last executing test programs: 1m36.629890841s ago: executing program 32 (id=43): r0 = memfd_create(&(0x7f0000000c00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5Zy\xc2\x964\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13 zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xeb\v\xf8r\x10 >p\x95=N\xbepd\x99\xf9\x86k\xdf\xc7w\xff\x8f\x98\xd8\xe0C\xb2-[}\xb6\x88E5\xa0\xf9\x9f@I;\fn\xed\'\xe2\xf0\xe7_\xfa\x91\xba\x81\xbb\xda\xde\\\x82#g\xd1\xbb2\xd1WI\f\x9e\t\xe8\x1c{\xcd\x905\f=\xfe\'\x1ax\x91\xb7sB\xecN\x8e\x97$75\x16\xaaJ\x1e\'P\x12_D\xa2\x19dC(\xb4\xb8\x87]\x91\xefggP\x7f\xc4\a\xff\xcc\x19\x15\xae8m;nH\x9c\xda\x95\xf6\xe8F\x99\x99\x92M\xd0\xe5:\xcb\x19\xb4\xd2\xc5V\x8f\x8a\x1f\xe6\xc0\xfb$\xe9d\xe3\v', 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001814030025bd7000fbdbce2508000300010000000800010000000000"], 0x20}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc0405602, &(0x7f00000001c0)=@multiplanar_fd={0x0, 0x1, 0x4, 0x70000, 0x3, {0x0, 0x2710}, {0x4, 0x8, 0x1, 0x5, 0x3, 0x3, "100c21b6"}, 0x1, 0x4, {0x0}, 0x1}) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x200, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r6, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) r9 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) setrlimit(0x40000000000008, &(0x7f0000000000)) (async) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xf, &(0x7f0000002700)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}], 0x0}, 0x20) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1412, 0x10, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4010) write(r0, &(0x7f00000011c0)="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", 0x1000) (async) write(r0, &(0x7f00000011c0)="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", 0x1000) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m14.063877909s ago: executing program 33 (id=470): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x440000, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x440000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x168, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x168, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000618110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000618110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r1}, 0x38) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0xea) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 1m13.844095983s ago: executing program 34 (id=477): r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) close_range(r0, r1, 0x2) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r4, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x800) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000001640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x99656c18d2b2bf9b}, 0xc, &(0x7f0000001600)={&(0x7f00000002c0)={0x1308, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x12bc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x93f1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xf1, 0x4, "fc0278d7ee24d6a0e42472eb3fd714cd61fc0a8d3dcc4ab2723d30352c428f7b68d5db0b4d9da14e266b8a07ce5712261e40c412cc632f24b4d599c198ebffa51739ef29f5a095d2a8797b14844e4497c3c365208972edb5e2705a53e35c1134a84109a24d6630be9f2952cc09bf9459c281601814ad75e88ced0a422faf0738259909b65acadb3bd2571feeb55c3822c5b65faaa0220e4bd268e0681c5a21340b2db736f255e84c04622c27cce9c6fadbedb9841cdd682eb53ff377ce868c917a8ced3097d1463e59b3a387c782e321b72e7b9c2e5210f35d2341e2256e18d4224da5bb79e7a443279e5d6afb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}, @ETHTOOL_A_BITSET_BITS={0x190, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/selinux/enforce\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfab4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '@@.^(\\+(-^\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1004}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/dev/mISDNtimer\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xe7-,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x99\')*{\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/selinux/enforce\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}]}]}, 0x1308}, 0x1, 0x0, 0x0, 0x80}, 0x20000014) r7 = socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000001680)={0x0, 0x0, 0x3, 0x2, {0x1, 0x800, 0x0, 0x49}}) (async, rerun: 64) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000016c0), r3) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r9, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x300004a}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, r4, 0x7, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x48, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1eb67bee, 0xb}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x14008000) (async) syz_io_uring_setup(0xffa, &(0x7f0000001a80)={0x0, 0xfae6, 0x8, 0x3, 0x1de, 0x0, r3}, &(0x7f0000001b00), &(0x7f0000001b40)) (async) write$selinux_user(r3, &(0x7f0000001b80)={'system_u:object_r:crypt_device_t:s0', 0x20, 'unconfined_u\x00'}, 0x31) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x4c, r4, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x65}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0x1e, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x9, 0x2}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x811) (async) socket$alg(0x26, 0x5, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r9) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001d80)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000001fc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x1b4, r11, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x200, 0x7b}}}}, [@NL80211_ATTR_FRAME_MATCH={0xdc, 0x5b, "c2438a97fd9b9db6cd7dfc5112651b0725c8a50fdeafa7994f61e278eccfab8fef0ff616dda222aedfde71ed68679d6226b4a1dea4ef0869baf14679f9d16afe5032ea4bce38e226142486c3b5478b275a8ac0398e5c1bca46479713e96b6db3c2383531d71cc55fc19f1bf59ae5d8811b52b3fbf8015653c4c2753b42e08851d031ba368e90e9ee819d69bbb5216bdccaeb709eae296439ad98065a959f9b7d5defc2de91631325ba5d5585cf8b7065bd39b14ddf7aa444b6c4906baf60611637988414dc39ef1a9cf55256b4ee7efc53015b85639eaf91"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x10}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8000}, @NL80211_ATTR_FRAME_MATCH={0x96, 0x5b, "a39bb9b07c87d15f1a7ae820d217530a47be6dc592df1f18c64a3fac8aeb01d0f1e22340758c92201c54cb8cdd14cb12a797a896756cc89a36e3368481a781274be7aaa98eb4cea386ee6b50c3ac3d4ae5722f6cd0ecd01223a0b73a2750477274890b36448889ebb603471e93fdadddb0a29a030ed7b797a2a7c251c93cef13c392e88c6b1f14362319a12a1baba74cfed6"}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002000)={{0x1, 0x1, 0x18, r9, {0xffffffff}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r3, r13, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000020c0)=[@text16={0x10, &(0x7f0000002040)="0f2021660f38155b0036f30f1ef266b834e4d9050f23c00f21f8663502000e000f23f8360fc72fba4200edb815018ec866b9aa0800000f3266b8010000000f01c1f20f1246d5", 0x46}], 0x1, 0x16, &(0x7f0000002100)=[@cr0], 0x1) (async) ioctl$KDFONTOP_COPY(r13, 0x4b72, &(0x7f0000002540)={0x3, 0x0, 0xd, 0x1d, 0xb3, &(0x7f0000002140)}) ioctl$VIDIOC_ENUMAUDOUT(r13, 0xc0345642, &(0x7f0000002580)={0x0, "769aac5b31891305ed9439c456a2303a2a577a61f40e410dfdb9252b825c1c62"}) 1m13.552778199s ago: executing program 35 (id=483): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c04"]) r4 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x3, &(0x7f0000000540)=[{0x4893, 0xe, 0xff, 0x8}, {0x101, 0xa4, 0x6, 0xfff}, {0x2, 0x6, 0x8, 0x5}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0x40890) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) r6 = syz_io_uring_setup(0x82e, &(0x7f0000000500)={0x0, 0xcd1d, 0x10100, 0xfffffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r6, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') syz_emit_ethernet(0x35e, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2ba, &(0x7f0000000200)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x2, 0x6, "5b04fb", 0x284, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, {[@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x6, 0x66}, @hopopts={0xa9, 0x15, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xb, 0xa2, "dc5527ec3d62bc599c0c8d33446f01faf7792c6f12431c22a7fa159831bce399f8c75f42d71a2ef9c09ed395cb4a1b9410c5c15e62a670a2fb31b39922080a247cabcf3f9f6c4cf06f51906b58617b8de6a1cc0adfe87608c580119f8703051966de3f2f5c4aac9a80253568c03dc80df4c1ef7a2a991df10d078bcd632539470e9a41014561fb7158beaf03929815d91a3bf98c79b1a31650f61d38a671c5421bde"}]}, @srh={0xff, 0xc, 0x4, 0x6, 0x4, 0x0, 0x40, [@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00', @empty]}, @dstopts={0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x6}]}, @dstopts={0x29, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}]}, @hopopts={0x3b, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x6}]}, @hopopts={0x2f, 0x1c, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x7, 0x3, [0x4d2, 0x3, 0x40, 0x5]}}, @generic={0x81, 0x96, "b8ded736171cab1d639fc1165f426b37ecbd997050ec63e3a65a6f21932f1581c38375c65343e556811b6969e0cb94b7de1331fe1a4b128955b6b08e1f2ba5fcbbf7bb74e257bd1a67fdae4d8546f371eeb64dcb7ecd50fd7c0cd59c5e2df2a49ebbd904320f6225d454f2b8af86e36a2239f777606d03bf218bfdfb20f7bb5b5ae048decb2e31cf9712b3faeb08fe2bc0abad917135"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xdd3}, @hao={0xc9, 0x10, @remote}]}], @mlv2_query={0x82, 0x0, 0x0, 0xefed, 0x5, @private0, 0x1, 0x1, 0x6, 0x4, 0x1, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}}}}, 0x0) 1m13.029918649s ago: executing program 36 (id=487): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2173, 0xffffffffffffffff, 0xffffc000) mprotect(&(0x7f0000008000/0x11000)=nil, 0x11000, 0x100000c) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0xc0}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000180)="a4", 0x1}], 0x1) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046}) writev(r1, &(0x7f0000000040), 0x5d) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f0000002140)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x441, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, 'VB\x00\b\x00'}) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2d, 'cpuacct'}, {0x2d, 'cpuacct'}, {0x2b, 'cpuacct'}]}, 0x1b) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x7ff) 49.584906741s ago: executing program 37 (id=785): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x40) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000002400)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000000140)={0x2, [0x4c, 0x7ff, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x80}, {0x3}, {0x4006}, {}, {0x3}, {}, {}, {}, {0x4, 0x9}, {0x0, 0x10000}]}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4e2540, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0xfffffffffffffff9}) 49.243329654s ago: executing program 5 (id=791): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2d, &(0x7f0000000940)={0x9, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0xfffe, @multicast2}}}, 0x108) (async) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x74, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x3c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}]}}}]}, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x19, &(0x7f0000000680)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd7d3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_fd={0x18, 0xb, 0x1, 0x0, r3}], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) r11 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e24, 0x100, @mcast2, 0xf}, 0x1c) (async) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r12 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x80000) ioctl$SIOCX25GCALLUSERDATA(r12, 0x89e4, &(0x7f00000001c0)={0x2, "c518ffbb767d77491583c9af4534dbe4a6749524e9f3ccf456351878ead83aaa690c3d778c44106a33c20e34cd1ac75680d9ec79e6ef712489f0388983fb970034c368e0a03e0c1e4c33a574e9845be37470e5d16e67095b9dbc3d9fc37e2c1df42ddc1eac804dd00bf62195f6fbd349ee1fe6da60e0e291d5b908c3c31e413d"}) (async) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/192) 49.14460778s ago: executing program 5 (id=794): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x0, 0xc, &(0x7f0000001400)=ANY=[@ANYBLOB="13f2c117aa2b77b255dc5e814781d8046fa99932ce027a6d793c745adbb55a9198f6d190d09996bfbe00f1ae53051c3c4558dcdd54d74061c820de60d1e083169cfa2415f178c12c5d6e4eb85f91bd13f92212f3363a3ebd9af8f76343b97c76ea71c69c5c95b70012ed324c6c0cf614a38467740f4c2a70c1a4707dce2b1c84f8425e24a51b1e820253c6724f72a5c5659e9e620b9380169393feee9cdf49e32774e682d8d1d6ed9c49bcd98b312b212041522e14cba1550b7cd7f7b22f1fea1381f992975d3409866d49c52fd13684e3ee59f454fea596d4ef2006eafa0103ddd4fc71f192ac5e2bd33562260a198ffc7470c9f59d9f88656f821801f015ddc90f9d1e8deb33a62cf2d5003a7a30435464c275930c425b82f34ad8d05f05f70a6b45314dc94a6b6c3744b441e8ff3c62b22df3ac066efd4979a5b0de34fbbf66162d21edf380187af96cf88ed4bb91a3b0a3cb0c39ca0ab00d1d8a60780548baea163e73799081e2e099f4f0bb546c45a995d03f1568df793a96ec2c55cebbbef8dfd9506bf0d627c52e24b2dd9f1045aff00b27873a65b67df02738e1ca543f6ecbbc06668a3dc8c20eb1cb8ee295859ab7478b9b964533827f0537fc2ec5ac7b2578970b7181ffd4aa7faeb713914c9360b71fa36bd1d86149a1f6c9a5607273788bc5428db9444d5bf33171571ca60697a4648212b693a76a8bb2570ed740ab43bedd1eed28dae4bfd39605cf1e68e4fd89c0a87474f309b6d6cc6993f558d43d499bfa1b1f92c89c69aca66776c5dfe89f8e81c6a28057a8bda81c929bb46148f83c1990b7dbec263d365c246008d61657e5edeb8bd6e8742af8a12bce8465c74ef684eb20e60f8f650b397c75f2531ce540ede60abe563b75a94a4dec63173a656ad6d526df6be8e9f2499213139ad633b091cdb9f60526000436f43b0b6ac5e284e8b498d405354fb8f6f4c477516101f745242436bf26516b4805cc064b3713dc429ba93266cfeb122d10d14914f034c4c27b32256f5179aacb3b0bd3aab806d33e256d249ed498139c8f0bfe10d6841e4658204c423cf7d27b557f918c886f763a6fae005080f6bddd792e1992d9588a7f73f9a4b2db7203b5f0e39f627694e6f5b2fae13dcee6a702ed77e4b2c991484090f00eb2cf8763aeaa454bc151da313adff276b6bacec8c2ab8e0f242b3d95dba1f6275e05282e4c3aee6fa5f4a4421993187eabe8aea528e4803247da5a5b39df6d1331e860c4113086e1378569ae8b595241020b7c5ea986af9f910ae76bd8d41fa0841bc71ded09f82a41bcc42731a947b362feb4d5c0c898ecaf35d11b4ef364a6f28f96c7be3eaeae8e8fd57b87c60704cfb4160dbfb54a769c1b7729452115e3c852fb41e0e8cfca28ee40a0b598a3f75493035649dc80bbc3b6df8d0ea4dceb14c60d79ddf1ce79c9cddceba88321e35bf40785b410da1948d3130b0d7fa3317f56b8f2eba226aa3e0a7163fb0073ce4f318a2a16463c77001a963851c68a5c2bdec5b04d625feb5d3e8ed3d5fad43d6aa600f9bbcb514be366b55c43f17399e1426c26d699eb3a53e3085b83037cdae7329b2dfe6aa3d26d2eb54cb68d87223582b517381e3d547090765576597135b09a94062b87f566c9d613eb752ed9aaeabfb398f0443b10e7894600fc90af0bc7c25224424e11ce4098a1b113bd802f278df655018e4cfdb3fd2c56066eda7435579bcf43333102cb73d0c36192845e40455e615aac1861b101864dff6b0181ccb14545d3f4fc6aa05c9ed16d6f8ea81e5498394a85e7eb80a53bc841a678e221647e036ea16820dbcbc42110cdbae109ac5f508a811725505cb056a7b6b109006a68e603bdeb3b9a73cf33df2d26e31fc8dc55652219e72f06edd55ebfeb2831c3f1623f586170c1e25dd52cf646167a61797c4f3a5cddd353ddefccf2f1c31ad7ff4aa004b37d14ac6d88cf7da82eb65a35501ee10a05490215aaffb16fc4f01c2ab704b002ef1e01d8b7e56667240438fe43b171d3b7b7a3084ecb68a49065b88775447f545f3c241f22a2f2b70e10eff19e5f30bdb7c3e4dbbb452b3c2c18d5321e3a81c193d80e59663573820b5c951bacffca14698734215b1cb4d3876abca307e70a4ca96c986c5e211e0c869d93cf334ecc1e3d266484d07bb522f1a7d2295801e271972052c089bba64d6a71b72c3d421d50f6b0b1464be817d2899520ba1f05d5f7b341c786f578bc9a7a5cfcac49cfd2871429da1385cc82257a77231f2631e6dedc9e0f94fb7a3baa00ef3f3dcf530ed12b3d9dcd05584dd9a20b82e72d8d2954a5b1e75eea6f6f237019d3c9ebecc7aef28885106989424bf76040844c965b580a20e03a6671890e9aa2b6cc771a649b602dadd5aeb1baa4d1cb0532ba0e02bcb61e6d004b403e0186d3d2df5d0f2fb9a7434580a3251ecc9f40ac1def0902032ae678319149cc4e72aecdec6b3c78d631244e63cfbfa7a933a6f19c4734f530de409b20978af65ebd461d55934c221a3333b29869eed12ad348efb811815f9b5ed6c816978efce44a7e9d282ae74ee025954da8c7f8961b83c20c86707074201b698074a8dd6d7612cff38114cb1e37a8b5c7158561793e662ca1417f3dcb3c2871c8ac81f45a2b44cf105d69ab19d15f82d9d7d6a2f21dcb646d42ac70bc2fadf601bfddd3122ee34e6ad272afa44ea501623e05a1217824db81b9cca8d802496557b9ef96af256bbf3d96e96fb04388100db698265cb23f5e94180ccf7bd45d428a8201a5f8d01f33448281f56bdf9009fb5dcc3d32011c5dd21c8062c3adcd54b0cd4f20ce4d83f976fc3bd113084d2cfb233043b9903e8ed884f11b3f67f433fc05493627cbae6ca5354eb807ace88248e9ebff2e86c476ce939913a182575853d43a5ba6e03bc23a8e17413e175e43b1835cc3cb28fd1fb1bc63aca8e1b834eeb3de3a7aa27819ddb9863a85dda7508bdc905cb1f4e0ce72fb681f17c8a340222637a36dffdbfafbd48f4c5c09638df5992736174cd216f9685f4c1db1f2b14363937cf05d8e8391aa85cac0b3df5e3d4da7f5a59cc4030989d847a758906d8858b6c23b9bd52087cb899f30ec2c2379dd8571bc2a9c8ede63c7d04d8de197a50830d3d05ca17e9c636b1aa1a611fb1090db4f7f9adca11a720fab4910917767e5cc3b61a21aef27be084710b53553641956916cc5adc37dc393972a1e282e676294b9515333f55a509e55b7a095a208abb703dbf896b39e60435074becb5582942a2901b55996562ca3c8cc49c69cd8f6fa59284520e7df2997194569fdd77442cc28113dd7ca0c1cf8db82da050698be7285e3ae496ab624ed7b6b631e4270236687bb6f3afe2306488b394bfb55d98b1509ce4148cbb30c55eee7bbdf2ba38c27231b61cb703f2450ad2d42463f5a0a5b2998731f9b09011bf9eadc1d60d2e52b156bb76cb7841e55f67e4f0e57830db93000a2c77662070954dc585df4cffad1e09c01f9aceb480fe1a1ac0fbb6e7bab23f19cc10fc149d428494e9d13baed63ee7e62e946748c21b4faef12f4b56d86edb4857e9ca9f467e14a591b8d0c53b006b7d784ea5a673243dab22f35e5ff88f06b91b2c70d661f1a2914e320240a50afd4fa2cdb352055af3005c7c6b24fd15c2a1e122cb2d78e67769a9d76692717c8a6ab3f97e31bfaab229396f9fba58685b950cbb04ffd383842770d020ce1f59951921aef9f04ddf52854e5662c5b23950d7fe60992bd19e90e91a34f2a14e7bbe909038259ca4e940646fe90afff50f24c18817c2ca2d0f88fe57635f23845d6cb108dfd54903ba0d7922ca93d6342dd094c86deb3ed3d6dbe2190307ebab12730dc9dc24bf154655e3fe6528df731e92c6f18f3154a952c92935e531e02f79b81802052ba471394db29addb6162e2098b4266f2d04cd3c80d8a5c9a4c6c2fc28889a60667329397cd767d946a92c56d305466634e21377fd0bc49d43e15d3594d0d104f2a7981c0c13b0ff3b0005acf49b09c464d45cc9fbfc17d2fab7f8b33ff450d3aebbb1f9f1caced0190bfb9838e546fbc5a77b225c94ac2fd5b8f5ed8d9ec452600ee53efd8d81915aec3e4d092e845b94fe35452b4f3a968fa5685244a67153d353685e532d42d7c45256d0f010af1e3acf1e493fe031d73d37c28612f23e38e99257d52d395ec0ef365be2984157a4422420ba703f5d49ccca3eafd4d444aa9e4fb7976b9ba776abb93c4806878a750cea0e03b203e6b89dfb41a4d4bf8df571765f8c26fd8d3b95d7a2c900fa11b2a53d540fe71f8897fc18d774ec0f7faea10264252181be1e0a8059c30645000090e71876ff02b6b4d8f3c72616e2a0052ab5d03d82cdf77b84fe939c4f60e1cd298fea1cb0f5e4fcae014eed83233f610d26ef9c68ed1b6329c326c3fb97de1b72e529c69f93839fa5441c5705b123fc9238cba8dd7f980a7fde480ca698cb4528d20087d04bbf83e20fe73b8cbbec37bdaa59284577bb95cb7ccb2b0425d94c814c39dfc80cf4b96a35cee14bb40a1d5ffa79d062794fc19185a02e2b2fbd4328cd25dc0c9e097f8f0e8ff0fbb9e041a48ff3834fbe95c01f8ef39f87d344ddd67fde588075c09a27ea24fad896cfb001a1c35e6811fce1a892fa76765cc740bfae75e87a7e50dc5f1a351f7a09c9e70ba8f7618909da1c6e3036a809a46d5aed84d930074a94b5f9a592dcc0c01134bfa62d6e5afd67ef845c1259fd1861d169d418a956c8a3296ba4785ba451661d619ac937df4bc39b02cc21d791b9825c75ca6370750eb6c029fccf4f5c9608449eac2ea6ae077cca48c1aaff6c4c2758eeb5b0c8a4920cdbebdd13dcdd77adbdecc0ee0c9b814aea93e7acebd69670510c1a6445246d4ab65db42ffb1f550977f843363baa86dd1dc565de07c682bfdfc4cb1cc6751e99258a87632dbcff722d521dfc13698e3f546bcd4b992f7015853fd9d51ec28a55157577e14846092718213ece3175c35d84ec8ebb251b77b50a8f2feb033ea9f92a297b291d78b495b0e31773a311c93f4012bb0ccd50d1be1c0b2c637790d653a6e6ace01b8c4e5f0baa952c44cbaec1307f35ed99645b451e1ecdb9ef7231b605ead600e7197b0de347c9503f96e3f439011e6d7945b6040b5ac5aaa04757d3cfb3da311de70168335ed9ef94f2232cb14083bfc5946c96993ba7132da964bc45ce1fe7b1e21c51421ebee34386ac0d91da8f69633dcf44c73dd6dd9ef2807de8fbd2c5201f06077d87fbb6cd223fd0747984882b92fd608c6d2209d5cf2e268261d1cce3b8fa8f42189063ea360d1918f3c29419c68834aaff5295cc6f1912116452f8d8451bb7d32f89022a968e20208240a2e57e1f55b8646b1e963e7a8cb7cabb7ff6d9259504f4f8f05d8c8e6b8aafc999544d35f7be7e08e380412b48ce5e92bc08874113529c0ebfa32636a66325ea3c77eec12c257b78edacca9c48f91a9420c630241b46cfe21c11f17f235ea8e54c7733e0cbcd81cdb1cabdf7c05353362de7831fad0fa4522723ba217441ffea824ab2546c45b83819f6df96e92666e3508095a591563f69157e1b114440a1d069e4ca53edcb1627683a1c39d5793642eb1db4a3eca651f71ebceac62b80a52dba56e991527d47fb7c2bcbe90ffa6148c3e4b19b420f288bc8b7dd3bf86f440cd1393fd0536e07c959188c42d8f4f617af71916436216bdd6f315daa03a609013edf7ec56cb3ed83de2697d1347de4b24bc23a77974dfb9a96b91d1b9", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e8500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000, 0x40, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$AUDIT_GET(r1, 0x0, 0x40010) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f000080d000/0x4000)=nil, 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x80}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001200)=ANY=[@ANYBLOB="587ac8cc6de83707f118de504512e73964fce63fbe20472111823f147f835dc3665a3dd816dbc62e1cdb5fa533a1939a28", @ANYRES16=r6, @ANYBLOB="99742dbd7000fbdbdf2515000000140001800d0001007564703a73797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) sendto$inet(0xffffffffffffffff, &(0x7f0000001140)="eaedc54dc9dd37a911162a3c52d59ee540a4cd090c8e034120d46bad3f8ded27a52b03e717f986f978", 0x29, 0x200080d4, 0x0, 0x0) bind$ax25(r7, &(0x7f0000001180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0xffffffffffffffa0) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8}) write$bt_hci(r8, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x7b90, 0x7800, 0x3, 0x73, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x68, 0x0, 0x6, 0x29, 0x0, @multicast2, @rand_addr=0x64010100}}}}) 48.954008818s ago: executing program 5 (id=795): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000000)=0x10000, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 48.852047428s ago: executing program 38 (id=796): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xea4e, 0x0, 0x10000002, 0xbfdffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) shutdown(r0, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x580, 0x248, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x0, 0x0, 0x42}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x5}}}, @inet=@rpfilter={{0x28}, {0xbc}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@remote, [], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0x71bbc35a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000feff000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0xfeae) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xea4e, 0x0, 0x10000002, 0xbfdffffc}, &(0x7f0000000040), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) (async) shutdown(r0, 0x2) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setresuid(0x0, 0xee00, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x580, 0x248, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x0, 0x0, 0x42}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x5}}}, @inet=@rpfilter={{0x28}, {0xbc}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@remote, [], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0x71bbc35a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000feff000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0xfeae) (async) 48.345186113s ago: executing program 5 (id=801): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xe, 0xb09c}}, './file1\x00'}) 48.29587708s ago: executing program 5 (id=803): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) rt_sigaction(0x19, &(0x7f0000000400)={&(0x7f0000000000)="676466f087bc76ded361b62e26c07fff00c4a3a1cea37b07f38af90000d3a41039000000f344aa643e3ef08504dc8319b4fe00c4011d1da1956ce08f080895dd638f4818ee16e6c442e13ae4470f69a342cb0000", 0x1c000000, 0x0}, 0x0, 0x8, &(0x7f0000000440)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x410, 0x130, 0x218, 0xc, 0x328, 0x410, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff013000"}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xa2) r1 = memfd_create(&(0x7f0000000480)='\x00\xac=\x9d\x00\x00\"0\xc5\xe1\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xef\x04;s\xe1\xc4\xcf\xaa\xa0\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbc*A\xdcq\xb7\xc1\xba&\xd1\xff\xffs\xf1\xc3G,](\x1dA\x8a\x97\xb1\xdb\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf\x00\x00\x00\xe6_\xc9n\x19\x12\xb0m\x06\a\x00\x00\x00\x00\x00\x00', 0x5) fallocate(r1, 0x0, 0x400000000000000, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = socket(0xa, 0x80805, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x4}, 0x90) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r0, 0x0, 0xffffffffffffff3c, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) clock_gettime(0x1, &(0x7f0000000080)) 48.215616149s ago: executing program 5 (id=804): r0 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x3f, 0x501200) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000006800000100000000ffff0a000000000000000000d11f8753d9a6c55377bdd728dd53be323c60a1cca99df0751eadba98e92a213ad652c51e2ed3e542a30846a38eff9b8384840fb203b2d6d413e0776c2dcc4cc13a5d8356e76891110929762633e4b7069586fc4a3376c8110baeea5ec28a180bfe7d59"], 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x4048040) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x1a, 0xa, 0x3, "b75c89e7a20c8eac1638b5394c000000000006000000000000e8ff00", 0x32314d54}) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000300)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x6a00, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x300, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xfff1}, {0xfff2, 0xffe0}, {0x6, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x7a26}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x50010}, 0x40008080) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, &(0x7f0000002180)) r8 = fsmount(r6, 0x1, 0x8) ioctl$SNDRV_PCM_IOCTL_STATUS32(r8, 0x806c4120, &(0x7f0000000240)) 48.16920523s ago: executing program 39 (id=804): r0 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x3f, 0x501200) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000006800000100000000ffff0a000000000000000000d11f8753d9a6c55377bdd728dd53be323c60a1cca99df0751eadba98e92a213ad652c51e2ed3e542a30846a38eff9b8384840fb203b2d6d413e0776c2dcc4cc13a5d8356e76891110929762633e4b7069586fc4a3376c8110baeea5ec28a180bfe7d59"], 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x4048040) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x1a, 0xa, 0x3, "b75c89e7a20c8eac1638b5394c000000000006000000000000e8ff00", 0x32314d54}) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000300)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x6a00, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltfilter={0x34, 0x2d, 0x300, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xfff1}, {0xfff2, 0xffe0}, {0x6, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x7a26}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x50010}, 0x40008080) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, &(0x7f0000002180)) r8 = fsmount(r6, 0x1, 0x8) ioctl$SNDRV_PCM_IOCTL_STATUS32(r8, 0x806c4120, &(0x7f0000000240)) 48.125433225s ago: executing program 6 (id=807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000240001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags}) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x40400, 0x0) ioctl$CDROM_GET_MCN(r4, 0x5311, 0x0) ioctl$CDROMRESET(r4, 0x5312) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x2, 0x0, @d}, 0x18, 0xffffffffffffffff) keyctl$chown(0x4, r7, 0x0, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r6, 0x3, {0x1}}, 0x18) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$sock_proto_private(r3, 0x8b23, &(0x7f0000000080)) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r2) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="280125bd7000fcdbdf252b00000008000200", @ANYRES32=0x0, @ANYBLOB="b673087a805a8e980d7b4da944b190356b26ce5a5d3279f3d6134c941f7805764a34dc98aaadb1c09219baf172f80738ccb5e5945fc72f94869a1b1dace83ff2d75d2adced27d8449b3450a3c7b39fa3e687d382a8c314680b5705672a31412855a4cc5ca35a1be22f431b59611b17b4586fd7a906ee5fc35b41393c4b1e3e077f865b128e58fd717a1a59b41371c9877f7711c61fc6f156869dd4cd4007ab1e9126db727deaafc60b46139d3ca55fc0374345c9def1ff6f68e3ba09aaa06eac9a1d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r9, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x40) 46.245918186s ago: executing program 6 (id=808): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) (async) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) sendto$inet_nvme_icreq_pdu(r0, &(0x7f0000000340)={{0x0, 0x3, 0x80, 0x9}, 0x0, 0x0, 0x3, 0xb}, 0x80, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) (async) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x40046103, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) ioctl$BLKDISCARD(r6, 0x1277, &(0x7f0000000400)=0x2263) umount2(&(0x7f0000000100)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000c, 0x31, 0xffffffffffffffff, 0x0) 46.032427037s ago: executing program 6 (id=809): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0xffffff72, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008000740", @ANYBLOB="e79990d6408b38ce3865f6c6d736cf13337dbe1b9ea348c5fcf8417dfe7806b8c2c91efc684216b5e3790f1d3e050b606334c057c11b1a7d990c83462b02f356f0b40a1fe5c977af4196b5849091857d0b77c0da323f982c42e3c1cd34a09936b1ca614dd3289fb56b1d11c2b1fbf2869c1afd6f28cffc429d78e107238f22a51e53c5a4d3ac186e40e0fef27ce83fd44a1302ea10a7ae59758f26252a5cc36e07e0da5a6141c0c6a12128c0233d243a4ef41614d597c6a4cf916828e15bbe8a71e332de1d67e6783e6f0d6e87a4bebce5951f96bac09334cbea6c78"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00058014000300fc01000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000563d0793b1351fee8449b6291b89080000003c0002802c00018008000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001800068014000400ff"], 0xac}}, 0x0) write$sysctl(r2, &(0x7f0000000300)='1\x00', 0xffffff4a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r3], 0x124}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYBLOB="030328bd7000fddbdf254a"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_open_dev$sg(&(0x7f0000000280), 0x2, 0x8000) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) pread64(r4, 0x0, 0x0, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close(r0) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000300)={{&(0x7f0000a92000/0x1000)=nil, 0x1000}}) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES64=r6, @ANYRES32=r2, @ANYRES8=r6, @ANYRES32=r4, @ANYRES8=r4], 0xf0}, 0x1, 0x0, 0x0, 0xc810}, 0x24004841) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x218401, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000200), &(0x7f0000000340)=0x4) 45.856264993s ago: executing program 6 (id=810): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x17, r1, {0xe, 0xb09c}}, './file1\x00'}) 45.855291455s ago: executing program 6 (id=811): r0 = open(&(0x7f0000000540)='./file0\x00', 0x0, 0x4b) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08", @ANYRES32=r0], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r8 = dup2(r7, r6) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) setsockopt$sock_attach_bpf(r7, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r6, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200040d1) close_range(r5, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r10 = syz_open_dev$mouse(&(0x7f0000000180), 0x400000000, 0x2) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x10200, 0x7, 0x2000, 0x2000, &(0x7f0000009000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) accept4$inet6(r11, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x1c, 0x0) syz_kvm_setup_cpu$x86(r9, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 45.726194608s ago: executing program 6 (id=812): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000c501"]) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000001680)=@gcm_128={{0x303}, "0000e60000010027", "568c9f21823385cf6b936989b62bac53", "1500041b", "ff00"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) sendto$inet6(r0, &(0x7f0000000540)="c62ee5d6a89f2387cb4093532f7c0a2223", 0x11, 0x8000, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) syz_open_procfs(r4, &(0x7f00000003c0)='net/rt_cache\x00') exit(0x1ff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$binfmt_elf64(r0, 0x0, 0x78) chdir(&(0x7f0000000480)='./cgroup\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0xec242, 0x80) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)=';-H?', 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f00000000c0)={r7}) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c0000000a06030000000000000000000100000e040008800900020073797a310000000068000780060005404e230000060004404e210000140017006261746164765f736c61797a310000000014001700636169663000000000000000000000000c00184000000000000000081400170076657468305f746f5f626f6e64000000"], 0x8c}, 0x1, 0x0, 0x0, 0x8044}, 0x11) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x6, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 45.689178399s ago: executing program 40 (id=812): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000c501"]) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000001680)=@gcm_128={{0x303}, "0000e60000010027", "568c9f21823385cf6b936989b62bac53", "1500041b", "ff00"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) sendto$inet6(r0, &(0x7f0000000540)="c62ee5d6a89f2387cb4093532f7c0a2223", 0x11, 0x8000, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) syz_open_procfs(r4, &(0x7f00000003c0)='net/rt_cache\x00') exit(0x1ff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$binfmt_elf64(r0, 0x0, 0x78) chdir(&(0x7f0000000480)='./cgroup\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0xec242, 0x80) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)=';-H?', 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f00000000c0)={r7}) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c0000000a06030000000000000000000100000e040008800900020073797a310000000068000780060005404e230000060004404e210000140017006261746164765f736c61797a310000000014001700636169663000000000000000000000000c00184000000000000000081400170076657468305f746f5f626f6e64000000"], 0x8c}, 0x1, 0x0, 0x0, 0x8044}, 0x11) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x6, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 43.831235808s ago: executing program 9 (id=786): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x2}]}}, &(0x7f0000000540)=""/132, 0x26, 0x84, 0x1, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 43.755891382s ago: executing program 9 (id=814): openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x600, 0x70) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x405}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x5) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) (rerun: 64) 43.705961577s ago: executing program 9 (id=815): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x540, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x470, 0xffffffff, 0xffffffff, 0x470, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xaad44b244c80fcd1], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2e, 0x0, 0x0, 0xe}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [0xff000000, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x1, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x0, 0x20}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0xc, 0xa2, 'snmp\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5a0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="e1bc41f41000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800c0001006d6163766c616e000c000280080007000100000008000500", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004c050}, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc9, 0x0, 0x0) 43.636443148s ago: executing program 9 (id=816): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x1018, r1, {0xe, 0xb09c}}, './file1\x00'}) 43.584674817s ago: executing program 9 (id=817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e00000006000000018000000104000084000400", @ANYRES32=r3, @ANYBLOB="0500000000ebebc65600650000000cb278d22692bbe850bfdfb3f7c2c403e721288ea4c601ef77dd67a7f8e9fe44ce9464fac547e649f8c21071ff236d08b2ed4dde8ca9a02ebcdb0e33af296706e3478088d8763086871a206e49eac6bf011c035d9dd5b6dad1c2547e88728c2363e56507d19fea81abc2dd61c7bd2bd5ca7bb536a8ee05c3c088ff45bd1c59af0d3b571367dae652867d854f52dd3d297cef5877", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000030000000700"/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7, 0x0, 0x0, @void, @value}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0x8, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x9, 0xfff1}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x681e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x7, &(0x7f00000000c0)=[{0x0, 0x4, 0x9, 0x1}, {0x7, 0xc6, 0x6, 0x6}, {0x3, 0xcb, 0xe, 0x8000}, {0xf800, 0xff, 0x80, 0x8}, {0x5, 0x24, 0x9, 0x6}, {0x1, 0x4, 0x2, 0x80000000}, {0x3, 0x5, 0x5, 0x7}]}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000200), &(0x7f0000000280)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') socket$alg(0x26, 0x5, 0x0) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x9f, 0x2, @remote, 0x1}]}, &(0x7f0000000180)=0x10) getsockopt$sock_buf(r12, 0x1, 0x1c, 0x0, &(0x7f0000001180)) 41.276029814s ago: executing program 9 (id=818): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) recvfrom(r0, 0x0, 0x580f, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000001180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3ff, 0x7}}}}}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) 41.21001028s ago: executing program 41 (id=818): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) recvfrom(r0, 0x0, 0x580f, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000001180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3ff, 0x7}}}}}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x20}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) 32.762081345s ago: executing program 2 (id=899): futex(0x0, 0x109, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x3c}}, 0x0) 32.684334121s ago: executing program 2 (id=903): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x149000, 0x0) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x149000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x9, 0x6, 0x34565348, 0x5, 0xe, 0x2, 0x4, 0x2000f5e4, 0x0, 0x0, 0x2, 0x2}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x9, 0x6, 0x34565348, 0x5, 0xe, 0x2, 0x4, 0x2000f5e4, 0x0, 0x0, 0x2, 0x2}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2132a, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x0) 32.621735975s ago: executing program 2 (id=906): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x697601fae69e049a, &(0x7f0000000180)=ANY=[]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0x80049363, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) r3 = socket$isdn_base(0x22, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) accept4(r4, &(0x7f0000000240)=@nfc_llcp, &(0x7f0000000100)=0x80, 0x80000) ioctl(r3, 0x8b32, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="c23b040090150000140012800b0001006c6f7770616e00000400028008000500", @ANYRESHEX=r0], 0x3c}}, 0x0) 32.545887582s ago: executing program 2 (id=908): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}], 0x1c) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x10, &(0x7f0000000c00)=ANY=[@ANYRES64]) chdir(&(0x7f0000000100)='./file0\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getenv(0x4201, r1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x1, 0x8}, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0}, &(0x7f00000007c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000940)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0xc0049364, &(0x7f0000000180)) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r8, &(0x7f0000000080)=""/153, 0x99) getdents64(r8, &(0x7f00000001c0)=""/147, 0x93) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@o_path={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0xab, 0x0, 0xffffffffffffffff, 0x4c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1a, 0x19, &(0x7f0000000640)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8001}, @map_val={0x18, 0xe, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x17}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @exit, @exit, @map_fd={0x18, 0x6, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99}], &(0x7f00000005c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4, '\x00', r5, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0xf, 0x4, 0x7}, 0x10, r6, r7, 0x0, &(0x7f0000000d00)=[r8, r9, r10, 0x1, r11, 0x1], 0x0, 0x10, 0x6, @void, @value}, 0x94) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000008003a"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x40800) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r13, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}}, 0x5, 0x7, 0x5, 0x6, 0x80000001}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={r15, 0x2c, &(0x7f0000000200)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x1, @private0}]}, &(0x7f0000000400)=0x10) sendmsg$nl_generic(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008035"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) write$binfmt_script(r13, &(0x7f0000000280)={'#! ', './file0', [], 0xa, "fef4be71e0844f18f49cb0ee18f9652ce7b6194bce2a80376c9e1fcad4b9b35c026378e7d9dd5f44b7e0c1658de160f284b4000000000000"}, 0x43) 31.674602604s ago: executing program 2 (id=920): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f000090d000/0x4000)=nil, 0x4000, 0x0, 0x2, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xee6, 0x0, 0x0, 0x0, 0x4a}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x401, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1007c, r0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008000740"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) r2 = getpgrp(0x0) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000340)="3180be9923e5aa1667772802ad4190fe00288dc36ba4cc169fbeb73f3f591896c9ec9ba4c7a6bf48e667c4768d987bf9bb0a5258424e25053ed162ecaa0ee008b56eb248d4edd02fd2d9c9caef2fd44a09f68143d0ce553e463652a946a8baa10ca00899dbe28278947b3180b98058051e764d0655fb1caf49fe37984f6f02d9af40d4c35998e003e2697ce41a904ae41b6cb5e5dbe89eadd76b91b97c7b2c2caad7b8c6727eb95d592679d522fb5ffec759da7cff936e4fb7a2d61671e5fd8ac336520f5f98010857ffbbbf40de669a2198b0232510d612d192489dfdeddb306b4dffa5e5ce0d9e009aa8268937b52d498d8c0dfb", 0xf5}, {&(0x7f0000000580)="f3e6becb545f3b4f84411ebbeba1f6ab6d4c4c6e934ff36fbbd105923584cc54f227ac897b3be581d4998e884d064cc60747ecb45a00861a319a8678ab8496b9f20f5d1d8512eb3575d004f27f582316252471c420b254e1716948eb2b7706d29219b8d2cfde0c9ba7d4db8242e58ed84265673c7979aea87af3ebf31577e58d1dfda2b24af8356e83c2a1b1956fda362130473b485fa94d1d298bc1420ac8c121798ca8fcd7b8e2e90ba3390c39933735a55616d397180afd2e8d2c1f275cd4c89f77ab439a0d178d08de1341cfed1a17e5338da1f7feb52417b94b8ddc0e98beec6d51ce55c17429bde1bb", 0xec}, {&(0x7f0000000440)="a053147f9a97131bd220a1980284fdf967f7f7c0019b1e076ecb94681ab466237e", 0x21}, {&(0x7f0000000480)="cbcbb7", 0x3}, {&(0x7f0000000780)="0599e6e457a07f65a93b95df40d5409474f4ec9571aaf54e3ca4dcc89adcf9e87e03ddca897b6ae3284bdb7f71ca07c32c181206f75945d0cfbe9ce62b273780b68aa698a9b8eea6359ccd16b0a7856130026bd1d58d6d4aba1b661360dd0cc3359746270efb2e97f9a5a796910f77951597b399d5c0ccf4e1742f4bc5f2f179d61ae3ffba741808841df24928685ebccf715fae133a9b9aea447cd8d021c2d96b4f73076178d96e884f9cbe8d3825aa05c7680ea1a0f050f91f302b9ca02b8eda0f340e5e7f37184f7d82fda3d0adf6f8da12e36ddff0013ad187e21839dde0dea2bda4", 0xe4}, {&(0x7f0000000880)="0be5cdfc15c340c6aad9680a803e5b528e71cce2fdfa1dcfc7a61068ae22b6da21cc3d75b0c94239f13615f97fe660f87f21687b7446daf7d945971afc6c847c8897d9a1c9a3ca4747e824e8acd7277b058c4fd513359e139550391357f2e44d2c8e9a12fc217bab789e7175478e54253bf3a42f1c0920625766c237f09e297f94f64397a1f9e2b2a551bee54d74d5037583aeffa71cac41121b8d4337308eb3db52fffa4136fb67c27dc99a3c23d19a3d79493da49d0adac704bb9cd6b5e6ccb453bd135ae46bc996b4ee9159963aba3fd5c5c8166d35b21996f8dde0f42fbdeef2ac6929600a24ee2f8ba4a4e895a167608ac6e2a6f1ee", 0xf8}], 0x6}, 0x40000) capset(&(0x7f0000000040)={0x20080522, r2}, &(0x7f0000000100)={0xfffff000, 0xa, 0x3, 0x0, 0x8, 0x8}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) remap_file_pages(&(0x7f000090d000/0x4000)=nil, 0x4000, 0x0, 0x2, 0x0) (async) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xee6, 0x0, 0x0, 0x0, 0x4a}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x401, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1007c, r0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008000740"], 0x98}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) (async) getpgrp(0x0) (async) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000340)="3180be9923e5aa1667772802ad4190fe00288dc36ba4cc169fbeb73f3f591896c9ec9ba4c7a6bf48e667c4768d987bf9bb0a5258424e25053ed162ecaa0ee008b56eb248d4edd02fd2d9c9caef2fd44a09f68143d0ce553e463652a946a8baa10ca00899dbe28278947b3180b98058051e764d0655fb1caf49fe37984f6f02d9af40d4c35998e003e2697ce41a904ae41b6cb5e5dbe89eadd76b91b97c7b2c2caad7b8c6727eb95d592679d522fb5ffec759da7cff936e4fb7a2d61671e5fd8ac336520f5f98010857ffbbbf40de669a2198b0232510d612d192489dfdeddb306b4dffa5e5ce0d9e009aa8268937b52d498d8c0dfb", 0xf5}, {&(0x7f0000000580)="f3e6becb545f3b4f84411ebbeba1f6ab6d4c4c6e934ff36fbbd105923584cc54f227ac897b3be581d4998e884d064cc60747ecb45a00861a319a8678ab8496b9f20f5d1d8512eb3575d004f27f582316252471c420b254e1716948eb2b7706d29219b8d2cfde0c9ba7d4db8242e58ed84265673c7979aea87af3ebf31577e58d1dfda2b24af8356e83c2a1b1956fda362130473b485fa94d1d298bc1420ac8c121798ca8fcd7b8e2e90ba3390c39933735a55616d397180afd2e8d2c1f275cd4c89f77ab439a0d178d08de1341cfed1a17e5338da1f7feb52417b94b8ddc0e98beec6d51ce55c17429bde1bb", 0xec}, {&(0x7f0000000440)="a053147f9a97131bd220a1980284fdf967f7f7c0019b1e076ecb94681ab466237e", 0x21}, {&(0x7f0000000480)="cbcbb7", 0x3}, {&(0x7f0000000780)="0599e6e457a07f65a93b95df40d5409474f4ec9571aaf54e3ca4dcc89adcf9e87e03ddca897b6ae3284bdb7f71ca07c32c181206f75945d0cfbe9ce62b273780b68aa698a9b8eea6359ccd16b0a7856130026bd1d58d6d4aba1b661360dd0cc3359746270efb2e97f9a5a796910f77951597b399d5c0ccf4e1742f4bc5f2f179d61ae3ffba741808841df24928685ebccf715fae133a9b9aea447cd8d021c2d96b4f73076178d96e884f9cbe8d3825aa05c7680ea1a0f050f91f302b9ca02b8eda0f340e5e7f37184f7d82fda3d0adf6f8da12e36ddff0013ad187e21839dde0dea2bda4", 0xe4}, {&(0x7f0000000880)="0be5cdfc15c340c6aad9680a803e5b528e71cce2fdfa1dcfc7a61068ae22b6da21cc3d75b0c94239f13615f97fe660f87f21687b7446daf7d945971afc6c847c8897d9a1c9a3ca4747e824e8acd7277b058c4fd513359e139550391357f2e44d2c8e9a12fc217bab789e7175478e54253bf3a42f1c0920625766c237f09e297f94f64397a1f9e2b2a551bee54d74d5037583aeffa71cac41121b8d4337308eb3db52fffa4136fb67c27dc99a3c23d19a3d79493da49d0adac704bb9cd6b5e6ccb453bd135ae46bc996b4ee9159963aba3fd5c5c8166d35b21996f8dde0f42fbdeef2ac6929600a24ee2f8ba4a4e895a167608ac6e2a6f1ee", 0xf8}], 0x6}, 0x40000) (async) capset(&(0x7f0000000040)={0x20080522, r2}, &(0x7f0000000100)={0xfffff000, 0xa, 0x3, 0x0, 0x8, 0x8}) (async) 31.384086879s ago: executing program 2 (id=921): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x9, 0x101, 0x1, 0x1, 0x2, 0x19, 0x2, {0x0, @in={{0x2, 0x8001, @multicast1}}, 0x2, 0x80000001, 0x5a, 0x8}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0xff01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 31.35479352s ago: executing program 42 (id=921): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x9, 0x101, 0x1, 0x1, 0x2, 0x19, 0x2, {0x0, @in={{0x2, 0x8001, @multicast1}}, 0x2, 0x80000001, 0x5a, 0x8}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0xff01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 23.943892943s ago: executing program 0 (id=1027): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r0, 0xffffffffffffffff, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xcf) (async) keyctl$restrict_keyring(0x1d, r6, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1100, 0x2}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x7, 0x2, 0x6}, @flat, @fda={0x66646185, 0x8000000000000005, 0x1, 0x1b}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 23.8394451s ago: executing program 0 (id=1030): open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) (async, rerun: 32) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') (rerun: 32) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='hpfs\x00', 0x8284ad, 0x0) 23.7792604s ago: executing program 0 (id=1032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0xb01, 0x70bd25, 0x0, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0xb01, 0x70bd25, 0x0, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}]}, 0x1c}}, 0x0) (async) 23.715955154s ago: executing program 0 (id=1033): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003d40), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000003e00)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x3, "ef542c", "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"}}, 0x110) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x6e8, 0x0, 0x21c1, 0x5800, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) setpgid(r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000001}}}, 0x88) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r4, 0x8008b705, 0x0) setpgid(0x0, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r7 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r5) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r9}) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_ifindex, @private=0xa010101}, 0x10) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r10, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0xe, 0xb09c}}, './file1\x00'}) 23.663961493s ago: executing program 0 (id=1034): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="ee314cc5ccb935a875df6c041fb3fc01b94dae34d8f09a11f7350a7e9e561fa08cb0621d169ea8ab28490f6ade1c0fa57a572a868f41de4cb850ca695461", 0x3e}], 0x1) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000140)={0x1, 0x9d55933d8181464e, 0x1000, 0x12, &(0x7f0000000080)="658f14d033419896e09b274fa304a9da518b", 0x48, 0x0, &(0x7f00000000c0)="a2d618c8d92820b277958fa71eb8f08476a11d6ef5f45c1fd785caeb74151fdb113f1404435f315b930b8ad48d206a293323b8f5006536924e97586a0ed736ec1f43a980afa2e6c5"}) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{0x1, 0x1, 0x4, 0x71}, {0x8b3f, 0x9, 0x2, 0x20}, {0x80, 0xf2, 0xc, 0xfffffffa}, {0x8000, 0x9, 0x7, 0x1}, {0x4, 0x4, 0xc, 0xfffffffb}, {0x6, 0x5, 0xd9, 0x2}, {0x200, 0x73, 0x5, 0xb}, {0xefdd, 0x80, 0x92, 0x2}]}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000240)={0x7f, r0, 0x1}) sendto$inet(r1, &(0x7f0000000280)="6be3e0b9bc46a8cb9dab1b10eba3f2517736ffa699", 0x15, 0x8041, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) accept$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @empty}, &(0x7f0000000300)=0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom$inet(r3, &(0x7f0000000340)=""/4096, 0x1000, 0x40002023, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001340)={0x0}, &(0x7f0000001380)=0xc) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000013c0)=r4) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x94, 0x0, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xf9a}]}, 0x94}}, 0x11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r2, r5, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f00000015c0)=0xfffffff3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001680)={'ip6_vti0\x00', &(0x7f0000001600)={'syztnl2\x00', 0x0, 0x29, 0x61, 0xc1, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x8000, 0x8000, 0x5, 0x3}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000016c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x74, r6}) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000001700)) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000001740)={{0x35}, 0x100, './file0\x00'}) socket$inet6(0xa, 0x6, 0xc46) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000001880)={{0x0, 0x8da2, 0xff9c, 0x400, 0x2, 0xfffffffffffffff2, 0x6, 0x800, 0x9, 0x6, 0x4, 0xb, 0x4, 0x0, 0x164d}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f0000001940)={r9, 0x6}) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000002940), 0x8104, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000002980)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) socket$qrtr(0x2a, 0x2, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000002a00), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x1c, r11, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x40) 23.454714043s ago: executing program 1 (id=1037): socket$inet(0x2b, 0x801, 0x0) (async) r0 = socket$inet(0x2b, 0x801, 0x0) r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r4 = io_uring_setup(0x669, &(0x7f00000002c0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x1, r5}}) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) accept$inet(r0, 0x0, 0x0) 23.45254449s ago: executing program 0 (id=1038): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) shutdown(r0, 0x1) 23.45232212s ago: executing program 1 (id=1039): r0 = syz_open_dev$sndctrl(&(0x7f00000070c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/168) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 23.343682142s ago: executing program 43 (id=1038): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) shutdown(r0, 0x1) 23.292758136s ago: executing program 1 (id=1042): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) utimes(0x0, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x5, 0xffffbff7, 0x20000004, 0x3, 0x4]}, &(0x7f0000000040)=0x54) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6ea4, @empty}, 0x10) r4 = userfaultfd(0x801) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x610}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_io_uring_submit(r5, 0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x59, 0xa, 0x0, "05fcff410400001bf9585253b800c495f2000500"}) r7 = socket$inet(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f00000004c0)={0x2, 0x6e24, @empty}, 0x10) syz_open_dev$loop(&(0x7f0000000080), 0x7fffffff, 0x40) r8 = socket$inet(0x2, 0xa, 0x1) bind$inet(r8, &(0x7f00000004c0)={0x2, 0x6e24, @empty}, 0x10) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x20, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r9, {0xfffd, 0x10}, {0xfff2, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840) 22.385165017s ago: executing program 1 (id=1043): move_mount(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x2) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e07090908"], 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000000c0), 0x10) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0xe, 0xb09c}}, './file1\x00'}) 22.275181606s ago: executing program 1 (id=1044): syz_usb_connect$cdc_ncm(0x3, 0xc, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x113, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x1000}]}, 0x140}, 0x1, 0x0, 0x0, 0x40080}, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='environ\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCFLSH(r3, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x6, 0x80a0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r6, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e23, 0x4, @mcast1, 0x5}, 0x1c) sendto$inet6(r7, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r9, &(0x7f0000000000)={0x2a, 0x1}, 0xc) bind$qrtr(r9, &(0x7f0000000100)={0x2a, 0x1}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) 21.923726784s ago: executing program 1 (id=1046): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2a, 0x2, {0x2, 0x10}, [@RTA_IIF={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000000000000000000000140081004000080045220014e9660000641d907807000000640101012e9825b5462806003d72f1079489f9cf39009fadd8157720c1f95b7a16c973f48c2388cdbe3a1cfc6c32472dcca80faaa166e7c62410f76d830217e7accbd9b73da8310ac9121df0ab3f1d2811aa8a1cb31b00b26a038a33fe0abcacc88e1084821a9d0ea129ff3c2cf45b82fd0504f65baba134042ec8e32cb09a0995d3420000c0003c032b94be2f4e7e3edee78310b22f2bffd25d8b3e07ab2a58767302d4ac862f164143"], 0x0) 21.834481418s ago: executing program 44 (id=1046): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2a, 0x2, {0x2, 0x10}, [@RTA_IIF={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000000000000000000000140081004000080045220014e9660000641d907807000000640101012e9825b5462806003d72f1079489f9cf39009fadd8157720c1f95b7a16c973f48c2388cdbe3a1cfc6c32472dcca80faaa166e7c62410f76d830217e7accbd9b73da8310ac9121df0ab3f1d2811aa8a1cb31b00b26a038a33fe0abcacc88e1084821a9d0ea129ff3c2cf45b82fd0504f65baba134042ec8e32cb09a0995d3420000c0003c032b94be2f4e7e3edee78310b22f2bffd25d8b3e07ab2a58767302d4ac862f164143"], 0x0) 4.135646791s ago: executing program 7 (id=1181): r0 = fanotify_init(0x16, 0x0) r1 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x2) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x40000010, r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, 0x0, 0x0) 3.970383093s ago: executing program 7 (id=1184): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x2, 0x0, &(0x7f0000000040)) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 3.685394626s ago: executing program 7 (id=1187): bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x60000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@mpls_getroute={0xe8, 0x1a, 0x400, 0x70bd26, 0x25dfdbff, {0x1c, 0x80, 0x80, 0xe, 0x0, 0x4, 0xfd, 0x6, 0x2600}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x11, 0x42, r3}}, @RTA_NEWDST={0x84, 0x13, [{0x8, 0x0, 0x1}, {0x1}, {0x67, 0x0, 0x1}, {0x3}, {0x9, 0x0, 0x1}, {0x5}, {0xf}, {0xa1d}, {0x48, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x3}, {0x1000}, {0xb, 0x0, 0x1}, {0x7f}, {0x0, 0x0, 0x1}, {0xb}, {0x1, 0x0, 0x1}, {0x7}, {0xffffe}, {0x5}, {0x8, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7}, {0xfff, 0x0, 0x1}, {0xb436, 0x0, 0x1}, {0x6}, {0xc85}, {0x5}, {0x6, 0x0, 0x1}, {0x9}, {0x7, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x20, 0xe, r3}}, @RTA_VIA={0x14, 0x12, {0x8a1a2f1c967e83ae, "5cdd6b7dd4714e2d6a7667f336cc"}}, @RTA_VIA={0x14, 0x12, {0x23, "f100967a7a7483652d177fa724e7"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3.005433094s ago: executing program 7 (id=1193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg(r0, 0x0, 0x80) r2 = fanotify_init(0x16, 0x0) r3 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x2) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x40000010, r4, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) 2.852844001s ago: executing program 3 (id=1195): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000540)=""/183) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup3(r4, r5, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005d80), r5) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x46}}}}}, 0x30}}, 0x40004) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x8, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000500)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup, r9, 0x10, 0x20, 0x0, @void, @void, @void, @value=r11, r10}, 0x20) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ffb000/0x2000)=nil, 0x3) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r12 = socket(0x1, 0x803, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="76dd33b325f2750bb0369bd1691503a1dbe660471648aa61970f5e88afab02475c262c40cdc4349145b1c5efb7912094164d9dd14f054744a13070ae31ca111dfd51fc59eb5bcc53e0dcf4b9f29b0acd53bc44264a2c6750d1d42c6516ded86c2c13cba9", @ANYRES16=r14, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x7c, r14, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8f0e4ab4ed4c9441) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2006c000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="4c0000001000010400000000000000000000000070560ec3e1a69144f0e78d236e1228d04b47d21652b803c425fcdaa91850bcdd4fdc77c5510f4cc44f06006eba7e5615122efc1fec195530d05bd5677f29d97856d4fe94c04ec5a27896dd49816f2f93957717da193f4a5f7d4b447fd8ad577a4d4f320c28e3939f068dd1a552251cfe6d087c2d241e2b0f8646f591b16b64809d844721bfc2bdcea377221dd0eb27d357b071adca1fe982ebed25", @ANYRES32=0x0, @ANYBLOB="00000000020002001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRESOCT, @ANYBLOB="08000ae5", @ANYRES32=r15], 0x4c}}, 0x4000) 2.695352614s ago: executing program 7 (id=1197): r0 = fsopen(&(0x7f0000000080)='openpromfs\x00', 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = fsopen(&(0x7f0000000100)='ceph\x00', 0x1) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt(r4, 0x40, 0x7f, &(0x7f0000000140)="2622255a3cfc01252576b7f4cc5dd757496c9a2af6dd8f1c500431f7bc9330a1bdfa4c8b284f5fa0c6d460cc8387da7abefa566a3056b8d1f4b5d336a767411ed1c30f2d9cd420f78d7e08a276b42efa793364f28f610e38cc07edc1413064a10988f525aaf175b1ce056792df31c702556afc7fe25a77470d2bbd20c4c0e1ec0d9d2d174cb4237b88f38488fa1181450700262dcf3ac78125ad51aee5e5d42f0d6f1d9c4dc2ddb71e67c4589d1fc4c98e66119020fcad5d26610613bc0543267a0e4c41369a1cc242231447fd35e0d6c18adea8f5401bb7208e4a512e47064c4c235bb1d858542a49543fc44ccfc87c365d926337a120", 0xf7) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async, rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='b:::\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.392787486s ago: executing program 3 (id=1199): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) writev(r0, &(0x7f0000001280)=[{0x0}, {&(0x7f0000000140)="92", 0x1}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(compress_null-generic),blake2s-224-arm)\x00'}, 0x58) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000400006803c00040067636d286165732900000008000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cc198900"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) read(r1, 0x0, 0x0) 2.12551s ago: executing program 7 (id=1201): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000002340)=""/4096, &(0x7f0000000340)=0x1000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGVERSION(r3, 0x80044801, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000000)) 1.22499255s ago: executing program 4 (id=1207): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x4100, 0x0) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x200}, @void, @llc={@snap={0xaa, 0x1, "cd", "6b70a6", 0x8863, "354512f7e8b9a2a17e486617032b4d9109c96970df2f60880c5bd7c0757e9a65af5d051e3a993ccb6e9911f7e4292a1193d2e7974d88eda77d7750af52b85dc5e8d219855830822b957ffc3c5b696c258c63a47e95d804935856e213a4f6df652ec49da100f8613a1cb2451fcad3e540f59827855b311c1cad6cfa597fdfff2371dfb2132d8b332eba7b0722d694b9116fde3f9259e773a6badf65f7d52953c423c7979f70d39e2d6ac1011772e398fff8817110aead89ea4ea1371588db4f93e8ad6b"}}}, 0xcf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a00)={0xfc, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0xdd, 0x33, @beacon={{{}, {0x5bf}, @broadcast}, 0x0, @random=0x80, 0x188, @void, @void, @void, @void, @val={0x6, 0x2, 0xfffe}, @val={0x5, 0x82, {0x39, 0x2d, 0x5, "863a40a1604fd672d12e2f4e209eee33f43c3ae48e138dd400a3e14e13de27bf646478e72b5e5d2a5d5182cdad0d49c1aadbd91cde64f3684d2ccbe093c14072d2a4294d54034b457212abadbca317bfc1d982d2c844d4d871a4929cbdf8c2e40a6557e5dc610fb01d9843cdb6c245ac9cbb22d002afabbddbc0f8a08dca29"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x5, 0xa9, 0xff}}, @val={0x2d, 0x1a, {0x4000, 0x3, 0x1, 0x0, {0x3, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x401, 0xc0}}, @val={0x72, 0x6}, @void, @void}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8890}, 0x20040000) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKFRASET(r5, 0x1264, &(0x7f0000000040)=0x5) 1.085820476s ago: executing program 4 (id=1208): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 974.459369ms ago: executing program 4 (id=1209): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x2b, 0x400, 0x0, 0x25dfdbff}, 0x10}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a00)={r1, 0x0, 0x0}, 0x1c) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000200)='./file0\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r4, &(0x7f0000000140)) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r5, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) setpgid(0x0, r2) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x2) 884.933123ms ago: executing program 4 (id=1210): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x118) (async) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x453, 0x101, 0x70bd2b, 0x25dfdbfe, "4f4117bd4dd0384890b5265d3621cc101e22a4c05b8f180644ba2066869dfec8ddd0c89ceeb5c5b4718baeb701353d576900bee6761e6d1d0cb3532da911323a3d131d60674291722ee6ef163473b4cd0ad2b86481937e34faad0a7516aea42ab60de5d10878926ed7becab088", ["", ""]}, 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x20004004) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) 814.509436ms ago: executing program 4 (id=1211): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa3, 0xfe, 0x6ce7, 0xfd, 0x1, 0x7, 0x1, 0x4}}, {0xc, 0x2, [0x3, 0x6, 0x55, 0x4]}}, {{0x1c, 0x1, {0x4, 0x1, 0x98, 0x0, 0x2, 0x100, 0x3, 0x3}}, {0xa, 0x2, [0xfff, 0x6, 0x9]}}, {{0x1c, 0x1, {0x94, 0x0, 0x580, 0xfb32, 0x0, 0x233, 0x8000, 0x4}}, {0xc, 0x2, [0x81, 0x5, 0x1, 0x9]}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000001400078008000640001b0000080013400000000205000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) shutdown(r3, 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000180)=0x4) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0x1) 725.416169ms ago: executing program 8 (id=1212): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@empty, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltfilter={0x3c, 0x2d, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xfff6, 0x1d}, {0xb, 0xfff3}, {0x9, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x8853}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x59a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000180)=""/181, &(0x7f0000000240)=0xb5) r2 = epoll_create(0xfffffb65) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000280)={0x10000011}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000002c0)=@int=0x50, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x6, 0x5}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000400)={r4, 0x1e}, 0x8) read$qrtrtun(0xffffffffffffffff, &(0x7f0000000440)=""/130, 0x82) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x77, &(0x7f0000000500)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@mpls_uc={0x8847, {[{0x1000}], @llc={@snap={0x1, 0x1, 'G8', "2587c0", 0x809b, "57cf5f2b9c91a0a27a9b303654241dc4b64a9c8664d75814432f4c351208de260f422d39ff41c4d23a4e06ce7e3624afbae96f79b1784a5d8979779b732c8a64e373acf562a66c7056453c8cbb9dfeead4177b957813692c58f69c5e"}}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x118, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x843}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x5, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xb, @local, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5ed, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$inet(r6, &(0x7f0000001b40)={&(0x7f00000007c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="3288c2f5ae1448b178f166d5f930ab526c39acad0b8e4a018c73d5db8aba16f7531685e19588b9a4767d6e2f38c5dec91c0dc31aba7a75a6178415e84a44c42c51dc447cbe51db9ad90682339c60a9d4d14a3295820acf95e770dea2e134256c24f8463294", 0x65}, {&(0x7f0000001880)="4630a00d9f6cd3d5647d3361d65d137d42a4680c15f98602f1a80c8b1c0ff5437b0d1ba0c392e34c31ebf67084e12d9ad25912cbc233cb12f8249fca517b1d1327875ad82c532b8353c790c63d0b2e3e3b0c0b3cc6d4374395f5f828a3c0c5cd038bf48e0988b514a7aef1efdd8467e8a35f0fc9dca559a6bbfa", 0x7a}, {&(0x7f0000001900)="9e1625a68586ce9ca14b5d429f61286b0fd9a08a9cd4f1921443bdcf020363158db8d4baceab2a5f19be7d085b2806d6df6c40f54128d3cf4a5bbde72979031d810d5e78896fb662b360bb87de27aefaa1f8c9feb5a882630a84edd10f0ba95587dd5316b61b369297baaa1c2b5b37a3b9917fe08ef551bb356ce85bae2143e7f526f6e113c5528d8c0a96ddcc854db559607cc9c76192c59e43a0076fa1029cb372b70d65cd77715c0bb877e5055da95bf06f4ea2d03df241780da4423d1b48c2198a057170cdeee2fbee30d3e14e1292ccaa7a6dfa20d511e1d41427d64dddd13094ee4ffb585fa3bacdc7aa91", 0xee}, {&(0x7f0000001a00)="a58072b1cd7f5a1e33fad84126815b8a6b1b1654da3cddf91f830b86c935ee27fb2445d2803670308bce93919accfdaf33a822a1dc45712ffb84663844122de0f6e9c2cba4", 0x45}], 0x5, &(0x7f0000001b00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @rand_addr=0x64010102, @private=0xa010100}}}], 0x38}, 0x4011) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000001b80)={0xfffffe01, 0x3b, 0x5}) landlock_create_ruleset(&(0x7f0000001c00)={0xd, 0x2}, 0x18, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, &(0x7f0000001c40)="85f5c976d0d56d9d9c154a57d7d8c025185701fae4135101144f20e67705755b100c12da1b7a998ca8e746524789adaaf04f7238565b1051e5a5ac75d336ae2c0b88218d8d5290123d6a64e6cfb2aa6289243e7429209d6fa90c18a8aa511ab10c3b23aca0abad8a9cb3df962458d7d82cee6fb52edda319a97391795e60e7d2f3aefa75b75aaed443b7a2f7a9fc3f30008dcfc4eab7741b9e9c06dcfe65ddbc59f8cded16cc43854140612ec2eb", 0xae) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000001d00)={0xfd95, 0x100, 0x2, 0x5, 0x1, 0x0, [{0x824, 0x7, 0xff, '\x00', 0x1000}]}) r9 = dup2(r8, r1) ioctl$FS_IOC_SETFSLABEL(r9, 0x41009432, &(0x7f0000001d80)="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") setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000001e80)=0x9, 0x4) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000001ec0)={r4, 0xf9d7}, &(0x7f0000001f00)=0x8) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r9, 0xc01064c1, &(0x7f0000001f40)={0x0, 0x1, 0xffffffffffffffff}) dup2(r10, r11) ioctl$EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f0000001f80)={0x4d, 0x18, 0x1, 0xac8, "80eb0d72b9a882b69a01aefdd349f2376c235e95c88ee2eeda90cd453c973e79"}) 585.528531ms ago: executing program 8 (id=1213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0x10, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x19, {{0x2, 0x0, @multicast2}}}, 0x88) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x10d5, &(0x7f0000000100)={0x0, 0x7734, 0x4000, 0x2, 0x1a9, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 64) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x2, 0x311}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r9, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) (async, rerun: 32) syz_io_uring_submit(r5, r8, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x8, 0x2000, @fd=r3, 0x1, 0xab37, 0x5, 0x1, 0x1}) (rerun: 32) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r10 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x44000}, 0x80) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r10) (rerun: 32) ioctl$CDROMRESET(r3, 0x5312) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x1a0, 0xd0, 0x3d0, 0xd0, 0x300, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x2, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0={0xfc, 0x0, '\x00', 0xfc}, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, &(0x7f0000000180)) 584.705553ms ago: executing program 3 (id=1214): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xe, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) (async) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010101}, 0x10) (async, rerun: 32) r4 = socket$kcm(0x2c, 0x3, 0x0) (rerun: 32) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r3}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r5, 0x4bfb, 0x0) mount(0x0, 0x0, 0x0, 0xd, 0x0) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x11b, 0x2, &(0x7f0000000100)=r3, 0xfffffffffffffec0) 455.618105ms ago: executing program 8 (id=1215): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1, 0x0, 0xf8}) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001240)={0x0, 0x2}, 0x8) (async, rerun: 64) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000080)=0x3, 0x4) (async, rerun: 64) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x84080}) 403.989116ms ago: executing program 3 (id=1216): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2400) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0xfd, 0x19, 0x3, 0x2, "a556cd4af618bc99f98844c808509a3249f47d7d26001d67fb3ef74f50cea716"}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x1800, 0x34) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r5, r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4140aecd, &(0x7f00000000c0)) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x80, 0x200}, [@IFLA_GROUP={0x8, 0x1b, 0x5}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x45d766ad}, @IFLA_CARRIER_CHANGES={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$binfmt_aout(r12, &(0x7f0000000400)={{0xcc, 0x9, 0x2, 0x21f, 0x1da, 0x5, 0x1c5, 0x7}, "d20e907d1c18a473ee6a84f365c1f2589ffb90501d66c7adb142b9d9188b6c6feedd73ce1d5338f6bd61cdbe250c62bc40ee05539326f771e5ae9d44ddc77f46d9d6976be2fd12fdcf26bab3fa500c20fe17a4a871bdb5e92a2b37671bde12edf3a37d5c00150660cf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x789) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 402.289811ms ago: executing program 8 (id=1217): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty}}}], 0x20}}], 0x4000000000002b3, 0x0) 255.452118ms ago: executing program 8 (id=1218): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="ffff53f2081e87f89b60160b25bf", 0x0, 0x63, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3f}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000002000090002000000fedbdf250100000008000800", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000) 255.193424ms ago: executing program 4 (id=1219): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000400)="140000001a004f7fb3e45f2024d21206013a5914", 0x14) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=@upd={0xf0, 0x12, 0x100, 0x70bd25, 0x25dfdbfb, {{'lrw-camellia-aesni\x00'}, '\x00', '\x00', 0x400}, [{0x8, 0x1, 0x89}, {0x8, 0x1, 0x3}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unshare(0x22020600) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x1e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r7, 0x1, 0xade6f28622129b10, r8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r5, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) r9 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r9, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000080)=""/36) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2) rmdir(&(0x7f0000000000)='./file0\x00') 165.446879ms ago: executing program 3 (id=1220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f0000000100)) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xf}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) splice(r2, 0x0, r3, &(0x7f00000002c0)=0xe, 0xffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 164.231263ms ago: executing program 8 (id=1221): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = signalfd4(r0, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8, 0x800) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x600041, 0x0) write$selinux_access(r2, &(0x7f00000000c0)={'system_u:object_r:smartcard_device_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x62) (async) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140)=0x1, 0x4) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000180)={0x9, {0x5, 0x800, 0x4, 0x2}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x7, 0x6dcc}, &(0x7f0000000280)=0x90) read(r1, &(0x7f00000002c0)=""/156, 0x9c) r4 = syz_io_uring_setup(0x2404, &(0x7f0000000380)={0x0, 0xbaec, 0x10, 0x0, 0x219, 0x0, r2}, &(0x7f0000000400), &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000480)={r3, 0x1}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000500)={r5, @in={{0x2, 0x4e20, @remote}}, [0x8000000000000001, 0x2, 0xffffffffffffffff, 0x7, 0xffffffff, 0x1, 0x1000, 0x5, 0xfffffffffffffff8, 0x4229, 0x6, 0x6, 0xad, 0xf21d, 0x2]}, &(0x7f0000000600)=0x100) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x1407, 0x2, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000740)={0x10000, 0x7fff, @name="637e0145506762752610391d0c656f16ca7586c9cb384c07edc245eff14e57b4"}) (async) syz_clone3(&(0x7f0000000940)={0x40200000, &(0x7f0000000780)=0xffffffffffffffff, &(0x7f00000007c0), &(0x7f0000000800)=0x0, {0x32}, &(0x7f0000000840)=""/41, 0x29, &(0x7f0000000880)=""/67, &(0x7f0000000900)=[0x0, 0x0], 0x2}, 0x58) tkill(r7, 0x27) (async) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe48}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2c3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x10) (async) sendto$phonet(r1, &(0x7f0000000ac0)="1e82b88414aa5c15f0f35ef4b98aeac85ad718b8c472a5e5cf59f6368b8b68b7090ec1fc4a46479ff0199f178bf8ce7a9c7ca92b63e2ab2b37f008f11e0993e24cf062dc51635f3c8848c1fd35cc45581d1f30c59ef6cf39cf0c7c40ddad63cd317f38fe338e331de33c8b7fdfeba33dd3d3469086612296da8a989c2f97cf0a5713162fff1ebd6bf7a96f44d6e1911a773f61a5b085ca4b90df3051c1a77690d4282517af2f60c3210254d3072771bbd078d494b6875202d4defd3d0940d8027eab5681", 0xc4, 0x4004000, 0x0, 0x0) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) read(r2, &(0x7f0000000bc0)=""/44, 0x2c) setxattr(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)=@random={'osx.', '^{#$*#\x00'}, &(0x7f0000000c80)='/dev/vcsa\x00', 0xa, 0x0) r8 = dup2(r2, r6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000cc0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000d00)=0x24) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x10) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000e40)={r10, 0x5}, 0x8) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r8, 0x0, 0x489, &(0x7f0000000e80)={{0x16, @multicast2, 0x4e23, 0x2, 'sh\x00', 0x18, 0x8, 0x3c}, {@rand_addr=0x64010100, 0x4e23, 0x10001, 0x6, 0x1000, 0x9}}, 0x44) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000f40)=[@text16={0x10, &(0x7f0000000f00)="f90f01de0f01c966b80500000066b99f7b00000f01d963ed0f8ef67fb820000f00d00f01c53666f0092cb8ba008ec8", 0x2f}], 0x1, 0x44, &(0x7f0000000f80)=[@cstype3={0x5, 0xa}], 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000fc0)=@assoc_id=r9, 0x4) (async) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000001000), 0x4) r11 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$selinux_access(r11, &(0x7f0000001080)={'system_u:object_r:passwd_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x10001}, 0x48) 0s ago: executing program 3 (id=1222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c004}, 0x8040) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000132ae57f60014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x815}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48000000681d628972d0265c032423304babdea6214a6af5e18dfc45cf19b29d4a5d72be5c2679c3e5752c7fea2c1ba65fd0fad64d02e988a54bd52d96f72a51de42f65be58873c50feef6b3aaab0d55140847196a2cd420ff1d2747edcec1584057344e31ce2de44ebdbecf5fa2e42294879aa40546d4609e019bfa127e1d38ecafbd7d5b6147ff2a878ca4c83eddfd6a4b183eb908994306", @ANYRES16=r1, @ANYBLOB="000125bd7000fddbdf251b0000000700210061610000200022801c000080080002003b000000080006000200000008000700090000000400cc000800010036000000"], 0x48}, 0x1, 0x0, 0x0, 0x4005}, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004d00)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000045) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="090300000000000000002e000000"], 0x14}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000080)={0x50, 0x1, 0x0, "d02067046edd9a2ad5b4f84e565c6f0f30807278f8983c3c0a31965ebd9ca8ac"}) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) shutdown(r9, 0x0) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x304}, "82f84cbe349c4abc", "0e5d23e3519731b5395c0eb4843f822e", "c02be723", "df1215a7d932f72d"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x8724, 0x2) r12 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$alg(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="b556c2b38f7a1876770d2738abec2cd5f94f44e8aed2e7e187652d2f44c31d6afeb27d31bc08f6d0c4f0f5ff255e0babaacc8489002ca202098c72440b462e58d6cec35fbe79387147e310ed3c205de405bb68dcaf8d7fbdf387da42b5af7a79d719305975a8b546bbcbb7df2f1e6c4d93bdb1aa8d0d8989b6142ea8d92724ebd1a56ab002ec6cce9f1480a0750a8ffc2238e75e0eb717bdf2fa22612794d73b8ad2f84d82517bc263e730f827c6b6be11f6928086ef059fff030000d39323f72bfa4c0f2839921bce816c37dee5f94f4d7aae61b6f14031cc9f7b78593113e76836df8f434f7a8f659c224ba9f54ba4820b98a3ffe9ecc345cacb9561", 0xfd}], 0x1, 0x0, 0x0, 0x4040004}, 0x8040) recvmsg$unix(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000380)=""/78, 0x4e}], 0x1}, 0x20) kernel console output (not intermixed with test programs): r pid=8896 comm="syz.5.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.386849][ T40] audit: type=1400 audit(1746941188.805:574): avc: denied { bind } for pid=8896 comm="syz.5.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.512060][ T8913] tmpfs: Bad value for 'mpol' [ 99.514713][ T8913] tmpfs: Bad value for 'mpol' [ 99.571929][ T8923] batman_adv: batadv0: Adding interface: dummy0 [ 99.573946][ T8923] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.581940][ T8923] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 99.608302][ T8930] netlink: 28 bytes leftover after parsing attributes in process `syz.7.714'. [ 99.611306][ T8930] netlink: 28 bytes leftover after parsing attributes in process `syz.7.714'. [ 99.616924][ T5942] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 99.621173][ T5942] Bluetooth: hci1: Injecting HCI hardware error event [ 99.625079][ T5942] Bluetooth: hci1: hardware error 0x00 [ 99.648930][ T8939] netlink: 24 bytes leftover after parsing attributes in process `syz.5.717'. [ 99.654046][ T8939] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 99.657417][ T8939] overlayfs: failed to set xattr on upper [ 99.659287][ T8939] overlayfs: ...falling back to redirect_dir=nofollow. [ 99.661426][ T8939] overlayfs: ...falling back to index=off. [ 99.663254][ T8939] overlayfs: ...falling back to uuid=null. [ 99.667024][ T8939] netlink: 14 bytes leftover after parsing attributes in process `syz.5.717'. [ 99.708569][ T8947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.730446][ T8947] kvm: kvm [8946]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200000001880 [ 99.865427][ T5949] Bluetooth: hci0: command 0x0401 tx timeout [ 99.909852][ T5949] Bluetooth: hci3: adv larger than maximum supported [ 99.939324][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.7.729'. [ 99.950651][ T8971] netlink: 'syz.7.729': attribute type 2 has an invalid length. [ 99.956649][ T8975] netlink: 32 bytes leftover after parsing attributes in process `syz.8.730'. [ 99.957932][ T8976] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 99.959936][ T8975] netlink: 32 bytes leftover after parsing attributes in process `syz.8.730'. [ 100.081565][ T8991] Illegal XDP return value 4294967294 on prog (id 150) dev N/A, expect packet loss! [ 100.816271][ T9050] sctp: [Deprecated]: syz.8.747 (pid 9050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.816271][ T9050] Use struct sctp_sack_info instead [ 100.822712][ T9050] overlayfs: workdir and upperdir must reside under the same mount [ 101.139130][ T9073] i2c i2c-1: Invalid block write size 34 [ 101.405757][ T834] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 101.576794][ T834] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 101.579353][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 101.582777][ T834] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.586657][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 101.590442][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 101.594759][ T834] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 101.597451][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 101.600883][ T834] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.604566][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 101.608380][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 101.614601][ T834] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 101.618599][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 101.622013][ T834] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.625845][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 101.629242][ T834] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 101.634875][ T834] usb 10-1: string descriptor 0 read error: -22 [ 101.637223][ T834] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 101.640015][ T834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.649783][ T834] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 101.705446][ T5942] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 101.852645][ T66] usb 10-1: USB disconnect, device number 3 [ 101.996431][ T9138] random: crng reseeded on system resumption [ 102.025358][ T68] Bluetooth: hci4: command 0x1003 tx timeout [ 102.025564][ T5949] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.150617][ T9138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.190680][ T9138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.434157][ T9190] dummy0: entered promiscuous mode [ 103.527061][ T9204] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 103.636221][ T9212] team0: Mode changed to "loadbalance" [ 103.771090][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.847034][ T68] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.857434][ T68] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.858236][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.861314][ T68] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.868160][ T68] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.873121][ T68] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.939047][ T9237] vlan2: entered allmulticast mode [ 103.940764][ T9237] bridge0: entered allmulticast mode [ 103.962382][ T9241] __nla_validate_parse: 10 callbacks suppressed [ 103.962394][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.787'. [ 103.977239][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.016860][ T5942] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 104.031978][ T9231] chnl_net:caif_netlink_parms(): no params data found [ 104.119281][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.134364][ T9263] sp0: Synchronizing with TNC [ 104.142039][ T9263] sp0: Found TNC [ 104.152125][ T9273] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 104.228869][ T9270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.236877][ T9270] bond0: (slave rose0): Enslaving as an active interface with an up link [ 104.240541][ T9231] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.241986][ T9270] Bluetooth: MGMT ver 1.23 [ 104.242808][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.248262][ T9231] bridge_slave_0: entered allmulticast mode [ 104.250890][ T9231] bridge_slave_0: entered promiscuous mode [ 104.254486][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.259720][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.262087][ T9231] bridge_slave_1: entered allmulticast mode [ 104.266541][ T9231] bridge_slave_1: entered promiscuous mode [ 104.316691][ T9231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.319055][ T9281] netlink: 'syz.5.795': attribute type 10 has an invalid length. [ 104.321629][ T9231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.374957][ T9231] team0: Port device team_slave_0 added [ 104.393510][ T9231] team0: Port device team_slave_1 added [ 104.443562][ T13] bridge_slave_1: left allmulticast mode [ 104.445759][ T13] bridge_slave_1: left promiscuous mode [ 104.447772][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.448184][ T9283] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.454282][ T13] bridge_slave_0: left allmulticast mode [ 104.457001][ T13] bridge_slave_0: left promiscuous mode [ 104.458500][ T9283] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 104.458986][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.534720][ T9288] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 104.539008][ T9288] overlayfs: overlapping lowerdir path [ 104.559201][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.564414][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.569189][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.573419][ T9292] xt_hashlimit: size too large, truncated to 1048576 [ 104.578526][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.582191][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.822638][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.828225][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.831970][ T13] bond0 (unregistering): Released all slaves [ 104.838954][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.841177][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.850857][ T9231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.855597][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.857772][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.865968][ T9231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.942701][ T9231] hsr_slave_0: entered promiscuous mode [ 104.944882][ T9231] hsr_slave_1: entered promiscuous mode [ 104.947259][ T9231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.949618][ T9231] Cannot create hsr debugfs directory [ 104.952375][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.6.802'. [ 105.150715][ T9323] netlink: 32 bytes leftover after parsing attributes in process `syz.6.807'. [ 105.218529][ T13] hsr_slave_0: left promiscuous mode [ 105.220554][ T13] hsr_slave_1: left promiscuous mode [ 105.222453][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.226114][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.229881][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.232930][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.274751][ T13] veth1_macvtap: left promiscuous mode [ 105.280149][ T13] veth0_macvtap: left promiscuous mode [ 105.282530][ T13] veth1_vlan: left promiscuous mode [ 105.284799][ T13] veth0_vlan: left promiscuous mode [ 105.285617][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.292714][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.296796][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.301223][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.305137][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 105.912758][ T13] team0 (unregistering): Port device team_slave_1 removed [ 105.945442][ T5949] Bluetooth: hci0: command tx timeout [ 105.980162][ T13] team0 (unregistering): Port device team_slave_0 removed [ 106.469440][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050083400: rx timeout, send abort [ 106.475875][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 106.475883][ T40] audit: type=1400 audit(1746941195.895:593): avc: denied { read } for pid=5329 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 106.486386][ T40] audit: type=1400 audit(1746941195.895:594): avc: denied { search } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.493099][ T40] audit: type=1400 audit(1746941195.895:595): avc: denied { write } for pid=5329 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.500391][ T40] audit: type=1400 audit(1746941195.895:596): avc: denied { add_name } for pid=5329 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.513863][ T40] audit: type=1400 audit(1746941195.895:597): avc: denied { create } for pid=5329 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.520616][ T40] audit: type=1400 audit(1746941195.895:598): avc: denied { append open } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.530639][ T40] audit: type=1400 audit(1746941195.895:599): avc: denied { getattr } for pid=5329 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.567687][ T9231] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 106.583351][ T9289] chnl_net:caif_netlink_parms(): no params data found [ 106.595724][ T9231] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 106.602404][ T9231] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 106.612227][ T9231] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 106.655485][ T5949] Bluetooth: hci3: command tx timeout [ 106.733118][ T9289] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.735776][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.738009][ T9289] bridge_slave_0: entered allmulticast mode [ 106.740553][ T9289] bridge_slave_0: entered promiscuous mode [ 106.748455][ T9289] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.750707][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.752914][ T9289] bridge_slave_1: entered allmulticast mode [ 106.757875][ T9289] bridge_slave_1: entered promiscuous mode [ 106.802102][ T9289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.817719][ T9289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.865544][ T9289] team0: Port device team_slave_0 added [ 106.872538][ T9289] team0: Port device team_slave_1 added [ 106.920993][ T9289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.923335][ T9289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.932784][ T9289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.937594][ T9329] chnl_net:caif_netlink_parms(): no params data found [ 106.968227][ T9289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.971179][ T9289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.982075][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050083400: abort rx timeout. Force session deactivation [ 106.988879][ T9289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.164709][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.165878][ T9357] QAT: failed to copy from user. [ 107.168374][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.171511][ T9329] bridge_slave_0: entered allmulticast mode [ 107.174137][ T9329] bridge_slave_0: entered promiscuous mode [ 107.178833][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.181075][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.183329][ T9329] bridge_slave_1: entered allmulticast mode [ 107.185968][ T9329] bridge_slave_1: entered promiscuous mode [ 107.197171][ T9289] hsr_slave_0: entered promiscuous mode [ 107.199467][ T9289] hsr_slave_1: entered promiscuous mode [ 107.201503][ T9289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.203883][ T9289] Cannot create hsr debugfs directory [ 107.245027][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.809'. [ 107.249261][ T9377] netlink: 92 bytes leftover after parsing attributes in process `syz.6.809'. [ 107.253200][ T9377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.267976][ T9231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.290325][ T9329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.314749][ T9329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.353748][ T9329] team0: Port device team_slave_0 added [ 107.362737][ T9329] team0: Port device team_slave_1 added [ 107.385580][ T5949] Bluetooth: hci2: command tx timeout [ 107.443509][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.446057][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.454073][ T9329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.464156][ T9329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.467420][ T9329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.477613][ T9329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.502722][ T9231] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.530813][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.533870][ T6249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.538794][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.541833][ T6249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.683434][ T9329] hsr_slave_0: entered promiscuous mode [ 107.686833][ T9329] hsr_slave_1: entered