17727] vfs_read+0x1e4/0xcf0 [ 343.093862][T17727] ? __pfx___mutex_lock+0x10/0x10 [ 343.093892][T17727] ? __pfx_vfs_read+0x10/0x10 [ 343.093921][T17727] ? __fget_files+0x20e/0x3c0 [ 343.093949][T17727] ksys_read+0x12a/0x250 [ 343.093967][T17727] ? __pfx_ksys_read+0x10/0x10 [ 343.093992][T17727] do_syscall_64+0xcd/0x4e0 [ 343.094018][T17727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.094036][T17727] RIP: 0033:0x7f9f29d8d8dc [ 343.094052][T17727] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 343.094070][T17727] RSP: 002b:00007f9f2ac1d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 343.094087][T17727] RAX: ffffffffffffffda RBX: 00007f9f29fe5fa0 RCX: 00007f9f29d8d8dc [ 343.094103][T17727] RDX: 000000000000000f RSI: 00007f9f2ac1d0a0 RDI: 0000000000000004 [ 343.094114][T17727] RBP: 00007f9f2ac1d090 R08: 0000000000000000 R09: 0000000000000000 [ 343.094124][T17727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.094135][T17727] R13: 00007f9f29fe6038 R14: 00007f9f29fe5fa0 R15: 00007ffd0931f308 [ 343.094160][T17727] [ 343.217240][T17734] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4032'. [ 343.225222][T17735] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 343.238442][ T40] audit: type=1326 audit(1758860998.375:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17738 comm="syz.5.4033" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f301698eec9 code=0x0 [ 343.254550][ T40] audit: type=1400 audit(1758860998.375:1729): avc: denied { create } for pid=17738 comm="syz.5.4033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 343.264456][ T40] audit: type=1400 audit(1758860998.375:1730): avc: denied { mounton } for pid=17738 comm="syz.5.4033" path="/proc/814/task" dev="proc" ino=78449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 343.320858][ T40] audit: type=1400 audit(1758860998.460:1731): avc: denied { ioctl } for pid=17746 comm="syz.5.4036" path="socket:[80945]" dev="sockfs" ino=80945 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 343.339444][T17749] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 343.346742][T17747] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4036'. [ 343.409745][T17755] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4036'. [ 343.412856][T17755] nbd: device at index 64 is going down [ 343.710855][T17774] delete_channel: no stack [ 343.768750][T17773] 9pnet_virtio: no channels available for device syz [ 343.911899][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.008726][T17792] fuse: Bad value for 'group_id' [ 344.010338][T17792] fuse: Bad value for 'group_id' [ 344.012727][ T5923] Process accounting resumed [ 344.050080][T17791] Process accounting resumed [ 344.111039][T17800] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4051'. [ 344.141190][T17799] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4051'. [ 344.153397][T17800] block nbd7: Attempted send on invalid socket [ 344.156284][T17800] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.165035][T17800] (syz.7.4051,17800,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 344.177656][T17800] (syz.7.4051,17800,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 344.180096][T17800] (syz.7.4051,17800,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 344.182902][T17800] (syz.7.4051,17800,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 344.282368][T17811] usb usb7: usbfs: process 17811 (syz.4.4055) did not claim interface 0 before use [ 344.341099][T17815] loop2: detected capacity change from 0 to 7 [ 344.344622][T17815] Dev loop2: unable to read RDB block 7 [ 344.347097][T17815] loop2: AHDI p1 p2 p3 [ 344.348994][T17815] loop2: partition table partially beyond EOD, truncated [ 344.352197][T17815] loop2: p1 start 1601398130 is beyond EOD, truncated [ 344.355139][T17815] loop2: p2 start 1702059890 is beyond EOD, truncated [ 344.609089][T17828] CUSE: unknown device info "" [ 344.610697][T17828] CUSE: zero length info key specified [ 345.203225][T17818] overlayfs: statfs failed on './file0' [ 345.345917][T17862] mkiss: ax0: crc mode is auto. [ 345.445466][T17868] 9pnet_virtio: no channels available for device syz [ 345.661498][ T10] IPVS: starting estimator thread 0... [ 345.663359][T17893] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 345.729319][ T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 345.772146][T17895] IPVS: using max 45 ests per chain, 108000 per kthread [ 345.801833][T17897] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4079'. [ 345.900398][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 345.902807][T17907] zonefs (nbd1) ERROR: Not a zoned block device [ 345.905154][ T9] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 345.908227][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.913407][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.916599][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 345.919794][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.924535][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 345.924643][T17908] zonefs (nbd1) ERROR: Not a zoned block device [ 345.927455][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.002908][T17914] 9pnet_virtio: no channels available for device syz [ 346.004796][T17910] netlink: 187476 bytes leftover after parsing attributes in process `syz.7.4082'. [ 346.152805][T17926] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 346.156265][ T9] usb 10-1: GET_CAPABILITIES returned 0 [ 346.156531][T17926] SELinux: failed to load policy [ 346.160054][ T9] usbtmc 10-1:16.0: can't read capabilities [ 346.164961][T17875] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 346.167716][T17875] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 346.174586][T17875] vhci_hcd vhci_hcd.0: Device attached [ 346.177214][T17928] vhci_hcd: unknown pdu 2 [ 346.179285][T11240] vhci_hcd: stop threads [ 346.180828][T11240] vhci_hcd: release socket [ 346.182755][T11240] vhci_hcd: disconnect device [ 346.204722][T17931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.374470][ T24] usb 10-1: USB disconnect, device number 16 [ 346.403782][T17938] Bluetooth: Short BCSP packet [ 346.571413][T17936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.576082][T17936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.616597][ T54] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 346.776921][ T54] usb 12-1: Using ep0 maxpacket: 32 [ 346.779740][ T54] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 346.784451][ T54] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 346.787342][ T54] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 346.790034][ T54] usb 12-1: Product: syz [ 346.791425][ T54] usb 12-1: Manufacturer: syz [ 346.792887][ T54] usb 12-1: SerialNumber: syz [ 346.795578][ T54] usb 12-1: config 0 descriptor?? [ 346.798221][T17935] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 346.801285][ T54] hub 12-1:0.0: bad descriptor, ignoring hub [ 346.803285][ T54] hub 12-1:0.0: probe with driver hub failed with error -5 [ 347.140633][ T34] usb 12-1: USB disconnect, device number 3 [ 347.484771][T17959] tipc: Enabling of bearer rejected, failed to enable media [ 347.491737][T17959] tipc: Enabling of bearer rejected, failed to enable media [ 347.590424][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 347.590436][ T40] audit: type=1400 audit(1758861002.454:1746): avc: denied { accept } for pid=17960 comm="syz.5.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 347.670604][T17967] binder: 17966:17967 ioctl c0306201 2000000003c0 returned -14 [ 348.446728][ T40] audit: type=1400 audit(1758861003.258:1747): avc: denied { getopt } for pid=17982 comm="syz.5.4106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 348.446818][T17983] netlink: 520 bytes leftover after parsing attributes in process `syz.5.4106'. [ 348.482868][T17983] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4106'. [ 348.501532][ T40] audit: type=1400 audit(1758861003.305:1748): avc: denied { remount } for pid=17982 comm="syz.5.4106" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 348.598900][T17989] NILFS (nbd5): device size too small [ 348.615971][ T5331] Bluetooth: hci5: command 0x1003 tx timeout [ 348.620211][ T5981] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 348.725210][T17996] SELinux: failed to load policy [ 348.866670][T18028] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4119'. [ 348.868800][ T40] audit: type=1400 audit(1758861003.651:1749): avc: denied { setopt } for pid=18018 comm="syz.7.4119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 349.247418][ T40] audit: type=1400 audit(1758861004.006:1750): avc: denied { create } for pid=18042 comm="syz.1.4126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 349.248258][T18043] 9pnet_virtio: no channels available for device syz [ 349.296945][ T40] audit: type=1804 audit(1758861004.044:1751): pid=18045 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.4127" name="/newroot/499/file0" dev="tmpfs" ino=2676 res=1 errno=0 [ 349.306046][ T40] audit: