last executing test programs: 6m29.435421375s ago: executing program 32 (id=175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c00000006207611b06231f0107d9b630a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300840000000000110002000f116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a32421e72f3f8a1a9cd17ccc6d2423e877e6f1a7999a64ac8c0a73e667eda8b5025a5287fd252571500b6a998fa5426f33a7977c1a19177d7154d5f71debefe8ccce85314"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xb4, 0x3, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x4}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7d27}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x20008811) 6m19.358612419s ago: executing program 33 (id=205): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000100)=[{r0, 0x9622}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 5m52.867450443s ago: executing program 34 (id=342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f0000000140)=0x1, 0x6, 0x0, &(0x7f0000000340), 0x0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0xfffffffe, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_LABELS={0x14, 0x7, "e3ccd1c5b8fbe60833617f2f4a63b45b"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x24, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000087b05106bb87e58f899e743a222d1a00000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002800900020073797a32000000001c000000114f002d22ad3efb4f114f0dd630aae8b2307668d3743c57e8"], 0xb0}, 0x1, 0x0, 0x0, 0x4000851}, 0x20040040) 5m28.348702877s ago: executing program 35 (id=467): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000150081054e81f782db44b9040a1d3b020a000000040000a11800020000e9400084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6e94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad9561b4a29c828f6a3aa2fcf72baa7ea67e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a753916647f616b762439deec51", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000140)=0x1400, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40}}, 0x8, 0x4, 0xe, 0x8000, 0xffffffff}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)={r4, 0x3e8b, 0x4, [0x2, 0xfffe, 0xb, 0x5]}, 0x10) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 3m44.256752993s ago: executing program 2 (id=990): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x64, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3m43.710598852s ago: executing program 2 (id=994): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) write$char_usb(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301490212000100004000090484000003e10200"], 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) syz_open_dev$sndpcmc(0x0, 0xffffffff, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3m42.300437911s ago: executing program 36 (id=916): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0000, &(0x7f0000000080)={[{@verity_on}, {@upperdir={'upperdir', 0x3d, './file0/../file0/../file0'}}, {@userxattr}, {@metacopy_on}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa0000, &(0x7f0000000080)={[{@verity_on}, {@upperdir={'upperdir', 0x3d, './file0/../file0/../file0'}}, {@userxattr}, {@metacopy_on}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000240)=ANY=[@ANYRES32=r2]) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x8002) (async) r4 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_COMMAND_Q(r5, 0x2271, &(0x7f0000000040)=0x1) (async) ioctl$SG_SET_COMMAND_Q(r5, 0x2271, &(0x7f0000000040)=0x1) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0xf3) ioctl$TUNSETIFINDEX(r3, 0x400454da, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r0) 3m40.266314988s ago: executing program 2 (id=1011): unshare(0x42000000) memfd_create(0x0, 0x0) (async) memfd_create(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0']) (async) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0']) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000e65155e66f26405b6d5542852b887f80650e1bae40746ec8deda6999117cb9e825b554a4d6b811922578", @ANYRES16=r1, @ANYBLOB="010029bd7000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="18001d801400008006000500b000000005000c0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000002340)=""/4096, &(0x7f0000000340)=0x1000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001a00010000f0ffffffffffff0a00002400000000fc"], 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001a00010000f0ffffffffffff0a00002400000000fc"], 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000080)=0x4, 0x4) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000080)=0x4, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r8, 0xc1007c01, &(0x7f00000000c0)={r9}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r8, 0xc1007c01, &(0x7f00000000c0)={r9}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r10) socket(0x10, 0x408, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r11 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) 3m37.675927836s ago: executing program 2 (id=1020): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new '], 0x2d, 0xfffffffffffffff9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x80000, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x389c01, 0x8) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) renameat2(r0, &(0x7f0000000280)='./file0/../file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000071) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) 3m37.289033472s ago: executing program 2 (id=1021): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x94) 3m36.798480066s ago: executing program 2 (id=1023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x1, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_LABELS={0x2c, 0x16, 0x1, 0x0, [0x81, 0x8, 0x8, 0x1, 0x1, 0xfffffff9, 0x8, 0x7, 0x0, 0x7]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x60}}, 0x4008054) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 3m36.645898297s ago: executing program 37 (id=1023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x1, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_LABELS={0x2c, 0x16, 0x1, 0x0, [0x81, 0x8, 0x8, 0x1, 0x1, 0xfffffff9, 0x8, 0x7, 0x0, 0x7]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x60}}, 0x4008054) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 2m48.727719862s ago: executing program 8 (id=1283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket(0x2, 0x80805, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000380)}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 2m48.602911375s ago: executing program 8 (id=1284): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) close(r0) close(r0) 2m48.510878254s ago: executing program 8 (id=1285): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000000)={0x80}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r1, 0x20, 0x70bd28, 0x25dfdffd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x20040090) 2m48.422750676s ago: executing program 8 (id=1286): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) write$cgroup_subtree(r1, 0x0, 0x9) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x20}) bind$alg(r0, &(0x7f0000000880)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2m48.206839605s ago: executing program 8 (id=1290): r0 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x200) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001d40)={0xa, @raw_data="752ae0b998dc0a7286617792b8846137fd5e789aaacdf16c2c8775cdb14054e3a03edfb1e65a686f175bc0aa07009dca773bf20ff0b4b8b885a2e6213209aa5f69589d00313ac31fd733f990e24a6b11c0bfad8562e8ff27733629751e457143f05e4b06a6d09713601d7a90991ae9e868c3e7ceefdcbae94b35e94b333a855e26d6621bbc847bd5b83bf9ab82d320e7f6cb6022fc19d94c5b8366d919a5ffeb51fedbdb2fe6a71f1d70d8c08277f6c113f5372fc84c75a9067658b71e17e835e03f3949bd66f1e7"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000006c0)='.\x00', 0xaa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r4 = dup3(r2, r3, 0x0) read(r4, 0x0, 0x30) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0xfffffffffffffd2d}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) syz_open_dev$video(&(0x7f0000000300), 0x0, 0x200) (async) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001d40)={0xa, @raw_data="752ae0b998dc0a7286617792b8846137fd5e789aaacdf16c2c8775cdb14054e3a03edfb1e65a686f175bc0aa07009dca773bf20ff0b4b8b885a2e6213209aa5f69589d00313ac31fd733f990e24a6b11c0bfad8562e8ff27733629751e457143f05e4b06a6d09713601d7a90991ae9e868c3e7ceefdcbae94b35e94b333a855e26d6621bbc847bd5b83bf9ab82d320e7f6cb6022fc19d94c5b8366d919a5ffeb51fedbdb2fe6a71f1d70d8c08277f6c113f5372fc84c75a9067658b71e17e835e03f3949bd66f1e7"}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) inotify_init1(0x0) (async) inotify_add_watch(r2, &(0x7f00000006c0)='.\x00', 0xaa) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) dup3(r2, r3, 0x0) (async) read(r4, 0x0, 0x30) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0xfffffffffffffd2d}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) (async) 2m48.015809154s ago: executing program 8 (id=1292): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="5d0033008000e100ffffffffffff0802110000005050505050500000000000000000000064000140000602020202020201016c03"], 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x0) listen(r0, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) socket$l2tp(0x2, 0x2, 0x73) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r5, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="5d0033008000e100ffffffffffff0802110000005050505050500000000000000000000064000140000602020202020201016c03"], 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) listen(r0, 0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) socket$l2tp(0x2, 0x2, 0x73) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) listen(r5, 0x0) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) 2m32.401331174s ago: executing program 38 (id=1292): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="5d0033008000e100ffffffffffff0802110000005050505050500000000000000000000064000140000602020202020201016c03"], 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x0) listen(r0, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) socket$l2tp(0x2, 0x2, 0x73) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r5, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="5d0033008000e100ffffffffffff0802110000005050505050500000000000000000000064000140000602020202020201016c03"], 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) listen(r0, 0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) socket$l2tp(0x2, 0x2, 0x73) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) listen(r5, 0x0) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) 1m43.193429195s ago: executing program 7 (id=1710): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) close_range(r0, r0, 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m42.160211586s ago: executing program 7 (id=1714): io_setup(0x2, &(0x7f0000000040)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x2002, 0x6, 0xfffffffd, 0x46, 0xffffffffffffffff, 0xffffffff}, 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r2, 0x0, 0x17, 0x0, &(0x7f0000000140)) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0xfffffffffffffffe}]) sendto$inet6(r1, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) 1m41.898698869s ago: executing program 7 (id=1715): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a000058090001fbffffff3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) 1m41.500208687s ago: executing program 7 (id=1716): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) (async) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) umount2(&(0x7f0000000240)='./file0/../file0/file0\x00', 0x0) 1m41.409594309s ago: executing program 7 (id=1717): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x7041, 0x0) (async) fanotify_mark(r0, 0x0, 0x800100a, r0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x60004040) (async) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x4000000) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="91cbf234", @ANYRES16=r8, @ANYBLOB="000825bd7000ffdbdf251000000005000f0005000000050010000c0000000500100001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000810) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$getflags(r9, 0x3) (async) creat(&(0x7f0000000340)='./file0\x00', 0xe1) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000305000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000848000002000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="1672993af15919dac5b700ebeb8cb0013d97ad6c901d3a1cf00a99c395290dac777b589bc9b5376583d024fb12588ef5841dc5172eee1fa19f3cda4d75dff3afbea2f6f8e14383335100579c07572fb8ac8a41d342325f84b0ca1d9c70819f26141f1a534fb75edcccdba8d3f21d687cbd664574ee385a0549f5da"], 0x40}}, 0x0) 1m41.284699549s ago: executing program 7 (id=1718): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x541, 0x54) r1 = openat(r0, &(0x7f00000001c0)='./bus\x00', 0x40002, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000fcb000)=0xffffffff, 0x4) vmsplice(r3, &(0x7f0000000840)=[{&(0x7f0000000380)="525c4df93eee8fdd141e9faac8f7837e26c6ed1e1edb25c3e4e289f7bda46ca47d29b8ed8b62a91bd50ff1616119e43f53aa4cc7c6416a4db12e3714cb0b502cbf4be9ad105618871a1e2942a0f07f42aa9c4f5dff0cf470b36ffa89361b748e2a36b2c8c38f25410ea45d4031b4545b2d626539956406696d3693d7491406d55df33fb82be0755cb25c7019797200f85b00a833e10ef2d0a10cb5ea7c273647219b33a90cbb6f223665c26da203a5", 0xaf}, {&(0x7f0000000440)="3760a6a5c8eb204aed75e345f621929709a893328a0349c5dfa7d80552fdb047232e489d0c3e3d5d9b70fff2b704277e05fcd25d6e387e976bea19acd525102cf6782fb9b8ddf125488ef54945723f0a9b95afe14530b37b08ba08ce5629474e91c0bcb8ccb1eee895a05e29525d89bff1118ef22bc024741f708b23f402608f80b2b9164f3a097a85cadff7217195b4e939152e0695f4509928cfd40582f8c664dadbe3f3a0d19328c8f67059bf0410f3a27c47b6ad62cdd4cfa8ca677da55fabf7bd0f335b97ba1f8c626528935a22b25858ad4d69502b8374d06391ec7901ec69a2c4586d67", 0xe7}, {&(0x7f0000000580)="09e2ace81dbdcbb69692e79615e05b7eb538fe2a91071a4d62d2eeffe030fcf99f451869ca6f858bec0a7c5ed3f49b1fee36ab3e57621b6e6752cfd01c5ca136427ce437cc578a9ed02c660db53481d7d56e763c09cda8556de55a52711a9649de5fa585277ee91e8e01092be9c629fc7ca22e06cb239defcb293cdb4cc64ae6d6b5c46d39dbc9de52f0cbb6f6a3750b02382a15ba7dc5b2f4c0228e9d334c44c7bb", 0xa2}, {&(0x7f0000000640)="525b4c993aa2334899a1308c2c2dcb800d9efb978cd793f23f860ffe1d8457df45c0a2c96ac008be703ef1bf79ef8086f12e117ea20a9a8febc49273146fe5a65d4d365a662a096a881b81a647a47b3ea7ea799ac2fbfe97873f4f802090503763affcc0bb4b728c9025c292892556846c1bcbc28b039a060f69919a2ac6286043d0dedc8814fca43e702daef4a045cc2fa81beff374e99467cbe434f40b0931961a464fdcaf822c8d751ba842753f37748b6cadc2fd07196b1ffeff0cb598d7", 0xc0}, {&(0x7f0000000700)="10dd0890b73487384d835d886d5edf90c457ec2a75d73c0d4172c3c09ed5cb3022562c85a02c6d23eb29b275b55d0a117c5f2f0813911474feba3c5193bf7a971063f9a026091e66f09ce02b53b6ca8a05521893589127977ad19f6cd61ba34eddddbc8a0ffbf98ede5447cba670057d5a951caff154109c1a12d778407702bc04a9622f0fae5c4fb56716cf742710064da9a03483f053fa78c7b8393028e0ffa7a157ef4f31af0e2386a388179b3d8adfb45b1c05", 0xb5}, {&(0x7f00000007c0)="33ec482967780f981278386668dade125c02a76c880c3b8dee10e3", 0x1b}, {&(0x7f0000000800)}], 0x7, 0xf) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0xfffffff9, 0x5, 0x0, {0xb, @pix_mp={0x80, 0xb, 0x30314142, 0x8, 0x5, [{0xfffffff7, 0x7}, {0x2, 0x80000001}, {0x7ff, 0xffff}, {0xff, 0x3}, {0x1, 0xea}, {0x9, 0x1}, {0x2, 0x2}, {0x10001, 0x9b23}], 0x1, 0x5, 0x8, 0x2, 0x1}}, 0x4}) close(r1) r4 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x870, 0x870, 0x4}}) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000200)={{&(0x7f00007ae000/0x4000)=nil, 0x4000}, 0x1}) 1m41.12252715s ago: executing program 39 (id=1718): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x541, 0x54) r1 = openat(r0, &(0x7f00000001c0)='./bus\x00', 0x40002, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000fcb000)=0xffffffff, 0x4) vmsplice(r3, &(0x7f0000000840)=[{&(0x7f0000000380)="525c4df93eee8fdd141e9faac8f7837e26c6ed1e1edb25c3e4e289f7bda46ca47d29b8ed8b62a91bd50ff1616119e43f53aa4cc7c6416a4db12e3714cb0b502cbf4be9ad105618871a1e2942a0f07f42aa9c4f5dff0cf470b36ffa89361b748e2a36b2c8c38f25410ea45d4031b4545b2d626539956406696d3693d7491406d55df33fb82be0755cb25c7019797200f85b00a833e10ef2d0a10cb5ea7c273647219b33a90cbb6f223665c26da203a5", 0xaf}, {&(0x7f0000000440)="3760a6a5c8eb204aed75e345f621929709a893328a0349c5dfa7d80552fdb047232e489d0c3e3d5d9b70fff2b704277e05fcd25d6e387e976bea19acd525102cf6782fb9b8ddf125488ef54945723f0a9b95afe14530b37b08ba08ce5629474e91c0bcb8ccb1eee895a05e29525d89bff1118ef22bc024741f708b23f402608f80b2b9164f3a097a85cadff7217195b4e939152e0695f4509928cfd40582f8c664dadbe3f3a0d19328c8f67059bf0410f3a27c47b6ad62cdd4cfa8ca677da55fabf7bd0f335b97ba1f8c626528935a22b25858ad4d69502b8374d06391ec7901ec69a2c4586d67", 0xe7}, {&(0x7f0000000580)="09e2ace81dbdcbb69692e79615e05b7eb538fe2a91071a4d62d2eeffe030fcf99f451869ca6f858bec0a7c5ed3f49b1fee36ab3e57621b6e6752cfd01c5ca136427ce437cc578a9ed02c660db53481d7d56e763c09cda8556de55a52711a9649de5fa585277ee91e8e01092be9c629fc7ca22e06cb239defcb293cdb4cc64ae6d6b5c46d39dbc9de52f0cbb6f6a3750b02382a15ba7dc5b2f4c0228e9d334c44c7bb", 0xa2}, {&(0x7f0000000640)="525b4c993aa2334899a1308c2c2dcb800d9efb978cd793f23f860ffe1d8457df45c0a2c96ac008be703ef1bf79ef8086f12e117ea20a9a8febc49273146fe5a65d4d365a662a096a881b81a647a47b3ea7ea799ac2fbfe97873f4f802090503763affcc0bb4b728c9025c292892556846c1bcbc28b039a060f69919a2ac6286043d0dedc8814fca43e702daef4a045cc2fa81beff374e99467cbe434f40b0931961a464fdcaf822c8d751ba842753f37748b6cadc2fd07196b1ffeff0cb598d7", 0xc0}, {&(0x7f0000000700)="10dd0890b73487384d835d886d5edf90c457ec2a75d73c0d4172c3c09ed5cb3022562c85a02c6d23eb29b275b55d0a117c5f2f0813911474feba3c5193bf7a971063f9a026091e66f09ce02b53b6ca8a05521893589127977ad19f6cd61ba34eddddbc8a0ffbf98ede5447cba670057d5a951caff154109c1a12d778407702bc04a9622f0fae5c4fb56716cf742710064da9a03483f053fa78c7b8393028e0ffa7a157ef4f31af0e2386a388179b3d8adfb45b1c05", 0xb5}, {&(0x7f00000007c0)="33ec482967780f981278386668dade125c02a76c880c3b8dee10e3", 0x1b}, {&(0x7f0000000800)}], 0x7, 0xf) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0xfffffff9, 0x5, 0x0, {0xb, @pix_mp={0x80, 0xb, 0x30314142, 0x8, 0x5, [{0xfffffff7, 0x7}, {0x2, 0x80000001}, {0x7ff, 0xffff}, {0xff, 0x3}, {0x1, 0xea}, {0x9, 0x1}, {0x2, 0x2}, {0x10001, 0x9b23}], 0x1, 0x5, 0x8, 0x2, 0x1}}, 0x4}) close(r1) r4 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x870, 0x870, 0x4}}) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000200)={{&(0x7f00007ae000/0x4000)=nil, 0x4000}, 0x1}) 1m19.324350599s ago: executing program 1 (id=1719): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000002100df4d0000000000000000020000000000000000000000140411007663616e300000000000000000002000"], 0x30}}, 0x0) 1m18.991304337s ago: executing program 1 (id=1789): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfffffe14}, {&(0x7f0000000180)="68cabf2dfb58fc0400000000e10000490d010088a8aaf888be9802dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc00000000000000000000000077ec", 0x52}], 0x1}, 0x4000) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, &(0x7f0000000000)) 1m18.408674828s ago: executing program 1 (id=1793): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x10005) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e22, @multicast1}, 0x149, 0x0, 0x0, 0x0, 0x8, 0x0, 0x21e, 0x1ff, 0x2}) (async) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r3, &(0x7f0000001d40)=[{{&(0x7f0000000280)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)=""/125, 0x7d}, {&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f0000000600)=""/226, 0xe2}, {&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000d40)=""/4096, 0x1000}], 0x5}, 0x49}, {{&(0x7f0000000780)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000000800)=""/119, 0x77}], 0x1, &(0x7f0000000380)=""/58, 0x3a}, 0x3}, {{&(0x7f0000000880)=@sco={0x1f, @none}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/166, 0xa6}], 0x1, &(0x7f0000000a00)=""/217, 0xd9}, 0x9}, {{&(0x7f0000000b00)=@xdp, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b80)=""/24, 0x18}], 0x1, &(0x7f0000000c00)=""/86, 0x56}, 0x2}], 0x4, 0x2, &(0x7f0000000c80)={0x0, 0x989680}) (async) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) recvmmsg(r4, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x40, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x880) 1m15.782755758s ago: executing program 1 (id=1811): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000280)={0x8}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0x0, 0x6, 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0xf08, 0x0, 0x0, {}, [@NFTA_RULE_USERDATA={0x15, 0x7, 0x1, 0x0, "f33030afe42d59ab0e57a15c8906232307"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x4000) read(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0xc696e81d4f03bf8e, 0x0, 0x8}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfd9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 1m15.280688355s ago: executing program 1 (id=1813): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4209f216a10278d4b5650b8898c478321945", @ANYRES16=r3, @ANYBLOB="05a3fdffffff000000000d000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004804}, 0x20000000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000240)=0x5, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000080)=0x10000, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffff"], 0x6c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) read(r4, &(0x7f0000000000)=""/54, 0x36) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d", 0xc1}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f00000002c0)) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa210000e98e0008004a0000300000000000119078000000000000000044140b81ac1414bb000003ffe00000020000000e00004e200008cd78"], 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000100)={{0x2, @empty, 0x4e22, 0x0, 