last executing test programs: 6m48.850323823s ago: executing program 32 (id=376): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900400000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700fe88000000000000000059d1d985010114003500776731"], 0x50}}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900400000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, &(0x7f0000000100)) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700fe88000000000000000059d1d985010114003500776731"], 0x50}}, 0x0) (async) 6m45.201804896s ago: executing program 33 (id=447): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) r2 = dup(r1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffffffffffdc7) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0xedf8296cd01ed84e) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0xffffffffffffff22, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1001, 0x3}, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0xd}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/84, 0x0, 0x1, 0x1d}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) r6 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fcntl$addseals(r6, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x800}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="c30000009e000000620a00ff000000007100080400000080950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500000000000000950000ed00000200"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', r9, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3a}, 0x94) chdir(&(0x7f0000000100)='./file0\x00') 6m38.374987318s ago: executing program 34 (id=573): setreuid(0xee01, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x0, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x20040001) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x25, 0x80000, 0x2) r6 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r7, &(0x7f0000000380)=ANY=[], 0x79) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1080c2, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000380)={0x8, 0x7, 0x1, 0x8, 0x81, "abd60e99b0c43f1bd6352a07bda557a1830983", 0x1, 0x8}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r10, 0xb101, 0x0) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r9, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r11, 0x4) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000180)=0xd) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r12, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r12, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r12, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtclass={0x78, 0x28, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0x10, 0xa}, {0xfff3, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xc8, 0xa9}}, @TCA_RATE={0x6, 0x5, {0x80, 0xa1}}, @TCA_RATE={0x6, 0x5, {0x3, 0x65}}, @TCA_RATE={0x6, 0x5, {0x0, 0xd}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7}}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_cbs={0x8}]}, 0x78}}, 0x2000c800) r13 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r13, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 6m21.23680397s ago: executing program 35 (id=864): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x4, 0x2, {0x0}, {0xffffffffffffffff}, 0xffff, 0x196}) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000140)={&(0x7f0000000040)=""/232, 0xe8}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) statx(0xffffffffffffff9c, &(0x7f00000024c0)='./file0\x00', 0x4000, 0x1, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000002880)='./file0\x00', 0x1000, 0x200, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000029c0), &(0x7f0000002a00), &(0x7f0000002a40)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xffffffffffffffff}}, './file0\x00'}) getgroups(0x1, &(0x7f0000002ac0)=[0xee00]) statx(0xffffffffffffffff, &(0x7f0000002b00)='./file0\x00', 0x4000, 0x100, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002c40), &(0x7f0000002c80)=0x0, &(0x7f0000002cc0)=0x0) r13 = getgid() read$FUSE(0xffffffffffffffff, &(0x7f0000002d00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r16 = getegid() lstat(&(0x7f0000004d40)='./file0\x00', &(0x7f0000004d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000005540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, 0xffffffffffffffff}}, './file0\x00'}) syz_fuse_handle_req(r2, &(0x7f00000001c0)="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", 0x2000, &(0x7f00000056c0)={&(0x7f00000021c0)={0x50, 0xffffffffffffffda, 0xe2f1, {0x7, 0x2b, 0xfff, 0x8010024, 0xb757, 0x3, 0x1, 0x2, 0x0, 0x0, 0x8, 0x2}}, &(0x7f0000002240)={0x18, 0x0, 0x3, {0xd3a}}, &(0x7f0000002280)={0x18, 0x0, 0x9, {0x3}}, &(0x7f00000022c0)={0x18, 0xfffffffffffffffe, 0x3, {0x2}}, &(0x7f0000002300)={0x18, 0x0, 0x3ff, {0x4f}}, &(0x7f0000002340)={0x28, 0x0, 0x100000000, {{0x10, 0xffffffffffffffff, 0x0, r0}}}, &(0x7f0000002380)={0x60, 0xfffffffffffffffe, 0x8, {{0x1, 0x0, 0x2, 0x5b1, 0x5, 0x397, 0x4, 0x9}}}, &(0x7f0000002400)={0x18, 0x0, 0x7fff, {0x7}}, &(0x7f0000002440)={0x17, 0xfffffffffffffffe, 0x9, {'!%(\\-/\x00'}}, &(0x7f0000002480)={0x20, 0xffffffffffffffda, 0x4, {0x0, 0x2}}, &(0x7f0000002600)={0x78, 0x0, 0x34, {0x80000000, 0x1, 0x0, {0x0, 0x4, 0x100000000, 0x6, 0x4, 0x1ff, 0x1e4b, 0x0, 0x4, 0x6000, 0x0, r1, r3, 0x7, 0xffffffff}}}, &(0x7f0000002700)={0x90, 0xfffffffffffffffe, 0x200, {0x3, 0x1, 0x5, 0xf, 0x3ff, 0x5, {0x6, 0x0, 0xc00000000, 0x4, 0x7, 0x10fa, 0x7fffffff, 0xa, 0x4, 0xa000, 0xffffeb42, r1, r4, 0x0, 0x9}}}, &(0x7f00000027c0)={0x88, 0x0, 0x7fffffff, [{0x6, 0x2, 0x1, 0x8, '&'}, {0x6, 0x6, 0x1, 0x7, '*'}, {0x6, 0x200, 0x1, 0x9, '%'}, {0x3, 0x7, 0x0, 0x9}]}, &(0x7f0000004e00)={0x628, 0x0, 0x0, [{{0x1, 0x1, 0x8, 0x8, 0x7, 0x6, {0x6, 0x6, 0x36, 0x10, 0xffff, 0xbfe0, 0x6, 0x80000001, 0x6, 0x6000, 0x8, 0xee01, r5, 0x6, 0x1a73}}, {0x0, 0x3, 0x7, 0x0, '}:-.,]/'}}, {{0x5, 0x1, 0x200000000000000, 0x0, 0x2, 0x1, {0x2, 0x7, 0x8, 0x3, 0x0, 0x9, 0x669, 0x1, 0x1264, 0x0, 0x2, r6, 0xee01, 0x2, 0x400}}, {0x5, 0x4, 0x0, 0x10}}, {{0x5, 0x1, 0x100, 0x5, 0x8000, 0xffff, {0x4, 0x0, 0x4, 0x40e7471c, 0x7, 0x6, 0x6b38, 0x1, 0x3, 0xa000, 0x7fffffff, r8, r9, 0x79e, 0xd28}}, {0x3, 0x2, 0x1, 0x2391, '*'}}, {{0x3, 0x0, 0x4, 0x9, 0x4, 0x4, {0x3, 0xfffffffffffffffb, 0x8, 0x672, 0x6, 0xa, 0x7ff, 0x2, 0x6133, 0x6000, 0x0, r1, r10, 0xc, 0x10}}, {0x0, 0x9, 0x6, 0x4, '%[[!:\x8e'}}, {{0x0, 0x2, 0x5, 0x8000000000000001, 0x81, 0x10, {0x4, 0x2, 0x0, 0xd8, 0x5a1c9877, 0x7, 0x7ff, 0xfffffff9, 0x89, 0x8000, 0x9a, r1, r12, 0x0, 0xfffffffd}}, {0x2, 0xd, 0x0, 0x9}}, {{0x4, 0x3, 0x0, 0x2, 0xc, 0x7, {0x2, 0x3, 0x4, 0x3, 0x8, 0x100, 0x7, 0x0, 0x5, 0xc000, 0x7f, r1, r13, 0x9, 0x2}}, {0x1, 0x10000, 0x0, 0x1}}, {{0x2, 0x0, 0x4d4, 0x10, 0xf, 0xb, {0x4, 0x8, 0x800, 0xbb, 0x2, 0x8, 0x100, 0x8, 0x4, 0xc000, 0x1, r1, r14, 0x0, 0x4}}, {0x1, 0x2, 0x8, 0x6, '{\',:$+@!'}}, {{0x5, 0x3, 0x40, 0x5, 0xff, 0x4, {0x3, 0xd21b, 0x5, 0x0, 0xa1, 0x400, 0x8000, 0x3, 0x7, 0x2000, 0x6, r1, r16, 0x7fff, 0x2}}, {0x4, 0x0, 0x0, 0x6}}, {{0x4, 0x1, 0x68ff, 0xffffffff7fffffff, 0xffff69a8, 0x80000001, {0x0, 0x0, 0x1, 0x2, 0xc5ef, 0x2, 0x36d, 0xd, 0x3, 0x4000, 0xa1, r1, 0xee00, 0x8, 0x8}}, {0x5, 0x8, 0x0, 0x8}}, {{0x5, 0x0, 0x1f51, 0x8, 0x5, 0x8, {0x1, 0x7, 0xb4c, 0xaa3d, 0x5, 0x8000000000000000, 0x5143, 0xa226, 0x1000, 0xa000, 0x0, r1, r17, 0x800, 0x8000}}, {0x5, 0x3, 0x6, 0xfffffff7, '!*)[@)'}}]}, &(0x7f0000005440)={0xa0, 0x0, 0xffffffff, {{0x1, 0x1, 0x0, 0x6, 0x17f0, 0x4, {0x2, 0x400, 0x2, 0x5, 0x9, 0x10, 0x5, 0x8, 0x80000000, 0xc000, 0x80000001, r1, 0xee00, 0x3, 0x4}}, {0x0, 0x16}}}, &(0x7f0000005500)={0x20, 0x0, 0xa, {0x1, 0x0, 0x78, 0x9}}, &(0x7f0000005580)={0x130, 0xfffffffffffffff5, 0x1, {0x2c2, 0xff, 0x0, '\x00', {0x0, 0x5, 0x4, 0x990, r1, r19, 0x2000, '\x00', 0x5, 0x238, 0x7, 0x9, {0x1d9e976c}, {0x0, 0x8001}, {0x9, 0x6}, {0x100, 0x73}, 0xa, 0x1, 0x1, 0x1}}}}) statx(r7, &(0x7f0000005780)='./file0\x00', 0x2000, 0x80, &(0x7f00000057c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r20, r13, r11) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000005a80)={&(0x7f0000005980)=[0x0, 0x0, 0x0], &(0x7f00000059c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000005a00)=[0x0, 0x0, 0x0], &(0x7f0000005a40)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x6, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000005ac0)={&(0x7f00000058c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000005900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, r21}) r22 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r22, 0x8933, &(0x7f0000005b00)={'veth1\x00'}) ioctl$USBDEVFS_FORBID_SUSPEND(r7, 0x5521) r23 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000005b40), 0x8800, 0x0) io_setup(0x4, &(0x7f0000005b80)=0x0) r25 = socket$inet6(0xa, 0x800, 0x80000000) r26 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000006000), 0x800, 0x0) io_submit(r24, 0x5, &(0x7f0000007080)=[&(0x7f0000005c80)={0x0, 0x0, 0x0, 0x3, 0x0, r22, &(0x7f0000005bc0)="9d465cf0972d425b657d1ce8fcb627879923ed1bb5ffc0bb7ef3f5bd9a60c29e3c09f10bad49828588403fb608dd8d5aa9e248a29fc5292ece0bd1458c3ad25dc9b5bd51712f50c82fe16c4b9d404480dda0e9e591700bd1feade1391bbe0d6789f49fea7171d0b86b89ced3f7ed0f7cb5945c030816d6bb9e778a4f70c08e75c3fcf063a82aa2c448182fd97bb168d23376444144866da9ffe2a0c083a13c7a6bf00648463c56e84fd61126d0493bdf12507589a4e7", 0xb6, 0x2}, &(0x7f0000005d80)={0x0, 0x0, 0x0, 0x1, 0x95, r7, &(0x7f0000005cc0)="d66902c1a1fde0be24643f9b6d6dc0c739c0ecd6904fdfad226810fa51961f63c9355c34ebdbc2a70fdba7cf6e3b238244c7b484e35f83b3c60d60a26334beb5936e8390f731b73ec005346855a897e189c3a4c319c8195d28ac0063608111c293ef843fc613260eac967eb3a3f7cc83e3b3d0e84e4af221f9ca9106dca119079289881a212433121cf1ed57637375329b8becc493fb5dde67125b58b63bfc9a", 0xa0, 0xfffffffffffffffd, 0x0, 0x1, r23}, &(0x7f0000005ec0)={0x0, 0x0, 0x0, 0x1, 0x9, r25, &(0x7f0000005dc0)="28a516a2612cb99e8ee263eac6f3033d1f96f7c01b5095ea78c79ef42456aaa8e3615fb203e829b492d68820a94ab6b9c663d8ba2a80c8f125497ea91d3bad48769b5bff831b89954bcf52805aea1f33f6cb0932fd5e3b17cb359692ad915133ca54f5625811b89888767c7b50e7e7d04d74aab8d0e778ccd075af7f17eb7e5deefa19453355857abe924bd25b8643654213442a4ff83a8d7f3d1c4fd6cd31b099691ad405e8397eea62bf48380697247a853e41a8bd57ff37a7ed181ef2682859254c87313866cf72bfa4db3cc33dda2cd233c5e1c0ddc417f795163f0302e8b788d952c37904f7f51c9881dcf7bad5d097a6", 0xf3, 0x8000, 0x0, 0x3, r18}, &(0x7f0000005fc0)={0x0, 0x0, 0x0, 0x8, 0x9, r7, &(0x7f0000005f00)="6c6eda825f13c785365e6ef5d65cf5c9a92c57794a0514349571cf3a6c86d5926c12bf6f47e596df966bff1ef0b650012dce357dc5b77780c2701b484d4e4f8770f502b12507b3458b84bbb751ea7efbf0bd50d20e16a8988e0cdd0b6ce21c3fdf253e49c48a6924e077ed8bb9e4e2f2be5078c277ff20ecf60715354fab57725811f9651d4c7a58b8af46de8cc5f306ed9905a70b7d70f9e77e5c33a0fd95afff7c2bcc1c3e14a08e6012d0d62026ecfe572c5e6b9946ec", 0xb8, 0x6, 0x0, 0x1, r18}, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x6, 0xfff, r26, &(0x7f0000006040)="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", 0x1000, 0x8000000000000001, 0x0, 0x0, r23}]) syz_clone3(&(0x7f0000007380)={0x40100000, &(0x7f00000070c0), &(0x7f0000007100), &(0x7f0000007140), {0x3e}, &(0x7f0000007180)=""/182, 0xb6, &(0x7f0000007240)=""/195, &(0x7f0000007340)=[r0, r0, r15, r0, 0xffffffffffffffff, r15, r15], 0x7, {r7}}, 0x58) 4m25.473011241s ago: executing program 36 (id=2495): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f00000000c0)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x3) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000340)={0x18}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m9.17263969s ago: executing program 37 (id=2693): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000000)={0xc, r4}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="1b0000001e005f0214f6fffffffffff80700"/27, 0x1b) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000380)={0x8, r4}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0xc3}, 0x81, 0x7f, 0x8, 0x3, 0xbea9, "2797cbbce987310648ff4256060f29031dcf21768d5ebec18641b9ceeef3c9a720f9a70c8e793b44f02cef399c3bdd07022df982827619a929589a78254564f5ddac9a40ffb12b571ca999b03de21e2a1d3f9d0e49276f1340cae3aa1f2d1fb8b519db6d12b70bb2b35af1bb0127d9468fce29b479f09f4af347950c32dc8bd6"}) r9 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[], 0x34}}, 0x440c1) r10 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x8, 0x183043) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f00000001c0)={0x1, 0x5, 0x0, 0x7, 0x3945, 0x6, 0x5, 0x6, 0x400, 0xffffffff, 0x6, 0x5}) r11 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$KDSKBSENT(r11, 0x4b49, &(0x7f0000000680)={0x7, "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"}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010025bd700001dcdf2500000000", @ANYRES32=r2, @ANYBLOB="00000000030000000a0005000700000000000080"], 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 3m43.644416405s ago: executing program 9 (id=2909): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85edaca8300ff0000"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000000)={0x2, 0xffffffff, 0x3ff}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd(0xfffffc6f) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000000)={0x3, r8}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) mount(&(0x7f0000000000)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="321444"], 0x14c}}, 0x4810) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000d810000000000000000000000bf7bdc29840000"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r11, r12, 0x4, 0x0, @void}, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x40, 0x700, 0x10, 0xfffff67f, {{0x1b, 0x4, 0x3, 0x6, 0x6c, 0x65, 0x0, 0x6, 0x2f, 0x0, @local, @loopback, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x87, 0x3, 0x0, [{@multicast2, 0xdc2}, {@multicast1, 0x7}, {@multicast1, 0x4}]}, @lsrr={0x83, 0x13, 0x6a, [@broadcast, @multicast2, @private=0xa010100, @multicast1]}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x54, 0x0, 0x3}, @rr={0x7, 0x13, 0x8b, [@loopback, @rand_addr=0x64010102, @empty, @remote]}, @ra={0x94, 0x4, 0x8}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00042abd7000fcdbdf2508000000580001801400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r14, @ANYBLOB="060000007dc6699d31f15df0f72aa673b3e3e8d301b1d6070d80a41d8ba2aa611898460a000000000000009efcb12df805357be8cc6979f4adc258f484452419282d68553461800a014ca330", @ANYRES32=r15, @ANYBLOB="0800030002000000140002007866726d30000000000000000000000014000200766c616e3100"/48], 0x6c}, 0x1, 0x0, 0x0, 0xc4}, 0x240008d0) 3m42.319583468s ago: executing program 9 (id=2930): r0 = getpid() syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u8=&(0x7f0000001080)=0x8}}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x1a) r8 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r8, &(0x7f0000000100)=@ocfs2={0xc, 0x300fe, {0x5, 0x0, 0x2}}, 0xc041) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_pidfd_open(r0, 0x0) (async) r9 = syz_pidfd_open(r0, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x1) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) dup(r10) (async) dup(r10) setns(r9, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) linkat(r11, 0x0, 0xffffffffffffffff, 0x0, 0x1400) (async) linkat(r11, 0x0, 0xffffffffffffffff, 0x0, 0x1400) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0xb, 0x3, 0x7f, &(0x7f0000000280)="0477090f73f35c2f5beed811a2b535d78e9d6c14ae535cb38b65d0098858e3ce1ce988fca7673005fd8a15b9d1079a1a92ef7c8ed00f4c9ceba947a46118b59dd946d11431a109d3be8c2edc8e2cb980b354a489853fbd1a87f92e8bedb4b36e2b431c32750e93be2766eed66cf97a5599a5f33ee0d3e2b77c6fb78774a41a7f6c3fffa90c1b35e60d111bef6c4daa3201eb32674420fcb6971e9c95aa2c159161651f4b3957fcbf14119f16ecf9fe832fa792119b7f3dab057565bfe413059a0ab3726119eaee6cc8a95642b01e7401d45cd65a2221dfaeeaba86ad67793fe467ba134e559b99c62259a00b6a6b31321b6a217e722f4c085594f7dedd886c42a60e21ff20fb2e9f84234fa9bbe68d4c21b65e2b054315936e3914319a7f21e75c94624ee6757e2b1560bfafc3ccc065ee4da1d423fbb61e18f32f995b99476085173d5506ac17224416beed2592066fbe442b7e1ae7217ef83e5e79aabbb76c5da024a7f2698dfe032b0bfe2c99281247c6700ab808d0c9013ac44ee1cedc9e89b8d0f85ce7609560ad8f0ce2e7ecc40556a2dc268511e3cabe33536418b787aacc72a820a1ec9a7285ab5a8244665bb6c9a6410cde9524b2f988fc385e0e540cf22b12fc57f8c97f2a9faedf435ba8cf80f63885318ab48847a067ee65d4bc12b1a9c7e95649a58451ac53c5a2047627a8ceaeb282cd344eaa3991cbd41349a6a13846a1ee51eae7f98fa1df86e33538b877c33a9f0b43cf5355a965a865fe4a3fbbf1034c33a448a089951ff0d1e164c31074d2fcb54f92b08502f750baea604b466bc3b0d43e036b19565c63c64bc39a7e71aa122897eafb075934c1090ae6c8539e7277177c6dd050002ee0924609c9b4d2fa4e1d1963d33594560f6745fcd0c31771e90ecd5317f495567be86f8d0546a008a8844b3ea752f0259784c60bd66ad37d3058cf70f89ac2801d986adb4f55f8e7debc7393a111990f36b3929ed2fc1c509f9cbc8aa1d0f5f6b3b4a7faff300ce6de0f743837b21453f9c2c8e7cf290354bb1897c5a3370db49898d5a74419ede8e50de0c320e7577fda3466dc47f40806af42e246eec1258bc95742f038b2d3c6df99575f4cb974b5e420ede8aa1a90ae290bd4ec269506c8d9aa395b2199dd12e2fb1d5ecf4ef00f5fd4389c781265106bc2d8a833bcf06e2883d65481c9b99a0fb82ad2fa4af7dec8a56c59e59a9f6dd8b1acba3aa5c33fc10d2bc145f459e2870a85b68202ea7f50c7efda6c179b47797933792283f960177556929ea4e613280727c183b14f2f9edc6e86cb5b4d4d1fcbc962fc9477822c07420a365585bb9fae510dce72457d378af50afff6476174dcbf9e9e9f3d323849fa580edcb52520699df74ef0b1c3d2513d5fcaf88df446736f22c74494fb40bdc81e89ab5088659ee256f9f79b256b2043"}) 3m42.123853631s ago: executing program 9 (id=2933): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b5f9ffc2025967d8bf289125f6c280bc0c609e4585e74a10ec3411a8b316dd68f755b49bf272ee99ec56bda4d52d69c47c6b57055e7ef9f607b6bbd5e3414d38ef79dd387b89d365ba7a7b79f95cda8821e418324129edc172ed5db6d3d9c9b71f54fd31c0e29e44996d4eb064ad", 0x6e, 0xfffffffffffffffa) keyctl$update(0x2, r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="32014a32f4a3b37d2bad0f18c1b732effc27c7ead0a63d22a444cb85c891f343f2c3767d50cc8f919202185b9ffbed641af9675c627f886bc27567ac050b8fe58384c7a6783832afba20eb50b698a6a6e7e6dd2bf2b7e94f3b6014a79ee076da557a25d7c13a151942022c5065edae941eb51262000bb3bf9129432cb5e3f091a07869ec687940ac3eabbed48523bcd99283f915c140", 0x96, r1) (async) r2 = add_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="32014a32f4a3b37d2bad0f18c1b732effc27c7ead0a63d22a444cb85c891f343f2c3767d50cc8f919202185b9ffbed641af9675c627f886bc27567ac050b8fe58384c7a6783832afba20eb50b698a6a6e7e6dd2bf2b7e94f3b6014a79ee076da557a25d7c13a151942022c5065edae941eb51262000bb3bf9129432cb5e3f091a07869ec687940ac3eabbed48523bcd99283f915c140", 0x96, r1) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) select(0x40, &(0x7f0000000300)={0x2, 0x7, 0xda5d, 0xffffffffffffffff, 0x400000000000, 0x3, 0xee}, &(0x7f0000000340)={0x400, 0x5, 0x8000, 0x4, 0xeb84, 0x120000000000, 0x7, 0x81}, &(0x7f0000000380)={0x3, 0xfffffffffffffffd, 0x8, 0x3, 0x877d, 0x8d, 0x0, 0x57df1fcf}, &(0x7f00000003c0)={0x77359400}) add_key$fscrypt_provisioning(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, r1) r5 = add_key$fscrypt_provisioning(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)={0xa515e89d7a8edb40, 0x0, @a}, 0x48, r4) keyctl$negate(0xd, r5, 0x0, r2) r6 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, r5, &(0x7f0000000640)='id_resolver\x00', &(0x7f0000000680)={'syz', 0x1}, r6) (async) keyctl$search(0xa, r5, &(0x7f0000000640)='id_resolver\x00', &(0x7f0000000680)={'syz', 0x1}, r6) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r2, 0x0) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000740), 0x40001, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r3) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r7, &(0x7f00000008c0)={[{0x2d, 'rlimit'}]}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r10, 0xa00, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r10, 0xa00, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r9) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000ac0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000b00)=0x0) sendmsg$NFC_CMD_VENDOR(r9, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x138, r11, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x5}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_DATA={0xfa, 0x1f, "f42a8697e93541e5dd09b5f0faca5e1d3b49097309669053bd59d4b75a1fe2b6ceb03a0db8325f3fd86d0be71aae305dd5c6d5fd3f7fe3e3d8d9f4271aceda13ebb0e9928cf9121f861da930176218bb66a53eb9abf4be7552e0f853be0704e86db3239b2fa1eff707ccc3956f7384f67846110f7fc4d0ec221e77e530106bb84e1d0c22273ef8b2527013d56dd1f3784c71f36a642a8682ab3ad96505ea6a1518504720666c5f282e8a23c2e890d7194d6e02558a5d95d65031d5122b3607c48ffd809d164e25ecd65daf3bfbf329e7ffc1918cd3776e0fdb617a26acc39fa2894ca889381da04a00693d18bf1a8f2b2c35430afd07"}]}, 0x138}, 0x1, 0x0, 0x0, 0x48849}, 0x4081) (async) sendmsg$NFC_CMD_VENDOR(r9, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x138, r11, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x5}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_DATA={0xfa, 0x1f, "f42a8697e93541e5dd09b5f0faca5e1d3b49097309669053bd59d4b75a1fe2b6ceb03a0db8325f3fd86d0be71aae305dd5c6d5fd3f7fe3e3d8d9f4271aceda13ebb0e9928cf9121f861da930176218bb66a53eb9abf4be7552e0f853be0704e86db3239b2fa1eff707ccc3956f7384f67846110f7fc4d0ec221e77e530106bb84e1d0c22273ef8b2527013d56dd1f3784c71f36a642a8682ab3ad96505ea6a1518504720666c5f282e8a23c2e890d7194d6e02558a5d95d65031d5122b3607c48ffd809d164e25ecd65daf3bfbf329e7ffc1918cd3776e0fdb617a26acc39fa2894ca889381da04a00693d18bf1a8f2b2c35430afd07"}]}, 0x138}, 0x1, 0x0, 0x0, 0x48849}, 0x4081) keyctl$dh_compute(0x17, &(0x7f0000000d00)={r0, r2, r2}, &(0x7f0000000d40)=""/247, 0xf7, &(0x7f0000000e80)={&(0x7f0000000e40)={'blake2s-224-arm\x00'}}) r14 = add_key$user(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x0}, &(0x7f0000000f40)="71c572991c1142b6471a33a0f24e8a7f7fc5f07f17b9819c38c683910f4bb8cf8b7feb1415707546", 0x28, r4) keyctl$unlink(0x9, r14, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000001040)={&(0x7f0000000f80), 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1c, 0x0, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040090}, 0x10) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000001040)={&(0x7f0000000f80), 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1c, 0x0, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040090}, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000010c0), r9) (async) r15 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000010c0), r9) sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, r15, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004101}, 0x20004000) 3m42.016803919s ago: executing program 9 (id=2935): setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYRES8, @ANYRES32=r3, @ANYBLOB="0500d20003000700000001000000000000000000"], 0x30}}, 0x80) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r5 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x22) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@posixacl}]}}) linkat(r6, &(0x7f0000000280)='./file1\x00', r6, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='./file0\x00') acct(&(0x7f0000000240)='./bus\x00') write(r5, &(0x7f0000000140)="2600000014004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbc3, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x20000000, 0xd, 0xe}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 3m41.837372082s ago: executing program 9 (id=2938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockname$packet(r4, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 3m41.37925868s ago: executing program 9 (id=2949): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x6e57, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20}, 0x94) capset(&(0x7f0000001680)={0x19980330}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "c0adf9730c497f2f7b0a755258cb90e5f42576cc0386f975710600ef795aaa53", "39161cfd481d4fc5b8e54eca21107ba28fa5ddad802edfc40d887da4200f32df", "b99d94bc132ed02bcfb97ff25677c672d0292a76ea9ae71082d5b12ae9e66036", "d98364d0de265a7dd90ad758220a2a74039fbea229a67a57b0f83a37a9f94a12", "2d2a6f06f54fea82a6845dbadd71ee9beedd10bbd1f4c21592674a056eed5839", "8d5739ad9197de8e51c057bb", 0x0, 0x7ff, 0x9, 0x9, 0x2}}) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000280)) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) rename(0x0, &(0x7f0000000240)='\x00') ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x6, @none, 0x800, 0x1}, 0xe) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f0000000180)={0x24, @short={0x2, 0x3}}, 0x14) 3m41.293722916s ago: executing program 38 (id=2949): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x6e57, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20}, 0x94) capset(&(0x7f0000001680)={0x19980330}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "c0adf9730c497f2f7b0a755258cb90e5f42576cc0386f975710600ef795aaa53", "39161cfd481d4fc5b8e54eca21107ba28fa5ddad802edfc40d887da4200f32df", "b99d94bc132ed02bcfb97ff25677c672d0292a76ea9ae71082d5b12ae9e66036", "d98364d0de265a7dd90ad758220a2a74039fbea229a67a57b0f83a37a9f94a12", "2d2a6f06f54fea82a6845dbadd71ee9beedd10bbd1f4c21592674a056eed5839", "8d5739ad9197de8e51c057bb", 0x0, 0x7ff, 0x9, 0x9, 0x2}}) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000280)) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) rename(0x0, &(0x7f0000000240)='\x00') ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x6, @none, 0x800, 0x1}, 0xe) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f0000000180)={0x24, @short={0x2, 0x3}}, 0x14) 2m30.018084041s ago: executing program 2 (id=3556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r2, 0x0, 0x417}, 0x18) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0xa18402, 0x0) chdir(&(0x7f0000000300)='./file0\x00') (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000580)={'#! ', './file0', [{0x20, '/#.