type=1804 audit(1758861004.053:1752): pid=18045 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.4127" name="/newroot/499/file0" dev="tmpfs" ino=2676 res=1 errno=0 [ 349.611627][ T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 349.770694][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 349.776468][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.780973][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.784908][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 349.788615][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.793916][ T9] usb 6-1: config 0 descriptor?? [ 349.879472][T18054] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4129'. [ 349.882685][T18054] netlink: 'syz.7.4129': attribute type 1 has an invalid length. [ 349.885142][T18054] nbd: error processing sock list [ 350.009446][T18059] netlink: 'syz.7.4130': attribute type 1 has an invalid length. [ 350.031200][T18059] bond66: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 350.037012][T18059] 8021q: adding VLAN 0 to HW filter on device bond66 [ 350.038638][T11240] bond66: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 350.062617][T18059] veth3: entered promiscuous mode [ 350.066412][T18059] bond66: (slave veth3): Enslaving as a backup interface with a down link [ 350.137537][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4131'. [ 350.140727][T18062] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 350.143742][T18062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.157160][T11244] bond66: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 350.226052][T18051] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4128'. [ 350.232101][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 350.234764][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 350.243406][ T9] usb 6-1: USB disconnect, device number 46 [ 350.280240][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4134'. [ 350.572160][ T61] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 350.732468][ T61] usb 12-1: Using ep0 maxpacket: 32 [ 350.737320][ T61] usb 12-1: config 7 has an invalid interface number: 241 but max is 0 [ 350.740786][ T61] usb 12-1: config 7 has no interface number 0 [ 350.743583][ T61] usb 12-1: config 7 interface 241 altsetting 7 endpoint 0x6 has invalid maxpacket 975, setting to 64 [ 350.748959][ T61] usb 12-1: config 7 interface 241 altsetting 7 bulk endpoint 0x5 has invalid maxpacket 32 [ 350.753326][ T61] usb 12-1: config 7 interface 241 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 350.758083][ T61] usb 12-1: config 7 interface 241 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 350.762634][ T61] usb 12-1: config 7 interface 241 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 350.767330][ T61] usb 12-1: config 7 interface 241 has no altsetting 0 [ 350.772748][ T61] usb 12-1: New USB device found, idVendor=15f4, idProduct=0135, bcdDevice=f0.60 [ 350.776706][ T61] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.780074][ T61] usb 12-1: Product: syz [ 350.781940][ T61] usb 12-1: Manufacturer: syz [ 350.783865][ T61] usb 12-1: SerialNumber: syz [ 350.789051][T18071] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 351.007130][ T40] audit: type=1326 audit(1758861005.643:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18072 comm="syz.1.4136" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0953b8eec9 code=0x0 [ 351.010517][ T5981] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 351.010530][ T5972] Bluetooth: hci6: command 0x1003 tx timeout [ 351.013412][ T5331] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 351.064486][T18084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.067281][T18084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.105872][ T40] audit: type=1400 audit(1758861005.737:1754): avc: denied { setopt } for pid=18087 comm="syz.4.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 351.199293][T18094] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 351.930017][T18111] /dev/nbd1: Can't open blockdev [ 351.961979][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 352.050328][ T40] audit: type=1400 audit(1758861006.626:1755): avc: denied { ioctl } for pid=18115 comm="syz.5.4149" path="socket:[82058]" dev="sockfs" ino=82058 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 352.065945][T18111] block nbd1: shutting down sockets [ 352.097612][T18118] overlayfs: empty lowerdir [ 352.106970][T18118] pim6reg: entered allmulticast mode [ 352.161372][T18121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4151'. [ 353.365019][ T40] audit: type=1400 audit(1758861007.860:1756): avc: denied { map } for pid=18140 comm="syz.1.4158" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.372701][ T40] audit: type=1400 audit(1758861007.860:1757): avc: denied { execute } for pid=18140 comm="syz.1.4158" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.452184][ T40] audit: type=1400 audit(1758861007.935:1758): avc: denied { call } for pid=18144 comm="syz.1.4160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 353.452581][T18145] 9pnet_virtio: no channels available for device syz [ 353.554560][ T61] usb 12-1: USB disconnect, device number 4 [ 353.577079][ T40] audit: type=1400 audit(1758861008.057:1759): avc: denied { setattr } for pid=18148 comm="syz.7.4162" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 353.646445][T18152] can: request_module (can-proto-0) failed. [ 353.655806][T18157] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.4163' sets config #3 [ 353.658745][T18152] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.4163' sets config #3 [ 353.659131][T18151] can: request_module (can-proto-0) failed. [ 353.832870][ T5331] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 353.834053][ T5972] Bluetooth: hci5: command 0x1003 tx timeout [ 353.884968][T18172] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 353.885087][T18173] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 354.012045][T18182] overlay: Unknown parameter 'audit' [ 354.415014][T18200] Bluetooth: Short BCSP packet [ 354.614135][ T5972] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 354.875129][ T40] audit: type=1400 audit(1758861009.263:1760): avc: denied { setopt } for pid=18213 comm="syz.1.4183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 354.917306][T18219] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4184'. [ 355.061824][ T40] audit: type=1400 audit(1758861009.441:1761): avc: denied { getopt } for pid=18225 comm="syz.1.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 355.069374][ T40] audit: type=1400 audit(1758861009.451:1762): avc: denied { relabelfrom } for pid=18225 comm="syz.1.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 355.077497][ T40] audit: type=1400 audit(1758861009.451:1763): avc: denied { relabelto } for pid=18225 comm="syz.1.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 355.479323][T18245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=18245 comm=syz.1.4193 [ 355.699099][T18254] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 355.872783][T18267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4200'. [ 355.882951][T18267] input: syz1 as /devices/virtual/input/input41 [ 355.912841][T18258] netlink: 'syz.7.4197': attribute type 10 has an invalid length. [ 356.008379][T18258] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 356.030478][T18272] nvme_fabrics: missing parameter 'transport=%s' [ 356.033544][T18272] nvme_fabrics: missing parameter 'nqn=%s' [ 356.208415][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4204'. [ 356.212196][T18282] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4204'. [ 356.217234][ T40] audit: type=1326 audit(1758861010.526:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18281 comm="syz.5.4204" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f301698eec9 code=0x0 [ 356.406462][T18295] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 356.529997][T18300] netlink: 'syz.7.4209': attribute type 2 has an invalid length. [ 356.570089][ T5972] Bluetooth: hci5: command 0x1003 tx timeout [ 356.570616][ T5331] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 356.618176][ T40] audit: type=1400 audit(1758861010.900:1765): avc: denied { ioctl } for pid=18308 comm="syz.4.4212" path="socket:[82131]" dev="sockfs" ino=82131 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 356.629377][T18305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4210'. [ 356.864223][T18326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4216'. [ 356.974812][T18330] netlink: 33828 bytes leftover after parsing attributes in process `syz.1.4218'. [ 357.009238][ T34] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 357.023399][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4219'. [ 357.027677][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4219'. [ 357.133139][T18344] Bluetooth: Short BCSP packet [ 357.170537][ T34] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 357.173721][ T34] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 357.176878][ T34] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.183205][ T34] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 357.186230][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.188912][ T34] usb 9-1: Product: syz [ 357.190464][ T34] usb 9-1: Manufacturer: syz [ 357.191993][ T34] usb 9-1: SerialNumber: syz [ 357.195866][ T34] hub 9-1:1.0: bad descriptor, ignoring hub [ 357.197863][ T34] hub 9-1:1.0: probe with driver hub failed with error -5 [ 357.412594][T18319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.416655][T18319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.420470][T18319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.424498][T18319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.428700][T18319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.432296][T18319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.436150][T18319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.440060][T18319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.443867][T18319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.449320][T18319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.463837][ T34] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 357.537007][T18349] __nla_validate_parse: 5 callbacks suppressed [ 357.537024][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4222'. [ 357.543643][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4222'. [ 357.611200][T18353] kAFS: Can only specify source 'none' with -o dyn [ 357.619456][T18353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4223'. [ 357.638977][ T61] usb 9-1: USB disconnect, device number 29 [ 357.641858][ T61] usblp0: removed [ 357.711639][T18360] netlink: 'syz.7.4226': attribute type 1 has an invalid length. [ 357.716296][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4226'. [ 357.770252][T18366] netlink: 'syz.4.4229': attribute type 1 has an invalid length. [ 357.772684][T18366] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4229'. [ 357.775594][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4229'. [ 357.864929][T18375] sp0: Synchronizing with TNC [ 357.871435][T18374] [U] è`` [ 358.007321][T18384] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 358.008030][T18381] IPVS: stopping backup sync thread 18384 ... [ 358.347126][T18417] 9pnet_virtio: no channels available for device syz [ 358.450174][T18423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.613570][T18426] netlink: 'syz.4.4251': attribute type 1 has an invalid length. [ 358.616705][T18426] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4251'. [ 358.620142][T18426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4251'. [ 358.739809][T18428] 9pnet_virtio: no channels available for device syz [ 358.808645][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 358.808657][ T40] audit: type=1400 audit(1758861012.949:1773): avc: denied { connect } for pid=18425 comm="syz.4.4251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 359.046233][T18432] overlay: Unknown parameter 'permit_directio' [ 359.193102][T18434] can0: slcan on ttyS3. [ 359.285538][T18434] can0 (unregistered): slcan off ttyS3. [ 359.306437][ T5972] Bluetooth: hci5: command 0x1003 tx timeout [ 359.306493][ T5331] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 359.591602][T18458] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 359.649681][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4261'. [ 359.653087][T18462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4261'. [ 359.698509][ T40] audit: type=1400 audit(1758861013.772:1774): avc: denied { bind } for pid=18467 comm="syz.1.4263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 359.705913][ T40] audit: type=1400 audit(1758861013.772:1775): avc: denied { read } for pid=18467 comm="syz.1.4263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 360.033562][T18474] could not allocate digest TFM handle cryptd(blake2b-160) [ 360.052381][ T5331] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 360.166902][T18502] ALSA: seq fatal error: cannot create timer (-22) [ 360.197794][T18504] __vm_enough_memory: pid: 18504, comm: syz.1.4274, bytes: 21200422903808 not enough memory for the allocation [ 360.202921][T18504] __vm_enough_memory: pid: 18504, comm: syz.1.4274, bytes: 21200422903808 not enough memory for the allocation [ 360.207329][T18504] __vm_enough_memory: pid: 18504, comm: syz.1.4274, bytes: 21200422903808 not enough memory for the allocation [ 360.219763][T18504] __vm_enough_memory: pid: 18504, comm: syz.1.4274, bytes: 21200422903808 not enough memory for the allocation [ 360.223715][T18504] __vm_enough_memory: pid: 18504, comm: syz.1.4274, bytes: 21200422903808 not enough memory for the allocation [ 360.228325][T18504] __vm_enough_memory: pid: 18504, comm: syz.1.4274, bytes: 21200422903808 not enough memory for the allocation [ 360.232186][T18504] __vm_enough_memory: pid: 18504, comm: syz.1.4274, bytes: 21200422903808 not enough memory for the allocation [ 360.236110][T18504] __vm_enough_memory: pid: 18504, comm: syz.1.4274, bytes: 21200422903808 not enough memory for the allocation [ 360.242405][T18504] __vm_enough_memory: pid: 18504, comm: syz.1.4274, bytes: 21200422903808 not enough memory for the allocation [ 360.246281][T18504] __vm_enough_memory: pid: 18504, comm: syz.1.4274, bytes: 21200422903808 not enough memory for the allocation [ 360.272808][ T40] audit: type=1400 audit(1758861014.315:1776): avc: denied { read } for pid=18506 comm="syz.7.4275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 360.332034][T18507] team0 (unregistering): Port device team_slave_0 removed [ 360.337825][T18507] team0 (unregistering): Port device team_slave_1 removed [ 360.565574][ T40] audit: type=1400 audit(1758861014.577:1777): avc: denied { getopt } for pid=18520 comm="syz.5.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 360.631364][ T40] audit: type=1400 audit(1758861014.642:1778): avc: denied { unmount } for pid=14307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 360.749594][ T54] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 360.912898][ T54] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 360.917487][ T54] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 360.921519][ T54] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 360.925315][ T54] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.931472][T18519] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 360.937196][ T54] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 360.942061][ T34] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 361.073825][T18550] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18550 comm=syz.1.4290 [ 361.104302][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 361.107460][ T34] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.110488][ T34] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.113695][ T34] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.116753][ T34] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.120710][ T34] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 361.123541][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.274536][T18576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=18576 comm=syz.4.4296 [ 361.344795][ T34] usb 10-1: GET_CAPABILITIES returned 0 [ 361.346581][ T34] usbtmc 10-1:16.0: can't read capabilities [ 361.358161][ T53] usb 12-1: USB disconnect, device number 5 [ 361.564691][ T34] usb 10-1: USB disconnect, device number 18 [ 362.371455][T18634] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 362.414240][T18636] netlink: 'syz.5.4313': attribute type 10 has an invalid length. [ 362.420564][T18636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.424889][T18636] batadv0: entered allmulticast mode [ 362.427485][T18636] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 362.496898][ T40] audit: type=1400 audit(1758861016.401:1779): avc: denied { write } for pid=18641 comm="syz.7.4316" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 362.541698][T18645] can0: slcan on ttyS3. [ 362.665674][T18645] can0 (unregistered): slcan off ttyS3. [ 362.713831][ T40] audit: type=1400 audit(1758861016.597:1780): avc: denied { write } for pid=18667 comm="syz.1.4324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 362.853223][ T40] audit: type=1400 audit(1758861016.728:1781): avc: denied { nlmsg_read } for pid=18675 comm="syz.7.