'ovf\x00', 0x4, 0x700, 0xe}, {@broadcast, 0x4e20, 0x0, 0x8001, 0x2, 0x2}}, 0x44) sendfile(r0, r0, 0x0, 0x30) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x103400, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0xfffffe40, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) 1m14.282682625s ago: executing program 1 (id=1820): r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@private0}, &(0x7f0000000180)=0x14) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x40003, @local, 0xffffffff}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180808229500"/17], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffb1, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x294002, 0x104, 0x8}, 0x18) getdents64(r2, &(0x7f00000002c0)=""/7, 0x7) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000000000000300000d0000000000000000000000000b000000000000000600000003000000000000000000000d00000000000000000100001304"], 0x0, 0x6a, 0x0, 0x1}, 0x28) 59.142681718s ago: executing program 40 (id=1820): r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@private0}, &(0x7f0000000180)=0x14) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x40003, @local, 0xffffffff}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180808229500"/17], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffb1, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x294002, 0x104, 0x8}, 0x18) getdents64(r2, &(0x7f00000002c0)=""/7, 0x7) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000000000000300000d0000000000000000000000000b000000000000000600000003000000000000000000000d00000000000000000100001304"], 0x0, 0x6a, 0x0, 0x1}, 0x28) 33.855031987s ago: executing program 9 (id=2216): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x2b}, {@in=@loopback, 0x0, 0x32}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x80, "b38e4d000000000000004600000000000000009fd797d6e037989f"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00010004002100000004000500000000001000040000000000207e2dd0970fffba268891b341f061e246fc9c5f54d0240d91ae9f24ebe2e0f00e360b625753d485a7d276b7b32aba44fed67ea209ff00d68b10eab4aee8a6a85b35aedfff362df8e5bb82a11bfdfb8e79224b09ca588c23e9c30a51ab413c0b480375178e8f7d38ea9118285cc1a7f28371e7b3aef5b27f76494c21"], 0x24, 0x2) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) 33.843573329s ago: executing program 9 (id=2217): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x84002, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0x12, &(0x7f0000000080)="aca7786106cfedb13f6b69ef1acead5bbf7c"}) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000000c0)={0x12, &(0x7f0000000080)="aca7786106cfedb13f6b69ef1acead5bbf7c"}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) syz_pidfd_open(r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x81, 0x0) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) (async) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) read$FUSE(r4, &(0x7f00000057c0)={0x2020}, 0x2020) fcntl$lock(r1, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x58, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x44, 0x1, [@m_ctinfo={0x40, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x58}}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000001c0)={0x2000, r0}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) (async) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendto$inet6(r8, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r8, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x5, 0x0) (async) r9 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) close(r6) fanotify_mark(r1, 0x20, 0x12, r1, &(0x7f0000000200)='./file0\x00') r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r10, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r10, &(0x7f0000000000), 0xd) (async) write$binfmt_misc(r10, &(0x7f0000000000), 0xd) 32.933768544s ago: executing program 9 (id=2235): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'das6402\x00', [0x6, 0x42d, 0x9, 0x40, 0x1, 0x7, 0x9, 0x3, 0xf, 0x2, 0x4c9, 0xf3b9, 0x40, 0x4, 0x8, 0x7, 0x9, 0x6, 0x2, 0x7, 0xfffffffe, 0x2, 0x2, 0x2, 0x37, 0xa, 0xc, 0x0, 0x7, 0x5, 0x5, 0xff]}) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:11 0', 0x1b) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r2, &(0x7f00000001c0)={0x8, 0x35, 0x1, 0x1}, 0x8) r3 = dup(r0) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000200)={0x0, 0x8184112c55e9dc89, 0xf7, 0x80000000, @vifc_lcl_addr=@broadcast, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) io_uring_enter(r1, 0x7982, 0xa01f, 0x0, &(0x7f0000000240)={[0x7]}, 0x8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000280)={0x7, r0, 0x24, {0xfffffffffffffff6, 0x3c3}, 0x8}, 0x1) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f00000002c0)={0x0, 0x0, {0x9, 0x9a6, 0x80000001, 0x7}}) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000300)={0x6, 0x1}) setxattr$security_capability(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001340), &(0x7f0000001380)=@v2={0x2000000, [{0x10001, 0x8}, {0x8, 0x8}]}, 0x14, 0x3) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000013c0)=0x0) ptrace(0x4207, r4) statfs(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002400)=""/54) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000003480)={{{@in6=@private0, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000003580)=0xe8) lsetxattr$security_capability(&(0x7f0000002440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003440), &(0x7f00000035c0)=@v3={0x3000000, [{0xfb9f, 0xfffffffc}, {0x5, 0x800}], r5}, 0x18, 0x2) pipe2$9p(&(0x7f0000003600), 0x84800) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000003640), 0x4000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f0000003680)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpgrp(r4) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f00000036c0)) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) sendmsg$AUDIT_USER(r1, &(0x7f0000003840)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003800)={&(0x7f0000003740)={0xa0, 0x3ed, 0x1, 0x70bd2c, 0x25dfdbfd, "4430cf90c0158127379b2790808d5667af4d8b45331842ed026af2c575774b1bf9cd6e22fe9feffbf513de11d075e7d8fd0408df1c0a58d1bc3308246eec841e0867a6e2f4ece2e185f1f9e9ec8617f58b2d3c9a341eaf603f9155cc55326c2797852350ef55154a42076b327c9005c3b39bfd0436f25dafc0d30dd9b501e268b67e52b1059de32db0466c49d0", ["", ""]}, 0xa0}}, 0x20000034) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000003880)={@none, 0x4}) 32.851494336s ago: executing program 9 (id=2236): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000209c00000000000062000000000000009504000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) 32.851184074s ago: executing program 9 (id=2237): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0xe}]}}, &(0x7f0000001100)=""/43, 0x26, 0x2b, 0x1, 0x3}, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000000), 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88880, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000200)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r2, 0x0, 0x0, 0x6, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000640)={'sit0\x00', r4, 0x80, 0x8000, 0x948f, 0xb1f, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0xe31, 0xd2, 0x29, 0x0, @broadcast, @multicast2}}}}) socket$nl_generic(0x10, 0x3, 0x10) 32.314288018s ago: executing program 9 (id=2241): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000000)={&(0x7f0000002000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x1}, 0x1) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007910280000000046001e5000000000000095000000680400e0c5c1d433dbfa808002891d4a52eb468768a52db04e08c640178628559f951359017f2a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x123}, 0x48) 32.267053521s ago: executing program 41 (id=2241): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000000)={&(0x7f0000002000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x1}, 0x1) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007910280000000046001e5000000000000095000000680400e0c5c1d433dbfa808002891d4a52eb468768a52db04e08c640178628559f951359017f2a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x123}, 0x48) 14.21922193s ago: executing program 5 (id=2501): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @typed={0x8, 0xda, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x4) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 14.154986733s ago: executing program 5 (id=2502): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="360a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x66}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1000, 0x1000, &(0x7f0000000100)=""/4096, 0x40f00, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001140)=[{0x4, 0x2, 0x4, 0xb}], 0x10, 0x3e}, 0x94) 14.154777769s ago: executing program 5 (id=2503): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000c, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000001000)={0x0, "3efe72f3bf818ea09f4cf95d73c3ce3e8de711a7f3de0fc1cb8a24626d1d44910f2236bf9bae103e22391ea3cd172c2ac38179be234f63df3e6f5019535184ef5c39d04cc54c7bdd661cc2ff0d793bbc8433dbbb5ced195489d9389a1b55ef1389ec4f5bdceca542cc3fa739f22d94897c6b9abd311357d25e8ef7df7c43556d8f1107b003a9f87ddfc2dd335207b494877e48ec793e0995c184a0b644a16b065b3f6a987cc6bd06b7a618126a30b9e8aaa05814ca622407b092f3636481d7ab77487609081fb930df46404c837ff3e85d0cb475baf73af4f0702d828e5da37668e8d1396493ae1f100aa9c1fad6965352f36c8c09ad29fc695a266e7b0fd95de6688a99f6dea33f7432f2079339a45bb16c89d66fa2d81feebd0c42e53d9d5abfbacc40912bece541ebb43fc5e30e5724a394a841c9bfa09f08d9cd01d614546e650605921d4c55ad74479948dd4be6086d8f5a0f800461eb7633014de028d6492792cb27ad847037ad678f79e83232f138ab2f0ed350b9ab476d9c9ee41b5c4a96b28cc572f454c4c232aab45f1bc6b0c8caa19fc8c98e598c7891c9fb095ec923afd10c6306f0834d9da98892e9fd24186f446c1f87fced883ab43bcfbe54fc37d70459c049d87030494ebad22dc68cfaf694438ebc70e84a28f63c3b8905effdc87d477c1ddbab9ff5beed93a4d17819344148be913f949635156caf1e4b"}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r1], &(0x7f0000000280)=[0x8a, 0xceea], 0x1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usbip_server_init(0x3) close_range(r3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfa, &(0x7f0000000100)={@local, @broadcast, @val={@val={0x88a8, 0x5, 0x1, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0xbc, 0x6, 0x1, @private0, @local, {[@srh={0xbb, 0x12, 0x4, 0x9, 0xd6, 0x68, 0x755, [@loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @private0, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}, @mcast1]}], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x10, 0xf989, "cc11bc4d140c64aae8d4491b"}]}}}}}}}}, 0x0) 12.73252278s ago: executing program 5 (id=2508): pipe2$watch_queue(0x0, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xdb) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095a24ee7e43f4ced84f873cca9bbabf14637729dff0cc06697328a3c50baa0a898ce039f9405b7221d997f1cc015bdd81487abf28a1faa485e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000600)={0x1, 0x0, &(0x7f0000000380)=""/241, &(0x7f0000000480)=""/177, &(0x7f0000000540)=""/127, 0x8000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0xff, 0x3}}, 0x18) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x202, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r5, 0x0, {0x2, 0xf0, 0x6}, 0x2}, 0x18, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x81) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) move_mount(r9, &(0x7f00000002c0)='./file0\x00', r7, &(0x7f0000000300)='./file0\x00', 0x221) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x18) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x2c80, 0x0) write(r10, &(0x7f0000000080)="da2b5e94da5fc7f9156100b952e53467f9d3772527c52d95fc755c5ab095c97009ab095729bc43242808200103d1e463ffe81608d0a41d0ed9f1999eb47df0b23af33b3f6a8cb13c9a5e774ec63c1f75c2be40d4a774e3ae5ca1d80d045f3a2879079db25e00adcf6cd58a7dbc3ce830d654475d4f23f45a37f8dbffd34416b5", 0x80) 10.593825688s ago: executing program 5 (id=2545): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x0) openat$pmem0(0xffffffffffffff9c, 0x0, 0x80d01, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x4, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000000a00)={@local, @random="4a26292432ca", @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "86605a", 0xd4b, 0x11, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, {[], {0x4e23, 0x4e24, 0xd4b, 0x0, @wg=@data={0x4, 0x6, 0xd6, "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"}}}}}}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000280)=0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82981, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xe) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x2, 0x1, 0x2000, 0x1000, &(0x7f0000cd0000/0x1000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fstatfs(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r9, 0x0, 0x9}, 0x18) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r9, 0x0, 0x5}, 0x18) 10.153403869s ago: executing program 5 (id=2548): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x30, 0x26, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff3, 0x5}, {0xa, 0xa}, {0xa, 0x6}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8100}, 0x20044810) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff6, 0xc03, 0x1ff, 0x5, 0x7, 0x6, 0x0, 0x4, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r7, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10.067232101s ago: executing program 42 (id=2548): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @rand_addr, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x30, 0x26, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff3, 0x5}, {0xa, 0xa}, {0xa, 0x6}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8100}, 0x20044810) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff6, 0xc03, 0x1ff, 0x5, 0x7, 0x6, 0x0, 0x4, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r7, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.223957197s ago: executing program 4 (id=2616): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0x4000000}, 0x0) ioperm(0x0, 0x2, 0x2) time(0xfffffffffffffffc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) 3.162593071s ago: executing program 4 (id=2618): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000080)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xcd, &(0x7f0000000500)=""/205, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES8=r1], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x20) 3.162268223s ago: executing program 4 (id=2619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/ipc\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000019080), 0x401, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0xb, 0x1, 0x0, "adbdeec74e9e4aea00000000000000a902552f08cefca462dda36c7451f8e500"}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005500e5012abd7000ffffffff07000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r8, 0x1, 0x0, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1fd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 2.353100592s ago: executing program 4 (id=2635): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"2370491d", 0x8, 0x5, 0x2, 0x0, 0xdf, "001a0000008400", '\x00', '\x00', '\a\x00\x00 ', ["0600", "3549fff7ff0000001e0200", "006a9cc1f000", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x7, 0x8, 0x1, 0xc, 0x4, 0x1000, "ba3a16ee26fd291cd89590593dd30a26", 0x8c, 0x0, 0x7, 0x8, 0x2, 0x0, 0x6}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000001e40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9d, 0x40, 0xd, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x7, 0x2, 0xd5}}}}}]}}]}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_usb_disconnect(r1) 1.642523836s ago: executing program 3 (id=2646): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd4}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}]}, @TIPC_NLA_LINK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x4) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001540)={&(0x7f0000000400)={0x1140, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x40}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x22b}, @NL80211_ATTR_VENDOR_DATA={0xff, 0xc5, "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"}]}, 0x1140}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001600)={&(0x7f00000015c0)='rxrpc_skb\x00', r0, 0x0, 0x8}, 0x18) r3 = accept4$unix(r0, &(0x7f0000001640), &(0x7f00000016c0)=0x6e, 0x80000) bind$unix(r3, &(0x7f0000001700)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000017c0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x3c, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c090) listen(r0, 0x2) sendmsg$802154_dgram(r0, &(0x7f0000001a00)={&(0x7f00000018c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000019c0)={&(0x7f0000001900)="0785784560262c4aa077d2f09a7ed557ded2771f0a278dfbdaad1a3594afb3e5cec8a520ff5e476c91b09c95e3453b850e7e7dcae4c7f4b7eb03dcb2ec4da7d9b3b36e2c2f5e04a8ffc6f0d7f24b762be9ffea5aefcd6825c00f47ef9195af172923e5d4c6be9d0587864c176cab9eb5c32ce18b87c531579606339e9011d6f8d2edcdf649841c6c47b0473044b57f22797588982e331ec4b1", 0x99}, 0x1, 0x0, 0x0, 0xc051}, 0x10) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000001a40)={0x0, 0x2, 0x6}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001a80)={0x0, 0x6, 0x20}, &(0x7f0000001ac0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000001b00)={r5, 0x100}, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001b80)=@o_path={&(0x7f0000001b40)='./file0\x00', r0, 0x4000, r0}, 0x18) recvmsg(r3, &(0x7f0000002080)={&(0x7f0000001bc0)=@hci, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001c40)=""/201, 0xc9}, {&(0x7f0000001d40)=""/33, 0x21}, {&(0x7f0000001d80)=""/220, 0xdc}, {&(0x7f0000001e80)=""/141, 0x8d}], 0x4, &(0x7f0000001f80)=""/198, 0xc6}, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000020c0)={0x9}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002100)) ioctl$UI_DEV_DESTROY(r0, 0x5502) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000002140)={r5, 0x1, 0x30, 0xab1d, 0x6}, &(0x7f0000002180)=0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000021c0), r0) r7 = socket$packet(0x11, 0x1, 0x300) getsockname$packet(r7, &(0x7f0000002200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002240)=0x14) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000002280)) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002480)={&(0x7f0000002300)={0x164, r2, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0xa1, 0x81}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x110, 0x2a, [@supported_rates={0x1, 0x8, [{0x4}, {0x48, 0x1}, {0x4}, {0x60, 0x1}, {0x5}, {0x6c, 0x1}, {0x12}, {0x9}]}, @random_vendor={0xdd, 0xe9, "2dfe610d42596627bb9044904984df009870b13e99dff52f68bb077011d86e50c40587815f6d148db8479feffad9949a50d8658f484bf0481fc71793fead2b41993033a809dd2a598c06c615e84f5ed6b546570505259e92c3b7dd33ffd10ac7a4468635547cc89dcf1dc216a1a2357573e4d66cf10f7c4e0ffc2302b2d7ed85ff0e8893c54951799cd170e132bf2dd923f4986ae8e138b88f7a76193c2b7556fe4b1f530eb8a736998f0d0485fcaa6cd306b084891268233a0d04abfd652fb9cebb7ce4f7fc4d6918b1c2688e046528283ab3212bd743521643cc7c5a72c17ba5b7c574bd6f7fc8f9"}, @rann={0x7e, 0x15, {{0x1, 0x2}, 0x5, 0xd0, @device_a, 0xff, 0x9, 0x5}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x164}, 0x1, 0x0, 0x0, 0x8040084}, 0x20000000) 1.57465321s ago: executing program 3 (id=2647): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r3 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) epoll_create1(0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x7, 0x0, 0x89, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)}, 0x40) close_range(r3, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r6) read$char_usb(r7, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r1, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="4800308028000180ccaffdf8000000000002000000000014008400403a051b5baee2004ef2b6d713459a7a05000200fe00"/65], 0x64}}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) pipe(&(0x7f00000001c0)) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000002000/0x2000)=nil) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000000)={0x2ff, [0x5, 0xffffffff], 0x6}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) 1.402767043s ago: executing program 6 (id=2651): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/113, 0x71}, {0x0}], 0x2, 0x3, 0xd) (async) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000004c0)) (async) sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0xfb0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x800, 0x1, 0x4, 0x100000, 0x5, {0x0, 0xea60}, {0x3, 0xc, 0xa, 0x3, 0x6, 0x7, 'sgl?'