}\xe7},)-#)\'\xee!\x9dc\\\x10g[\xdf\xd8\xe84\xcc\x9e\xf8\xe5l\x0f\xfa\xe4\xd22\x90r\xd3\xfe\xf9 ^Z3\x1a\xddDX\x1d\xca\xc4\x88!\x88V\xa1\xd9\xa9\x12\x96\xf9\x81\x9a\x99\x9a\xf8}O:\x11\x89\xd4\xa2D\xf9\xe1\x85\xe9\x8cv>o\xf8\x93~]\x01\xa0\xd2\x87\xe8{4\xa7\xfc\x95\xc9e\x046*\xba\x10\xf8\x85\xdd\xb7\xa0S\xb0\xc2\xa7\x8d6\xf0L\xe93m\xde\vQ\x1a\xdf\x00\f7_\\e@dj\xa3\xf7}\xbfD\t\xcb\x9d\xc5\xf5\xf5\b1\xf0\x15\xea\xfaE?\xb1\x8c\x94\x87\x9a\xf9\n*xi\xe1\x8f\xb3=\xc7\xca\xc6\x01%\xb0\x98\xd8wS\xd2B:\xc8\\yU\xe1\x97\xfe\r\xc3\x02u\x0f\x98\xce\x9fq\xb6\x9a-\xfb+\x9f\xbf\xc3]\xf91\x9d\xaaq\xd6Q\xafHK\xed'}]}, 0xe2) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mremap(&(0x7f0000998000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000e00)={0x4ff1, r8, r7}) (async) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) 2m29.918947914s ago: executing program 2 (id=3558): r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, r2, 0x1, 0xfffffffc, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2m29.917773202s ago: executing program 2 (id=3560): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x8000}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c2f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x240080c0) 2m29.850523826s ago: executing program 2 (id=3561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000002000010000000000000000000a00000000000000000000001400110064"], 0x38}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000000000000034d564b"]) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x80000, 0x8) read$char_usb(r6, &(0x7f0000000040)=""/169, 0xa9) ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000000)=0x85) 2m29.729483248s ago: executing program 2 (id=3566): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000380)={0x2, &(0x7f0000000100)=""/143, &(0x7f0000000340)=[{0x9, 0x9f, 0x2, &(0x7f00000001c0)=""/159}, {0xfffffffe, 0x96, 0x6, &(0x7f0000000280)=""/150}]}) r1 = syz_open_dev$vcsa(&(0x7f00000003c0), 0xff, 0x0) ioctl$KVM_GET_MSRS_cpu(r1, 0xc008ae88, &(0x7f0000000400)={0xa, 0x0, [{0x220, 0x0, 0xffffffff}, {0x334, 0x0, 0xa3}, {0xa5b, 0x0, 0x80000001}, {0x844, 0x0, 0x3}, {0x263}, {0x1ae, 0x0, 0x40}, {0x829, 0x0, 0x7}, {0x833, 0x0, 0x9}, {0x880, 0x0, 0x8ed6}, {0x87e, 0x0, 0x1}]}) (async) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f00000004c0)={{0x3, @name="ed88761d9181460ae0a40b62f3747555cb588f92314bf957100af8be6046e0e0"}, "0637cb454b983d684056d32f065398076439c7a97e4b74ff1dbcf69968294cc9"}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000005c0)={0x0, 0x0, r0}) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000600)={0x0, 0x0, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000640), 0x4) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000006c0)={0x0, 0x0, 0x80000001, '\x00', &(0x7f0000000680)=0x4}) r3 = accept4$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @none}, &(0x7f0000000740)=0xe, 0x800) (async) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000007c0)={0x0, &(0x7f0000000780)=[@rdmsr={0x32, 0x18, {0x906}}], 0x18}) ppoll(&(0x7f0000000800)=[{r1, 0xd8}, {0xffffffffffffffff, 0x1060}, {r1, 0x301}, {r3, 0x1280}, {r2, 0x400}, {r1, 0x8}, {r4, 0x2120}, {r0, 0x1100}], 0x8, &(0x7f0000000840)={0x0, 0x3938700}, &(0x7f0000000880)={[0x8]}, 0x8) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x200040, 0x0) (async) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000d80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a00)={0x314, 0x3e, 0x20, 0x70bd29, 0x25dfdbff, {0xc}, [@generic="b2a0071720ba2b65177586d0992e6219c3f2659ef64f633e9754f4a62316ad055dfb409dba928a7f4e262edc17ebda57fec0ec7a7a3fd9c686d28446a8593248d24fef87ac094119a73835b99d1599e3e673465f7cf91ba328b340d6fe9ef3c02695ebf1ba7c961d86e9fce25d24625a2e1e96bdfb8be1f315c2f6586d38f775d50361b7deccdc368cddeb0cbb0a6083d8ab4416a774573be70bf6274772e90846b9f1659aae03bef923aced70c85e432435f98cfac9dee07e5ca780c39b69", @generic="5d50a743591f7de865278df3f5f88901587f1a9970e09f94ed6e6a3f895b844710cd40d49c7876116d97b056c35dfbf98b26815bb99d66826c319bd8fe5bcb8605ef52f5f6bd91344674a8e629e3865c1e538b1fd7e85bb1ddb01c639c8db9634eef01fde1f598ab7a5d5895ce2c7d904af5e1968d2a180a5a9df00a0b1dcdeaae4a45daa3cfe615fa5f6aa7890c7682cc0e246d3b68afbd2c55b33ad871089d67aaeb2ee399a3a0819ebd489d4a39006e90801f66a084aa659128a2d08a816cdfbf8e4805991b1fbcade6707b4305a12daac30115c36ed3dc6149190075550b59bb11a88d742903225bd8a4", @generic="f37a397864bddf5e1276a8c4936576588075475d8587a9969cbb87351d082e34a24b11bb9fbe1914e4f3dee1bea49bd81ff878d70de94defff8a3e073435722684651527193531fbea5100c355f432856cf34b5eea68b7415bc2d5b949be943d827fc1f96842823138aba48c7cbbce1294bd1939147f4247dc93a61ce6659d92a600162986ff7d0d6403418e8445cf609207adf01eb630b6ae650d", @typed={0x8, 0x137, 0x0, 0x0, @fd=r1}, @typed={0x4, 0x5c}, @nested={0xaa, 0x142, 0x0, 0x1, [@generic="6c7aee9847a5b56a4efa457a9d28230a9fb4c7b3877c7d03f9cf4b6de659fe670f8c6ca066650618b94d92f529d9b4051bbdfca38d7977e3fce7e89c6ad5b42c4bb62769da21f9cb65b59a87e434b6", @generic="c85af4d4cc27ed9495ef3e70d23f799d6b8cf429bf2c92de32965a29de98d64af6fff1afe841427d471c35a0ed2e48d159e526d1b0f13d7c2c18ea00c42bd72f54a7d7", @typed={0x8, 0x51, 0x0, 0x0, @uid=r6}, @generic, @typed={0xc, 0xb3, 0x0, 0x0, @u64=0x81}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000dc0)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2a3}, @in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8ea3}], 0xa8) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)=0x4) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000f80)=0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000fc0)={r1, r7, 0x25, 0x8, @val=@uprobe_multi={&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)=[0x7, 0x775, 0x9, 0x7fffffffffffffff], 0x0, 0x2, 0x4, 0x0, r8}}, 0x40) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000001000)=0x81, 0x5, 0x4) (async) shutdown(r0, 0x1) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000001040)={0x48, 0x7, r1, 0x0, 0x0, 0x0, 0x9, 0xeefc}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001100)={0x1, &(0x7f00000010c0)=[{0x200, 0x5, 0x7, 0x4}]}) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000001140)="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") (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000002140)={&(0x7f0000ff9000/0x7000)=nil, 0x7000}) (async) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000002180)) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000021c0)={0xfff, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x5, [{{0x2, 0x4e22, @empty}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e23, @private=0xa010100}}, {{0x2, 0xe, @private=0xa010102}}]}, 0x310) 2m29.729182048s ago: executing program 2 (id=3567): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x200000000, {0x0, 0x0, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040000}, 0x850) 2m13.66523032s ago: executing program 39 (id=3567): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x200000000, {0x0, 0x0, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040000}, 0x850) 2m0.169047298s ago: executing program 6 (id=4012): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="8be05ccee67533e265674df473221ced91430a56558307ee9b0c1433672393ea1f86047a035679a9030376e68a2e066b568f170a2abff6dc1c049ec93a5d8834acb5581f395e3df77bf394951fd602cc557757534b0823adcbd3b4c8b3d8f412487f91ffadd3439d4dbab92a1aac5f0994dd353a7362dfc076a702e5e383443ba20e88ba13bd8e389458e5b7cb604a6250f0a27c878cf5bd6151c7cb219fbd37e0318b5f3b03a1d8a7b1ff8da99f5cd15c2c4b3586d7a0eee250df58229a5c1d201b27871c7ea33a86c3c10709027a14f0bc0e803040b4d21016711614d047f91875090e90a18b8e9f05149c3e8d4896a8"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x810) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e733da9867748bd7669727400000000616368653d6c6f6f73652c00e49d617ee0406c128c7f8c5693f668fb742b52d79a8636d8b16db26666e8"]) chdir(&(0x7f0000000280)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000003c0)={0x4, 0xffffffffffffffff, 'id1\x00'}) sendto$inet_nvme_of_msg(r3, &(0x7f00000004c0)={@data_h2c={{0x6, 0x2, 0x18, 0x0, 0xffff6173}, 0x40, 0x93, 0x7, 0x0, "efcf6fd6"}, @val=&(0x7f0000000440)="eb01ddd6b399900ffd30413da6c5968c37f74b2bec055d95e5d31976977cde7a008a17bee6506171ab03a44ade01ceead7739cf6db8effad530dafaa4d8eb05f55ad5b54092d4567bdf1d30cb81694"}, 0x88, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r4, 0x82081fc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x80000, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x0, 0x4}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r7, @ANYRES64=r5, @ANYRESDEC=r6], 0x44}}, 0xc850) read$midi(r4, &(0x7f0000000300)=""/65, 0x41) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r8, 0x800000) 1m59.281448375s ago: executing program 6 (id=4029): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2a, 0x25dfdc03, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0xc, 0x7}, {0x3, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40004) r0 = shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f00000000c0)) unshare(0x8040080) r1 = socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) shmat(r0, &(0x7f0000a45000/0x1000)=nil, 0x7000) 1m59.215489436s ago: executing program 6 (id=4032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006000806"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)={0x20, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xf4, r5, 0x1, 0x70bd2b, 0x2, {}, [@TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x46, 0x3, "424b04da91685b105139f572c3161982d8080c454a8657f52de7fe460977e8242b46eedeca25e27680dc4a6804a9c068aa749587ce41b33910a77e21748cf08e1af7"}, @TIPC_NLA_NODE_ID={0x12, 0x3, "4dad5a640fe267b34532868f6de1"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x48, 0x3, "9c4507e0b8e57cebc3291c97c536520ca436b824d8f60b3fa61b3dc15a8e7a8dee640e62de01a6baec7279821f2f2df18471e3cf8d3334c8e8c06953ae947a5629f5c026"}, @TIPC_NLA_NODE_ID={0xf, 0x3, "e521093971c7ea42841708"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 1m59.152143048s ago: executing program 6 (id=4034): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x100008, 0x10, 0x8, 0x21801, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x48c, r1}, 0x38) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40046201, &(0x7f0000000080)='{.\x00') (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) (async) listen(r7, 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f00000007c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @private=0xa010100, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x8000, 0x3}}}}}, 0x0) (async) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000000c0)={0x2, @vbi={0x2, 0x7, 0xdd3, 0x34325258, [0x5, 0x400], [0x2, 0x7], 0x1}}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0x1, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @redirect={0x5, 0x0, 0x0, @local, {0x5, 0x4, 0x1, 0x19, 0x400, 0x65, 0xfff6, 0x1, 0x33, 0x0, @rand_addr=0x64010100, @broadcast}}}}}}, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) (async) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000440)=0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) 1m59.151090083s ago: executing program 6 (id=4035): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r3, &(0x7f0000000300)) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="280000000400009f01e891223f73b4eba3519a0000000000000000000100000000000000000000000000000400000000f8ffffffe1fc07d5b11b0a31139b6cc665528cf2d28a22836554a08b4c8c07bfd811eee3aab5716079931e58b3bc39fe978b6bcd9afe3904c4f9a866a8b852ebe3c38f5037e35abb36f83e22c6121639937dc89e57361579536b47e73ef93bd06dab7c332f36c27ac94f512a1475e28ba0f93bf00c7b38cdb0077ae168147b7cafec179700eb95a9ba93aaf3697afeeb0ef51ee2a92ed5449bc17742a97684ba946834318472"], 0x28) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e8f7eca5f9b20000004000600", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES16=r4], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x40800) 1m59.087926263s ago: executing program 6 (id=4038): mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x1000008, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x408006, 0x1f, 0x6}) (async) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x4c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000005300)={0x0, 0x0, &(0x7f00000052c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=r2, @ANYBLOB="000000001d00000099600cc772e41e353a7cb43f3b111d027146c4d38fb09eb97e8bde9ca180345f47b6e481ddc757a393396be79cee5b0731b21e1ee32bdc0d500ffee5d5f633aebb76ee240ffe0640891c1b201bf19835300e8b0b5a24ddd385d589e0fefe"], 0x2c}, 0x1, 0x0, 0x0, 0x44002}, 0x4000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c895) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{}, &(0x7f0000000740), &(0x7f0000000c80)}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000200)=@tcp, 0x2}, 0x20) syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) 1m43.055377627s ago: executing program 40 (id=4038): mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x1000008, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x408006, 0x1f, 0x6}) (async) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x4c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000005300)={0x0, 0x0, &(0x7f00000052c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=r2, @ANYBLOB="000000001d00000099600cc772e41e353a7cb43f3b111d027146c4d38fb09eb97e8bde9ca180345f47b6e481ddc757a393396be79cee5b0731b21e1ee32bdc0d500ffee5d5f633aebb76ee240ffe0640891c1b201bf19835300e8b0b5a24ddd385d589e0fefe"], 0x2c}, 0x1, 0x0, 0x0, 0x44002}, 0x4000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c895) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{}, &(0x7f0000000740), &(0x7f0000000c80)}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000200)=@tcp, 0x2}, 0x20) syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) 1m38.8410648s ago: executing program 4 (id=4438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x9, 0x0, 0x1, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x4, 0x28}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x10, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @echo_reply}}}}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000050) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x10, 0x180000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0xfffffffd, 0x0, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x5, 0x3, 0x2, 0x0, 0x0, 0xc000, 0x0, r6, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x7, 0x80002, 0x0, 0x8081, 0x0, {0x101, 0x7, 0x80000000000, 0x80000000004, 0x400000000000, 0x4000000000006, 0x0, 0xfffffffd, 0x5, 0x4000, 0x4000000, r6, r7, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)='!@\'[\x0e-$\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map=r2, r0, 0xe, 0x28, 0x0, @void, @void, @void, @value=r8, r1}, 0x20) 1m38.745688841s ago: executing program 4 (id=4440): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x103000) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000140)={0x1, 0x6}) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x141000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={0x0, r1, r2, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864d0, &(0x7f00000003c0)={0x29, 0x0, 0x0, 0xb0b0b0b0}) 1m38.574288154s ago: executing program 4 (id=4445): syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x1, 0x2) (async) syz_emit_ethernet(0x66, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x0, 0x0, @ipv4, @local, {[@routing={0x29}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d5"}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x38) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1e8) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) rmdir(&(0x7f00000002c0)='./file1\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') (async) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) msgget$private(0x0, 0x48) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m38.520998621s ago: executing program 4 (id=4447): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0/file0\x00'}, 0x6e) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) 1m38.519973204s ago: executing program 4 (id=4449): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x2, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x90) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$CDROM_DEBUG(r3, 0x2202, 0x1) (async) r4 = socket$key(0xf, 0x3, 0x2) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x7c, 0x1, 0x2, 0x5, 0x0, 0x0, {0xe, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8000}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x8008050) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x3ff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000080)={r8, 0x5afdbf8e}, &(0x7f00000000c0)=0x8) (async) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000340)={0x6, 0xa, 0x10, 0x2803}, 0x10) (async) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000080)=""/121, &(0x7f0000000000)=0x79) (async) write(r2, &(0x7f0000000040)="240000001e005f02e1805f2186a5b09107000000a60000400000a600080008001d000000", 0x24) (async) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x400200, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r9, 0x5382, &(0x7f00000001c0)) (async) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000140)={0x4, 0xba, [0xff, 0x48001, 0x3], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x40010, r9, 0x33dc0000) 1m37.033613573s ago: executing program 4 (id=4466): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x81}]}}}]}, 0x3c}}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x400040) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000000c0)=0x97b1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x81}]}}}]}, 0x3c}}, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x400040) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000000c0)=0x97b1) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) (async) 1m36.977854623s ago: executing program 41 (id=4466): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x81}]}}}]}, 0x3c}}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x400040) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000000c0)=0x97b1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x81}]}}}]}, 0x3c}}, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x400040) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000000c0)=0x97b1) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) (async) 1m3.540739362s ago: executing program 3 (id=4955): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000880000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000000002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0xfffffc43) 1m3.081036937s ago: executing program 3 (id=4960): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0xc251}], 0x1, 0x10002, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES64=0x0, @ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000801) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000080)=@netrom) (async) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x6e) getsockname$unix(r2, &(0x7f0000000100), &(0x7f0000000180)=0x6e) 1m2.1501389s ago: executing program 3 (id=4972): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x4044800) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x84, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:anacron_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004010) socket$inet_sctp(0x2, 0x5, 0x84) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20280080}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xbc8d27b7121b25b3}, 0x20044001) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x74, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:updpwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, r5, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x20000005) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r10, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x70, r8, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xf8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4044044}, 0x800) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r11, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r12, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c1}, 0x200100c0) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000c00), r13) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x4c, r1, 0x602, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) sendmsg$NLBL_UNLABEL_C_LIST(r10, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800e800) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000ec0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, r8, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x884) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000), 0x2040, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000001140)={0x1, &(0x7f0000001080)=[{@none}]}) 1m2.011129878s ago: executing program 3 (id=4977): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x189) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.metadata\x00') r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netstat\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000640)=ANY=[@ANYRES8], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r0, 0x8, &(0x7f0000000000)={0x20}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x8}, 0x10}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0xa0, 0xe000000000000000) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x189) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.metadata\x00') (async) syz_open_procfs(0x0, &(0x7f00000003c0)='net/netstat\x00') (async) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000640)=ANY=[@ANYRES8], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r0, 0x8, &(0x7f0000000000)={0x20}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x8}, 0x10}, 0x94) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) ptrace$pokeuser(0x6, r1, 0xa0, 0xe000000000000000) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) 1m1.936852549s ago: executing program 3 (id=4979): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed00080001"], 0x2c}}, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) getpeername(r2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080"], 0x24}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2407) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xdc) 1m1.786936011s ago: executing program 3 (id=4980): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_usbip_server_init(0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000000)=0x9) writev(r0, &(0x7f0000001500), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) mkdir(&(0x7f0000000300)='./bus\x00', 0x19) rename(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='./file0\x00') 1m1.707097557s ago: executing program 42 (id=4980): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_usbip_server_init(0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000000)=0x9) writev(r0, &(0x7f0000001500), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) mkdir(&(0x7f0000000300)='./bus\x00', 0x19) rename(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='./file0\x00') 38.039412874s ago: executing program 7 (id=5164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}]}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000054000380500000803e0001"], 0x80}}, 0x8000) 38.036536265s ago: executing program 7 (id=5166): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket(0x25, 0x5, 0x9) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r2, &(0x7f0000000300)="2cd889f035a53e14f3d5ac", 0xb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/12, 0xc, 0x1, &(0x7f0000000480)=""/242, 0xf2}, &(0x7f00000005c0)=0x40) sendto$inet6(r1, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x8}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000008000000000000ef0000000000000000009500"/32], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'geneve1\x00', &(0x7f00000002c0)=@ethtool_link_settings={0x4c, 0xfffffffc, 0x7, 0x7, 0x6, 0x5, 0x6, 0x0, 0x5, 0x5, [0x80000000, 0x8, 0x1, 0x1ff, 0x9, 0x9, 0x9177, 0x3], [0x8, 0x48f, 0x5, 0x9, 0xf7, 0x8, 0x9]}}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000000f"], 0x3c}}, 0x10) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaadf51aaaaaa810027000800450000600000000059552abfa445f265e00000018000810000649078022f0e000400000002000000bfa4199c5e66e64b2a1e2a99df55e64078994b2930584e334a4e1d634e0173585fac65a13dd095b9f7d1176cce61c43f9ada4114b15b25a7a2adc3f8b9bf10b57b234f2ec41c352a98688cd9e10c5fab"], 0x8a) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r3, 0x118, 0x3, 0x0, &(0x7f00000003c0)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r12, 0x4400ae8f, &(0x7f00000009c0)={"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"}) ioctl$KVM_GET_SREGS(r12, 0x8138ae83, &(0x7f0000000600)) 37.636547375s ago: executing program 7 (id=5170): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x3, 0x20a}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 37.63464999s ago: executing program 7 (id=5171): r0 = socket$nl_generic(0x10, 0x3, 0x10) accept(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @link_local}, &(0x7f0000000080)=0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0xffffffffffffff1b, r2, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x83093e57596d3d79) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000280)='macsec0\x00') 34.487488373s ago: executing program 7 (id=5175): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x58640, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000240)={0x2, 0xe, 0x1, 0x9, 0x5}) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x800003fffffffffe, 0xffffffffffffffff}) (async) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x1003ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0xd, 0x0, 0x0) (async) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r7, 0x3, 0x6, @remote}, 0x10) close(0x3) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r9, 0x29, 0x16, 0x0, &(0x7f00007d0000)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000299", @ANYRES32=0x0, @ANYBLOB="80200000000000001c0012800b00010065727370616e00000c0002800600020030000000"], 0x3c}}, 0x0) 34.335542702s ago: executing program 7 (id=5181): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fe, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046}) ioctl$BLKDISCARD(r0, 0x80041284, &(0x7f0000000080)=0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000009d00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x56555941, 0x7, 0x5, [{0x6, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x5, 0x6}, {0x1, 0x5}, {0xffffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r9, 0xee01, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x1}) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000040)={{0x0, 0x0, 0xc20, 0xadb12e32f182386c, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r10, 0x54a3) 18.142078384s ago: executing program 43 (id=5181): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7fff, 0x1c1901) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7fe, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046}) ioctl$BLKDISCARD(r0, 0x80041284, &(0x7f0000000080)=0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000009d00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x56555941, 0x7, 0x5, [{0x6, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x5, 0x6}, {0x1, 0x5}, {0xffffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r9, 0xee01, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r5, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x1}) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000040)={{0x0, 0x0, 0xc20, 0xadb12e32f182386c, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r10, 0x54a3) 6.907678244s ago: executing program 0 (id=5395): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffff7, 0x20a002) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x35) rt_sigaction(0x19, &(0x7f0000000100)={&(0x7f0000000080)="366465f029144d00000081f30fc27f5e06ae0d0fd82e2e460f01d626f00994aff7000000c4c1796f960600000040cd00c4e2f1453c99f340a56544ca0c00", 0x84000004, 0x0}, 0x0, 0x8, &(0x7f0000000000)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000080)=0xf41, 0x4) ftruncate(r1, 0x3292e291) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000080), &(0x7f0000000680)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640), 0x5, 0xc}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000005c0)={0x0, r2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000600)={r4, 0x0, 0x101, 0xc9, 0x3, 0x2, 0xfffffff4}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8], [0x10000], [0x7]], '\x00', [{0xffffffff}, {0x0, 0x10}, {}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {}, {0x0, 0x3}, {0x0, 0xfffffffe}], '\x00', 0x1000}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x1, 0xff, 0x0, 0x1}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000004000000040000000900b70000000000d6c831146df755245a632aee9e38a97e2d26336ada4b8f7971c0e105c00e100bee764d58b406d035ddab5496f8f9cf8d3ce6e3c5d5775e63ae7e0007000000a8ca872d9608343762", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000003c0)=[r2, r3, r6, r10], 0x4, 0x80000}) 6.907477058s ago: executing program 0 (id=5396): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) (async) r1 = socket(0x11, 0x800000003, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x7f}, 0x2e, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x60046000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0x94}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0x94}}, 0x0) 6.561364346s ago: executing program 0 (id=5397): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) r4 = fanotify_init(0x0, 0x80000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x12, "0076ba7d82000000002700000000f7ff6fd800"}) r6 = syz_open_pts(r5, 0x0) r7 = dup(r6) fanotify_mark(r4, 0x1, 0x40001012, r7, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r9, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r10, 0x29, 0x31, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendto$inet6(r10, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) recvmmsg(r10, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000002, 0x0) sendto$packet(r7, &(0x7f0000000200)="8dd7e71094b93b3981da6dc6111cf070c3c0610ccd28f2b10186ada69e0bd682e72ee79f36bdd628426742cf7b9f19d7c113f17f63d9b7493e52e30fa835c77230d1da52351d1709dddcb5e4e7b4b857ee3d894b978ab96d5c19f631", 0x5c, 0x20000000, &(0x7f0000000280)={0x11, 0x1c, r9, 0x1, 0x0, 0x6, @random='\t\x00'}, 0x14) socket(0x10, 0x803, 0x0) 4.935121392s ago: executing program 1 (id=5407): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000040)={'tunl0\x00'}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x10000, 0x200030, 0x66, 0x4c7, 0x0, 0x8000, 0xa, 0x104, 0xffffffff, 0xfffffffd, 0xd, 0x1, 0x2, 0x80004101, 0x5, 0x1a449, 0x3, 0x400, 0x2086, 0x24, 0x0, 0x20001e5c, 0x7fff, 0x8002, 0x3c, 0x1, 0x6, 0x0, 0x1000000, 0x3]}) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x8140) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x8140) ioctl$BLKFRAGET(r4, 0x1265, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 4.911271021s ago: executing program 1 (id=5408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002980)=ANY=[@ANYBLOB="5c0000002f010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001", @ANYRES8, @ANYRES64, @ANYBLOB="5f6adc660b5a1fc700e269137fe0f7c655ea3f16483e620081979687574be0e6186a2347aac1b18b98011474131bce0dbdea6d60257c2fcfb9c525fe80fbc063ce6dbaa28c30637e421c6dc978b3ba4fa754fd5f881516d8fe5b2036cee699a68cff6dc69e30fa7e7d498acb060337a14f4e5f4b2ce878beb9beedeb1552369efdeb6c347bff991d38a456b416bc30b437facfd91d0a5ef51cdbd34ddfd8ff48b9a9214f2c3cba2e2831ee3bc0e1d6d9a327302b", @ANYRESDEC], 0x5c}}, 0x0) 4.828209996s ago: executing program 1 (id=5409): r0 = socket$inet6(0xa, 0x5, 0xc513) fchown(r0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0xc513) (async) fchown(r0, 0x0, 0x0) (async) 4.827308181s ago: executing program 1 (id=5410): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(nhpoly1305-sse2)\x00'}, 0x58) r1 = fcntl$dupfd(r0, 0x406, r0) recvmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000000)=""/42, 0x2a}], 0x2, &(0x7f0000000040)=""/55, 0x37}, 0x2100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xffffffffffffffe0, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x1, 0x800, 0x9, 0x800}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0xa, 0x56, 0x4f, @private2, @loopback, 0x8f0f, 0x710, 0x3, 0x1}}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x409, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x0, 0x80c2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r10, @ANYBLOB], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r10, @ANYBLOB="9201000000000000e948f7a5b0c3ad01ba928eea98bbc05685b3ce17e87578574f643f9c79d7893d3f35bc502374b0a4336544dce8322ccaf2b6901126215acfde82473f758a85ab3fe7010cca9d646b906f0e6bd2dc274584ece3db8d8ed82e31e91baa00ee98451efe9c"], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0xfffffffffffffeae, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_INDEV={0x0, 0x3, 'ip6tnl0\x00'}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r15 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x1, 0x0, {0x60, 0x0, 0x0, r17, {0x0, 0xd}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x7}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000380)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x22c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x50}, 0x1000) 1.814455026s ago: executing program 1 (id=5413): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x84c2, 0x6, 0x4, 0xcf87, 0xffff, 0x4}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r0 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd9d) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x4, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0xa, 0x4e23, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="1ba09ab3f6d346caa5636764d9fe", 0xe}], 0x1, &(0x7f00000022c0)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x3c, 0x2, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @hopopts={{0x1028, 0x29, 0x36, {0x2c, 0x201, '\x00', [@generic={0x40, 0x1000, "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"}, @pad1, @jumbo={0xc2, 0x4, 0x4}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x10000}}, @rthdr={{0x38, 0x29, 0x39, {0x87, 0x4, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x1a}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x32, 0x6, '\x00', [@pad1, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x1}]}}}], 0x1118}, 0x20004800) 1.813691583s ago: executing program 0 (id=5415): iopl(0x3) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x3d51c, 0x0, 0x2d, 0x9, 0x1a, "0012412d08d500201e850a21077b0a00e0edff"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xd) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r2 = syz_io_uring_setup(0x35ea, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2, 0x3c5}, 0xfffffffffffffffe, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x30, r2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x10000000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0xf}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/236, 0xec, 0x0, 0x1d}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r7 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="f4502ca03b459599cc21ecb0dc0acaf5d90201135726a42b36f9df6c600a9d7fc4945aeaf407f87165a8ddeb75a238eeb5e191fb2b6f78f842cbda3dccce971a8994b56295b59dcf5208595353415fc7352d6b65c663bb9dced1b0523f2a8e97b1d0dd355f3b25fe0231d136658479c57ccafffc2321a492d06d292e", @ANYRES64=0x0], 0x20) sendto$inet(r8, &(0x7f0000000100)="39cb81215fda0c2724df36e12956e6f22a30db91276864c0e9a4e8e07d100d610b55ff7ae814e19857ca6a4092a977a786f0470a729064299e3a6738bf56ed32e24d7ff0e48b6f9ed19831f744113a352ed6e0bb", 0x54, 0x2404c081, 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f0000000180)) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="04030b0ac91c000000aaaa100102555a552959a1e341518862669a7d4b16cf5ae204b59f60f235cf981e937c67db5520f08c9e9149dd8abe4879e7ec115b39e1563abbc8e055059a52ab160c7730add6dc9448d4ad746a14fa6fe3215e95417ca30512a208d9c38b6396d7758fbc9e4d2743f100039ade105e16391dcce86a91b7a57cfb825cde9901ab988aaf2fe162bdc5defed0d5f64c1a67a052b74d2e080b3071efaf12a38ce53e36d21cf27e2a13489a7f52073eab40bd9c3208288c"], 0xe) name_to_handle_at(r8, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="780000000200000006d25db9287ea674bc8b381b03314d3a3bf2c35f880706c38ee6a2b79c67055931ef0610daacac4fac9bda1ec6f762b9b151696ed3e492b0d1fa8d5e76779669eea5d23e3b4c43dc7bcf2cf355c2a783b8371dbeff090000009a06e3b90da78cb533e7eebb034f8a3972611120e0b3a7d1b39d2e45000000"], &(0x7f0000000300), 0x1000) r9 = syz_open_dev$mouse(&(0x7f0000000340), 0x1, 0x0) fcntl$F_GET_RW_HINT(r9, 0x40b, &(0x7f0000000380)) sendmsg$SEG6_CMD_GET_TUNSRC(r6, 0x0, 0x84) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="1b19f8bb8dcaffd29fecfb4df3aa0e133900"/31], 0x1f) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 1.636169969s ago: executing program 0 (id=5419): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000180)=0x8, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001680)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x3c}}, 0x0) bind$inet(r5, &(0x7f00000006c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @remote}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x21dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1.457436356s ago: executing program 8 (id=5421): r0 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x80, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcf9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80}, [@FRA_DST={0x14, 0x1, @empty}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000880)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048040}, 0x4000004) 1.45636428s ago: executing program 5 (id=5422): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="c3040500000000003c0012800b000100697036746e6c00002c00028014000300fc00000000000000000000000000000014000200fe"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x8, 0x2d, "25a047e343fe3037bb5c36a1f1a05d9e12e44a478c032eecb1dd436880c7b0470c4c6c8e4159e4830ad7e34150"}}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x90400, 0x0) landlock_restrict_self(r7, 0x0) 1.455426498s ago: executing program 0 (id=5423): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x3, 0x2200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f00000001c0)=0x6) r3 = socket(0x11, 0xa, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) socket$inet6_udplite(0xa, 0x2, 0x88) close(0x3) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000033df"]) landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x20, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x6) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) r8 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0r9, {0x2}}, './file0\x00'}) ioctl$USBDEVFS_SETINTERFACE(r11, 0x80085504, &(0x7f0000000100)={0x0, 0x4}) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) 1.363282213s ago: executing program 8 (id=5424): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000880000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000000002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0x11f) 1.362156341s ago: executing program 1 (id=5425): r0 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) accept$ax25(r0, &(0x7f0000000240)={{0x3, @netrom}, [@rose, @bcast, @default, @rose, @remote, @remote, @bcast, @bcast]}, &(0x7f0000000140)=0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000340)=0x1ff, 0x5b) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000001c0)="0fc77600b9800000c00f3235001000000f3036f20fc2b7e7080e6500f466baa000ecf30fa7d80f4175ecc4e2a9b8eef36df30f1ef9", 0x35}], 0x1, 0x4d, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r6, 0x400454ce, 0xee01) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x40, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3, 0x0, 0xe}], 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000380)={'#! ', './file0'}, 0xb) mmap(&(0x7f00004fb000/0x1000)=nil, 0x1000, 0xa, 0x4010, r8, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r10 = accept(r9, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000000740), 0x0, 0x8000) recvmsg(r10, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x99}], 0x2}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(r8, 0x0, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.174470166s ago: executing program 8 (id=5426): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0xf, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2}, 0x38) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r4 = syz_io_uring_setup(0x104c, &(0x7f0000000500)={0x0, 0x0, 0x20, 0x3, 0x2e7}, &(0x7f00000004c0), &(0x7f0000000140)) syz_io_uring_setup(0x2ba4, &(0x7f0000000240)={0x0, 0xe454, 0x13290, 0x2}, &(0x7f0000000100), &(0x7f00000003c0)) io_uring_enter(r4, 0x2d3e, 0x0, 0x2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='maps\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22040881, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r6, 0x1) splice(r6, 0x0, r5, 0x0, 0x2, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x208001, 0x0) 1.173889021s ago: executing program 5 (id=5427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ppoll(&(0x7f0000001780)=[{r1, 0x2108}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044094) 861.520965ms ago: executing program 5 (id=5428): fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) llistxattr(&(0x7f00000003c0)='./file1\x00', &(0x7f00000004c0)=""/24, 0x18) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) landlock_create_ruleset(&(0x7f0000000200)={0x382, 0x1}, 0x18, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 589.773452ms ago: executing program 8 (id=5429): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_cmd={0x14, 0x0, 0x800000, 0x7, 0x0, 0x7, 0x9, 0x6, 0x9, 0x45, 0x0, 0x2, 0x5e, 0x0, 0x80, 0x80, [0x3, 0xffffffff]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f0000000740), 0xffffffffffffffbc) fcntl$addseals(r3, 0x409, 0x8) chdir(&(0x7f00000000c0)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x20000, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r8, 0xc008561c, &(0x7f00000001c0)={0x980915, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r9, &(0x7f0000000140)=@OVL_FILEID_V1={0x13, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e837282efe0868327a31a705ec978547"}}}, 0x830200) 589.496561ms ago: executing program 5 (id=5430): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @null, @bpq0, 0x7, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast]}) r1 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) set_mempolicy(0x4001, 0x0, 0x7) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x111101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000140)={0xb, 0x3, 0x7, {0xa7, 0x5, 0x5, 0x7000}}) 458.562451ms ago: executing program 5 (id=5431): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041c"], 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)="d5"}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (async) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r2, r1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041c"], 0x8) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)="d5"}) (async) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x1}) (async) 353.23281ms ago: executing program 8 (id=5432): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000000100)) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x7, 0x3, 0x3, 0x0, 0x100, 0x5}, &(0x7f00000000c0)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000300)) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r3) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x38, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008881}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002008000000f8ff00000000bfa1000002000000070100f8ffffff58e908fbd3b702000008000000b70300000000000085000000b9000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 176.255377ms ago: executing program 5 (id=5433): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0xfffffffc, @private2={0xfc, 