last executing test programs: 2m9.834098969s ago: executing program 1 (id=503): syz_emit_ethernet(0x88, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61954a5b001f2f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c20880000000001bf3f030b7d27010086dd0005000b003e000086dd0009080088be000000031c4885100100000000007b40080022eb0000000223022309020000000000000500ebb41b0800655800000000"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) recvmmsg(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x60010000, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000400)=0x1, 0x4) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getqdisc={0x4c, 0x26, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x8, 0x9}, {0xffe0, 0xffe3}, {0xf, 0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28008044}, 0x48000) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x2}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) 2m9.654258471s ago: executing program 1 (id=505): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}}, 0x0) syz_emit_ethernet(0xde, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0xa8, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2a, 0xc2, 0x0, 0x0, 0x1, {[@mptcp=@remove_addr={0x1e, 0x91, 0x2, 0x0, "5922ef63dde1079a8da9d0150b14b8903280907e74a583beee77af67d1bbd7396988f9aa1d636de6ef3c0a0731115163553914933c232d7bd9ea1fa32f04683bb525f5a9b5c2dc75ebef37e7d9e2a196e9cd7c58d613d62084a69fae248c0e98de4c0cd48e0468ba9cfe6a12ada31bbc5fa5fc0da8cb427f8f5c3072a18dceb95cc28e26808ef7844b42303676ae"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2b, 0xff, @remote, @local, {[], {{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) 2m9.653960055s ago: executing program 1 (id=506): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, 0x0, 0xa00, 0x20000091, &(0x7f0000000140)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) (async, rerun: 32) r3 = socket(0x1, 0x803, 0x0) (rerun: 32) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket(0x2, 0x3, 0xff) (rerun: 32) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) sendto$inet(r6, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x20004880, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r9], 0x50}}, 0x2) 2m9.564315173s ago: executing program 1 (id=507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "d0c09ca8c9a044d18c1f59d1ed624a358f39cfc467329fec437c907e0ca7779ca8c0c2d26abf36f064770a70a88130dfa112562f1ad75b59c390ca9d280872fb", 0x3d}, 0x48, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x12, r4, 0x0) r5 = gettid() sigaltstack(&(0x7f00000000c0)={&(0x7f0000000500)=""/4110, 0x80000000, 0x100e}, 0x0) rt_sigqueueinfo(r5, 0x21, &(0x7f0000000000)) keyctl$read(0xb, r3, 0x0, 0x0) keyctl$link(0x8, r3, r3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r6, 0x40405514, &(0x7f0000000140)={0x7, 0x6, 0xc7b, 0xffffffff, 'syz0\x00', 0x6}) 2m9.431705751s ago: executing program 1 (id=508): r0 = syz_open_dev$video4linux(&(0x7f0000000380), 0x28, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000003c0)={0x40f0f000, 0x8, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10b, 0x100000, 0xfffffffffffffffa, 0x4, 0x1, 0x20000}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$COMEDI_CANCEL(r5, 0x6407) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) bind$vsock_stream(r5, &(0x7f0000000100), 0x10) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000500)={0xc, @sdr={0x0, 0x9}}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000340)=@gcm_128={{0x303}, "5138dc07938076ff", "442f1eecb65fbc48d42a2ecc5cb5474a", "29b06cfb", "9db20548b0a3668d"}, 0x28) fstat(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x800, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r9, @ANYRES32=r4, @ANYRES64=r9], 0x3}, 0x1, 0x0, 0x0, 0x4044000}, 0x2004c005) write$binfmt_misc(r5, &(0x7f0000000380)="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", 0x15e) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 2m6.39444964s ago: executing program 1 (id=521): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x102000) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext4\x00', 0x8000, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x28200, 0x0) dup3(r0, r5, 0x80000) 2m6.3941493s ago: executing program 32 (id=378): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000010}, 0x400000d0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) (async) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000010}, 0x400000d0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 1m51.37281661s ago: executing program 33 (id=521): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x102000) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = dup(r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext4\x00', 0x8000, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x28200, 0x0) dup3(r0, r5, 0x80000) 1m31.583875153s ago: executing program 5 (id=976): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0) close(r1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}, 0x1, 0x0, 0x0, 0x44040}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000540)={@ptr={0x73622a85, 0x0, 0x0, 0x0, 0x0, 0x80000000004}, @fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x35}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m31.58363399s ago: executing program 5 (id=977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30"], 0x1f4}}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x6, &(0x7f0000000c80)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300}, {0x4}}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2}, 0x90) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x556, 0x800, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x8}, {0x350}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x10, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) 1m30.090900736s ago: executing program 5 (id=979): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x4f2c0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x1000}) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) close_range(r0, r0, 0x2) fsopen(&(0x7f0000001300)='jffs2\x00', 0x0) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) 1m30.089548793s ago: executing program 5 (id=982): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/146, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xffffffffffffff8d}, 0x0) sendmsg$tipc(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)="b8d3d8e48974aae503984742e847457d61b9459b68100dbf05177b2436f9d642df271fd6b9aa365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd8cbb6f06952a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a3408000000c57c6f0cd8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636610f2e2c7945ed5000529e4f8f9", 0x99}], 0x1, 0x0, 0x0, 0x94}, 0x20004001) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x31, 0xffffffffffffffff, 0xf983e000) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=@newtfilter={0x890, 0x2c, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {0xfff1, 0x9}, {0x7, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_u32={{0x8}, {0x7e0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_ACT={0x280, 0x7, [@m_csum={0x1a4, 0xa, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0xb7, 0x10000000, 0x3}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff8000, 0xc, 0x8, 0x8, 0x74c}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x4, 0x6, 0x1}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x20000000, 0x7, 0x4}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xfffffe70, 0x20000000, 0xa479, 0x100}, 0x7c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x6, 0x10000003, 0x0, 0x3ba4}, 0x1d}}]}, {0xce, 0x6, "51428960a041b62fb1b46742d639c26d780a9bf6e7c5e41a913ae9ec89bb618a05f0f8b8b6bc3974072b182866e6e3bc0e683b165ca263f607f28a2f0a0b9b735ae3e6d39d93b57618e26bc238bdc85031967cf9871f4d2093d29c3ff7beaf89f7ed079ae1f824d2682482033457e0a2327646017374ec6c1cee9e43dde36525308e362ca5259186679cd95d61954c3da8cca88d6d179b5b5fc4e7f15cb27c97c107ac178665d2b1f9433275643e4e3b52cee83904049898206b04aa200a88ee595bd8beff28ee510c2d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xd8, 0x5, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3ff, 0xfffff108, 0x5, 0x1c2, 0x2903}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x5, 0x8, 0xfe, 0xc662}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x4c5, 0x10000005}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x4, 0x2, 0x1000, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x420, 0x1, 0x7, 0x7fff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x53c, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xfcb, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x40b, 0x20000000}}]}, {0x1c, 0x6, "7ddd227be637a97bde9edf296ffcb4e1c0bf9d636196ba86"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_U32_ACT={0x35c, 0x7, [@m_skbedit={0x48, 0x3, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xfff3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x78, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4a, 0x6, "8bdb234da1550f34d87784564b320416501b7fed8b2ea58ab29250ae94cb0fc7859a36902589ff807419ce0b9bad68572002e7e3c59719ad4e29303b045e4320913921d0b50e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7}}}}, @m_bpf={0xd4, 0x11, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7e, 0x3, 0x0, 0x5, 0x10}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x8, 0x2, 0x3, 0x7}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0xc7, 0xc, 0x0, 0x401}, {0x0, 0x9, 0x40, 0x51db8a6a}, {0x8, 0x9, 0x6d, 0x7}, {0x29b7, 0xf, 0x1, 0x4000000}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x37, 0x6, "de5c301b8b5208e7237c0d71ab5fa479801b3e474675919c587df3b2c80309c0eeaf720c1fef42bf9d01b46c26bdbf8d574d17"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x15c, 0x11, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xe4d9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x101}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x80, 0x1, 0xff, 0x8ea2}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0xe5, 0x6, "bfcde07ef2fec6656aa428c71a438a5bcfe3c8ca0762c1c65739a4183e601cb1fa34a326b15b222092839f467c5fc2e324d1682e8252ec045b2f83b2d2001f9a82441fb459ef525e5466bbc0ad498ebc75bbbb55492e9efc4d86346c9303ede86bf41d59f8faf702e00c2ead5d4b22666a54c73f965652a29c912ab8084f31aec8b59b7ba54d37304473378b111adec50df83cf30f0b90ec0aec38a6f608ed59efdd85bba2686cae9febdf9c0d2839ccc824ce2fa12bf4315eb3c457b074e4259d8a9bb80aa21b76ddcd09e3c509e9b26e5d95b841e9c1f1df0c90260318f56d86"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x68, 0x9, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xdbf}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xd}}]}, {0x2c, 0x6, "7bbfbbda55fbe9fde9a2fe7bb76fa3ac70c60aaf62a4b6b16bc93612f15a6bffbce300771913a52b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_U32_ACT={0x1d4, 0x7, [@m_csum={0x1d0, 0x1f, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0xfffffffb, 0x4, 0x6, 0xffffffff}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1e, 0x8, 0x7, 0x9, 0x80000000}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x7, 0x0, 0x5, 0x2}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x80, 0x3, 0xfffffffd, 0x2}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x6, 0x7fff, 0x2}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1d18, 0x10, 0x8, 0x4c1a, 0xc}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x4, 0x1}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x300, 0x3, 0xffff, 0x2}, 0x822}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x2, 0x3}, 0x2f}}]}, {0xa7, 0x6, "d0f471c069f0bd2d3556ce8fa71354b81717b69c94dff5b28dc674749fd0dc6c008162ef4635636efb89cc0997b60b0b895a70b27ba3ca8ef156515458712fcfe1f421feb04cbdfc365f56846ba0401e5195cc86ad544c1c4ee1bcedfe61b4fa6c35ce162b423d9be2729b1900e18a4da86cbceefb0803f7c960fcf811d236e7b113f6d05deee79c52051cf230d3937e03c6ca4daddebe764eaf17b88fef1066ace7bb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x2}}, @TCA_U32_INDEV={0x14, 0x8, 'ip6gretap0\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xff000000}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xff}}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @local}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @remote}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x890}}, 0x0) fstat(r0, &(0x7f0000000240)) lseek(r0, 0xffffffffffffffff, 0x0) 1m29.920090113s ago: executing program 5 (id=988): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x40) 1m29.919625263s ago: executing program 5 (id=989): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x74) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd9d) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000440)={0x0, 0x7, 0x1, [0x4, 0x200, 0x7e, 0x1, 0x1], [0x2000000000, 0x2, 0x7, 0x8, 0x9, 0x6, 0x4, 0x4, 0x1, 0x8, 0x4, 0x151b, 0x1d2d, 0x5, 0x0, 0x199a, 0x1, 0xc, 0xa5, 0x6, 0x6, 0x4, 0x7, 0x0, 0x800, 0x8, 0x4, 0x40, 0xc, 0x2, 0x5, 0x4e7c, 0x101, 0x8, 0x46bbf16d, 0x4, 0xb, 0x80000001, 0x4c2, 0x8, 0x800, 0x7, 0x7, 0xe, 0x80, 0x7fffffff, 0x2, 0x9, 0x6, 0xfff, 0x1, 0xfff, 0x15, 0xfffffffffffffff7, 0xe36, 0xe6, 0x13, 0x4, 0xfff, 0xffffffffffffff6f, 0x6, 0x10000, 0xb32, 0x8, 0x5338, 0x0, 0x7, 0x9, 0x1e9e, 0x9, 0x3, 0x1, 0x3d3, 0xdfa, 0x1, 0x2, 0x1, 0x2b11, 0x437, 0x0, 0xeb59, 0xf9, 0x101, 0x401, 0x1, 0x2, 0x2, 0x2, 0x5, 0x3, 0x100000001, 0x969, 0x9d, 0x1, 0x5, 0x80000000, 0x4, 0x4, 0x81, 0x5, 0xfffffffffffffff8, 0x7, 0x6, 0x4, 0x8, 0x7, 0x9, 0x0, 0x100, 0x2, 0x3, 0x0, 0x0, 0x100000001, 0x8, 0x8000, 0x37, 0xa5f, 0x614d2cac, 0xe5, 0x6]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff}, 0x48) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000880)={r3, "33d560522fb95312e5db0e3086e3aaaf"}) 1m14.876155689s ago: executing program 34 (id=989): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x74) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd9d) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000440)={0x0, 0x7, 0x1, [0x4, 0x200, 0x7e, 0x1, 0x1], [0x2000000000, 0x2, 0x7, 0x8, 0x9, 0x6, 0x4, 0x4, 0x1, 0x8, 0x4, 0x151b, 0x1d2d, 0x5, 0x0, 0x199a, 0x1, 0xc, 0xa5, 0x6, 0x6, 0x4, 0x7, 0x0, 0x800, 0x8, 0x4, 0x40, 0xc, 0x2, 0x5, 0x4e7c, 0x101, 0x8, 0x46bbf16d, 0x4, 0xb, 0x80000001, 0x4c2, 0x8, 0x800, 0x7, 0x7, 0xe, 0x80, 0x7fffffff, 0x2, 0x9, 0x6, 0xfff, 0x1, 0xfff, 0x15, 0xfffffffffffffff7, 0xe36, 0xe6, 0x13, 0x4, 0xfff, 0xffffffffffffff6f, 0x6, 0x10000, 0xb32, 0x8, 0x5338, 0x0, 0x7, 0x9, 0x1e9e, 0x9, 0x3, 0x1, 0x3d3, 0xdfa, 0x1, 0x2, 0x1, 0x2b11, 0x437, 0x0, 0xeb59, 0xf9, 0x101, 0x401, 0x1, 0x2, 0x2, 0x2, 0x5, 0x3, 0x100000001, 0x969, 0x9d, 0x1, 0x5, 0x80000000, 0x4, 0x4, 0x81, 0x5, 0xfffffffffffffff8, 0x7, 0x6, 0x4, 0x8, 0x7, 0x9, 0x0, 0x100, 0x2, 0x3, 0x0, 0x0, 0x100000001, 0x8, 0x8000, 0x37, 0xa5f, 0x614d2cac, 0xe5, 0x6]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff}, 0x48) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000880)={r3, "33d560522fb95312e5db0e3086e3aaaf"}) 1m8.483306364s ago: executing program 6 (id=1276): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, 0x0, 0x0, 0x100008) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000001380), r0) (async) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="67cee5c4edceefa1ed5e35cf3246b1dcded0"], 0x2c}, 0x1, 0x0, 0x0, 0x4c004}, 0x20000055) 1m8.433745859s ago: executing program 6 (id=1278): syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x40000000}]}]}}, 0x0, 0x4a}, 0x20) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4$netrom(r1, 0x0, &(0x7f0000000280), 0x80800) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f00000002c0)=0xfffffffe, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6299b5, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x8, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x80000000, 0x800, 0x807c}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c804}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)={0x114, 0x28, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0x4, 0x18}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x8, 0xec, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x134, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) listen(r0, 0x5) socket$inet_mptcp(0x2, 0x1, 0x106) 1m8.362927322s ago: executing program 6 (id=1281): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0x801, 0xfffffffd, 0x25dfdbfe, {}, [@IFLA_PHYS_PORT_ID={0x6, 0x22, "ca66"}, @IFLA_AF_SPEC={0x40, 0x1a, 0x0, 0x1, [@AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1m8.303786606s ago: executing program 6 (id=1283): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000880, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m8.231565631s ago: executing program 6 (id=1285): keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000040)='i\xa0l*c~A\v$C\\\b\x17[2\xde\xcc}\t\xdcs6\xab|\x938<\x11Y50x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000080)={r3, 0x6, 0x8, 0xf30, 0x3, [0x0, 0x0], [0x2, 0x6, 0x2, 0xd], [0x1000, 0xd, 0x8, 0xffffffff], [0x1, 0x1, 0x5, 0x9]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000180)={0x0, r2, r3, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000240)={r8, 0x800, 0x81, 0x6, 0x2, [r5, r7, r4, r6], [0x0, 0x6, 0x6, 0x10000], [0xff, 0x7, 0xffff, 0x80000000], [0x1, 0x1, 0x2, 0x40]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x1003ff, 0x34325241, 0x2, [r4, 0x0, 0x0, r6], [0x2b8]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r10, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x8000) 1m7.440520645s ago: executing program 35 (id=1300): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000080)={r3, 0x6, 0x8, 0xf30, 0x3, [0x0, 0x0], [0x2, 0x6, 0x2, 0xd], [0x1000, 0xd, 0x8, 0xffffffff], [0x1, 0x1, 0x5, 0x9]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000180)={0x0, r2, r3, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000240)={r8, 0x800, 0x81, 0x6, 0x2, [r5, r7, r4, r6], [0x0, 0x6, 0x6, 0x10000], [0xff, 0x7, 0xffff, 0x80000000], [0x1, 0x1, 0x2, 0x40]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x1003ff, 0x34325241, 0x2, [r4, 0x0, 0x0, r6], [0x2b8]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r10, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x8000) 58.413713899s ago: executing program 7 (id=1418): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) syz_open_dev$evdev(&(0x7f0000000340), 0xfffffffffffffff9, 0x40000) 58.359921092s ago: executing program 7 (id=1420): syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08ff4500001c"], 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0xfffffffd}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000003400000001ed00007b130000000000001d440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37ca3c23b12c72058459b6cf548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb00f8ffff92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca485683cdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b508bc1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6cab44feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d086fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dd0500a4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52ab39c9ba1a7491a18d713f4169c3cf3a2becfe458687c562950bddfb58e6cf23ed86eec11214d70c7142c487ca405f9ac813189fcc7c4eae47e9ecc5b39c0d2861ff17d7c9c1ebc20244e52b87c8589efdd3b1b4e603ba65fd85864057f3e7bdd39cde36021745c9302117ddaaab0c1ddacce1aa4a4fd021b9c1d9829c905ec903946d98fb41180fe28df358cbba009743875e0a0eba096ad6e4a16a443e26358c2bc02efbc540ad7e1f3564ef6f4dba9fe91350036cef773f421f7c209e26877b6fca000000000000000000000000000025cef574b07f18f65f499daa3b5b5a37ab2c484aab9b2884821d989a00"/3465], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 58.303528411s ago: executing program 7 (id=1422): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xf6) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000)=0x401, 0x4) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="52e4ef37d861ce2c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf2505000000180001800d0001007564703a73797a320000000004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xd, 0x19, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x8, 0xa, 0x8, 0x100, 0xfffffffffffffffc}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @alu={0x4, 0x1, 0x0, 0x2, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', r4, 0x8, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x62, @loopback, 0x4e22, 0x0, 'none\x00', 0x5, 0x3, 0x8047}, {@loopback, 0x4e22, 0x2, 0xfffffffe, 0x7, 0x12d5a}}, 0x44) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000280)={0x5, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) (async) r9 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r9, 0xc040564a, &(0x7f0000002580)={0x0, 0xd2, 0x1014, r1, 0x0, 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x50) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) pread64(r1, &(0x7f0000000780)=""/185, 0xb9, 0x3c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 58.252157616s ago: executing program 7 (id=1423): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x9362, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x40480, &(0x7f00000002c0)="21117421ba15ebedfb8f920d1f9eea12fe1805e685a0a24fe0ae6f4b400d97fd4d94e6f45eee3f6dc6869243cffb8df4aba4861dec34d3b832d7590b63c92dc3b5be5ba21d7863db9cc502bd3d47fba1d5e2cf638c6d10c47386b5d4f39bf4e79c0e1bf6fa48c4de34f4c60fc5e9bf60b1cc3d32421f565d0a69", 