}, 0x7f, 0x1, {0x0}, 0x4}) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000500)={0x48}) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0xd, r3, 0x0, 0x7, 0x0, &(0x7f0000000540)}) (async) syz_open_dev$vim2m(&(0x7f0000000480), 0xe0ec, 0x2) 1.312424341s ago: executing program 6 (id=2652): socket$kcm(0x2, 0x3, 0x84) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="480000001400010027bd7000fddbdf250278"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x60388}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = fsmount(r3, 0xada8c6f10cf03244, 0x35) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000002080)) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r8, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r9, r8, 0x4, r8}, 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206500f310b000000000000000000000c00078005001500010000000500010006000000050005000a00000005000400000000000900020073797a310000000014000300686173683a697001800000742c697000"], 0x58}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r14 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r14, &(0x7f0000000080)={0x1d, r13}, 0x18) sendmsg$can_j1939(r14, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xff}, 0xff}, 0x18, &(0x7f0000000540)={0x0}}, 0x400ee) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid_for_children\x00') 1.054242633s ago: executing program 0 (id=2657): r0 = syz_io_uring_complete(0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) (async) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x1f6}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 32) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) (rerun: 32) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x8000}, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010800000002000000000a0000000c000080080009"], 0x20}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) epoll_create1(0x80000) (async, rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x140, r8, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x110, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_b, @random="c16bb28bed9f", {0x7, 0x81}}, 0x4000, 0x4c, @random=0x800, @val, @void, [{0xdd, 0x8e, "0c363a4583d49e1a88ae6047d548eb2dd9ce9ae642b80c1451f7552a6d00415f71ad3ca484d46a840b6bcd9f58ce3ba278ae0899063fab569f9872ad4ae3645e76ae940781e46e1a878675b09e608d7fefc06b322626256d2d0d51e1d103ec1547204acba168df1848304c049fd9823ad7090a683e87a16a6bc41c0355f014183d55d3792244f2aeed8564c619d2"}, {0xdd, 0x1c, "9af550318c104392cd2feb57381f9b110beddd2db47b26d7c5a93fb4"}, {0xdd, 0x3c, "6e10222904bad0551adbe801468766f44fcec37008b270fc327f340b13f3163996ed47bbf6cbaa12c61990bb84def3848b37562ad9f6df31335bee06"}]}}]}, 0x140}}, 0x0) (async) r10 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x8, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 944.781157ms ago: executing program 0 (id=2658): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x420e, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x87, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000080)={0x5, 0x5, 0xfffffffc, 0x27, 0x6, 0x81, 0x6}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) (async) read$FUSE(r0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) ptrace(0x420e, r1) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x87, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) (async) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000080)={0x5, 0x5, 0xfffffffc, 0x27, 0x6, 0x81, 0x6}) (async) 944.576534ms ago: executing program 0 (id=2659): r0 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)='hfsplus\x00', 0x204001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x1}) unshare(0x2a020400) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 854.681759ms ago: executing program 0 (id=2660): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="0300f19801000000e000008586dd", 0xe, 0x20044080, &(0x7f0000000200)={0x11, 0x8, r1, 0x1, 0xfe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ee4000/0x1000)=nil, 0x1000) munmap(&(0x7f000034f000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) 784.758019ms ago: executing program 0 (id=2661): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f00000004c0)={{0x6, @rose, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000900)=""/4096, &(0x7f0000000000)=0x1000) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 784.499253ms ago: executing program 0 (id=2662): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000010) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 622.747999ms ago: executing program 4 (id=2663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x24, 0x0, 0x95, 0x8002, 0x3, 0x3e, 0x101, 0x294, 0xfffffffffffffc18, 0x24d, 0xfffffffa, 0x0, 0x38, 0x1, 0xfffd, 0x7f, 0x808}, [{0x3, 0x4, 0x7, 0xa, 0x101, 0x6, 0x7, 0xffffffffffffff7f}], "db55a3354ca6d746db00abec7dc7bab5a753e28de04049bfa713bf4cef51bb53d0ad"}, 0x9a) close(r1) read$msr(r1, &(0x7f00000001c0)=""/228, 0xe4) 622.401585ms ago: executing program 4 (id=2664): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) syz_usb_connect$uac1(0x3, 0xb1, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500561308005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010000305000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r7], 0x40}}, 0x44) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x81, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x500c}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) 514.080007ms ago: executing program 6 (id=2665): alarm(0x709abc910000) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0) ppoll(&(0x7f0000000a00)=[{r0, 0x8010}], 0x1, &(0x7f0000000a80)={0x0, 0x3938700}, 0x0, 0x0) alarm(0x0) alarm(0x10001) 424.525244ms ago: executing program 6 (id=2666): r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r1 = shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) (async) shmdt(r1) (async) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x6000) 423.36512ms ago: executing program 6 (id=2667): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xc, 0x20, 0x1ff, 0x1ff}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r1, 0x80000001, 0x89}, 0xc) (async) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x202, 0x0) dup3(0xffffffffffffffff, r2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000700)=@sack_info={0x0, 0x2, 0x6}, &(0x7f0000000740)=0xc) (async, rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x3) (async, rerun: 32) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x0, 0x1d0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async, rerun: 32) r5 = eventfd(0x0) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) (rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000c40)=""/247, &(0x7f0000000b40)=""/102, &(0x7f0000000bc0)=""/95}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22ffe6) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x30080, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) (async) close(r7) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 294.842688ms ago: executing program 6 (id=2668): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x201) r1 = getpgid(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000000104010800000000000000000a00000808000440000000060500010004000000080005400000800008000540000000030500010001"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$rose(r4, &(0x7f0000000240)="e7e1d4bc", 0x4, 0x80, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0xb, 0x3, 0x7, 0x5, 0x9, 0x101}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f0000000380)=[{0x80, 0x7, 0x0, 0x2}, {0x16}]}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0xff, 0x0, 0x0, 0x3}, 0x20) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) capget(&(0x7f0000000080)={0x39900612, r1}, &(0x7f00000000c0)={0xffff, 0x9, 0x8, 0x7, 0x0, 0xfffffffa}) 124.548826ms ago: executing program 3 (id=2669): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x104, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x5) (async) tkill(r0, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x40000, 0x0, 'queue1\x00', 0x47}) syz_emit_ethernet(0x16, &(0x7f0000001100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="e955f5ea6ade", @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, '/', "a74338", 0x88e7}}}}}, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) (rerun: 64) 1.451947ms ago: executing program 3 (id=2670): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000004844fd43000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.260825ms ago: executing program 3 (id=2671): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c8000a02060001000af102"], 0xf) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030400000000fbdbdf2500000300", @ANYRES32=0x0, @ANYBLOB="0012800b00010067656e65766500000c00028008000b40000003ff1dcb22946f3d43ef0891d5af1c39228c9a02ed95f4dd8c544ed1612a736d7c4439137d8d65bbd26db0cce0e3df08898ad5a0872ddd832148d8b114ddf15003a96db8963f5c4893638cdbbc46e5c8a404a6af3c03c7f34a41427c8854b1f76d34e633695af908249014a10214edaedfd655a84e21f4d5d64c16cfe6832f8e3ee3f64f118f9e2617644d16750d9b54e1e6cfa05f676430"], 0x3c}}, 0x0) (async) r1 = dup(r0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000890}, 0x4004011) 0s ago: executing program 3 (id=2672): r0 = syz_open_pts(0xffffffffffffffff, 0x2000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) r1 = io_uring_setup(0x3948, &(0x7f0000000040)={0x0, 0x5041, 0x100, 0x1, 0x192}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000002480)={0x7, 0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000000c0)=""/109, 0x6d}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/212, 0xd4}, {&(0x7f0000001240)=""/2, 0x2}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)}, {&(0x7f00000022c0)=""/255, 0xff}], &(0x7f0000002440)=[0x4, 0xfffffffffffffffd, 0x6, 0x0]}, 0x20) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000002500)={0x9, &(0x7f00000024c0)=[{0x4, 0x11a9}, {0x8, 0x3}, {0x3, 0xffff}, {0x100, 0x3}, {0x1, 0xf}, {0x1ff, 0x9}, {0x8, 0x6}, {0x2, 0x1000}, {0x8, 0x5}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002580), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000002900)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000028c0)={&(0x7f00000025c0)={0x2d4, r3, 0x949692785f8a13b8, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff35b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20c1598f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ea}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x412}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd3fd2a9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2c2ad124}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x101}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x24000084}, 0x4040) sendmsg$nl_netfilter(r0, &(0x7f0000002b40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x18000004}, 0xc, &(0x7f0000002b00)={&(0x7f0000002980)={0x16c, 0x9, 0x9, 0x201, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x2}, [@generic="0df356b58e277dca87bf016e3183807d5083da8f5f19a011a392c6c8fad71b275ea8c74cec993b", @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@mcast2}, @generic="00e23abf0ffb1fdfb778436a47f11151e81b1f9a5b4e66674e7c66da40864f017bb13d940ea85d1990a6abbf97d6e254326b90096054a6a732a393828c1803915b2523527f847138444ce4d1024f654faef5cb2e8818cd5b98f0248fd25f2c1d32d283ae4469b1557cb2204d", @typed={0x4, 0xf3}, @generic="73f4f568e364475529cff5f03699f6c27cd307fb4cf21c82c828b746ff66ae12a396c11305586165f2d5e2bdedb1e8c415a567dd694597b4ea6e76237ec1bccceb55f6dfa6e7d4a0b7aef3157b875dd7741e3347b5d4c3ad0efab45587d58be258c5c2a9b1a4f4fa04bebdc20afbee1bc293ae2c1a52b2e440bd4f126c4550ade09adc4ac2fd57c6736f899939d23c6d74bb2a4bbee5f7b1e66bff410ef71d75e79c99e14385b4a7027b46f7eb"]}, 0x16c}, 0x1, 0x0, 0x0, 0x4}, 0x40004) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000002c40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x610400}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000002e40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x108, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x101}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c084) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002e80)={0xffffffffffffffff}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000002ec0)={@multicast2, @loopback, 0x0}, &(0x7f0000002f00)=0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r7, &(0x7f0000003040)={&(0x7f0000002f40), 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x2c, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x1) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000003080), 0x480, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000033c0)={0x10, 0x6, &(0x7f0000003100)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @generic={0x95, 0x3, 0x9, 0x1, 0x9}, @call={0x85, 0x0, 0x0, 0x1d}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000003140)='GPL\x00', 0x7, 0x85, &(0x7f0000003180)=""/133, 0x41100, 0x2, '\x00', r6, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000003240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000003280)={0x5, 0x10, 0x5, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, &(0x7f00000032c0)=[r4, 0x1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000003300)=[{0x5, 0x3, 0x7, 0x7}, {0x4, 0x2, 0xe, 0xa}, {0x2, 0x3, 0xa, 0x4}, {0x0, 0x2, 0xa, 0xa}, {0x2, 0x2, 0x8, 0xa}, {0x1, 0x4, 0xd, 0x3}, {0x5, 0x5, 0xe, 0x1}, {0x1, 0x4, 0x3, 0x1}, {0x4, 0x5, 0x0, 0x1}, {0x2, 0x2, 0x10, 0xa}], 0x10, 0xb75}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000034c0)={{r9}, &(0x7f00000030c0), &(0x7f0000003480)=r10}, 0x20) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000003900)={0x1, 0x0, 0x1b, 0xa, 0x3c, &(0x7f0000003500)}) readv(r0, &(0x7f0000003a00)=[{&(0x7f0000003940)=""/190, 0xbe}], 0x1) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003a40)={0xffffffffffffffff, 0x1, 0x8, 0x9, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x10) fcntl$setflags(r0, 0x2, 0x0) recvmsg(r4, &(0x7f00000040c0)={&(0x7f0000003a80)=@nfc, 0x80, &(0x7f0000004000)=[{&(0x7f0000003b00)=""/247, 0xf7}, {&(0x7f0000003c00)=""/104, 0x68}, {&(0x7f0000003c80)=""/167, 0xa7}, {&(0x7f0000003d40)=""/25, 0x19}, {&(0x7f0000003d80)=""/204, 0xcc}, {&(0x7f0000003e80)=""/74, 0x4a}, {&(0x7f0000003f00)=""/133, 0x85}, {&(0x7f0000003fc0)=""/2, 0x2}], 0x8, &(0x7f0000004080)=""/33, 0x21}, 0x0) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000004100)) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000004180), r7) sendmsg$IEEE802154_LLSEC_ADD_KEY(r7, &(0x7f0000004280)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004240)={&(0x7f00000041c0)={0x68, r11, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "a3b3a34a1237cbb072873e4fcf39714031faf1c55ee646087efab46b1d4394ae"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f00000042c0)) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000004340)={0x1, &(0x7f0000004300)=[{0x5, 0x1}]}) 0s ago: executing program 0 (id=2673): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x80800) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000180)=""/110, &(0x7f0000000100)=0x6e) (async) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r2, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xdb) kernel console output (not intermixed with test programs): : set [1, 0] type 2 family 0 port 6081 - 0 [ 478.200779][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.203954][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.242819][T14047] netlink: 'syz.9.1934': attribute type 3 has an invalid length. [ 478.259245][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.263003][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.305983][T12786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.310509][T12786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.337883][T14047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14047 comm=syz.9.1934 [ 478.358718][ T63] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 478.457249][ T63] Bluetooth: hci3: command tx timeout [ 478.895685][T14091] netlink: 'syz.9.1938': attribute type 10 has an invalid length. [ 478.904492][T14091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.909104][T14091] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 478.974081][T14099] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1940'. [ 479.029134][T13186] usb 5-1: USB disconnect, device number 11 [ 479.100962][T13964] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 479.115999][T13964] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 479.119738][T14110] binder: 14108:14110 ioctl 8933 200000000040 returned -22 [ 479.158122][T13964] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 479.182647][T13964] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 479.182672][T14116] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.272952][T13964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.291036][T13964] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.315911][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.318795][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.360337][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.363395][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.586124][T13964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.605934][T14159] binder: 14157:14159 ioctl c0306201 200000000640 returned -22 [ 479.759000][T13964] veth0_vlan: entered promiscuous mode [ 479.763958][T13964] veth1_vlan: entered promiscuous mode [ 479.785296][T13964] veth0_macvtap: entered promiscuous mode [ 479.790607][T13964] veth1_macvtap: entered promiscuous mode [ 479.802905][T13964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.810816][T13964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.817039][ T63] Bluetooth: hci1: command tx timeout [ 479.824030][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.830274][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.833704][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.837617][ T34] usb 14-1: new high-speed USB device number 32 using dummy_hcd [ 479.839103][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.898558][ T1220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.900634][T14188] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 479.901622][ T1220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.922039][ T1220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.925062][ T1220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.960752][T14192] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 479.999786][ T34] usb 14-1: Using ep0 maxpacket: 16 [ 480.002858][ T34] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 480.006056][ T34] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 480.010044][ T34] usb 14-1: config 0 interface 0 has no altsetting 0 [ 480.017104][ T34] usb 14-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 480.020231][ T34] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.022811][ T34] usb 14-1: Product: syz [ 480.028566][ T34] usb 14-1: Manufacturer: syz [ 480.030093][ T34] usb 14-1: SerialNumber: syz [ 480.037350][ T34] usb 14-1: config 0 descriptor?? [ 480.054743][T14206] input: syz1 as /devices/virtual/input/input58 [ 480.086541][T14210] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 480.090619][ T40] audit: type=1400 audit(1758106247.443:14572): avc: denied { append } for pid=14209 comm="syz.0.1960" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 480.100602][ T40] audit: type=1400 audit(1758106247.443:14573): avc: denied { execute } for pid=14209 comm="syz.0.1960" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 480.185040][ T40] audit: type=1400 audit(1758106247.533:14574): avc: denied { unmount } for pid=11764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 480.244422][ T34] input: syz syz as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input59 [ 480.322097][T14233] fuse: Bad value for 'rootmode' [ 480.370482][T14236] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 480.372783][T14236] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 480.376620][T14236] netlink: 'syz.4.1967': attribute type 10 has an invalid length. [ 480.442366][T14161] FAULT_INJECTION: forcing a failure. [ 480.442366][T14161] name failslab, interval 1, probability 0, space 0, times 0 [ 480.446413][T14161] CPU: 3 UID: 0 PID: 14161 Comm: syz.9.1950 Not tainted syzkaller #0 PREEMPT(full) [ 480.446429][T14161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 480.446436][T14161] Call Trace: [ 480.446441][T14161] [ 480.446445][T14161] dump_stack_lvl+0x16c/0x1f0 [ 480.446465][T14161] should_fail_ex+0x512/0x640 [ 480.446479][T14161] ? fs_reclaim_acquire+0xae/0x150 [ 480.446496][T14161] ? tomoyo_encode2+0x100/0x3e0 [ 480.446512][T14161] should_failslab+0xc2/0x120 [ 480.446525][T14161] __kmalloc_noprof+0xd2/0x510 [ 480.446537][T14161] ? d_absolute_path+0x136/0x1a0 [ 480.446556][T14161] tomoyo_encode2+0x100/0x3e0 [ 480.446575][T14161] tomoyo_encode+0x29/0x50 [ 480.446590][T14161] tomoyo_realpath_from_path+0x18f/0x6e0 [ 480.446612][T14161] tomoyo_check_open_permission+0x2ab/0x3c0 [ 480.446627][T14161] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 480.446656][T14161] ? do_raw_spin_lock+0x12c/0x2b0 [ 480.446674][T14161] tomoyo_file_open+0x6b/0x90 [ 480.446686][T14161] security_file_open+0x84/0x1e0 [ 480.446704][T14161] do_dentry_open+0x596/0x1530 [ 480.446721][T14161] vfs_open+0x82/0x3f0 [ 480.446738][T14161] path_openat+0x1de4/0x2cb0 [ 480.446756][T14161] ? __pfx_path_openat+0x10/0x10 [ 480.446773][T14161] do_filp_open+0x20b/0x470 [ 480.446786][T14161] ? __pfx_do_filp_open+0x10/0x10 [ 480.446809][T14161] ? alloc_fd+0x471/0x7d0 [ 480.446825][T14161] do_sys_openat2+0x11b/0x1d0 [ 480.446841][T14161] ? __pfx_do_sys_openat2+0x10/0x10 [ 480.446871][T14161] ? __fget_files+0x20e/0x3c0 [ 480.446887][T14161] __x64_sys_openat+0x174/0x210 [ 480.446903][T14161] ? __pfx___x64_sys_openat+0x10/0x10 [ 480.446919][T14161] ? ksys_write+0x1ac/0x250 [ 480.446935][T14161] do_syscall_64+0xcd/0x4e0 [ 480.446951][T14161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.446963][T14161] RIP: 0033:0x7f8d4e78eba9 [ 480.446973][T14161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.446984][T14161] RSP: 002b:00007f8d4f575038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 480.446996][T14161] RAX: ffffffffffffffda RBX: 00007f8d4e9d6090 RCX: 00007f8d4e78eba9 [ 480.447003][T14161] RDX: 00000000001ad100 RSI: 0000200000000000 RDI: 00000000ffffff9c [ 480.447009][T14161] RBP: 00007f8d4f575090 R08: 0000000000000000 R09: 0000000000000000 [ 480.447016][T14161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.447022][T14161] R13: 00007f8d4e9d6128 R14: 00007f8d4e9d6090 R15: 00007fff3322df08 [ 480.447036][T14161] [ 480.536534][T14161] ERROR: Out of memory at tomoyo_realpath_from_path. [ 480.537119][ T63] Bluetooth: hci3: command tx timeout [ 480.542498][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1969'. [ 480.544514][T14236] mac80211_hwsim hwsim39 wlan1: left promiscuous mode [ 480.547793][T14236] mac80211_hwsim hwsim39 wlan1: left allmulticast mode [ 480.553974][T14236] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 480.573407][T14245] vivid-000: disconnect [ 480.575173][T14245] vivid-000: reconnect [ 480.577743][T14245] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14245 comm=syz.5.1970 [ 480.584078][T14245] devpts: Bad value for 'max' [ 480.638359][T14250] netlink: 'syz.5.1970': attribute type 13 has an invalid length. [ 480.640884][T14250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1970'. [ 480.650721][ T40] audit: type=1400 audit(1758106248.003:14575): avc: denied { connect } for pid=14244 comm="syz.5.