0x2, '\x00', 0x41}, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="81012dbd7000d90200000100000008"], 0x1c}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103", @ANYRESOCT], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x3, 0x58, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x1a, 0xa0, 0xb, 0x97, 0xcf3, 0x2, 0x6708, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0xc3, 0x9, 0x38, 0x9, [{{0x9, 0x4, 0x8e, 0xe, 0x4, 0x36, 0x4e, 0x70, 0x78, [], [{{0x9, 0x5, 0x2, 0x0, 0x400, 0x2, 0x21, 0xe}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x5, 0xc1, 0x2, [@generic={0x7, 0x23, "09d9654d24"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x34, 0x1}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x40, 0x3, 0x3, [@generic={0x2, 0xa}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x4, 0x1, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x127100) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@initdev, 0x0}, &(0x7f0000000080)=0x14) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=@updpolicy={0x2fc, 0x19, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, @in=@remote, 0x4e20, 0x0, 0x4e22, 0x8001, 0x2, 0x10, 0x0, 0x5e, r4, r5}, {0x8000, 0x8, 0x1, 0x101, 0x1, 0x8, 0x10000, 0x6}, {0x3, 0x8000000000000001, 0x6, 0x3}, 0x0, 0x6e6bbe, 0x1, 0x0, 0x1, 0x3}, [@sec_ctx={0x14, 0x8, {0x10, 0x8, 0x1, 0xf9, 0x8, "1fd81b132f7713f2"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @algo_auth_trunc={0x12c, 0x14, {{'rmd256-generic\x00'}, 0x700, 0x40, "062f5cf92971efff4993219e9e7720589980df810e2205151542943a16a74d6125bac071ce30e2f82d8b61b3449adb1ff0f7b7296f57344fce932d0222013bd5655caaf430fbd731e4d8d0ccd96bc5fc4199c38c20da4a20c07dda6c7ad1cbe9cf2e9d0836daf62eba22a210f2c4f2895d111dab381e82818b8930dfa430fa0f991a533410bce2796a8d4ce9e4f2f1a21f72063d45229a96d1de59d8f2fd7e8b281987d9571810b4d768e8d7da1860f9991e9ecf4cd714e15a923dbfd65d13dc46316db4514b235c8a6379ed848f3a400004b4b760476c788a82ce881626aaab"}}, @sec_ctx={0xf9, 0x8, {0xf5, 0x8, 0x0, 0xb3, 0xed, "c4827f0900fc76b21a11eabdb7f4ce1d9887ae910c51c5aecfee01ebd2abf2072950e5f60cf4565a7bf4db022c8172b67063a88f603ccb7c1f81bfc3c866d6d4db270067b53391c80aaeee71ad7556843e1524a5d8f3940869152fe54df5f13340aa4a05bf6edaa48a93b526b7d45119289aa75b504d681e69cea8986f4439038951e01a91fe1bb69daa6611ed23494dd83e6714c238c1a762ca3b4738b57edec70a9d752f18bdcfef6cf1b8ce9c34b2a601e8413fa2529158c08a7523fc3e812e4417c4c03f75f892636f42d840866512e5b1f733932f80da74b956b002568767b4abd74d8f1456724e36ba93"}}]}, 0x2fc}}, 0x4008840) r6 = syz_open_procfs(0x0, &(0x7f00000008c0)='uid_map\x00') preadv(r6, &(0x7f0000002d80)=[{&(0x7f0000000940)=""/178, 0xb2}], 0x1, 0x200, 0x3) ioctl$DRM_IOCTL_ADD_MAP(r6, 0xc0286415, &(0x7f00000003c0)={&(0x7f0000af7000/0x4000)=nil, 0x0, 0x3, 0x80}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 0s ago: executing program 8 (id=5434): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb2bbd7000fddbdf256700000008000300", @ANYRES32, @ANYBLOB="08000800c400"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb2bbd7000fddbdf256700000008000300", @ANYRES32, @ANYBLOB="08000800c400"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x20) (async) ioctl$TUNSETLINK(r5, 0x400454cd, 0x20) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnexthop={0x3c, 0x6a, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x800) 0s ago: executing program 1 (id=5435): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000400), 0xc, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)={0x7, 0x0, [{0x9aa, 0x0, 0xb52}, {0x2fa, 0x0, 0x1}, {0x3be, 0x0, 0x9}, {0x301, 0x0, 0x6}, {0xbe3, 0x0, 0xffffffff}, {0xc0000081, 0x0, 0x7a7}, {0x9be, 0x0, 0xfff}]}) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@delqdisc={0x34, 0x25, 0x800, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x8, 0x8}, {0x0, 0x5}, {0xa}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x8d}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf4, r12, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xf2bb, 0x60}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b7a2000121"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f064f37dec"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2b8e68327c3f39caa414cfd7ff"}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3f76b0b61b"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1f705c0988"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "af0538262e00"}, @NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44001) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) (async) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x401, 0x86, 0xfffffffffffffffe, 0x9, 0x7, 0xb, 0x651, 0xffffffff, 0x9657, 0x0, 0x7fffffff, 0x0, 0x0, 0xb, 0x80000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0xff, 0xfffffffd, 0x8, 0x8, 0xfffffffffffffffa, 0x3, 0x6}) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ufs\x00', 0x200000, 0x0) kernel console output (not intermixed with test programs): etooth: hci2: command 0x1003 tx timeout [ 400.132379][T15577] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 400.168492][ T5975] Bluetooth: hci5: command tx timeout [ 400.253724][T22152] __nla_validate_parse: 3 callbacks suppressed [ 400.253741][T22152] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4609'. [ 400.637542][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 400.758350][T22171] efs: device does not support 512 byte blocks [ 400.760854][T22171] device does not support 512 byte blocks [ 400.760854][T22171] [ 400.776912][ T9] usb 6-1: device descriptor read/64, error -71 [ 400.862117][ T5975] Bluetooth: hci4: command tx timeout [ 400.954472][T22192] netlink: 'syz.0.4622': attribute type 1 has an invalid length. [ 400.957684][T22192] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4622'. [ 401.043949][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 401.110457][T22200] /dev/sg0: Can't lookup blockdev [ 401.193899][ T9] usb 6-1: device descriptor read/64, error -71 [ 401.290084][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 401.312910][ T9] usb usb6-port1: attempt power cycle [ 401.695910][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 401.729756][ T9] usb 6-1: device descriptor read/8, error -71 [ 401.805440][T22233] f2fs: Unknown parameter 'norecoveryp!>[䅋VGmКs|]Fy/L.#eHe&瀖0<+J*1ӆHP"73}\zݦ86^ټOdA B| [ 401.805440][T22233] [ 401.805440][T22233] 4ƋȞ+HݬbJN' [ 401.978376][T22240] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4633'. [ 401.985252][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 401.991580][T22240] geneve2: entered promiscuous mode [ 401.993211][T22240] geneve2: entered allmulticast mode [ 402.009233][ T9] usb 6-1: device descriptor read/8, error -71 [ 402.123786][ T9] usb usb6-port1: unable to enumerate USB device [ 402.191104][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 402.191116][ T40] audit: type=1400 audit(6000001414.699:148635): avc: denied { getopt } for pid=22257 comm="syz.5.4639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 402.191350][T22259] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4639'. [ 402.202644][T22259] ksmbd: Unknown IPC event: 1, ignore. [ 402.685926][T22304] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 402.968116][T15814] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 403.075100][ T5975] Bluetooth: hci4: command tx timeout [ 403.151149][T15814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.154660][T15814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.157737][T15814] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 403.161887][T15814] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.164777][T15814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.168977][T15814] usb 5-1: config 0 descriptor?? [ 403.590303][T22314] 9pnet_fd: Insufficient options for proto=fd [ 403.608856][T22316] netlink: 'syz.1.4652': attribute type 8 has an invalid length. [ 403.610845][T22308] gtp0: entered promiscuous mode [ 403.619472][T15814] usbhid 5-1:0.0: can't add hid device: -71 [ 403.622657][T15814] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 403.627029][T15814] usb 5-1: USB disconnect, device number 16 [ 403.718946][ T5975] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 403.726327][ T5975] Bluetooth: Wrong link type (-22) [ 403.910005][T22347] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 403.918724][T22347] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 403.923114][T22347] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 403.923127][ T40] audit: type=1400 audit(6000001416.317:148636): avc: denied { firmware_load } for pid=22346 comm="syz.3.4663" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 403.969135][T22350] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 403.999033][T22356] netlink: 'syz.3.4666': attribute type 19 has an invalid length. [ 404.002520][T22356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4666'. [ 404.014108][T12766] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.014226][T22356] netlink: 'syz.3.4666': attribute type 19 has an invalid length. [ 404.024346][T22356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4666'. [ 404.024344][ T7858] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.024382][ T7858] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.034467][T22357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.040764][ T7858] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.206803][T22361] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 404.212258][T22361] sctp: [Deprecated]: syz.0.4667 (pid 22361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.212258][T22361] Use struct sctp_sack_info instead [ 404.218215][T22361] IPv6: Can't replace route, no match found [ 404.231286][T22361] lo speed is unknown, defaulting to 1000 [ 404.263635][T22364] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 404.276365][ T5975] Bluetooth: hci3: Malformed LE Event: 0x1d [ 404.309419][T22361] wlan1 speed is unknown, defaulting to 1000 [ 404.312101][T22361] vxcan1 speed is unknown, defaulting to 1000 [ 404.327324][ T40] audit: type=1400 audit(6000001416.701:148637): avc: denied { ioctl } for pid=22373 comm="syz.1.4670" path="socket:[104462]" dev="sockfs" ino=104462 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 404.483840][ T40] audit: type=1400 audit(6000001416.832:148638): avc: denied { read } for pid=22375 comm="syz.1.4671" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 404.491083][ T40] audit: type=1400 audit(6000001416.832:148639): avc: denied { open } for pid=22375 comm="syz.1.4671" path="/38/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 404.498318][ T40] audit: type=1400 audit(6000001416.832:148640): avc: denied { ioctl } for pid=22375 comm="syz.1.4671" path="/38/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 404.553282][T22376] md2: using deprecated bitmap file support [ 404.555370][T22376] md2: error: bitmap file must be a regular file [ 404.789443][ T980] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 404.948019][ T980] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 404.951361][ T980] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 404.955471][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 404.960101][ T980] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 404.963064][ T980] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 404.965663][ T980] usb 6-1: Product: syz [ 404.967037][ T980] usb 6-1: Manufacturer: syz [ 404.968582][ T980] usb 6-1: SerialNumber: syz [ 404.971342][ T980] usb 6-1: config 0 descriptor?? [ 404.975959][ T980] hub 6-1:0.0: bad descriptor, ignoring hub [ 404.978830][ T980] hub 6-1:0.0: probe with driver hub failed with error -5 [ 404.984438][ T980] usb 6-1: selecting invalid altsetting 0 [ 405.038707][ T40] audit: type=1400 audit(6000001417.356:148641): avc: denied { mounton } for pid=22395 comm="syz.3.4677" path="/18/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 405.038722][T22397] cgroup: Unknown subsys name 'uid>00000000000000000000' [ 405.198064][T22376] kvm: kvm [22375]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000050) = 0x0 [ 405.279062][T22397] netlink: 'syz.3.4677': attribute type 1 has an invalid length. [ 405.298716][ T5975] Bluetooth: hci4: command tx timeout [ 405.386367][ T61] usb 6-1: USB disconnect, device number 12 [ 405.557449][T22389] 9pnet_fd: p9_fd_create_tcp (22389): problem connecting socket to 127.0.0.1 [ 405.853125][T22416] overlayfs: upper fs does not support file handles, falling back to index=off. [ 405.888639][T22420] 9pnet_fd: p9_fd_create_tcp (22420): problem connecting socket to 127.0.0.1 [ 405.915357][T15577] hid (null): unknown global tag 0xd [ 405.916886][T22424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4685'. [ 405.917740][T15577] hid (null): global environment stack underflow [ 405.925952][T15577] hid-generic 0080:0000:0002.000C: unknown main item tag 0x5 [ 405.928441][T15577] hid-generic 0080:0000:0002.000C: reserved main item tag 0xd [ 405.932068][ T40] audit: type=1400 audit(6000001418.198:148642): avc: denied { listen } for pid=22423 comm="syz.1.4685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 405.932769][T15577] hid-generic 0080:0000:0002.000C: unknown main item tag 0x3 [ 405.933457][T22424] netlink: 'syz.1.4685': attribute type 1 has an invalid length. [ 405.938890][T22426] CUSE: unknown device info "" [ 405.938905][T22426] CUSE: zero length info key specified [ 405.947763][T15577] hid-generic 0080:0000:0002.000C: unknown global tag 0xd [ 405.949899][T15577] hid-generic 0080:0000:0002.000C: item 0 4 1 13 parsing failed [ 405.952704][T15577] hid-generic 0080:0000:0002.000C: probe with driver hid-generic failed with error -22 [ 406.031277][T22434] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input35 [ 406.109160][T22442] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4690'. [ 406.114737][T22442] PKCS8: Unsupported PKCS#8 version [ 406.163272][T22428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.597695][T22468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4696'. [ 406.600533][T22468] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 406.603615][T22468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.761781][ T40] audit: type=1400 audit(6000001418.965:148643): avc: denied { mount } for pid=22479 comm="syz.1.4699" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 406.770849][ T40] audit: type=1400 audit(6000001418.965:148644): avc: denied { remount } for pid=22479 comm="syz.1.4699" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 406.930756][T22482] bpf: Bad value for 'uid' [ 406.994898][T22489] block nbd0: Attempted send on invalid socket [ 406.996946][T22489] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 407.000241][T22490] netlink: 'syz.1.4702': attribute type 10 has an invalid length. [ 407.002351][T22489] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 407.019590][T22490] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 407.025973][T12751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.028947][T12751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.151183][T22496] kvm: pic: non byte write [ 407.206861][T22504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4708'. [ 408.418772][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 408.418789][ T40] audit: type=1400 audit(6000001420.517:148647): avc: denied { map } for pid=22552 comm="syz.3.4723" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 408.475137][T22520] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 408.484637][T15577] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 408.510314][T22557] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4725'. [ 408.513336][T22557] netlink: 'syz.3.4725': attribute type 6 has an invalid length. [ 408.516824][T22557] netlink: 'syz.3.4725': attribute type 5 has an invalid length. [ 408.519806][T22557] netlink: 'syz.3.4725': attribute type 4 has an invalid length. [ 408.644968][T15577] usb 5-1: Using ep0 maxpacket: 8 [ 408.648045][T15577] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 408.650680][T15577] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 408.654873][T15577] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 408.657941][T22570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4728'. [ 408.659983][T15577] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 408.666205][T15577] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 408.670745][T15577] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 408.673266][T15577] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 408.677073][T15577] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 408.681413][T15577] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 408.685225][T15577] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 408.691053][T15577] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 408.693469][T15577] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 408.697205][T15577] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 408.701772][T15577] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 408.705552][T15577] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 408.712256][T15577] usb 5-1: string descriptor 0 read error: -22 [ 408.714266][T15577] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 408.717094][T15577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.731496][T15577] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 408.942894][ T980] usb 5-1: USB disconnect, device number 17 [ 408.955833][T22591] netlink: 'syz.3.4733': attribute type 4 has an invalid length. [ 408.958170][T22591] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4733'. [ 408.962116][T22591] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 409.038431][T22596] team0: No ports can be present during mode change [ 409.133695][T22604] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4738'. [ 409.227983][T22615] Bluetooth: MGMT ver 1.23 [ 409.244013][T22617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4744'. [ 409.247289][T22617] program syz.3.4744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.333103][T22637] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4750'. [ 409.368094][ T980] hid-generic 0005:04F3:05DF.000D: unknown main item tag 0x0 [ 409.390106][ T980] hid-generic 0005:04F3:05DF.000D: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 409.436070][ T60] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 409.489781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.606967][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 409.616654][ T60] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 64 [ 409.620103][ T60] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 8 [ 409.623275][ T60] usb 5-1: config 1 interface 0 has no altsetting 0 [ 409.625935][ T40] audit: type=1400 audit(6000001421.649:148648): avc: denied { accept } for pid=22665 comm="syz.5.4756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 409.627194][ T60] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 409.637107][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.639737][ T60] usb 5-1: Product: Й [ 409.641072][ T60] usb 5-1: Manufacturer: Н [ 409.642554][ T60] usb 5-1: SerialNumber: ꌞ騪遣⹔❻᫠സ뜷揺馐㝄訞뷇謋갌惘衻ݕ춠ᕑす槳豁천䲶芗؏喩 [ 409.648634][T22548] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 409.651715][T22548] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 409.746372][ T5975] Bluetooth: hci0: command 0x0406 tx timeout [ 409.772272][ T40] audit: type=1400 audit(6000001421.790:148649): avc: denied { ioctl } for pid=22678 comm="syz.1.4760" path="socket:[104845]" dev="sockfs" ino=104845 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 409.859648][T22689] netlink: 'syz.5.4763': attribute type 64 has an invalid length. [ 409.862129][T22689] netlink: 'syz.5.4763': attribute type 4 has an invalid length. [ 409.890199][ T60] usblp 5-1:1.0: usblp1: USB Bidirectional printer dev 18 if 0 alt 8 proto 2 vid 0x04B8 pid 0x0202 [ 409.897444][ T60] usb 5-1: USB disconnect, device number 18 [ 409.902164][ T60] usblp1: removed [ 409.959342][T22693] veth0_macvtap: left promiscuous mode [ 410.083289][T22715] netlink: 'syz.1.4769': attribute type 12 has an invalid length. [ 410.145359][T22713] exFAT-fs (nullb0): invalid boot record signature [ 410.149128][T22713] exFAT-fs (nullb0): failed to read boot sector [ 410.151100][T22713] exFAT-fs (nullb0): failed to recognize exfat type [ 410.252238][T22727] tmpfs: Unknown parameter 'usrquota0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.252238][T22727] 0 [ 410.394139][ T1114] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 410.398928][ T1114] ata1: failed to read log page 10h (errno=-5) [ 410.400902][ T1114] ata1.00: exception Emask 0x1 SAct 0x200 SErr 0x0 action 0x0 [ 410.403719][ T1114] ata1.00: irq_stat 0x40000000 [ 410.405301][ T1114] ata1.00: failed command: WRITE FPDMA QUEUED [ 410.407249][ T1114] ata1.00: cmd 61/48:48:e6:14:10/00:00:00:00:00/40 tag 9 ncq dma 36864 out [ 410.407249][ T1114] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 410.413515][ T1114] ata1.00: status: { DRDY } [ 410.416050][ T1114] ata1.00: configured for UDMA/100 [ 410.418351][ T1114] ata1: EH complete [ 410.438359][T13154] Process accounting resumed [ 410.444790][ T40] audit: type=1400 audit(6000001422.407:148650): avc: denied { write } for pid=22749 comm="syz.5.4781" name="/" dev="configfs" ino=3077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 410.453844][ T40] audit: type=1400 audit(6000001422.416:148651): avc: denied { unmount } for pid=21779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 410.479734][T22750] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 410.497755][T22748] Process accounting resumed [ 410.519773][T22766] binder: 22765:22766 ioctl c0306201 200000000640 returned -22 [ 410.538399][T22771] binfmt_misc: register: failed to install interpreter file ./file0 [ 410.566310][T22773] 8021q: adding VLAN 0 to HW filter on device bond6 [ 410.575593][T22773] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 410.579921][T22773] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 410.587088][T22778] binder: 22763:22778 ioctl c0306201 200000000640 returned -22 [ 410.590057][T22778] binder: 22763:22778 ioctl c0106426 200000000180 returned -22 [ 410.594677][T22778] binder: 22763:22778 ioctl c0086423 200000000240 returned -22 [ 410.709963][T22792] misc userio: Invalid payload size [ 410.714440][T22796] overlayfs: failed to resolve './file1': -2 [ 410.883943][T22811] validate_nla: 1 callbacks suppressed [ 410.883954][T22811] netlink: 'syz.5.4799': attribute type 10 has an invalid length. [ 410.894256][T22811] batman_adv: batadv0: Adding interface: team0 [ 410.901231][T22811] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.908722][T22811] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 411.051244][T22792] syzkaller1: entered promiscuous mode [ 411.052994][T22792] syzkaller1: entered allmulticast mode [ 411.056498][T22821] binder: 22819:22821 ioctl c0306201 200000000080 returned -14 [ 411.062178][ T40] audit: type=1400 audit(6000001422.996:148652): avc: denied { getopt } for pid=22819 comm="syz.5.4802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 411.275927][T22836] netlink: 'syz.5.4806': attribute type 4 has