0x7a, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000340)="6a07e34e5588e55e18005dc5d46ee9622aef815f15b5e5b91d4b9a1157c00791d8647fe4acf2ce7d481fa70b4e804947745eb79a485a510199c2dd6e842688de056eb92d98f6992bfd6f92b3e466663e945302c4f8f55c938375dedfddd27d2c0af2adaba62fe945a0d5529da28288a90f59992c8848b26d5696299fb4f8efeb954aa0bff68e128187f60192fb75b4c9f89076681e695deb42d11a7eab86d34df7433ed148ce310efc83641baa53692c67af1be2e0e85e3174cc7977bfb459062c331e17b2b30149fd043a03ff10b5bfdde7f72ab493732b8b5b0dc161d13f062bb81fcbfbdd4d04c743c2d0a51c4470df14") (async) syz_clone(0x40480, &(0x7f00000002c0)="21117421ba15ebedfb8f920d1f9eea12fe1805e685a0a24fe0ae6f4b400d97fd4d94e6f45eee3f6dc6869243cffb8df4aba4861dec34d3b832d7590b63c92dc3b5be5ba21d7863db9cc502bd3d47fba1d5e2cf638c6d10c47386b5d4f39bf4e79c0e1bf6fa48c4de34f4c60fc5e9bf60b1cc3d32421f565d0a69", 0x7a, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000340)="6a07e34e5588e55e18005dc5d46ee9622aef815f15b5e5b91d4b9a1157c00791d8647fe4acf2ce7d481fa70b4e804947745eb79a485a510199c2dd6e842688de056eb92d98f6992bfd6f92b3e466663e945302c4f8f55c938375dedfddd27d2c0af2adaba62fe945a0d5529da28288a90f59992c8848b26d5696299fb4f8efeb954aa0bff68e128187f60192fb75b4c9f89076681e695deb42d11a7eab86d34df7433ed148ce310efc83641baa53692c67af1be2e0e85e3174cc7977bfb459062c331e17b2b30149fd043a03ff10b5bfdde7f72ab493732b8b5b0dc161d13f062bb81fcbfbdd4d04c743c2d0a51c4470df14") syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="ee"], 0x2c}}, 0x20008000) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="ee"], 0x2c}}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x30, r5, 0x203, 0x70bd2a, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x30, r5, 0x203, 0x70bd2a, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000) sendto$inet(r0, &(0x7f0000000480)="ceaff6c0e2970dc496b3c2ee3e0b0c9baecfc00d0f24bd15fd25744def20642e81fa17890544cedffe3d76e2400cd04c367b1812350593a07d098f1411fa7cc1b7babb247fffeeb42898927dadb4a69ddcd69a221a18978bac2440feea0e5868d36db3a887102a58259da8ac6dee", 0x6e, 0x8001, 0x0, 0x0) setns(r3, 0x24020000) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 58.178904756s ago: executing program 7 (id=1425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) lseek(r3, 0x7, 0x4) write$fb(r3, &(0x7f0000000080)="4c199224e1b448562310e0e32912937a67233e143e48810b426bcea30aabd6d12493b3ef71d57631780e593814eb550209ecf2ef", 0x34) writev(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) 57.87371081s ago: executing program 7 (id=1426): clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x4000000000009, 0xd, 0x1000000000424, 0x2, 0xffffffffffffffff, 0x800000000f423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x7ff, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x40000000, 0x5, 0x7}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x2c044010) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="020b000002006af7d743206856190000"], 0x10}}, 0x20004040) 57.791405532s ago: executing program 36 (id=1426): clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x4000000000009, 0xd, 0x1000000000424, 0x2, 0xffffffffffffffff, 0x800000000f423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x7ff, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x40000000, 0x5, 0x7}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x2c044010) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="020b000002006af7d743206856190000"], 0x10}}, 0x20004040) 37.752055441s ago: executing program 8 (id=1707): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xbced}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x94}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xf}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x80) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x213, 0x70bd26, 0x697, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd9}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x1ff, 0x5, 0x8, 0x0, 0xf3f2, 0x3ff, 0x6, 0x7f]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 37.746011917s ago: executing program 8 (id=1709): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x9, 0x1, '(.%^\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x30}}, 0x24040000) r3 = dup(r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000980)}) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000140)=[{}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000001380)={r6}) r8 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{0x80000000}, {0x80000000}}, {{0x80000000, 0x0}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f0000000200)={{r12, r11, 0x3, [0x6, 0x8cf]}, {r10, r11, 0x1, [0x7ffc, 0x9]}, 0x2, [0x1000, 0x80000000]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000180)={{0x80000000, r7, 0x0, [0x80]}, {r6, r11, 0x1, [0x11c, 0x1]}, 0x4, [0x37, 0xfffffff9]}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="519600"/20, @ANYRES16=r4, @ANYBLOB="200328bd7000fedbdf25020000000900010073797a300000000014000200776732000000000000000000000000001400020073797a6b616c6c657230000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x8891}, 0x24008001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r13 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r13, 0x0) r14 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001600010a00000004e561d4c1449733670000000008020000d37e7891c5936a7b63f12c235db0f8296a1eabfa4d55ce244bbd4b4130a8e739f80a73733b9e70277d430bbacc9d1f4e1d4a735f1446ee68727ff8e6b258576e"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="06109560", @ANYRES16=r9, @ANYRES64=0x0, @ANYRES64=r11], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000000)={0x6, 0x801}) 37.64281493s ago: executing program 8 (id=1712): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x100, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000009c0)="af8d195ac29a", 0x6}], 0x1}}], 0x1, 0x44008090) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x2e, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24040084}, 0x24040084) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, r4, 0x2, 0x30bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6d0f, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80080}, 0x4080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x10000) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) ioctl(r1, 0x8, &(0x7f0000000e00)="eb7bd7b682232712713d41d24f64e96b6f4da0b6e67e0d361149fbaa6374d0d8b97b83bbe8a293ce0a33fc548ad696373a1c57f2fd96bc2f84258a37768ddffdfe0be5dcc51cd9a19cd836e4b0570a0a1ea72312d70e6ce8f8cd7fdeac") r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000ee07000400e000e70014000600626f6e6430000000000000000000000008000500"], 0x38}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)={0x1c, r10, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2000c000) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8c6006bd1cbcfd307d510196271de0f1b351342397b2ce11ded10ac2014cff917529c43a025b5945e867743e59f0410027470d0c07998cd5807f62a2cee318eeab6ee8e1edb7e25c7f5ac869787eb38d9669d59986582f76fc52c7948422372a4808998e5df5c960e4f5c2003a529c5555300398e220ae39a438e19bc0b73dd3a9a12", @ANYRES16=r12, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94) r13 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), r5) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r13, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000007}, 0x40) 37.638934573s ago: executing program 8 (id=1714): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="400100001000010000000000fddbdf25fc0200000000000000000000000000000000000000000000000000000000000040000000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000a000100000000000000000008002300630f0000480001"], 0x140}}, 0x20000000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r1, 0xc0) r2 = socket(0x23, 0x80002, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008000840000000000800174000000004050005000a000000050001000700000005000400000000000900020073513d31000000000d0003006c6973743a736574"], 0x5c}}, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="9a4f722bd749e84e89aaf39b3cfcc2dfa233cb09f115682a52217f965949528038bae01296949f17df9fa17890078fdfa7adf53803ac49a30f2c129600a8a6bf037a7a63d91c369c8bad685fe6e385c9e3e5503da48e89534476e329f0128dc72f7ed66faa13e31fce8cd19ea7bb0dfc4a7817769dfbf5a34e122ae558ec4619405daa00077970cf9f2e016956f9d89b4e893c44d120216882", 0x99}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000200)="6c47179ad132345bf2fd383ea765dfa135d996869188921f49eae058d65fb6a2bb8723a77adcb72677760cdf878f1586434644e274879b801a09278b4fd089e2e68ac205b3d149eb26", 0x49}, {&(0x7f0000000280)="ae3b0d488bcccba9b0c956030ac79e3e7d", 0x11}, {&(0x7f00000002c0)="2744800caaa2fe805a511fb684d42b41df217c3d6ebf536d34777186c62215211fe8a0a1bbe81bbbf76382fa3170c8ec9a80ec96bd06bc4f6aa034a489273543ce172b27787a9938bd32a1fc1dcefeb6ab6b1415b9e89d3b340c210ab285502406b7b2dfbee154f98f01a151199e6db1f2f5ef0b126ef169fd3f901c", 0x7c}], 0x5, &(0x7f0000000440)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1f0}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x79}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x60}, 0x4040810) recvmmsg$unix(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000102, 0x0) 37.573250479s ago: executing program 8 (id=1716): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) symlink(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000240)='./file0\x00') setpgid(0x0, r0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000bc0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') inotify_init() 37.482538142s ago: executing program 8 (id=1717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) (async) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) (async) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getpeername$unix(r4, &(0x7f0000000080), &(0x7f0000000100)=0x6e) 31.020574365s ago: executing program 0 (id=1809): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x6, 0x2, {{0x15, 0x4, 0x3, 0x3, 0x54, 0x65, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@end, @timestamp_addr={0x44, 0x2c, 0x68, 0x1, 0x7, [{@broadcast, 0x1}, {@empty, 0x2}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xffffff7f}, {@multicast1, 0x200}]}, @ssrr={0x89, 0xf, 0x5e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010101]}, @end]}}}}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000140)=""/145, 0x91, 0x20, &(0x7f00000002c0)={0x11, 0x1a, r2, 0x1, 0x7, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000300)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r3, @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x814) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {0x14}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0x4, 0xa5}, {}, {}, @connect={{0x2, 0xff}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xa, {0x3, 0x8}, {0x0, 0x2}, @connect={{0x6, 0x71}, {0x7, 0x80}}}, {0x0, 0x1, 0x0, 0x0, @time, {0x0, 0x21}, {}, @quote={{0x0, 0x2}, 0x3ff}}], 0x70) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000005c0)={0x8, 0x0, {0xffffffffffffff7f, @struct={0xcf, 0xffffffff}, 0x0, 0x9c, 0x6, 0x80, 0x6, 0x9, 0x4c, @struct={0x1ff, 0x96e}, 0x800, 0xfffffff0, [0x2, 0x3, 0x1, 0x200, 0x7, 0x2]}, {0x7ff, @struct={0xe, 0x4}, 0x0, 0xf23, 0x10, 0x28f, 0x9, 0x0, 0x8, @usage=0x268, 0x9, 0x9, [0x8, 0x7, 0x8000000000000000, 0x1, 0x7fff, 0x2]}, {0x64, @usage=0x2, 0x0, 0x7efe28e1, 0x0, 0xf, 0x400, 0x2, 0x4, @usage=0xa5e, 0xfff, 0x0, [0x8, 0xb6, 0x4, 0x33, 0x8, 0x1]}, {0x3, 0x0, 0x8001}}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f00000009c0)={r7, "99b90b4ef4a5b4d64cd72de4956acd07"}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x3}) 30.913440456s ago: executing program 0 (id=1810): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) pipe2$9p(&(0x7f0000000240), 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x5001, &(0x7f0000000340)={0x0, 0x334e, 0x100, 0x3, 0x2fa}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000100)={0xffffff24, 0x7}, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000040)="cb", 0xfffffdef) clock_gettime(0x9, &(0x7f0000000280)) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xc) 30.833276474s ago: executing program 0 (id=1812): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, r1, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xc0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x784b}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e820974}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a8895af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3dd2c9dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12ed854f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7173c1bf}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45e28ba7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x734c39a}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x431c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22f838da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6060}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f4db169}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc594}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c2f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x769b15a2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dd2454c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x978f}]}]}]}, 0xdc}}, 0x1010) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r6, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x71}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r8, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040880}, 0x810) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000700)=0x9) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r9) (async) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r10, 0x208, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r10, 0x208, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xc0, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x74, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffd}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xc0, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x74, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffd}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r8, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x68081}, 0xc004) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/partitions\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r12, 0x8040942d, &(0x7f0000000bc0)) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c40), r9) (async) r13 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c40), r9) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r13, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x798210c2c21a941d) (async) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r13, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x798210c2c21a941d) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x48, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8004) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x48, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8004) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r12, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x58, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6a4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dd}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x600c000}, 0x8000) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r12, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x58, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6a4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dd}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x600c000}, 0x8000) sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x2c, r13, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) sendmsg$NL80211_CMD_DEL_TX_TS(r12, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x20, r6, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) ioctl$NBD_DISCONNECT(r12, 0xab08) (async) ioctl$NBD_DISCONNECT(r12, 0xab08) 30.672286814s ago: executing program 0 (id=1818): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@getqdisc={0x34, 0x26, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4}, {0xfff3, 0xe}, {0xe, 0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x24009090) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x28, r6, 0xb97534d5fe9704cf, 0x0, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x58, 0x3c, 0x107, 0x0, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x2006, 0x0, 0x0, @str='\x80\n'}]}, @generic="0e7b3657782efff49b498735a7fff7eb4001fc5ad040a3874d617551d68ff842754d7392132ed8d763de09b7e7", @nested={0x4, 0x33}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r9 = getpid() r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x3c, r11, 0x1, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30220067a6cfe376870674f52699ca188b5e8b41e6b7a5b09631661600", @ANYRES16=r8, @ANYBLOB="10002cbd7000fcdbdf2501000000000000000841000000140018800000007564703a73797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x80d}, 0x0) 30.134442318s ago: executing program 0 (id=1821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) syz_open_dev$usbfs(0x0, 0x200, 0x102) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_num_supported_adv_sets={{0x7}, {0x8, 0xa}}}}, 0x8) (async) syz_open_dev$usbfs(0x0, 0x7, 0x3501) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x5) 26.513354416s ago: executing program 0 (id=1846): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r3, 0x0, 0x9}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r3, 0x0, 0x5}, 0x18) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r6}) ioctl$TCSETSW(r0, 0x5457, &(0x7f0000000040)={0x0, 0xfffffffd, 0x0, 0xffffffff, 0x3, "a9872c1672d92f052f98a1aa41eda503b5bcf2"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "5f730000a9003f00"}) 26.408579377s ago: executing program 37 (id=1846): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r3, 0x0, 0x9}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r3, 0x0, 0x5}, 0x18) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r6}) ioctl$TCSETSW(r0, 0x5457, &(0x7f0000000040)={0x0, 0xfffffffd, 0x0, 0xffffffff, 0x3, "a9872c1672d92f052f98a1aa41eda503b5bcf2"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "5f730000a9003f00"}) 21.503485453s ago: executing program 38 (id=1717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) (async) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) (async) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getpeername$unix(r4, &(0x7f0000000080), &(0x7f0000000100)=0x6e) 2.342738816s ago: executing program 4 (id=2150): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001880)={&(0x7f00000017c0)=""/138, 0x8a}) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c0007800800084000000000050005000a000000050001fd060000000500020073797a31000000000d0003006c6973743a73657400"/84], 0x54}}, 0x0) (async) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4}) (async) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000080)={0x1, 'syz0\x00'}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x500, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) exit(0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000300)) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003840)=""/271, 0x10f}, {&(0x7f0000000440)=""/80, 0x50}, {&(0x7f0000004500)=""/4093, 0xffd}], 0x3, &(0x7f0000000580)=""/4096, 0x1000}, 0x9}], 0x1, 0x11101, &(0x7f0000000340)) (async) r5 = syz_clone3(&(0x7f0000001700)={0x200, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0xd}, &(0x7f0000001580)=""/129, 0x81, &(0x7f0000001640)=""/87, &(0x7f00000016c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) syz_open_procfs(r5, &(0x7f0000001780)='net/mcfilter\x00') (async) r6 = socket(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) (async) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) (async) setsockopt(r6, 0x1, 0x9, &(0x7f0000000140)="3f14b0f1", 0x4) (async) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') read$FUSE(r7, &(0x7f00000016c0)={0x2020}, 0xfffffce3) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x9, 0xa, 0x4, 0x0, 0x4, {0x0, 0xea60}, {0x1, 0x8, 0x7, 0x82, 0x10, 0x0, "638167a7"}, 0x8, 0x2, {&(0x7f00000018c0)=[{0x8001, 0x7fffffff, {0x0}, 0x1000}, {0x608f, 0x8752, {0x0}, 0xd90b}]}, 0x400}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100081be00000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f7d40400000000001c00128009000100626f6e64000000000c0002800800070007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4042}, 0x0) 2.342253003s ago: executing program 4 (id=2151): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000001880)=""/4096, 0x1000, 0x7) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xe) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007b19a20000000000851000000200000085"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f", 0x15}], 0x1}, 0x20) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) r3 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0xd, 0x0, &(0x7f0000000100)) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'mpc624\x00', [0x4f27, 0x3, 0x3, 0x2, 0x5, 0xcc9, 0xf, 0xb, 0x5, 0x0, 0xefb, 0x2, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a449, 0x3, 0x40000007, 0x9d, 0xcaa7, 0x6, 0x1, 0x4, 0xe69, 0x3c, 0x8, 0x3, 0x0, 0xfffffff8]}) 2.293358817s ago: executing program 4 (id=2152): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) 2.235631941s ago: executing program 4 (id=2153): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e1f, 0xe20, @mcast2, 0x1}, 0x1c) fcntl$lock(r0, 0x26, &(0x7f00000031c0)) (async) fcntl$lock(r0, 0x26, &(0x7f00000031c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000080)={0x7, 0x9f, 0x0, 'queue1\x00', 0x4}) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) (async) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) (async) r4 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r3, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) fcntl$lock(r0, 0x7, &(0x7f0000001080)={0x0, 0x0, 0x2}) (async) fcntl$lock(r0, 0x7, &(0x7f0000001080)={0x0, 0x0, 0x2}) 2.143075012s ago: executing program 4 (id=2154): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000001c0)={0x5, 