last executing test programs: 56.411175669s ago: executing program 2 (id=107): lsm_get_self_attr(0x69, 0x0, &(0x7f0000000080), 0x0) r0 = socket$inet(0xa, 0x1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x26b}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x3) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f0000000100), 0x4) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000040)={0x88, @broadcast, 0x4e24, 0x2, 'lblc\x00', 0x34, 0x1d, 0x58}, 0x2c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="00e58c1eea411c"], 0x48) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x59455247, 0x0, 0xb, [{}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x40}, {}, {}, {0x0, 0x5}], 0x0, 0x0, 0x4, 0x1, 0x6}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'xfrm0\x00', 0x0}) r10 = socket(0x11, 0x3, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSMASK(r11, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r11, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) sendto$packet(r10, &(0x7f0000000380)="6fa4bf90aa8a33a38a8f6c8fa168f069adfc79fefab38d472b35afef1abf5976aa851156780bb0fe", 0x28, 0x0, &(0x7f00000000c0)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="0786dbd848f5"}, 0x14) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x60000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r12, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r8, {0x79b}}, './file0\x00'}) r13 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ppoll(&(0x7f0000000140)=[{r13, 0x9200}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f0000000180)) 56.341576832s ago: executing program 2 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) setreuid(0xee01, 0x0) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setreuid(0x0, r2) write$binfmt_script(r1, &(0x7f0000020180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@rose, @null, @default, @remote, @default, @rose, @netrom, @bcast]}, &(0x7f00000000c0)=0x48) 56.340987097s ago: executing program 2 (id=110): r0 = open(&(0x7f0000000180)='./file0\x00', 0xc00, 0x140) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000280)={'xfrm0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000010000000000000000000000711213000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5a, @void, @value}, 0x94) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x40) r4 = dup(r3) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000100039042cbd7000eaffffff000003e4", @ANYRES32=r7, @ANYBLOB="03000000cb1507003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="08000300ac14141005000a00006bbe0006000e001f00000006000800000000000fbe34c7da4ba33afc10c4ae03f1266d7f3cdc"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000000c0)) r8 = fcntl$getown(r3, 0x9) syz_open_procfs(r8, &(0x7f0000000100)='coredump_filter\x00') r9 = memfd_secret(0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r9, 0x8040942d, &(0x7f0000000080)) (async) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5034d564b"]) (async) fsmount(r4, 0x0, 0x0) 56.16680976s ago: executing program 2 (id=113): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x7800) mount$binderfs(&(0x7f00000000c0), &(0x7f0000000240)='./binderfs2\x00', &(0x7f0000000280), 0x400, &(0x7f0000000380)={[{@max={'max', 0x3d, 0x8000000000000000}}, {@max={'max', 0x3d, 0x1}}], [{@uid_eq={'uid', 0x3d, r0}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000000)) mount$binderfs(&(0x7f0000000400), &(0x7f0000000440)='./binderfs\x00', &(0x7f0000000480), 0x20, &(0x7f00000004c0)={[{@stats}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_user={'obj_user', 0x3d, 'mountinfo\x00'}}, {@permit_directio}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) r3 = add_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="42d7388485c79a8e7b4789a3b0f48a53f4b1b6b88aa6d589db9901f75147785ea44dee09b5", 0x25, r2) keyctl$read(0xb, r3, 0x0, 0x0) 56.164349007s ago: executing program 2 (id=114): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000500)="7c5331fc93141cfcf00756b5b10006", 0x0, 0x3, 0x60000000, 0xf, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) listen(0xffffffffffffffff, 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000040)={0x6, 'nr0\x00', {0x2}, 0x100}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x3}}) recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2002) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) sendmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r5 = socket$inet(0x2, 0xa, 0x8) recvmmsg(r5, &(0x7f0000003640)=[{{&(0x7f0000000040)=@caif=@dbg, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/190, 0xbe}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/229, 0xe5}], 0x3, &(0x7f00000015c0)=""/4085, 0xff5}, 0x2f9a0633}, {{&(0x7f0000000200), 0x80, &(0x7f00000002c0)=[{&(0x7f00000025c0)=""/249, 0xfffffe96}, {&(0x7f00000026c0)=""/203, 0xcb}, {&(0x7f0000000480)=""/148, 0x94}], 0x3, &(0x7f00000027c0)=""/172, 0xac}, 0xb}, {{&(0x7f0000002880)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000300)=[{&(0x7f0000003800)=""/132, 0x84}, {&(0x7f00000029c0)=""/118, 0x76}], 0x2, &(0x7f0000002a40)=""/137, 0x89}, 0xc}, {{&(0x7f0000002b00)=@ieee802154, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002b80)=""/96, 0x60}, {&(0x7f0000002c00)=""/12, 0xc}, {&(0x7f0000002c40)=""/47, 0x2f}, {&(0x7f0000002c80)=""/33, 0x21}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/40, 0x28}, {&(0x7f0000002d00)=""/173, 0xad}, {&(0x7f0000002dc0)=""/253, 0xfd}], 0x8, &(0x7f0000002f40)=""/187, 0xbb}, 0x1}, {{&(0x7f0000003000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003080)=""/117, 0x75}, {&(0x7f0000003100)=""/196, 0xc4}, {&(0x7f0000003200)}, {&(0x7f0000003240)=""/110, 0x6e}], 0x4}, 0x9}, {{&(0x7f0000003300)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003380)=""/61, 0x3d}, {&(0x7f00000033c0)=""/109, 0x6d}, {&(0x7f0000003440)}, {&(0x7f0000003480)=""/181, 0xb5}], 0x4, &(0x7f0000003580)=""/139, 0x8b}, 0x697}], 0x6, 0x10000, &(0x7f00000037c0)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x8004) 55.332311605s ago: executing program 2 (id=124): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x1, 0x6, 0x301, 0x400, 0x0, 0x7, 0x0}) 55.316369746s ago: executing program 32 (id=124): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x1, 0x6, 0x301, 0x400, 0x0, 0x7, 0x0}) 48.50152996s ago: executing program 3 (id=197): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r0, @ANYRES32=r4], 0x44}}, 0x300000000000000) 48.499677879s ago: executing program 3 (id=200): r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x62602) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000980)={0x0, 0x5, 0x0, &(0x7f0000000100)=[{}, {0x80000000}, {}, {}, {}], 0x12, 0x0, &(0x7f0000003480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000300)}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000a80)={r2, &(0x7f0000000400), &(0x7f0000000a00)}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000140)='itimer_expire\x00', r3, 