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 481.469925][ T40] audit: type=1400 audit(1758106248.823:14576): avc: denied { setopt } for pid=14259 comm="syz.5.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 481.476135][ T40] audit: type=1400 audit(1758106248.823:14577): avc: denied { read } for pid=14259 comm="syz.5.1975" name="file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 481.484668][ T40] audit: type=1400 audit(1758106248.823:14578): avc: denied { open } for pid=14259 comm="syz.5.1975" path="/18/file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 481.494262][ T40] audit: type=1400 audit(1758106248.823:14579): avc: denied { watch watch_reads } for pid=14259 comm="syz.5.1975" path="/18/file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 481.545754][T14273] binder: BINDER_SET_CONTEXT_MGR already set [ 481.549509][T14273] binder: 14270:14273 ioctl 4018620d 200000000480 returned -16 [ 481.552910][T14273] binder: BINDER_SET_CONTEXT_MGR already set [ 481.555351][T14273] binder: 14270:14273 ioctl 4018620d 200000000480 returned -16 [ 481.560271][T14273] binder: BINDER_SET_CONTEXT_MGR already set [ 481.562997][T14273] binder: 14270:14273 ioctl 4018620d 200000000480 returned -16 [ 481.566612][T14273] binder: BINDER_SET_CONTEXT_MGR already set [ 481.570465][T14273] binder: 14270:14273 ioctl 4018620d 200000000480 returned -16 [ 481.573631][T14273] binder: BINDER_SET_CONTEXT_MGR already set [ 481.575758][T14273] binder: 14270:14273 ioctl 4018620d 200000000480 returned -16 [ 481.578368][T14273] binder: BINDER_SET_CONTEXT_MGR already set [ 481.580911][T14273] binder: 14270:14273 ioctl 4018620d 200000000480 returned -16 [ 481.583954][T14273] binder: BINDER_SET_CONTEXT_MGR already set [ 481.586018][T14273] binder: 14270:14273 ioctl 4018620d 200000000480 returned -16 [ 481.589220][T14273] binder: BINDER_SET_CONTEXT_MGR already set [ 481.591409][T14273] binder: 14270:14273 ioctl 4018620d 200000000480 returned -16 [ 481.594365][T14273] binder: BINDER_SET_CONTEXT_MGR already set [ 481.599648][T14273] binder: 14270:14273 ioctl 4018620d 200000000480 returned -16 [ 481.669109][T14291] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1983'. [ 481.672793][T14291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1983'. [ 481.907036][ T63] Bluetooth: hci1: command tx timeout [ 481.926988][T12622] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 482.086997][T12622] usb 9-1: Using ep0 maxpacket: 16 [ 482.091213][T12622] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 482.095095][T12622] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 482.099849][T12622] usb 9-1: config 0 interface 0 has no altsetting 0 [ 482.104603][T12622] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 482.108711][T12622] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.112515][T12622] usb 9-1: Product: syz [ 482.114454][T12622] usb 9-1: Manufacturer: syz [ 482.116505][T12622] usb 9-1: SerialNumber: syz [ 482.121391][T12622] usb 9-1: config 0 descriptor?? [ 482.331805][T12622] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input60 [ 482.558083][T12622] usb 14-1: USB disconnect, device number 32 [ 482.576480][ T40] audit: type=1400 audit(1758106249.923:14580): avc: denied { watch watch_reads } for pid=14310 comm="syz.9.1989" path="/proc/398" dev="proc" ino=52499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 482.578051][T14311] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1989'. [ 482.591696][ T40] audit: type=1400 audit(1758106249.943:14581): avc: denied { getopt } for pid=14310 comm="syz.9.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 482.627064][ T63] Bluetooth: hci3: command tx timeout [ 482.690611][T14318] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1991'. [ 482.773142][T14327] netlink: 'syz.9.1995': attribute type 4 has an invalid length. [ 482.785458][T14327] netlink: 'syz.9.1995': attribute type 4 has an invalid length. [ 483.187145][T10661] usb 14-1: new high-speed USB device number 33 using dummy_hcd [ 483.347760][T10661] usb 14-1: Using ep0 maxpacket: 16 [ 483.352835][T10661] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 483.357045][T10661] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 483.361529][T10661] usb 14-1: config 0 interface 0 has no altsetting 0 [ 483.365360][T10661] usb 14-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 483.368451][T10661] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.371694][T10661] usb 14-1: Product: syz [ 483.373630][T10661] usb 14-1: Manufacturer: syz [ 483.375299][T10661] usb 14-1: SerialNumber: syz [ 483.378238][T10661] usb 14-1: config 0 descriptor?? [ 483.587775][T10661] input: syz syz as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input61 [ 483.786271][T14335] FAULT_INJECTION: forcing a failure. [ 483.786271][T14335] name failslab, interval 1, probability 0, space 0, times 0 [ 483.791747][T14335] CPU: 1 UID: 0 PID: 14335 Comm: syz.9.1997 Not tainted syzkaller #0 PREEMPT(full) [ 483.791773][T14335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 483.791785][T14335] Call Trace: [ 483.791791][T14335] [ 483.791797][T14335] dump_stack_lvl+0x16c/0x1f0 [ 483.791829][T14335] should_fail_ex+0x512/0x640 [ 483.791865][T14335] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 483.791897][T14335] should_failslab+0xc2/0x120 [ 483.791917][T14335] __kmalloc_cache_noprof+0x6a/0x3e0 [ 483.791975][T14335] ? mousedev_open+0xdc/0x580 [ 483.792002][T14335] ? __pfx_mousedev_open+0x10/0x10 [ 483.792026][T14335] mousedev_open+0xdc/0x580 [ 483.792052][T14335] ? __pfx_mousedev_open+0x10/0x10 [ 483.792075][T14335] chrdev_open+0x234/0x6a0 [ 483.792097][T14335] ? __pfx_chrdev_open+0x10/0x10 [ 483.792128][T14335] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 483.792154][T14335] do_dentry_open+0x97f/0x1530 [ 483.792174][T14335] ? __pfx_chrdev_open+0x10/0x10 [ 483.792200][T14335] vfs_open+0x82/0x3f0 [ 483.792226][T14335] path_openat+0x1de4/0x2cb0 [ 483.792258][T14335] ? __pfx_path_openat+0x10/0x10 [ 483.792285][T14335] do_filp_open+0x20b/0x470 [ 483.792306][T14335] ? __pfx_do_filp_open+0x10/0x10 [ 483.792344][T14335] ? alloc_fd+0x471/0x7d0 [ 483.792372][T14335] do_sys_openat2+0x11b/0x1d0 [ 483.792397][T14335] ? __pfx_do_sys_openat2+0x10/0x10 [ 483.792424][T14335] ? __fget_files+0x20e/0x3c0 [ 483.792448][T14335] __x64_sys_openat+0x174/0x210 [ 483.792473][T14335] ? __pfx___x64_sys_openat+0x10/0x10 [ 483.792499][T14335] ? ksys_write+0x1ac/0x250 [ 483.792525][T14335] do_syscall_64+0xcd/0x4e0 [ 483.792552][T14335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.792569][T14335] RIP: 0033:0x7f8d4e78eba9 [ 483.792584][T14335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.792603][T14335] RSP: 002b:00007f8d4f575038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 483.792622][T14335] RAX: ffffffffffffffda RBX: 00007f8d4e9d6090 RCX: 00007f8d4e78eba9 [ 483.792633][T14335] RDX: 00000000001ad100 RSI: 0000200000000000 RDI: 00000000ffffff9c [ 483.792644][T14335] RBP: 00007f8d4f575090 R08: 0000000000000000 R09: 0000000000000000 [ 483.792655][T14335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.792666][T14335] R13: 00007f8d4e9d6128 R14: 00007f8d4e9d6090 R15: 00007fff3322df08 [ 483.792688][T14335] [ 483.956966][ T4874] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 484.108900][ T4874] usb 10-1: config 8 has an invalid interface number: 60 but max is 0 [ 484.112442][ T4874] usb 10-1: config 8 has no interface number 0 [ 484.114454][ T4874] usb 10-1: config 8 interface 60 has no altsetting 0 [ 484.120511][ T4874] usb 10-1: New USB device found, idVendor=1608, idProduct=0306, bcdDevice=a3.11 [ 484.124376][ T4874] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.127315][ T4874] usb 10-1: Product: syz [ 484.129094][ T4874] usb 10-1: Manufacturer: syz [ 484.130607][ T4874] usb 10-1: SerialNumber: syz [ 484.336430][T14339] netlink: 'syz.0.1999': attribute type 1 has an invalid length. [ 484.345382][ T4874] io_ti 10-1:8.60: required endpoints missing [ 484.350034][ T4874] usb 10-1: USB disconnect, device number 11 [ 484.373413][T14339] bond3: (slave geneve2): making interface the new active one [ 484.377697][T14339] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 484.381291][ T1220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 484.384277][ T1220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 484.388034][ T1220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 484.391400][ T1220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 484.657584][ T24] usb 9-1: USB disconnect, device number 2 [ 484.743201][T14357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2002'. [ 485.030670][T14364] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2004'. [ 485.039596][T14364] block nbd0: Attempted send on invalid socket [ 485.042189][T14364] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 485.046315][T14364] XFS (nbd0): SB validate failed with error -5. [ 485.188513][T14380] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2008'. [ 485.191987][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 485.192003][ T40] audit: type=1326 audit(1758106252.543:14583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14383 comm="syz.0.2009" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58b898eba9 code=0x0 [ 485.192436][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2008'. [ 485.208700][T14385] tty tty1: ldisc open failed (-12), clearing slot 0 [ 485.567018][ T841] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 485.717008][ T841] usb 10-1: Using ep0 maxpacket: 16 [ 485.726996][ T841] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 485.731226][ T841] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 485.735819][ T841] usb 10-1: config 0 interface 0 has no altsetting 0 [ 485.741398][ T841] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 485.745557][ T841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.749110][ T841] usb 10-1: Product: syz [ 485.750879][ T841] usb 10-1: Manufacturer: syz [ 485.752951][ T841] usb 10-1: SerialNumber: syz [ 485.761958][ T841] usb 10-1: config 0 descriptor?? [ 485.828413][T14419] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2019'. [ 485.832469][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 485.922363][ T6072] usb 14-1: USB disconnect, device number 33 [ 485.986132][ T841] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input62 [ 485.990433][T14429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2022'. [ 485.995445][T14429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2022'. [ 486.047391][T14429] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14429 comm=syz.4.2022 [ 486.169476][ T63] Bluetooth: hci2: ISO packet for unknown connection handle 256 [ 486.281742][T14450] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2028'. [ 486.613216][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2031'. [ 486.620827][T13367] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.620940][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2031'. [ 486.624554][T13367] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.630955][T13367] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.634273][T13367] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.634366][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2031'. [ 486.777853][T14465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2034'. [ 486.888378][T14475] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2036'. [ 487.019209][ T4874] usb 14-1: new high-speed USB device number 34 using dummy_hcd [ 487.061969][T14489] 9pnet: Unknown protocol version 9p20\++} [ 487.078857][T14494] ˙˙˙˙: renamed from bridge_slave_0 [ 487.177170][ T4874] usb 14-1: Using ep0 maxpacket: 16 [ 487.181110][ T4874] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 487.184423][ T4874] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 487.188305][ T4874] usb 14-1: config 0 interface 0 has no altsetting 0 [ 487.193014][ T4874] usb 14-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 487.199322][ T4874] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.201950][ T4874] usb 14-1: Product: syz [ 487.203826][ T4874] usb 14-1: Manufacturer: syz [ 487.205404][ T4874] usb 14-1: SerialNumber: syz [ 487.208289][ T4874] usb 14-1: config 0 descriptor?? [ 487.277211][T14510] block nbd0: Attempted send on invalid socket [ 487.279803][T14510] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.283606][T14510] (syz.0.2044,14510,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 487.286645][T14510] (syz.0.2044,14510,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 487.289482][T14510] (syz.0.2044,14510,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 487.292205][T14510] (syz.0.2044,14510,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 487.334815][T14512] netlink: 'syz.0.2045': attribute type 4 has an invalid length. [ 487.341404][T14512] netlink: 'syz.0.2045': attribute type 4 has an invalid length. [ 487.413680][ T4874] input: syz syz as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input63 [ 487.667363][T14466] FAULT_INJECTION: forcing a failure. [ 487.667363][T14466] name failslab, interval 1, probability 0, space 0, times 0 [ 487.671647][T14466] CPU: 3 UID: 0 PID: 14466 Comm: syz.9.2033 Not tainted syzkaller #0 PREEMPT(full) [ 487.671665][T14466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 487.671673][T14466] Call Trace: [ 487.671677][T14466] [ 487.671683][T14466] dump_stack_lvl+0x16c/0x1f0 [ 487.671702][T14466] should_fail_ex+0x512/0x640 [ 487.671718][T14466] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 487.671738][T14466] should_failslab+0xc2/0x120 [ 487.671752][T14466] __kmalloc_cache_noprof+0x6a/0x3e0 [ 487.671771][T14466] ? dummy_urb_enqueue+0xa3/0x920 [ 487.671787][T14466] dummy_urb_enqueue+0xa3/0x920 [ 487.671800][T14466] ? usb_hcd_map_urb_for_dma+0x359/0x1360 [ 487.671813][T14466] ? usb_hcd_submit_urb+0x185/0x1c60 [ 487.671826][T14466] usb_hcd_submit_urb+0x258/0x1c60 [ 487.671839][T14466] ? find_held_lock+0x2b/0x80 [ 487.671871][T14466] usb_submit_urb+0x890/0x1770 [ 487.671885][T14466] ? lockdep_hardirqs_on+0x53/0x110 [ 487.671904][T14466] synusb_open+0xbd/0x2a0 [ 487.671916][T14466] ? __pfx_synusb_open+0x10/0x10 [ 487.671926][T14466] input_open_device+0x249/0x3d0 [ 487.671945][T14466] mousedev_open_device+0xe0/0x140 [ 487.671961][T14466] mixdev_open_devices+0x11d/0x1b0 [ 487.671978][T14466] mousedev_open+0x2fd/0x580 [ 487.672013][T14466] ? __pfx_mousedev_open+0x10/0x10 [ 487.672030][T14466] chrdev_open+0x234/0x6a0 [ 487.672045][T14466] ? __pfx_chrdev_open+0x10/0x10 [ 487.672060][T14466] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 487.672077][T14466] do_dentry_open+0x97f/0x1530 [ 487.672090][T14466] ? __pfx_chrdev_open+0x10/0x10 [ 487.672113][T14466] vfs_open+0x82/0x3f0 [ 487.672130][T14466] path_openat+0x1de4/0x2cb0 [ 487.672148][T14466] ? __pfx_path_openat+0x10/0x10 [ 487.672165][T14466] do_filp_open+0x20b/0x470 [ 487.672179][T14466] ? __pfx_do_filp_open+0x10/0x10 [ 487.672202][T14466] ? alloc_fd+0x471/0x7d0 [ 487.672219][T14466] do_sys_openat2+0x11b/0x1d0 [ 487.672235][T14466] ? __pfx_do_sys_openat2+0x10/0x10 [ 487.672252][T14466] ? __fget_files+0x20e/0x3c0 [ 487.672267][T14466] __x64_sys_openat+0x174/0x210 [ 487.672283][T14466] ? __pfx___x64_sys_openat+0x10/0x10 [ 487.672299][T14466] ? ksys_write+0x1ac/0x250 [ 487.672315][T14466] do_syscall_64+0xcd/0x4e0 [ 487.672332][T14466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.672344][T14466] RIP: 0033:0x7f8d4e78eba9 [ 487.672354][T14466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.672366][T14466] RSP: 002b:00007f8d4f575038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 487.672377][T14466] RAX: ffffffffffffffda RBX: 00007f8d4e9d6090 RCX: 00007f8d4e78eba9 [ 487.672384][T14466] RDX: 00000000001ad100 RSI: 0000200000000000 RDI: 00000000ffffff9c [ 487.672391][T14466] RBP: 00007f8d4f575090 R08: 0000000000000000 R09: 0000000000000000 [ 487.672397][T14466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.672404][T14466] R13: 00007f8d4e9d6128 R14: 00007f8d4e9d6090 R15: 00007fff3322df08 [ 487.672418][T14466] [ 487.672458][T14466] synaptics_usb 10-1:0.0: synusb_open - usb_submit_urb failed, error: -12 [ 487.951636][ T40] audit: type=1400 audit(1758106255.303:14584): avc: denied { shutdown } for pid=14530 comm="syz.4.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 487.965725][T14531] geneve2: entered promiscuous mode [ 487.967992][T14531] geneve2: entered allmulticast mode [ 488.066123][T14542] 0·: renamed from hsr0 (while UP) [ 488.070845][T14542] 0·: entered allmulticast mode [ 488.072525][T14542] hsr_slave_0: entered allmulticast mode [ 488.074289][T14542] hsr_slave_1: entered allmulticast mode [ 488.076521][T14542] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 488.253908][T14560] tipc: Started in network mode [ 488.255933][T14560] tipc: Node identity ae607847c3db, cluster identity 4711 [ 488.259121][T14560] tipc: Enabled bearer , priority 0 [ 488.276828][T14559] tipc: Resetting bearer [ 488.286572][ T4874] usb 10-1: USB disconnect, device number 12 [ 489.289651][ T841] tipc: Node number set to 1841002567 [ 489.625204][T14559] tipc: Disabling bearer [ 489.762154][T10661] usb 14-1: USB disconnect, device number 34 [ 489.922548][ T40] audit: type=1800 audit(1758106257.273:14585): pid=14599 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2071" name="bus" dev="9p" ino=71827943 res=0 errno=0 [ 490.019894][T14604] overlayfs: missing 'lowerdir' [ 490.075429][T14607] program syz.5.2073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.321116][ T40] audit: type=1400 audit(1758106257.673:14586): avc: denied { connect } for pid=14638 comm="syz.0.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 490.329542][ T40] audit: type=1400 audit(1758106257.673:14587): avc: denied { getattr } for pid=14638 comm="syz.0.2081" path="socket:[54414]" dev="sockfs" ino=54414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 490.337511][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 490.354277][ T40] audit: type=1400 audit(1758106257.703:14588): avc: denied { setopt } for pid=14642 comm="syz.9.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 490.487193][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 490.491459][ T24] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 490.494577][ T24] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 490.498682][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 490.504094][ T24] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 490.507691][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.510915][ T24] usb 9-1: Product: syz [ 490.512323][ T24] usb 9-1: Manufacturer: syz [ 490.513844][ T24] usb 9-1: SerialNumber: syz [ 490.516679][ T24] usb 9-1: config 0 descriptor?? [ 490.587059][T13186] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 490.727648][ T24] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input64 [ 490.747169][T13186] usb 5-1: Using ep0 maxpacket: 16 [ 490.782110][T13186] usb 5-1: config 0 has no interfaces? [ 490.796989][T13186] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 490.800812][T13186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.804341][T13186] usb 5-1: Product: syz [ 490.812631][T13186] usb 5-1: Manufacturer: syz [ 490.814642][T13186] usb 5-1: SerialNumber: syz [ 490.819094][T13186] usb 5-1: config 0 descriptor?? [ 491.007198][T14658] ./cgroup: Can't lookup blockdev [ 491.081454][T14664] __nla_validate_parse: 10 callbacks suppressed [ 491.081466][T14664] netlink: 124 bytes leftover after parsing attributes in process `syz.9.2091'. [ 491.086529][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2091'. [ 491.093474][T14666] ˙˙˙˙: renamed from bridge_slave_0 (while UP) [ 491.098778][T14666] bridge0: port 1(˙˙˙˙) entered disabled state [ 491.182288][ T24] usb 5-1: USB disconnect, device number 12 [ 491.183814][T14674] netlink: 172 bytes leftover after parsing attributes in process `syz.9.2095'. [ 491.264702][ T40] audit: type=1400 audit(1758106258.613:14589): avc: denied { write } for pid=14679 comm="syz.9.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 491.270829][ T40] audit: type=1400 audit(1758106258.613:14590): avc: denied { getopt } for pid=14679 comm="syz.9.