0xffffffffffffffff, 'id1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="940500000400000061101800000000009500000000000000b2873737721f926a32201e02565cda9025b965f06733439f1c44ec7c37145a316c5b198d9e273e202a78fc5cab8775d94a9a278bb130fefa0259fef0f8a7c044b64969de1015fa70621a2430759428ecf61925aa56f144b9a0e2237aa6c66143be1f3166bfd664ea9a0bf261aea63eed26f8e773608e0db4dfb5d4cb96754c68ad5a7419f0d7ad07c5ffa25601c77f920b4ba7b5dd70cb5d5379e36924aecfdd0b31e09097a416df3dad3da8f10d8ad4fe7b881ca6aac193d41776dd0a7c02489937d59c425c7fe8dd3a6e6dce1503f70b7499efc09b7d27e411"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb9, &(0x7f0000000100)=""/185, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x10}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) bind$netrom(r0, &(0x7f0000000300)={{0x3, @bcast, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 2.14273129s ago: executing program 4 (id=2155): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000a3b9c2c4a4fe18c225a69c2a0011dcf0e2951015d48298ff895ad6b8258d000e0000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000280)={&(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0}], 0x1}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x4, 0x1, 0x0, &(0x7f0000000200), 0x1) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000050) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0xfffff801, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x4}, 0x1c) 1.018174046s ago: executing program 9 (id=2177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x239}]]}, 0x44}}, 0x0) fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0xfffffffffffffc88}}, 0x0) 862.880827ms ago: executing program 9 (id=2178): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) mremap(&(0x7f0000c2a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000a9b000/0x2000)=nil) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x200000000334e87}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 861.415758ms ago: executing program 9 (id=2179): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) fcntl$lock(r0, 0x26, &(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x7fff, 0x2e}) 782.533155ms ago: executing program 9 (id=2180): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r2, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) getsockopt$inet_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20048850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=@newtfilter={0x34, 0x2c, 0xd27, 0x1070bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xb}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x200c8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0xb, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 628.2511ms ago: executing program 9 (id=2181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4008044}, 0x4) (async) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)='erofs\x00', 0x0, 0x0) 552.269315ms ago: executing program 9 (id=2183): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'none\x00', 0x20, 0x8, 0x5b}, 0x2c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) socket(0x2b, 0x80801, 0x1) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x1000000000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r9 = gettid() pause() r10 = syz_open_procfs(r9, &(0x7f0000000180)='wchan\x00') pread64(r10, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@bridge_newvlan={0x18, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r8}}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 431.82368ms ago: executing program 3 (id=2185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 332.024449ms ago: executing program 3 (id=2186): r0 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x9, @raw_data="06233e7bea6ace9303a6aa42c6928974d665a6a5e38a6404523a050d4f9e0ea0722a83e718cf5682c398122fa021036cb2d9eaac27256f38e6542820b6925474bea8a2c329ee4c844643b17481cc2a3e7751f3a0e228e91e711c3f007898fb156a69f69d7c8632f3785959c4ad7569fcaa426ac7a62361529e09133aaff6109db6b6fc7c1516b7428f2d7785cebfc5cc0fcda650917532b647e48c81bb0cbcdfb68127e8c4c9db0f658c3637158b5036178a0de6e921c1ac979008ccb7cf29df4f9c942bf6317af1"}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = memfd_create(&(0x7f0000000140)='\vem\xda\x99[R@M\xfc\xfe\x9b#*\xff', 0x0) write(r2, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x6, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x1c0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5"}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=@newspdinfo={0x4c, 0x24, 0x1, 0x70bd2d, 0x25dfdbfe, 0x689, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008"], 0x178}}, 0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x29}, @fda={0x66646185, 0xffffffffffffffff, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x8}, {0xf}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000001) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$packet(0x11, 0x3, 0x300) 242.701928ms ago: executing program 2 (id=2188): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) (async) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0) (rerun: 32) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000b40)={0x1, 0x0, 0x1, &(0x7f0000000b00)={0x0, "5a54f9e02cb612f2ab8371533b1a289255cf9fdfebfb57089d8a86a476506dd5e4"}}) r4 = dup2(r1, r2) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ce00"/28], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000340), 0xffff, r6}, 0x38) connect$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 190.910449ms ago: executing program 2 (id=2189): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000000)={0x6, 0x801}) 187.110379ms ago: executing program 3 (id=2190): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f014, 0x20009}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bdev\x00', 0x80000, &(0x7f0000000180)='syz\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800015, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000100)='.\x00', &(0x7f00000001c0), 0x800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) 185.701704ms ago: executing program 2 (id=2191): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001cc0), r0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000100)={0x20, r3, 0x1, 0x0, &(0x7f0000000140)=[{}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001a007f"]) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000003880)={'wpan3\x00'}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf0d00000008000100151f1c00000043000d000100000000"], 0xc2}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000800) 77.558598ms ago: executing program 3 (id=2192): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001040)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r2}, 0x20) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'ip6gre0\x00', 0x1}) (async, rerun: 32) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32) sendmmsg(r0, &(0x7f0000000040), 0x400000000000193, 0x40010) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)) 77.176665ms ago: executing program 2 (id=2193): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x6801, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x88c040, 0x59) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x2) 1.758833ms ago: executing program 2 (id=2194): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x804) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0xfffff399}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) lseek(r1, 0x405, 0x1) mount(&(0x7f0000000180)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x1000020, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x4bc, 0x1, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x7}, 0x5, 0xf, 0x1, 0xc33, 0x10, 'syz0\x00', "8fbfbb79573355b678f50c55533a1e607e5d4a86993da296d89278dab1a98ef1", "e26eb984617f4672679fc075daf1013f40612029b779849a4a7183c12ce94180", [{0x1, 0xfe00, {0x1, 0x3ff}}, {0xd, 0x1ff, {0x0, 0x3}}, {0x4, 0x7, {0x1, 0xfffffeff}}, {0xef8, 0x200, {0x0, 0x7}}, {0xa, 0x5, {0x1, 0x5}}, {0x7, 0x1000, {0x0, 0x100}}, {0xe35b, 0x7, {0x3, 0x7}}, {0x512, 0x617, {0x1, 0xf}}, {0x4, 0x8, {0x2, 0x9}}, {0x1, 0x6, {0x1, 0x6}}, {0x3, 0x4, {0x2, 0x6}}, {0x0, 0x400, {0x2, 0xdf4}}, {0xfe00, 0x3, {0x2, 0x400}}, {0x3, 0x9, {0x1, 0xd22}}, {0x24, 0x3, {0x2, 0xb}}, {0x2, 0x1, {0x0, 0x6}}, {0x1, 0x5, {0x3, 0x4}}, {0x3, 0x5, {0x1, 0x5d}}, {0x3, 0x1, {0x3, 0x2}}, {0x5, 0x25f, {0x0, 0x1}}, {0x100, 0x9, {0x1, 0xe24}}, {0x1, 0x2, {0x3, 0x1}}, {0xf, 0x100, {0x3, 0x8001}}, {0x9, 0xb, {0x3, 0xf}}, {0x3, 0x80, {0x2, 0x9}}, {0x3, 0x7f, {0x1, 0x5}}, {0x6, 0x3, {0x0, 0x6}}, {0x6, 0x336, {0x1, 0x3}}, {0x5, 0x1, {0x3, 0x4}}, {0x0, 0x3, {0x3, 0x8}}, {0xb, 0xfff, {0x3, 0x3}}, {0xfffa, 0x4, {0x3, 0x9}}, {0x1ef6, 0x1, {0x0, 0x6}}, {0xffc5, 0x1000, {0x0, 0x8}}, {0x9, 0x2, {0x3, 0xd8}}, {0x9d, 0x4f7, {0x3, 0x9}}, {0x401, 0xd, {0x3, 0x9}}, {0x4, 0x9, {0x2, 0x4}}, {0x9, 0x8, {0x3, 0x1c}}, {0x0, 0xfe27, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x93e}, 0x7, 0x7, 0xffff, 0x2, 0x1c, 'syz0\x00', "65d0e42c4671f6e12bc6c6e255447b81398b23a68dda8db29ab80c17b7422e98", "4f782164e8ec7047e2a8496b9f4f236472eb691e0aa94d549af55f90f9f1a051", [{0x0, 0x240, {0x3, 0x6}}, {0x3ff, 0x8001, {0x2, 0x3ff}}, {0xe3, 0x8, {0x7, 0x2}}, {0x73, 0x200, {0x0, 0x10}}, {0x8000, 0x90, {0x3}}, {0x1ff, 0xffff, {0x3, 0x4b3}}, {0x800, 0x28, {0x1, 0x8}}, {0x1, 0x4, {0x0, 0x5}}, {0x0, 0x5, {0x3, 0x5}}, {0x9, 0x5, {0x0, 0x3}}, {0xe, 0x9, {0x2, 0x5}}, {0xb40, 0x9, {0x3, 0x8a7}}, {0x9, 0x3, {0x2, 0x4}}, {0x0, 0x25, {0x1, 0x80}}, {0x4, 0x8000, {0x0, 0x9}}, {0x9, 0x1, {0x2, 0x1}}, {0x3, 0x86d, {0x3, 0x1}}, {0xcf1d, 0x8, {0x2, 0x3}}, {0x2, 0x3, {0x2, 0x8}}, {0x4, 0x4, {0x2, 0x1}}, {0xfff8, 0x50, {0x0, 0x87a}}, {0x2, 0x60, {0x2}}, {0xab, 0x9, {0x3, 0x6}}, {0x5, 0x7, {0x1, 0x9}}, {0x3, 0x165e, {0x1, 0xffff}}, {0x1, 0xb, {0x3, 0x3ff}}, {0x2, 0x1, {0x50bb1c58a1807e7c, 0x4}}, {0x3, 0x6, {0x1, 0x6}}, {0x7201, 0xe3eb, {0x0, 0x8564}}, {0x5, 0x3, {0x0, 0x5}}, {0x10, 0x6, {0x2, 0x1}}, {0x2, 0xff, {0x2, 0x4}}, {0x800, 0x7f3, {0x0, 0x7fffffff}}, {0x6c, 0x5, {0x2}}, {0x9, 0x0, {0x3, 0x2}}, {0x8, 0x6, {0x1, 0x7fff}}, {0x6, 0x8, {0x2, 0x7ff}}, {0x1b, 0x1, {0x2, 0x4}}, {0x701, 0x800, {0x0, 0x426}}, {0x1, 0x77, {0x3, 0x9}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x10}, 0x20040055) 1.357587ms ago: executing program 3 (id=2195): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c4c53acd5076b876c1d0000007ea60864160af36514000cc008002c00e7ff0200060019c00364bc24", 0x34}, {&(0x7f0000000080)="565077dba869c345854bd354ae736f8692ee8e892845ad6dfa5bac688eb5797116d23bf6f6d07051", 0x28}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40800) pread64(r0, &(0x7f0000000880)=""/4096, 0x1000, 0xa96) 476.616µs ago: executing program 2 (id=2196): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x5) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x4000074, 0x24008094) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x15, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0xffffffff, 0x0, 0x54}, 0x9c) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd7', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r0, @ANYRESOCT=r3, @ANYRESDEC]) syz_fuse_handle_req(r4, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000000000)={&(0x7f0000006400)={0x50, 0xfffffffffffffffe, 0x800000000004, {0x7, 0x29, 0x100001, 0x600, 0x5, 0x1, 0x254, 0x8, 0x0, 0x0, 0x19d, 0xcb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0x1, 0x0, {0x5, 0x40000000000000c, 0x0, 0x80000001, 0xd, 0x1, 0x9ec, 0x35741061, 0x10000, 0xa593e9c1ca988eda, 0x9e7, 0xffffffffffffffff, 0x0, 0x10, 0xe, 0xff0f}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000280)={0x6, 0xe, 0xf, 0x4, 0x681, 0x8000000000000000, 0xa, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x10, 0x5, 0x9, 0x7, 0x5, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x80, 0x7, 0x1, 0x6}) utime(&(0x7f0000000000)='./file0\x00', 0x0) syz_80211_inject_frame(&(0x7f0000000180), 0x0, 0x0) 0s ago: executing program 3 (id=2197): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8000, &(0x7f0000000380)="a1ab08275aa685f982a1365e1a572f69eac23307") r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1a, 0x803, 0x40003) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e00, @loopback}, 0x10) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000280), &(0x7f0000000340)=0x4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000300000800000086dd080088be86ddffff100000000100000000000000001022eb000000002000e0200200000000000000000000000800655800000000"], 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000008", @ANYRES16=r7, @ANYRESOCT=r7, @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="100026bd7000fedbdf2503000000080006001037275ec0759dc5cffd675fae9666c9f312beb2f0f6498bd372ce2ab02a83c4f8aec3f884966bb2640d1abcaa1e8191d7384f74a7c1c48e963c35c3f5a516d0b3b6886f240c521650af4701e408c5e0dc6f5018f6d44e5b50d64e50b1fe5647f22186337bf146622d644c8ad75d2674e1876add3fe8f7b3823eaa8e4f428cb6290c46e5f38dcda577af03ba22c25fef85ebf26e128275a854f95d60caac63cf176fd03e8b2bf98dfbe88beed3661f80e4a1cd671eb5cc6ed3fcb03dd32c9126d5f3924c52a10584c634b5111e29ac47efa33c94dcfbc458238c576d59d3d6f4", @ANYRES32=r9, @ANYBLOB="050033000000000005003500030000000800390007000000"], 0x34}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000010) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000003e000701fefffffffcffffff017c00000400428008000136b13b618004000280"], 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0xa000) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="1736967bbcf0956920900da8cc8a98fac78b65e5895cea84cba986ed1e0019cb85f1bad64878c195b22abbd712457d618c8e1ab8c960f96cd968e13749e9cfe702798860c1dd242a281e3725f7bd1bcc64cafb19180db5e52cce5bd9a4b41529e4a5e83129320c6eb22e41"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4000844) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@deltfilter={0x80, 0x2d, 0x8, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xa, 0xffe0}, {0x3, 0x7}, {0xffff, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xb}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0xfff1}}, @TCA_U32_HASH={0x8, 0x2, 0x7}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffffc0}, @TCA_CHAIN={0x8, 0xb, 0xde}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x40}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40844}, 0x0) kernel console output (not intermixed with test programs): ink: 12 bytes leftover after parsing attributes in process `syz.4.1361'. [ 156.484314][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 156.488093][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1361'. [ 156.528688][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 156.773413][T10971] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 156.784654][T10973] program syz.4.1371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.826841][T10975] netlink: 'syz.3.1372': attribute type 10 has an invalid length. [ 156.831550][T10975] hsr_slave_0: left promiscuous mode [ 156.832917][T10977] 9pnet_virtio: no channels available for device syz [ 157.018589][T10996] netlink: 'syz.4.1379': attribute type 7 has an invalid length. [ 157.077637][T11001] tmpfs: Unknown parameter 's' [ 157.077960][T11000] netlink: 'syz.4.1380': attribute type 1 has an invalid length. [ 157.085217][T11000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.331214][ T5329] Bluetooth: hci1: command 0x0419 tx timeout [ 157.421395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 157.441522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 157.929169][T11033] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=11033 comm=syz.7.1392 [ 158.202860][T11046] geneve1: entered allmulticast mode [ 158.531206][ T6056] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 158.687751][T11093] netlink: 'syz.3.1409': attribute type 1 has an invalid length. [ 159.121115][ T40] kauditd_printk_skb: 10632 callbacks suppressed [ 159.121130][ T40] audit: type=1326 audit(1758495251.441:15539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.4.1405" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3485bc14e5 code=0x50000 [ 159.130904][ T40] audit: type=1326 audit(1758495251.441:15540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.4.1405" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3485b8ec29 code=0x50000 [ 159.139786][ T40] audit: type=1326 audit(1758495251.451:15541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.4.1405" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3485b8ec29 code=0x50000 [ 159.148038][ T40] audit: type=1326 audit(1758495251.451:15542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.4.1405" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3485bc14e5 code=0x50000 [ 159.155693][ T40] audit: type=1326 audit(1758495251.451:15543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.4.1405" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3485b8ec29 code=0x50000 [ 159.163887][ T40] audit: type=1326 audit(1758495251.451:15544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.4.1405" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3485bc14e5 code=0x50000 [ 159.171624][ T40] audit: type=1326 audit(1758495251.451:15545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.4.1405" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3485b8ec29 code=0x50000 [ 159.178980][ T40] audit: type=1326 audit(1758495251.451:15546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.4.1405" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3485bc14e5 code=0x50000 [ 159.186485][ T40] audit: type=1326 audit(1758495251.451:15547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.4.1405" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3485b8ec29 code=0x50000 [ 159.194376][ T40] audit: type=1326 audit(1758495251.451:15548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.4.1405" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3485bc14e5 code=0x50000 [ 159.411126][ T5329] Bluetooth: hci1: command 0x0419 tx timeout [ 159.736482][T11118] xfrm1: entered promiscuous mode [ 159.738649][T11118] xfrm1: entered allmulticast mode [ 159.825622][T11127] loop2: detected capacity change from 0 to 7 [ 159.834573][ T7213] loop2: [ 159.836170][ T7213] loop2: partition table partially beyond EOD, truncated [ 159.843352][T11127] loop2: [ 159.844366][T11127] loop2: partition table partially beyond EOD, truncated [ 159.994813][T11139] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 160.301491][ T6499] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 160.460254][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.463616][ T6499] usb 8-1: Using ep0 maxpacket: 8 [ 160.474475][ T6499] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 160.478046][ T6499] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.484868][ T6499] usb 8-1: Product: syz [ 160.486557][ T6499] usb 8-1: Manufacturer: syz [ 160.488433][ T6499] usb 8-1: SerialNumber: syz [ 160.543246][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.699051][ T5971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.708604][ T5971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.709968][ T6499] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 160.718040][ T5971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.719342][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.722254][ T5971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.726636][ T5971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.800462][T11158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.809092][T11158] kvm: user requested TSC rate below hardware speed [ 160.836166][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.896348][T11155] chnl_net:caif_netlink_parms(): no params data found [ 160.924681][ T9] usb 8-1: USB disconnect, device number 26 [ 160.935985][ T9] usblp0: removed [ 161.027341][T11155] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.030028][T11155] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.034473][T11155] bridge_slave_0: entered allmulticast mode [ 161.037407][T11155] bridge_slave_0: entered promiscuous mode [ 161.060456][T11155] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.065502][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.067851][T11155] bridge_slave_1: entered allmulticast mode [ 161.074346][T11155] bridge_slave_1: entered promiscuous mode [ 161.141832][T11155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.148943][T11155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.174762][ T12] bridge_slave_1: left allmulticast mode [ 161.177154][ T12] bridge_slave_1: left promiscuous mode [ 161.179896][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.195049][ T12] bridge_slave_0: left allmulticast mode [ 161.197398][ T12] bridge_slave_0: left promiscuous mode [ 161.202888][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.551911][T11190] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 161.553480][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.563473][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.568152][ T12] bond0 (unregistering): Released all slaves [ 161.603600][T11155] team0: Port device team_slave_0 added [ 161.610122][T11186] dvmrp8: entered allmulticast mode [ 161.614018][T11155] team0: Port device team_slave_1 added [ 161.669371][T11201] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 161.672172][T11201] overlayfs: missing 'lowerdir' [ 161.698310][T11155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.699082][T11186] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 161.702069][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.703191][T11186] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.715433][T11155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.718378][T11186] vhci_hcd vhci_hcd.0: Device attached [ 161.768800][T11155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.771811][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.783234][T11155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.844291][T11155] hsr_slave_0: entered promiscuous mode [ 161.847906][T11155] hsr_slave_1: entered promiscuous mode [ 161.960197][T11236] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 161.981821][ T59] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 161.990226][ T12] hsr_slave_0: left promiscuous mode [ 161.998227][ T12] hsr_slave_1: left promiscuous mode [ 162.002471][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.007149][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.014856][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.018310][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.057809][ T12] veth1_macvtap: left promiscuous mode [ 162.060220][ T12] veth0_macvtap: left promiscuous mode [ 162.063492][ T12] veth1_vlan: left promiscuous mode [ 162.065819][ T12] veth0_vlan: left promiscuous mode [ 162.111512][ T6056] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 162.281132][ T6056] usb 5-1: Using ep0 maxpacket: 8 [ 162.287842][ T6056] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 162.290935][ T6056] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.294256][ T6056] usb 5-1: Product: syz [ 162.295763][ T6056] usb 5-1: Manufacturer: syz [ 162.297684][ T6056] usb 5-1: SerialNumber: syz [ 162.324445][T11206] vhci_hcd: connection reset by peer [ 162.326639][ T76] vhci_hcd: stop threads [ 162.328066][ T76] vhci_hcd: release socket [ 162.336277][ T76] vhci_hcd: disconnect device [ 162.383479][T11252] __nla_validate_parse: 9 callbacks suppressed [ 162.383493][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1447'. [ 162.520004][ T6056] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 162.732848][ T6016] usb 5-1: USB disconnect, device number 19 [ 162.738274][ T6016] usblp0: removed [ 162.776668][ T5329] Bluetooth: hci1: command tx timeout [ 162.873890][ T12] team0 (unregistering): Port device team_slave_1 removed [ 162.943914][ T12] team0 (unregistering): Port device team_slave_0 removed [ 163.714342][T11261] SELinux: ebitmap: empty map [ 163.717948][T11261] SELinux: failed to load policy [ 163.738115][T11155] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 163.749882][T11155] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 163.759738][T11155] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 163.765950][T11155] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 163.820797][T11155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.824053][T11281] Bluetooth: MGMT ver 1.23 [ 163.830972][T11155] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.845233][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.847534][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.850791][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.853069][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.994263][T11155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.131142][ T40] kauditd_printk_skb: 25378 callbacks suppressed [ 164.131154][ T40] audit: type=1400 audit(1758495256.451:40924): avc: denied { write } for pid=11312 comm="syz.3.