0x0, 0x1}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, &(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRESHEX], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x59}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d3}, 0x8040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9c, 0x1, 0x41c}}}, 0x7) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r10, 0x89e8, &(0x7f0000000080)={@default, @null, @null, 0x4, 0xb, 0x1, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f0000001480)={0x0, 0x0, "d92066dad42204fd96e0f3342f85a62e3260d646f9d1a9abcfcd5e66f19b84f8c6833abca2ff0f53a5f5360cf51ba629f58835c10b699da336bc1f8c844f0a7eb225384e1bd5707b94da25129e2c59a315ef5b07dce65c7b1c79a3c1ffc94b25c8897b6e3e3eea16eb9b981ed1a4f1d1492d3ee150a8b1c59aabfdc233479bb496d1f74d43a18f02d29dda4156609cca5f98a253d55ec362dcb57af9faeefd9adc4e7203599ccab715b86ff7977e13188fd535b53db3eff5189d2d12d3f787a0a2ff85d6cae7ea3a879a9cd2cdc12cedd0f99927ea3f8e93617e9e97c17df7c801e2a6b02c973bb028d9c09d540bfcef425671d379f05f31f6d451221ea67dc1", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000b00)={{0x0, 0x6fc, 0x95, 0x4, 0xc, 0x400, 0x7, 0x4, 0x2, 0x8, 0x3, 0x8, 0xb60e, 0x2, 0xfffffffffffffffe}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002480)={r11, r12, "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", "75e3e4b386ea2985897a97d2eef8669a151367135af63fbebd1f4c9f0e52c60e5a33c697f31bc7d7571310cfa55f40bbb87e67d99ef8c3209dcb87b32d59da4249a98d75c296287c9bac9f9dd233089a8c9695fda6e3ea0e8df37e7971b33d09f8be1bd6b5a8a44180f195509bbbc307c9773f6ee1386deebf72be75d6505482def43ddb1c8644e6f0458d2743fdda37798a60ae32812e0125116aadaace6e00bb7b69cf3609759978b3c4a1f9a1e962736a011075b1515eefcc7d7f33f8a94b50fcfe7cb56d6a20dfccc60cb927993d09b9893c9187bd5d8151f07cc0c424d80d3e0842ec99d4b520f3597b7b4ca365f044c5650b1d621c3f32ca655f09135f5b332eb4c8b47b41939358c8bf1ec8e58ebb29ba8f9e733ee56c6696c14b227355d5b3cf224847903b26f373f5f56c671cf79aaaebec00898e426a9038c7feefd1efbc924398d7a1de173fc7e5b5a264a3151139e95e4658ae49f44e4fa2571fc5901f4797907855848b58a4627d2e638aa43b2b78eac857cb398fb6a0f69fadc037b0361588c9a8b105a9393753cc13d90aabf23509776802b5281f59922c194e6d2bd916ead169cf8a53c1b4a8ffee2bca6cfabf82c8fd28c733b42d3c2c7c8afdd6026ed27503e4992eaa30ab29a1bc66dbf7e669b0b023fd20c3009a2c2434ace20df3f71acb64c5e97714a7a175d88dbd098327e349c966ff1ad35d346917e3a3e1bc809a97abcd40fbee51d419a12523ce73c3473d54fb5b542d6cee82fc062b4a0df98c4b4e0ebae064873949faf880b03c58a12a80b157091b7ad1d694b366f5b5a054fd7233ef8699d4c69db15de855638c46f601f9e2cab8fa7b184887c9972413e4d0d3451ce346b63d6d332ca37a3dd64f3574d12b66f7288c8997503b2f4640c1206bdc093515e0b1582c28114f2fd8a8667339b8d792119616bd677f6e895d861214a152fa53612cb9afe36ad1bc00f85f5c4d03c475f2b1f8ad47a122a264c448efbd18ce6ff144f6f3ca6bb83adbc13575a20e05fb852d0896f942f77e2a50a0f6b02464c1dbd2a5ae945b148e22f940dcce72934683a75cf0415cf313f8c05bfc8d08f8bcbcc0a8d418f318920ede8a64294d73f4989c2416a0a2d93cdee426091a08157bc6aaf73c8642bcd1ca570d9d3f8b7ba5885f4688033b6c49110ec11eda2cd255bee0c11b5a18711217bc94303c994e8fad3421d1df11b009dfcdda8a5ac2a2e980df0ad3714259359752c93c39dbde2e69299242e6fcc5c285678a5c6845205c648fa88031fb271b46c94f62d56c41fc13d08347e8ba54e7077a877eb3019e8c3575392bcea069cdd0b6345c08f0a29caa81f249cf2b016235557debb4f26642a4553c9de972190c6bbb90827f73b9c50f9e052da40081400383733a1fdc4558c898071242ec7701f59352561ecf7df6eef42013da6d72fe608cc8ca3090273c4672d3265c3c1b76dbf6e9232f423535e8384aa5aa1a61eb0811c32392d47d1f1e3a588bf2978843ed8e07242ade08afa7eadfa41e9336b3ec96bbd286b6a02246fd37d4450cbe942c5ad7281ef5ff308a28f7a5bf3bd5f1adaf6861703887a063c7d647f4ae8574501d22d5e5aeef0fd703dc10febc4f53c2e3a0d8f71a406668b3248ac396381e63afe73cb471609a2d3b245be727b0c76f443c83515c0616c3b181e02f3d1ee12efd7c80607db998074ebec1f565c47cb1a0897a78eb3758da17b41fec4968d8b26aca4e161be98ece2ded8dd818b85acd8c276c8bb4899a7767ca2d3ff3305ae86af7acf3f66f57eede566f92b075d48807a8f4a91922df23a7a3047dac2a72f7c0e816cef50519ed3f1f1ac77edf7f3a24e5a63cfeb1267ade2c151162553dad3d87663197cf024c26d052cdea15b3938e85b8498ea0e4814d987300332258ad2d7389451afd23caa3ee79303820b6558757653017b2bbf032fc0f99d8cde4d0371392aee42c203c88dd77e9ceea645877263dddfb2ab5b9cf3f6252ba8e1aaacf80df6372c0c8c5ae3b27c52fdf492c25cec26886c71e7aee567e74583ac8840474781ca0ebb44be58260f2e047feaf0887d64203663a7812212f034e9b5cce7bddc355571aa0826c5a9a1bb20ced3f3dc7329337774d1e76ae1e880033ff231ceffdd9cdb19d6afaaeb2e893db37d470e9aaad9283a4cc280a2410fb7d458bbc64b1e54bb6cd6015f0722f7f0e5fc875ab9d083437aa6f2adc098ce18b4b3bcaa6641af5c3c1c57f0cd11592a259c12078a74277ef989b5438123f44eb0b47e6e4a488c7848fd8a26073e1723283e575f8a31a6c5644969dc94bb54caffbad3eab87a7654d9af43bd8a72afbc4d6f5945aa6662c034a5a9513cf0e7211d7f3609c511ce6aad29f99745ef6886e7ab166a20796049507c5fd82803483c40ba4044decb868b75147729416b9494ae777ed65e5b1a4404f7b212c770f7854981bd1de6d8531123e3d542220eb53a15d3f6e53d5dd96bd8353a6f61d3054d1709d27797ba4f3d2a58842d2954639c8a3445f9f4059e0e3744eecdbdef00775093451f04928672a8bf28be9008ad5782fe61436dd9d1ca490e51435ddbc9857c1ca93c3c2b8f1c305d75cb7b521453b58d763373219a4903a288fad4bc546ec8bc4b8cd6c9db2cede77f1c3cbc2b4197413efdb8dbdaba6a7367ca7de1f0ce52a44cd8bc6991f864483b5b891ca95cce91f93e4e785598cc7792150e9097f3871147dfa8c3d362e50712ae8e1b92426a4657818e5dfbcca2c1f380c749119e11ba724f0e82293285faab476b3b9543a1993fb697e036a23a88343812dee872d1a1f8a7f14caddc47dd758981545f9dcad10420ebc68afe7cc0e7cb774db796d4c2dc04eb7489e5e83318ecdbc4d109efd956be9e2026b124d94dfc146ed80014da7b8d8bbe145952f59d14dcdbf37052512bc28334d8ea1a29d14baec4e253146aac3d88c34b7bd26fc3faf5190c88697fe91c557fa303fe27b857a40b555445f74c66011ffca41fa34d74295dfa07dc1fbad637bfe20569b068116d3c740faa43077a0c0d9737807bd27efd75d2d6bad9fef6b93fbd0caf56e5fbf457355e007b4c6f7ffdd491a514785f2667cacd8f9918c243d042dcecaa4a93d2726a5306d8b4a1ca0ac644ba3cf80abeee7c49dc6919fc80a5578d8befd74ff2c00684fe7573e8310e3500418e45ceaac28b25e23ae7a30e640cd281f13eb28a78857d1d00dac932aa21382866582daaefc49f41fb3d0c8e4bbdda52480b40f0240111b4202e358a14ab9bd5abf28f67a8f3868793a0d9e895f2294105186495c4614cf20f6f02aae645fcddef7bf34a640f08270b5fd98b522f13a10ccf35de0a5613824be780d694bccd5c8254d1bc17a7df988bf1407baf2e33e90e70fb6329c55a9b213ecf78be229ac4926ef81a0a83f6fe0b967543ddd7e045e1cf205ab70b5ef364063b22385bfd5a1512514e08aafadb76becf811a36d8343e1f4d1b7ac69389cb25ef9c2efd20c45bc6775ffdc4019435c66d8da4b530c821f775fcafacceee1941d66612adbbc5b74b606c9c1cc526f7a3c26096a70187e3a3445f42c602372a0a9076e1c6f1d994afbcde2ccaefc3748269173e76d40a2bf72f76cc8de659c43a3b8ea78e33d4fd8f768c8567a2baf3e6b615c0c6d62419d4155e402bc528703ba22686724a06c69ea9c8f5623c2df6305ac935d4c2cdb5bae331020ae3db03003b5e15480746c9f9aafabf0435fce8fa85a0fd55e196aa7e69309417ccaa14197cfe8ff8712986234dd7669a27abc6f3b1f441a83cb495ee1dcd0c6d9851aa391f489f59aa4009ecb439574f64cedc706baac54c4a15127cc66ca36ce0e227dcbfdf8dbe568b81b238ab0582a2a344a16d9f8e3466e12c7d23b3c40d6e44abbfd27b24