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.937152][ T40] audit: type=1400 audit(1758861016.803:1782): avc: denied { bind } for pid=18684 comm="syz.7.4330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 363.218032][T18721] ./cgroup: Can't lookup blockdev [ 363.226987][T18724] __nla_validate_parse: 8 callbacks suppressed [ 363.227002][T18724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4340'. [ 363.474438][T18738] netlink: 'syz.7.4345': attribute type 7 has an invalid length. [ 363.512814][T18745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4347'. [ 363.546308][T18748] tmpfs: Unknown parameter 'dont_appraise' [ 363.587655][T18754] netlink: 'syz.7.4350': attribute type 1 has an invalid length. [ 363.606899][T18753] bond67: (slave vxcan3): The slave device specified does not support setting the MAC address [ 363.610971][T18753] bond67: (slave vxcan3): Error -95 calling set_mac_address [ 363.624036][T18754] gretap1: entered promiscuous mode [ 363.635689][T18754] bond67: (slave gretap1): making interface the new active one [ 363.638686][T18754] bond67: (slave gretap1): Enslaving as an active interface with an up link [ 363.721414][T18767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4353'. [ 363.726354][T18767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4353'. [ 363.786689][T18777] pim6reg: entered allmulticast mode [ 363.790745][T18777] pim6reg: left allmulticast mode [ 363.911897][T18786] binder: BINDER_SET_CONTEXT_MGR already set [ 363.914425][T18784] binder: BINDER_SET_CONTEXT_MGR already set [ 363.916174][T18784] binder: 18783:18784 ioctl 4018620d 2000000002c0 returned -16 [ 363.918129][T18786] binder: 18783:18786 ioctl 4018620d 2000000002c0 returned -16 [ 364.098348][T18807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4363'. [ 364.206509][T18817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=536 sclass=netlink_route_socket pid=18817 comm=syz.4.4368 [ 364.235087][T18817] tmpfs: Unknown parameter 'quogÈŸa' [ 364.303486][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 364.303497][ T40] audit: type=1400 audit(1758861018.084:1786): avc: denied { create } for pid=18827 comm="syz.5.4371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 364.343001][T18832] 9pnet_virtio: no channels available for device syz [ 364.352407][ T5331] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 364.356855][ T5331] Bluetooth: hci1: Injecting HCI hardware error event [ 364.362059][ T5331] Bluetooth: hci1: hardware error 0x00 [ 364.447360][T18848] netlink: 'syz.4.4377': attribute type 1 has an invalid length. [ 364.451009][T18848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.497217][ T24] kernel write not supported for file /video36 (pid: 24 comm: kworker/2:0) [ 364.510296][T18853] netlink: 'syz.5.4380': attribute type 62 has an invalid length. [ 364.559898][T18860] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4382'. [ 364.565048][ T40] audit: type=1326 audit(1758861018.327:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18857 comm="syz.1.4383" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0953b8eec9 code=0x0 [ 364.621905][ T40] audit: type=1400 audit(1758861018.384:1788): avc: denied { map } for pid=18864 comm="syz.4.4384" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 364.708766][ T40] audit: type=1400 audit(1758861018.468:1789): avc: denied { bind } for pid=18872 comm="syz.5.4386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 364.723826][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4386'. [ 364.819194][T18878] sctp: [Deprecated]: syz.4.4388 (pid 18878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.819194][T18878] Use struct sctp_sack_info instead [ 365.111747][ T838] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 365.293779][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 149, setting to 64 [ 365.300321][ T838] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 365.304401][ T838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.307215][ T838] usb 9-1: Product: syz [ 365.308556][ T838] usb 9-1: Manufacturer: syz [ 365.310065][ T838] usb 9-1: SerialNumber: syz [ 365.313048][ T838] usb 9-1: config 0 descriptor?? [ 365.413716][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4396'. [ 365.594370][T18924] 9pnet_virtio: no channels available for device syz [ 365.752223][T18881] vlan2: entered allmulticast mode [ 365.756064][T18881] bond0: entered allmulticast mode [ 365.757784][T18881] bond_slave_0: entered allmulticast mode [ 365.759833][T18881] bond_slave_1: entered allmulticast mode [ 365.763943][ T34] usb 9-1: USB disconnect, device number 30 [ 366.062901][T18945] (syz.1.4406,18945,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 366.066236][T18945] (syz.1.4406,18945,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 366.268566][ T40] audit: type=1400 audit(1758861019.927:1790): avc: denied { create } for pid=18951 comm="syz.1.4408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 366.281991][ T40] audit: type=1400 audit(1758861019.927:1791): avc: denied { bind } for pid=18951 comm="syz.1.4408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 366.661621][ T5331] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 366.710144][T18968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4412'. [ 366.716944][T18968] ip6gre2: entered allmulticast mode [ 366.722817][T18968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=18968 comm=syz.4.4412 [ 367.133911][T18984] usb usb4: usbfs: interface 0 claimed by hub while 'syz.4.4417' sets config #1 [ 367.349183][T18995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4420'. [ 367.511448][ T40] audit: type=1400 audit(1758861021.087:1792): avc: denied { ioctl } for pid=19009 comm="syz.7.4426" path="socket:[88447]" dev="sockfs" ino=88447 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 367.519572][ T40] audit: type=1400 audit(1758861021.087:1793): avc: denied { ioctl } for pid=19009 comm="syz.7.4426" path="socket:[88446]" dev="sockfs" ino=88446 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 367.530252][ T40] audit: type=1400 audit(1758861021.087:1794): avc: denied { getopt } for pid=19009 comm="syz.7.4426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 367.640312][T19016] 9pnet_fd: Insufficient options for proto=fd [ 367.698702][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 367.825729][T19028] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 368.029947][ T5331] Bluetooth: hci5: command 0x1003 tx timeout [ 368.030547][ T5972] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 368.312269][ T838] usb 12-1: new low-speed USB device number 6 using dummy_hcd [ 368.470299][ T838] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 368.473747][ T838] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 368.477192][ T838] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 368.483169][ T838] usb 12-1: string descriptor 0 read error: -22 [ 368.485443][ T838] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.488469][ T838] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.493071][T19036] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 368.718423][T19036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.721317][T19036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.735358][ T838] cdc_ncm 12-1:1.0: bind() failure [ 368.745617][ T838] cdc_ncm 12-1:1.1: CDC Union missing and no IAD found [ 368.748129][ T838] cdc_ncm 12-1:1.1: bind() failure [ 368.751454][ T838] usb 12-1: USB disconnect, device number 6 [ 369.338228][ T40] audit: type=1400 audit(1758861022.799:1795): avc: denied { read } for pid=19043 comm="syz.7.4437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 369.377008][T19047] __nla_validate_parse: 3 callbacks suppressed [ 369.377025][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4438'. [ 369.383313][T19047] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4438'. [ 369.497020][T19050] overlayfs: failed to resolve 'verity=require': -2 [ 369.593095][T19054] xfs: Unknown parameter 'grpquota./file0' [ 369.619466][T19063] vlan0: entered allmulticast mode [ 369.776303][T19057] Falling back ldisc for ttyS3. [ 369.892260][T19072] 9pnet_virtio: no channels available for device syz [ 369.954399][ T5331] Bluetooth: hci0: unexpected event for opcode 0x041b [ 369.995606][T19082] netlink: 'syz.4.4449': attribute type 19 has an invalid length. [ 369.998775][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4449'. [ 370.007341][T11257] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.007377][T19082] netlink: 'syz.4.4449': attribute type 19 has an invalid length. [ 370.010860][T18888] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.013578][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4449'. [ 370.016196][T18888] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.022790][T18888] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.074175][T19089] netlink: 'syz.5.4451': attribute type 12 has an invalid length. [ 370.077304][T19089] netlink: 'syz.5.4451': attribute type 29 has an invalid length. [ 370.080459][T19089] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4451'. [ 370.091893][T19089] netlink: 59 bytes leftover after parsing attributes in process `syz.5.4451'. [ 370.130302][T19091] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4452'. [ 370.410574][T19109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4456'. [ 370.413496][T19109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4456'. [ 370.709130][T19119] syzkaller0: entered promiscuous mode [ 370.711336][T19119] syzkaller0: entered allmulticast