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.132121][T11315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1457'. [ 164.133586][ T40] audit: type=1400 audit(1758495256.461:40925): avc: denied { ioctl } for pid=11314 comm="syz.4.1457" path="socket:[45717]" dev="sockfs" ino=45717 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.140095][T11155] veth0_vlan: entered promiscuous mode [ 164.144948][T11155] veth1_vlan: entered promiscuous mode [ 164.162390][ T6057] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 164.176277][T11155] veth0_macvtap: entered promiscuous mode [ 164.179964][T11155] veth1_macvtap: entered promiscuous mode [ 164.187945][ T40] audit: type=1400 audit(1758495256.511:40926): avc: denied { create } for pid=11318 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.190479][T11155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.194360][ T40] audit: type=1400 audit(1758495256.511:40927): avc: denied { ioctl } for pid=11318 comm="syz.3.1459" path="socket:[43946]" dev="sockfs" ino=43946 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.200122][T11155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.205656][ T40] audit: type=1400 audit(1758495256.511:40928): avc: denied { bind } for pid=11318 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.215972][ T40] audit: type=1400 audit(1758495256.521:40929): avc: denied { read write } for pid=11321 comm="syz.4.1460" name="vbi8" dev="devtmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 164.217454][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.224296][ T40] audit: type=1400 audit(1758495256.521:40930): avc: denied { open } for pid=11321 comm="syz.4.1460" path="/dev/vbi8" dev="devtmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 164.224336][ T40] audit: type=1400 audit(1758495256.521:40931): avc: denied { search } for pid=11320 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.228692][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.242816][ T40] audit: type=1400 audit(1758495256.571:40932): avc: denied { remove_name } for pid=11326 comm="rm" name="resolv.conf.eth20.link" dev="tmpfs" ino=6104 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.246175][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.260600][ T40] audit: type=1400 audit(1758495256.581:40933): avc: denied { ioctl } for pid=11321 comm="syz.4.1460" path="/dev/vbi8" dev="devtmpfs" ino=1029 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 164.260977][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.321460][ T1244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.324339][ T1244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.331491][ T6057] usb 5-1: Using ep0 maxpacket: 8 [ 164.343150][T11335] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 164.345478][ T6057] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 164.349718][T11335] openvswitch: netlink: IPv4 frag type 36 is out of range max 2 [ 164.351106][ T6057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.352665][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.354965][ T6057] usb 5-1: Product: syz [ 164.358770][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.358871][ T6057] usb 5-1: Manufacturer: syz [ 164.366137][ T6057] usb 5-1: SerialNumber: syz [ 164.504123][T11355] fuseblk: Bad value for 'rootmode' [ 164.537955][T11361] autofs: Bad value for 'fd' [ 164.547669][T11361] netlink: 'syz.4.1466': attribute type 178 has an invalid length. [ 164.556393][T11361] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 164.562898][T11363] netlink: 'syz.8.1427': attribute type 6 has an invalid length. [ 164.566361][T11363] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1427'. [ 164.570966][T11365] openvswitch: netlink: Tunnel attr 9 has unexpected len 0 expected 2 [ 164.577693][ T6057] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 164.595327][T11363] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.597862][T11363] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.692610][T11374] netlink: 'syz.3.1469': attribute type 1 has an invalid length. [ 164.696119][T11374] bond4: option mode: unable to set because the bond device is up [ 164.780928][ T5990] usb 5-1: USB disconnect, device number 20 [ 164.794442][ T5990] usblp0: removed [ 164.851210][ T5329] Bluetooth: hci1: command tx timeout [ 164.856860][T11403] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1476'. [ 164.874423][T11399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=11399 comm=syz.3.1475 [ 164.920501][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'. [ 164.924816][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'. [ 164.928444][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'. [ 164.935480][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'. [ 164.938978][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'. [ 165.098040][T11438] program syz.4.1483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.128101][T11441] dlm: Unknown command passed to DLM device : 255 [ 165.128101][T11441] [ 165.581831][ T6016] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 165.691112][ T6373] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 165.731351][ T6016] usb 5-1: Using ep0 maxpacket: 16 [ 165.735210][ T6016] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 165.738761][ T6016] usb 5-1: config 0 has no interface number 0 [ 165.743955][ T6016] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 165.747827][ T6016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.751399][ T6016] usb 5-1: Product: syz [ 165.753211][ T6016] usb 5-1: Manufacturer: syz [ 165.755279][ T6016] usb 5-1: SerialNumber: syz [ 165.760732][ T6016] usb 5-1: config 0 descriptor?? [ 165.764795][ T6016] hub 5-1:0.132: bad descriptor, ignoring hub [ 165.767754][ T6016] hub 5-1:0.132: probe with driver hub failed with error -5 [ 165.774795][ T6016] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.132/input/input21 [ 165.877110][ T6373] usb 13-1: config 0 has an invalid interface number: 105 but max is 0 [ 165.880015][ T6373] usb 13-1: config 0 has no interface number 0 [ 165.882309][ T6373] usb 13-1: too many endpoints for config 0 interface 105 altsetting 99: 45, using maximum allowed: 30 [ 165.885954][ T6373] usb 13-1: config 0 interface 105 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 45 [ 165.889731][ T6373] usb 13-1: config 0 interface 105 has no altsetting 0 [ 165.895668][ T6373] usb 13-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 165.898300][ T6373] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.900691][ T6373] usb 13-1: Product: syz [ 165.903203][ T6373] usb 13-1: Manufacturer: syz [ 165.904717][ T6373] usb 13-1: SerialNumber: syz [ 165.908455][ T6373] usb 13-1: config 0 descriptor?? [ 166.116324][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1490'. [ 166.168473][T11453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.174183][T11453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.178100][T11482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=11482 comm=syz.8.1490 [ 166.228893][T11453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.240646][T11453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.452593][ T6052] usb 5-1: USB disconnect, device number 21 [ 166.552458][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 166.702469][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 166.708170][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 166.710980][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.718666][ T24] usb 9-1: Product: syz [ 166.720046][ T24] usb 9-1: Manufacturer: syz [ 166.723769][ T24] usb 9-1: SerialNumber: syz [ 166.741203][ T8247] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 166.756536][T11522] overlayfs: failed to resolve './file0': -2 [ 166.901116][ T8247] usb 8-1: Using ep0 maxpacket: 32 [ 166.904757][ T8247] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 166.907658][ T8247] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 166.910125][ T8247] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 166.912762][ T8247] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.915521][ T8247] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.918251][ T8247] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.922205][ T8247] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 166.924811][ T8247] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.929127][ T8247] usb 8-1: config 0 descriptor?? [ 166.931182][ T5329] Bluetooth: hci1: command tx timeout [ 166.935312][ T24] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 167.081205][ T59] vhci_hcd: vhci_device speed not set [ 167.137087][ T8247] usblp 8-1:0.0: usblp1: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 167.138973][ T24] usb 9-1: USB disconnect, device number 8 [ 167.142127][ T8247] usb 8-1: USB disconnect, device number 27 [ 167.155953][ T24] usblp0: removed [ 167.160229][ T8247] usblp1: removed [ 167.581410][ T24] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 167.761758][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 167.765273][ T24] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 167.768016][ T24] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 167.769391][ T6373] usb 13-1: USB disconnect, device number 2 [ 167.770766][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 167.776621][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.779636][ T24] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 167.782842][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 167.786871][ T24] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 167.789663][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.795978][ T24] usb 8-1: config 0 descriptor?? [ 168.001461][ T24] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 168.006634][ T24] usb 8-1: USB disconnect, device number 28 [ 168.010475][ T24] usblp0: removed [ 168.063186][T11572] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 168.064866][T11574] __nla_validate_parse: 3 callbacks suppressed [ 168.064876][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 168.066567][T11572] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 168.068494][T11574] netlink: 'syz.0.1516': attribute type 30 has an invalid length. [ 168.169405][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1519'. [ 168.370264][T11596] UHID_CREATE from different security context by process 24 (syz.8.1523), this is not allowed. [ 168.377337][ T6373] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 168.380307][ T6373] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 168.383066][ T6373] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 168.386809][ T6373] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 168.389455][ T6373] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 168.391982][ T6373] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 168.394342][ T6373] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 168.396669][ T6373] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 168.399230][ T6373] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 168.402192][ T8247] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 168.404716][ T6373] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 168.413800][ T6373] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.03 Device [syz1] on syz1 [ 168.458458][T11597] fido_id[11597]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 168.544891][T11600] dlm: no locking on control device [ 168.548258][T11600] devpts: Unknown parameter '' [ 168.561181][ T8247] usb 9-1: Using ep0 maxpacket: 8 [ 168.568624][ T8247] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 168.571916][ T8247] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.574490][ T8247] usb 9-1: Product: syz [ 168.575807][ T8247] usb 9-1: Manufacturer: syz [ 168.577302][ T8247] usb 9-1: SerialNumber: syz [ 168.635052][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 168.657616][T11605] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1525'. [ 168.717167][T11616] netlink: 'syz.0.1527': attribute type 29 has an invalid length. [ 168.789233][ T8247] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 168.992546][ T6052] usb 9-1: USB disconnect, device number 9 [ 168.998172][ T6052] usblp0: removed [ 169.011623][ T5329] Bluetooth: hci1: command tx timeout [ 169.481424][ T40] kauditd_printk_skb: 455 callbacks suppressed [ 169.481437][ T40] audit: type=1400 audit(1758495261.811:41389): avc: denied { unmount } for pid=5964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 169.512086][ T40] audit: type=1400 audit(1758495261.841:41390): avc: denied { create } for pid=11634 comm="syz.0.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.519390][ T40] audit: type=1400 audit(1758495261.841:41391): avc: denied { read write } for pid=11634 comm="syz.0.1532" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 169.564903][ T40] audit: type=1400 audit(1758495261.891:41392): avc: denied { create } for pid=11636 comm="syz.4.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.574863][ T40] audit: type=1400 audit(1758495261.891:41393): avc: denied { write } for pid=11636 comm="syz.4.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.584503][ T40] audit: type=1400 audit(1758495261.891:41394): avc: denied { read } for pid=11636 comm="syz.4.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.593439][ T40] audit: type=1400 audit(1758495261.891:41395): avc: denied { create } for pid=11636 comm="syz.4.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.601549][ T40] audit: type=1400 audit(1758495261.891:41396): avc: denied { bind } for pid=11636 comm="syz.4.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.612309][ T40] audit: type=1400 audit(1758495261.891:41397): avc: denied { listen } for pid=11636 comm="syz.4.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.612535][T11639] IPv6: Can't replace route, no match found [ 169.620328][ T40] audit: type=1400 audit(1758495261.891:41398): avc: denied { connect } for pid=11636 comm="syz.4.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.688339][T11645] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 169.692488][T11645] SELinux: failed to load policy [ 169.774044][T11651] blk_print_req_error: 23 callbacks suppressed [ 169.774062][T11651] I/O error, dev loop3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.785287][T11651] qnx4: unable to read the superblock [ 169.814558][T11655] syz.4.1539 (11655) used obsolete PPPIOCDETACH ioctl [ 170.081168][ T6052] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 170.117993][T11684] netlink: 'syz.4.1551': attribute type 32 has an invalid length. [ 170.129011][T11681] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 170.133549][T11681] program syz.0.1550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.194235][T11697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11697 comm=syz.0.1553 [ 170.196355][T11698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1553'. [ 170.241338][ T6052] usb 8-1: Using ep0 maxpacket: 8 [ 170.247292][ T6052] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 170.251033][ T6052] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.254736][ T6052] usb 8-1: Product: syz [ 170.256524][ T6052] usb 8-1: Manufacturer: syz [ 170.258505][ T6052] usb 8-1: SerialNumber: syz [ 170.263769][T11706] netlink: 'syz.0.1554': attribute type 1 has an invalid length. [ 170.290662][T11706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.335750][T11706] bond2: (slave veth7): Enslaving as an active interface with a down link [ 170.354107][T11706] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.357736][T11706] bond2: (slave team0): making interface the new active one [ 170.360787][T11706] team0: entered promiscuous mode [ 170.362731][T11706] team_slave_1: entered promiscuous mode [ 170.364877][T11706] bond2: (slave team0): Enslaving as an active interface with an up link [ 170.471008][ T6052] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 170.552105][T11719] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 170.725337][ C2] usblp0: nonzero write bulk status received: -71 [ 170.725723][ T8247] usb 8-1: USB disconnect, device number 29 [ 170.734817][ T8247] usblp0: removed [ 170.811213][ T61] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 170.971715][ T61] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 170.974991][ T61] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.977805][ T61] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.981578][ T61] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.984342][ T61] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.987086][ T61] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.990546][ T61] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.993735][ T61] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.996480][ T61] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.999805][ T61] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.002720][ T61] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.005793][ T61] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.009104][ T61] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.013157][ T61] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.015837][ T61] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.019132][ T61] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.023975][ T61] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.026758][ T61] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.030096][ T61] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.033128][ T61] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.035876][ T61] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.039168][ T61] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.042073][ T61] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 171.044902][ T61] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 171.048882][ T61] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.054362][ T61] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 171.057935][ T61] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 171.061320][ T61] usb 5-1: Product: syz [ 171.062999][ T61] usb 5-1: Manufacturer: syz [ 171.064888][ T61] usb 5-1: SerialNumber: syz [ 171.070150][ T61] usb 5-1: config 0 descriptor?? [ 171.075599][ T61] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 171.193451][T11726] netlink: 'syz.4.1559': attribute type 21 has an invalid