an invalid length. [ 411.333703][T22837] netlink: 'syz.5.4806': attribute type 4 has an invalid length. [ 412.894735][ T40] audit: type=1400 audit(6000001424.708:148653): avc: denied { append } for pid=22853 comm="syz.1.4811" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 412.977871][T22861] dvmrp1: entered allmulticast mode [ 413.006535][ T40] audit: type=1400 audit(6000001424.811:148654): avc: denied { unmount } for pid=19249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 413.061978][T22871] input: syz1 as /devices/virtual/input/input36 [ 413.123567][T22881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.124195][T22882] block nbd0: Attempted send on invalid socket [ 413.129318][T22882] I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 413.132322][T22882] gfs2: error -5 reading superblock [ 413.138919][ T40] audit: type=1400 audit(6000001424.932:148655): avc: denied { bind } for pid=22880 comm="syz.0.4822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 413.160413][T22888] __nla_validate_parse: 7 callbacks suppressed [ 413.160425][T22888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4824'. [ 413.175824][T22884] kvm: pic: non byte read [ 413.178365][T22884] kvm: pic: level sensitive irq not supported [ 413.178600][T22884] kvm: pic: non byte read [ 413.182831][T22884] kvm: pic: level sensitive irq not supported [ 413.183062][T22884] kvm: pic: non byte read [ 413.187307][T22884] kvm: pic: level sensitive irq not supported [ 413.187578][T22884] kvm: pic: non byte read [ 413.192309][T22884] kvm: pic: level sensitive irq not supported [ 413.192541][T22884] kvm: pic: non byte read [ 413.196798][T22884] kvm: pic: level sensitive irq not supported [ 413.197029][T22884] kvm: pic: non byte read [ 413.200023][T22895] team0: No ports can be present during mode change [ 413.201497][T22884] kvm: pic: level sensitive irq not supported [ 413.203090][T22884] kvm: pic: non byte read [ 413.207445][T22884] kvm: pic: level sensitive irq not supported [ 413.207677][T22884] kvm: pic: non byte read [ 413.212863][T22884] kvm: pic: level sensitive irq not supported [ 413.213094][T22884] kvm: pic: non byte read [ 413.378978][ T40] audit: type=1326 audit(6000001425.157:148656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22901 comm="syz.3.4829" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8a6f8ebe9 code=0x0 [ 413.451019][T22918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4833'. [ 413.514811][T22924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4835'. [ 413.521895][T22924] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.525481][T22924] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.572518][ T7882] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 414.020375][T22936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4841'. [ 414.023341][T22936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4841'. [ 414.060411][T22941] sysfs: Unknown parameter 'usrquota' [ 414.116067][T22943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14070 sclass=netlink_route_socket pid=22943 comm=syz.1.4843 [ 414.409014][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 414.409026][ T40] audit: type=1400 audit(6000001426.130:148658): avc: denied { nlmsg_read } for pid=22948 comm="syz.5.4845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 414.422193][ T5975] Bluetooth: hci5: ACL packet too small [ 414.423154][T22949] netlink: 'syz.5.4845': attribute type 1 has an invalid length. [ 414.426288][T22949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4845'. [ 414.428490][ T980] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 414.533403][T22959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4848'. [ 414.552119][T22959] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.555082][T22959] qnx6: unable to read the first superblock [ 414.558241][T22959] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 414.561890][T22959] qnx6: unable to read the first superblock [ 414.564196][T22959] qnx6: unable to read the first superblock [ 414.600183][ T980] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 414.606950][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.609900][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.613598][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 414.616418][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.619239][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.624221][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 414.627076][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.630614][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.634150][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 414.637407][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.640201][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.644355][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 414.647173][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.649854][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.653516][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 414.656947][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.658819][T22961] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.659611][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.665530][T22961] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.666947][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 414.672874][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.675648][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.678907][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 414.681728][ T980] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.684556][ T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.685952][ T40] audit: type=1400 audit(6000001426.382:148659): avc: denied { listen } for pid=22962 comm="syz.5.4850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 414.687877][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 414.700502][ T980] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 414.703269][ T980] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 414.705826][ T980] usb 6-1: Product: syz [ 414.707598][ T980] usb 6-1: Manufacturer: syz [ 414.708992][ T980] usb 6-1: SerialNumber: syz [ 414.712173][ T980] usb 6-1: config 0 descriptor?? [ 414.716314][ T980] yurex 6-1:0.0: USB YUREX device now attached to Yurex #1 [ 414.751669][T22965] serio: Serial port ptm0 [ 414.761836][T22961] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.765755][T22961] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.845225][T22961] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.848997][T22961] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.936970][T22943] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -71 [ 414.941600][ T9] usb 6-1: USB disconnect, device number 13 [ 414.942345][T22961] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.947735][T22961] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.948343][ T9] yurex 6-1:0.0: USB YUREX #1 now disconnected [ 415.025507][ T7882] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.029545][ T7882] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.039815][ T7882] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.042363][ T7882] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.051354][ T7882] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.054081][ T7882] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.066533][ T7858] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.070199][ T7858] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.309330][T22973] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 415.647228][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 415.690150][T15814] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 415.702989][T22990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4858'. [ 415.757423][T22998] tls_set_device_offload_rx: netdev not found [ 415.789617][T23000] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4861'. [ 415.848840][T23004] overlayfs: missing 'workdir' [ 415.872035][T15814] usb 5-1: Using ep0 maxpacket: 8 [ 415.875977][T15814] usb 5-1: config 0 interface 0 has no altsetting 0 [ 415.878772][T15814] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 415.883134][T15814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.890267][T15814] usb 5-1: config 0 descriptor?? [ 415.899775][T23006] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4863'. [ 415.905209][T23006] futex_wake_op: syz.1.4863 tries to shift op by -1; fix this program [ 416.030474][T23013] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 416.043560][T23013] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 416.334108][T15814] mcp2221 0003:04D8:00DD.000E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 416.539327][T23033] sp0: Synchronizing with TNC [ 416.544369][T23033] sp0: Found TNC [ 416.547699][T22979] netlink: 'syz.0.4854': attribute type 11 has an invalid length. [ 416.560403][ T9] usb 5-1: USB disconnect, device number 19 [ 417.368357][T23068] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 417.371515][T23068] Bluetooth: hci3: Injecting HCI hardware error event [ 417.376294][T23068] Bluetooth: hci3: hardware error 0x00 [ 417.416472][T23122] geneve2: entered promiscuous mode [ 417.418225][T23122] geneve2: entered allmulticast mode [ 417.478676][T23127] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23127 comm=syz.3.4899 [ 417.484830][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 417.489285][T23127] usbtmc 7-1:16.0: Unable to send data, error -71 [ 417.489577][ T40] audit: type=1326 audit(6000001429.011:148660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23126 comm="syz.3.4899" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fe8a6f8ebe9 code=0x0 [ 417.493539][ C3] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 417.504352][T23127] usbtmc 7-1:16.0: Unable to send data, error -71 [ 417.506700][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 417.509712][T23127] usbtmc 7-1:16.0: Unable to send data, error -71 [ 417.512187][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 417.515225][T23127] usbtmc 7-1:16.0: Unable to send data, error -71 [ 417.517551][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 417.520741][T23127] usbtmc 7-1:16.0: Unable to send data, error -71 [ 417.523234][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 417.526267][T23127] usbtmc 7-1:16.0: Unable to send data, error -71 [ 417.528542][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 417.531633][T23127] usbtmc 7-1:16.0: Unable to send data, error -71 [ 417.533963][ C3] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 417.536987][T23127] usbtmc 7-1:16.0: Unable to send data, error -71 [ 417.870852][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 417.959269][T23179] netlink: 'syz.3.4915': attribute type 16 has an invalid length. [ 417.961798][T23179] netlink: 'syz.3.4915': attribute type 17 has an invalid length. [ 418.013643][T23180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=23180 comm=syz.3.4915 [ 418.019553][T23180] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 418.024530][T23179] bridge0: port 3(syz_tun) entered disabled state [ 418.035541][T23179] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.038096][T23179] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.052644][T21832] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 418.056926][T23182] syz_tun: tun_net_xmit 86 [ 418.162790][T23179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.176737][T23179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.213888][T21832] usb 10-1: Using ep0 maxpacket: 16 [ 418.219264][T21832] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 418.222015][T21832] usb 10-1: config 0 has no interface number 0 [ 418.224306][T21832] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 418.228155][T21832] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 418.233842][T21832] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 418.238242][T21832] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 418.241488][T21832] usb 10-1: Product: syz [ 418.243220][T21832] usb 10-1: SerialNumber: syz [ 418.248088][T21832] usb 10-1: config 0 descriptor?? [ 418.253209][T21832] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 418.258936][T21832] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.8/input/input37 [ 418.353708][T23179] geneve2: left promiscuous mode [ 418.355797][T23179] geneve2: left allmulticast mode [ 418.361806][ T7861] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.366114][ T7861] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.368989][ T7861] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.371776][ T7861] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.375924][ T7861] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.378764][ T7861] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.381597][ T7861] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.386584][ T7861] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.471788][ C3] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 418.472098][T15577] usb 10-1: USB disconnect, device number 9 [ 418.473992][ C3] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 418.493963][T23197] trusted_key: encrypted_key: key trusted:8sX not found [ 418.495782][T15577] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 418.664636][T23223] netlink: 'syz.1.4932': attribute type 15 has an invalid length. [ 418.667184][T23223] __nla_validate_parse: 3 callbacks suppressed [ 418.667192][T23223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4932'. [ 418.718425][T23231] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4934'. [ 418.764562][T23221] misc userio: Begin command sent, but we're already running [ 418.767701][T23221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.950892][ T40] audit: type=1326 audit(6000001430.376:148661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23243 comm="syz.1.4938" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a9f8ebe9 code=0x0 [ 419.064123][T23245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4938'. [ 419.069396][ T5328] Bluetooth: hci5: command 0x0406 tx timeout [ 419.073981][ T5328] Bluetooth: hci4: command tx timeout [ 419.086282][T23245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4938'. [ 419.149635][T23259] overlayfs: conflicting lowerdir path [ 419.153757][ C2] syz_tun: tun_net_xmit 86 [ 419.199192][T23266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4944'. [ 419.201985][T23266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4944'. [ 419.204830][T23266] netlink: 'syz.3.4944': attribute type 7 has an invalid length. [ 419.209055][ T40] audit: type=1400 audit(6000001430.620:148662): avc: denied { read } for pid=23265 comm="syz.3.4944" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 419.216545][ T40] audit: type=1400 audit(6000001430.620:148663): avc: denied { open } for pid=23265 comm="syz.3.4944" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 419.224464][ T40] audit: type=1400 audit(6000001430.620:148664): avc: denied { ioctl } for pid=23265 comm="syz.3.4944" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 419.581995][T23068] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 419.666234][T23275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4947'. [ 419.669619][T23275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4947'. [ 419.884504][T23284] random: crng reseeded on system resumption [ 419.980667][T23287] netlink: 'syz.1.4951': attribute type 1 has an invalid length. [ 419.983341][T23287] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4951'. [ 419.986376][T23287] NCSI netlink: No device for ifindex 196628 [ 420.276250][ C2] syz_tun: tun_net_xmit 86 [ 420.688120][T23303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4957'. [ 420.717560][T23305] 9pnet_fd: Insufficient options for proto=fd [ 421.819831][T23360] bridge0: port 3(veth0_to_bridge) entered blocking state [ 421.822090][T23360] bridge0: port 3(veth0_to_bridge) entered disabled state [ 421.824508][ T40] audit: type=1400 audit(6000001433.061:148665): avc: denied { bind } for pid=23356 comm="syz.0.4974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 421.824619][T23360] veth0_to_bridge: entered allmulticast mode [ 421.839654][T23360] veth0_to_bridge: entered promiscuous mode [ 421.842261][T23360] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 421.847558][T23360] bridge0: port 3(veth0_to_bridge) entered blocking state [ 421.850566][T23360] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 421.861886][T23360] fuseblk: Unknown parameter '' [ 421.927181][T21985] overlayfs: failed lookup in lower (newroot/88, name='bus', err=-40): overlapping layers [ 421.930992][T21985] overlayfs: failed lookup in lower (newroot/88, name='bus', err=-40): overlapping layers [ 422.004287][T23372] syz_tun (unregistering): left allmulticast mode [ 422.006517][T23372] syz_tun (unregistering): left promiscuous mode [ 422.009449][T23372] bridge0: port 3(syz_tun) entered disabled state [ 422.338171][ T5971] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 422.343889][ T5971] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 422.347590][ T5971] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 422.351903][ T5971] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 422.355140][ T5971] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 422.356209][ T40] audit: type=1400 audit(6000001433.557:148666): avc: denied { bind } for pid=23387 comm="syz.1.4985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 422.381119][T23383] lo speed is unknown, defaulting to 1000 [ 422.429273][T23393] futex_wake_op: syz.0.4987 tries to shift op by -1; fix this program [ 422.467281][T23397] pim6reg: entered allmulticast mode [ 422.504902][T23397] pim6reg: left allmulticast mode [ 422.519645][T23383] wlan1 speed is unknown, defaulting to 1000 [ 422.522646][T23383] vxcan1 speed is unknown, defaulting to 1000 [ 422.783561][T23383] chnl_net:caif_netlink_parms(): no params data found [ 422.859243][T23420] fuse: Bad value for 'fd' [ 422.915691][ T40] audit: type=1400 audit(6000001434.081:148667): avc: denied { lock } for pid=23433 comm="syz.0.4998" path="socket:[112081]" dev="sockfs" ino=112081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 422.944495][T12751] bridge_slave_1: left allmulticast mode [ 422.946363][T12751] bridge_slave_1: left promiscuous mode [ 422.948296][T12751] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.961771][T12751] bridge_slave_0: left allmulticast mode [ 422.963661][T12751] bridge_slave_0: left promiscuous mode [ 422.965586][T12751] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.150286][T23443] netlink: 'syz.1.4999': attribute type 11 has an invalid length. [ 423.428236][T12751] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.433425][T12751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.439419][T12751] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 423.445620][T12751] bond0 (unregistering): Released all slaves [ 423.455802][T23383] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.458131][T23383] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.460561][T23383] bridge_slave_0: entered allmulticast mode [ 423.464493][T23383] bridge_slave_0: entered promiscuous mode [ 423.467806][T23383] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.470002][T23383] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.472341][T23383] bridge_slave_1: entered allmulticast mode [ 423.476058][T23383] bridge_slave_1: entered promiscuous mode [ 423.525250][T23383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.533514][T23383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.562116][ T40] audit: type=1400 audit(6000001434.679:148668): avc: denied { unmount } for pid=21779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 423.620327][T23383] team0: Port device team_slave_0 added [ 423.636681][T23383] team0: Port device team_slave_1 added [ 423.673157][T23383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.675385][T23383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.684588][T23383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.694850][T23383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.697150][T23383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.705243][T23383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.761557][T23383] hsr_slave_0: entered promiscuous mode [ 423.764036][T23383] hsr_slave_1: entered promiscuous mode [ 423.766222][T23383] debugfs: 'hsr0' already exists in 'hsr' [ 423.768396][T23383] Cannot create hsr debugfs directory [ 424.069094][T12751] hsr_slave_0: left promiscuous mode [ 424.079723][T12751] hsr_slave_1: left promiscuous mode [ 424.081873][T12751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.096566][T12751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.144068][ T40] audit: type=1326 audit(6000001435.222:148669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23487 comm="syz.5.5009" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4f638ebe9 code=0x0 [ 424.282957][T23491] netlink: 'syz.1.5010': attribute type 1 has an invalid length. [ 424.422874][ T40] audit: type=1400 audit(6000001435.474:148670): avc: denied { name_bind } for pid=23493 comm="syz.0.5011" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 424.543061][ T5971] Bluetooth: hci2: command tx timeout [ 424.912971][T12751] team0 (unregistering): Port device team_slave_1 removed [ 425.020296][T12751] team0 (unregistering): Port device team_slave_0 removed [ 425.078163][T23499] netlink: 'syz.5.5012': attribute type 11 has an invalid length. [ 425.080820][T23499] netlink: 'syz.5.5012': attribute type 4 has an invalid length. [ 425.083475][T23499] __nla_validate_parse: 5 callbacks suppressed [ 425.083483][T23499] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5012'. [ 425.800213][T23490] macvlan2: entered promiscuous mode [ 425.802411][T23490] macvlan2: entered allmulticast mode [ 425.805165][T23490] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 425.840244][T23500] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5012'. [ 425.852081][T23500] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.908740][T23503] kvm: pic: non byte write [ 425.913036][T23503] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 425.928502][T23503] kvm: pic: non byte write [ 426.396556][T23383] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 426.402901][T23383] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 426.414533][T23383] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 426.418855][T23383] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 426.605671][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.609557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.613453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.617651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.621399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.625271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.629200][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.632981][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.636771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.640600][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.776361][ T5971] Bluetooth: hci2: command tx timeout [ 426.925000][T23564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5022'. [ 426.951592][T23568] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5024'. [ 426.989197][ T40] audit: type=1401 audit(6000001437.888:148671): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 426.996110][T23574] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 427.000067][ T40] audit: type=1400 audit(6000001437.897:148672): avc: denied { relabelto } for pid=23571 comm="syz.1.5025" name="135" dev="tmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 427.013316][ T40] audit: type=1400 audit(6000001437.897:148673): avc: denied { associate } for pid=23571 comm="syz.1.5025" name="135" dev="tmpfs" ino=747 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 427.026806][ T40] audit: type=1400 audit(6000001437.925:148674): avc: denied { remove_name } for pid=21585 comm="syz-executor" name="bus" dev="tmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 427.057630][ T7882] bond0 (unregistering): Released all slaves [ 427.140992][T23383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.178484][T23383] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.202213][T23602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5032'. [ 427.241651][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 427.241662][ T40] audit: type=1400 audit(6000001438.131:148676): avc: denied { map } for pid=23589 comm="syz.0.5030" path="/newroot/proc/959/net/vlan/vlan0" dev="proc" ino=4026534960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 427.278568][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 427.354119][T23614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5033'. [ 427.446002][ T7861] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.448361][ T7861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.814409][ T7861] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.816724][ T7861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.047482][T23383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.258815][T23647] input input40: cannot allocate more than FF_MAX_EFFECTS effects [ 428.307808][T23647] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 428.320610][T23383] veth0_vlan: entered promiscuous mode [ 428.325337][T23383] veth1_vlan: entered promiscuous mode [ 428.398655][T23661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5040'. [ 428.493939][T23383] veth0_macvtap: entered promiscuous mode [ 428.525992][T23383] veth1_macvtap: entered promiscuous mode [ 428.545115][T23383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.549499][T23383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.626336][T12743] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.634086][T12743] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.642631][T12743] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.715543][ T7882] batman_adv: batadv0: Interface deactivated: macvtap1 [ 428.729182][ T7882] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode [ 428.782200][ T7882] batman_adv: batadv0: Removing interface: macvtap1 [ 428.811119][T12743] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.895975][ T7862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.901415][ T7862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.969504][T12751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.976387][T12751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.989240][ T5971] Bluetooth: hci2: command tx timeout [ 429.015374][T23686] netlink: 'syz.0.5044': attribute type 2 has an invalid length. [ 429.287628][T23703] xfs: Unknown parameter 'usrquotaadio#' [ 429.311981][ T7882] hsr_slave_0: left promiscuous mode [ 429.443098][ T7882] hsr_slave_1: left promiscuous mode [ 429.468644][ T40] audit: type=1400 audit(6000001440.189:148677): avc: denied { name_bind 0x1000000 } for pid=23711 comm="syz.5.5047" path="socket:[111381]" dev="sockfs" ino=111381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 429.529238][T23718] QAT: failed to copy from user cfg_data. [ 429.678158][T23723] binder: 23722:23723 ioctl 5407 200000000000 returned -22 [ 429.832488][T23727] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5052'. [ 431.232208][ T5971] Bluetooth: hci2: command tx timeout [ 431.512539][T23740] Falling back ldisc for ttyprintk. [ 431.960963][ C3] net_ratelimit: 106497 callbacks suppressed [ 431.960977][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.960993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.963127][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.966728][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 431.970346][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.974023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 431.977516][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.981313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 431.984942][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 431.988555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 434.890043][T23768] Mount JFS Failure: -22 [ 435.371865][T23780] netlink: 120 bytes leftover after parsing attributes in process `syz.7.5066'. [ 435.397935][ T40] audit: type=1400 audit(6000001445.754:148678): avc: denied { create } for pid=23778 comm="syz.7.5066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 435.447561][T23782] netlink: 'syz.0.5067': attribute type 2 has an invalid length. [ 435.450425][T23782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5067'. [ 435.592468][T23791] sctp: Trying to GSO but underlying device doesn't support it. [ 435.765148][T23797] netlink: 'syz.7.5071': attribute type 10 has an invalid length. [ 435.791278][T23797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.794760][T23797] team0: Port device bond0 added [ 435.935029][T23805] netlink: 'syz.0.5074': attribute type 4 has an invalid length. [ 435.974622][ T40] audit: type=1400 audit(6000001446.297:148679): avc: denied { read } for pid=23806 comm="syz.7.5075" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 436.012106][T23810] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5076'. [ 436.863382][T23807] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 436.864739][T23842] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5083'. [ 436.866130][T23807] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 436.868867][T23842] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5083'. [ 436.868880][T23842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5083'. [ 436.905348][T23807] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 436.909654][T23807] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 436.927285][T23807] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 436.952450][T23807] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 436.954474][T23807] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 436.967398][T23807] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 436.969672][T23807] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 436.991371][T23807] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 437.068862][ T40] audit: type=1400 audit(6000001447.317:148680): avc: denied { append } for pid=23851 comm="syz.7.5086" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 437.158436][T23858] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.5087'. [ 437.221490][T23859] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.5084'. [ 437.274253][T13154] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 437.317013][ C3] net_ratelimit: 117011 callbacks suppressed [ 437.317026][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.317088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 437.319170][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.322848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.326730][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.329388][T23858] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5087'. [ 437.331310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 437.335079][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.339652][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.342405][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.347248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 437.437139][T13154] usb 6-1: unable to get BOS descriptor or descriptor too short [ 437.446455][T13154] usb 6-1: config 6 has an invalid interface number: 158 but max is 0 [ 437.454795][T13154] usb 6-1: config 6 has no interface number 0 [ 437.461190][T13154] usb 6-1: config 6 interface 158 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 437.470473][T13154] usb 6-1: config 6 interface 158 has no altsetting 0 [ 437.496221][T13154] usb 6-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 437.499840][T13154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.520235][T13154] usb 6-1: Product: 淜懮着툋쬹먜鰸钕溰澗窢攑悝ග੄ฐщ⏻䶜쯃ᜨ椡蛃틤뿞Ӳ猱ഩ躟䍇婀ᝪ읁뽵雱鰿쬠鋷㥹킀橝㸨꫺㌔➺汻⦔进ᝋ譇졝茫뻐檬Ⓚᅇ킾ᰃ볌뢰烆䧡ऍ࡬ᝲ蝔貔㳭믔㖓힥ꡜ럽胎蓬翃ᰴₘ躈颿ꉛ쓁똺䚶齊⦮䒯賭 [ 437.536272][T13154] usb 6-1: Manufacturer: 㠊 [ 437.538127][T13154] usb 6-1: SerialNumber: 숧癤廊紓矏햽ᅈ琏䚼蚏啐㧰✎⛰Ⲧ [ 437.570574][T23863] netfs: Couldn't get user pages (rc=-14) [ 437.769874][T13154] rtsx_usb 6-1:6.158: probe with driver rtsx_usb failed with error -71 [ 437.783117][T13154] usb 6-1: USB disconnect, device number 15 [ 437.945863][T23872] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5092'. [ 438.073648][T23876] SELinux: truncated policydb string identifier [ 438.081982][T23876] SELinux: failed to load policy [ 438.130657][T23878] bond0: entered promiscuous mode [ 438.132413][T23878] bond_slave_0: entered promiscuous mode [ 438.135135][T23878] bond_slave_1: entered promiscuous mode [ 438.139548][T23878] batadv0: entered promiscuous mode [ 438.144008][T23878] debugfs: 'hsr1' already exists in 'hsr' [ 438.146420][T23878] Cannot create hsr debugfs directory [ 438.149647][T23878] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 438.163164][T23878] bond0: left promiscuous mode [ 438.165024][T23878] bond_slave_0: left promiscuous mode [ 438.166984][T23878] bond_slave_1: left promiscuous mode [ 438.173030][T23878] batadv0: left promiscuous mode [ 438.311347][ T5971] Bluetooth: hci0: command 0x0406 tx timeout [ 438.413705][T23881] netlink: 'syz.5.5096': attribute type 2 has an invalid length. [ 438.660467][ T40] audit: type=1400 audit(6000001448.804:148681): avc: denied { mount } for pid=23889 comm="syz.7.5099" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 438.674013][ T40] audit: type=1400 audit(6000001448.813:148682): avc: denied { search } for pid=23889 comm="syz.7.5099" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 438.682822][ T40] audit: type=1400 audit(6000001448.813:148683): avc: denied { search } for pid=23889 comm="syz.7.5099" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 438.685161][T23894] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 438.696188][ T40] audit: type=1400 audit(6000001448.813:148684): avc: denied { read open } for pid=23889 comm="syz.7.5099" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 438.698684][T23894] SELinux: failed to load policy [ 438.714605][T23892] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 438.717225][T23892] SELinux: failed to load policy [ 438.753023][T23895] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:0 [ 438.755461][T23894] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 438.823908][T23900] tipc: Enabling not permitted [ 438.830740][T23900] tipc: Enabling of bearer rejected, failed to enable media [ 438.984302][T23904] batadv1: entered promiscuous mode [ 438.986082][T23904] batadv1: entered allmulticast mode [ 439.045741][T23905] batadv1: entered promiscuous mode [ 439.048295][T23905] batadv1: entered allmulticast mode [ 439.081663][ T5971] Bluetooth: hci1: command 0x0c1a tx timeout [ 439.166748][ T5971] Bluetooth: hci2: command 0x0c1a tx timeout [ 439.168845][ T5971] Bluetooth: hci5: command 0x0406 tx timeout [ 439.459564][T23928] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 439.461640][T23928] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 439.465468][T23928] vhci_hcd vhci_hcd.0: Device attached [ 439.530506][ T40] audit: type=1400 audit(6000001449.618:148685): avc: denied { nlmsg_write } for pid=23922 comm="syz.0.5110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 439.649369][T15577] vhci_hcd: vhci_device speed not set [ 439.712554][T15577] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 439.722413][T13154] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 439.885838][T13154] usb 10-1: config 0 has no interfaces? [ 439.887938][T13154] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 439.890907][T13154] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.902227][T13154] usb 10-1: config 0 descriptor?? [ 440.125062][ T6047] usb 10-1: USB disconnect, device number 10 [ 440.128283][T23929] usbip_core: unknown command [ 440.136736][T23929] vhci_hcd: unknown pdu 0 [ 440.145328][T23929] usbip_core: unknown command [ 440.149596][T12751] vhci_hcd: stop threads [ 440.154038][T12751] vhci_hcd: release socket [ 440.161172][T12751] vhci_hcd: disconnect device [ 440.205146][T15577] vhci_hcd: vhci_device speed not set [ 440.535208][ T5971] Bluetooth: hci0: command 0x0406 tx timeout [ 440.757494][ T40] audit: type=1400 audit(6000001450.768:148686): avc: denied { connect } for pid=23956 comm="syz.5.5117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 440.811113][T23955] loop6: detected capacity change from 0 to 2560 [ 440.816213][T23955] buffer_io_error: 25 callbacks suppressed [ 440.816230][T23955] Buffer I/O error on dev loop6, logical block 0, async page read [ 440.824941][T23955] Buffer I/O error on dev loop6, logical block 0, async page read [ 440.828499][T23955] Buffer I/O error on dev loop6, logical block 0, async page read [ 440.830858][T23955] Buffer I/O error on dev loop6, logical block 0, async page read [ 440.833803][T23955] Buffer I/O error on dev loop6, logical block 0, async page read [ 440.836892][T23955] Buffer I/O error on dev loop6, logical block 0, async page read [ 440.839834][T23955] Buffer I/O error on dev loop6, logical block 0, async page read [ 440.841921][T23960] can0: slcan on ttyS3. [ 440.866717][T23955] Buffer I/O error on dev loop6, logical block 0, async page read [ 440.884514][T23955] ldm_validate_partition_table(): Disk read failed. [ 440.894989][T23955] Buffer I/O error on dev loop6, logical block 0, async page read [ 440.898595][T23955] Buffer I/O error on dev loop6, logical block 0, async page read [ 440.901310][T23955] Dev loop6: unable to read RDB block 0 [ 440.904439][T23955] loop6: unable to read partition table [ 440.925375][T23955] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 441.048274][T23965] 9pnet_fd: Insufficient options for proto=fd [ 441.056078][T23965] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 441.068715][T23960] can0 (unregistered): slcan off ttyS3. [ 441.207827][T23971] __nla_validate_parse: 7 callbacks suppressed [ 441.207844][T23971] netlink: 180 bytes leftover after parsing attributes in process `syz.5.5121'. [ 441.271471][T23973] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 441.308025][ T5971] Bluetooth: hci1: command 0x0c1a tx timeout [ 441.390172][ T5971] Bluetooth: hci5: command 0x0406 tx timeout [ 441.405671][ T5971] Bluetooth: hci2: command 0x0c1a tx timeout [ 441.476127][T15577] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 441.652964][T15577] usb 6-1: Using ep0 maxpacket: 8 [ 441.656968][T15577] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 441.662565][T15577] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 441.669183][T15577] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 441.672153][T15577] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.676288][T15577] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 441.680548][T15577] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.904415][T15577] usb 6-1: GET_CAPABILITIES returned 0 [ 441.906294][T15577] usbtmc 6-1:16.0: can't read capabilities [ 442.118922][T23970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5122'. [ 442.178274][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.181419][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.184217][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.186968][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.189701][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.192623][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.196295][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.199873][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.203666][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.206423][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.209149][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.211927][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.215168][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.218407][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.221660][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.224980][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 442.357999][ T9] usb 6-1: USB disconnect, device number 16 [ 442.397679][T23999] ref_ctr_offset mismatch. inode: 0x3e8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 442.432898][T24002] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5127'. [ 442.435697][T24002] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5127'. [ 442.438825][T24001] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5127'. [ 442.441781][T24001] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5127'. [ 442.445160][T24002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=24002 comm=syz.7.5127 [ 442.673006][ C1] net_ratelimit: 102898 callbacks suppressed [ 442.673017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.673021][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.675036][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 442.678946][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.682597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.686331][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.690202][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 442.693947][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.697640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 442.701337][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.906055][ T40] audit: type=1400 audit(6000001452.779:148687): avc: denied { watch_mount } for pid=24011 comm="syz.5.5129" path="/183" dev="tmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 443.385871][ T40] audit: type=1400 audit(6000001453.228:148688): avc: denied { execute } for pid=24026 comm="syz.7.5132" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 443.528317][ T5971] Bluetooth: hci1: command 0x0c1a tx timeout [ 443.613967][ T5971] Bluetooth: hci2: command 0x0c1a tx timeout [ 443.639486][T24032] netfs: Couldn't get user pages (rc=-14) [ 443.658667][T24036] netlink: 'syz.1.5135': attribute type 2 has an invalid length. [ 443.789761][T24042] macsec1: entered promiscuous mode [ 443.793734][T24043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5137'. [ 443.798127][T24043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5137'. [ 443.956608][T24047] lo speed is unknown, defaulting to 1000 [ 443.966943][T24049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5140'. [ 444.178663][T24047] wlan1 speed is unknown, defaulting to 1000 [ 444.182524][T24047] vxcan1 speed is unknown, defaulting to 1000 [ 444.850024][ T5971] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 444.898649][T24072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5149'. [ 445.068761][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 445.373170][ T40] audit: type=1326 audit(6000001455.090:148689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24098 comm="syz.5.5157" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4f638ebe9 code=0x0 [ 445.785666][T24120] delete_channel: no stack [ 448.028959][ C3] net_ratelimit: 117458 callbacks suppressed [ 448.028960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.028973][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.029066][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.031003][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 448.034683][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.038308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.042113][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.045781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 448.049360][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 448.053080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.492136][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 449.338108][T24149] tipc: Enabling of bearer rejected, failed to enable media [ 449.383677][T24157] 9pnet_fd: Insufficient options for proto=fd [ 449.454216][T24168] __nla_validate_parse: 4 callbacks suppressed [ 449.454227][T24168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5177'. [ 449.541847][T24173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5179'. [ 449.564365][T24173] chnl_net:caif_netlink_parms(): no params data found [ 449.883288][T24190] Invalid option length (1048180) for dns_resolver key [ 450.789104][T24207] overlayfs: overlapping lowerdir path [ 450.899279][T24214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5186'. [ 451.264396][T24232] binder: 24230:24232 ioctl c0306201 200000000080 returned -14 [ 451.267307][T24239] binder: BINDER_SET_CONTEXT_MGR already set [ 451.270950][T24239] binder: 24230:24239 ioctl 4018620d 200000000040 returned -16 [ 451.363394][T24242] batman_adv: batadv0: Adding interface: dummy0 [ 451.368033][T24242] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.375934][T24242] batman_adv: batadv0: Interface activated: dummy0 [ 451.464910][T24248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5197'. [ 451.499098][T24251] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5198'. [ 451.576912][T24256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5200'. [ 451.630862][ T40] audit: type=1400 audit(6000001460.936:148690): avc: denied { execute } for pid=24258 comm="syz.5.5201" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 451.663555][T24259] program syz.5.5201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 452.128685][T24268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5205'. [ 452.135475][ T6028] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 452.140693][T24268] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 452.272622][T24274] lo speed is unknown, defaulting to 1000 [ 452.312603][ T6028] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 452.319731][ T6028] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 452.332538][ T6028] usb 10-1: config 0 interface 0 has no altsetting 0 [ 452.348000][ T6028] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 452.354669][ T6028] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 452.362299][ T6028] usb 10-1: Product: syz [ 452.364222][ T6028] usb 10-1: Manufacturer: syz [ 452.366251][ T6028] usb 10-1: SerialNumber: syz [ 452.378185][ T6028] usb 10-1: config 0 descriptor?? [ 452.389770][ T6028] hub 