mode [ 370.909304][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 370.909315][ T40] audit: type=1400 audit(1758861024.267:1798): avc: denied { setattr } for pid=19120 comm="syz.5.4460" name="CAN_RAW" dev="sockfs" ino=86776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 371.018581][T19130] sctp: [Deprecated]: syz.5.4462 (pid 19130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.018581][T19130] Use struct sctp_sack_info instead [ 371.024918][T19129] sctp: [Deprecated]: syz.5.4462 (pid 19129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.024918][T19129] Use struct sctp_sack_info instead [ 371.696860][ T34] usb 10-1: new low-speed USB device number 19 using dummy_hcd [ 371.857310][ T34] usb 10-1: Invalid ep0 maxpacket: 32 [ 371.878647][ T5972] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 371.939195][T19145] 9pnet: Could not find request transport: vértio [ 371.941263][T19145] 9pnet: Unknown protocol version 9p2000.uÐ [ 372.007316][ T34] usb 10-1: new low-speed USB device number 20 using dummy_hcd [ 372.052473][ T40] audit: type=1400 audit(1758861025.334:1799): avc: denied { relabelfrom } for pid=19151 comm="syz.7.4467" name="XDP" dev="sockfs" ino=90161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 372.053145][T19153] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 372.065255][ T40] audit: type=1400 audit(1758861025.343:1800): avc: denied { relabelto } for pid=19151 comm="syz.7.4467" name="XDP" dev="sockfs" ino=90161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=xdp_socket permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0" [ 372.167141][ T34] usb 10-1: Invalid ep0 maxpacket: 32 [ 372.169928][ T34] usb usb10-port1: attempt power cycle [ 372.340813][T19165] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4470'. [ 372.530628][ T34] usb 10-1: new low-speed USB device number 21 using dummy_hcd [ 372.552628][ T34] usb 10-1: Invalid ep0 maxpacket: 32 [ 372.704337][ T34] usb 10-1: new low-speed USB device number 22 using dummy_hcd [ 372.736395][ T34] usb 10-1: Invalid ep0 maxpacket: 32 [ 372.736578][ T34] usb usb10-port1: unable to enumerate USB device [ 372.880340][T19183] fuse: Bad value for 'fd' [ 372.882220][T19183] fuse: Bad value for 'fd' [ 372.925468][T19187] batadv_slave_0: entered promiscuous mode [ 372.929400][T19187] batadv_slave_0: left promiscuous mode [ 373.129513][ T40] audit: type=1400 audit(1758861026.334:1801): avc: denied { read } for pid=19193 comm="syz.7.4479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 373.184319][T19195] netlink: 'syz.7.4479': attribute type 39 has an invalid length. [ 374.712742][T19209] bond2: entered promiscuous mode [ 374.715222][T19209] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.725649][T19209] netlink: 'syz.5.4484': attribute type 4 has an invalid length. [ 374.749398][T19212] overlayfs: failed to resolve './file1': -2 [ 374.753694][T19206] overlayfs: overlapping lowerdir path [ 374.787065][T19217] tmpfs: Bad value for 'mpol' [ 374.926115][T19228] __nla_validate_parse: 2 callbacks suppressed [ 374.926129][T19228] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4490'. [ 375.181179][ T5870] hid (null): global environment stack underflow [ 375.185672][ T5870] hid (null): bogus close delimiter [ 375.189680][ T5870] hid-generic 060E:00FF:0F81.0010: global environment stack underflow [ 375.192379][ T5870] hid-generic 060E:00FF:0F81.0010: item 0 0 1 11 parsing failed [ 375.195539][ T5870] hid-generic 060E:00FF:0F81.0010: probe with driver hid-generic failed with error -22 [ 375.459303][T19275] program syz.7.4502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.551174][T19283] bridge1: entered allmulticast mode [ 375.644089][T19285] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4506'. [ 375.647851][T19285] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4506'. [ 375.693364][T19292] FAULT_INJECTION: forcing a failure. [ 375.693364][T19292] name failslab, interval 1, probability 0, space 0, times 0 [ 375.698932][T19292] CPU: 3 UID: 0 PID: 19292 Comm: syz.7.4508 Not tainted syzkaller #0 PREEMPT(full) [ 375.698957][T19292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 375.698968][T19292] Call Trace: [ 375.698975][T19292] [ 375.698982][T19292] dump_stack_lvl+0x16c/0x1f0 [ 375.699019][T19292] should_fail_ex+0x512/0x640 [ 375.699050][T19292] ? __kmalloc_noprof+0xbf/0x510 [ 375.699071][T19292] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 375.699100][T19292] should_failslab+0xc2/0x120 [ 375.699121][T19292] __kmalloc_noprof+0xd2/0x510 [ 375.699142][T19292] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 375.699170][T19292] ? cred_has_capability.isra.0+0x190/0x310 [ 375.699199][T19292] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 375.699227][T19292] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 375.699260][T19292] ? bpf_lsm_capable+0x9/0x10 [ 375.699284][T19292] ? security_capable+0x7e/0x260 [ 375.699310][T19292] genl_rcv_msg+0x55c/0x800 [ 375.699339][T19292] ? __pfx_genl_rcv_msg+0x10/0x10 [ 375.699364][T19292] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 375.699379][T19292] ? __pfx_nl802154_set_tx_power+0x10/0x10 [ 375.699396][T19292] ? __pfx_nl802154_post_doit+0x10/0x10 [ 375.699424][T19292] ? __lock_acquire+0x62e/0x1ce0 [ 375.699455][T19292] netlink_rcv_skb+0x155/0x420 [ 375.699478][T19292] ? __pfx_genl_rcv_msg+0x10/0x10 [ 375.699516][T19292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 375.699550][T19292] ? netlink_deliver_tap+0x1ae/0xd30 [ 375.699570][T19292] ? selinux_netlink_send+0x578/0x830 [ 375.699592][T19292] ? is_vmalloc_addr+0x86/0xa0 [ 375.699612][T19292] genl_rcv+0x28/0x40 [ 375.699631][T19292] netlink_unicast+0x5aa/0x870 [ 375.699658][T19292] ? __pfx_netlink_unicast+0x10/0x10 [ 375.699681][T19292] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 375.699711][T19292] netlink_sendmsg+0x8d1/0xdd0 [ 375.699738][T19292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.699769][T19292] ____sys_sendmsg+0xa98/0xc70 [ 375.699800][T19292] ? copy_msghdr_from_user+0x10a/0x160 [ 375.699822][T19292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.699860][T19292] ___sys_sendmsg+0x134/0x1d0 [ 375.699881][T19292] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.699934][T19292] __sys_sendmsg+0x16d/0x220 [ 375.699957][T19292] ? __pfx___sys_sendmsg+0x10/0x10 [ 375.699988][T19292] ? fput+0x9b/0xd0 [ 375.700013][T19292] do_syscall_64+0xcd/0x4e0 [ 375.700039][T19292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.700058][T19292] RIP: 0033:0x7f09e0d8eec9 [ 375.700073][T19292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.700089][T19292] RSP: 002b:00007f09e1d0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.700130][T19292] RAX: ffffffffffffffda RBX: 00007f09e0fe5fa0 RCX: 00007f09e0d8eec9 [ 375.700141][T19292] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000004 [ 375.700150][T19292] RBP: 00007f09e1d0a090 R08: 0000000000000000 R09: 0000000000000000 [ 375.700160][T19292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.700170][T19292] R13: 00007f09e0fe6038 R14: 00007f09e0fe5fa0 R15: 00007ffc63f51398 [ 375.700195][T19292] [ 375.833291][ C3] vkms_vblank_simulate: vblank timer overrun [ 375.892326][ T24] IPVS: starting estimator thread 0... [ 375.892813][T19302] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 375.986533][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4513'. [ 375.989463][T19307] bridge_slave_1: left allmulticast mode [ 375.991243][T19307] bridge_slave_1: left promiscuous mode [ 375.993207][T19307] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.996314][T19305] IPVS: using max 45 ests per chain, 108000 per kthread [ 375.998550][T19311] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 375.999287][T19311] netlink: 53 bytes leftover after parsing attributes in process `syz.7.4514'. [ 376.004564][T19307] bridge_slave_0: left allmulticast mode [ 376.006220][T19313] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 376.007752][T19307] bridge_slave_0: left promiscuous mode [ 376.011218][T19307] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.047601][T19316] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4515'. [ 376.184323][ T40] audit: type=1400 audit(1758861029.197:1802): avc: denied { bind } for pid=19324 comm="syz.4.4518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 376.274881][T19336] FAULT_INJECTION: forcing a failure. [ 376.274881][T19336] name failslab, interval 1, probability 0, space 0, times 0 [ 376.279016][T19336] CPU: 3 UID: 0 PID: 19336 Comm: syz.7.4520 Not tainted syzkaller #0 PREEMPT(full) [ 376.279032][T19336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 376.279039][T19336] Call Trace: [ 376.279043][T19336] [ 376.279047][T19336] dump_stack_lvl+0x16c/0x1f0 [ 376.279065][T19336] should_fail_ex+0x512/0x640 [ 376.279080][T19336] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 376.279094][T19336] should_failslab+0xc2/0x120 [ 376.279108][T19336] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 