length. [ 171.195896][T11726] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.275310][ T61] usb 5-1: USB disconnect, device number 22 [ 171.282455][ T61] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 171.910276][T11768] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 172.012665][T11777] netlink: 'syz.3.1574': attribute type 1 has an invalid length. [ 172.137709][T11783] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 172.142420][T11783] qnx6: wrong signature (magic) in superblock #1. [ 172.144983][T11783] qnx6: unable to read the first superblock [ 172.386767][T11782] cgroup: fork rejected by pids controller in /syz8 [ 172.585457][T11857] new mount options do not match the existing superblock, will be ignored [ 172.590698][T11856] syzkaller0: refused to change device tx_queue_len [ 172.878839][T11780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.932317][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.935645][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.022478][T11901] usb usb8: usbfs: process 11901 (syz.4.1595) did not claim interface 0 before use [ 173.027993][T11901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1595'. [ 173.048502][T11904] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.054294][T11904] FAT-fs (loop3): unable to read boot sector [ 173.121624][ T6052] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 173.249149][T11924] 9pnet_virtio: no channels available for device syz [ 173.281723][ T6052] usb 5-1: Using ep0 maxpacket: 8 [ 173.290488][ T6052] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 173.293892][ T6052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.297401][ T6052] usb 5-1: Product: syz [ 173.298768][ T6052] usb 5-1: Manufacturer: syz [ 173.300238][ T6052] usb 5-1: SerialNumber: syz [ 173.491175][T11511] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 173.507010][ T6052] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 173.651209][T11511] usb 13-1: Using ep0 maxpacket: 8 [ 173.654586][T11511] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 173.658045][T11511] usb 13-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 173.661351][T11511] usb 13-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 173.666635][T11511] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.669472][T11511] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.672556][T11511] usb 13-1: Product: 볁ᅉ簍핈ꍉ굨홶栃췇䀯㭏軿笲㎚ۖ曻罻㓍솭錢칮岰킓寠׋盜鮢랼휃흵ᗲ宓ၺ쿾잞覺䯋衮腬ꮅᤥ쿨꿀䧿鞽 [ 173.678605][T11511] usb 13-1: Manufacturer: Ѕ [ 173.680067][T11511] usb 13-1: SerialNumber: 䘀痁ꜻ쵩ὶℳḋ憱唡噡佟拁ﲴ櫲⹦激擳跞雩눗࡝셫Ⱐ廠켬훲別ూ便టﷹе腏᪫펀鮩ᬉ㼷ꤚ晌鯔叡訋忐鋲㐌ᝧ [ 173.760185][ C1] usblp0: nonzero write bulk status received: -71 [ 173.763361][ T8247] usb 5-1: USB disconnect, device number 23 [ 173.767803][ T8247] usblp0: removed [ 174.415108][T11939] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1608'. [ 174.420847][T11939] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1608'. [ 174.613062][ T40] kauditd_printk_skb: 278 callbacks suppressed [ 174.613074][ T40] audit: type=1400 audit(1758495266.941:41677): avc: denied { read } for pid=11943 comm="syz.0.1609" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.622431][ T40] audit: type=1400 audit(1758495266.941:41678): avc: denied { open } for pid=11943 comm="syz.0.1609" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.623447][T11944] binder: 11943:11944 ioctl c020aa08 2000000002c0 returned -22 [ 174.629873][ T40] audit: type=1400 audit(1758495266.941:41679): avc: denied { ioctl } for pid=11943 comm="syz.0.1609" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.640393][ T40] audit: type=1400 audit(1758495266.941:41680): avc: denied { set_context_mgr } for pid=11943 comm="syz.0.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 174.646677][ T40] audit: type=1400 audit(1758495266.941:41681): avc: denied { prog_load } for pid=11943 comm="syz.0.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 174.652476][ T40] audit: type=1400 audit(1758495266.941:41682): avc: denied { bpf } for pid=11943 comm="syz.0.1609" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.658829][ T40] audit: type=1400 audit(1758495266.941:41683): avc: denied { perfmon } for pid=11943 comm="syz.0.1609" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.665313][ T40] audit: type=1400 audit(1758495266.941:41684): avc: denied { map } for pid=11943 comm="syz.0.1609" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 174.672590][ T40] audit: type=1400 audit(1758495266.941:41685): avc: denied { call } for pid=11943 comm="syz.0.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 174.678467][ T40] audit: type=1400 audit(1758495266.941:41686): avc: denied { transfer } for pid=11943 comm="syz.0.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 175.411250][ T5329] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 175.663114][T11968] FAT-fs (sr0): bogus number of reserved sectors [ 175.665350][T11968] FAT-fs (sr0): Can't find a valid FAT filesystem [ 175.677693][T11970] FAT-fs (sr0): bogus number of reserved sectors [ 175.679682][T11970] FAT-fs (sr0): Can't find a valid FAT filesystem [ 175.739954][T11983] nft_compat: unsupported protocol 0 [ 175.756048][T11986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1618'. [ 175.759143][T11983] random: crng reseeded on system resumption [ 175.843007][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'. [ 175.846053][T11989] IPVS: Unknown mcast interface: vcan0 [ 176.270584][T11511] cdc_ncm 13-1:1.0: bind() failure [ 176.277493][T11511] cdc_ncm 13-1:1.1: CDC Union missing and no IAD found [ 176.279633][T11511] cdc_ncm 13-1:1.1: bind() failure [ 176.289422][T11511] usb 13-1: USB disconnect, device number 3 [ 176.645155][T12030] binder: 12029:12030 ioctl 4018620d 0 returned -22 [ 176.691241][T11511] usb 13-1: new full-speed USB device number 4 using dummy_hcd [ 176.875892][T11511] usb 13-1: unable to get BOS descriptor or descriptor too short [ 176.879626][T11511] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 176.882166][T11511] usb 13-1: can't read configurations, error -71 [ 177.005105][T12057] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3919364976 (501678716928 ns) > initial count (201147751424 ns). Using initial count to start timer. [ 177.275377][T12073] random: crng reseeded on system resumption [ 177.345797][T12075] netlink: 'syz.0.1640': attribute type 16 has an invalid length. [ 177.348861][T12075] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1640'. [ 177.422850][T12078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1640'. [ 177.573905][T12088] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1643'. [ 177.577078][T12088] netem: unknown loss type 12 [ 177.579979][T12088] netem: change failed [ 177.595656][T12096] ieee802154 phy1 wpan1: encryption failed: -22 [ 177.629400][T12100] overlayfs: failed to resolve './file1': -2 [ 177.632969][T12101] fuse: Unknown parameter 'g' [ 177.634877][T12101] fuse: Unknown parameter 'Kt' [ 177.645993][T12101] qnx4: no qnx4 filesystem (no root dir). [ 177.652488][T12101] pipefs: Unknown parameter 'discard' [ 177.694103][T12103] random: crng reseeded on system resumption [ 177.725969][T12105] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 177.729669][T12105] cramfs: wrong magic [ 177.760957][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1652'. [ 177.788824][T12112] bond1 (unregistering): Released all slaves [ 177.851255][ T59] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 178.006076][ T59] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 178.008652][ T59] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 178.012450][ T59] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.016730][ T59] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 178.019679][ T59] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 178.022124][T12132] netlink: set zone limit has 4 unknown bytes [ 178.023224][ T59] usb 5-1: Product: syz [ 178.025769][ T59] usb 5-1: Manufacturer: syz [ 178.027359][ T59] usb 5-1: SerialNumber: syz [ 178.030530][ T59] usb 5-1: config 0 descriptor?? [ 178.042066][ T59] hub 5-1:0.0: bad descriptor, ignoring hub [ 178.044055][ T59] hub 5-1:0.0: probe with driver hub failed with error -5 [ 178.048245][ T59] usb 5-1: selecting invalid altsetting 0 [ 178.066085][T12122] team0: entered promiscuous mode [ 178.246251][T12156] trusted_key: encrypted_key: hex blob is missing [ 178.462719][ T8247] IPVS: starting estimator thread 0... [ 178.472133][T12177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.571709][T12179] IPVS: using max 41 ests per chain, 98400 per kthread [ 178.626530][ T5971] Bluetooth: hci1: unexpected event for opcode 0x0c13 [ 178.842355][T12201] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.864509][T12204] nft_compat: unsupported protocol 0 [ 178.876062][T12204] random: crng reseeded on system resumption [ 178.998620][T12210] netlink: 'syz.8.1681': attribute type 2 has an invalid length. [ 179.001249][T12210] netlink: 'syz.8.1681': attribute type 1 has an invalid length. [ 179.168260][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1684'. [ 179.266925][T12227] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1687'. [ 179.401320][T12233] nft_compat: unsupported protocol 0 [ 179.633879][ T40] kauditd_printk_skb: 390 callbacks suppressed [ 179.633897][ T40] audit: type=1400 audit(1758495271.961:42077): avc: denied { write } for pid=12243 comm="syz.8.1693" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.696673][ T40] audit: type=1400 audit(1758495272.021:42078): avc: denied { create } for pid=12245 comm="syz.8.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 179.701749][T12246] netlink: 'syz.8.1694': attribute type 21 has an invalid length. [ 179.707751][T12246] __nla_validate_parse: 1 callbacks suppressed [ 179.707763][T12246] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1694'. [ 179.717188][ T40] audit: type=1400 audit(1758495272.041:42079): avc: denied { create } for pid=12245 comm="syz.8.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 179.731203][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 179.816927][ T40] audit: type=1400 audit(1758495272.141:42080): avc: denied { map_create } for pid=12247 comm="syz.8.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.824775][ T40] audit: type=1400 audit(1758495272.141:42081): avc: denied { bpf } for pid=12247 comm="syz.8.1695" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.832442][ T40] audit: type=1400 audit(1758495272.141:42082): avc: denied { prog_load } for pid=12247 comm="syz.8.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.838347][ T40] audit: type=1400 audit(1758495272.141:42083): avc: denied { perfmon } for pid=12247 comm="syz.8.1695" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.845328][ T40] audit: type=1400 audit(1758495272.141:42084): avc: denied { prog_run } for pid=12247 comm="syz.8.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.884630][ T10] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 179.888758][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.892648][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.896532][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 179.899813][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.905080][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.909105][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 179.913310][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.916892][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.920431][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 179.924410][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.927470][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.931780][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 179.935045][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.938324][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.942702][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 179.945786][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.949320][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.953359][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 179.956650][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.959817][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.963591][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 179.967234][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.970168][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.974447][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 179.978689][ T10] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 179.981781][ T10] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 179.985315][ T10] usb 9-1: Product: syz [ 179.986759][ T10] usb 9-1: Manufacturer: syz [ 179.988639][ T10] usb 9-1: SerialNumber: syz [ 179.996680][ T10] usb 9-1: config 0 descriptor?? [ 180.005966][ T10] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 180.035368][ T40] audit: type=1400 audit(1758495272.361:42085): avc: denied { allowed } for pid=12252 comm="syz.8.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 180.045373][ T40] audit: type=1400 audit(1758495272.361:42086): avc: denied { create } for pid=12252 comm="syz.8.1696" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 180.131378][T12257] netlink: 'syz.3.1697': attribute type 29 has an invalid length. [ 180.134471][T12257] netlink: 'syz.3.1697': attribute type 29 has an invalid length. [ 180.143661][T12259] nft_compat: unsupported protocol 0 [ 180.148506][T12260] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1697'. [ 180.203556][ T10] usb 9-1: USB disconnect, device number 10 [ 180.206733][ T10] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 180.245816][T12263] program syz.3.1699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.251367][T12263] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1699'. [ 180.255052][T12263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1699'. [ 180.286090][T12265] tmpfs: Bad value for 'huge' [ 180.342234][T12271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.345342][T12271] openvswitch: netlink: EtherType 0 is less than min 600 [ 180.409318][T12276] netlink: 'syz.3.1704': attribute type 17 has an invalid length. [ 180.445447][T12279] dlm: no local IP address has been set [ 180.447595][T12279] dlm: cannot start dlm midcomms -107 [ 180.507772][T12289] nft_compat: unsupported protocol 0 [ 180.567689][T12292] fuse: root generation should be zero [ 180.820511][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'. [ 180.823473][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1718'. [ 180.826298][T12309] netlink: 'syz.3.1718': attribute type 11 has an invalid length. [ 180.981959][T12316] nft_compat: unsupported protocol 0 [ 180.992752][T12316] random: crng reseeded on system resumption [ 181.019863][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1723'. [ 181.025684][T12320] batadv_slave_0: entered promiscuous mode [ 181.028259][T12320] batadv_slave_1: entered promiscuous mode [ 181.030895][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.034320][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.037417][T12320] debugfs: 'hsr1' already exists in 'hsr' [ 181.039232][T12320] Cannot create hsr debugfs directory [ 181.063522][T12324] delete_channel: no stack [ 181.064896][T12324] delete_channel: no stack [ 181.093687][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1726'. [ 181.471354][ T1206] team0: left promiscuous mode [ 181.473303][ T1206] team_slave_1: left promiscuous mode [ 181.525628][ T59] usb 5-1: USB disconnect, device number 24 [ 181.745452][T12340] netlink: 'syz.0.1729': attribute type 3 has an invalid length. [ 181.748591][T12340] netlink: 'syz.0.1729': attribute type 3 has an invalid length. [ 181.788883][T12344] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1730'. [ 181.952985][T12354] input input24: cannot allocate more than FF_MAX_EFFECTS effects [ 181.956150][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1734'. [ 181.958397][T12352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.959483][T12356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.021208][T12361] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2567 sclass=netlink_tcpdiag_socket pid=12361 comm=syz.0.1735 [ 182.021208][T12362] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2567 sclass=netlink_tcpdiag_socket pid=12362 comm=syz.0.1735 [ 182.023961][T12362] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12362 comm=syz.0.1735 [ 182.123690][T12367] nft_compat: unsupported protocol 0 [ 182.136417][T12367] random: crng reseeded on system resumption [ 182.498598][T12383] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 183.015810][T12391] cgroup: fork rejected by pids controller in /syz4 [ 183.196538][T12425] ALSA: seq fatal error: cannot create timer (-22) [ 183.265913][T12435] nbd: couldn't find a device at index -1605786504 [ 183.289308][T12437] vxcan1: tx address claim with dest, not broadcast [ 183.660238][T12449] [U]  [ 183.739023][T12454] netlink: 'syz.4.1758': attribute type 4 has an invalid length. [ 183.833683][T12462] 9pnet: Could not find request transport: vi [ 183.852975][T12464] tmpfs: Unknown parameter 'usrquotaS@' [ 184.194893][T12480] ip6_vti0: entered promiscuous mode [ 184.196644][T12480] ip6_vti0: entered allmulticast mode [ 184.236191][T12485] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.328887][T12494] 9pnet_fd: Insufficient options for proto=fd [ 184.374799][T12498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.433918][T12506] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.438079][T12506] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 184.738827][ T40] kauditd_printk_skb: 336 callbacks suppressed [ 184.738838][ T40] audit: type=1400 audit(1758495277.061:42423): avc: denied { read write } for pid=12521 comm="syz.3.1777" name="vbi2" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 184.750100][ T40] audit: type=1400 audit(1758495277.061:42424): avc: denied { open } for pid=12521 comm="syz.3.1777" path="/dev/vbi2" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 184.759084][ T40] audit: type=1400 audit(1758495277.061:42425): avc: denied { prog_load } for pid=12521 comm="syz.3.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 184.767327][ T40] audit: type=1400 audit(1758495277.061:42426): avc: denied { bpf } for pid=12521 comm="syz.3.1777" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.774474][ T40] audit: type=1400 audit(1758495277.061:42427): avc: denied { perfmon } for pid=12521 comm="syz.3.1777" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.774506][ T40] audit: type=1400 audit(1758495277.061:42428): avc: denied { write } for pid=12521 comm="syz.3.1777" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 184.774528][ T40] audit: type=1400 audit(1758495277.081:42429): avc: denied { mounton } for pid=12521 comm="syz.3.1777" path="/proc/1459/task" dev="proc" ino=51711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 184.774549][ T40] audit: type=1400 audit(1758495277.081:42430): avc: denied { mount } for pid=12521 comm="syz.3.1777" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 184.798986][ T40] audit: type=1400 audit(1758495277.121:42431): avc: denied { create } for pid=12529 comm="syz.3.1779" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 184.814158][ T40] audit: type=1400 audit(1758495277.121:42432): avc: denied { ioctl } for pid=12529 comm="syz.3.1779" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=51132 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 184.840164][T12530] binder_alloc: 12529: pid 12529 spamming oneway? 