promiscuous mode [ 107.688916][ T9329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.691360][ T9329] Cannot create hsr debugfs directory [ 107.724085][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.729401][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.732553][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.735966][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.738379][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.016095][ T5942] Bluetooth: hci0: command tx timeout [ 108.019954][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.112181][ T9231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.147341][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.168763][ T9383] chnl_net:caif_netlink_parms(): no params data found [ 108.269651][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.275339][ T9383] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.278126][ T9383] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.280932][ T9383] bridge_slave_0: entered allmulticast mode [ 108.284020][ T9383] bridge_slave_0: entered promiscuous mode [ 108.288660][ T9383] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.291446][ T9383] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.294216][ T9383] bridge_slave_1: entered allmulticast mode [ 108.297670][ T9383] bridge_slave_1: entered promiscuous mode [ 108.327119][ T9383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.332822][ T9383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.376437][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.384412][ T9383] team0: Port device team_slave_0 added [ 108.388733][ T9383] team0: Port device team_slave_1 added [ 108.418756][ T9383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.421104][ T9383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.430480][ T9383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.435798][ T9383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.438161][ T9383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.448402][ T9383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.506002][ T9383] hsr_slave_0: entered promiscuous mode [ 108.508234][ T9383] hsr_slave_1: entered promiscuous mode [ 108.510183][ T9383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.512457][ T9383] Cannot create hsr debugfs directory [ 108.550839][ T9231] veth0_vlan: entered promiscuous mode [ 108.602859][ T13] bridge_slave_1: left allmulticast mode [ 108.604628][ T13] bridge_slave_1: left promiscuous mode [ 108.606648][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.611565][ T13] bridge_slave_0: left allmulticast mode [ 108.613322][ T13] bridge_slave_0: left promiscuous mode [ 108.615656][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.737527][ T5942] Bluetooth: hci3: command tx timeout [ 109.161470][ T13] bond0 (unregistering): Released all slaves [ 109.178659][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.184289][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.189393][ T13] bond0 (unregistering): Released all slaves [ 109.200081][ T9231] veth1_vlan: entered promiscuous mode [ 109.278378][ T9231] veth0_macvtap: entered promiscuous mode [ 109.287498][ T9231] veth1_macvtap: entered promiscuous mode [ 109.307959][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.310840][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.313597][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.317078][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.319856][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.322743][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.326457][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.332468][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.335561][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.338307][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.341182][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.345114][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.349488][ T9231] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.351915][ T9231] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.354283][ T9231] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.356975][ T9231] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.393607][ T6237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.395924][ T6237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.426328][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.429712][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.437836][ T40] audit: type=1400 audit(1746941198.855:600): avc: denied { mounton } for pid=9231 comm="syz-executor" path="/syzkaller.PS3wdm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 109.452147][ T40] audit: type=1400 audit(1746941198.865:601): avc: denied { mount } for pid=9231 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 109.455776][ T5942] Bluetooth: hci2: command tx timeout [ 109.737709][ T13] hsr_slave_0: left promiscuous mode [ 109.739879][ T13] hsr_slave_1: left promiscuous mode [ 109.741860][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 109.746109][ T13] hsr_slave_0: left promiscuous mode [ 109.748098][ T13] hsr_slave_1: left promiscuous mode [ 109.750072][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.752399][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.773799][ T13] veth1_macvtap: left promiscuous mode [ 109.776430][ T13] veth0_macvtap: left promiscuous mode [ 109.778201][ T13] veth1_vlan: left promiscuous mode [ 109.779894][ T13] veth0_vlan: left promiscuous mode [ 109.785430][ T5942] Bluetooth: hci1: command tx timeout [ 110.815800][ T5942] Bluetooth: hci3: command tx timeout [ 111.275120][ T13] team0 (unregistering): Port device team_slave_1 removed [ 111.353462][ T13] team0 (unregistering): Port device team_slave_0 removed [ 111.545410][ T5942] Bluetooth: hci2: command tx timeout [ 111.856827][ T5942] Bluetooth: hci1: command tx timeout [ 112.044876][ T9289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.063454][ T9289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.120988][ T9289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.129602][ T9289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.183594][ T9289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.193901][ T9289] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.200907][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.203148][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.254935][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.257154][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.261022][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.265741][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.272162][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.278414][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.281452][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.471133][ T9443] chnl_net:caif_netlink_parms(): no params data found [ 112.480304][ T9289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.576164][ T9443] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.578623][ T9443] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.580950][ T9443] bridge_slave_0: entered allmulticast mode [ 112.583677][ T9443] bridge_slave_0: entered promiscuous mode [ 112.592202][ T9443] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.595522][ T9443] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.598106][ T9443] bridge_slave_1: entered allmulticast mode [ 112.601720][ T9443] bridge_slave_1: entered promiscuous mode [ 112.626534][ T9289] veth0_vlan: entered promiscuous mode [ 112.646708][ T9443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.654548][ T9443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.781251][ T9443] team0: Port device team_slave_0 added [ 112.787267][ T9443] team0: Port device team_slave_1 added [ 112.841110][ T9443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.844036][ T9443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.855288][ T9443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.893015][ T9443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.895600][ T5942] Bluetooth: hci3: command tx timeout [ 112.898235][ T9443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.906749][ T9443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.914321][ T9289] veth1_vlan: entered promiscuous mode [ 112.956324][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.034818][ T9443] hsr_slave_0: entered promiscuous mode [ 113.038090][ T9443] hsr_slave_1: entered promiscuous mode [ 113.150978][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.197570][ T9289] veth0_macvtap: entered promiscuous mode [ 113.206261][ T9289] veth1_macvtap: entered promiscuous mode [ 113.249405][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.252837][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.256667][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.259898][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.262919][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.266483][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.270303][ T9289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.272820][ T9383] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.277001][ T9383] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.289044][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.292458][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.295846][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.299061][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.302053][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.305288][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.309063][ T9289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.312957][ T9289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.315993][ T9289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.318701][ T9289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.321359][ T9289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.325059][ T9383] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.329518][ T9383] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.350274][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.402117][ T9329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.409427][ T9329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.413697][ T9329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.454629][ T9443] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.478672][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.483719][ T9329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.509159][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.512317][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.550570][ T9443] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.567697][ T6249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.570855][ T6249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.591037][ T9383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.603605][ T9383] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.616635][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.619448][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.625846][ T5942] Bluetooth: hci2: command tx timeout [ 113.637672][ T9329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.642786][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.645860][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.649757][ T40] audit: type=1400 audit(1746941203.065:602): avc: denied { create } for pid=9500 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.657225][ T40] audit: type=1400 audit(1746941203.065:603): avc: denied { setopt } for pid=9500 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.680323][ T9443] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.687867][ T40] audit: type=1400 audit(1746941203.095:604): avc: denied { bind } for pid=9500 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.753476][ T9443] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.765578][ T9329] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.776207][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.778465][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.781456][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.783586][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.845915][ T13] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.871322][ T9329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.874502][ T9329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.875380][ T40] audit: type=1400 audit(1746941203.285:605): avc: denied { create } for pid=9520 comm="syz.3.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.917077][ T13] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.946534][ T5942] Bluetooth: hci1: command tx timeout [ 113.951140][ T40] audit: type=1400 audit(1746941203.365:606): avc: denied { write } for pid=9520 comm="syz.3.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.951795][ T9521] netlink: 'syz.3.823': attribute type 4 has an invalid length. [ 113.962219][ T40] audit: type=1400 audit(1746941203.365:607): avc: denied { connect } for pid=9520 comm="syz.3.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.963768][ T9443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.970496][ T40] audit: type=1400 audit(1746941203.365:608): avc: denied { setopt } for pid=9520 comm="syz.3.823" lport=59112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.996788][ T9521] netlink: 'syz.3.823': attribute type 4 has an invalid length. [ 114.010314][ T13] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.018485][ T9443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.024231][ T9443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.046109][ T9443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.067557][ T9383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.070814][ T9329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.086039][ T13] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.130621][ T9541] netlink: 376 bytes leftover after parsing attributes in process `syz.3.825'. [ 114.134263][ T9541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.825'. [ 114.137655][ T9383] veth0_vlan: entered promiscuous mode [ 114.138044][ T9541] netlink: 376 bytes leftover after parsing attributes in process `syz.3.825'. [ 114.149397][ T9443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.154255][ T9383] veth1_vlan: entered promiscuous mode [ 114.178296][ T9443] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.206587][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.209222][ T6249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.236741][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.239425][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.257451][ T9383] veth0_macvtap: entered promiscuous mode [ 114.279969][ T9383] veth1_macvtap: entered promiscuous mode [ 114.306674][ T13] bridge_slave_1: left allmulticast mode [ 114.308485][ T13] bridge_slave_1: left promiscuous mode [ 114.310419][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.318495][ T13] bridge_slave_0: left allmulticast mode [ 114.320259][ T13] bridge_slave_0: left promiscuous mode [ 114.322091][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.326383][ T13] bridge_slave_1: left allmulticast mode [ 114.328178][ T13] bridge_slave_1: left promiscuous mode [ 114.330000][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.334838][ T13] bridge_slave_0: left allmulticast mode [ 114.335740][ T5942] Bluetooth: hci0: command tx timeout [ 114.338153][ T13] bridge_slave_0: left promiscuous mode [ 114.340921][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.681740][ T9578] netlink: 84 bytes leftover after parsing attributes in process `syz.3.828'. [ 114.720758][ T9581] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 114.843206][ T40] audit: type=1400 audit(1746941204.255:609): avc: denied { getopt } for pid=9595 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.913615][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.919682][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.924747][ T13] bond0 (unregistering): Released all slaves [ 115.007862][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.011550][ T13] bond0 (unregistering): Released all slaves [ 115.020882][ T13] bond1 (unregistering): Released all slaves [ 115.088791][ T13] bond2 (unregistering): Released all slaves [ 115.136414][ T40] audit: type=1400 audit(1746941204.555:610): avc: denied { mount } for pid=9612 comm="syz.3.833" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 115.136911][ T9383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.153678][ T9383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.155388][ T40] audit: type=1400 audit(1746941204.565:611): avc: denied { unmount } for pid=9289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 115.159766][ T9383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.169577][ T9383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.172734][ T9383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.176905][ T9383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.180326][ T9383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.183559][ T9383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.187594][ T9383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.195070][ T9329] veth0_vlan: entered promiscuous mode [ 115.208426][ T9329] veth1_vlan: entered promiscuous mode [ 115.245376][ T9383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.248569][ T9383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.253012][ T9383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.256879][ T9383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.260587][ T9383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.264033][ T9383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.268287][ T9383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.271448][ T9383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.276741][ T9383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.344527][ T9383] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.344566][ T9383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.344580][ T9383] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.344593][ T9383] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.378236][ T9443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.409272][ T9329] veth0_macvtap: entered promiscuous mode [ 115.446712][ T9329] veth1_macvtap: entered promiscuous mode [ 115.465809][ T6249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.469917][ T6249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.481812][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.485561][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.489135][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.493204][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.497369][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.501409][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.504681][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.509237][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.512449][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.515868][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.520740][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.527751][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.531008][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.534049][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.539846][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.547131][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.550396][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.553948][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.558364][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.562211][ T9329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.566278][ T9329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.571759][ T9329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.600022][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.602924][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.618765][ T9443] veth0_vlan: entered promiscuous mode [ 115.623309][ T9329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.627325][ T9329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.630920][ T9329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.634350][ T9329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.659179][ T9443] veth1_vlan: entered promiscuous mode [ 115.770079][ T6249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.772790][ T6249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.807595][ T9443] veth0_macvtap: entered promiscuous mode [ 115.810892][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.812544][ T9443] veth1_macvtap: entered promiscuous mode [ 115.814535][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.852621][ T13] hsr_slave_0: left promiscuous mode [ 115.855629][ T13] hsr_slave_1: left promiscuous mode [ 115.858395][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.861592][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.875935][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.875952][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.890822][ T13] hsr_slave_0: left promiscuous mode [ 115.893615][ T13] hsr_slave_1: left promiscuous mode [ 115.895731][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.898683][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.901799][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.904477][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.970668][ T13] veth1_macvtap: left promiscuous mode [ 115.972782][ T13] veth0_macvtap: left promiscuous mode [ 115.975123][ T13] veth1_vlan: left promiscuous mode [ 115.977933][ T13] veth0_vlan: left promiscuous mode [ 115.980722][ T13] veth1_macvtap: left promiscuous mode [ 115.982544][ T13] veth0_macvtap: left promiscuous mode [ 115.984252][ T13] veth1_vlan: left promiscuous mode [ 115.986199][ T13] veth0_vlan: left promiscuous mode [ 116.015695][ T5942] Bluetooth: hci1: command tx timeout [ 116.415325][ T5942] Bluetooth: hci0: command tx timeout [ 116.655467][ T13] team0 (unregistering): Port device team_slave_1 removed [ 116.724611][ T13] team0 (unregistering): Port device team_slave_0 removed [ 118.236124][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.240363][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.244558][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.248626][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.252106][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.256791][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.260757][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.265008][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.271179][ T9443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.300095][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.305322][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.309200][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.313140][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.320799][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.323947][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.327026][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.330157][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.334164][ T9443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.342332][ T9443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.345032][ T9443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.350383][ T9443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.353012][ T9443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.388655][ T9680] netlink: 'syz.3.842': attribute type 23 has an invalid length. [ 118.420331][ T6237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.423288][ T6237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.444731][ T9688] netlink: 'syz.4.844': attribute type 1 has an invalid length. [ 118.460423][ T9688] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.844'. [ 118.475893][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.479177][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.484807][ T9688] ecryptfs: Unknown parameter 'v4˜' [ 118.496140][ T5942] Bluetooth: hci0: command tx timeout [ 118.543781][ T9693] netlink: 256 bytes leftover after parsing attributes in process `syz.2.819'. [ 118.552621][ T9693] unsupported nlmsg_type 40 [ 118.762752][ T9715] x_tables: duplicate underflow at hook 2 [ 118.829006][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 118.829020][ T40] audit: type=1400 audit(1746941208.245:639): avc: denied { write } for pid=9724 comm="syz.1.856" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 118.836033][ T9728] trusted_key: encrypted_key: keylen parameter is missing [ 118.932531][ T9730] xt_limit: Overflow, try lower: 1207959552/384 [ 118.950108][ T40] audit: type=1400 audit(1746941208.365:640): avc: denied { read } for pid=9741 comm="syz.1.