dc45ac9a90e4ebdf8657a8dd1ffb16231f4d12abb33fb791ea2d40635723b035284c25f042c9bc2a0055ab5fec5e60b9cea39c2438723f388fd1b878265c73ed733100f226a60df3065a4f63c0cae0d6250a13bc3d8246831a66282eec17c45ac1086469d88ee7d9760e0010234a062369043b358929124e627f3cf8bf6304fa6e0d2925d355d305914cdf080f8e770bef9a5f521ae9cefbd0c8561b1e84aa4c992b8d9929e612341a9f505afe0212f0b9497641eab90248a38c371ac99e984a4e762c30893871cc1494a3a183c47167b30ab71f3fbabe9f7ac1a0a65d57006792a8cc69e428de0482f57cd368585efdb19764fc8d156270502dd3e2041a2bc218f9094014973e37bb0b69eb1103a0430512277bcafbabf72e79cbbf08323362107962350d0148528cc593ff22d83df71d6c7a354d5e4482bd9a20d14f887d5dda830f529b987ff33a24178ee5a3f1291e4b5308781355bab1f463814a26ed9e91eac16f1c9a1e6358315ddbe14cae7b5c48fc07be37d1adebbd280aa09a2bdd2532a8eaf25745ed2e25f3cf61d6a18bde682920455a2250ebfb1109438e26054fc497dec8a77f36ae8bbc4cd124456122bd3561ae88363df9331f8c0d1488954ab00014eba3ae7474c182677592c47d0d0c2bd723ca3a8cafff97a3dcd1d9b97ef9c4a0ca3a79c2c577aaab3c0e44664939434ac324bcf5c13d19965066d8577eeb2d984a647bfc980be4c794085bc40edd8ee75de1a3abd00ca5a2fa699309fd552c04200442eb5bfd564c1ab3077fbc358bdf0b69a4a5437eed70bf0255ec5d98fe2c7df853c73560dec23edf06a1b4bbaf8c865f5c7d518ecfc76150c8dd7ecae5f3ed53e2dc025ad1737c505a0cdba496749ec43c088098a4b4ffa181d6b772493ed16a51e203971d14590143ea70b156e15d218fd5cee6ae1a1bd5b424bcdf6a4fc6534d38ab3b5ed1d434645b0f6370d5611f2a999cc6baa854a58f167987271de08661ac4bf94332d61347f19985f5993e0df210e3a1ca31da7a9d328a36320f3cf6cfdbd97f07a73253ddc953de5bef9a89365a8b2b92c92fd64aed81c6c27d30e558c7851188079873679190f52d08515cad2f88df16be663c529a4a2b0e081fdfbdb83073be29677bc14604a4746bceee93cdbd0ca3b3932b1a9a1888af7ff7e97e27aac05245c90e001783c2857b41d068b3e50942e2dc5aa12f9abe0bc413b4870788bb69e0cb11a3cdffa636a0ef995b1155de19e9b5afb26a763de9a375d726c8de2487c78d3da89f3331b7968d25fd0f7c24685cacd66f2e6d8013f279cd24c9f9d67593be0d0ec2600fe7d2632c0e0f3d1ebca8f8b1c2f645d0c28d7f8f7272dafaa29be50320db5f659ed545b2344d697403f3dd01e06d344260e7e073eb2046d7612c087bf66baaa35677696f57bbc6ea884b2568592d8debad248719bfd4d6476873fd75376daac72860f5672"}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002abd7000ffdbdf253d00000008000300", @ANYRES32=r15, @ANYBLOB="084dfc0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) r16 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0281, 0x0) write$dsp(r16, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 46.359305493s ago: executing program 3 (id=232): syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05044000000905830391"], 0x0) (async) syz_open_dev$evdev(&(0x7f00000001c0), 0x4, 0xc800) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000000}) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 45.187245807s ago: executing program 3 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) (async) write$uinput_user_dev(r2, &(0x7f0000000840)={'syz1\x00', {0x0, 0x1}, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x431cceba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x2]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000480), &(0x7f00000004c0)='./file0/../file0/file0\x00', 0x17, 0x3) (async) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x3, {0xfffffff8, 0x5, 0x6, 0x9, 0xe036, 0x2}}) (async) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) (async, rerun: 32) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000300), 0x40000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfffffffe}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1c}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x80) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) (rerun: 32) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 45.130864898s ago: executing program 3 (id=246): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@lowerdir, 0x5c}]}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x81) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff0055e5c0d48bd63ffdb93bd43a847a1597c8ef039a5be422", 0x38}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x3, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff0055e5c0d48bd63ffdb93bd43a847a1597c8ef039a5be422", 0x80000037}, 0x60) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000500)=""/202, 0xca) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000098280024001a80200005801c00018008000200000000000800010000000000080003"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@deltfilter={0x2c, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffe0, 0x7}, {0x0, 0x3}, {0xf, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004840}, 0x4000) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r5, 0x11a, 0x2, 0x0, &(0x7f0000000240)) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000088a84b00810048000800480000340000000000069078ac141480ac1e00018907d7ffffffff440400200000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000b0b787d3aac97d95c7cc9cda39af0937967f7dfddda1ed9d29b0d467c22c85293c1ee1c0be3d776f6b7093e9e4bf4e50187fa52fee688fb2ef17ee375e2bbe09c54ce2d258f16ae0668828b07e2616833135e570a9f7557ddb1869d75a693f48de914892a941cfa0555826b01227cd1e3afbba1aa24a9a"], 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 44.901390379s ago: executing program 3 (id=249): setrlimit(0x2, &(0x7f00000000c0)={0x4, 0x2400000}) mremap(&(0x7f000073d000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) 44.815191228s ago: executing program 33 (id=249): setrlimit(0x2, &(0x7f00000000c0)={0x4, 0x2400000}) mremap(&(0x7f000073d000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) 33.661401312s ago: executing program 1 (id=440): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000005800)='./bus\x00', 0x6b76f27452643c0) socket(0x22, 0x803, 0xffffff7d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 33.660080636s ago: executing program 1 (id=441): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000500)="7c5331fc93141cfcf00756b5b10006", 0x0, 0x3, 0x60000000, 0xf, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000040)={0x6, 'nr0\x00', {0x2}, 0x100}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x3}}) recvmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2002) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) sendmmsg(r2, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r6 = socket$inet(0x2, 0xa, 0x8) recvmmsg(r6, &(0x7f0000003640)=[{{&(0x7f0000000040)=@caif=@dbg, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/190, 0xbe}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/229, 0xe5}], 0x3, &(0x7f00000015c0)=""/4085, 0xff5}, 0x2f9a0633}, {{&(0x7f0000000200), 0x80, &(0x7f00000002c0)=[{&(0x7f00000025c0)=""/249, 0xfffffe96}, {&(0x7f00000026c0)=""/203, 0xcb}, {&(0x7f0000000480)=""/148, 0x94}], 0x3, &(0x7f00000027c0)=""/172, 0xac}, 0xb}, {{&(0x7f0000002880)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000300)=[{&(0x7f0000003800)=""/132, 0x84}, {&(0x7f00000029c0)=""/118, 0x76}], 0x2, &(0x7f0000002a40)=""/137, 0x89}, 