1 buffers allocated for a total size of 4096 [ 184.859712][T12533] __nla_validate_parse: 10 callbacks suppressed [ 184.859728][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1780'. [ 184.881767][T12533] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1780'. [ 184.981417][T12539] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 184.983945][T12539] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 184.987906][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1782'. [ 184.991922][T12539] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 184.998575][T12535] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1781'. [ 185.243991][T12541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1783'. [ 185.780932][T12547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12547 comm=syz.3.1785 [ 185.796504][T12549] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.800096][T12549] befs: (loop4): unable to read superblock [ 186.113085][T12578] gfs2: not a GFS2 filesystem [ 186.172735][T12579] 9pnet_fd: p9_fd_create_unix (12579): problem connecting socket: ./cgroup: -111 [ 186.524247][T12596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1798'. [ 186.570697][T12592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1797'. [ 187.164909][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1804'. [ 187.255393][T12631] bond0: (slave dummy0): Releasing backup interface [ 187.265262][T12631] batman_adv: batadv0: Adding interface: dummy0 [ 187.267869][T12631] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.276379][T12635] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 187.278022][T12631] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 187.280386][T12635] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.290145][T12635] vhci_hcd vhci_hcd.0: Device attached [ 187.293415][T12637] usbip_core: unknown command [ 187.295528][T12637] vhci_hcd: unknown pdu 0 [ 187.297401][T12637] usbip_core: unknown command [ 187.299843][ T106] vhci_hcd: stop threads [ 187.302370][ T106] vhci_hcd: release socket [ 187.304156][ T106] vhci_hcd: disconnect device [ 187.448499][T12652] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1813'. [ 187.470823][T12652] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 187.513294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 187.532283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 187.538336][T12666] geneve3: entered promiscuous mode [ 187.540564][T12666] geneve3: entered allmulticast mode [ 187.547040][ T1244] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 187.550677][ T1244] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 187.554890][ T1244] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 187.558411][ T1244] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 187.620273][T12671] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1818'. [ 187.659543][T12671] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.664598][T12671] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.753112][T12671] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.756531][T12671] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.840865][T12671] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.845483][T12671] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.861127][ T10] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 187.921015][T12671] bond0: (slave netdevsim0): Releasing backup interface [ 187.926728][T12671] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.930978][T12671] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.009821][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.013107][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.024087][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.027584][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.037593][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.040214][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.047613][ T60] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.050150][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.087376][ T10] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 188.089868][ T10] usb 9-1: can't read configurations, error -71 [ 188.993897][T12702] 9pnet_virtio: no channels available for device syz [ 190.085484][T12714] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.089880][ T40] kauditd_printk_skb: 187 callbacks suppressed [ 190.089890][ T40] audit: type=1400 audit(1758495282.411:42620): avc: denied { create } for pid=12713 comm="syz.4.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.197714][ T40] audit: type=1400 audit(1758495282.521:42621): avc: denied { allowed } for pid=12715 comm="syz.4.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 190.204018][ T40] audit: type=1400 audit(1758495282.521:42622): avc: denied { create } for pid=12715 comm="syz.4.1832" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 190.205345][T12717] tipc: Failed to remove unknown binding: 66,1,1/0:2614205121/2614205123 [ 190.210416][ T40] audit: type=1400 audit(1758495282.521:42623): avc: denied { map } for pid=12715 comm="syz.4.1832" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 190.210443][ T40] audit: type=1400 audit(1758495282.521:42624): avc: denied { read write } for pid=12715 comm="syz.4.1832" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 190.213536][T12717] tipc: Failed to remove unknown binding: 66,1,1/0:2614205121/2614205123 [ 190.231127][ T40] audit: type=1400 audit(1758495282.531:42625): avc: denied { create } for pid=12715 comm="syz.4.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.237247][ T40] audit: type=1400 audit(1758495282.531:42626): avc: denied { bind } for pid=12715 comm="syz.4.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.243434][ T40] audit: type=1400 audit(1758495282.531:42627): avc: denied { setopt } for pid=12715 comm="syz.4.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.683038][ T40] audit: type=1400 audit(1758495283.011:42628): avc: denied { read append } for pid=12719 comm="syz.3.1833" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 190.691380][ T40] audit: type=1400 audit(1758495283.011:42629): avc: denied { open } for pid=12719 comm="syz.3.1833" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 191.101441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 191.206262][T12740] SELinux: failed to load policy [ 191.535896][T12752] overlayfs: failed to resolve './file0': -2 [ 191.923497][T12776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1850'. [ 191.927231][T12776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1850'. [ 191.985993][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1852'. [ 191.989234][T12783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1852'. [ 192.024996][ T5972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.028526][ T5972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.033386][ T5972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.036595][ T5972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.040204][ T5972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.140707][T12787] chnl_net:caif_netlink_parms(): no params data found [ 192.206355][T12787] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.208661][T12787] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.211228][T12787] bridge_slave_0: entered allmulticast mode [ 192.211492][T12799] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1854'. [ 192.214291][T12787] bridge_slave_0: entered promiscuous mode [ 192.224496][T12787] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.226788][T12787] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.229046][T12787] bridge_slave_1: entered allmulticast mode [ 192.232285][T12787] bridge_slave_1: entered promiscuous mode [ 192.269724][T12787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.275724][T12787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.318883][T12787] team0: Port device team_slave_0 added [ 192.322650][T12787] team0: Port device team_slave_1 added [ 192.357699][T12787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.359924][T12787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.369650][T12787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.374492][T12787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.376663][T12787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.385952][T12787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.426085][T12787] hsr_slave_0: entered promiscuous mode [ 192.428290][T12787] hsr_slave_1: entered promiscuous mode [ 192.430308][T12787] debugfs: 'hsr0' already exists in 'hsr' [ 192.432711][T12787] Cannot create hsr debugfs directory [ 192.542367][T12824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12824 comm=syz.3.1862 [ 192.562481][T12787] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 192.566433][T12787] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 192.570357][T12787] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 192.574468][T12787] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 192.589977][T12787] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.592247][T12787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.594700][T12787] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.596905][T12787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.600220][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1862'. [ 192.642785][T12787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.653318][ T1244] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.658862][ T1244] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.680122][T12787] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.688656][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.691165][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.697753][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.700746][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.830192][T12787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.008108][T12787] veth0_vlan: entered promiscuous mode [ 193.013931][T12787] veth1_vlan: entered promiscuous mode [ 193.034070][T12787] veth0_macvtap: entered promiscuous mode [ 193.038374][T12787] veth1_macvtap: entered promiscuous mode [ 193.052846][T12787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.062115][T12787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.069075][ T1144] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.072141][ T1144] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.076342][ T1144] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.079183][ T1144] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.118265][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.122780][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.134814][ T1244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.137285][ T1244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.234937][T12850] IPVS: persistence engine module ip_vs_pe_s not found [ 193.398549][T12862] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 193.400830][T12862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.409195][T12862] vhci_hcd vhci_hcd.0: Device attached [ 193.416747][T12863] vhci_hcd: cannot find the pending unlink 1023 [ 193.483540][T12863] vhci_hcd: connection closed [ 193.483803][ T60] vhci_hcd: stop threads [ 193.486788][ T60] vhci_hcd: release socket [ 193.488224][ T60] vhci_hcd: disconnect device [ 193.575814][T12867] wg2: entered promiscuous mode [ 193.577408][T12867] wg2: entered allmulticast mode [ 194.036913][T12871] tipc: Started in network mode [ 194.039123][T12871] tipc: Node identity 4adc6d7adc6a, cluster identity 4711 [ 194.043358][T12871] tipc: Enabled bearer , priority 0 [ 194.046976][T12871] syzkaller0: entered promiscuous mode [ 194.049283][T12871] syzkaller0: entered allmulticast mode [ 194.056074][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.061980][ T5971] Bluetooth: hci0: command tx timeout [ 194.076628][T12871] tipc: Resetting bearer [ 194.135988][T12870] tipc: Resetting bearer [ 194.147125][T12870] tipc: Disabling bearer [ 194.387853][T12881] veth0_vlan: left promiscuous mode [ 194.422005][T12882] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 194.422126][T12879] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 194.424651][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1873'. [ 194.429089][T12882] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 194.432245][T12882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.479532][T12885] PM: Enabling pm_trace changes system date and time during resume. [ 194.479532][T12885] PM: Correct system time has to be restored manually after resume. [ 194.485019][T12885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12885 comm=syz.9.1875 [ 194.489114][T12885] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1875'. [ 194.492229][T12885] netlink: 'syz.9.1875': attribute type 7 has an invalid length. [ 194.494660][T12885] netlink: 'syz.9.1875': attribute type 8 has an invalid length. [ 194.497050][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1875'. [ 194.500429][T12885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12885 comm=syz.9.1875 [ 194.530880][T12889] new mount options do not match the existing superblock, will be ignored [ 194.538650][T12889] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 194.580600][T12893] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1879'. [ 194.667246][T12901] overlayfs: missing 'lowerdir' [ 194.736555][T12905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.098867][ T40] kauditd_printk_skb: 156 callbacks suppressed [ 195.098877][ T40] audit: type=1400 audit(1758495287.421:42786): avc: denied { setopt } for pid=12909 comm="syz.3.1886" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 195.125735][ T40] audit: type=1400 audit(1758495287.451:42787): avc: denied { create } for pid=12911 comm="syz.3.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 195.126057][T12912] : renamed from macvlan1 [ 195.133307][ T40] audit: type=1400 audit(1758495287.451:42788): avc: denied { ioctl } for pid=12911 comm="syz.3.1887" path="socket:[54035]" dev="sockfs" ino=54035 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 195.168805][ T40] audit: type=1400 audit(1758495287.491:42789): avc: denied { create } for pid=12915 comm="syz.3.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.175077][ T40] audit: type=1400 audit(1758495287.491:42790): avc: denied { ioctl } for pid=12915 comm="syz.3.1888" path="socket:[56386]" dev="sockfs" ino=56386 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.182783][ T40] audit: type=1400 audit(1758495287.491:42791): avc: denied { bind } for pid=12915 comm="syz.3.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.188637][ T40] audit: type=1400 audit(1758495287.501:42792): avc: denied { setopt } for pid=12915 comm="syz.3.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.194846][ T40] audit: type=1400 audit(1758495287.501:42793): avc: denied { write } for pid=12915 comm="syz.3.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.253572][ T40] audit: type=1400 audit(1758495287.581:42794): avc: denied { read } for pid=12917 comm="syz.3.1889" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 195.260460][ T40] audit: type=1400 audit(1758495287.581:42795): avc: denied { open } for pid=12917 comm="syz.3.1889" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 195.901296][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 196.062590][ T10] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.065995][ T10] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 196.068853][ T10] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 196.072655][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.075373][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.081860][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.120351][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.132101][ T5971] Bluetooth: hci0: command tx timeout [ 196.134084][ T10] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 196.284860][ T8247] usb 9-1: USB disconnect, device number 13 [ 196.892225][ T5972] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.895252][ T5972] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.898177][ T5972] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.903097][ T5972] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.906569][ T5972] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.069856][T12927] chnl_net:caif_netlink_parms(): no params data found [ 197.156997][T12927] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.159298][T12927] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.163522][T12927] bridge_slave_0: entered allmulticast mode [ 197.166343][T12927] bridge_slave_0: entered promiscuous mode [ 197.171381][T12927] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.173682][T12927] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.176024][T12927] bridge_slave_1: entered allmulticast mode [ 197.179079][T12927] bridge_slave_1: entered promiscuous mode [ 197.235217][T12927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.240492][T12927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.289578][T12927] team0: Port device team_slave_0 added [ 197.293502][T12927] team0: Port device team_slave_1 added [ 197.328153][T12940] __nla_validate_parse: 4 callbacks suppressed [ 197.328164][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1896'. [ 197.335161][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1896'. [ 197.340609][T12927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.344942][T12927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.353618][T12927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.358663][T12927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.360845][T12927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.360862][T12927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.406843][T12927] hsr_slave_0: entered promiscuous mode [ 197.409097][T12927] hsr_slave_1: entered promiscuous mode [ 197.412024][T12927] debugfs: 'hsr0' already exists in 'hsr' [ 197.413793][T12927] Cannot create hsr debugfs directory [ 197.430919][T12942] tipc: New replicast peer: 255.255.255.255 [ 197.437295][T12942] tipc: Enabled bearer , priority 10 [ 197.445537][T12942] Unknown options in mask 22 [ 197.990846][T12969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1901'. [ 198.148082][T12984] netlink: 'syz.9.1906': attribute type 10 has an invalid length. [ 198.153143][T12986] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 198.155745][T12985] netlink: 'syz.9.1906': attribute type 10 has an invalid length. [ 198.165853][T12984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.170269][T12984] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 198.177521][T12985] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1906'. [ 198.180759][T12985] batadv0: entered promiscuous mode [ 198.183081][T12985] batadv0: entered allmulticast mode [ 198.189063][T12985] bond0: (slave batadv0): Releasing backup interface [ 198.221391][ T5972] Bluetooth: hci0: command tx timeout [ 198.255490][T12985] bridge0: port 3(batadv0) entered blocking state [ 198.257884][T12985] bridge0: port 3(batadv0) entered disabled state [ 198.274869][ T60] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 198.278666][ T60] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 198.374160][T13004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13004 comm=syz.9.1911 [ 198.396864][T12927] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.405272][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1911'. [ 198.407111][T12927] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.419796][T13004] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1911'. [ 198.425807][T12927] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.431241][ T59] tipc: Node number set to 2528537978 [ 198.453753][T12927] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.502555][T13010] binder: 13007:13010 ioctl c0306201 200000000040 returned -14 [ 198.513422][T13008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1912'. [ 198.521533][T13008] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1912'. [ 198.527254][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'. [ 198.542341][T13008] binder: 13007:13008 ioctl c0a85352 2000000004c0 returned -22 [ 198.660101][T13028] nft_compat: unsupported protocol 0 [ 198.673563][T12927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.702482][T12927] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.724447][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.727430][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.735161][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.738131][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.904818][T13045] netlink: 'syz.4.1917': attribute type 1 has an invalid length. [ 198.908033][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'. [ 198.912490][T13045] netlink: 'syz.4.1917': attribute type 1 has an invalid length. [ 198.918146][T13045] netlink: 'syz.4.1917': attribute type 1 has an invalid length. [ 198.920936][T13045] netlink: 'syz.4.1917': attribute type 1 has an invalid length. [ 198.931591][ T5972] Bluetooth: hci4: command tx timeout [ 198.986359][T12927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.001282][ T34] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 199.042483][T12927] veth0_vlan: entered promiscuous mode [ 199.050293][T12927] veth1_vlan: entered promiscuous mode [ 199.063786][T12927] veth0_macvtap: entered promiscuous mode [ 199.072377][T12927] veth1_macvtap: entered promiscuous mode [ 199.137266][T12927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.143473][T12927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.149073][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.161480][ T34] usb 14-1: Using ep0 maxpacket: 8 [ 199.165984][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.170168][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.174521][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.175072][ T34] usb 14-1: config 254 has an invalid interface number: 240 but max is 3 [ 199.180001][ T34] usb 14-1: config 254 contains an unexpected descriptor of type 0x1, skipping [ 199.183140][ T34] usb 14-1: config 254 contains an unexpected descriptor of type 0x1, skipping [ 199.186489][ T34] usb 14-1: config 254 has an invalid interface number: 156 but max is 3 [ 199.191221][ T34] usb 14-1: config 254 has an invalid interface number: 35 but max is 3 [ 199.193910][ T34] usb 14-1: config 254 has an invalid interface number: 98 but max is 3 [ 199.197529][ T34] usb 14-1: config 254 has an invalid interface number: 204 but max is 3 [ 199.200084][ T34] usb 14-1: config 254 has 5 interfaces, different from the descriptor's value: 4 [ 199.215191][ T34] usb 14-1: config 254 has no interface number 0 [ 199.215999][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.217407][ T34] usb 14-1: config 254 has no interface number 1 [ 199.219928][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.224476][ T34] usb 14-1: config 254 has no interface number 2 [ 199.228378][ T34] usb 14-1: config 254 has no interface number 3 [ 199.232317][ T34] usb 14-1: config 254 has no interface number 4 [ 199.235391][ T34] usb 14-1: config 254 interface 240 altsetting 131 has an invalid descriptor for endpoint zero, skipping [ 199.239703][ T34] usb 14-1: config 254 interface 240 altsetting 131 has an endpoint descriptor with address 0x64, changing to 0x4 [ 199.244984][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.247602][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.248309][ T34] usb 14-1: config 254 interface 240 altsetting 131 has