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 118.960903][ T40] audit: type=1400 audit(1746941208.375:641): avc: denied { getopt } for pid=9741 comm="syz.1.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 119.067460][ T9761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.863'. [ 119.072078][ T40] audit: type=1400 audit(1746941208.485:642): avc: denied { remount } for pid=9760 comm="syz.1.863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.181993][ T9739] Bluetooth: MGMT ver 1.23 [ 119.509880][ T40] audit: type=1400 audit(1746941208.925:643): avc: denied { getopt } for pid=9793 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.556209][ T9799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.871'. [ 119.771889][ T9818] No control pipe specified [ 119.803567][ T9818] netlink: 'syz.2.876': attribute type 1 has an invalid length. [ 119.908251][ T9831] netlink: 666 bytes leftover after parsing attributes in process `syz.4.880'. [ 119.944539][ T9836] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.883'. [ 119.947618][ T9836] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 120.051657][ T9852] random: crng reseeded on system resumption [ 120.061484][ T9851] netlink: ct family unspecified [ 120.064194][ T9851] openvswitch: netlink: Actions may not be safe on all matching packets [ 120.118173][ T9860] netlink: 32 bytes leftover after parsing attributes in process `syz.4.884'. [ 120.206285][ T9866] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 120.293573][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.892'. [ 120.357403][ T78] nci: nci_rx_work: unknown MT 0x1 [ 120.358417][ T9878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.473437][ T9906] No control pipe specified [ 120.531525][ T9913] geneve2: entered promiscuous mode [ 120.538220][ T9913] geneve2: entered allmulticast mode [ 120.575470][ T5942] Bluetooth: hci0: command tx timeout [ 120.619416][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'. [ 120.687664][ T9941] No control pipe specified [ 120.693313][ T40] audit: type=1400 audit(1746941210.105:644): avc: denied { ioctl } for pid=9939 comm="syz.2.906" path="socket:[33108]" dev="sockfs" ino=33108 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 120.776788][ T9953] netlink: 'syz.1.910': attribute type 6 has an invalid length. [ 120.779852][ T9953] xt_ecn: cannot match TCP bits for non-tcp packets [ 120.806628][ T9959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.911'. [ 120.821134][ T9967] Failed to get privilege flags for destination (handle=0x2:0x0) [ 120.824536][ T9968] binder: BINDER_SET_CONTEXT_MGR already set [ 120.825383][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'. [ 120.827934][ T9968] binder: 9966:9968 ioctl 4018620d 2000000000c0 returned -16 [ 120.832395][ T9961] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 121.246969][ T6023] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 121.415341][ T6023] usb 8-1: Using ep0 maxpacket: 8 [ 121.418321][ T6023] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 121.421733][ T6023] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 121.424937][ T6023] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.428447][ T6023] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.432566][ T6023] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.435857][ T6023] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.642649][ T6023] usb 8-1: GET_CAPABILITIES returned 0 [ 121.644434][ T6023] usbtmc 8-1:16.0: can't read capabilities [ 121.864189][ T10] usb 8-1: USB disconnect, device number 2 [ 121.960103][ T6249] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.006662][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 122.050604][ T6249] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.084024][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.090441][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.096257][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.107307][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.110071][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.131598][ T6249] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.165968][ T40] audit: type=1400 audit(1746941211.585:645): avc: denied { setopt } for pid=10065 comm="syz.1.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 122.207109][T10063] usb usb1: usbfs: process 10063 (syz.4.926) did not claim interface 0 before use [ 122.208231][ T6249] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.210818][T10063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.926'. [ 122.290077][T10056] chnl_net:caif_netlink_parms(): no params data found [ 122.361489][ T6249] bridge_slave_1: left allmulticast mode [ 122.363694][ T6249] bridge_slave_1: left promiscuous mode [ 122.371584][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.379884][ T6249] bridge_slave_0: left allmulticast mode [ 122.381775][ T6249] bridge_slave_0: left promiscuous mode [ 122.382401][T10085] 9p: Unknown access argument 18446744073709551615: -34 [ 122.383771][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.415432][ T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 122.567027][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.571042][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.576357][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.579843][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.647170][ T6249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.652749][ T6249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.658852][ T6249] bond0 (unregistering): Released all slaves [ 122.782749][T10056] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.785014][T10056] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.787437][T10056] bridge_slave_0: entered allmulticast mode [ 122.790046][T10056] bridge_slave_0: entered promiscuous mode [ 122.792579][ T10] usb 6-1: usb_control_msg returned -32 [ 122.796607][ T10] usbtmc 6-1:16.0: can't read capabilities [ 122.817331][T10056] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.819581][T10056] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.821840][T10056] bridge_slave_1: entered allmulticast mode [ 122.824408][T10056] bridge_slave_1: entered promiscuous mode [ 122.837220][T10101] program syz.3.931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.841212][T10102] program syz.3.931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.897108][T10056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.933614][T10056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.963558][T10109] netlink: 'syz.4.933': attribute type 2 has an invalid length. [ 122.967230][T10109] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 122.970334][T10109] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 123.000174][ T6249] hsr_slave_0: left promiscuous mode [ 123.002647][ T6249] hsr_slave_1: left promiscuous mode [ 123.004780][ T6249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.007799][ T6249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.010474][ T6249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.013137][ T6249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.043555][T10113] Context (ID=0x4d8) not attached to queue pair (handle=0x4d8:0x3) [ 123.051742][ T6249] veth1_macvtap: left promiscuous mode [ 123.053929][ T6249] veth0_macvtap: left promiscuous mode [ 123.056562][ T6249] veth1_vlan: left promiscuous mode [ 123.058387][ T6249] veth0_vlan: left promiscuous mode [ 123.170884][ T40] audit: type=1400 audit(1746941212.585:646): avc: denied { getopt } for pid=10124 comm="syz.4.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 123.567609][ T10] usb 6-1: USB disconnect, device number 6 [ 123.748090][ T6249] team0 (unregistering): Port device team_slave_1 removed [ 123.815885][ T6249] team0 (unregistering): Port device team_slave_0 removed [ 124.187852][ T5942] Bluetooth: hci0: command tx timeout [ 124.345824][T10056] team0: Port device team_slave_0 added [ 124.352974][T10056] team0: Port device team_slave_1 added [ 124.420665][T10056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.423177][T10056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.431818][T10056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.482584][T10147] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 124.487572][T10147] VFS: Can't find a romfs filesystem on dev nullb0. [ 124.487572][T10147] [ 124.492485][T10056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.496254][T10056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.514619][T10056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.541627][T10151] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10151 comm=syz.4.940 [ 124.565608][T10056] hsr_slave_0: entered promiscuous mode [ 124.567982][T10056] hsr_slave_1: entered promiscuous mode [ 124.875532][ T10] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 125.011409][ T10] usb 9-1: device descriptor read/64, error -71 [ 125.180181][T10056] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.184295][T10056] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.188361][T10056] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.194103][T10056] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.234624][T10056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.252153][T10056] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.259509][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.262177][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.266233][ T10] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 125.273513][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.276506][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.358353][T10198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.364232][ T40] audit: type=1400 audit(1746941214.775:647): avc: denied { setopt } for pid=10197 comm="syz.3.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 125.386895][ T40] audit: type=1400 audit(1746941214.805:648): avc: denied { listen } for pid=10204 comm="syz.1.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 125.394878][ T40] audit: type=1400 audit(1746941214.805:649): avc: denied { ioctl } for pid=10204 comm="syz.1.944" path="socket:[36251]" dev="sockfs" ino=36251 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 125.405368][ T10] usb 9-1: device descriptor read/64, error -71 [ 125.450984][T10056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.455979][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.459727][T10205] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.491353][T10056] veth0_vlan: entered promiscuous mode [ 125.500229][T10056] veth1_vlan: entered promiscuous mode [ 125.516465][ T10] usb usb9-port1: attempt power cycle [ 125.520982][T10056] veth0_macvtap: entered promiscuous mode [ 125.524588][T10056] veth1_macvtap: entered promiscuous mode [ 125.535187][T10056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.541286][T10056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.544342][T10056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.548729][T10056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.551760][T10056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.556087][T10056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.559951][T10056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.563669][T10056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.568174][T10056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.573789][T10056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.585450][T10056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.588637][T10056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.592653][T10056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.600651][T10056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.607661][T10056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.611595][T10056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.616223][T10056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.620056][T10056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.624296][T10056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.629349][T10056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.632055][T10056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.634852][T10056] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.734898][T10239] kAFS: unable to lookup cell '/,c¾ûL' [ 125.743031][ T40] audit: type=1400 audit(1746941215.155:650): avc: denied { nlmsg_read } for pid=10238 comm="syz.1.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 125.752711][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.953'. [ 125.761668][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.764007][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.784472][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.789202][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.849052][T10259] SELinux: syz.3.957 (10259) set checkreqprot to 1. This is no longer supported. [ 125.849071][ T40] audit: type=1400 audit(1746941215.265:651): avc: denied { setcheckreqprot } for pid=10258 comm="syz.3.957" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 125.861176][T10259] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 125.865370][ T10] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 125.885751][ T10] usb 9-1: device descriptor read/8, error -71 [ 126.003852][ T40] audit: type=1400 audit(1746941215.415:652): avc: denied { bind } for pid=10276 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.056153][ T40] audit: type=1400 audit(1746941215.475:653): avc: denied { write } for pid=10276 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.069348][T10285] fuse: Unknown parameter 'dd' [ 126.101642][T10288] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 126.103865][T10288] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.109202][T10288] vhci_hcd vhci_hcd.0: Device attached [ 126.112081][T10291] vhci_hcd: connection closed [ 126.112741][ T1187] vhci_hcd: stop threads [ 126.112864][ T40] audit: type=1400 audit(1746941215.525:654): avc: denied { read } for pid=10276 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 126.114371][ T1187] vhci_hcd: release socket [ 126.114384][ T1187] vhci_hcd: disconnect device [ 126.125796][ T10] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 126.151406][ T10] usb 9-1: device descriptor read/8, error -71 [ 126.211343][T10310] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 126.255513][ T5942] Bluetooth: hci0: command tx timeout [ 126.257543][ T10] usb usb9-port1: unable to enumerate USB device [ 126.363650][T10320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.970'. [ 126.384807][T10320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.970'. [ 126.490141][T10332] netlink: zone id is out of range [ 126.491771][T10332] netlink: zone id is out of range [ 126.493397][T10332] netlink: zone id is out of range [ 126.495085][T10332] netlink: zone id is out of range [ 126.500294][T10332] netlink: 'syz.0.971': attribute type 39 has an invalid length. [ 126.503814][T10332] veth0_macvtap: left promiscuous mode [ 126.552496][ T40] audit: type=1400 audit(1746941215.965:655): avc: denied { connect } for pid=10331 comm="syz.0.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.640848][ T40] audit: type=1400 audit(1746941216.055:656): avc: denied { map } for pid=10347 comm="syz.3.972" path="socket:[35419]" dev="sockfs" ino=35419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 126.939226][T10382] sctp: [Deprecated]: syz.3.978 (pid 10382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.939226][T10382] Use struct sctp_sack_info instead [ 127.007613][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 127.010424][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.980'. [ 127.292825][T10410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.984'. [ 127.297126][T10410] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 127.520496][T10424] netlink: 'syz.1.986': attribute type 10 has an invalid length. [ 127.523766][T10424] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.526075][T10424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.528593][T10424] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.530944][T10424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.537955][T10424] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 127.542836][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.986'. [ 127.551522][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.986'. [ 127.581373][T10429] overlayfs: missing 'lowerdir' [ 127.581388][T10430] overlayfs: missing 'lowerdir' [ 127.786839][T10461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.996'. [ 127.806380][T10461] netlink: 'syz.3.996': attribute type 1 has an invalid length. [ 127.808717][T10461] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.996'. [ 127.834543][T10470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10470 comm=syz.3.999 [ 127.834880][T10471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10471 comm=syz.3.999 [ 127.857476][T10470] netlink: 'syz.3.999': attribute type 1 has an invalid length. [ 127.878781][T10470] bond2: (slave gretap1): making interface the new active one [ 127.882656][T10470] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 128.056912][T10487] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 128.061535][T10487] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 128.327242][T10512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.335343][ T5942] Bluetooth: hci0: command tx timeout [ 128.378887][T10524] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 128.607466][ T7911] IPVS: starting estimator thread 0... [ 128.705570][T10551] IPVS: using max 45 ests per chain, 108000 per kthread [ 128.875578][ T9685] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 128.961239][ T7911] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 128.995659][T10590] siw: device registration error -23 [ 129.038278][ T9685] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.042261][ T9685] usb 6-1: config 0 has no interfaces? [ 129.044474][ T9685] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 129.051371][ T9685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.053796][T10594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.056763][ T9685] usb 6-1: config 0 descriptor?? [ 129.057755][T10594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.115339][ T7911] usb 8-1: Using ep0 maxpacket: 8 [ 129.119235][ T7911] usb 8-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.123835][ T7911] usb 8-1: config 1 interface 0 has no altsetting 0 [ 129.129237][ T7911] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.40 [ 129.132389][ T7911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.135760][ T7911] usb 8-1: Product: 䟓ï•äµ¥ê³½æœ½ê•…콞뭹謣阷讬玥â¾ê°ˆîš•æ²…⽀섲彖텯äŸà¶™å£ ï‚咋㙶ᶬí²ë”ƒê•ˆé—©â¡å‘ƒç„楊㚴ï¨îº‹ìƒ•ä¯¶é„掖笿⥛觸楹酵䊺Ṥ틾വ冭ﭷ쥃ﰇ䒵Ӳ悲깭îµå’šã£ªä ¦à»«ï©¢ëž¼êµã¹”Շ㖩ᱬᰌ࿜䮉庻䳦ꛮ긔 [ 129.143312][ T7911] usb 8-1: Manufacturer: ᮷霃길贡킎ୣ舭íœì•‹ìˆŸé¼© [ 129.145572][ T7911] usb 8-1: SerialNumber: 〠[ 129.188728][T10606] SELinux: Context system_u:object_r:textrel_shlib_t:s0 is not valid (left unmapped). [ 129.202417][T10606] SELinux: Context system_u:object_r:var_log_t:s0 is not valid (left unmapped). [ 129.268607][T10550] sctp: [Deprecated]: syz.1.1014 (pid 10550) Use of int in maxseg socket option. [ 129.268607][T10550] Use struct sctp_assoc_value instead [ 129.284685][ T6023] usb 6-1: USB disconnect, device number 7 [ 129.366793][ T7911] usbhid 8-1:1.0: can't add hid device: -71 [ 129.369282][ T7911] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 129.373136][ T7911] usb 8-1: USB disconnect, device number 3 [ 129.577487][T10650] pimreg3: entered allmulticast mode [ 129.915769][ T1329] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 129.920833][ T78] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.023583][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.094640][ T1329] usb 9-1: config 1 has an invalid interface number: 40 but max is 0 [ 130.097012][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.104609][ T1329] usb 9-1: config 1 has no interface number 0 [ 130.112238][ T1329] usb 9-1: config 1 interface 40 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 130.117090][ T1329] usb 9-1: config 1 interface 40 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 130.121344][ T1329] usb 9-1: config 1 interface 40 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 130.129693][ T1329] usb 9-1: config 1 interface 40 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 130.139129][ T1329] usb 9-1: config 1 interface 40 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 130.142953][ T1329] usb 9-1: config 1 interface 40 has no altsetting 0 [ 130.148954][ T5949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.164133][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.168050][ T5949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.172337][ T5949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.175287][ T5949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.180499][ T78] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.180555][ T1329] usb 9-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice=37.60 [ 130.188618][ T1329] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.191137][ T1329] usb 9-1: Product: 弟ṧ佘Ṹí—孠绖ᚡ⧞⼟ꋦ⓯藆풧猴宲ã·ç²±ã©¬ç¢ ä¬™éŸ¢ï°°è‹»å‡‘ãŠâ‹“껛뛼莙ㆫå•à®ºë•«æ…°ïµ§ç…ºæ–±ï½¬áµ§ä´šç©ˆá‰â›¹èšžî­ã°¦âœší˜ê‹à¤¾êœî—…ꤋ䙶åˆâŠ„鷆蔹椰⣌倽艪⃢웬ऽ㿻᫦å…脘徫⨻닱㈺擽ã—浭̡暱뎆ꜵ䬆åŠä§ã–µç¥ªç“崄娰ῗ綃魙ሱ㎄華ç½áž† [ 130.201943][ T1329] usb 9-1: Manufacturer: І [ 130.203847][ T1329] usb 9-1: SerialNumber: syz [ 130.226422][T10660] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 130.386316][ T40] kauditd_printk_skb: 100 callbacks suppressed [ 130.386331][ T40] audit: type=1400 audit(1746941219.805:757): avc: denied { ioctl } for pid=10676 comm="syz.3.1041" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.411047][ T78] bridge_slave_1: left allmulticast mode [ 130.412847][ T78] bridge_slave_1: left promiscuous mode [ 130.414718][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.432727][ T78] bridge_slave_0: left allmulticast mode [ 130.434518][ T78] bridge_slave_0: left promiscuous mode [ 130.445044][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.451069][ T40] audit: type=1400 audit(1746941219.855:758): avc: denied { read } for pid=10659 comm="syz.4.1036" dev="nsfs" ino=4026533691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 130.460818][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 130.471930][ T40] audit: type=1400 audit(1746941219.865:759): avc: denied { read open } for pid=10659 comm="syz.4.1036" path="net:[4026533691]" dev="nsfs" ino=4026533691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 130.492677][ T40] audit: type=1400 audit(1746941219.865:760): avc: denied { search } for pid=10688 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.500181][ T40] audit: type=1400 audit(1746941219.865:761): avc: denied { search } for pid=10688 comm="rm" name="dhcpcd" dev="tmpfs" ino=1898 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.506936][ T40] audit: type=1400 audit(1746941219.865:762): avc: denied { search } for pid=10688 comm="rm" name="hook-state" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.513851][ T40] audit: type=1400 audit(1746941219.865:763): avc: denied { create } for pid=10659 comm="syz.4.