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 491.305737][T14684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2099'. [ 491.323959][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2100'. [ 491.451443][T14693] netlink: 'syz.5.2102': attribute type 1 has an invalid length. [ 491.475155][T14693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.495822][T14690] kvm: MONITOR instruction emulated as NOP! [ 491.499489][T14693] bond1: (slave geneve2): making interface the new active one [ 491.504505][T14693] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 491.646304][ T40] audit: type=1400 audit(1758106258.993:14591): avc: denied { setopt } for pid=14700 comm="syz.9.2104" lport=37468 faddr=fe88::10a fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 491.653812][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2104'. [ 491.657374][T14703] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2103'. [ 491.660998][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2103'. [ 491.715441][ T40] audit: type=1400 audit(1758106259.063:14592): avc: denied { mounton } for pid=14705 comm="syz.9.2105" path="/syzcgroup/unified/syz9" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 491.802527][T14721] tipc: Started in network mode [ 491.804670][T14721] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 491.807398][T14722] Attempt to restore checkpoint with obsolete wellknown handles [ 491.808860][T14721] tipc: Enabling of bearer rejected, failed to enable media [ 491.818145][T14723] tipc: Enabling of bearer rejected, failed to enable media [ 491.819083][T14719] netlink: 'syz.5.2108': attribute type 1 has an invalid length. [ 491.833864][T14719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.843165][T14719] bond2: entered promiscuous mode [ 491.950741][T14736] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 491.959081][T14736] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 492.214756][T14754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2118'. [ 492.248287][ T29] usb 14-1: new high-speed USB device number 35 using dummy_hcd [ 492.407080][ T29] usb 14-1: Using ep0 maxpacket: 16 [ 492.415856][ T29] usb 14-1: config 0 has no interfaces? [ 492.426339][ T29] usb 14-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.430200][ T29] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.433298][ T29] usb 14-1: Product: syz [ 492.435054][ T29] usb 14-1: Manufacturer: syz [ 492.447238][ T29] usb 14-1: SerialNumber: syz [ 492.459561][ T29] usb 14-1: config 0 descriptor?? [ 492.799033][ T34] usb 14-1: USB disconnect, device number 35 [ 493.049550][T12622] usb 9-1: USB disconnect, device number 3 [ 493.287291][T14823] Bluetooth: MGMT ver 1.23 [ 493.308747][T14826] Bluetooth: MGMT ver 1.23 [ 493.401603][T14831] program syz.9.2127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.674927][T14839] openvswitch: netlink: Key type 16383 is out of range max 32 [ 493.682278][ T40] audit: type=1400 audit(1758106261.033:14593): avc: denied { unmount } for pid=11764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 493.712936][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2133'. [ 493.754953][T14850] overlayfs: missing 'lowerdir' [ 493.996162][T14862] ipvlan2: entered promiscuous mode [ 493.998543][T14862] bridge0: port 3(ipvlan2) entered blocking state [ 494.000894][T14862] bridge0: port 3(ipvlan2) entered disabled state [ 494.003167][T14862] ipvlan2: entered allmulticast mode [ 494.005012][T14862] bridge0: entered allmulticast mode [ 494.008751][T14862] ipvlan2: left allmulticast mode [ 494.010466][T14862] bridge0: left allmulticast mode [ 494.143599][ T40] audit: type=1400 audit(1758106261.493:14594): avc: denied { read } for pid=14870 comm="syz.9.2141" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 494.153728][ T40] audit: type=1400 audit(1758106261.493:14595): avc: denied { open } for pid=14870 comm="syz.9.2141" path="/dev/usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 494.226317][T14879] netlink: 'syz.9.2144': attribute type 2 has an invalid length. [ 494.234725][T14879] netlink: 'syz.9.2144': attribute type 1 has an invalid length. [ 494.271230][T13291] udevd[13291]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 494.277473][T13291] udevd[13291]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 494.316974][T12622] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 494.334630][T14893] netlink: 'syz.0.2147': attribute type 1 has an invalid length. [ 494.361110][T14893] 8021q: adding VLAN 0 to HW filter on device bond4 [ 494.411767][T14889] netlink: 'syz.4.2148': attribute type 3 has an invalid length. [ 494.422139][T14893] veth3: entered promiscuous mode [ 494.437546][T14893] bond4: (slave veth3): Enslaving as an active interface with a down link [ 494.449895][T14897] bond4: entered allmulticast mode [ 494.477105][T12622] usb 10-1: device descriptor read/64, error -71 [ 494.717025][T12622] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 494.846999][T12622] usb 10-1: device descriptor read/64, error -71 [ 494.957046][T12622] usb usb10-port1: attempt power cycle [ 495.067127][ T9166] usb 14-1: new high-speed USB device number 36 using dummy_hcd [ 495.218272][ T9166] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.221852][ T9166] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.224928][ T9166] usb 14-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 495.228142][ T9166] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.231894][ T9166] usb 14-1: config 0 descriptor?? [ 495.296953][T12622] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 495.317668][T12622] usb 10-1: device descriptor read/8, error -71 [ 495.440877][ T9166] usbhid 14-1:0.0: can't add hid device: -71 [ 495.443849][ T9166] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 495.452787][ T9166] usb 14-1: USB disconnect, device number 36 [ 495.566985][T12622] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 495.588634][T12622] usb 10-1: device descriptor read/8, error -71 [ 495.714254][T12622] usb usb10-port1: unable to enumerate USB device [ 495.920961][T14952] netlink: 'syz.0.2163': attribute type 10 has an invalid length. [ 495.954197][T14952] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 495.958944][T14952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.604429][T14982] IPv6: sit1: Disabled Multicast RS [ 496.607057][T14982] sit1: entered allmulticast mode [ 496.624506][T14983] IPv6: sit1: Disabled Multicast RS [ 496.627084][T14983] sit1: entered allmulticast mode [ 496.810762][T15003] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.892923][T15008] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 496.981757][T14863] delete_channel: no stack [ 497.070609][T15015] CIFS mount error: No usable UNC path provided in device string! [ 497.070609][T15015] [ 497.073899][T15015] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 497.285657][ T1188] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 497.399088][T12622] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 497.454504][T15049] __nla_validate_parse: 47 callbacks suppressed [ 497.454522][T15049] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2185'. [ 497.516831][T15053] tmpfs: Unknown parameter 'sŔ›$403ŞÜ' [ 497.558173][T12622] usb 9-1: Using ep0 maxpacket: 16 [ 497.564597][T12622] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 497.569766][T12622] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 497.574687][T12622] usb 9-1: config 0 interface 0 has no altsetting 0 [ 497.580640][T12622] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 497.588275][T12622] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.594943][T12622] usb 9-1: Product: syz [ 497.598721][T15053] netlink: 'syz.5.2186': attribute type 21 has an invalid length. [ 497.599693][T12622] usb 9-1: Manufacturer: syz [ 497.601611][T15053] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2186'. [ 497.603593][T12622] usb 9-1: SerialNumber: syz [ 497.636142][T12622] usb 9-1: config 0 descriptor?? [ 497.657080][ T839] usb 14-1: new high-speed USB device number 37 using dummy_hcd [ 497.808550][T15066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2190'. [ 497.813061][T15066] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2190'. [ 497.850302][T15068] netlink: 'syz.9.2191': attribute type 11 has an invalid length. [ 497.853779][T15068] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2191'. [ 498.030150][T12622] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input65 [ 498.090445][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 498.090460][ T40] audit: type=1400 audit(1758106265.443:14597): avc: denied { watch_sb watch_reads } for pid=15080 comm="syz.9.2195" path="/170/bus" dev="tmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 498.341597][T15092] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2200'. [ 498.345159][T15092] 0·: renamed from hsr0 (while UP) [ 498.350390][T15092] 0·: entered allmulticast mode [ 498.352530][T15092] hsr_slave_0: entered allmulticast mode [ 498.354655][T15092] hsr_slave_1: entered allmulticast mode [ 498.357200][T15092] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 498.363585][T15094] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2200'. [ 498.366633][T15094] 1·: renamed from 70· (while UP) [ 498.370906][T15094] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 498.410291][T15096] tipc: Enabling not permitted [ 498.412681][T15096] tipc: Enabling of bearer rejected, failed to enable media [ 498.461506][T15098] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2202'. [ 498.461724][T15099] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2202'. [ 498.546984][ T34] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 498.643425][T15113] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2206'. [ 498.707180][ T34] usb 10-1: Using ep0 maxpacket: 16 [ 498.711367][ T34] usb 10-1: config 0 has no interfaces? [ 498.718753][ T34] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.722068][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.724759][ T34] usb 10-1: Product: syz [ 498.726274][ T34] usb 10-1: Manufacturer: syz [ 498.728056][ T34] usb 10-1: SerialNumber: syz [ 498.731340][ T34] usb 10-1: config 0 descriptor?? [ 498.994474][T15146] syz_tun: entered promiscuous mode [ 499.001429][T15146] batadv_slave_0: entered promiscuous mode [ 499.004679][T15146] debugfs: 'hsr1' already exists in 'hsr' [ 499.007925][T15146] Cannot create hsr debugfs directory [ 499.010164][T15146] hsr1: entered allmulticast mode [ 499.012310][T15146] syz_tun: entered allmulticast mode [ 499.014847][T15146] batadv_slave_0: entered allmulticast mode [ 499.046588][ T34] usb 10-1: USB disconnect, device number 17 [ 499.322513][T15166] [U] vÔ3¸Âfůľ"SçÁ/Éę4:ĂXTz“Wˇt‘’lWµ«= [ 499.324752][T15166] [U] J"—e:ŔĆ" [ 499.566285][T15182] /dev/nullb0: Can't open blockdev [ 499.576778][T15184] /dev/nullb0: Can't open blockdev [ 499.712640][ T40] audit: type=1400 audit(1758106267.063:14598): avc: denied { connect } for pid=15190 comm="syz.0.2223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 499.999357][T15208] pimreg: entered allmulticast mode [ 500.035260][ T40] audit: type=1400 audit(1758106267.383:14599): avc: denied { getopt } for pid=15209 comm="syz.5.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 500.161049][ T839] usb 9-1: USB disconnect, device number 4 [ 500.189960][T15215] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 500.279236][T15220] cgroup: name respecified [ 500.341442][T15222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15222 comm=syz.4.2234 [ 500.712698][T13406] syz_tun (unregistering): left promiscuous mode [ 500.787258][ T5995] Bluetooth: hci4: command 0x0c1a tx timeout [ 500.896948][ T841] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 501.058142][ T841] usb 9-1: Using ep0 maxpacket: 16 [ 501.068484][ T841] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 501.072502][ T841] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 501.081118][ T841] usb 9-1: config 0 interface 0 has no altsetting 0 [ 501.086149][ T841] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 501.090253][ T841] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.093584][ T841] usb 9-1: Product: syz [ 501.095505][ T841] usb 9-1: Manufacturer: syz [ 501.098765][ T841] usb 9-1: SerialNumber: syz [ 501.104493][ T841] usb 9-1: config 0 descriptor?? [ 501.177390][T12622] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 501.215103][ T6001] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 501.219229][ T6001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 501.222710][ T6001] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 501.226378][ T6001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 501.230145][ T6001] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 501.315185][ T841] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input67 [ 501.318449][T12622] usb 5-1: device descriptor read/64, error -71 [ 501.391393][T15242] chnl_net:caif_netlink_parms(): no params data found [ 501.470961][T15242] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.473270][T15242] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.475737][T15242] bridge_slave_0: entered allmulticast mode [ 501.478942][T15242] bridge_slave_0: entered promiscuous mode [ 501.483314][T15242] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.485706][T15242] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.488218][T15242] bridge_slave_1: entered allmulticast mode [ 501.490929][T15242] bridge_slave_1: entered promiscuous mode [ 501.534019][T15242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.542425][T15242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.567345][T12622] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 501.585623][T15242] team0: Port device team_slave_0 added [ 501.589392][T15242] team0: Port device team_slave_1 added [ 501.622749][T15242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.624965][T15242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.635133][T15242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.640583][T15242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.642663][T15242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.650736][T15242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.697213][T12622] usb 5-1: device descriptor read/64, error -71 [ 501.710976][T15242] hsr_slave_0: entered promiscuous mode [ 501.714358][T15242] hsr_slave_1: entered promiscuous mode [ 501.717226][T15242] debugfs: 'hsr0' already exists in 'hsr' [ 501.719542][T15242] Cannot create hsr debugfs directory [ 501.808375][T12622] usb usb5-port1: attempt power cycle [ 501.866787][T15242] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.939886][T15242] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.010953][T15242] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.082617][T15242] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.157162][T12622] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 502.188877][T12622] usb 5-1: device descriptor read/8, error -71 [ 502.297383][T15242] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 502.303093][T15242] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 502.308127][T15242] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 502.313906][T15242] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 502.373586][T15242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.387209][ T5995] Bluetooth: hci3: command 0x0405 tx timeout [ 502.408231][T15242] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.419869][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.423003][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.427010][T12622] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 502.432442][T13367] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.435526][T13367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.447553][T12622] usb 5-1: device descriptor read/8, error -71 [ 502.555965][T15242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.558951][T12622] usb usb5-port1: unable to enumerate USB device [ 502.591041][T15242] veth0_vlan: entered promiscuous mode [ 502.595962][T15242] veth1_vlan: entered promiscuous mode [ 502.617940][T15242] veth0_macvtap: entered promiscuous mode [ 502.624583][T15242] veth1_macvtap: entered promiscuous mode [ 502.634922][T15242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.644162][T15242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.647902][T10661] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 502.651229][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.651398][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.659212][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.662874][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.728646][ T1188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.731362][ T1188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.761551][T13367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.764029][T13367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.807564][T10661] usb 10-1: Using ep0 maxpacket: 8 [ 502.810765][T10661] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 502.813490][T10661] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 502.816848][T10661] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 502.820375][T10661] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 502.823624][T10661] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.828119][T10661] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 502.831239][T10661] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.837822][T15287] __nla_validate_parse: 2 callbacks suppressed [ 502.837831][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2242'. [ 502.837842][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2242'. [ 502.842524][T15287] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2242'. [ 502.842591][T15288] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2242'. [ 502.842608][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2242'. [ 502.842782][T15288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=15288 comm=syz.3.2242 [ 502.860056][T15287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2242'. [ 503.003544][T15298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2252'. [ 503.008588][T15298] netlink: 'syz.3.2252': attribute type 7 has an invalid length. [ 503.011033][T15298] netlink: 'syz.3.2252': attribute type 8 has an invalid length. [ 503.013466][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2252'. [ 503.037717][T10661] usb 10-1: GET_CAPABILITIES returned 0 [ 503.040199][T10661] usbtmc 10-1:16.0: can't read capabilities [ 503.057547][T10661] usb 10-1: USB disconnect, device number 18 [ 503.258713][ T5995] Bluetooth: hci0: command tx timeout [ 503.274817][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2259'. [ 503.284226][T15317] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 503.350241][ T40] audit: type=1400 audit(1758106270.703:14600): avc: denied { create } for pid=15320 comm="syz.3.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 503.357217][T15322] netlink: 'syz.3.2261': attribute type 5 has an invalid length. [ 503.358916][ T40] audit: type=1400 audit(1758106270.703:14601): avc: denied { connect } for pid=15320 comm="syz.3.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 503.370068][ T40] audit: type=1400 audit(1758106270.703:14602): avc: denied { ioctl } for pid=15320 comm="syz.3.2261" path="socket:[55287]" dev="sockfs" ino=55287 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 503.504241][ T40] audit: type=1400 audit(1758106270.853:14603): avc: denied { read write } for pid=15242 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 503.514311][ T40] audit: type=1400 audit(1758106270.853:14604): avc: denied { open } for pid=15242 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 503.524601][ T40] audit: type=1400 audit(1758106270.853:14605): avc: denied { ioctl } for pid=15242 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 503.535364][ T40] audit: type=1400 audit(1758106270.863:14606): avc: denied { mounton } for pid=15323 comm="syz.3.2262" path="/9/file0" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 503.544697][ T40] audit: type=1400 audit(1758106270.873:14607): avc: denied { remount } for pid=15323 comm="syz.3.2262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 503.553135][ T40] audit: type=1400 audit(1758106270.873:14608): avc: denied { mount } for pid=15323 comm="syz.3.2262" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 503.563964][ T40] audit: type=1400 audit(1758106270.883:14609): avc: denied { unmount } for pid=15242 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 503.635942][ T4874] usb 9-1: USB disconnect, device number 5 [ 503.766670][T15341] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 503.885986][T15354] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 503.890637][T15354] netlink: 'syz.3.2271': attribute type 3 has an invalid length. [ 503.890655][T15353] netlink: 'syz.3.2271': attribute type 3 has an invalid length. [ 503.893768][T15354] netlink: 'syz.3.2271': attribute type 1 has an invalid length. [ 503.893785][T15354] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2271'. [ 503.906508][T15353] netlink: 'syz.3.2271': attribute type 1 has an invalid length. [ 503.962366][T15359] bridge1: entered promiscuous mode [ 503.964598][T15359] bridge1: entered allmulticast mode [ 504.007540][T15364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.010651][T15364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.041654][T15364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.044794][T15364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.093774][T15371] netem: invalid attributes len -22 [ 504.096163][T15371] netem: change failed [ 504.242493][T15384] openvswitch: netlink: Duplicate key (type 0). [ 504.337484][ T4874] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 504.430345][T15398] netlink: 'syz.4.2284': attribute type 3 has an invalid length. [ 504.434339][T15398] SELinux: policydb string length 14080 does not match expected length 8 [ 504.437883][T15398] SELinux: failed to load policy [ 504.471994][T15398] netlink: 'syz.4.2284': attribute type 1 has an invalid length. [ 504.545830][ T4874] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 504.549801][ T4874] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 504.564413][ T4874] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.605701][ T4874] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 504.610566][ T4874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.626120][ T4874] usb 5-1: Product: syz [ 504.627727][ T4874] usb 5-1: Manufacturer: syz [ 504.629211][ T4874] usb 5-1: SerialNumber: syz [ 504.636772][ T4874] hub 5-1:1.0: bad descriptor, ignoring hub [ 504.638780][ T4874] hub 5-1:1.0: probe with driver hub failed with error -5 [ 504.662098][T15407] block nbd4: NBD_DISCONNECT [ 504.840387][ T4874] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 504.981410][T15416] kAFS: No cell specified [ 505.347425][ T5995] Bluetooth: hci0: command tx timeout [ 505.687382][ T839] usb 5-1: USB disconnect, device number 17 [ 505.698602][ T839] usblp0: removed [ 506.757469][ T6116] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 506.774437][T15502] openvswitch: netlink: Missing key (keys=100040, expected=80) [ 506.786533][T15502] bridge0: entered promiscuous mode [ 506.791291][T15502] macsec1: entered promiscuous mode [ 506.796134][T15502] bridge0: port 3(macsec1) entered blocking state [ 506.800110][T15502] bridge0: port 3(macsec1) entered disabled state [ 506.803432][T15502] macsec1: entered allmulticast mode [ 506.805863][T15502] bridge0: entered allmulticast mode [ 506.817729][T15502] macsec1: left allmulticast mode [ 506.819981][T15502] bridge0: left allmulticast mode [ 506.827879][T15502] bridge0: left promiscuous mode [ 506.855743][T15509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=15509 comm=syz.5.2315 [ 506.870898][T15509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=15509 comm=syz.5.2315 [ 506.917205][ T6116] usb 8-1: Using ep0 maxpacket: 16 [ 506.927275][ T6116] usb 8-1: config 0 has no interfaces? [ 506.931741][ T6116] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.935554][ T6116] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.940194][ T6116] usb 8-1: Product: syz [ 506.942365][ T6116] usb 8-1: Manufacturer: syz [ 506.944778][ T6116] usb 8-1: SerialNumber: syz [ 506.953962][ T6116] usb 8-1: config 0 descriptor?? [ 507.006804][T15520] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 507.009694][T15520] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 507.014297][T15520] vhci_hcd vhci_hcd.0: Device attached [ 507.101340][T15530] max out of range [ 507.229793][T15536] syz_tun: entered promiscuous mode [ 507.233562][T15536] batadv_slave_0: entered promiscuous mode [ 507.236770][T15536] debugfs: 'hsr1' already exists in 'hsr' [ 507.241159][T15536] Cannot create hsr debugfs directory [ 507.243947][T15536] hsr1: entered allmulticast mode [ 507.246275][T15536] syz_tun: entered allmulticast mode [ 507.248800][T15536] batadv_slave_0: entered allmulticast mode [ 507.280209][ T839] usb 8-1: USB disconnect, device number 15 [ 507.309305][ T6116] usb 46-1: SetAddress Request (2) to port 0 [ 507.312366][ T6116] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 507.328689][T15522] vhci_hcd: connection reset by peer [ 507.332867][T13377] vhci_hcd: stop threads [ 507.334770][T13377] vhci_hcd: release socket [ 507.336799][T13377] vhci_hcd: disconnect device [ 507.417208][ T5995] Bluetooth: hci0: command tx timeout [ 507.487333][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 507.640142][ T24] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 507.643531][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 102, changing to 7 [ 507.648322][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 10030, setting to 1024 [ 507.652838][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 507.658367][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 507.662135][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 507.665481][ T24] usb 5-1: Product: syz [ 507.667388][ T24] usb 5-1: Manufacturer: syz [ 507.669397][ T24] usb 5-1: SerialNumber: syz [ 507.674431][ T24] usb 5-1: config 0 descriptor?? [ 507.678988][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 507.681375][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 507.687079][ T24] usb 5-1: selecting invalid altsetting 0 [ 507.904652][T15539] netlink: zone id is out of range [ 507.909517][T15539] netlink: zone id is out of range [ 507.911471][T15546] __nla_validate_parse: 11 callbacks suppressed [ 507.911487][T15546] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2324'. [ 507.911917][T15539] netlink: zone id is out of range [ 507.916108][T15546] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2324'. [ 507.923298][T15539] netlink: zone id is out of range [ 507.926542][T15546] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2324'. [ 507.928030][T15539] netlink: zone id is out of range [ 507.928042][T15539] netlink: zone id is out of range [ 507.929005][T15539] netlink: zone id is out of range [ 507.932875][T15546] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2324'. [ 507.937399][T15539] netlink: zone id is out of range [ 507.939825][T15546] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2324'. [ 507.950058][T15546] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2324'. [ 507.954385][T15546] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2324'. [ 507.959604][T15546] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2324'. [ 507.964711][T15546] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2324'. [ 507.969356][T15546] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2324'. [ 508.000779][T15534] ufs: You didn't specify the type of your ufs filesystem [ 508.000779][T15534] [ 508.000779][T15534] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 508.000779][T15534] [ 508.000779][T15534] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 508.013270][T15534] ufs: ufstype=old is supported read-only [ 508.018343][T15534] ufs: ufs_fill_super(): bad magic number [ 508.193574][T15566] can0: slcan on ttyS3. [ 508.217577][ T24] usb 5-1: USB disconnect, device number 18 [ 508.248128][T15566] can0 (unregistered): slcan off ttyS3. [ 508.297604][ T841] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 508.446966][ T841] usb 8-1: Using ep0 maxpacket: 16 [ 508.447908][ T40] kauditd_printk_skb: 143 callbacks suppressed [ 508.447919][ T40] audit: type=1400 audit(1758106275.807:14753): avc: denied { append } for pid=15572 comm="syz.5.2333" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 508.451320][ T841] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 508.451797][ T40] audit: type=1400 audit(1758106275.807:14754): avc: denied { open } for pid=15572 comm="syz.5.2333" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 508.463702][ T841] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 508.466438][ T40] audit: type=1400 audit(1758106275.807:14755): avc: denied { connect } for pid=15572 comm="syz.5.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 508.467444][T10661] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 508.476471][ T841] usb 8-1: config 0 interface 0 has no altsetting 0 [ 508.480834][ T841] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 508.481657][ T40] audit: type=1400 audit(1758106275.807:14756): avc: denied { write } for pid=15572 comm="syz.5.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 508.490783][ T841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.493758][ T40] audit: type=1400 audit(1758106275.807:14757): avc: denied { read } for pid=15572 comm="syz.5.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 508.496477][ T841] usb 8-1: Product: syz [ 508.509061][ T40] audit: type=1400 audit(1758106275.867:14758): avc: denied { read } for pid=15572 comm="syz.5.2333" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 508.512448][ T841] usb 8-1: Manufacturer: syz [ 508.512467][ T841] usb 8-1: SerialNumber: syz [ 508.514580][ T841] usb 8-1: config 0 descriptor?? [ 508.520276][ T40] audit: type=1400 audit(1758106275.867:14759): avc: denied { ioctl } for pid=15572 comm="syz.5.2333" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 508.617019][T10661] usb 9-1: Using ep0 maxpacket: 16 [ 508.621110][T10661] usb 9-1: config 0 has no interfaces? [ 508.625484][T10661] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 508.629430][T10661] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.632599][T10661] usb 9-1: Product: syz [ 508.634477][T10661] usb 9-1: Manufacturer: syz [ 508.636641][T10661] usb 9-1: SerialNumber: syz [ 508.641380][T10661] usb 9-1: config 0 descriptor?? [ 508.674464][ T40] audit: type=1400 audit(1758106276.027:14760): avc: denied { create } for pid=15576 comm="syz.0.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 508.731851][ T841] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input69 [ 508.737218][ T40] audit: type=1400 audit(1758106276.097:14761): avc: denied { read } for pid=5369 comm="acpid" name="mouse2" dev="devtmpfs" ino=3639 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 508.746358][ T40] audit: type=1400 audit(1758106276.097:14762): avc: denied { open } for pid=5369 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3639 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 508.920328][T15582] team0 (unregistering): Port device team_slave_0 removed [ 508.924969][T15582] team0 (unregistering): Port device team_slave_1 removed [ 508.951390][T15568] syz_tun: entered promiscuous mode [ 508.954786][T15568] batadv_slave_0: entered promiscuous mode [ 508.958422][T15568] debugfs: 'hsr0' already exists in 'hsr' [ 508.960883][T15568] Cannot create hsr debugfs directory [ 508.963252][T15568] hsr0: entered allmulticast mode [ 508.965410][T15568] syz_tun: entered allmulticast mode [ 508.968043][T15568] batadv_slave_0: entered allmulticast mode [ 509.011946][ T841] usb 9-1: USB disconnect, device number 6 [ 509.042597][T15589] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 509.507356][ T5995] Bluetooth: hci0: command tx timeout [ 509.514072][T15597] netlink: 'syz.0.2339': attribute type 1 has an invalid length. [ 509.561918][T15597] 8021q: adding VLAN 0 to HW filter on device bond6 [ 509.566793][T15597] bond5: (slave bond6): making interface the new active one [ 509.572928][T15597] bond5: (slave bond6): Enslaving as an active interface with an up link [ 510.015571][T15648] netlink: 'syz.4.2354': attribute type 21 has an invalid length. [ 510.015571][T15647] netlink: 'syz.4.2354': attribute type 21 has an invalid length. [ 510.032806][T15648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.043978][T15648] bond0: (slave rose0): Enslaving as an active interface with an up link [ 510.047672][T15647] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 510.206788][T15664] fuse: Unknown parameter '÷u' [ 510.249000][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 510.408283][ T24] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 510.411914][ T24] usb 5-1: config 0 has no interface number 0 [ 510.414415][ T24] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.421025][ T24] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 510.426011][ T24] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 510.432839][ T24] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 510.439610][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.451415][ T24] usb 5-1: config 0 descriptor?? [ 510.461139][ T24] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.120/input/input70 [ 510.991454][ T839] usb 5-1: USB disconnect, device number 19 [ 511.028923][ T6117] usb 8-1: USB disconnect, device number 16 [ 511.077256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 511.137373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 511.140365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 511.156326][T15714] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 511.242352][T15725] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 511.245476][T15725] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 511.256784][T15697] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 511.259147][T15697] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 511.261492][T15697] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 511.266001][T15697] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 511.271034][T15697] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 511.273566][T15697] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 511.276386][T15697] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 511.283743][T15697] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 511.285805][T15697] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 511.290670][T15697] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 511.659217][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.661230][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.668110][ T841] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 511.827083][ T841] usb 10-1: Using ep0 maxpacket: 16 [ 511.830980][ T841] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 511.835161][ T841] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 511.840052][ T841] usb 10-1: config 0 interface 0 has no altsetting 0 [ 511.844665][ T841] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 511.847952][ T841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.850927][ T841] usb 10-1: Product: syz [ 511.852428][ T841] usb 10-1: Manufacturer: syz [ 511.854122][ T841] usb 10-1: SerialNumber: syz [ 511.857367][ T841] usb 10-1: config 0 descriptor?? [ 512.091071][ T841] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input71 [ 512.180171][T15745] /dev/sr0: Can't open blockdev [ 512.197584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 512.250622][T15758] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64549 sclass=netlink_xfrm_socket pid=15758 comm=syz.0.2379 [ 512.308625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 512.387749][ T6116] usb 46-1: device descriptor read/8, error -110 [ 512.527951][ T841] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 512.676972][ T841] usb 8-1: Using ep0 maxpacket: 16 [ 512.681503][ T841] usb 8-1: config 0 has no interfaces? [ 512.687392][ T841] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 512.691092][ T841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.694473][ T841] usb 8-1: Product: syz [ 512.696287][ T841] usb 8-1: Manufacturer: syz [ 512.698398][ T841] usb 8-1: SerialNumber: syz [ 512.703158][ T841] usb 8-1: config 0 descriptor?? [ 512.798084][ T6116] usb usb46-port1: attempt power cycle [ 512.831044][T15789] x_tables: ip_tables: udp match: only valid for protocol 17 [ 513.002818][T15798] netlink: 'syz.0.2390': attribute type 10 has an invalid length. [ 513.005787][T15798] netlink: 'syz.0.2390': attribute type 10 has an invalid length. [ 513.013277][T15798] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 513.042962][ T24] usb 8-1: USB disconnect, device number 17 [ 513.177174][ T5995] Bluetooth: hci4: command 0x0c1a tx timeout [ 513.337058][ T5995] Bluetooth: hci0: command 0x0c1a tx timeout [ 513.337076][ T63] Bluetooth: hci3: command 0x0405 tx timeout [ 513.347074][ T5995] Bluetooth: hci1: command 0x0c1a tx timeout [ 513.368095][ T6116] usb usb46-port1: unable to enumerate USB device [ 513.377279][ T6072] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 513.527318][ T6072] usb 5-1: Using ep0 maxpacket: 8 [ 513.531636][ T6072] usb 5-1: config 0 interface 0 has no altsetting 0 [ 513.533925][ T6072] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 513.537894][ T6072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.542530][ T6072] usb 5-1: config 0 descriptor?? [ 513.582143][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 513.582156][ T40] audit: type=1400 audit(1758106280.937:14834): avc: denied { mount } for pid=15801 comm="syz.3.2392" name="/" dev="hugetlbfs" ino=58849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 513.717110][T15807] __nla_validate_parse: 67 callbacks suppressed [ 513.717123][T15807] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2394'. [ 513.814686][ T40] audit: type=1400 audit(1758106281.167:14835): avc: denied { write } for pid=15808 comm="syz.3.2395" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 513.865494][ T40] audit: type=1400 audit(1758106281.217:14836): avc: denied { bind } for pid=15810 comm="syz.3.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 513.872949][ T40] audit: type=1400 audit(1758106281.217:14837): avc: denied { write } for pid=15810 comm="syz.3.2396" path="socket:[60999]" dev="sockfs" ino=60999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 513.883669][ T40] audit: type=1400 audit(1758106281.227:14838): avc: denied { unmount } for pid=13964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 513.892040][ T40] audit: type=1400 audit(1758106281.237:14839): avc: denied { unmount } for pid=13964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 513.904915][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2398'. [ 513.908335][T15813] net_ratelimit: 7 callbacks suppressed [ 513.908345][T15813] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 513.913455][T15813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.952317][ T6072] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 514.152726][ T6072] usb 5-1: USB disconnect, device number 20 [ 514.247049][ T9166] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 514.348164][T15828] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.386435][ T6116] usb 10-1: USB disconnect, device number 19 [ 514.397261][ T9166] usb 8-1: Using ep0 maxpacket: 16 [ 514.400700][ T9166] usb 8-1: config 0 has no interfaces? [ 514.408921][ T9166] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.412178][ T9166] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.414987][ T9166] usb 8-1: Product: syz [ 514.416824][ T9166] usb 8-1: Manufacturer: syz [ 514.421737][ T9166] usb 8-1: SerialNumber: syz [ 514.425225][ T9166] usb 8-1: config 0 descriptor?? [ 514.450444][T15828] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.514456][T15836] tmpfs: Cannot change global quota limit on remount [ 514.532739][T15828] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.583739][ T40] audit: type=1400 audit(1758106281.937:14840): avc: denied { getopt } for pid=15837 comm="syz.5.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 514.611001][T15828] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.695556][ T40] audit: type=1400 audit(1758106282.047:14841): avc: denied { ioctl } for pid=15841 comm="syz.5.2406" path="socket:[58943]" dev="sockfs" ino=58943 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 514.724940][T15847] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2407'. [ 514.765674][T13367] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.773594][ T4874] usb 8-1: USB disconnect, device number 18 [ 514.783892][T12786] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.793667][T12786] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.805379][T12786] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.839935][ T40] audit: type=1400 audit(1758106282.197:14842): avc: denied { append } for pid=15855 comm="syz.5.2410" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 515.070651][ T40] audit: type=1400 audit(1758106282.427:14843): avc: denied { connect } for pid=15873 comm="syz.4.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 515.222320][T15883] fuse: Unknown parameter '184467440737095516150x0000000000000005' [ 515.386466][T15893] netlink: 'syz.4.2419': attribute type 1 has an invalid length. [ 515.417072][ T5995] Bluetooth: hci3: command 0x0405 tx timeout [ 515.419088][ T5995] Bluetooth: hci0: command 0x0c1a tx timeout [ 515.422590][T15893] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 515.427240][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 515.429427][T15901] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2421'. [ 515.508885][T15908] sysfs: Unknown parameter 'usrquota' [ 515.520085][T15905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2422'. [ 515.552295][T15912] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2424'. [ 515.584911][T15914] binder: 15913:15914 unknown command 0 [ 515.587576][T15914] binder: 15913:15914 ioctl c0306201 200000000080 returned -22 [ 515.594017][T15914] binder: 15913:15914 ioctl c0306201 200000000180 returned -22 [ 515.625696][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2427'. [ 515.847048][ T841] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 515.882073][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2434'. [ 515.886570][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2434'. [ 515.924372][T15953] loop4: detected capacity change from 0 to 2560 [ 515.929690][T15953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2436'. [ 515.935611][T15953] buffer_io_error: 6 callbacks suppressed [ 515.935621][T15953] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 515.940884][T14942] Buffer I/O error on dev loop4, logical block 3, async page read [ 515.963744][T15955] netlink: 'syz.5.2437': attribute type 4 has an invalid length. [ 515.975495][T15955] netlink: 'syz.5.2437': attribute type 4 has an invalid length. [ 516.006984][ T841] usb 9-1: Using ep0 maxpacket: 16 [ 516.010073][ T841] usb 9-1: config 0 has no interfaces? [ 516.013621][ T841] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 516.016522][ T841] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.019693][ T841] usb 9-1: Product: syz [ 516.021028][ T841] usb 9-1: Manufacturer: syz [ 516.022473][ T841] usb 9-1: SerialNumber: syz [ 516.025212][ T841] usb 9-1: config 0 descriptor?? [ 516.063722][T15960] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 516.131280][ T63] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 516.170359][T15971] bridge0: port 3(syz_tun) entered blocking state [ 516.178309][T15971] bridge0: port 3(syz_tun) entered disabled state [ 516.188344][T15971] bridge0: port 3(syz_tun) entered blocking state [ 516.190581][T15971] bridge0: port 3(syz_tun) entered disabled state [ 516.312700][T15989] ptrace attach of "/syz-executor exec"[15242] was attempted by ""[15989] [ 516.345637][T15992] sp0: Synchronizing with TNC [ 516.377940][ T839] usb 9-1: USB disconnect, device number 7 [ 516.478325][T15996] fuse: Bad value for 'fd' [ 516.527775][T15999] block nbd0: Attempted send on invalid socket [ 516.529945][T15999] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 516.533854][T15999] EXT4-fs (nbd0): unable to read superblock [ 516.543428][T16000] block nbd0: Attempted send on invalid socket [ 516.547163][T16000] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 516.552037][T16000] EXT4-fs (nbd0): unable to read superblock [ 