376.279119][T19336] ? __alloc_skb+0x2b2/0x380 [ 376.279135][T19336] __alloc_skb+0x2b2/0x380 [ 376.279147][T19336] ? __pfx___alloc_skb+0x10/0x10 [ 376.279160][T19336] ? genl_rcv_msg+0x4bb/0x800 [ 376.279181][T19336] netlink_ack+0x15d/0xb80 [ 376.279200][T19336] netlink_rcv_skb+0x332/0x420 [ 376.279214][T19336] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.279232][T19336] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.279252][T19336] ? netlink_deliver_tap+0x1ae/0xd30 [ 376.279265][T19336] ? selinux_netlink_send+0x578/0x830 [ 376.279280][T19336] ? is_vmalloc_addr+0x86/0xa0 [ 376.279293][T19336] genl_rcv+0x28/0x40 [ 376.279308][T19336] netlink_unicast+0x5aa/0x870 [ 376.279325][T19336] ? __pfx_netlink_unicast+0x10/0x10 [ 376.279340][T19336] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 376.279358][T19336] netlink_sendmsg+0x8d1/0xdd0 [ 376.279375][T19336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.279395][T19336] ____sys_sendmsg+0xa98/0xc70 [ 376.279413][T19336] ? copy_msghdr_from_user+0x10a/0x160 [ 376.279427][T19336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.279450][T19336] ___sys_sendmsg+0x134/0x1d0 [ 376.279465][T19336] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.279498][T19336] __sys_sendmsg+0x16d/0x220 [ 376.279512][T19336] ? __pfx___sys_sendmsg+0x10/0x10 [ 376.279535][T19336] do_syscall_64+0xcd/0x4e0 [ 376.279552][T19336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.279564][T19336] RIP: 0033:0x7f09e0d8eec9 [ 376.279574][T19336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.279586][T19336] RSP: 002b:00007f09e1d0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.279597][T19336] RAX: ffffffffffffffda RBX: 00007f09e0fe5fa0 RCX: 00007f09e0d8eec9 [ 376.279604][T19336] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000004 [ 376.279611][T19336] RBP: 00007f09e1d0a090 R08: 0000000000000000 R09: 0000000000000000 [ 376.279618][T19336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.279625][T19336] R13: 00007f09e0fe6038 R14: 00007f09e0fe5fa0 R15: 00007ffc63f51398 [ 376.279639][T19336] [ 376.359492][T19340] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 376.360979][ C3] vkms_vblank_simulate: vblank timer overrun [ 376.399392][T19343] netlink: 'syz.7.4523': attribute type 16 has an invalid length. [ 376.400300][T19344] netlink: 328 bytes leftover after parsing attributes in process `syz.7.4523'. [ 376.402703][T19343] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.4523'. [ 376.434776][T19343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19343 comm=syz.7.4523 [ 376.515741][T19351] binder: BC_ATTEMPT_ACQUIRE not supported [ 376.517734][T19351] binder: 19350:19351 ioctl c0306201 200000000300 returned -22 [ 376.518044][T19351] openvswitch: netlink: Flow actions attr not present in new flow. [ 376.721643][ T40] audit: type=1400 audit(1758861029.702:1803): avc: denied { write } for pid=19363 comm="syz.4.4529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 376.728727][ T40] audit: type=1400 audit(1758861029.702:1804): avc: denied { read } for pid=19363 comm="syz.4.4529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 376.881801][ T24] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 377.031463][ T24] usb 10-1: device descriptor read/64, error -71 [ 377.288053][ T24] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 377.427170][ T24] usb 10-1: device descriptor read/64, error -71 [ 377.544867][ T24] usb usb10-port1: attempt power cycle [ 377.897347][ T34] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 377.908060][ T24] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 377.940854][ T24] usb 10-1: device descriptor read/8, error -71 [ 378.079219][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 378.083084][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.087765][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.091819][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 378.096918][ T34] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 378.101501][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.106804][ T34] usb 9-1: config 0 descriptor?? [ 378.128192][ T40] audit: type=1400 audit(1758861031.021:1805): avc: denied { append } for pid=19368 comm="syz.1.4531" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 378.137700][ T40] audit: type=1400 audit(1758861031.021:1806): avc: denied { open } for pid=19368 comm="syz.1.4531" path="/597/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 378.196736][ T24] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 378.219983][ T24] usb 10-1: device descriptor read/8, error -71 [ 378.346465][ T24] usb usb10-port1: unable to enumerate USB device [ 378.459230][ T5331] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.463760][ T5331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.469003][ T5331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.472231][ T5331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.476782][ T5331] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.546361][ T34] input: HID 0955:7214 Haptics as /devices/virtual/input/input45 [ 378.571643][ T34] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 378.575164][ T34] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 378.631660][T19377] chnl_net:caif_netlink_parms(): no params data found [ 378.714769][T19377] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.717593][T19377] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.720714][T19377] bridge_slave_0: entered allmulticast mode [ 378.724491][T19377] bridge_slave_0: entered promiscuous mode [ 378.729161][T19377] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.733913][T19377] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.736330][T19377] bridge_slave_1: entered allmulticast mode [ 378.740236][T19377] bridge_slave_1: entered promiscuous mode [ 378.775391][ T40] audit: type=1400 audit(1758861031.619:1807): avc: denied { mount } for pid=19366 comm="syz.4.4530" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 378.783326][T19367] max out of range [ 378.786195][ T40] audit: type=1400 audit(1758861031.629:1808): avc: denied { remount } for pid=19366 comm="syz.4.4530" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 378.804106][T19377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.811446][T19377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.851011][ T24] usb 9-1: USB disconnect, device number 31 [ 378.852277][ T34] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 378.870120][ T34] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 378.873729][ T34] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 378.877416][ T34] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 378.892685][T19377] team0: Port device team_slave_0 added [ 378.896090][T19377] team0: Port device team_slave_1 added [ 379.172038][T19377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.174676][T19377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.185034][T19377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.216471][T18893] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.220625][T18893] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.231414][T19377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.234115][T19377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.242359][T19377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.287514][T19377] hsr_slave_0: entered promiscuous mode [ 379.290810][T19377] hsr_slave_1: entered promiscuous mode [ 379.293712][T19377] debugfs: 'hsr0' already exists in 'hsr' [ 379.296157][T19377] Cannot create hsr debugfs directory [ 379.317216][T18893] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.323156][T18893] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.410260][ T40] audit: type=1400 audit(1758861032.218:1809): avc: denied { unmount } for pid=14196 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 379.430663][T18893] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.434762][T18893] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.523458][T18893] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.526838][T18893] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.590711][ T40] audit: type=1326 audit(1758861032.387:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19393 comm="syz.4.4536" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f29d8eec9 code=0x7fc00000 [ 379.598714][ T40] audit: type=1326 audit(1758861032.387:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19393 comm="syz.4.4536" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f29d8eec9 code=0x7fc00000 [ 379.607658][ T40] audit: type=1326 audit(1758861032.387:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19393 comm="syz.4.4536" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f29d8eec9 code=0x7fc00000 [ 379.728458][T18893] bridge_slave_1: left allmulticast mode [ 379.730330][T18893] bridge_slave_1: left promiscuous mode [ 379.732561][T18893] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.738494][T18893] bridge_slave_0: left