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.520902][ T40] audit: type=1400 audit(1746941219.865:764): avc: denied { write } for pid=10659 comm="syz.4.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.529571][ T40] audit: type=1400 audit(1746941219.865:765): avc: denied { read } for pid=10659 comm="syz.4.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.540185][ T40] audit: type=1400 audit(1746941219.875:766): avc: denied { read } for pid=10659 comm="syz.4.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.617875][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 130.639214][T10678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.644700][T10678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.705091][ T1329] pvrusb2: Hardware description: Gotview USB 2.0 DVD Deluxe [ 130.709298][ T1329] usb 9-1: selecting invalid altsetting 0 [ 130.712930][ T2490] pvrusb2: Invalid write control endpoint [ 130.716991][ T1329] usb 9-1: USB disconnect, device number 8 [ 130.800424][ T2490] pvrusb2: Invalid write control endpoint [ 130.804483][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 130.808927][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 130.811275][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 130.815681][ T2490] pvrusb2: Device being rendered inoperable [ 130.822085][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 130.824488][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 130.836748][ T2490] pvrusb2: Attached sub-driver cx25840 [ 130.864820][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.869689][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.873959][ T78] bond0 (unregistering): Released all slaves [ 130.905323][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 130.908636][ T29] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 130.910991][ T29] usb 8-1: can't read configurations, error -71 [ 130.951643][ T2490] pvrusb2: Attempted to execute control transfer when device not ok [ 130.955742][ T2490] pvrusb2: Attempted to execute control transfer when device not ok [ 130.958987][ T2490] pvrusb2: Attempted to execute control transfer when device not ok [ 130.961600][ T2490] pvrusb2: Attempted to execute control transfer when device not ok [ 130.964483][ T2490] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD Deluxe failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 131.190784][ T2490] TUNER: Unable to find symbol tda829x_probe() [ 131.200660][T10684] chnl_net:caif_netlink_parms(): no params data found [ 131.323809][ T2490] DVB: Unable to find symbol tda9887_attach() [ 131.326706][ T2490] tuner: 2-0043: Tuner 4 found with type(s) Radio TV. [ 131.329751][ T2490] pvrusb2: Attached sub-driver tuner [ 131.345476][ T2490] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 131.350739][ T2490] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 131.456967][ T78] hsr_slave_0: left promiscuous mode [ 131.465444][ T78] hsr_slave_1: left promiscuous mode [ 131.468038][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.470457][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.495876][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.498248][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.566263][ T78] veth1_macvtap: left promiscuous mode [ 131.568073][ T78] veth1_vlan: left promiscuous mode [ 131.569738][ T78] veth0_vlan: left promiscuous mode [ 131.650774][ T78] pimreg3 (unregistering): left allmulticast mode [ 131.697742][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.711607][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.716341][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.719367][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.721789][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.256586][ T5949] Bluetooth: hci0: command tx timeout [ 132.522255][ T78] team0 (unregistering): Port device team_slave_1 removed [ 132.578255][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.604619][ T78] team0 (unregistering): Port device team_slave_0 removed [ 133.269734][T10684] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.272902][T10684] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.276003][T10684] bridge_slave_0: entered allmulticast mode [ 133.278870][T10684] bridge_slave_0: entered promiscuous mode [ 133.281465][T10716] __nla_validate_parse: 2 callbacks suppressed [ 133.281473][T10716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1048'. [ 133.289657][ T1329] infiniband syz1: ib_query_port failed (-19) [ 133.326344][T10684] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.328660][T10684] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.336395][T10684] bridge_slave_1: entered allmulticast mode [ 133.339326][T10684] bridge_slave_1: entered promiscuous mode [ 133.387374][T10726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10726 comm=syz.4.1049 [ 133.413006][T10684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.419520][T10684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.520585][T10684] team0: Port device team_slave_0 added [ 133.551576][T10684] team0: Port device team_slave_1 added [ 133.658999][T10684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.661822][T10684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.679247][T10684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.689862][T10684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.692045][T10684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.706761][T10684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.785490][ T5949] Bluetooth: hci1: command tx timeout [ 133.848964][T10684] hsr_slave_0: entered promiscuous mode [ 133.851245][T10684] hsr_slave_1: entered promiscuous mode [ 133.924797][ T78] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.078539][ T78] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.176989][ T78] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.278705][ T78] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.289885][T10720] chnl_net:caif_netlink_parms(): no params data found [ 134.335709][ T5949] Bluetooth: hci0: command tx timeout [ 134.443436][T10756] __vm_enough_memory: pid: 10756, comm: syz.4.1055, bytes: 21199697842176 not enough memory for the allocation [ 134.718076][T10720] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.720830][T10720] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.723249][T10720] bridge_slave_0: entered allmulticast mode [ 134.726204][T10720] bridge_slave_0: entered promiscuous mode [ 134.748618][T10720] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.751053][T10769] binder_alloc: binder_alloc_mmap_handler: 10766 200000ffc000-200000ffd000 already mapped failed -16 [ 134.751082][T10720] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.765430][T10720] bridge_slave_1: entered allmulticast mode [ 134.768202][T10720] bridge_slave_1: entered promiscuous mode [ 134.846839][T10720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.853541][T10720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.902391][T10720] team0: Port device team_slave_0 added [ 134.910901][T10720] team0: Port device team_slave_1 added [ 134.963433][T10720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.966738][T10720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.974446][T10720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.984705][T10720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.987494][T10720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.997747][T10720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.087237][T10720] hsr_slave_0: entered promiscuous mode [ 135.090170][T10720] hsr_slave_1: entered promiscuous mode [ 135.093198][T10720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.100204][T10720] Cannot create hsr debugfs directory [ 135.398856][ T40] kauditd_printk_skb: 2083 callbacks suppressed [ 135.398867][ T40] audit: type=1400 audit(1746941224.815:2850): avc: denied { search } for pid=10771 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.409713][ T40] audit: type=1400 audit(1746941224.815:2851): avc: denied { search } for pid=10771 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1898 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.418637][ T40] audit: type=1400 audit(1746941224.815:2852): avc: denied { search } for pid=10771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.427302][ T40] audit: type=1400 audit(1746941224.815:2853): avc: denied { append } for pid=10771 comm="dhcpcd-run-hook" name="resolv.conf.eql.ipv4ll" dev="tmpfs" ino=6263 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.437820][ T40] audit: type=1400 audit(1746941224.815:2854): avc: denied { append open } for pid=10771 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eql.ipv4ll" dev="tmpfs" ino=6263 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.448450][ T40] audit: type=1400 audit(1746941224.815:2855): avc: denied { search } for pid=10771 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.462931][ T40] audit: type=1400 audit(1746941224.815:2856): avc: denied { search } for pid=10771 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1898 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.471076][ T40] audit: type=1400 audit(1746941224.815:2857): avc: denied { search } for pid=10771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.485411][ T40] audit: type=1400 audit(1746941224.825:2858): avc: denied { append } for pid=10771 comm="dhcpcd-run-hook" name="resolv.conf.eql.ipv4ll" dev="tmpfs" ino=6263 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.493530][ T40] audit: type=1400 audit(1746941224.825:2859): avc: denied { append open } for pid=10771 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eql.ipv4ll" dev="tmpfs" ino=6263 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.855580][ T5949] Bluetooth: hci1: command tx timeout [ 136.032967][ T78] bridge_slave_1: left allmulticast mode [ 136.035123][ T78] bridge_slave_1: left promiscuous mode [ 136.045474][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.057954][ T78] bridge_slave_0: left allmulticast mode [ 136.059594][ T78] bridge_slave_0: left promiscuous mode [ 136.061277][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.164921][T10813] i2c i2c-1: Invalid block write size 34 [ 136.364182][T10818] xt_ecn: cannot match TCP bits for non-tcp packets [ 136.396155][T10818] virtio-fs: tag not found [ 136.415392][ T5949] Bluetooth: hci0: command tx timeout [ 136.419745][ T78] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 136.460896][T10820] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 136.598943][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.607461][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.612095][ T78] bond0 (unregistering): Released all slaves [ 136.902568][T10684] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 136.966577][T10684] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 137.038318][T10684] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 137.068130][T10684] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 137.419950][ T78] hsr_slave_0: left promiscuous mode [ 137.422917][ T78] hsr_slave_1: left promiscuous mode [ 137.424983][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.428100][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.431313][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.433659][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.458475][ T78] veth1_macvtap: left promiscuous mode [ 137.460240][ T78] veth0_macvtap: left promiscuous mode [ 137.462092][ T78] veth1_vlan: left promiscuous mode [ 137.463766][ T78] veth0_vlan: left promiscuous mode [ 137.576931][T10862] QAT: Device 7 not found [ 137.935500][ T5949] Bluetooth: hci1: command tx timeout [ 138.164469][ T78] team0 (unregistering): Port device team_slave_1 removed [ 138.241499][ T78] team0 (unregistering): Port device team_slave_0 removed [ 138.495473][ T5949] Bluetooth: hci0: command tx timeout [ 138.973588][T10684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.035097][T10720] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 139.059556][T10720] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 139.083556][T10684] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.086293][T10720] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 139.093619][T10720] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 139.102221][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.104532][ T6237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.110639][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1085'. [ 139.126132][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.127325][T10875] netlink: 'syz.4.1085': attribute type 10 has an invalid length. [ 139.128374][ T6237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.137831][T10875] hsr_slave_0: left promiscuous mode [ 139.140011][T10875] hsr_slave_1: left promiscuous mode [ 139.185661][ T5998] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 139.198661][ T78] IPVS: stop unused estimator thread 0... [ 139.312258][T10720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.342995][T10720] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.352609][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.354897][ T6249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.359507][ T5998] usb 8-1: Using ep0 maxpacket: 8 [ 139.373098][ T5998] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 139.379616][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 139.382735][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.383484][ T5998] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 139.385469][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.391944][ T5998] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 139.395060][ T5998] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 139.404977][ T5998] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 139.413513][ T5998] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.424317][ T5998] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.434597][ T5998] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.536718][T10885] virtio-fs: tag not found [ 139.658667][ T5998] usb 8-1: GET_CAPABILITIES returned 0 [ 139.660432][ T5998] usbtmc 8-1:16.0: can't read capabilities [ 139.713882][T10684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.895855][ T5998] usb 8-1: USB disconnect, device number 6 [ 139.966992][T10897] netlink: 'syz.4.1089': attribute type 10 has an invalid length. [ 139.999140][T10897] team0: Device ipvlan1 failed to register rx_handler [ 140.015354][ T5949] Bluetooth: hci1: command tx timeout [ 140.075296][T10720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.335457][T10907] program syz.4.1091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.346149][T10908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.412817][ T40] kauditd_printk_skb: 1524 callbacks suppressed [ 140.412826][ T40] audit: type=1400 audit(1746941229.825:4384): avc: denied { unmount } for pid=9289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 140.437136][ T40] audit: type=1400 audit(1746941229.855:4385): avc: denied { search } for pid=5649 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.443646][ T40] audit: type=1400 audit(1746941229.855:4386): avc: denied { search } for pid=5649 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.475448][ T40] audit: type=1400 audit(1746941229.855:4387): avc: denied { search } for pid=5649 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.482036][ T40] audit: type=1400 audit(1746941229.855:4388): avc: denied { read } for pid=5649 comm="dhcpcd" name="n59" dev="tmpfs" ino=1289 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.491628][ T40] audit: type=1400 audit(1746941229.855:4389): avc: denied { read open } for pid=5649 comm="dhcpcd" path="/run/udev/data/n59" dev="tmpfs" ino=1289 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.499716][ T40] audit: type=1400 audit(1746941229.855:4390): avc: denied { getattr } for pid=5649 comm="dhcpcd" path="/run/udev/data/n59" dev="tmpfs" ino=1289 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.508641][ T40] audit: type=1400 audit(1746941229.865:4391): avc: denied { read write } for pid=9289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 140.517562][ T40] audit: type=1400 audit(1746941229.865:4392): avc: denied { read write open } for pid=9289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 140.521608][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1092'. [ 140.528124][ T40] audit: type=1400 audit(1746941229.865:4393): avc: denied { ioctl } for pid=9289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 140.531220][T10911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.587877][T10911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.648610][T10684] veth0_vlan: entered promiscuous mode [ 140.662910][T10684] veth1_vlan: entered promiscuous mode [ 140.697668][T10684] veth0_macvtap: entered promiscuous mode [ 140.705480][T10684] veth1_macvtap: entered promiscuous mode [ 140.731500][T10684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.737007][T10684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.740726][T10684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.744629][T10684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.748756][T10684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.752748][T10684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.758096][T10684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.772376][T10684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.777408][T10684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.781041][T10684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.785853][T10684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.791012][T10684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.806004][T10684] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.809296][T10684] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.812686][T10684] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.816876][T10684] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.822542][T10914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1093'. [ 140.826590][T10914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1093'. [ 140.833270][T10914] netlink: 'syz.3.1093': attribute type 1 has an invalid length. [ 140.843604][T10914] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.847075][T10914] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.850184][T10914] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.853446][T10914] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.962386][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.973718][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.026773][ T6249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.030093][ T6249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.124115][T10720] veth0_vlan: entered promiscuous mode [ 141.140743][T10720] veth1_vlan: entered promiscuous mode [ 141.197114][T10720] veth0_macvtap: entered promiscuous mode [ 141.204618][T10720] veth1_macvtap: entered promiscuous mode [ 141.227666][T10720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.231452][T10720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.234513][T10720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.238980][T10720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.242005][T10720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.245551][T10720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.248609][T10720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.252239][T10720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.266169][T10720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.276974][T10720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.280225][T10720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.283251][T10720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.289559][T10720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.292590][T10720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.296767][T10720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.300686][T10720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.310881][T10720] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.313669][T10720] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.318204][T10720] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.325287][T10720] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.472527][ T6249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.478118][ T6249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.524743][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.527604][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.776914][T10953] netlink: 'syz.8.1047': attribute type 4 has an invalid length. [ 141.779768][T10953] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1047'. [ 141.786635][T10953] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 141.791626][T10954] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1103'. [ 142.942190][T10996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=10996 comm=syz.3.1116 [ 143.139110][ T5949] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 143.141901][ T5949] Bluetooth: hci2: Injecting HCI hardware error event [ 143.144668][ T5949] Bluetooth: hci2: hardware error 0x00 [ 143.195378][ T5985] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 143.345491][ T5985] usb 13-1: Using ep0 maxpacket: 32 [ 143.358212][ T5985] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.362104][ T5985] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.367395][ T5985] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 143.371429][ T5985] usb 13-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 143.374273][ T5985] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.378596][ T5985] usb 13-1: config 0 descriptor?? [ 143.532519][T11017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1121'. [ 143.830555][ T5985] usbhid 13-1:0.0: can't add hid device: -71 [ 143.832562][ T5985] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 143.844107][ T5985] usb 13-1: USB disconnect, device number 3 [ 143.854358][T11031] netlink: 'syz.3.1125': attribute type 12 has an invalid length. [ 144.147095][ T7998] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 144.281485][T11046] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1130'. [ 144.292526][T11046] netlink: 'syz.3.1130': attribute type 2 has an invalid length. [ 144.294980][T11046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1130'. [ 144.325400][ T7998] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.328759][ T7998] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 144.341758][ T7998] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.344582][ T7998] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.349523][ T7998] usb 12-1: Product: syz [ 144.350931][ T7998] usb 12-1: Manufacturer: syz [ 144.352403][ T7998] usb 12-1: SerialNumber: syz [ 144.363065][ T7998] cdc_mbim 12-1:1.0: skipping garbage [ 144.594470][T11033] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 144.680991][T11054] trusted_key: syz.8.1133 sent an empty control message without MSG_MORE. [ 144.743574][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1133'. [ 144.839734][T11066] random: crng reseeded on system resumption [ 145.225329][ T5949] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 145.226224][T11033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.231281][T11033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.363620][T11033] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 145.370290][ T7998] cdc_mbim 12-1:1.0: setting tx_max = 184 [ 145.374223][ T7998] cdc_mbim 12-1:1.0: cdc-wdm0: USB WDM device [ 145.383051][ T7998] wwan wwan0: port wwan0mbim0 attached [ 145.398012][ T7998] cdc_mbim 12-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, fe:4d:f5:db:2f:1e [ 145.416877][ T40] kauditd_printk_skb: 2981 callbacks suppressed [ 145.416887][ T40] audit: type=1400 audit(1746941234.835:7375): avc: denied { search } for pid=11071 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.429594][ T40] audit: type=1400 audit(1746941234.835:7376): avc: denied { search } for pid=11071 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1898 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.437312][ T40] audit: type=1400 audit(1746941234.835:7377): avc: denied { search } for pid=11071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.446405][ T40] audit: type=1400 audit(1746941234.835:7378): avc: denied { search } for pid=11071 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.453453][ T40] audit: type=1400 audit(1746941234.835:7379): avc: denied { search } for pid=11071 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.462895][ T40] audit: type=1400 audit(1746941234.835:7380): avc: denied { search } for pid=11071 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1898 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.471501][ T40] audit: type=1400 audit(1746941234.835:7381): avc: denied { search } for pid=11071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.479957][ T40] audit: type=1400 audit(1746941234.835:7382): avc: denied { read } for pid=11071 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.488616][ T40] audit: type=1400 audit(1746941234.835:7383): avc: denied { read open } for pid=11071 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.507019][ T40] audit: type=1400 audit(1746941234.835:7384): avc: denied { getattr } for pid=11071 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.571977][T11075] netlink: 'syz.8.1136': attribute type 1 has an invalid length. [ 145.579371][ T1329] usb 12-1: USB disconnect, device number 6 [ 145.582283][ T1329] cdc_mbim 12-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 145.686883][ T1329] wwan wwan0: port wwan0mbim0 disconnected [ 146.164219][T11092] netlink: 'syz.8.1142': attribute type 1 has an invalid length. [ 146.178951][T11092] netlink: 'syz.8.1142': attribute type 2 has an invalid length. [ 146.190656][T11092] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1142'. [ 146.395941][T11102] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1144'. [ 146.419852][T11103] syz.4.1145: attempt to access beyond end of device [ 146.419852][T11103] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 146.424045][T11103] gfs2: error -5 reading superblock [ 147.350147][T11147] block device autoloading is deprecated and will be removed. [ 147.579516][T11152] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.797634][T11168] netlink: 'syz.7.1163': attribute type 11 has an invalid length. [ 147.800162][T11168] netlink: 'syz.7.1163': attribute type 11 has an invalid length. [ 147.802524][T11168] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1163'. [ 147.919642][T11178] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 147.963441][T11180] tipc: Started in network mode [ 147.985317][T11180] tipc: Node identity 4, cluster identity 4711 [ 147.987285][T11180] tipc: Node number set to 4 [ 148.096497][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1167'. [ 148.296549][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1170'. [ 148.780637][T11216] XFS (nullb0): Invalid superblock magic number [ 148.808782][T11225] netlink: 'syz.3.1175': attribute type 28 has an invalid length. [ 148.811423][T11225] netlink: 'syz.3.1175': attribute type 3 has an invalid length. [ 148.813906][T11225] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1175'. [ 149.239475][T11243] syz.3.1180: attempt to access beyond end of device [ 149.239475][T11243] sr0: rw=4096, sector=0, nr_sectors = 4 limit=0 [ 149.243514][T11243] EXT4-fs (sr0): unable to read superblock [ 149.520418][T11263] netlink: 'syz.8.1186': attribute type 1 has an invalid length. [ 149.559408][T11263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=11263 comm=syz.8.1186 [ 149.608463][T11202] syz.4.1171 (11202): drop_caches: 1 [ 149.865485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 150.165491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 150.195705][ T5949] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 150.198825][ T5949] CPU: 0 UID: 0 PID: 5949 Comm: kworker/u33:7 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 150.198840][ T5949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.198848][ T5949] Workqueue: hci1 hci_rx_work [ 150.198860][ T5949] Call Trace: [ 150.198865][ T5949] [ 150.198869][ T5949] dump_stack_lvl+0x16c/0x1f0 [ 150.198885][ T5949] sysfs_warn_dup+0x7f/0xa0 [ 150.198903][ T5949] sysfs_create_dir_ns+0x24b/0x2b0 [ 150.198920][ T5949] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 150.198936][ T5949] ? find_held_lock+0x2b/0x80 [ 150.198951][ T5949] ? do_raw_spin_unlock+0x172/0x230 [ 150.198962][ T5949] kobject_add_internal+0x2c4/0x9b0 [ 150.198981][ T5949] kobject_add+0x16e/0x240 [ 150.198996][ T5949] ? __pfx_kobject_add+0x10/0x10 [ 150.199012][ T5949] ? do_raw_spin_unlock+0x172/0x230 [ 150.199023][ T5949] ? kobject_put+0xab/0x5a0 [ 150.199040][ T5949] device_add+0x288/0x1a70 [ 150.199054][ T5949] ? __pfx_dev_set_name+0x10/0x10 [ 150.199068][ T5949] ? __pfx_device_add+0x10/0x10 [ 150.199080][ T5949] ? mgmt_send_event_skb+0x2fb/0x460 [ 150.199098][ T5949] hci_conn_add_sysfs+0x17e/0x230 [ 150.199108][ T5949] le_conn_complete_evt+0x1075/0x1d70 [ 150.199125][ T5949] ? rcu_is_watching+0x12/0xc0 [ 150.199138][ T5949] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 150.199157][ T5949] ? hci_event_packet+0x43c/0x1190 [ 150.199175][ T5949] hci_le_conn_complete_evt+0x23c/0x370 [ 150.199193][ T5949] hci_le_meta_evt+0x2f3/0x5e0 [ 150.199202][ T5949] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 150.199220][ T5949] hci_event_packet+0x669/0x1190 [ 150.199236][ T5949] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 150.199246][ T5949] ? __pfx_hci_event_packet+0x10/0x10 [ 150.199264][ T5949] ? kcov_remote_start+0x3c9/0x6d0 [ 150.199274][ T5949] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.199291][ T5949] hci_rx_work+0x2c5/0x16b0 [ 150.199300][ T5949] ? rcu_is_watching+0x12/0xc0 [ 150.199313][ T5949] process_one_work+0x9cc/0x1b70 [ 150.199330][ T5949] ? __pfx_process_one_work+0x10/0x10 [ 150.199344][ T5949] ? assign_work+0x1a0/0x250 [ 150.199355][ T5949] worker_thread+0x6c8/0xf10 [ 150.199371][ T5949] ? __pfx_worker_thread+0x10/0x10 [ 150.199382][ T5949] kthread+0x3c2/0x780 [ 150.199391][ T5949] ? __pfx_kthread+0x10/0x10 [ 150.199399][ T5949] ? __pfx_kthread+0x10/0x10 [ 150.199407][ T5949] ? __pfx_kthread+0x10/0x10 [ 150.199416][ T5949] ? __pfx_kthread+0x10/0x10 [ 150.199424][ T5949] ? rcu_is_watching+0x12/0xc0 [ 150.199436][ T5949] ? __pfx_kthread+0x10/0x10 [ 150.199445][ T5949] ret_from_fork+0x45/0x80 [ 150.199454][ T5949] ? __pfx_kthread+0x10/0x10 [ 150.199463][ T5949] ret_from_fork_asm+0x1a/0x30 [ 150.199484][ T5949] [ 150.199498][ T5949] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 150.286769][ T5949] Bluetooth: hci1: failed to register connection device [ 150.321258][T11281] netlink: 'syz.4.1192': attribute type 11 has an invalid length. [ 150.411999][T11284] tipc: Started in network mode [ 150.428979][T11284] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 150.432800][T11284] tipc: Enabled bearer , priority 10 [ 150.436686][ T40] kauditd_printk_skb: 3178 callbacks suppressed [ 150.436694][ T40] audit: type=1400 audit(1746941239.855:10563): avc: denied { watch watch_reads } for pid=11283 comm="syz.7.1193" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.448131][ T40] audit: type=1400 audit(1746941239.855:10564): avc: denied { read write } for pid=11285 comm="syz.4.1194" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 150.468276][ T40] audit: type=1400 audit(1746941239.855:10565): avc: denied { read write open } for pid=11285 comm="syz.4.1194" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 150.479858][T11288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1195'. [ 150.483651][ T40] audit: type=1400 audit(1746941239.855:10566): avc: denied { ioctl } for pid=11285 comm="syz.4.1194" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 150.500330][ T40] audit: type=1400 audit(1746941239.865:10567): avc: denied { read write } for pid=11286 comm="syz.3.1195" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.516475][ T40] audit: type=1400 audit(1746941239.865:10568): avc: denied { read write open } for pid=11286 comm="syz.3.1195" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.562704][T11291] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1195'. [ 150.565294][ T40] audit: type=1400 audit(1746941239.875:10569): avc: denied { ioctl } for pid=11286 comm="syz.3.1195" path="/dev/input/event0" dev="devtmpfs" ino=941 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.573503][ T40] audit: type=1400 audit(1746941239.875:10570): avc: denied { read } for pid=11286 comm="syz.3.1195" dev="nsfs" ino=4026533384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 150.620610][ T40] audit: type=1400 audit(1746941239.875:10571): avc: denied { read open } for pid=11286 comm="syz.3.1195" path="net:[4026533384]" dev="nsfs" ino=4026533384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 150.635295][ T40] audit: type=1400 audit(1746941239.875:10572): avc: denied { create } for pid=11286 comm="syz.3.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.654093][T11294] netlink: 'syz.4.1196': attribute type 2 has an invalid length. [ 151.075959][T11313] random: crng reseeded on system resumption [ 151.209287][T11319] Cannot find set identified by id 0 to match [ 151.283460][T11313] Unrecognized hibernate image header format! [ 151.296777][T11313] PM: hibernation: Image mismatch: architecture specific data [ 151.436787][ T6023] tipc: Node number set to 4269801488 [ 151.467672][T11330] netlink: 'syz.4.1203': attribute type 1 has an invalid length. [ 151.470203][T11330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.595317][ T1329] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 151.750090][T11342] futex_wake_op: syz.8.1206 tries to shift op by 32; fix this program [ 151.758219][ T1329] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.761333][ T1329] usb 12-1: config 0 has no interfaces? [ 151.763080][ T1329] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.776412][ T1329] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.780496][ T1329] usb 12-1: config 0 descriptor?? [ 151.885105][T11341] sg_write: data in/out 65499/10 bytes for SCSI command 0x2a-- guessing data in; [ 151.885105][T11341] program syz.4.1205 not setting count and/or reply_len properly [ 152.239632][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 152.242377][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1208'. [ 152.250638][T11353] ipvlan2: entered allmulticast mode [ 152.252260][T11353] veth0_vlan: entered allmulticast mode [ 152.345336][ T5942] Bluetooth: hci1: command tx timeout [ 152.634799][T11366] sctp: [Deprecated]: syz.8.1212 (pid 11366) Use of int in max_burst socket option deprecated. [ 152.634799][T11366] Use struct sctp_assoc_value instead [ 152.723587][T11369] netlink: 'syz.8.1213': attribute type 1 has an invalid length. [ 152.727882][T11369] netlink: 'syz.8.1213': attribute type 2 has an invalid length. [ 152.983896][T11383] netlink: 'syz.3.1216': attribute type 10 has an invalid length. [ 152.986689][T11383] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1216'. [ 152.998252][T11383] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 153.001118][T11383] team0: Failed to send options change via netlink (err -105) [ 153.003496][T11383] team0: Port device geneve0 added [ 153.339552][T11405] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 153.343288][T11405] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 153.347101][T11405] CPU: 1 UID: 0 PID: 11405 Comm: syz.3.1222 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 153.351124][T11405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.354562][T11405] RIP: 0010:generic_hwtstamp_ioctl_lower+0x185/0x380 [ 153.356732][T11405] Code: 4c 89 e2 48 c1 ea 03 80 3c 02 00 0f 85 e1 01 00 00 48 be 00 00 00 00 00 fc ff df 49 8b 45 10 48 8d 78 10 48 89 fa 48 c1 ea 03 <0f> b6 0c 32 48 8d 50 27 49 89 d0 83 e2 07 49 c1 e8 03 41 0f b6 34 [ 153.363099][T11405] RSP: 0018:ffffc900062c7050 EFLAGS: 00010202 [ 153.365284][T11405] RAX: 0000000000000000 RBX: 1ffff92000c58e0c RCX: ffffc90027262000 [ 153.368059][T11405] RDX: 0000000000000002 RSI: dffffc0000000000 RDI: 0000000000000010 [ 153.370554][T11405] RBP: ffffc900062c7130 R08: 0000000000000001 R09: 0000000000000003 [ 153.373032][T11405] R10: ffffc900062c709b R11: 0000000000000000 R12: ffffc900062c7218 [ 153.375340][ T5942] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 153.375578][T11405] R13: ffffc900062c7208 R14: ffff888061d3a000 R15: ffffc900062c7090 [ 153.378496][ T5942] Bluetooth: hci3: Injecting HCI hardware error event [ 153.380833][T11405] FS: 00007f8337c1d6c0(0000) GS:ffff8880d6ae1000(0000) knlGS:0000000000000000 [ 153.380871][T11405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.380885][T11405] CR2: 000000110c37ccd5 CR3: 0000000049237000 CR4: 0000000000352ef0 [ 153.383757][ T5942] Bluetooth: hci3: hardware error 0x00 [ 153.386414][T11405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.386424][T11405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.386430][T11405] Call Trace: [ 153.386435][T11405] [ 153.386440][T11405] ? __pfx_generic_hwtstamp_ioctl_lower+0x10/0x10 [ 153.386462][T11405] ? __pfx___mutex_trylock_common+0x10/0x10 [ 153.386481][T11405] generic_hwtstamp_get_lower+0xe8/0x130 [ 153.405840][T11405] dev_get_hwtstamp_phylib+0x181/0x610 [ 153.407636][T11405] tsconfig_prepare_data+0x15e/0x620 [ 153.409258][T11405] ? __pfx_tsconfig_prepare_data+0x10/0x10 [ 153.411277][T11405] ? __pfx___mutex_lock+0x10/0x10 [ 153.413030][T11405] ? skb_put+0x138/0x1b0 [ 153.414539][T11405] ethnl_default_dumpit+0x6cf/0xed0 [ 153.416199][T11405] genl_dumpit+0x122/0x230 [ 153.417640][T11405] netlink_dump+0x53b/0xd00 [ 153.419085][T11405] ? __pfx_netlink_dump+0x10/0x10 [ 153.420699][T11405] ? rcu_is_watching+0x12/0xc0 [ 153.422226][T11405] ? ethnl_default_start+0x2dd/0x420 [ 153.423884][T11405] ? __pfx_ethnl_default_start+0x10/0x10 [ 153.425572][T11405] ? genl_start+0x67f/0x980 [ 153.426953][T11405] __netlink_dump_start+0x6d6/0x990 [ 153.428839][T11405] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 153.430778][T11405] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 153.433072][T11405] ? kfree_skbmem+0x1a4/0x1f0 [ 153.434990][T11405] ? __pfx_genl_get_cmd+0x10/0x10 [ 153.437077][T11405] ? __pfx_genl_start+0x10/0x10 [ 153.439151][T11405] ? __pfx_genl_dumpit+0x10/0x10 [ 153.441216][T11405] ? __pfx_genl_done+0x10/0x10 [ 153.443116][T11405] ? __local_bh_enable_ip+0xa4/0x120 [ 153.445332][T11405] ? __dev_queue_xmit+0x896/0x43e0 [ 153.447213][T11405] ? __radix_tree_lookup+0x21f/0x2c0 [ 153.448875][T11405] genl_rcv_msg+0x46e/0x800 [ 153.450361][T11405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.451951][T11405] ? __pfx___dev_queue_xmit+0x10/0x10 [ 153.453651][T11405] ? __pfx_ethnl_default_start+0x10/0x10 [ 153.455448][T11405] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 153.457239][T11405] ? __pfx_ethnl_default_done+0x10/0x10 [ 153.458993][T11405] ? __lock_acquire+0xaa4/0x1ba0 [ 153.460690][T11405] netlink_rcv_skb+0x16a/0x440 [ 153.462219][T11405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.463814][T11405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.465492][T11405] ? __pfx_down_read+0x10/0x10 [ 153.467029][T11405] ? netlink_deliver_tap+0x1ae/0xd30 [ 153.468699][T11405] genl_rcv+0x28/0x40 [ 153.469979][T11405] netlink_unicast+0x53a/0x7f0 [ 153.471641][T11405] ? __pfx_netlink_unicast+0x10/0x10 [ 153.473306][T11405] netlink_sendmsg+0x8d1/0xdd0 [ 153.474840][T11405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.476484][T11405] ____sys_sendmsg+0xa95/0xc70 [ 153.478011][T11405] ? copy_msghdr_from_user+0x10a/0x160 [ 153.479662][T11405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.481330][T11405] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 153.483135][T11405] ___sys_sendmsg+0x134/0x1d0 [ 153.485064][T11405] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.487277][T11405] __sys_sendmsg+0x16d/0x220 [ 153.489251][T11405] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.491348][T11405] ? __x64_sys_futex+0x1e0/0x4c0 [ 153.493460][T11405] ? rcu_is_watching+0x12/0xc0 [ 153.495551][T11405] do_syscall_64+0xcd/0x260 [ 153.497508][T11405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.500036][T11405] RIP: 0033:0x7f8336d8e969 [ 153.501494][T11405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.507450][T11405] RSP: 002b:00007f8337c1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.510046][T11405] RAX: ffffffffffffffda RBX: 00007f8336fb5fa0 RCX: 00007f8336d8e969 [ 153.512537][T11405] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 153.514988][T11405] RBP: 00007f8336e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 153.517435][T11405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.519877][T11405] R13: 0000000000000000 R14: 00007f8336fb5fa0 R15: 00007ffe5afdb358 [ 153.522355][T11405] [ 153.523336][T11405] Modules linked in: [ 153.525341][T11405] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 153.585358][T11405] RIP: 0010:generic_hwtstamp_ioctl_lower+0x185/0x380 [ 153.587442][T11405] Code: 4c 89 e2 48 c1 ea 03 80 3c 02 00 0f 85 e1 01 00 00 48 be 00 00 00 00 00 fc ff df 49 8b 45 10 48 8d 78 10 48 89 fa 48 c1 ea 03 <0f> b6 0c 32 48 8d 50 27 49 89 d0 83 e2 07 49 c1 e8 03 41 0f b6 34 [ 153.593138][T11405] RSP: 0018:ffffc900062c7050 EFLAGS: 00010202 [ 153.594985][T11405] RAX: 0000000000000000 RBX: 1ffff92000c58e0c RCX: ffffc90027262000 [ 153.604092][T11405] RDX: 0000000000000002 RSI: dffffc0000000000 RDI: 0000000000000010 [ 153.608156][T11405] RBP: ffffc900062c7130 R08: 0000000000000001 R09: 0000000000000003 [ 153.610526][T11405] R10: ffffc900062c709b R11: 0000000000000000 R12: ffffc900062c7218 [ 153.615281][T11405] R13: ffffc900062c7208 R14: ffff888061d3a000 R15: ffffc900062c7090 [ 153.617833][T11405] FS: 00007f8337c1d6c0(0000) GS:ffff8880d69e1000(0000) knlGS:0000000000000000 [ 153.620554][T11405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.622535][T11405] CR2: 000055d0c9d3bb08 CR3: 0000000049237000 CR4: 0000000000352ef0 [ 153.624928][T11405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.628663][T11405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.631035][T11405] Kernel panic - not syncing: Fatal exception [ 153.633503][T11405] Kernel Offset: disabled [ 153.634851][T11405] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:27:23 Registers: info registers vcpu 0 CPU#0 RAX=ffffc90000007e00 RBX=0000000000000002 RCX=ffffc90000008001 RDX=1ffff92000000f48 RSI=ffffffff84845fa5 RDI=ffffc90000007a08 RBP=ffffc90000007a50 RSP=ffffc90000007990 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90000007a08 R11=000000000001161a R12=ffffffff81a6e3b0 R13=ffffc90000007a08 R14=0000000000000000 R15=ffffffff8e097740 RIP=ffffffff81a0b550 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff92355bd58 CR3=000000001e6e5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d05211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d05211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d05211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d05211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d05211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d05211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d05383488 00007f8d05383480 00007f8d05383478 00007f8d05383450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d05eed100 00007f8d05383440 00007f8d05380004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d05383498 00007f8d05383490 00007f8d05383488 00007f8d05383480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 00000000000001f0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f5335 RDI=ffffffff9adf7520 RBP=ffffffff9adf74e0 RSP=ffffc900062c6a50 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9adf74e0 R15=ffffffff854f52d0 RIP=ffffffff854f535f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8337c1d6c0 ffffffff 00c00000 GS =0000 ffff8880d6ae1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c37ccd5 CR3=0000000049237000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8336e11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8336e11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8336e11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8336e11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8336e11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8336e11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8336f83488 00007f8336f83480 00007f8336f83478 00007f8336f83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8337aed100 00007f8336f83440 00007f8336f83458 00007f8336f834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8336f83498 00007f8336f83490 00007f8336f83488 00007f8336f83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000d47e4 RBX=0000000000000002 RCX=ffffffff8b6cd419 RDX=ffffed100d4c65be RSI=ffffffff8bf48320 RDI=ffffffff819188f1 RBP=ffffed1003ad2910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d694880 R14=ffffffff9084f610 R15=0000000000000000 RIP=ffffffff8b6cbcaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6be1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7aaf70aff8 CR3=0000000040fd9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff03bc11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff03bc11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff03bc11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff03bc11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff03bc11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff03bc11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a359233542b9bde9 fedb1c464ad95a00 36254523d346bfd0 68b0c5a627acc555 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800000d82c79c8ff 0cecd151a3592335 42b9bde9fedb0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d346bfd068b0c5a6 27acc555c08cc838 0003000000000000 024078a5000ac09a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000054 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffffff93a51de8 RCX=ffffffff84847e3e RDX=1ffffffff1b9dba3 RSI=ffffffff8bf48320 RDI=ffffffff8dcedd18 RBP=0000000000000003 RSP=ffffc9000603f570 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffffff84847e70 R13=ffffffff9ac9f248 R14=00000000000001f5 R15=0000000000000000 RIP=ffffffff81a0cb41 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ce1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd4b5e746c8 CR3=000000004bd7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000033e8 00000000001cdc18 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000