a duplicate endpoint with address 0x4, skipping [ 199.254066][ T34] usb 14-1: config 254 interface 240 altsetting 131 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 199.257749][ T34] usb 14-1: config 254 interface 240 altsetting 131 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 199.262168][ T34] usb 14-1: config 254 interface 240 altsetting 131 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 199.266686][ T34] usb 14-1: config 254 interface 240 altsetting 131 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 199.270629][ T34] usb 14-1: config 254 interface 240 altsetting 131 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 199.275669][ T34] usb 14-1: config 254 interface 156 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 199.279194][ T34] usb 14-1: config 254 interface 156 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 199.283597][ T34] usb 14-1: config 254 interface 156 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 199.287198][ T34] usb 14-1: config 254 interface 156 altsetting 9 endpoint 0x5 has an invalid bInterval 217, changing to 7 [ 199.290914][ T34] usb 14-1: config 254 interface 156 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 199.294702][ T34] usb 14-1: config 254 interface 35 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 199.298307][ T34] usb 14-1: config 254 interface 35 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 199.302433][ T34] usb 14-1: config 254 interface 35 altsetting 6 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 199.306015][ T34] usb 14-1: config 254 interface 35 altsetting 6 has an endpoint descriptor with address 0x51, changing to 0x1 [ 199.309816][ T34] usb 14-1: config 254 interface 35 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 199.313679][ T34] usb 14-1: config 254 interface 35 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 199.317206][ T34] usb 14-1: config 254 interface 35 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 199.321029][ T34] usb 14-1: config 254 interface 98 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 199.324718][ T34] usb 14-1: config 254 interface 98 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 199.331582][ T34] usb 14-1: config 254 interface 98 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 199.335479][ T34] usb 14-1: config 254 interface 98 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 199.339649][ T34] usb 14-1: config 254 interface 98 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 199.356094][ T34] usb 14-1: config 254 interface 98 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 199.359611][ T34] usb 14-1: config 254 interface 98 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 199.363893][ T34] usb 14-1: config 254 interface 98 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 199.367351][ T34] usb 14-1: config 254 interface 98 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 199.378259][ T34] usb 14-1: config 254 interface 98 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 199.387180][ T34] usb 14-1: config 254 interface 98 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 199.392931][ T34] usb 14-1: config 254 interface 204 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 199.397046][ T34] usb 14-1: config 254 interface 204 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 199.401634][ T34] usb 14-1: config 254 interface 204 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 29 [ 199.406216][ T34] usb 14-1: config 254 interface 240 has no altsetting 0 [ 199.408395][ T34] usb 14-1: config 254 interface 156 has no altsetting 0 [ 199.410800][ T34] usb 14-1: config 254 interface 35 has no altsetting 0 [ 199.415708][ T34] usb 14-1: config 254 interface 204 has no altsetting 0 [ 199.420777][ T34] usb 14-1: New USB device found, idVendor=2001, idProduct=3319, bcdDevice=37.ee [ 199.435545][ T34] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.439004][ T34] usb 14-1: Product: ⑥戴႔㻛㱡硅妉끟꧴캙眤鶍ꧢꮂ珎㵛౹á囩检둀壙濋ⵐ搯쁏ᕣ熛゙订䂻짋뵨ꙗᑲௗ誽鈐祎Њ䴞㺬宗⺌傛杯泎ꍀᨘ岏鬌⿭ㅃ䗡耕퓃ӯ㯠猚냔륶㗬斴ԁ⎑쁐樬汐›涜䃬瞱⿅뙿鸛ฑ븋䒬㙎ࣷ䵏䠎呵乎鈏碹ϖ鉭竄ᒬ蟁證齃ᇼꟋ [ 199.443361][T13082] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 245 [ 199.458542][ T34] usb 14-1: Manufacturer: ь [ 199.460559][ T34] usb 14-1: SerialNumber: syz [ 199.468797][T13031] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 199.533217][ T6057] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 199.563763][T13090] nft_compat: unsupported protocol 0 [ 199.570612][T13090] random: crng reseeded on system resumption [ 199.899043][ T6057] usb 9-1: unable to get BOS descriptor or descriptor too short [ 199.903629][ T6057] usb 9-1: no configurations [ 199.905259][ T6057] usb 9-1: can't read configurations, error -22 [ 200.301597][ T5971] Bluetooth: hci0: command tx timeout [ 200.313660][ T34] usb 14-1: USB disconnect, device number 2 [ 200.432711][ T40] kauditd_printk_skb: 198 callbacks suppressed [ 200.432728][ T40] audit: type=1400 audit(1758495292.761:42994): avc: denied { create } for pid=13106 comm="syz.2.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.443595][ T40] audit: type=1400 audit(1758495292.761:42995): avc: denied { connect } for pid=13106 comm="syz.2.1925" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.453137][ T40] audit: type=1400 audit(1758495292.761:42996): avc: denied { write } for pid=13106 comm="syz.2.1925" laddr=fe80::13 lport=60 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 200.517709][ T40] audit: type=1400 audit(1758495292.841:42997): avc: denied { write } for pid=13108 comm="syz.2.1926" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.532530][T13109] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 200.540152][ T40] audit: type=1400 audit(1758495292.861:42998): avc: denied { setopt } for pid=13108 comm="syz.2.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.548935][ T40] audit: type=1400 audit(1758495292.861:42999): avc: denied { mounton } for pid=13108 comm="syz.2.1926" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 200.552607][T13109] XFS (nullb0): Invalid superblock magic number [ 200.594616][ T40] audit: type=1400 audit(1758495292.921:43000): avc: denied { create } for pid=13108 comm="syz.2.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.603719][ T40] audit: type=1400 audit(1758495292.921:43001): avc: denied { getopt } for pid=13108 comm="syz.2.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.698598][T12918] syz.3.1889 (12918) used greatest stack depth: 19368 bytes left [ 200.703951][ T40] audit: type=1400 audit(1758495293.031:43002): avc: denied { read write } for pid=5977 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.712481][ T40] audit: type=1400 audit(1758495293.031:43003): avc: denied { open } for pid=5977 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.796316][T13125] SELinux: failed to load policy [ 200.829077][T13131] program syz.9.1932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.912982][T13146] nfs: Unknown parameter ')' [ 201.011873][ T5971] Bluetooth: hci4: command tx timeout [ 201.390647][T13166] bridge1: entered promiscuous mode [ 201.811158][ T5972] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 201.811186][ T5971] Bluetooth: hci5: command 0x1003 tx timeout [ 202.470467][T13195] nft_compat: unsupported protocol 0 [ 202.478221][T13195] random: crng reseeded on system resumption [ 202.913448][T13211] __nla_validate_parse: 5 callbacks suppressed [ 202.913458][T13211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1955'. [ 203.101459][ T5972] Bluetooth: hci4: command tx timeout [ 203.294955][T13227] [SRW: renamed from lo [ 203.505311][T13241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.508073][T13241] IPv6: NLM_F_CREATE should be set when creating new route [ 203.511028][T13241] IPv6: NLM_F_CREATE should be set when creating new route [ 203.513791][T13241] IPv6: NLM_F_CREATE should be set when creating new route [ 203.517328][T13241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.520982][T13241] loop2: detected capacity change from 0 to 7 [ 203.525115][T13241] Dev loop2: unable to read RDB block 7 [ 203.526880][T13241] loop2: AHDI p1 p2 p3 [ 203.528478][T13241] loop2: partition table partially beyond EOD, truncated [ 203.531303][T13241] loop2: p1 start 1601398130 is beyond EOD, truncated [ 203.534117][T13241] loop2: p2 start 1702059890 is beyond EOD, truncated [ 203.623662][T13249] nft_compat: unsupported protocol 0 [ 203.635638][T13249] random: crng reseeded on system resumption [ 203.700431][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1970'. [ 203.717317][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1971'. [ 203.743476][T13263] wg1: entered promiscuous mode [ 203.745175][T13263] wg1: entered allmulticast mode [ 203.758797][T13263] netlink: zone id is out of range [ 203.760788][T13263] netlink: zone id is out of range [ 203.775946][T13263] netlink: zone id is out of range [ 203.778116][T13263] netlink: zone id is out of range [ 203.783310][T13263] netlink: zone id is out of range [ 203.793605][T13263] netlink: set zone limit has 4 unknown bytes [ 203.845105][T13275] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 203.918668][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'. [ 203.967666][T13289] nft_compat: unsupported protocol 0 [ 203.982124][T13289] random: crng reseeded on system resumption [ 203.998749][T13286] Bluetooth: MGMT ver 1.23 [ 204.073160][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1985'. [ 204.202201][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1986'. [ 204.251138][T11511] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 204.272361][T13315] delete_channel: no stack [ 204.402218][T11511] usb 7-1: Using ep0 maxpacket: 16 [ 204.406753][T11511] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.411272][T11511] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.415049][T11511] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 204.418688][T11511] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.424553][T11511] usb 7-1: config 0 descriptor?? [ 204.633859][T11511] usbhid 7-1:0.0: can't add hid device: -71 [ 204.635800][T11511] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 204.639363][T11511] usb 7-1: USB disconnect, device number 2 [ 205.036599][T13330] nft_compat: unsupported protocol 0 [ 205.044284][T13330] random: crng reseeded on system resumption [ 205.171191][ T5971] Bluetooth: hci4: command tx timeout [ 205.174423][T13340] qrtr: Invalid version 4 [ 205.177245][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1998'. [ 205.202721][T13342] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1998'. [ 205.209115][T13346] bridge0: entered allmulticast mode [ 205.213199][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1999'. [ 205.319130][T13360] hpfs: Bad magic ... probably not HPFS [ 205.334510][T13363] openvswitch: netlink: IP tunnel dst address not specified [ 205.340749][T13365] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 205.383681][T13371] netlink: 'syz.9.2009': attribute type 4 has an invalid length. [ 205.490777][ T40] kauditd_printk_skb: 264 callbacks suppressed [ 205.490789][ T40] audit: type=1400 audit(1758495297.811:43268): avc: denied { read } for pid=13379 comm="syz.3.2012" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 205.495394][T13380] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2012'. [ 205.500390][ T40] audit: type=1400 audit(1758495297.811:43269): avc: denied { open } for pid=13379 comm="syz.3.2012" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 205.511638][ T40] audit: type=1400 audit(1758495297.821:43270): avc: denied { ioctl } for pid=13379 comm="syz.3.2012" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 205.519956][ T40] audit: type=1400 audit(1758495297.821:43271): avc: denied { name_bind } for pid=13379 comm="syz.3.2012" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 205.527999][ T40] audit: type=1400 audit(1758495297.821:43272): avc: denied { mount } for pid=13379 comm="syz.3.2012" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 205.537354][ T40] audit: type=1400 audit(1758495297.821:43273): avc: denied { read write } for pid=13379 comm="syz.3.2012" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 205.547366][ T40] audit: type=1400 audit(1758495297.821:43274): avc: denied { open } for pid=13379 comm="syz.3.2012" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 205.622161][ T40] audit: type=1400 audit(1758495297.951:43275): avc: denied { write } for pid=13383 comm="syz.4.2015" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 205.629285][ T40] audit: type=1400 audit(1758495297.951:43276): avc: denied { open } for pid=13383 comm="syz.4.2015" path="/dev/ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 205.645779][ T40] audit: type=1400 audit(1758495297.951:43277): avc: denied { ioctl } for pid=13383 comm="syz.4.2015" path="/dev/ptp1" dev="devtmpfs" ino=1288 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 205.884730][T13401] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 205.886976][T13401] overlayfs: failed to set xattr on upper [ 205.889336][T13401] overlayfs: ...falling back to redirect_dir=nofollow. [ 205.892417][T13401] overlayfs: ...falling back to index=off. [ 205.894752][T13401] overlayfs: ...falling back to uuid=null. [ 206.043787][T13407] team0 (unregistering): Port device team_slave_0 removed [ 206.052932][T13407] team0 (unregistering): Port device team_slave_1 removed [ 206.146403][T13424] GUP no longer grows the stack in syz.3.2027 (13424): 200000004000-20000000a000 (200000002000) [ 206.150058][T13424] CPU: 3 UID: 0 PID: 13424 Comm: syz.3.2027 Not tainted syzkaller #0 PREEMPT(full) [ 206.150075][T13424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 206.150081][T13424] Call Trace: [ 206.150086][T13424] [ 206.150091][T13424] dump_stack_lvl+0x16c/0x1f0 [ 206.150127][T13424] gup_vma_lookup+0x1d2/0x220 [ 206.150148][T13424] __get_user_pages+0x243/0x34a0 [ 206.150167][T13424] ? find_held_lock+0x2b/0x80 [ 206.150182][T13424] ? __pfx___get_user_pages+0x10/0x10 [ 206.150201][T13424] get_user_pages_remote+0x243/0xab0 [ 206.150216][T13424] ? mas_parent_gap+0x6f0/0x7b0 [ 206.150231][T13424] ? __pfx_get_user_pages_remote+0x10/0x10 [ 206.150247][T13424] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 206.150263][T13424] __access_remote_vm+0x24d/0x850 [ 206.150278][T13424] ? do_raw_spin_lock+0x12c/0x2b0 [ 206.150289][T13424] ? __pfx___access_remote_vm+0x10/0x10 [ 206.150311][T13424] proc_pid_cmdline_read+0x4de/0x8e0 [ 206.150326][T13424] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 206.150340][T13424] ? rw_verify_area+0xcf/0x6c0 [ 206.150359][T13424] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 206.150373][T13424] vfs_readv+0x5c1/0x8b0 [ 206.150387][T13424] ? __pfx_vfs_readv+0x10/0x10 [ 206.150398][T13424] ? kmem_cache_free+0x2d1/0x4d0 [ 206.150417][T13424] ? __fget_files+0x20e/0x3c0 [ 206.150433][T13424] ? do_preadv+0x1a6/0x270 [ 206.150441][T13424] do_preadv+0x1a6/0x270 [ 206.150451][T13424] ? __pfx_do_preadv+0x10/0x10 [ 206.150465][T13424] do_syscall_64+0xcd/0x4e0 [ 206.150486][T13424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.150498][T13424] RIP: 0033:0x7f4350f8ec29 [ 206.150506][T13424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.150518][T13424] RSP: 002b:00007f4351e49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 206.150529][T13424] RAX: ffffffffffffffda RBX: 00007f43511d5fa0 RCX: 00007f4350f8ec29 [ 206.150536][T13424] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 206.150543][T13424] RBP: 00007f4351011e41 R08: 0000000000000000 R09: 0000000000000000 [ 206.150549][T13424] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 206.150556][T13424] R13: 00007f43511d6038 R14: 00007f43511d5fa0 R15: 00007fff4df6ba28 [ 206.150571][T13424] [ 206.400369][T13454] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 206.407811][T13454] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 206.437466][T13458] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 206.441190][T13458] UDF-fs: Scanning with blocksize 2048 failed [ 206.447622][T13458] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 206.450591][T13458] UDF-fs: Scanning with blocksize 4096 failed [ 206.514130][T13467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=13467 comm=syz.4.2040 [ 206.518640][T13467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13467 comm=syz.4.2040 [ 206.523377][T13467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=13467 comm=syz.4.2040 [ 206.579626][T13474] ceph: No source [ 206.613775][T13478] bridge2: entered promiscuous mode [ 206.709445][T13483] netlink: 'syz.9.2046': attribute type 1 has an invalid length. [ 206.742617][T13483] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 206.746454][T13483] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 206.789868][T13492] gretap1: entered promiscuous mode [ 206.799203][T13492] bond1: (slave gretap1): making interface the new active one [ 206.802795][T13492] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 206.814434][T13492] macvlan2: entered promiscuous mode [ 206.816290][T13492] macvlan2: entered allmulticast mode [ 206.819099][T13492] bond1: entered promiscuous mode [ 206.823600][T13492] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 206.865302][T13492] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 206.908884][T13492] bond1: left promiscuous mode [ 207.081026][T13534] nft_compat: unsupported protocol 0 [ 207.097646][T13530] IPVS: persistence engine module ip_vs_pe_s not found [ 207.104349][T13534] random: crng reseeded on system resumption [ 207.206232][ T5982] udevd[5982]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 207.250737][T13542] tmpfs: Group quota block hardlimit too large. [ 207.251685][ T5971] Bluetooth: hci4: command 0x0405 tx timeout [ 207.261940][T13546] 9pnet_virtio: no channels available for device syz [ 207.344471][T13556] vivid-000: ================= START STATUS ================= [ 207.347902][T13556] vivid-000: Test Pattern: 75% Colorbar [ 207.350230][T13556] vivid-000: Fill Percentage of Frame: 100 [ 207.352538][T13556] vivid-000: Horizontal Movement: Move Left [ 207.354478][T13556] vivid-000: Vertical Movement: No Movement [ 207.357173][T13556] vivid-000: OSD Text Mode: All [ 207.358726][T13556] vivid-000: Show Border: false [ 207.360239][T13556] vivid-000: Show Square: false [ 207.363647][T13556] vivid-000: Sensor Flipped Horizontally: false [ 207.365710][T13556] vivid-000: Sensor Flipped Vertically: false [ 207.367595][T13556] vivid-000: Insert SAV Code in Image: true [ 207.369428][T13556] vivid-000: Insert EAV Code in Image: false [ 207.373131][T13556] vivid-000: Insert Video Guard Band: true [ 207.374954][T13556] vivid-000: Reduced Framerate: false [ 207.376623][T13556] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 000-0 [ 207.378809][T13556] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 207.381835][T13556] vivid-000: Enable Capture Cropping: true grabbed [ 207.383833][T13556] vivid-000: Enable Capture Composing: true grabbed [ 207.385841][T13556] vivid-000: Enable Capture Scaler: true grabbed [ 207.387833][T13556] vivid-000: Timestamp Source: End of Frame [ 207.389675][T13556] vivid-000: Colorspace: Rec. 709 [ 207.391816][T13556] vivid-000: Transfer Function: Default [ 207.395365][T13556] vivid-000: Y'CbCr Encoding: Default [ 207.400015][T13556] vivid-000: HSV Encoding: Hue 0-179 [ 207.401973][T13556] vivid-000: Quantization: Default [ 207.403586][T13556] vivid-000: Apply Alpha To Red Only: false [ 207.405408][T13556] vivid-000: Standard Aspect Ratio: 4x3 [ 207.407130][T13556] vivid-000: DV Timings Signal Mode: Current DV Timings [ 207.409279][T13556] vivid-000: DV Timings: 640x480p59 inactive [ 207.411612][T13556] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 207.413955][T13556] vivid-000: Maximum EDID Blocks: 2 [ 207.415615][T13556] vivid-000: Limited RGB Range (16-235): true [ 207.417520][T13556] vivid-000: Rx RGB Quantization Range: Automatic [ 207.419603][T13556] vivid-000: Power Present: 0x00000001 [ 207.421756][T13556] tpg source WxH: 1280x720 (Y'CbCr) [ 207.423429][T13556] tpg field: 1 [ 207.424553][T13556] tpg crop: (0,0)/64x64 [ 207.425939][T13556] tpg compose: (0,0)/16x16 [ 207.427381][T13556] tpg colorspace: 3 [ 207.428647][T13556] tpg transfer function: 6/6 [ 207.430145][T13556] tpg Y'CbCr encoding: 0/2 [ 207.432038][T13556] tpg quantization: 0/2 [ 207.433404][T13556] tpg RGB range: 0/1 [ 207.434688][T13556] vivid-000: ================== END STATUS ================== [ 207.719791][T13585] program syz.3.2074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.780507][T13591] binder: 13584:13591 ioctl c0306201 200000000040 returned -14 [ 208.378045][T13617] __nla_validate_parse: 5 callbacks suppressed [ 208.378059][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2082'. [ 208.389326][T13617] IPv6: sit1: Disabled Multicast RS [ 208.392591][T13617] sit1: entered allmulticast mode [ 208.508956][T13623] SELinux: ebitmap: truncated map [ 208.517363][T13623] SELinux: failed to load policy [ 208.523614][T13623] input: syz1 as /devices/virtual/input/input29 [ 208.800523][T13635] nft_compat: unsupported protocol 0 [ 208.811406][T13635] random: crng reseeded on system resumption [ 209.100514][T13644] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2091'. [ 209.321521][T13655] exFAT-fs (nullb0): invalid boot record signature [ 209.323712][T13655] exFAT-fs (nullb0): failed to read boot sector [ 209.325703][T13655] exFAT-fs (nullb0): failed to recognize exfat type [ 209.659348][T13660] tmpfs: Bad value for 'mpol' [ 209.672677][T13660] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2096'. [ 209.702122][T13663] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 209.705375][T13663] cramfs: wrong magic [ 209.773980][T13667] bridge0: entered promiscuous mode [ 209.776930][T13667] macsec0: entered promiscuous mode [ 209.780924][T13667] bridge0: port 3(macsec0) entered blocking state [ 209.784748][T13667] bridge0: port 3(macsec0) entered disabled state [ 209.787824][T13667] macsec0: entered allmulticast mode [ 209.790290][T13667] bridge0: entered allmulticast mode [ 209.799286][T13667] macsec0: left allmulticast mode [ 209.801762][T13667] bridge0: left allmulticast mode [ 209.805596][T13667] bridge0: left promiscuous mode [ 209.815790][T13672] tmpfs: Bad value for 'mpol' [ 209.817791][T13672] tmpfs: Bad value for 'mpol' [ 209.820254][T13672] tmpfs: Bad value for 'mpol' [ 209.822691][T13672] tmpfs: Bad value for 'mpol' [ 209.824666][T13672] tmpfs: Bad value for 'mpol' [ 209.826775][T13672] tmpfs: Bad value for 'mpol' [ 209.828957][T13672] tmpfs: Bad value for 'mpol' [ 209.833725][T13672] tmpfs: Bad value for 'mpol' [ 209.835523][T13672] tmpfs: Bad value for 'mpol' [ 209.837431][T13672] tmpfs: Bad value for 'mpol' [ 209.839369][T13672] tmpfs: Bad value for 'mpol' [ 209.841028][T13672] tmpfs: Bad value for 'mpol' [ 209.842935][T13672] tmpfs: Bad value for 'mpol' [ 209.844558][T13672] tmpfs: Bad value for 'mpol' [ 209.846612][T13672] tmpfs: Bad value for 'mpol' [ 209.848251][T13672] tmpfs: Bad value for 'mpol' [ 209.849900][T13672] tmpfs: Bad value for 'mpol' [ 209.852116][T13672] tmpfs: Bad value for 'mpol' [ 209.958027][T13684] QAT: Stopping all acceleration devices. [ 209.992434][T13690] io-wq is not configured for unbound workers [ 210.099932][T13698] sg_write: process 1532 (syz.4.2106) changed security contexts after opening file descriptor, this is not allowed. [ 210.891907][ T40] kauditd_printk_skb: 327 callbacks suppressed [ 210.891924][ T40] audit: type=1400 audit(1758495303.211:43605): avc: denied { mount } for pid=13700 comm="syz.2.2107" name="/" dev="gadgetfs" ino=9609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 210.904457][ T40] audit: type=1400 audit(1758495303.221:43606): avc: denied { create } for pid=13700 comm="syz.2.