0xc}, {{&(0x7f0000002b00)=@ieee802154, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002b80)=""/96, 0x60}, {&(0x7f0000002c00)=""/12, 0xc}, {&(0x7f0000002c40)=""/47, 0x2f}, {&(0x7f0000002c80)=""/33, 0x21}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/40, 0x28}, {&(0x7f0000002d00)=""/173, 0xad}, {&(0x7f0000002dc0)=""/253, 0xfd}], 0x8, &(0x7f0000002f40)=""/187, 0xbb}, 0x1}, {{&(0x7f0000003000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003080)=""/117, 0x75}, {&(0x7f0000003100)=""/196, 0xc4}, {&(0x7f0000003200)}, {&(0x7f0000003240)=""/110, 0x6e}], 0x4}, 0x9}, {{&(0x7f0000003300)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003380)=""/61, 0x3d}, {&(0x7f00000033c0)=""/109, 0x6d}, {&(0x7f0000003440)}, {&(0x7f0000003480)=""/181, 0xb5}], 0x4, &(0x7f0000003580)=""/139, 0x8b}, 0x697}], 0x6, 0x10000, &(0x7f00000037c0)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x8004) 32.721918094s ago: executing program 1 (id=455): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x2e24, @empty}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x67) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f00000000c0)={0x19, 0x5}) sendfile(r3, r4, 0x0, 0x4000000000010046) r6 = socket(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r7, 0x0) read(r9, &(0x7f00000000c0)=""/226, 0xe2) ioctl$FBIOBLANK(r9, 0x4611, 0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) 32.644522337s ago: executing program 1 (id=458): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f0000000880)='./file1\x00', 0x0, 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r8 = open(&(0x7f00000003c0)='./file1\x00', 0x410180, 0x4) symlinkat(&(0x7f00000000c0)='./file1\x00', r8, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, &(0x7f0000000180)) (async) ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x800000000000001) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000280)={0x80000001}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x22) 32.55843214s ago: executing program 1 (id=461): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {@in=@loopback, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd28}}]}, 0x148}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x66}, [@call={0x16, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 31.500403232s ago: executing program 1 (id=468): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) write$FUSE_BMAP(r0, &(0x7f00000004c0)={0x18, 0xfffffffffffffffe, 0x0, {0x9}}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x700, 0x1, 0x5e07239e, 0xffffffff, {{0x6, 0x4, 0x2, 0x7, 0x18, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x7d, 0x7, 0x2, 0x1, 0x11, @remote, @private0, 0x8000, 0x60, 0x80000000, 0xfffffff8}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r8, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x50, r6, 0x400, 0x3, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe21}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="00042abd70000800010400000000000003000000000005000500060000000400018008080300040000004000018008000700", @ANYRES32=r2, @ANYBLOB="14000400fc00000000000000000000000000000008000300ac1414bb08000700", @ANYRES32=r3, @ANYBLOB="060005004e21000008000700", @ANYRES32=r4, @ANYBLOB="05000500070000000c000680050002000b00000014000180060001000200000008000700", @ANYRES32=r9, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000980)='erofs\x00', 0xc, 0x0) 31.478389991s ago: executing program 34 (id=468): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) write$FUSE_BMAP(r0, &(0x7f00000004c0)={0x18, 0xfffffffffffffffe, 0x0, {0x9}}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x700, 0x1, 0x5e07239e, 0xffffffff, {{0x6, 0x4, 0x2, 0x7, 0x18, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x7d, 0x7, 0x2, 0x1, 0x11, @remote, @private0, 0x8000, 0x60, 0x80000000, 0xfffffff8}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r8, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x50, r6, 0x400, 0x3, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe21}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4040005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="00042abd70000800010400000000000003000000000005000500060000000400018008080300040000004000018008000700", @ANYRES32=r2, @ANYBLOB="14000400fc00000000000000000000000000000008000300ac1414bb08000700", @ANYRES32=r3, @ANYBLOB="060005004e21000008000700", @ANYRES32=r4, @ANYBLOB="05000500070000000c000680050002000b00000014000180060001000200000008000700", @ANYRES32=r9, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000980)='erofs\x00', 0xc, 0x0) 16.502034849s ago: executing program 4 (id=692): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="926b8f3ab19574641296e1cddd65583aabb11c922330813be68c071276bbd420f78f28157f56c0dcb2e72283e9853b3251bfb3f7bc868586f9bb0a5e5a49cbdcd9cea27cbccb605648e05d9af945b2aee81103b9eb157628c75492690f354043fe5df5c4e95351e5437ebb5b135df570f04f5118a0", 0x75}], 0x2) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) (async) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x100) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000005c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3549100dc5226c896b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xeebc7af0614cea2}}}, 0x24}}, 0x0) recvmmsg(r4, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/147, 0x93}], 0x1}, 0xfffffffe}], 0x1, 0x10002, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='ufs\x00', 0x110a040, &(0x7f00000002c0)='!\\\'-{%\x00') 15.621096657s ago: executing program 4 (id=703): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000000)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0], 0x50}}, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x61) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r5, 0x2, 0x9, 0x0, 0x3, [0x0], [0xb, 0x0, 0xffffffff], [0x0, 0x1001000, 0x0, 0x3c2], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={0x0, 0x2000, 0x3ff, 0x34325241, 0x0, [r6], [0x2b8]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r8, 0x103, 0x2, 0x0, &(0x7f0000002fc0)) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r7, 0x8008ae9d, &(0x7f0000002d40)=""/239) 15.570892149s ago: executing program 4 (id=704): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x8000000, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) (async) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="8cff7cf90800d00a611642de00800000"], 0x2000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x88, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0c}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @empty, 0x5}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 14.890970513s ago: executing program 4 (id=711): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc044) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfdef) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f00000000c0)=0x8, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003d0003010000000000000000017c0000040008800c00018006000600800a000008000280040015"], 