516.593129][T16002] vxfs: WRONG superblock magic 00000000 at 1 [ 516.596351][T16002] vxfs: WRONG superblock magic 00000000 at 8 [ 516.599190][T16002] vxfs: can't find superblock. [ 516.928836][T16016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.957953][T16015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 516.961294][T16013] tipc: Cannot configure node identity twice [ 517.218300][T16052] loop7: detected capacity change from 0 to 524255232 [ 517.248487][ T6116] hid (null): unknown global tag 0xd [ 517.251882][ T6116] hid (null): invalid report_count -1998396005 [ 517.258381][ T6116] hid-generic 0002:0006:0006.0008: unknown main item tag 0x5 [ 517.260731][ T6116] hid-generic 0002:0006:0006.0008: unknown global tag 0xd [ 517.262912][ T6116] hid-generic 0002:0006:0006.0008: item 0 2 1 13 parsing failed [ 517.265624][ T6116] hid-generic 0002:0006:0006.0008: probe with driver hid-generic failed with error -22 [ 517.316784][T16055] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 517.319831][T16055] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 517.333546][T16057] /dev/nullb0: Can't open blockdev [ 517.367040][T12618] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 517.420810][T16067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.420845][T16066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.497487][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 517.497595][ T5995] Bluetooth: hci0: command 0x0c1a tx timeout [ 517.497628][ T6001] Bluetooth: hci3: command 0x0405 tx timeout [ 517.526941][T12618] usb 8-1: Using ep0 maxpacket: 16 [ 517.532100][T12618] usb 8-1: config 0 has no interfaces? [ 517.535943][T12618] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.545966][T12618] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.553780][T12618] usb 8-1: Product: syz [ 517.555697][T12618] usb 8-1: Manufacturer: syz [ 517.561879][T12618] usb 8-1: SerialNumber: syz [ 517.572689][T12618] usb 8-1: config 0 descriptor?? [ 517.606286][T16076] ref_ctr increment failed for inode: 0x621 offset: 0x7 ref_ctr_offset: 0x1600 of mm: 0xffff88802e825600 [ 517.831646][T16091] libceph: resolve '40' (ret=-3): failed [ 517.961838][T16088] team0: Port device team_slave_0 removed [ 518.107571][ T839] usb 8-1: USB disconnect, device number 19 [ 518.131651][T16109] SELinux: Context system_u:object_r:sound_device_t:s0 is not valid (left unmapped). [ 518.175545][T16114] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 518.380682][T16121] nbd: must specify at least one socket [ 518.688416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 518.691410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 518.694513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 518.697275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 518.700030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 518.814800][T16139] netlink: 'syz.3.2494': attribute type 8 has an invalid length. [ 518.868990][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 518.869005][ T40] audit: type=1400 audit(1758106286.227:14882): avc: denied { read } for pid=5369 comm="acpid" name="mouse2" dev="devtmpfs" ino=3682 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 518.881230][ T40] audit: type=1400 audit(1758106286.227:14883): avc: denied { open } for pid=5369 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3682 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 518.890271][ T40] audit: type=1400 audit(1758106286.227:14884): avc: denied { ioctl } for pid=5369 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3682 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 519.046201][ T40] audit: type=1400 audit(1758106286.397:14885): avc: denied { create } for pid=16154 comm="syz.5.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 519.054109][ T40] audit: type=1400 audit(1758106286.407:14886): avc: denied { getopt } for pid=16154 comm="syz.5.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 519.103952][T16157] binder: 16156:16157 ioctl c0306201 0 returned -14 [ 519.157390][ T34] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 519.197005][ T839] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 519.197927][T16160] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 519.202127][T16160] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 519.206784][T16160] vhci_hcd vhci_hcd.0: Device attached [ 519.287012][T12618] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 519.316965][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 519.320128][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.323409][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.326799][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 519.330647][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 519.334199][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.340275][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 519.343564][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.367004][ T839] usb 5-1: Using ep0 maxpacket: 16 [ 519.370570][ T839] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 519.374302][ T839] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 519.378214][ T839] usb 5-1: config 0 interface 0 has no altsetting 0 [ 519.382694][ T839] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 519.385847][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.388392][ T839] usb 5-1: Product: syz [ 519.389680][ T839] usb 5-1: Manufacturer: syz [ 519.391119][ T839] usb 5-1: SerialNumber: syz [ 519.394034][ T839] usb 5-1: config 0 descriptor?? [ 519.436993][T12618] usb 9-1: Using ep0 maxpacket: 16 [ 519.440797][T12618] usb 9-1: config 0 has no interfaces? [ 519.444651][T12618] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.447619][T12618] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.450054][T12618] usb 9-1: Product: syz [ 519.451419][T12618] usb 9-1: Manufacturer: syz [ 519.453172][T12618] usb 9-1: SerialNumber: syz [ 519.457496][T12618] usb 9-1: config 0 descriptor?? [ 519.467043][ T841] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 519.550682][ T34] usb 8-1: GET_CAPABILITIES returned 0 [ 519.552434][ T34] usbtmc 8-1:16.0: can't read capabilities [ 519.600570][ T839] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input72 [ 519.754404][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.758241][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.761772][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.764708][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.767502][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.770499][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.773393][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.776372][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.779016][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.783275][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.786047][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.787949][ T839] usb 9-1: USB disconnect, device number 8 [ 519.788810][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.793393][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.796572][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.799690][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.803599][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 519.811755][ T29] usb 8-1: USB disconnect, device number 20 [ 519.974746][T16161] vhci_hcd: connection reset by peer [ 519.979303][ T1188] vhci_hcd: stop threads [ 519.980746][ T1188] vhci_hcd: release socket [ 519.982354][ T1188] vhci_hcd: disconnect device [ 520.411746][ T40] audit: type=1400 audit(1758106287.767:14887): avc: denied { create } for pid=16167 comm="syz.3.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 520.420293][T16169] ieee802154 phy0 wpan0: encryption failed: -22 [ 520.424662][ T40] audit: type=1400 audit(1758106287.777:14888): avc: denied { write } for pid=16167 comm="syz.3.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 520.473710][T16175] __nla_validate_parse: 11 callbacks suppressed [ 520.473722][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2507'. [ 520.473769][T16177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2507'. [ 520.499945][T16175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=16175 comm=syz.4.2507 [ 520.545856][T13377] Bluetooth: Invalid byte 5e after esc byte [ 520.669913][ T40] audit: type=1400 audit(1758106288.027:14889): avc: denied { nlmsg_tty_audit } for pid=16190 comm="syz.4.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 520.680096][ T40] audit: type=1400 audit(1758106288.027:14890): avc: denied { nlmsg_write } for pid=16190 comm="syz.4.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 520.688269][ T40] audit: type=1400 audit(1758106288.027:14891): avc: denied { audit_write } for pid=16190 comm="syz.4.2511" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 521.076369][T16211] openvswitch: netlink: VXLAN extension message has 10 unknown bytes. [ 521.083407][T16211] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 521.087952][T16211] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 521.190492][T16213] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2516'. [ 521.255255][T16215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2517'. [ 521.422950][T16219] overlayfs: conflicting options: userxattr,metacopy=on [ 521.583077][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2521'. [ 521.588117][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2521'. [ 521.598600][T16228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2522'. [ 521.620471][T16228] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2522'. [ 521.654953][T16234] Invalid source name [ 521.656351][T16234] UBIFS error (pid: 16234): cannot open "ubifs", error -22 [ 521.669331][T16234] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 521.682974][T16234] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 521.761889][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2525'. [ 521.767929][T16234] bridge0: entered promiscuous mode [ 521.770501][T16234] bridge0: port 3(macvlan2) entered blocking state [ 521.773002][T16234] bridge0: port 3(macvlan2) entered disabled state [ 521.775281][T16234] macvlan2: entered allmulticast mode [ 521.777219][T16234] bridge0: entered allmulticast mode [ 521.780127][T16234] macvlan2: left allmulticast mode [ 521.781881][T16234] bridge0: left allmulticast mode [ 521.785099][T16234] bridge0: left promiscuous mode [ 521.873139][T16240] syz_tun: refused to change device tx_queue_len [ 521.881731][T12618] usb 5-1: USB disconnect, device number 21 [ 521.907421][T16243] mmap: syz.4.2528 (16243): VmData 37466112 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 521.955784][T16248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=16248 comm=syz.3.2526 [ 521.966228][T16248] exFAT-fs (nullb0): invalid boot record signature [ 521.969472][T16248] exFAT-fs (nullb0): failed to read boot sector [ 521.972133][T16248] exFAT-fs (nullb0): failed to recognize exfat type [ 522.030627][T16256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2532'. [ 522.059811][T16264] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 522.066255][T16254] netlink: 'syz.4.2531': attribute type 1 has an invalid length. [ 522.070288][T16254] netlink: 'syz.4.2531': attribute type 1 has an invalid length. [ 522.116798][T13186] IPVS: starting estimator thread 0... [ 522.176801][T16273] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 522.182071][T16273] efs: cannot read volume header [ 522.227267][T16270] IPVS: using max 44 ests per chain, 105600 per kthread [ 522.266410][T16280] batman_adv: batadv0: Adding interface: gretap2 [ 522.269252][T16280] batman_adv: batadv0: Interface activated: gretap2 [ 522.427832][ T9166] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 522.578072][ T9166] usb 9-1: Using ep0 maxpacket: 16 [ 522.581793][ T9166] usb 9-1: config 0 has no interfaces? [ 522.585233][ T9166] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.588546][ T9166] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.591701][ T9166] usb 9-1: Product: syz [ 522.593337][ T9166] usb 9-1: Manufacturer: syz [ 522.594829][ T9166] usb 9-1: SerialNumber: syz [ 522.598699][ T9166] usb 9-1: config 0 descriptor?? [ 522.617037][ T6001] Bluetooth: hci2: command 0x1003 tx timeout [ 522.617368][ T5995] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 522.698698][T13947] syz_tun (unregistering): left promiscuous mode [ 522.971461][T13186] usb 9-1: USB disconnect, device number 9 [ 523.237077][ T1220] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.311731][ T9166] IPVS: starting estimator thread 0... [ 523.346143][ T1220] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.397818][ T5995] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 523.400860][T16313] IPVS: using max 44 ests per chain, 105600 per kthread [ 523.403721][ T5995] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 523.409045][ T5995] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 523.419636][ T5995] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 523.424838][ T5995] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 523.442209][T16318] [U] ^R [ 523.442738][T16320] macvlan0: entered promiscuous mode [ 523.445609][T16320] macvlan0: entered allmulticast mode [ 523.447421][T16320] veth1_vlan: entered allmulticast mode [ 523.470648][ T1220] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.488234][T16322] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.492563][T16322] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.523545][T16325] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 523.526657][T16325] block device autoloading is deprecated and will be removed. [ 523.562744][ T1220] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.655448][T16314] chnl_net:caif_netlink_parms(): no params data found [ 523.699128][ T63] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 523.699454][T16334] netlink: 'syz.0.2558': attribute type 3 has an invalid length. [ 523.703661][T16334] netlink: 'syz.0.2558': attribute type 1 has an invalid length. [ 523.806837][T16314] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.810252][T16314] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.812611][T16314] bridge_slave_0: entered allmulticast mode [ 523.815259][T16314] bridge_slave_0: entered promiscuous mode [ 523.818399][T16314] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.820749][T16314] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.822960][T16314] bridge_slave_1: entered allmulticast mode [ 523.826393][T16314] bridge_slave_1: entered promiscuous mode [ 523.829498][T16350] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 523.876660][T16314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.899498][T16314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.969197][T16314] team0: Port device team_slave_0 added [ 523.972543][T16314] team0: Port device team_slave_1 added [ 524.035035][ T1220] bridge_slave_1: left allmulticast mode [ 524.037805][ T1220] bridge_slave_1: left promiscuous mode [ 524.041579][ T1220] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.046562][ T1220] ˙˙˙˙: left allmulticast mode [ 524.048979][ T1220] ˙˙˙˙: left promiscuous mode [ 524.052143][ T1220] bridge0: port 1(˙˙˙˙) entered disabled state [ 524.415398][ T1220] bond1 (unregistering): (slave geneve2): Releasing active interface [ 524.620035][ T841] vhci_hcd: vhci_device speed not set [ 524.901477][ T1220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.981328][ T1220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.019172][ T1220] bond0 (unregistering): Released all slaves [ 525.118727][ T1220] bond1 (unregistering): Released all slaves [ 525.211832][ T1220] bond2 (unregistering): Released all slaves [ 525.218246][T16364] ˙˙˙˙: renamed from bridge_slave_0 (while UP) [ 525.224063][T16364] bridge0: port 1(˙˙˙˙) entered disabled state [ 525.227569][T16314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.230368][T16314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.241036][T16314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.248294][T16314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.250519][T16314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.260103][T16314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.264892][T16379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.286275][T16381] hugetlbfs: Unknown parameter 'si‚«' [ 525.286373][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 525.286387][ T40] audit: type=1400 audit(1758106292.637:14927): avc: denied { remount } for pid=16380 comm="syz.3.2569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 525.293957][T16379] unsupported nlmsg_type 40 [ 525.298908][ T40] audit: type=1400 audit(1758106292.637:14928): avc: denied { mounton } for pid=16380 comm="syz.3.2569" path="/85/file0" dev="hugetlbfs" ino=64677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 525.298945][ T40] audit: type=1400 audit(1758106292.637:14929): avc: denied { mount } for pid=16380 comm="syz.3.2569" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 525.298978][ T40] audit: type=1400 audit(1758106292.647:14930): avc: denied { append } for pid=16380 comm="syz.3.2569" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 525.333010][T16381] overlay: ./file1 is not a directory [ 525.388413][ T40] audit: type=1400 audit(1758106292.747:14931): avc: denied { unmount } for pid=15242 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 525.397997][ T40] audit: type=1400 audit(1758106292.747:14932): avc: denied { unmount } for pid=15242 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 525.446092][ T40] audit: type=1400 audit(1758106292.797:14933): avc: denied { read } for pid=16382 comm="syz.0.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 525.454734][T16314] hsr_slave_0: entered promiscuous mode [ 525.457352][T16314] hsr_slave_1: entered promiscuous mode [ 525.459489][T16314] debugfs: 'hsr0' already exists in 'hsr' [ 525.461272][ T40] audit: type=1400 audit(1758106292.817:14934): avc: denied { mount } for pid=16392 comm="syz.4.2571" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 525.461709][T16314] Cannot create hsr debugfs directory [ 525.473596][T16398] batadv_slave_1: entered promiscuous mode [ 525.484102][T16398] CIFS: iocharset name too long [ 525.497081][ T63] Bluetooth: hci1: command tx timeout [ 525.529359][T16404] random: crng reseeded on system resumption [ 525.530330][ T40] audit: type=1400 audit(1758106292.887:14935): avc: denied { write } for pid=16392 comm="syz.4.2571" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 525.540657][ T40] audit: type=1400 audit(1758106292.887:14936): avc: denied { ioctl } for pid=16392 comm="syz.4.2571" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 525.654911][ T1220] batadv_slave_0: left promiscuous mode [ 525.661587][ T1220] hsr_slave_0: left promiscuous mode [ 525.664378][ T1220] hsr_slave_1: left promiscuous mode [ 525.666755][ T1220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.669199][ T1220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.672460][ T1220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.675532][ T1220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.709069][ T1220] veth1_macvtap: left promiscuous mode [ 525.711342][ T1220] veth0_macvtap: left promiscuous mode [ 525.713670][ T1220] veth1_vlan: left promiscuous mode [ 525.715932][ T1220] veth0_vlan: left promiscuous mode [ 525.768309][ T1220] pimreg (unregistering): left allmulticast mode [ 526.599382][ T1220] team0 (unregistering): Port device team_slave_1 removed [ 527.265711][T16382] batadv_slave_1: left promiscuous mode [ 527.308905][T16314] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.313314][T16314] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.341714][T16416] syz.3.2575 (16416): /proc/16415/oom_adj is deprecated, please use /proc/16415/oom_score_adj instead. [ 527.407001][T16427] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 527.433176][T16314] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.438446][T16314] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.472425][T16433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15131 sclass=netlink_route_socket pid=16433 comm=syz.3.2580 [ 527.538156][T16314] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.541524][T16314] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.587331][ T63] Bluetooth: hci1: command tx timeout [ 527.634513][T16314] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.637636][T16314] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.669760][T16452] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.689035][T16455] Bluetooth: MGMT ver 1.23 [ 527.691870][T16455] Bluetooth: hci0: load_link_keys: too big key_count value 18432 [ 527.755307][T16452] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.861555][T16452] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.893798][T16314] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 527.898797][T16314] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 527.903495][T16314] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 527.907617][T16314] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 527.909987][T16475] netlink: 'syz.3.2587': attribute type 1 has an invalid length. [ 527.915452][T16452] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.957746][T16314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.967347][T16314] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.972276][T13367] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.974546][T13367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.983664][T13367] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.986125][T13367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.053781][T13367] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.062190][T13367] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.070752][T13367] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.079983][ T46] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.165410][T16314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.304405][T16314] veth0_vlan: entered promiscuous mode [ 528.313375][T16314] veth1_vlan: entered promiscuous mode [ 528.331572][T16314] veth0_macvtap: entered promiscuous mode [ 528.335377][T16314] veth1_macvtap: entered promiscuous mode [ 528.343987][T16314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.350005][T16314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.357245][T13367] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.360557][T13367] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.364466][T13367] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.368367][T13367] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.410017][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.412471][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.425881][T13367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.429344][T13367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.467483][ T842] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 528.513429][T16516] __nla_validate_parse: 9 callbacks suppressed [ 528.513446][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2591'. [ 528.619368][ T842] usb 5-1: config 0 has no interfaces? [ 528.624146][ T842] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 528.628352][ T842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.631913][ T842] usb 5-1: Product: syz [ 528.633697][ T842] usb 5-1: Manufacturer: syz [ 528.635642][ T842] usb 5-1: SerialNumber: syz [ 528.640249][ T842] usb 5-1: config 0 descriptor?? [ 528.774638][T16519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2592'. [ 528.774963][T16520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2592'. [ 528.852411][ T842] usb 5-1: USB disconnect, device number 22 [ 529.211178][T16547] binder: 16546:16547 ioctl 4018620d 0 returned -22 [ 529.594719][T16585] netlink: 'syz.0.2607': attribute type 4 has an invalid length. [ 529.627247][T16585] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 529.658756][T16590] netlink: 'syz.0.2607': attribute type 4 has an invalid length. [ 529.666657][T16590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2607'. [ 529.667215][ T63] Bluetooth: hci1: command tx timeout [ 529.677538][T12786] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 529.681328][T12786] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 529.707173][ T6116] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 529.721752][T16585] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 529.772300][T16592] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2609'. [ 529.800036][T16585] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 529.892179][T16601] program syz.4.2612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.896329][T16601] program syz.4.2612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.901066][T16601] program syz.4.2612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.947279][ T6117] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 529.951589][T16585] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 530.030790][T16610] netlink: 212388 bytes leftover after parsing attributes in process `syz.4.2615'. [ 530.033871][T16610] openvswitch: netlink: Message has 5 unknown bytes. [ 530.093878][T13377] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 530.106235][ T46] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 530.110184][ T46] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 530.118517][ T46] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 530.118943][ T6117] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 530.281197][T16621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16621 comm=syz.3.2620 [ 530.365361][T16639] mkiss: ax0: crc mode is auto. [ 530.417881][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 530.417894][ T40] audit: type=1400 audit(1758106297.777:14953): avc: denied { accept } for pid=16642 comm="syz.3.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 530.426030][ T40] audit: type=1400 audit(1758106297.777:14954): avc: denied { read } for pid=16642 comm="syz.3.2624" path="socket:[65980]" dev="sockfs" ino=65980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 530.586203][T16653] erspan1: entered promiscuous mode [ 530.619709][ T40] audit: type=1400 audit(1758106297.977:14955): avc: denied { mounton } for pid=16656 comm="syz.6.2628" path="/4/file0" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 530.619746][T16657] 9pnet_virtio: no channels available for device 127.0.0.1 [ 530.661369][ T40] audit: type=1400 audit(1758106298.017:14956): avc: denied { connect } for pid=16658 comm="syz.6.2629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 530.679062][ T40] audit: type=1804 audit(1758106298.037:14957): pid=16659 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2629" name="/newroot/5/file0" dev="tmpfs" ino=45 res=1 errno=0 [ 530.689325][ T40] audit: type=1400 audit(1758106298.037:14958): avc: denied { write } for pid=16658 comm="syz.6.2629" laddr=::1 lport=9 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 530.757718][ T40] audit: type=1400 audit(1758106298.117:14959): avc: denied { read write } for pid=16667 comm="syz.6.2631" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 530.765557][ T40] audit: type=1400 audit(1758106298.117:14960): avc: denied { open } for pid=16667 comm="syz.6.2631" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 530.821727][ T40] audit: type=1400 audit(1758106298.177:14961): avc: denied { mount } for pid=16672 comm="syz.6.2632" name="/" dev="autofs" ino=66011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 530.838786][ T40] audit: type=1400 audit(1758106298.197:14962): avc: denied { unmount } for pid=16314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 531.040125][T16685] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2636'. [ 531.057972][T16685] netlink: 'syz.6.2636': attribute type 4 has an invalid length. [ 531.069458][T16685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16685 comm=syz.6.2636 [ 531.157297][ T6117] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 531.324338][ T6117] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 531.328101][ T6117] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 531.332171][ T6117] usb 9-1: config 0 interface 0 has no altsetting 0 [ 531.338316][ T6117] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 531.341993][ T6117] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 531.342430][T16697] program syz.6.2640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 531.343086][T16696] program syz.6.2640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 531.345355][ T6117] usb 9-1: Product: syz [ 531.345371][ T6117] usb 9-1: Manufacturer: syz [ 531.345385][ T6117] usb 9-1: SerialNumber: syz [ 531.348278][ T6117] usb 9-1: config 0 descriptor?? [ 531.362111][ T6117] hub 9-1:0.0: bad descriptor, ignoring hub [ 531.364597][ T6117] hub 9-1:0.0: probe with driver hub failed with error -5 [ 531.371473][ T6117] usb 9-1: selecting invalid altsetting 0 [ 531.525803][T16713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2644'. [ 531.532563][T16713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2644'. [ 531.615816][T16717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.619611][T16717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.747382][ T63] Bluetooth: hci1: command tx timeout [ 531.825227][T16682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.830085][T16682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.860882][ T6117] usb 9-1: USB disconnect, device number 10 [ 531.917556][ T839] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 531.959042][T16740] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2652'. [ 532.078663][ T839] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 532.082869][ T839] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 532.086421][ T839] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 532.090063][T16750] netlink: 'syz.0.2655': attribute type 10 has an invalid length. [ 532.091946][ T839] usb 8-1: config 0 interface 0 has no altsetting 0 [ 532.097904][ T839] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 532.101315][ T839] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 532.105564][ T839] usb 8-1: config 0 interface 0 has no altsetting 0 [ 532.110548][ T839] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 532.113430][ T839] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 532.117750][ T839] usb 8-1: config 0 interface 0 has no altsetting 0 [ 532.122339][ T839] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 532.125809][ T839] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 532.130832][ T839] usb 8-1: config 0 interface 0 has no altsetting 0 [ 532.134464][ T839] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 532.139494][ T839] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 532.143772][ T839] usb 8-1: config 0 interface 0 has no altsetting 0 [ 532.147827][ T839] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 532.151439][ T839] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 532.155113][ T839] usb 8-1: config 0 interface 0 has no altsetting 0 [ 532.158330][ T839] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 532.161447][ T839] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 532.164699][ T839] usb 8-1: config 0 interface 0 has no altsetting 0 [ 532.167941][ T839] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 532.170682][ T839] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 532.174436][ T839] usb 8-1: config 0 interface 0 has no altsetting 0 [ 532.179513][ T839] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 532.182801][ T839] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 532.185999][ T839] usb 8-1: Product: syz [ 532.189292][ T839] usb 8-1: Manufacturer: syz [ 532.190773][ T839] usb 8-1: SerialNumber: syz [ 532.193513][ T839] usb 8-1: config 0 descriptor?? [ 532.198928][ T839] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 532.357356][T16772] hfsplus: unable to find HFS+ superblock [ 532.398763][ T6117] usb 8-1: USB disconnect, device number 21 [ 532.405636][ T6117] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 532.727855][ T841] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 532.864508][T16794] tty tty3: ldisc open failed (-12), clearing slot 2 [ 532.890723][ T841] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 532.894043][ T841] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 532.896945][ T839] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 532.898278][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 532.906227][ T841] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 532.910617][ T841] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 532.913998][ T841] usb 5-1: Product: syz [ 532.915762][ T841] usb 5-1: Manufacturer: syz [ 532.918031][ T841] usb 5-1: SerialNumber: syz [ 532.921239][ T841] usb 5-1: config 0 descriptor?? [ 532.924995][ T841] hub 5-1:0.0: bad descriptor, ignoring hub [ 532.927253][ T841] hub 5-1:0.0: probe with driver hub failed with error -5 [ 532.930811][ T841] usb 5-1: selecting invalid altsetting 0 [ 533.047329][ T839] usb 9-1: Using ep0 maxpacket: 16 [ 533.051459][ T839] usb 9-1: config 0 has no interfaces? [ 533.055639][ T839] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 533.059535][ T839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.062700][ T839] usb 9-1: Product: syz [ 533.064348][ T839] usb 9-1: Manufacturer: syz [ 533.066261][ T839] usb 9-1: SerialNumber: syz [ 533.069981][ T839] usb 9-1: config 0 descriptor?? [ 533.227323][ T841] usb 5-1: USB disconnect, device number 23 [ 533.266154][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 533.389024][ T6072] usb 9-1: USB disconnect, device number 11 [ 533.657253][ C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 533.691248][T16818] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 533.695219][T16818] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 533.700381][T16818] CPU: 2 UID: 0 PID: 16818 Comm: syz.0.2673 Not tainted syzkaller #0 PREEMPT(full) [ 533.703736][T16818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 533.707027][T16818] RIP: 0010:h5_recv+0x104/0x950 [ 533.708586][T16818] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 a1 35 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 533.716765][T16818] RSP: 0018:ffffc90003e7fc00 EFLAGS: 00010293 [ 533.719381][T16818] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887b675a [ 533.722717][T16818] RDX: ffff8880569e2440 RSI: ffffffff887b679f RDI: 0000000000000005 [ 533.726049][T16818] RBP: ffffc90003e7fd88 R08: 0000000000000005 R09: 0000000000000000 [ 533.729468][T16818] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 533.732845][T16818] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb48720 [ 533.736189][T16818] FS: 00007f58b97de6c0(0000) GS:ffff8880d68b2000(0000) knlGS:0000000000000000 [ 533.740013][T16818] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 533.742877][T16818] CR2: 00007f58b97ddf98 CR3: 00000000457ba000 CR4: 0000000000352ef0 [ 533.746241][T16818] Call Trace: [ 533.747593][T16818] [ 533.748533][T16818] ? __pfx_h5_recv+0x10/0x10 [ 533.750380][T16818] hci_uart_tty_receive+0x254/0x7e0 [ 533.752570][T16818] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 533.754989][T16818] tty_ioctl+0x580/0x1680 [ 533.756843][T16818] ? __pfx_tty_ioctl+0x10/0x10 [ 533.758881][T16818] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 533.761734][T16818] ? hook_file_ioctl_common+0x145/0x410 [ 533.764050][T16818] ? selinux_file_ioctl+0x180/0x270 [ 533.766214][T16818] ? selinux_file_ioctl+0xb4/0x270 [ 533.768361][T16818] ? __pfx_tty_ioctl+0x10/0x10 [ 533.770462][T16818] __x64_sys_ioctl+0x18b/0x210 [ 533.772589][T16818] do_syscall_64+0xcd/0x4e0 [ 533.774568][T16818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.777004][T16818] RIP: 0033:0x7f58b898eba9 [ 533.778880][T16818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.786683][T16818] RSP: 002b:00007f58b97de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.790149][T16818] RAX: ffffffffffffffda RBX: 00007f58b8bd6090 RCX: 00007f58b898eba9 [ 533.793507][T16818] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 533.796952][T16818] RBP: 00007f58b8a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 533.800299][T16818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.803610][T16818] R13: 00007f58b8bd6128 R14: 00007f58b8bd6090 R15: 00007fffea89c8a8 [ 533.806828][T16818] [ 533.808132][T16818] Modules linked in: [ 533.810472][T16818] ---[ end trace 0000000000000000 ]--- [ 533.813237][T16818] RIP: 0010:h5_recv+0x104/0x950 [ 533.815599][T16818] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 a1 35 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 533.826906][T16818] RSP: 0018:ffffc90003e7fc00 EFLAGS: 00010293 [ 533.829647][T16818] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887b675a [ 533.833004][T16818] RDX: ffff8880569e2440 RSI: ffffffff887b679f RDI: 0000000000000005 [ 533.836742][T16818] RBP: ffffc90003e7fd88 R08: 0000000000000005 R09: 0000000000000000 [ 533.840199][T16818] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 533.843614][T16818] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb48720 [ 533.849481][T16818] FS: 00007f58b97de6c0(0000) GS:ffff8880d66b2000(0000) knlGS:0000000000000000 [ 533.853343][T16818] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 533.856160][T16818] CR2: 00007ff117907d60 CR3: 00000000457ba000 CR4: 0000000000352ef0 [ 533.859319][T16818] Kernel panic - not syncing: Fatal exception [ 533.862512][T16818] Kernel Offset: disabled [ 533.864343][T16818] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:08:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88801da80048 RCX=1ffffffff215748a RDX=00000000ffffffff RSI=0000000000000011 RDI=ffff88801da80048 RBP=0000000000000011 RSP=ffffc900038cf768 R8 =0000000000000000 R9 =0000000000000000 R10=00000000ffffffff R11=0000000000007bdd R12=00000000ffffffff R13=0000000000000011 R14=ffff88801d6f0000 R15=0000000000000000 RIP=ffffffff822a54b0 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff117907d60 CR3=0000000032836000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff116da76c3 00007ff116da76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe40a66050 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556756fde9 000055556756f5a0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555675611b1 00005555675610d0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000402d0a40800 0100000408060601 288603b602000003 05800402d0a40800 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000408060601 27f4000200071fff ffff800800058003 0410000880a2d790 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800010000040806 060126fc00020007 0100000008060010 0001000000080606 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04069a0480040680 047a080002080001 00000208060a010d 9e0002000701dc08 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0598030785f4ca08 0005900304800400 058c030000000404 0605880338080005 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffffffdfc000 RBX=0000000000000000 RCX=0000000000000016 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff93dc85f4 RBP=ffff8880284892c0 RSP=ffffc900006a0f30 R8 =0000000000000001 R9 =fffff520000d41d4 R10=0000000000000003 R11=ffffc900006a0ff8 R12=0000000000204000 R13=0000000000000016 R14=ffff888028489280 R15=dffffc0000000000 RIP=ffffffff816905ce RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f59e1850300 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f58b97bcf98 CR3=000000002b57e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=167d89c719687a53 4c008490984acba5 167d89c719687a53 4c008490984acba5 167d89c719687a53 4c008490984acba5 167d89c719687a53 4c008490984acba5 ZMM18=d9dc0e8f46c2c9c4 b15e00fa26318100 d9dc0e8f46c2c9c4 b15e00fa26318100 d9dc0e8f46c2c9c4 b15e00fa26318100 d9dc0e8f46c2c9c4 b15e00fa26318100 ZMM19=6113000000000000 0000000000000005 6113000000000000 0000000000000004 6113000000000000 0000000000000003 6113000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000600 0000000000000600 000000000055bff6 a400000000000300 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000274e08068003 0004088183909a08 0001000000080606 0116f20002000704 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000100306100000 0300100002100002 8004060075940023 647261632f697264 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0810880a050a8004 18828392f2080001 0000020806060114 8a0008000ab00300 ZMM25=d36913d6d36913d6 d36913d6d36913d6 d36913d6d36913d6 d36913d6d36913d6 d36913d6d36913d6 d36913d6d36913d6 d36913d6d36913d6 d36913d6d36913d6 ZMM26=dcb495b0dcb495b0 dcb495b0dcb495b0 dcb495b0dcb495b0 dcb495b0dcb495b0 dcb495b0dcb495b0 dcb495b0dcb495b0 dcb495b0dcb495b0 dcb495b0dcb495b0 ZMM27=518c4b1b518c4b1b 518c4b1b518c4b1b 518c4b1b518c4b1b 518c4b1b518c4b1b 518c4b1b518c4b1b 518c4b1b518c4b1b 518c4b1b518c4b1b 518c4b1b518c4b1b ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ab0b0000ab0b0000 ab0b0000ab0b0000 ab0b0000ab0b0000 ab0b0000ab0b0000 ab0b0000ab0b0000 ab0b0000ab0b0000 ab0b0000ab0b0000 ab0b0000ab0b0000 info registers vcpu 2 CPU#2 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564b815 RDI=ffffffff9b1180e0 RBP=ffffffff9b1180a0 RSP=ffffc90003e7f600 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=000000000000005d R14=ffffffff9b1180a0 R15=ffffffff8564b7b0 RIP=ffffffff8564b83f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f58b97de6c0 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f58b97ddf98 CR3=00000000457ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffea89cdb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffea89cdb6 00007fffea89cdbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58b8a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58b8a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58b8a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58b8a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58b8a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58b8a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58b8ba74a8 00007f58b8ba74a0 00007f58b8ba7498 00007f58b8ba7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58b970d100 00007f58b8ba7460 00007f58b8ba7478 00007f58b8ba74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58b8ba74b8 00007f58b8ba74b0 00007f58b8ba74a8 00007f58b8ba74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000010b714 RBX=0000000000000003 RCX=ffffffff8b94bb49 RDX=ffffed100d4e6656 RSI=ffffffff8c163280 RDI=ffffffff81914111 RBP=ffffed1003c5c000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2e0000 R14=ffffffff90ab7290 R15=0000000000000000 RIP=ffffffff8b94a68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f58b97fef98 CR3=0000000062859000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7bbf0b26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7bbf0b26 00007ffc7bbf0b2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa22fa12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa22fa12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa22fa12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa22fa12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa22fa12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa22fa12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fed3cf3c6785e394 baa5aa0000000000 0000000000000000 80fe020101000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1b26328643bf5fc8 bc753964b04a18fe d3cf3c6785e30004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000080 fe02010100000002 0000000000000000 000184190000012d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000