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.911695][ T40] audit: type=1400 audit(1758495303.221:43607): avc: denied { ioctl } for pid=13700 comm="syz.2.2107" path="socket:[61700]" dev="sockfs" ino=61700 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.919941][ T40] audit: type=1400 audit(1758495303.221:43608): avc: denied { bind } for pid=13700 comm="syz.2.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 210.927350][ T40] audit: type=1400 audit(1758495303.231:43609): avc: denied { create } for pid=13700 comm="syz.2.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.946088][ T40] audit: type=1400 audit(1758495303.271:43610): avc: denied { allowed } for pid=13703 comm="syz.2.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 210.955675][ T40] audit: type=1400 audit(1758495303.281:43611): avc: denied { prog_load } for pid=13703 comm="syz.2.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 210.962753][ T40] audit: type=1400 audit(1758495303.281:43612): avc: denied { bpf } for pid=13703 comm="syz.2.2108" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 210.969190][ T40] audit: type=1400 audit(1758495303.281:43613): avc: denied { write } for pid=13703 comm="syz.2.2108" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.019607][ T40] audit: type=1400 audit(1758495303.341:43614): avc: denied { read append } for pid=13705 comm="syz.4.2109" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 211.211370][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 211.266004][T13721] netlink: 'syz.4.2112': attribute type 21 has an invalid length. [ 211.364678][ T34] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 211.368419][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.370979][ T34] usb 7-1: Product: syz [ 211.372574][ T34] usb 7-1: Manufacturer: syz [ 211.374108][ T34] usb 7-1: SerialNumber: syz [ 211.784627][ T34] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 211.788386][ T34] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 211.793355][ T34] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 211.832493][ T34] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 211.838137][ T34] usb 7-1: USB disconnect, device number 3 [ 212.323684][T13736] netlink: 'syz.2.2116': attribute type 10 has an invalid length. [ 212.327609][T13736] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.331167][T13736] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.343352][T13736] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.346528][T13736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.351640][T13736] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.354560][T13736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.360457][T13736] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 212.374326][ T34] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 212.523289][ T34] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.526548][ T34] usb 9-1: config 0 has no interfaces? [ 212.528764][ T34] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 212.532273][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.536814][ T34] usb 9-1: config 0 descriptor?? [ 212.602327][T13742] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 212.605952][T13742] cramfs: wrong magic [ 212.760284][ T34] usb 9-1: USB disconnect, device number 16 [ 214.084171][T13801] nbd_handle_cmd: 23 callbacks suppressed [ 214.084189][T13801] block nbd3: Attempted send on invalid socket [ 214.088386][T13801] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 214.093422][T13801] XFS (nbd3): SB validate failed with error -5. [ 214.156440][T13808] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 214.160215][T13808] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 214.164180][T13808] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 214.166765][T13808] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 214.229860][T13813] umip_printk: 19 callbacks suppressed [ 214.338863][T13821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.343131][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2140'. [ 214.777761][T13849] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2146'. [ 214.781760][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2146'. [ 214.976915][T13856] input: syz1 as /devices/virtual/input/input30 [ 215.051384][T13859] futex_wake_op: syz.2.2147 tries to shift op by -1; fix this program [ 215.155538][T13857] usb usb9: usbfs: interface 0 claimed by hub while 'syz.4.2149' sets config #6 [ 215.159733][T13857] openvswitch: netlink: EtherType 0 is less than min 600 [ 215.916786][ T40] kauditd_printk_skb: 149 callbacks suppressed [ 215.916797][ T40] audit: type=1400 audit(1758495308.239:43764): avc: denied { write } for pid=13870 comm="syz.4.2151" name="ip_mr_vif" dev="proc" ino=4026533981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 215.930214][ T40] audit: type=1400 audit(1758495308.249:43765): avc: denied { prog_load } for pid=13870 comm="syz.4.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 215.959067][ T40] audit: type=1400 audit(1758495308.279:43766): avc: denied { mounton } for pid=13872 comm="syz.4.2152" path="/513/file0" dev="tmpfs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 215.959185][T13873] 9pnet_fd: Insufficient options for proto=fd [ 216.010435][ T40] audit: type=1400 audit(1758495308.329:43767): avc: denied { lock } for pid=13874 comm="syz.4.2153" path="socket:[61874]" dev="sockfs" ino=61874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 216.021819][ T40] audit: type=1400 audit(1758495308.339:43768): avc: denied { create } for pid=13874 comm="syz.4.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.029670][ T40] audit: type=1400 audit(1758495308.339:43769): avc: denied { bind } for pid=13874 comm="syz.4.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.038773][ T40] audit: type=1400 audit(1758495308.339:43770): avc: denied { name_bind } for pid=13874 comm="syz.4.2153" src=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 216.048445][ T40] audit: type=1400 audit(1758495308.339:43771): avc: denied { node_bind } for pid=13874 comm="syz.4.2153" saddr=ff02::1 src=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 216.066584][T13877] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 216.220247][ T40] audit: type=1400 audit(1758495308.539:43772): avc: denied { create } for pid=13883 comm="syz.3.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.228631][ T40] audit: type=1400 audit(1758495308.549:43773): avc: denied { write } for pid=13883 comm="syz.3.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.271457][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.401428][ T53] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 216.572611][ T53] usb 9-1: Using ep0 maxpacket: 16 [ 216.577115][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 216.587502][ T53] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 216.594880][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.598069][ T53] usb 9-1: Product: syz [ 216.599838][ T53] usb 9-1: Manufacturer: syz [ 216.602870][ T53] usb 9-1: SerialNumber: syz [ 216.608647][ T53] usb 9-1: config 0 descriptor?? [ 216.617197][ T53] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 216.621205][ T53] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 216.706045][T13923] netlink: 'syz.3.2166': attribute type 1 has an invalid length. [ 216.709311][T13923] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2166'. [ 216.868168][T13941] program syz.3.2172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.903180][T13941] netlink: 'syz.3.2172': attribute type 3 has an invalid length. [ 217.032676][T13948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.137338][T13952] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2175'. [ 217.224340][ T53] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 217.640982][ T53] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 217.643739][ T53] em28xx 9-1:0.0: board has no eeprom [ 217.705852][ T8247] IPVS: starting estimator thread 0... [ 217.791318][T13976] IPVS: using max 38 ests per chain, 91200 per kthread [ 217.981316][ T53] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 217.984435][ T53] em28xx 9-1:0.0: dvb set to bulk mode. [ 217.986844][ T8247] em28xx 9-1:0.0: Binding DVB extension [ 218.107235][T14001] program syz.2.2191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.114641][T14002] 9pnet_virtio: no channels available for device 127.0.0.1 [ 218.280266][T14018] fuse: Unknown parameter 'fd70x0000000000000007' [ 218.288835][T14018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.293143][T14020] dvmrp8: left allmulticast mode [ 218.348490][T14021] openvswitch: netlink: Flow key attr not present in new flow. [ 218.352182][T14021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2197'. [ 218.374674][ T9] ------------[ cut here ]------------ [ 218.377015][ T9] workqueue: cannot queue hci_conn_timeout on wq hci1 [ 218.379198][ T9] WARNING: CPU: 0 PID: 9 at kernel/workqueue.c:2255 __queue_work+0xd03/0x1160 [ 218.382016][ T9] Modules linked in: [ 218.383468][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 218.388083][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 218.391728][ T9] Workqueue: events l2cap_chan_timeout [ 218.393683][ T9] RIP: 0010:__queue_work+0xd03/0x1160 [ 218.395366][ T9] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 a0 03 ac 8b e8 be 1e f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 3f 7a 38 00 90 0f 0b 90 e9 b4 f5 ff [ 218.401390][ T9] RSP: 0018:ffffc900000c7a48 EFLAGS: 00010082 [ 218.403315][ T9] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 218.405789][ T9] RDX: ffff88801da9c880 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 218.408259][ T9] RBP: ffff8880601ec948 R08: 0000000000000001 R09: 0000000000000000 [ 218.410749][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 218.413198][ T9] R13: ffff888055498000 R14: ffff8880601ec990 R15: ffff888055498178 [ 218.415659][ T9] FS: 0000000000000000(0000) GS:ffff8880d66b2000(0000) knlGS:0000000000000000 [ 218.418451][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.420505][ T9] CR2: 00007f4351e48f98 CR3: 0000000032b97000 CR4: 0000000000352ef0 [ 218.423003][ T9] Call Trace: [ 218.424096][ T9] [ 218.425066][ T9] ? __cancel_work+0x2c8/0x370 [ 218.426579][ T9] ? clear_pending_if_disabled+0xa8/0x210 [ 218.428358][ T9] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 218.430284][ T9] __queue_delayed_work+0x35b/0x460 [ 218.432768][ T9] queue_delayed_work_on+0x1b5/0x200 [ 218.434459][ T9] l2cap_chan_del+0x5a0/0x8f0 [ 218.435952][ T9] l2cap_chan_close+0xfe/0xa30 [ 218.437498][ T9] ? __pfx_l2cap_chan_close+0x10/0x10 [ 218.439204][ T9] l2cap_chan_timeout+0x196/0x310 [ 218.440788][ T9] process_one_work+0x9cc/0x1b70 [ 218.442358][ T9] ? __pfx_process_one_work+0x10/0x10 [ 218.444051][ T9] ? assign_work+0x1a0/0x250 [ 218.445538][ T9] worker_thread+0x6c8/0xf10 [ 218.447056][ T9] ? __pfx_worker_thread+0x10/0x10 [ 218.448690][ T9] kthread+0x3c2/0x780 [ 218.449985][ T9] ? __pfx_kthread+0x10/0x10 [ 218.451478][ T9] ? rcu_is_watching+0x12/0xc0 [ 218.452982][ T9] ? __pfx_kthread+0x10/0x10 [ 218.454451][ T9] ret_from_fork+0x56a/0x730 [ 218.455905][ T9] ? __pfx_kthread+0x10/0x10 [ 218.457473][ T9] ret_from_fork_asm+0x1a/0x30 [ 218.459118][ T9] [ 218.460139][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 218.462419][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 218.465208][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 218.468531][ T9] Workqueue: events l2cap_chan_timeout [ 218.470248][ T9] Call Trace: [ 218.471327][ T9] [ 218.472259][ T9] dump_stack_lvl+0x3d/0x1f0 [ 218.473762][ T9] vpanic+0x6e8/0x7a0 [ 218.475099][ T9] ? __pfx_vpanic+0x10/0x10 [ 218.476583][ T9] ? __queue_work+0xd03/0x1160 [ 218.478144][ T9] panic+0xca/0xd0 [ 218.479332][ T9] ? __pfx_panic+0x10/0x10 [ 218.480777][ T9] ? check_panic_on_warn+0x1f/0xb0 [ 218.482449][ T9] check_panic_on_warn+0xab/0xb0 [ 218.484011][ T9] __warn+0xf6/0x3c0 [ 218.485272][ T9] ? __queue_work+0xd03/0x1160 [ 218.486824][ T9] report_bug+0x3c3/0x580 [ 218.488216][ T9] ? __queue_work+0xd03/0x1160 [ 218.489763][ T9] handle_bug+0x184/0x210 [ 218.491169][ T9] exc_invalid_op+0x17/0x50 [ 218.492612][ T9] asm_exc_invalid_op+0x1a/0x20 [ 218.494161][ T9] RIP: 0010:__queue_work+0xd03/0x1160 [ 218.495844][ T9] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 a0 03 ac 8b e8 be 1e f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 3f 7a 38 00 90 0f 0b 90 e9 b4 f5 ff [ 218.501954][ T9] RSP: 0018:ffffc900000c7a48 EFLAGS: 00010082 [ 218.503850][ T9] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a4388 [ 218.506329][ T9] RDX: ffff88801da9c880 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 218.508814][ T9] RBP: ffff8880601ec948 R08: 0000000000000001 R09: 0000000000000000 [ 218.511316][ T9] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 218.513766][ T9] R13: ffff888055498000 R14: ffff8880601ec990 R15: ffff888055498178 [ 218.516207][ T9] ? __warn_printk+0x198/0x350 [ 218.517734][ T9] ? __warn_printk+0x1a5/0x350 [ 218.519282][ T9] ? __queue_work+0xd02/0x1160 [ 218.520817][ T9] ? __cancel_work+0x2c8/0x370 [ 218.522331][ T9] ? clear_pending_if_disabled+0xa8/0x210 [ 218.524121][ T9] ? __pfx_clear_pending_if_disabled+0x10/0x10 [ 218.526076][ T9] __queue_delayed_work+0x35b/0x460 [ 218.527719][ T9] queue_delayed_work_on+0x1b5/0x200 [ 218.529437][ T9] l2cap_chan_del+0x5a0/0x8f0 [ 218.531019][ T9] l2cap_chan_close+0xfe/0xa30 [ 218.532603][ T9] ? __pfx_l2cap_chan_close+0x10/0x10 [ 218.534360][ T9] l2cap_chan_timeout+0x196/0x310 [ 218.536046][ T9] process_one_work+0x9cc/0x1b70 [ 218.538182][ T9] ? __pfx_process_one_work+0x10/0x10 [ 218.540433][ T9] ? assign_work+0x1a0/0x250 [ 218.542347][ T9] worker_thread+0x6c8/0xf10 [ 218.543888][ T9] ? __pfx_worker_thread+0x10/0x10 [ 218.545511][ T9] kthread+0x3c2/0x780 [ 218.546954][ T9] ? __pfx_kthread+0x10/0x10 [ 218.548437][ T9] ? rcu_is_watching+0x12/0xc0 [ 218.550011][ T9] ? __pfx_kthread+0x10/0x10 [ 218.551507][ T9] ret_from_fork+0x56a/0x730 [ 218.552992][ T9] ? __pfx_kthread+0x10/0x10 [ 218.554457][ T9] ret_from_fork_asm+0x1a/0x30 [ 218.555996][ T9] [ 218.557761][ T9] Kernel Offset: disabled [ 218.559121][ T9] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:50:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c215 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc900000c73b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000050 R14=ffffffff9b1180e0 R15=ffffffff8564c1b0 RIP=ffffffff8564c23f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4351e48f98 CR3=0000000032b97000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4df6bf36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff4df6bf36 00007fff4df6bf3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4351012e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4351012e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4351012e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4351012e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4351012f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4351012fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43511a74a8 00007f43511a74a0 00007f43511a7498 00007f43511a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4351d0d100 00007f43511a7460 00007f43511a7478 00007f43511a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f43511a74b8 00007f43511a74b0 00007f43511a74a8 00007f43511a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a441ea0 RCX=ffffffff81af9d91 RDX=ffff8880477a4880 RSI=ffffffff81af9d6b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900052c7648 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4883d5 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81af9d6d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200001000000 CR3=0000000033ce3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 612b2da39c278552 99345be1f438fad7 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 94da3850852f3dbb 48aa50e0325921b9 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01f765fe266c29c9 b602e59dd6d816b8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9c34ffdb8568ebda 46a65a47b9d474db ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4aa6937620b40e70 4df096574aad36dc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ee4b59108905ef8b 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e82189083aa887b 6969432767392444 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3bc4b64f00000000 c68d82f3273f6015 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec61ff5adc30fc4e f419832573fae9d0 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fb1fdaac65bcdd9b d7627c875f240045 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3485da74a8 00007f3485da74a0 00007f3485da7498 00007f3485da7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f348690d100 00007f3485da7460 00007f3485da7478 00007f3485da74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3485da74b8 00007f3485da74b0 00007f3485da74a8 00007f3485da74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001ee237 RBX=0000000000000002 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52cd1 RDI=ffffffff8c163400 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c371f87 CR3=0000000033ce3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8daa26f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8daa2ad6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8daa2ad6 00007ffc8daa2adc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3485c12e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3485c12e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3485c12e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3485c12e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3485c12f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3485c12fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 732064616200786c 6c36313025783000 657a697320780004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5605414447005d49 49131415005d1500 405f4c56055d404d 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000017c17d RBX=0000000000000003 RCX=ffffffff8b94cb49 RDX=0000000000000000 RSI=ffffffff8de52cd1 RDI=ffffffff8c163400 RBP=ffffed1003bda000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801ded0000 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c32f5f5 CR3=00000000258a7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555a9ff030 000055555a9fed20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555a9f24a8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555aa01261 000055555aa00f40 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 201000060270cc0e 8004048080080001 000000080606010e f00733c2ea692f57 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08c00c001465f30a 166408a67e000000 1d6c876b07d5ac53 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5056500802800302 8004200368100010 0324bc6403c01900 060002ffe7002c00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d2167179b58e68ac 5bfa6dad4528898e ee92866f73ae54d3 4b8545c369a8db77 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 012aac1000408010 0022800401000000 080608014efc20a0 8010000180040100 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00020806060168cc 03f086809c080001 e00300100001d003 0fffffffffffff04 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01c00304100001b0 0350100030035170 d0f6f63bd2167179 b58e68ac5bfa6dad ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4528898eee92866f 73ae54d34b8545c3 69a8db7750565008 0280030280042003 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000