0x76}, 0x1, 0x0, 0x0, 0x10}, 0xc000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000003d000900000000000008000001000000040000001c0001801800108014000d0076657468315f766972745f776966690008000200", @ANYRES32, @ANYBLOB="0380e35b19ded21a7f02c8cbb0274705aa373cbde9b563605ab3c8ce1e04dc23fe59aa0ce8ab51517eb46e213b6a52432924fc6ed1e124350a5e85b92d669e1da261714ba9040b1727cf1b1bb0d5f85de481d5088c6b47cd5f2b3e2c67e87bb0b4aa7e8538b0193820af6fa2a66c5beeeae0addda4c8ce99ae2e912370f3f3fd7fc8dd6827bcfaf1c4c11c29e433fdf1726418f290083debcb701f9636806af2c38a59b375fe"], 0x3c}}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000007c0)="76389e147583ddd0579ba56a5cfd", 0x0, 0x3400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r8, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) read$FUSE(r7, &(0x7f0000001600)={0x2020}, 0x2020) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="e0ba290c6dc24f159cb1d93b6754393cdaf299127fbf19d70c2ce517cffedff24339102f7457f2c6ef98d2356f20c2a703a4516ed8b18b83f06048efbdd0d1a3b2bc1ec506ed3625029b91df121b6d392034b138647dfec270b3c3472748e43b7b0608431063dbcb9b62b37d9136db78f9f4c13b780895137f2e756fbab3d37056805324f46356a480986fd27ff6381c84bbbf159a3c04dcbc77570c1b275be9aab6f3ff744b22177917bd7a7572320502e5d837cf811ef699bd6c851d", 0xbd, 0x24000000, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) gettid() sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c0100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08000d0005000000"], 0x16c}}, 0x0) 14.88867694s ago: executing program 4 (id=714): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r1, 0xedaa7000) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) (async, rerun: 32) ppoll(&(0x7f0000000100)=[{r0, 0x4005}, {r1, 0x4110}, {}, {0xffffffffffffffff, 0x4010}, {r2, 0x202}], 0x5, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)={[0x3]}, 0x8) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200403a00fe8000000000000000000000000000bbff0200000000000000000000000d00000000000000000000694541438000000020010000000000000000ffffffff0001fc020000000000000000000000000000890000000000000098efd03a7e60b623"], 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) 14.799813737s ago: executing program 4 (id=716): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000004c80), 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) dup(r0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000002500)={0x2c, r7, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000018}, 0x40080) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') 1.300951308s ago: executing program 5 (id=880): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x7e}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5fa}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x92, &(0x7f0000000200)=""/146, 0x40f00, 0x50, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x1, 0x3, 0x509b}, 0x10, 0x2076b, 0xffffffffffffffff, 0x4, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000380)=[{0x5, 0x2, 0x2, 0x1}, {0x4, 0x2, 0xc}, {0x2, 0x2, 0x9, 0xc}, {0x5, 0x4, 0xe, 0x8}], 0x10, 0x9, @void, @value}, 0x94) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r0, 0x92297000) socket$key(0xf, 0x3, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x560c0, 0x0) pread64(r1, &(0x7f0000000000)=""/56, 0x38, 0x35) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) (async) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x40084146, &(0x7f0000000080)) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x40084146, &(0x7f0000000080)) 1.23163938s ago: executing program 5 (id=881): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'vxcan1\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40050}, 0x800) (async) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 1.230603569s ago: executing program 5 (id=882): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000040)={0x6, 'nr0\x00', {0x2}, 0x100}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x3}}) recvmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2002) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) sendmmsg(r2, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r6 = socket$inet(0x2, 0xa, 0x8) recvmmsg(r6, &(0x7f0000003640)=[{{&(0x7f0000000040)=@caif=@dbg, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/190, 0xbe}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/229, 0xe5}], 0x3, &(0x7f00000015c0)=""/4085, 0xff5}, 0x2f9a0633}, {{&(0x7f0000000200), 0x80, &(0x7f00000002c0)=[{&(0x7f00000025c0)=""/249, 0xfffffe96}, {&(0x7f00000026c0)=""/203, 0xcb}, {&(0x7f0000000480)=""/148, 0x94}], 0x3, &(0x7f00000027c0)=""/172, 0xac}, 0xb}, {{&(0x7f0000002880)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000300)=[{&(0x7f0000003800)=""/132, 0x84}, {&(0x7f00000029c0)=""/118, 0x76}], 0x2, &(0x7f0000002a40)=""/137, 0x89}, 0xc}, {{&(0x7f0000002b00)=@ieee802154, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002b80)=""/96, 0x60}, {&(0x7f0000002c00)=""/12, 0xc}, {&(0x7f0000002c40)=""/47, 0x2f}, {&(0x7f0000002c80)=""/33, 0x21}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/40, 0x28}, {&(0x7f0000002d00)=""/173, 0xad}, {&(0x7f0000002dc0)=""/253, 0xfd}], 0x8, &(0x7f0000002f40)=""/187, 0xbb}, 0x1}, {{&(0x7f0000003000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003080)=""/117, 0x75}, {&(0x7f0000003100)=""/196, 0xc4}, {&(0x7f0000003200)}, {&(0x7f0000003240)=""/110, 0x6e}], 0x4}, 0x9}, {{&(0x7f0000003300)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003380)=""/61, 0x3d}, {&(0x7f00000033c0)=""/109, 0x6d}, {&(0x7f0000003440)}, {&(0x7f0000003480)=""/181, 0xb5}], 0x4, &(0x7f0000003580)=""/139, 0x8b}, 0x697}], 0x6, 0x10000, &(0x7f00000037c0)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x8004) 751.263014ms ago: executing program 0 (id=884): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8405}, 0x24048870) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x28}, 0x1, 0x6c00}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) close_range(0xffffffffffffffff, r6, 0x2) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat(r7, &(0x7f0000000100)='./file0\x00', 0x400, 0x26) getdents64(r7, 0x0, 0x11) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x800000003, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x20000, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x22, [], 0x0, [0x0, 0xc2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}}}]}, 0x88}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4900, 0x30a8a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10004}, 0x4080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r15 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 641.175378ms ago: executing program 0 (id=885): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) (async) sendmmsg$unix(r0, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0}}], 0x1, 0x0) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$vhost_msg(r2, 