10-1:0.0: bad descriptor, ignoring hub [ 452.396879][ T6028] hub 10-1:0.0: probe with driver hub failed with error -5 [ 452.408684][ T6028] usb 10-1: selecting invalid altsetting 0 [ 452.567400][T24274] wlan1 speed is unknown, defaulting to 1000 [ 452.571220][T24274] vxcan1 speed is unknown, defaulting to 1000 [ 453.384993][ C3] net_ratelimit: 112628 callbacks suppressed [ 453.385005][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.385028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.387016][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.390796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 453.394387][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.398161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.401840][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.405551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 453.409334][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 453.413000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.971188][ T40] audit: type=1400 audit(6000001463.125:148691): avc: denied { setopt } for pid=24310 comm="syz.1.5217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 454.288084][T24317] FAULT_INJECTION: forcing a failure. [ 454.288084][T24317] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 454.292152][T24317] CPU: 0 UID: 0 PID: 24317 Comm: syz.0.5219 Not tainted syzkaller #0 PREEMPT(full) [ 454.292167][T24317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 454.292174][T24317] Call Trace: [ 454.292178][T24317] [ 454.292183][T24317] dump_stack_lvl+0x16c/0x1f0 [ 454.292215][T24317] should_fail_ex+0x512/0x640 [ 454.292234][T24317] _copy_from_iter+0x29f/0x1720 [ 454.292251][T24317] ? __alloc_skb+0x200/0x380 [ 454.292263][T24317] ? __pfx__copy_from_iter+0x10/0x10 [ 454.292278][T24317] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 454.292296][T24317] netlink_sendmsg+0x829/0xdd0 [ 454.292311][T24317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.292329][T24317] ____sys_sendmsg+0xa95/0xc70 [ 454.292345][T24317] ? copy_msghdr_from_user+0x10a/0x160 [ 454.292357][T24317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.292379][T24317] ___sys_sendmsg+0x134/0x1d0 [ 454.292391][T24317] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.292420][T24317] __sys_sendmsg+0x16d/0x220 [ 454.292434][T24317] ? __pfx___sys_sendmsg+0x10/0x10 [ 454.292455][T24317] do_syscall_64+0xcd/0x4c0 [ 454.292475][T24317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.292487][T24317] RIP: 0033:0x7f00cb58ebe9 [ 454.292496][T24317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.292507][T24317] RSP: 002b:00007f00cc410038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.292519][T24317] RAX: ffffffffffffffda RBX: 00007f00cb7c5fa0 RCX: 00007f00cb58ebe9 [ 454.292526][T24317] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 454.292532][T24317] RBP: 00007f00cc410090 R08: 0000000000000000 R09: 0000000000000000 [ 454.292539][T24317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.292545][T24317] R13: 00007f00cb7c6038 R14: 00007f00cb7c5fa0 R15: 00007ffe879fc218 [ 454.292559][T24317] [ 454.542913][T24328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5223'. [ 454.553924][T24328] bridge0: port 4(macvlan2) entered blocking state [ 454.556855][T24328] bridge0: port 4(macvlan2) entered disabled state [ 454.559810][T24328] macvlan2: entered allmulticast mode [ 454.564362][T24328] bridge0: entered allmulticast mode [ 454.577712][T24328] macvlan2: left allmulticast mode [ 454.579985][T24328] bridge0: left allmulticast mode [ 454.910126][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5226'. [ 455.244322][T23068] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 455.320338][ T61] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 455.430303][T24348] CIFS mount error: No usable UNC path provided in device string! [ 455.430303][T24348] [ 455.434470][T24348] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 455.595869][ T40] audit: type=1400 audit(6000001464.650:148692): avc: denied { write } for pid=24352 comm="syz.0.5231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 456.318547][T13154] usb 10-1: USB disconnect, device number 11 [ 456.909352][T24383] netlink: 120 bytes leftover after parsing attributes in process `syz.5.5237'. [ 456.913053][T24383] netlink: 'syz.5.5237': attribute type 12 has an invalid length. [ 456.915641][T24383] netlink: 'syz.5.5237': attribute type 29 has an invalid length. [ 456.918208][T24383] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5237'. [ 456.921000][T24383] netlink: 'syz.5.5237': attribute type 3 has an invalid length. [ 456.924523][T24383] netlink: 'syz.5.5237': attribute type 2 has an invalid length. [ 456.927531][T24383] netlink: 23 bytes leftover after parsing attributes in process `syz.5.5237'. [ 457.223018][T23068] Bluetooth: hci2: command 0x0c1a tx timeout [ 458.025493][T24396] fuse: Bad value for 'fd' [ 458.394885][T24427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5249'. [ 458.440996][ T40] audit: type=1400 audit(6000001467.306:148693): avc: denied { write } for pid=24425 comm="syz.0.5248" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 458.488764][T24432] 9pnet: Unknown protocol version 9p200 [ 458.538036][T24434] fuse: Unknown parameter 'gr_id' [ 458.543904][T24434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5251'. [ 458.559373][T15577] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 458.646371][T24436] netlink: 'syz.1.5252': attribute type 10 has an invalid length. [ 458.653775][T24436] hsr_slave_0: left promiscuous mode [ 458.660048][T24436] hsr_slave_1: left promiscuous mode [ 458.720219][T15577] usb 10-1: Using ep0 maxpacket: 8 [ 458.727073][T15577] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.730198][T15577] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 458.733257][T15577] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 458.736690][T15577] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.741005][ C3] net_ratelimit: 119784 callbacks suppressed [ 458.741016][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.741082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.742982][T15577] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 458.743022][T15577] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.743559][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.747236][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 458.751923][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.754776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.757906][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.763264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 458.767170][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 458.770861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.841764][T24440] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 458.959851][T15577] usb 10-1: GET_CAPABILITIES returned 0 [ 458.961632][T15577] usbtmc 10-1:16.0: can't read capabilities [ 459.069364][T24450] netlink: 'syz.0.5255': attribute type 1 has an invalid length. [ 459.073146][ T40] audit: type=1400 audit(6000001467.905:148694): avc: denied { accept } for pid=24449 comm="syz.0.5255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 459.174947][T24422] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5246'. [ 459.326308][ T61] usb 10-1: USB disconnect, device number 12 [ 459.390752][T24463] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 459.430852][T24463] .: (slave team0): Releasing backup interface [ 459.443466][T24463] bridge0: port 3(batadv0) entered disabled state [ 459.471764][T24463] bridge_slave_0: left allmulticast mode [ 459.473601][T24463] bridge_slave_0: left promiscuous mode [ 459.475551][T24463] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.480127][T24466] netlink: 'syz.0.5259': attribute type 10 has an invalid length. [ 459.496429][T24463] bridge_slave_1: left allmulticast mode [ 459.498384][T24463] bridge_slave_1: left promiscuous mode [ 459.507094][T24463] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.537162][T24463] .: (slave bond_slave_0): Releasing backup interface [ 459.567380][T24463] .: (slave bond_slave_1): Releasing backup interface [ 459.591077][T24463] team0: Port device team_slave_0 removed [ 459.605228][T24463] team0: Port device team_slave_1 removed [ 459.609253][T24463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.612178][T24463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.620966][T24463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.623880][T24463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.644580][T24463] bond2: (slave bond3): Releasing backup interface [ 459.668454][T24466] mac80211_hwsim hwsim41 wlan1: left allmulticast mode [ 459.687086][T24466] 8021q: adding VLAN 0 to HW filter on device . [ 459.701218][T24466] .: (slave wlan1): Enslaving as an active interface with an up link [ 459.789997][T24479] 9pnet: Unknown protocol version 9p200 [ 459.953301][T24481] comedi comedi0: dt2814: I/O port conflict (0x8d,2) [ 460.347588][T24486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5266'. [ 460.398144][T15577] IPVS: starting estimator thread 0... [ 460.508936][T24489] IPVS: using max 48 ests per chain, 115200 per kthread [ 460.617673][T24515] 9pnet: Unknown protocol version 9p2000. [ 460.857979][ T6028] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 461.017192][ T6028] usb 5-1: device descriptor read/64, error -71 [ 461.155534][T24519] batman_adv: batadv0: Adding interface: ipvlan2 [ 461.158234][T24519] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.168505][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.171845][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.175110][T24519] batman_adv: batadv0: Interface activated: ipvlan2 [ 461.192235][T24519] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5276'. [ 461.287355][ T6028] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 461.441154][ T5971] Bluetooth: hci5: unexpected event for opcode 0x0c7b [ 461.445905][ T6028] usb 5-1: device descriptor read/64, error -71 [ 461.583301][ T6028] usb usb5-port1: attempt power cycle [ 461.621633][T24543] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5284'. [ 461.678246][T24547] 9pnet: Unknown protocol version 9p2000. [ 461.929566][ T5971] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 461.969751][ T6028] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 462.025497][ T6028] usb 5-1: device descriptor read/8, error -71 [ 462.229035][T24556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5287'. [ 462.280013][ T6028] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 462.302512][ T6028] usb 5-1: device descriptor read/8, error -71 [ 462.374454][T24560] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 462.419190][ T6028] usb usb5-port1: unable to enumerate USB device [ 462.433898][T24562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=24562 comm=syz.1.5291 [ 462.658402][T24572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5294'. [ 462.710116][ T40] audit: type=1400 audit(6000001471.310:148695): avc: denied { mounton } for pid=24573 comm="syz.1.5295" path="/230/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 462.795255][T24577] 9pnet: Unknown protocol version 9p2000. [ 463.538967][T24579] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24579 comm=syz.1.5297 [ 463.544855][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.688440][T24586] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5300'. [ 463.692207][T24586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5300'. [ 463.702721][ T6028] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 463.709970][T24586] netlink: 'syz.1.5300': attribute type 7 has an invalid length. [ 463.769173][T24590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5302'. [ 463.851487][ T6028] usb 10-1: device descriptor read/64, error -71 [ 463.888968][T24596] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5304'. [ 463.956695][T24600] 9p filesystem being mounted at /237/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 463.961447][T24598] 9pnet: p9_errstr2errno: server reported unknown error @ [ 464.096938][ C3] net_ratelimit: 118645 callbacks suppressed [ 464.096952][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.096989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 464.099172][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.099267][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.103024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 464.107456][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.111125][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 464.115431][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.119131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 464.123193][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.124029][ T6028] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 464.258177][ T6028] usb 10-1: device descriptor read/64, error -71 [ 464.309764][T24605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5307'. [ 464.376108][ T6028] usb usb10-port1: attempt power cycle [ 464.749277][ T6028] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 464.776839][ T6028] usb 10-1: device descriptor read/8, error -71 [ 464.877710][ T61] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 465.038738][ T6028] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 465.059476][ T61] usb 5-1: Using ep0 maxpacket: 8 [ 465.062592][ T6028] usb 10-1: device descriptor read/8, error -71 [ 465.066953][ T61] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 465.072145][ T61] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 465.076141][ T61] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 465.080328][ T61] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.086667][ T61] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 465.090465][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.178194][ T6028] usb usb10-port1: unable to enumerate USB device [ 465.315739][ T61] usb 5-1: GET_CAPABILITIES returned 0 [ 465.317791][ T61] usbtmc 5-1:16.0: can't read capabilities [ 465.537389][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.541197][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.544955][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.548634][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.552371][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.558646][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.562457][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.566060][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.569772][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.573891][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.577542][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.581083][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.584734][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.589457][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.593156][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 465.596890][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 465.619799][ T61] usb 5-1: USB disconnect, device number 24 [ 465.950794][T24615] ptrace attach of "/syz-executor exec"[21585] was attempted by "  @ / [ 465.952272][T24615] ptrace attach of "/syz-executor exec"[21585] was attempted by "  @ / [ 465.982750][T23068] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 466.016368][ C2] vkms_vblank_simulate: vblank timer overrun [ 466.027637][T23068] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 466.031573][T23068] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 466.036501][T23068] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 466.040114][T23068] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 466.069767][T24618] lo speed is unknown, defaulting to 1000 [ 466.150569][T24618] wlan1 speed is unknown, defaulting to 1000 [ 466.153242][T24618] vxcan1 speed is unknown, defaulting to 1000 [ 466.250861][T24628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5314'. [ 466.357909][T24633] binder: BINDER_SET_CONTEXT_MGR already set [ 466.359899][T24633] binder: 24632:24633 ioctl 4018620d 2000000001c0 returned -16 [ 466.501035][ T5971] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 466.621713][T24618] chnl_net:caif_netlink_parms(): no params data found [ 466.711758][T24653] 9p filesystem being mounted at /226/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 466.957181][T24663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5323'. [ 466.990173][T24618] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.994658][T24618] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.997223][T24618] bridge_slave_0: entered allmulticast mode [ 467.004976][ T6002] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 467.029652][T24618] bridge_slave_0: entered promiscuous mode [ 467.033307][T24618] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.035632][T24618] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.047156][T24618] bridge_slave_1: entered allmulticast mode [ 467.055062][T24671] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 467.057818][T24618] bridge_slave_1: entered promiscuous mode [ 467.175947][ T6002] usb 6-1: Using ep0 maxpacket: 8 [ 467.180018][ T6002] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 467.184536][ T6002] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 467.197710][ T6002] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 467.207643][ T6002] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.212458][T24618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.215376][ T6002] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 467.227483][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.237033][T24618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.339953][T24678] binfmt_misc: register: failed to install interpreter file ./file0 [ 467.395135][ T40] audit: type=1400 audit(6000001475.659:148696): avc: denied { unmount } for pid=21779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 467.457994][T24618] team0: Port device team_slave_0 added [ 467.462758][ T6002] usb 6-1: GET_CAPABILITIES returned 0 [ 467.467385][ T6002] usbtmc 6-1:16.0: can't read capabilities [ 467.524299][T24618] team0: Port device team_slave_1 added [ 467.630783][T24618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.633700][T24618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.666433][T24618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.671540][T24618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.673922][T24618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.700528][T24618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.754102][ T6002] usb 6-1: USB disconnect, device number 18 [ 467.851388][T24683] netlink: 'syz.5.5327': attribute type 5 has an invalid length. [ 467.879766][T24618] hsr_slave_0: entered promiscuous mode [ 467.887118][T24618] hsr_slave_1: entered promiscuous mode [ 467.893923][T24618] debugfs: 'hsr0' already exists in 'hsr' [ 467.900879][T24618] Cannot create hsr debugfs directory [ 468.150045][T24691] 9p filesystem being mounted at /230/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 468.259330][ T5971] Bluetooth: hci4: command tx timeout [ 468.544313][ T40] audit: type=1400 audit(6000001476.754:148697): avc: denied { create } for pid=24701 comm="syz.1.5330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 468.677116][ T40] audit: type=1400 audit(6000001476.819:148698): avc: denied { connect } for pid=24701 comm="syz.1.5330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 468.803431][ T40] audit: type=1400 audit(6000001477.006:148699): avc: denied { append } for pid=24705 comm="syz.1.5331" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 468.818075][T24706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5331'. [ 469.014918][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 469.191664][T24723] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5332'. [ 469.195124][T24723] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5332'. [ 469.282666][T24726] usb usb8: usbfs: process 24726 (syz.0.5335) did not claim interface 0 before use [ 469.452999][ C3] net_ratelimit: 103277 callbacks suppressed [ 469.453010][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.453070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 469.455054][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.459694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 469.463294][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.468079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 469.471488][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.475395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 469.479168][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.483069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 469.645919][T15577] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 469.800441][T24618] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 469.817709][T15577] usb 5-1: Using ep0 maxpacket: 8 [ 469.824351][T24618] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 469.828199][T15577] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 469.831230][T15577] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 469.836150][T24618] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 469.841988][T15577] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 469.845084][T15577] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.850007][T15577] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 469.852770][T15577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.857869][T24618] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 469.950478][T24749] 9p filesystem being mounted at /249/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 470.081330][T15577] usb 5-1: GET_CAPABILITIES returned 0 [ 470.087155][T15577] usbtmc 5-1:16.0: can't read capabilities [ 470.158863][T24618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.172999][T24618] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.179280][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.181524][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.198186][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.200438][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.216082][ T5971] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 470.313563][T15577] usb 5-1: USB disconnect, device number 25 [ 470.439642][T24618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.471769][ T5971] Bluetooth: hci4: command tx timeout [ 471.050925][T24618] veth0_vlan: entered promiscuous mode [ 471.081883][T24618] veth1_vlan: entered promiscuous mode [ 471.138598][T24618] veth0_macvtap: entered promiscuous mode [ 471.151878][T24618] veth1_macvtap: entered promiscuous mode [ 471.172987][T24801] 9p filesystem being mounted at /402/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 471.188272][T24618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.203553][T24618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.227135][ T7861] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.241503][ T7861] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.278947][T12743] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.282927][T12743] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.403521][T24812] lo speed is unknown, defaulting to 1000 [ 471.430159][T12743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.437244][T12743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.547978][T12748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.567758][T12748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.816549][T24824] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5311'. [ 472.038647][ T40] audit: type=1800 audit(6000001480.028:148700): pid=24801 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5347" name="blkio.throttle.io_service_bytes_recursive" dev="9p" ino=35913972 res=0 errno=0 [ 472.076854][T24812] wlan1 speed is unknown, defaulting to 1000 [ 472.080708][T24812] vxcan1 speed is unknown, defaulting to 1000 [ 472.489237][T13154] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 472.660386][T13154] usb 13-1: Using ep0 maxpacket: 8 [ 472.663834][T13154] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 472.669709][T13154] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 472.677981][T13154] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 472.688740][T13154] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.693052][ T5971] Bluetooth: hci4: command tx timeout [ 472.700001][T13154] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 472.703471][T13154] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.826074][ T40] audit: type=1400 audit(6000001480.766:148701): avc: denied { create } for pid=24845 comm="syz.0.5354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 472.930676][T13154] usb 13-1: GET_CAPABILITIES returned 0 [ 472.932532][T13154] usbtmc 13-1:16.0: can't read capabilities [ 473.040466][T24853] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 473.162227][T13154] usb 13-1: USB disconnect, device number 3 [ 473.934481][T24886] netlink: 'syz.8.5357': attribute type 6 has an invalid length. [ 473.989073][T24887] netlink: 'syz.8.5357': attribute type 6 has an invalid length. [ 474.292825][ T7862] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.300567][ T7862] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.309425][ T7862] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.311999][ T7862] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.329079][ T7862] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.331652][ T7862] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.334645][ T7862] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.337074][ T7862] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.449124][T24895] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5359'. [ 474.752529][T24910] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5364'. [ 474.808969][ C3] net_ratelimit: 88943 callbacks suppressed [ 474.808981][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.809000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 474.810983][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.816092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 474.820021][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.824116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 474.827671][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.831475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 474.834936][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.838891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 474.927143][ T5971] Bluetooth: hci4: command tx timeout [ 474.956493][T24917] bridge4: entered promiscuous mode [ 475.074141][T24929] 9p filesystem being mounted at /409/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 475.139254][T24930] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5369'. [ 475.506073][T24961] 9p filesystem being mounted at /241/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 475.702695][T24973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5383'. [ 476.452504][T25000] 9p filesystem being mounted at /414/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 476.565987][ T40] audit: type=1400 audit(6000001484.265:148702): avc: denied { write } for pid=25005 comm="syz.8.5392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 476.721979][T25012] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 476.776802][T24870] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 476.790068][T25014] /dev/sg0: Can't lookup blockdev [ 476.937467][T25023] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 476.966055][T24870] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 476.976931][T24870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.981844][T24870] usb 6-1: Product: syz [ 476.983846][T24870] usb 6-1: Manufacturer: syz [ 476.985914][T24870] usb 6-1: SerialNumber: syz [ 477.003459][T24870] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 477.016915][T25020] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 477.049799][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 477.129103][ T9] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 477.326743][T24995] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5388'. [ 477.334036][T15577] usb 6-1: USB disconnect, device number 19 [ 477.340371][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 477.396831][ T40] audit: type=1400 audit(6000001485.051:148703): avc: denied { watch watch_reads } for pid=25026 comm="syz.0.5397" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 477.918949][T23068] Bluetooth: hci4: command 0x0405 tx timeout [ 478.100497][T25035] overlay: Unknown parameter 'fsname' [ 478.165960][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 478.168263][ T10] ath9k_htc: Failed to initialize the device [ 478.177113][T15577] usb 6-1: ath9k_htc: USB layer deinitialized [ 478.219452][T24870] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 478.366270][T25044] 9p filesystem being mounted at /269/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 478.384452][T24870] usb 13-1: Using ep0 maxpacket: 8 [ 478.405582][T24870] usb 13-1: config 2 interface 0 has no altsetting 0 [ 478.410006][T24870] usb 13-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 478.416142][T24870] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.418682][T24870] usb 13-1: Product: syz [ 478.425658][T24870] usb 13-1: Manufacturer: syz [ 478.427585][T24870] usb 13-1: SerialNumber: syz [ 480.164945][ C3] net_ratelimit: 92974 callbacks suppressed [ 480.164958][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.164983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 480.166978][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.171877][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 480.175527][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.179356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 480.183601][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.187325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:06:00:0c:ce:14:ee, vlan:0) [ 480.191302][ C3] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 480.195113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 481.813190][T25027] ip6gre1: entered allmulticast mode [ 481.825826][T25071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.835837][T25071] batadv_slave_0: entered promiscuous mode [ 481.862483][T24870] usb 13-1: USB disconnect, device number 4 [ 481.973585][T25079] 9p filesystem being mounted at /244/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 482.091818][T25083] tipc: Started in network mode [ 482.094070][T25083] tipc: Node identity d65b868f5f7e, cluster identity 4711 [ 482.113170][T25083] tipc: Enabled bearer , priority 0 [ 482.121377][T25083] syzkaller0: entered promiscuous mode [ 482.123233][T25083] syzkaller0: entered allmulticast mode [ 482.163533][T25083] tipc: Resetting bearer [ 482.172572][T25082] tipc: Resetting bearer [ 482.290201][T25082] tipc: Disabling bearer [ 482.324293][T25093] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5416'. [ 482.341255][T25093] overlayfs: workdir and upperdir must reside under the same mount [ 482.357640][T25098] syz_tun: entered allmulticast mode [ 482.421123][T25099] netlink: 'syz.0.5419': attribute type 5 has an invalid length. [ 482.426191][T25099] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5419'. [ 482.622786][T25105] 9p filesystem being mounted at /21/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 482.769872][ T40] audit: type=1400 audit(6000001490.064:148704): avc: denied { relabelfrom } for pid=25108 comm="syz.1.5425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 482.784875][ T61] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 482.796098][ T40] audit: type=1400 audit(6000001490.064:148705): avc: denied { relabelto } for pid=25108 comm="syz.1.5425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 482.964688][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.969096][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.979928][ T61] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.985320][ T61] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.992043][T25116] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 482.999286][T25116] efs: cannot read volume header [ 483.188976][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.193218][ T61] usb 5-1: config 0 descriptor?? [ 483.563396][T25124] binder: 25123:25124 ioctl c0306201 200000000280 returned -11 [ 483.662050][ T61] plantronics 0003:047F:FFFF.000F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 483.692752][T25129] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5432'. [ 483.883084][T25135] netlink: 'syz.8.5434': attribute type 8 has an invalid length. [ 483.888692][T25136] netlink: 'syz.8.5434': attribute type 8 has an invalid length. [ 483.949781][T25136] geneve2: entered promiscuous mode [ 483.951610][T25136] geneve2: entered allmulticast mode [ 483.990655][T25135] geneve2: entered promiscuous mode [ 483.992518][T25135] geneve2: entered allmulticast mode [ 484.002922][ T61] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 484.039209][T25139] ================================================================== [ 484.039222][T25139] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0 [ 484.039272][T25139] Write of size 8 at addr ffffc90005371000 by task syz.1.5435/25139 [ 484.039286][T25139] [ 484.039294][T25139] CPU: 2 UID: 0 PID: 25139 Comm: syz.1.5435 Not tainted syzkaller #0 PREEMPT(full) [ 484.039313][T25139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 484.039324][T25139] Call Trace: [ 484.039330][T25139] [ 484.039337][T25139] dump_stack_lvl+0x116/0x1f0 [ 484.039362][T25139] print_report+0xcd/0x630 [ 484.039386][T25139] ? __virt_addr_valid+0x81/0x610 [ 484.039410][T25139] ? sys_fillrect+0x15d4/0x17b0 [ 484.039431][T25139] kasan_report+0xe0/0x110 [ 484.039449][T25139] ? sys_fillrect+0x15d4/0x17b0 [ 484.039472][T25139] sys_fillrect+0x15d4/0x17b0 [ 484.039494][T25139] ? lockdep_hardirqs_on+0x7c/0x110 [ 484.039520][T25139] ? __pfx_sys_fillrect+0x10/0x10 [ 484.039546][T25139] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 484.039564][T25139] bit_clear+0x17d/0x220 [ 484.039582][T25139] ? __pfx_bit_clear+0x10/0x10 [ 484.039599][T25139] ? __pfx___might_resched+0x10/0x10 [ 484.039619][T25139] ? fb_get_color_depth+0x120/0x250 [ 484.039635][T25139] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 484.039657][T25139] ? __pfx_bit_clear+0x10/0x10 [ 484.039673][T25139] __fbcon_clear+0x603/0x780 [ 484.039693][T25139] fbcon_scroll+0x48b/0x690 [ 484.039710][T25139] con_scroll+0x45c/0x690 [ 484.039728][T25139] do_con_write+0x5560/0x8280 [ 484.039747][T25139] ? rcu_sync_func+0x10/0x1a0 [ 484.039778][T25139] ? __pfx___mutex_lock+0x10/0x10 [ 484.039800][T25139] ? __pfx_do_con_write+0x10/0x10 [ 484.039819][T25139] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 484.039845][T25139] con_write+0x23/0xb0 [ 484.039864][T25139] n_tty_write+0x41c/0x11e0 [ 484.039891][T25139] ? __pfx_n_tty_write+0x10/0x10 [ 484.039913][T25139] ? rcu_is_watching+0x12/0xc0 [ 484.039934][T25139] ? __pfx_woken_wake_function+0x10/0x10 [ 484.039955][T25139] ? kfree+0x24f/0x4d0 [ 484.039978][T25139] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 484.040016][T25139] ? __pfx_n_tty_write+0x10/0x10 [ 484.040040][T25139] file_tty_write.constprop.0+0x504/0x9b0 [ 484.040063][T25139] vfs_write+0x7d3/0x11d0 [ 484.040083][T25139] ? __pfx_tty_write+0x10/0x10 [ 484.040101][T25139] ? __pfx_vfs_write+0x10/0x10 [ 484.040117][T25139] ? find_held_lock+0x2b/0x80 [ 484.040144][T25139] ksys_write+0x12a/0x250 [ 484.040161][T25139] ? __pfx_ksys_write+0x10/0x10 [ 484.040181][T25139] do_syscall_64+0xcd/0x4c0 [ 484.040203][T25139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.040221][T25139] RIP: 0033:0x7fc5a9f8ebe9 [ 484.040235][T25139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.040253][T25139] RSP: 002b:00007fc5aad3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 484.040271][T25139] RAX: ffffffffffffffda RBX: 00007fc5aa1c5fa0 RCX: 00007fc5a9f8ebe9 [ 484.040283][T25139] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000007 [ 484.040293][T25139] RBP: 00007fc5aa011e19 R08: 0000000000000000 R09: 0000000000000000 [ 484.040303][T25139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.040313][T25139] R13: 00007fc5aa1c6038 R14: 00007fc5aa1c5fa0 R15: 00007fff6b718cd8 [ 484.040331][T25139] [ 484.040337][T25139] [ 484.040343][T25139] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90005071000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 484.040386][T25139] Memory state around the buggy address: [ 484.040397][T25139] ffffc90005370f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.040409][T25139] ffffc90005370f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.040421][T25139] >ffffc90005371000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 484.040430][T25139] ^ [ 484.040439][T25139] ffffc90005371080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 484.040451][T25139] ffffc90005371100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 484.040461][T25139] ================================================================== [ 484.040895][T25139] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 484.040909][T25139] CPU: 2 UID: 0 PID: 25139 Comm: syz.1.5435 Not tainted syzkaller #0 PREEMPT(full) [ 484.040930][T25139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 484.040941][T25139] Call Trace: [ 484.040947][T25139] [ 484.040955][T25139] dump_stack_lvl+0x3d/0x1f0 [ 484.040976][T25139] vpanic+0x6e8/0x7a0 [ 484.041002][T25139] ? __pfx_vpanic+0x10/0x10 [ 484.041031][T25139] ? sys_fillrect+0x15d4/0x17b0 [ 484.041054][T25139] panic+0xca/0xd0 [ 484.041078][T25139] ? __pfx_panic+0x10/0x10 [ 484.041108][T25139] ? check_panic_on_warn+0x1f/0xb0 [ 484.041125][T25139] check_panic_on_warn+0xab/0xb0 [ 484.041142][T25139] end_report+0x107/0x170 [ 484.041162][T25139] kasan_report+0xee/0x110 [ 484.041181][T25139] ? sys_fillrect+0x15d4/0x17b0 [ 484.041206][T25139] sys_fillrect+0x15d4/0x17b0 [ 484.041230][T25139] ? lockdep_hardirqs_on+0x7c/0x110 [ 484.041251][T25139] ? __pfx_sys_fillrect+0x10/0x10 [ 484.041278][T25139] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 484.041300][T25139] bit_clear+0x17d/0x220 [ 484.041319][T25139] ? __pfx_bit_clear+0x10/0x10 [ 484.041337][T25139] ? __pfx___might_resched+0x10/0x10 [ 484.041359][T25139] ? fb_get_color_depth+0x120/0x250 [ 484.041376][T25139] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 484.041405][T25139] ? __pfx_bit_clear+0x10/0x10 [ 484.041422][T25139] __fbcon_clear+0x603/0x780 [ 484.041442][T25139] fbcon_scroll+0x48b/0x690 [ 484.041460][T25139] con_scroll+0x45c/0x690 [ 484.041480][T25139] do_con_write+0x5560/0x8280 [ 484.041500][T25139] ? rcu_sync_func+0x10/0x1a0 [ 484.041531][T25139] ? __pfx___mutex_lock+0x10/0x10 [ 484.041552][T25139] ? __pfx_do_con_write+0x10/0x10 [ 484.041570][T25139] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 484.041597][T25139] con_write+0x23/0xb0 [ 484.041615][T25139] n_tty_write+0x41c/0x11e0 [ 484.041643][T25139] ? __pfx_n_tty_write+0x10/0x10 [ 484.041665][T25139] ? rcu_is_watching+0x12/0xc0 [ 484.041687][T25139] ? __pfx_woken_wake_function+0x10/0x10 [ 484.041708][T25139] ? kfree+0x24f/0x4d0 [ 484.041733][T25139] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 484.041753][T25139] ? __pfx_n_tty_write+0x10/0x10 [ 484.041777][T25139] file_tty_write.constprop.0+0x504/0x9b0 [ 484.041800][T25139] vfs_write+0x7d3/0x11d0 [ 484.041819][T25139] ? __pfx_tty_write+0x10/0x10 [ 484.041837][T25139] ? __pfx_vfs_write+0x10/0x10 [ 484.041853][T25139] ? find_held_lock+0x2b/0x80 [ 484.041881][T25139] ksys_write+0x12a/0x250 [ 484.041900][T25139] ? __pfx_ksys_write+0x10/0x10 [ 484.041921][T25139] do_syscall_64+0xcd/0x4c0 [ 484.041943][T25139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.041961][T25139] RIP: 0033:0x7fc5a9f8ebe9 [ 484.041975][T25139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.041993][T25139] RSP: 002b:00007fc5aad3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 484.042009][T25139] RAX: ffffffffffffffda RBX: 00007fc5aa1c5fa0 RCX: 00007fc5a9f8ebe9 [ 484.042021][T25139] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000007 [ 484.042033][T25139] RBP: 00007fc5aa011e19 R08: 0000000000000000 R09: 0000000000000000 [ 484.042044][T25139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.042054][T25139] R13: 00007fc5aa1c6038 R14: 00007fc5aa1c5fa0 R15: 00007fff6b718cd8 [ 484.042072][T25139] [ 484.042841][T25139] Kernel Offset: disabled VM DIAGNOSIS: 02:04:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000000010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffffffff8e2977c0 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001040 CR3=0000000110af9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcd1aa5a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcd1aa5a6 00007ffdcd1aa5ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc16812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc16812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc16812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc16812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc16812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc16812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc169974a8 00007fbc169974a0 00007fbc16997498 00007fbc16997470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc174fd100 00007fbc16997460 00007fbc16997478 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc169974b8 00007fbc169974b0 00007fbc169974a8 00007fbc169974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000010100 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801e2fc880 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f625d9212c0 CR3=000000004cfbc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c4000080 Opmask01=000000000000003f Opmask02=00000000ffffbfbf Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f625e065b00 00007f625e065b00 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f625e065b10 00007f625e065b10 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464646464646464 6464646464646464 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f625d9f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffff0000ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a5e444f5c4f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f05040405196946 45585e4445490519 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056299600656d 616e2f3177617264 69682f7761726469 0064695f6f646966 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056099600454d 414e0f1157415244 49480f5741524449 0044495f4f444946 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30302f302e303a31 2d352f312d352f35 6273752f302e6463 685f796d6d75642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373002a69627500 2a646275002a6473 6164002a73736963 6300003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fcc6c9a9ad3c34f1 2f00795f81359d80 79732f002f6d6525 7379736275732f73 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 6f7f7f5fffbdfffe 7f7b3f7bbfff7dff 7f7f7f7ffffffff7 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562996cf0f40 0000562996ce9f60 0000562996ab34b0 0000562996cedda0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562996cf5610 0000000000000041 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000312973572f10 0000000000000041 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85644675 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc9000451f0f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666657 R12=0000000000000000 R13=000000000000005d R14=ffffffff9b112060 R15=ffffffff85644610 RIP=ffffffff8564469f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fc5aad3d6c0 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002000 CR3=000000003f574000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6b7191e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6b7191e6 00007fff6b7191ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5aa012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5aa012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5aa012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5aa012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5aa012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5aa012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f9b088b0e440d9b 53e5c67fffe738d0 060ef78709093d1b f9090ded21ade3a2 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5219f37e8f98f367 5b0d249a669b954d 339b04e7c61a0e8f 87e0900809680038 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5aacfd100 00007fc5aa197460 00007fc5aa197478 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5aa1974b8 00007fc5aa1974b0 00007fc5aa1974a8 00007fc5aa1974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010100 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801ea92440 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff4f72ebf98 CR3=000000000e380000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2911e00523d3e024 6b6388277a834b8f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f3b46e2a4c1394d dee9d897f05938cf ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 097584e82e2236b4 0402e506cf3dad79 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 71c5aea243db472b 665102e283ce5b40 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000780 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0125f46c0125fb3a 5be6000042160000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b1b1e10e0125fb54 0125fc19000001bb ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f4e57e016c384568 973b52137d9d0000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974000028c80000 0125fb6483140000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 89a3ee2963fdb32a 582809f1152b3256 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 306e11c1a86927a3 fe38dcfa4fb5c5f7 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4f65974a8 00007ff4f65974a0 00007ff4f6597498 00007ff4f6597470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4f70fd100 00007ff4f6597460 00007ff4f6597478 00007ff4f65974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff4f65974b8 00007ff4f65974b0 00007ff4f65974a8 00007ff4f65974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000