allmulticast mode [ 379.740887][T18893] bridge_slave_0: left promiscuous mode [ 379.743387][T18893] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.761714][T18893] batman_adv: batadv0: Interface deactivated: gretap1 [ 379.863586][T19405] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 379.867368][T19405] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 380.093281][T18893] batman_adv: batadv0: Removing interface: gretap1 [ 380.508446][T18893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.551265][T18893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.572753][T18893] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 380.625017][T18893] bond0 (unregistering): Released all slaves [ 380.635483][T18893] bond1 (unregistering): Released all slaves [ 380.645423][T18893] bond2 (unregistering): Released all slaves [ 380.688416][ T5972] Bluetooth: hci5: command tx timeout [ 380.737255][T18893] bond3 (unregistering): Released all slaves [ 380.743996][T18893] bond4 (unregistering): Released all slaves [ 380.820194][T18893] : left promiscuous mode [ 380.937306][T18893] tipc: Left network mode [ 381.041776][ T5982] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.046961][ T5982] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.051774][ T6045] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 381.054886][ T5982] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.058223][ T5982] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.061499][ T5982] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 381.211421][ T6045] usb 12-1: Using ep0 maxpacket: 16 [ 381.215304][ T6045] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.219806][ T6045] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.223946][ T6045] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 381.229228][ T6045] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 381.232186][ T6045] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.237187][ T6045] usb 12-1: config 0 descriptor?? [ 381.324375][T19415] chnl_net:caif_netlink_parms(): no params data found [ 381.571503][T19415] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.573780][T19415] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.576438][T19415] bridge_slave_0: entered allmulticast mode [ 381.579789][T19415] bridge_slave_0: entered promiscuous mode [ 381.598504][T19415] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.601284][T19415] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.603710][T19415] bridge_slave_1: entered allmulticast mode [ 381.606696][T19415] bridge_slave_1: entered promiscuous mode [ 381.671863][ T6045] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 381.674731][ T6045] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 381.677456][ T6045] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 381.680224][ T6045] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 381.685170][ T6045] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 381.689641][T18893] hsr_slave_0: left promiscuous mode [ 381.690521][ T6045] input: HID 0955:7214 Haptics as /devices/virtual/input/input46 [ 381.694607][T18893] hsr_slave_1: left promiscuous mode [ 381.697465][T18893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.699223][ T6045] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 381.700692][T18893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.703340][ T6045] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 381.738053][T18893] veth1_macvtap: left promiscuous mode [ 381.740381][T18893] veth1_vlan: left promiscuous mode [ 381.742136][T18893] veth0_vlan: left promiscuous mode [ 381.800614][ T5972] Bluetooth: hci1: command 0x1003 tx timeout [ 381.800912][ T5331] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 381.814472][T18893] pim6reg (unregistering): left allmulticast mode [ 381.886636][T19413] random: crng reseeded on system resumption [ 381.931793][ T7296] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 381.933934][ T54] usb 12-1: USB disconnect, device number 7 [ 381.936563][ T7296] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 381.942192][ T54] ------------[ cut here ]------------ [ 381.943959][ T7296] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 381.945714][ T54] workqueue: work disable count underflowed [ 381.945789][ T54] WARNING: CPU: 3 PID: 54 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 381.949565][ T7296] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 381.951537][ T54] Modules linked in: [ 381.962120][ T54] CPU: 3 UID: 0 PID: 54 Comm: kworker/3:1 Not tainted syzkaller #0 PREEMPT(full) [ 381.964952][ T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 381.968863][ T54] Workqueue: usb_hub_wq hub_event [ 381.970832][ T54] RIP: 0010:enable_work+0x2f8/0x340 [ 381.972751][ T54] Code: 89 ee e8 1b 52 38 00 45 84 ed 0f 85 29 fe ff ff e8 2d 57 38 00 c6 05 a0 7e 10 0f 01 90 48 c7 c7 a0 05 ac 8b e8 49 fa f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 27 c0 9e 00 e9 aa fe ff ff [ 381.979063][ T54] RSP: 0018:ffffc90000a7f3c0 EFLAGS: 00010086 [ 381.981041][ T54] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 381.983789][ T54] RDX: ffff888022022440 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 381.986870][ T54] RBP: ffff888060de5738 R08: 0000000000000001 R09: 0000000000000000 [ 381.989718][ T54] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200014fe79 [ 381.992181][ T54] R13: 0000000000000000 R14: ffff888060de5698 R15: ffff888060de5730 [ 381.994680][ T54] FS: 0000000000000000(0000) GS:ffff8880d69b2000(0000) knlGS:0000000000000000 [ 381.997523][ T54] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.999863][ T54] CR2: 00007f9f2ac1cf98 CR3: 0000000037834000 CR4: 0000000000352ef0 [ 382.002787][ T54] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 382.005522][ T54] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 382.008191][ T54] Call Trace: [ 382.009530][ T54] [ 382.010662][ T54] ? __pfx_enable_work+0x10/0x10 [ 382.012938][ T54] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 382.015073][ T54] __cancel_work_sync+0xe7/0x130 [ 382.016786][ T54] thermal_zone_device_unregister+0x28e/0x4d0 [ 382.018606][ T54] ? __pfx_shield_remove+0x10/0x10 [ 382.020178][ T54] power_supply_unregister+0x10a/0x150 [ 382.021931][ T54] shield_remove+0x75/0x130 [ 382.023484][ T54] ? __pfx_shield_remove+0x10/0x10 [ 382.025299][ T54] hid_device_remove+0xd1/0x260 [ 382.027248][ T54] ? __pfx_hid_device_remove+0x10/0x10 [ 382.029350][ T54] device_remove+0xcb/0x170 [ 382.031049][ T54] device_release_driver_internal+0x44b/0x620 [ 382.032965][ T54] bus_remove_device+0x22f/0x420 [ 382.034466][ T54] device_del+0x396/0x9f0 [ 382.035826][ T54] ? __pfx_device_del+0x10/0x10 [ 382.037377][ T54] ? do_raw_spin_lock+0x12c/0x2b0 [ 382.039088][ T54] hid_destroy_device+0x19c/0x240 [ 382.040575][ T54] usbhid_disconnect+0xa0/0xe0 [ 382.041989][ T54] usb_unbind_interface+0x1da/0x9e0 [ 382.043547][ T54] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 382.045261][ T54] ? __pfx_usb_unbind_interface+0x10/0x10 [ 382.046983][ T54] device_remove+0x122/0x170 [ 382.048405][ T54] device_release_driver_internal+0x44b/0x620 [ 382.050262][ T54] bus_remove_device+0x22f/0x420 [ 382.051874][ T54] device_del+0x396/0x9f0 [ 382.053243][ T54] ? __pfx_device_del+0x10/0x10 [ 382.054744][ T54] ? kobject_put+0x210/0x5a0 [ 382.056262][ T54] usb_disable_device+0x355/0x7d0 [ 382.057905][ T54] usb_disconnect+0x2e1/0x9c0 [ 382.059384][ T54] hub_event+0x1c81/0x4fe0 [ 382.060868][ T54] ? __lock_acquire+0xb97/0x1ce0 [ 382.062431][ T54] ? __pfx_hub_event+0x10/0x10 [ 382.063950][ T54] ? assoc_array_insert+0x11e0/0x3970 [ 382.065700][ T54] ? rcu_is_watching+0x12/0xc0 [ 382.067184][ T54] process_one_work+0x9cc/0x1b70 [ 382.069169][ T54] ? __pfx_process_one_work+0x10/0x10 [ 382.071180][ T54] ? assign_work+0x1a0/0x250 [ 382.072945][ T54] worker_thread+0x6c8/0xf10 [ 382.074725][ T54] ? __kthread_parkme+0x19e/0x250 [ 382.076717][ T54] ? __pfx_worker_thread+0x10/0x10 [ 382.078726][ T54] kthread+0x3c2/0x780 [ 382.080348][ T54] ? __pfx_kthread+0x10/0x10 [ 382.082129][ T54] ? rcu_is_watching+0x12/0xc0 [ 382.084005][ T54] ? __pfx_kthread+0x10/0x10 [ 382.085818][ T54] ret_from_fork+0x56a/0x730 [ 382.087620][ T54] ? __pfx_kthread+0x10/0x10 [ 382.089419][ T54] ret_from_fork_asm+0x1a/0x30 [ 382.091288][ T54] [ 382.092522][ T54] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 382.095305][ T54] CPU: 3 UID: 0 PID: 54 Comm: kworker/3:1 Not tainted syzkaller #0 PREEMPT(full) [ 382.098722][ T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 382.101895][ T54] Workqueue: usb_hub_wq hub_event [ 382.103512][ T54] Call Trace: [ 382.104587][ T54] [ 382.105547][ T54] dump_stack_lvl+0x3d/0x1f0 [ 382.107181][ T54] vpanic+0x6e8/0x7a0 [ 382.108473][ T54] ? __pfx_vpanic+0x10/0x10 [ 382.109871][ T54] ? enable_work+0x2f8/0x340 [ 382.111183][ T54] panic+0xca/0xd0 [ 382.112239][ T54] ? __pfx_panic+0x10/0x10 [ 382.113480][ T54] ? check_panic_on_warn+0x1f/0xb0 [ 382.114881][ T54] check_panic_on_warn+0xab/0xb0 [ 382.116330][ T54] __warn+0xf6/0x3c0 [ 382.117575][ T54] ? __pfx_vprintk_emit+0x10/0x10 [ 382.119171][ T54] ? enable_work+0x2f8/0x340 [ 382.120673][ T54] report_bug+0x3c3/0x580 [ 382.122041][ T54] ? enable_work+0x2f8/0x340 [ 382.123593][ T54] handle_bug+0x184/0x210 [ 382.125091][ T54] exc_invalid_op+0x17/0x50 [ 382.126768][ T54] asm_exc_invalid_op+0x1a/0x20 [ 382.128494][ T54] RIP: 0010:enable_work+0x2f8/0x340 [ 382.130203][ T54] Code: 89 ee e8 1b 52 38 00 45 84 ed 0f 85 29 fe ff ff e8 2d 57 38 00 c6 05 a0 7e 10 0f 01 90 48 c7 c7 a0 05 ac 8b e8 49 fa f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 27 c0 9e 00 e9 aa fe ff ff [ 382.136605][ T54] RSP: 0018:ffffc90000a7f3c0 EFLAGS: 00010086 [ 382.138459][ T54] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 382.140805][ T54] RDX: ffff888022022440 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 382.143148][ T54] RBP: ffff888060de5738 R08: 0000000000000001 R09: 0000000000000000 [ 382.145579][ T54] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200014fe79 [ 382.147963][ T54] R13: 0000000000000000 R14: ffff888060de5698 R15: ffff888060de5730 [ 382.150410][ T54] ? __warn_printk+0x198/0x350 [ 382.151893][ T54] ? __warn_printk+0x1a5/0x350 [ 382.153570][ T54] ? __pfx_enable_work+0x10/0x10 [ 382.155303][ T54] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 382.157228][ T54] __cancel_work_sync+0xe7/0x130 [ 382.158844][ T54] thermal_zone_device_unregister+0x28e/0x4d0 [ 382.160896][ T54] ? __pfx_shield_remove+0x10/0x10 [ 382.162510][ T54] power_supply_unregister+0x10a/0x150 [ 382.164230][ T54] shield_remove+0x75/0x130 [ 382.165710][ T54] ? __pfx_shield_remove+0x10/0x10 [ 382.167297][ T54] hid_device_remove+0xd1/0x260 [ 382.168773][ T54] ? __pfx_hid_device_remove+0x10/0x10 [ 382.170434][ T54] device_remove+0xcb/0x170 [ 382.171865][ T54] device_release_driver_internal+0x44b/0x620 [ 382.174264][ T54] bus_remove_device+0x22f/0x420 [ 382.176224][ T54] device_del+0x396/0x9f0 [ 382.177772][ T54] ? __pfx_device_del+0x10/0x10 [ 382.179703][ T54] ? do_raw_spin_lock+0x12c/0x2b0 [ 382.181474][ T54] hid_destroy_device+0x19c/0x240 [ 382.183037][ T54] usbhid_disconnect+0xa0/0xe0 [ 382.184657][ T54] usb_unbind_interface+0x1da/0x9e0 [ 382.186328][ T54] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 382.188086][ T54] ? __pfx_usb_unbind_interface+0x10/0x10 [ 382.189830][ T54] device_remove+0x122/0x170 [ 382.191272][ T54] device_release_driver_internal+0x44b/0x620 [ 382.193120][ T54] bus_remove_device+0x22f/0x420 [ 382.194708][ T54] device_del+0x396/0x9f0 [ 382.196131][ T54] ? __pfx_device_del+0x10/0x10 [ 382.197545][ T54] ? kobject_put+0x210/0x5a0 [ 382.198930][ T54] usb_disable_device+0x355/0x7d0 [ 382.200444][ T54] usb_disconnect+0x2e1/0x9c0 [ 382.201822][ T54] hub_event+0x1c81/0x4fe0 [ 382.203138][ T54] ? __lock_acquire+0xb97/0x1ce0 [ 382.204931][ T54] ? __pfx_hub_event+0x10/0x10 [ 382.206613][ T54] ? assoc_array_insert+0x11e0/0x3970 [ 382.208268][ T54] ? rcu_is_watching+0x12/0xc0 [ 382.209758][ T54] process_one_work+0x9cc/0x1b70 [ 382.211326][ T54] ? __pfx_process_one_work+0x10/0x10 [ 382.213003][ T54] ? assign_work+0x1a0/0x250 [ 382.214421][ T54] worker_thread+0x6c8/0xf10 [ 382.215977][ T54] ? __kthread_parkme+0x19e/0x250 [ 382.217391][ T54] ? __pfx_worker_thread+0x10/0x10 [ 382.218799][ T54] kthread+0x3c2/0x780 [ 382.220032][ T54] ? __pfx_kthread+0x10/0x10 [ 382.221903][ T54] ? rcu_is_watching+0x12/0xc0 [ 382.223802][ T54] ? __pfx_kthread+0x10/0x10 [ 382.225461][ T54] ret_from_fork+0x56a/0x730 [ 382.226974][ T54] ? __pfx_kthread+0x10/0x10 [ 382.228496][ T54] ret_from_fork_asm+0x1a/0x30 [ 382.230056][ T54] [ 382.231662][ T54] Kernel Offset: disabled [ 382.233026][ T54] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:30:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc9000374fa30 RCX=ffffc90003750001 RDX=ffffc9000374fa38 RSI=ffffc9000374fa00 RDI=ffffc9000374f100 RBP=0000000000000001 RSP=ffffc9000374f078 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000010767 R12=ffffc9000374f140 R13=ffffc9000374f0f0 R14=ffffc9000374fa30 R15=ffffc9000374f124 RIP=ffffffff8b94f088 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5763f17d60 CR3=0000000032c6e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57633b76c3 00007f57633b76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1ee53f40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558fe15835 000055558fe15710 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558fe253ff 000055558fe23fc0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000806060113fc 0208000590030480 0405800300040881 83909a0800010000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000806060116f200 0200070410001003 0610000003001000 0410000280040600 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000806060113fc 0208000590030480 0405800300040881 83909a0800010000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000b88030000 000208060b800308 0480020505800418 818392ea08000100 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010ffd8080041280 85bb9e0800010000 04080606011ee800 100005b982080001 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffffffffffff RBX=00007f9f29fe5fa0 RCX=ffffffffffffffa8 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=00007f9f29e11f91 RSP=00007f9f2ac1cff0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000246 R12=0000000000000000 R13=00007f9f29fe6038 R14=00007f9f29fe5fa0 R15=00007ffd0931f308 RIP=00007f9f29c54aa6 RFL=00000286 [--S--P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9f2ac1d6c0 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9f2abfbf98 CR3=000000005475e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f2ac1cf90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0931f816 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0931f816 00007ffd0931f81c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f29e12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f29e12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f29e12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f29e12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f29e1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f29e1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000430c97 RBX=0000000000000002 RCX=ffffffff8b94fb49 RDX=0000000000000000 RSI=ffffffff8de52e89 RDI=ffffffff8c163400 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90ab7790 R15=0000000000000000 RIP=ffffffff8b94e68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9f2ab156c0 CR3=00000000329f7000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 11c2000000040000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014010000000000 000800080007000c 00080000000c0000 00cc000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 11c2000000200000 0004000000100008 0000000000000004 000c001a00100000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006000603000000 000e000000080004 0009000a00080700 0000ffffffda0000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03e6000000080004 0000000800080000 0024000000180000 003c0000004c0000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000000000000 0000000000000000 0189000000000216 0ec0000000180000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00200000000e0014 000c000000080004 0020000e00000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a000807000000 ffffffda000003e6 0000000800040000 0008000800000024 ZMM25=91d80ff391d80ff3 91d80ff391d80ff3 91d80ff391d80ff3 91d80ff391d80ff3 91d80ff391d80ff3 91d80ff391d80ff3 91d80ff391d80ff3 91d80ff391d80ff3 ZMM26=601e0c5c601e0c5c 601e0c5c601e0c5c 601e0c5c601e0c5c 601e0c5c601e0c5c 601e0c5c601e0c5c 601e0c5c601e0c5c 601e0c5c601e0c5c 601e0c5c601e0c5c ZMM27=fb78597efb78597e fb78597efb78597e fb78597efb78597e fb78597efb78597e fb78597efb78597e fb78597efb78597e fb78597efb78597e fb78597efb78597e ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3814000038140000 3814000038140000 3814000038140000 3814000038140000 3814000038140000 3814000038140000 3814000038140000 3814000038140000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8564c610 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc90000a7ec88 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff3623076 R15=dffffc0000000000 RIP=ffffffff8564c637 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9f2ac1cf98 CR3=0000000037834000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000002fefef8 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09e1d07f70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc63f518a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc63f518a6 00007ffc63f518ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09e0e12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09e0e12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09e0e12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09e0e12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09e0e1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09e0e1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000372e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000