0x0, 0x0) (async) write$vhost_msg_v2(r2, &(0x7f00000006c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) (async) sysfs$1(0x1, &(0x7f0000000040)='\'\x00') r3 = socket$kcm(0x10, 0x2, 0x4) write$vhost_msg_v2(r2, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000080), 0x0, &(0x7f0000000180)=""/139, 0x3, 0x2}}, 0x48) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 639.779419ms ago: executing program 0 (id=886): r0 = socket$key(0xf, 0x3, 0x2) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='RECLEV\nPHONEOUT\nSPEAK'], 0xb8) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000200)={0xa0000004}) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000300), &(0x7f0000000c80)=0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r9, &(0x7f0000004180)={0x2020}, 0x2020) r10 = creat(&(0x7f0000000d00)='./file0\x00', 0x100) bind$xdp(r9, &(0x7f0000000d40)={0x2c, 0x0, r8, 0x37, r10}, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg(r0, &(0x7f0000000c40)={&(0x7f00000001c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000000)="314bec6a555327fb981e40b300e58c96307f2bdc93d433344f36d55f2c5b00", 0x1f}, {&(0x7f0000000240)="992aefa26631e9698caa3b3fb722cb72e8493b", 0x13}, {&(0x7f0000000400)="5296d0c15675dd8220ca87f9f5e66bdd4178ca13271a268eaee72f68f7c2f2e2119154ef71def181a0c9d66dbc92fcd08978ba3253923b0cbf6ef1623b4d97d3ada0d84fd28c8cec5dcbe3e2b3aa68781213f0a388f2790499f4c865de9eb37938ed1126ee4b17af692d8f8b42a63887c447c77adf2d961e3adbcb7022e64b17a73c6a5114699aa2364055b1a47b31998b8e5d0b437bc28b691f2932f0ae89fc7309be668e775723d4e54c612c65047b03698d5b2c8edd5d83ccecdc98a8182be7094c54941ce973c54bad018fe9be03438dddda4b4d04bc9a2ef656f9396e0f4ac4b4f587b114bcc2f3482280967e4ea8adad92abddd2340ef3b8", 0xfb}, {&(0x7f0000000280)="b87f9b590dfc40410eeaed9acbb6e1241a30ce54cc1f", 0x16}, {&(0x7f0000000300)}], 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x6b8}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000000000000100000008000100", @ANYRES32=r8, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e19626c65640000000000ed0000000000000005000300060000000400040008080600", @ANYRES32=r6, @ANYBLOB], 0x5c}, 0x1, 0xf000}, 0x0) r12 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="94000000", @ANYRES16=r15, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r14, @ANYBLOB="0a000600080211000001000005001900020000000500e400010000000600b5004601000005007400060000000500130000000000060012"], 0x94}}, 0x90) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYRESHEX=r12], 0x10}}, 0x55) 591.62901ms ago: executing program 0 (id=888): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) close(r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000140)=0x1) 382.960156ms ago: executing program 5 (id=892): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, 0xb7, 0x2) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="37eb290aca"], 0x20000600}}, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000}, 0x18) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r0, r1, r2, r3, r5, r6, r7], 0x7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r9, 0x1, 0x0, 0x400000, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 319.399106ms ago: executing program 5 (id=894): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='fscache_cache\x00', r1, 0x0, 0x8}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) close_range(r6, 0xffffffffffffffff, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f0000000300)=0x80) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r7, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0xb8, 0x0, 0x0, [{{0x200000000000, 0x0, 0xd, 0x2, 0x1000, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x2, 0xc000, 0x0, 0x0, 0x0, 0x1ffd}}, {0x0, 0x0, 0xf, 0x0, 'N\x01\xaf\xd5f\xa0\'\xad\xb3\x84\xe9\xb6v\xdab'}}]}, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1002, 0x8243}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000100)={0x0, 0x1}) fcntl$lock(r11, 0x5, &(0x7f0000000240)={0x1, 0x1, 0xff, 0xffffffffffffff01, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000140)={&(0x7f0000000040)=[r12], 0x0, 0x5, 0x1, 0xc}) 181.563672ms ago: executing program 5 (id=899): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYBLOB="00082dbd7000ffdbdf250c0000002c00038008000300ffff00000800010004000000080001000002000008000300050000000800020005000000880001800f00010069623a697036746e6c300000380004001400010002004e22ac1e01010000000000000000200002000a004e230000000200000000000000000000000000000000020000002c000280080001001a00000008000100100000000800040003000000080004001c04000008000100040000000e0001006574683a626f6e643000000010000680040002000800060002000000000104801400078008000300a306000008000300dd0400003c000780080001001e000000080002007f000000080001001700000008000400ff0000000800040004000000080003000600000008000100040000000900010073797a30000000000908010073797a31000000000900010073797a30000000003c00078008000400ffff00000800030000000000080004000600000008000400460000000800040005000000080001000700000008000200000000004c0007800800040000000000080001001a000000080004003c050000080001000700000008000400160000000800030009000000080004002600000008000100070000000800010009000000640004800900010073797a31000000002c0007800800040095000000080001000600000008000300030000000800040000000000080003000180000014000780080004000700000008000400050000001300010062726f6164636173742d6c696e6b0000600006800400050004000200040005000400020008000600040000004200040067636d28616573290000000000000000000000000000000000000000000000001a000000a52a9d12fffe79a5cfff4eb0de6ec67d24b27fdf4d630243dcb30000040003801c0002800c0003800800010001000000040004"], 0x300}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x4, 0x3, 0x2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x1, 0x40, 0x9}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x40, 0x10, 0xffffffff, 0xffff, {{0xb, 0x4, 0x1, 0x19, 0x2c, 0x68, 0x0, 0xce, 0x2f, 0x0, @local, @loopback, {[@cipso={0x86, 0x9, 0xffffffffffffffff, [{0x2, 0x3, "99"}]}, @ssrr={0x89, 0xf, 0xc7, [@rand_addr=0x64010102, @rand_addr=0x64010100, @private=0xa010100]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000400)=0x5) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) (async) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1b0) (async) write$char_usb(r6, &(0x7f0000000080)="74b81f50ce874bc380b8516220d19fea8ef7bfb5195033657282008b8491d67c49539cd2874a65458ef32f864afcee307665e6a8eb32525568b78bbdba8343", 0x3f) 131.074164ms ago: executing program 6 (id=901): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x40}}}]}, 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r5) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @random="44b53e0f1690", @void, {@ipv6={0x86dd, @dccp_packet={0x7, 0x6, "180a36", 0x20, 0x21, 0x0, @private1, @mcast2, {[@srh={0x3b, 0x0, 0x4, 0x0, 0x7, 0x0, 0x4}, @hopopts={0x89}], {{0x4e2b, 0x4e23, 0x4, 0x1, 0x5, 0x0, 0x0, 0x9, 0x7, '\x00', 0x80, "a3c42f"}}}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000080)=r7}, 0x20) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000090060000448bbe8babf56d8b34000000c5110000000a3c000000090a0506d20000003ae300000100030008000a40000000000900020073797a00000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x20004081) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x10d000}) close_range(r0, 0xffffffffffffffff, 0x0) 130.842466ms ago: executing program 6 (id=902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x21, 0x13, [{0x60}, {0x2}, {0x5}, {0x12, 0x1}, {0x9, 0x1}, {0x6c, 0x1}, {0x3b}, {0x30, 0x1}, {0x4b, 0x1}, {0x30}, {0x60, 0x1}, {0x60, 0x1}, {0x3}, {0x1b, 0x1}, {0xb}, {0x48}, {0x6c}, {0x4, 0x1}, {0x6}, {0x30}, {0x30}, {0x1}, {0x48}, {0x2, 0x1}, {0x18, 0x1}, {0x36, 0x1}, {0x24}, {0xb}, {0x1, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8084}, 0x8841) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) 61.755802ms ago: executing program 6 (id=903): mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_dev$sndctrl(&(0x7f00000070c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000100)=""/184) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) 60.706475ms ago: executing program 6 (id=904): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@lowerdir, 0x5c}]}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x81) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x3, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff0055e5c0d48bd63ffdb93bd43a847a1597c8ef039a5be422", 0x80000037}, 0x60) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000500)=""/202, 0xca) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000013000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000098280024001a80200005801c00018008000200000000000800010000000000080003"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@deltfilter={0x2c, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffe0, 0x7}, {0x0, 0x3}, {0xf, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004840}, 0x4000) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r6, 0x11a, 0x2, 0x0, &(0x7f0000000240)) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000088a84b00810048000800480000340000000000069078ac141480ac1e00018907d7ffffffff440400200000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000b0b787d3aac97d95c7cc9cda39af0937967f7dfddda1ed9d29b0d467c22c85293c1ee1c0be3d776f6b7093e9e4bf4e50187fa52fee688fb2ef17ee375e2bbe09c54ce2d258f16ae0668828b07e2616833135e570a9f7557ddb1869d75a693f48de914892a941cfa0555826b01227cd1e3afbba1aa24a9a"], 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r10 = userfaultfd(0x1) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_ZEROPAGE(r10, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 60.537494ms ago: executing program 0 (id=905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x120, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x20000885) (async) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) (async) listen(r2, 0x0) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCXONC(r3, 0x540a, 0x1) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f00000003c0)=0x7) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="68000000f1c439af6e2c9e8d67ae957d96631128f3a2909e4a66be9e22f3af1eb5917f1d35f782346d77bfe663af5ade179013929b7d0c32fbdb61", @ANYRES16=r1, @ANYBLOB="1000000000000000000008000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000e00a80066697273746e616d65000000"], 0x68}}, 0x0) 485.432µs ago: executing program 6 (id=906): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) getsockopt$inet6_int(r1, 0x29, 0x48, 0x0, &(0x7f00007d0000)) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newnexthop={0x18, 0x68, 0x1, 0x3, 0x80000000}, 0x18}}, 0x40000) 282.055µs ago: executing program 0 (id=907): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a", 0x8}], 0x1}}], 0x1, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000151401"], 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="014026bd7000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="06001200000800000a000600ffffffffffff00000600b5008501000015001300b68c046cb01800b03648004806ec6ce02400000006001a0104000000050019"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a", 0x8}], 0x1}}], 0x1, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000151401"], 0x18}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x14) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="014026bd7000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="06001200000800000a000600ffffffffffff00000600b5008501000015001300b68c046cb01800b03648004806ec6ce02400000006001a0104000000050019"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x8004) (async) 0s ago: executing program 6 (id=908): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default trusted:'], 0x34, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) prctl$PR_SET_FPEXC(0xc, 0x3) socket$inet6(0xa, 0x3, 0x6) (async) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x68541) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000021c0)={'\x00', 0x0, 0xf, 0x1e23c38, 0x9, 0x20}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r4, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES8=r1, @ANYRESDEC=r4, @ANYBLOB="b1a49125ae6cb3e64c7820a1ec519672482868be2cfdc8a00111c9dcdfcf8b1590f8664b476bf712748bf7d98fa14b7c7caaad3cce637a9b193c09bc51f67931f4c1075ea758fff52f", @ANYRESDEC=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4080000}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2000) (async) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2000) ioctl$CEC_ADAP_G_LOG_ADDRS(r7, 0x805c6103, &(0x7f0000000040)) (async) ioctl$CEC_ADAP_G_LOG_ADDRS(r7, 0x805c6103, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='geneve1\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='geneve1\x00', 0x10) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r8], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x20) kernel console output (not intermixed with test programs): icast mode [ 56.323794][ T11] bridge_slave_1: left promiscuous mode [ 56.326433][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.331754][ T11] bridge_slave_0: left allmulticast mode [ 56.333849][ T11] bridge_slave_0: left promiscuous mode [ 56.335982][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.376644][ T30] usb 6-1: USB disconnect, device number 4 [ 56.431256][ T40] audit: type=1326 audit(1737442137.897:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6421 comm="syz.3.129" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6be1d85d29 code=0x0 [ 56.452885][ T217] Bluetooth: Error in BCSP hdr checksum [ 56.548911][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.554104][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.557625][ T11] bond0 (unregistering): Released all slaves [ 56.559016][ T40] audit: type=1400 audit(1737442138.017:285): avc: denied { create } for pid=6421 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 56.565538][ T40] audit: type=1400 audit(1737442138.017:286): avc: denied { setopt } for pid=6421 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 56.596637][ T6404] team0: Port device team_slave_0 added [ 56.599909][ T6404] team0: Port device team_slave_1 added [ 56.624853][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.627168][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.634965][ T6404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.639242][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.641438][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.648813][ T6404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.692705][ T6404] hsr_slave_0: entered promiscuous mode [ 56.694826][ T6404] hsr_slave_1: entered promiscuous mode [ 56.696801][ T6404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.699368][ T6404] Cannot create hsr debugfs directory [ 56.711461][ T84] Bluetooth: Error in BCSP hdr checksum [ 56.727870][ T40] audit: type=1400 audit(1737442138.187:287): avc: denied { search } for pid=5648 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.789280][ T6404] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.795203][ T6404] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.797858][ T40] audit: type=1400 audit(1737442138.257:288): avc: denied { read } for pid=6430 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.807909][ T40] audit: type=1400 audit(1737442138.257:289): avc: denied { open } for pid=6430 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.817640][ T40] audit: type=1400 audit(1737442138.257:290): avc: denied { getattr } for pid=6430 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.825640][ T40] audit: type=1400 audit(1737442138.267:291): avc: denied { write } for pid=6429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.833525][ T40] audit: type=1400 audit(1737442138.267:292): avc: denied { add_name } for pid=6429 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.841289][ T11] hsr_slave_0: left promiscuous mode [ 56.843700][ T11] hsr_slave_1: left promiscuous mode [ 56.846010][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.848320][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.851114][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.853738][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.869087][ T11] veth1_macvtap: left promiscuous mode [ 56.871012][ T11] veth0_macvtap: left promiscuous mode [ 56.872775][ T11] veth1_vlan: left promiscuous mode [ 56.874432][ T11] veth0_vlan: left promiscuous mode [ 56.974152][ T84] Bluetooth: Error in BCSP hdr checksum [ 57.321203][ T1136] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x84 [ 57.379926][ T11] team0 (unregistering): Port device team_slave_1 removed [ 57.431685][ T11] team0 (unregistering): Port device team_slave_0 removed [ 57.812962][ T6404] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.822334][ T6404] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.118960][ T6404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.127416][ T6404] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.131653][ T5947] Bluetooth: hci3: command tx timeout [ 58.132692][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.135968][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.142399][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.144470][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.201160][ T5952] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 58.201205][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 58.239696][ T6404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.291698][ T6481] random: crng reseeded on system resumption [ 58.339119][ T6404] veth0_vlan: entered promiscuous mode [ 58.343767][ T6404] veth1_vlan: entered promiscuous mode [ 58.361688][ T6404] veth0_macvtap: entered promiscuous mode [ 58.364667][ T6404] veth1_macvtap: entered promiscuous mode [ 58.370285][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.373645][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.376451][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.379722][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.382993][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.386700][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.390338][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.402213][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.407276][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.410339][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.415795][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.419204][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.423396][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.428723][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.434004][ T6404] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.437184][ T6404] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.440281][ T6404] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.443423][ T6404] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.540660][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.543566][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.554197][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.556516][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.769227][ T6514] __nla_validate_parse: 13 callbacks suppressed [ 58.769237][ T6514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.138'. [ 58.835773][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 58.838834][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 58.906407][ T1136] Bluetooth: hci4: Frame reassembly failed (-84) [ 58.943629][ T6455] orangefs_mount: mount request failed with -4 [ 58.969126][ T6535] overlayfs: empty lowerdir [ 59.027042][ T6546] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 59.124219][ T6553] vlan2: entered promiscuous mode [ 59.125738][ T6553] vlan2: entered allmulticast mode [ 59.226484][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 59.285931][ T6573] block nbd3: not configured, cannot reconfigure [ 59.329486][ T6578] i2c i2c-1: Invalid block write size 34 [ 59.333944][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 59.337484][ T6578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.151'. [ 59.345097][ T6578] geneve2: entered promiscuous mode [ 59.347133][ T6578] geneve2: entered allmulticast mode [ 59.422427][ T6581] overlayfs: empty lowerdir [ 59.453891][ T6583] netlink: 'syz.0.153': attribute type 2 has an invalid length. [ 59.556146][ T6592] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 59.565075][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.100271][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.159'. [ 60.104842][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 60.108070][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.159'. [ 60.173611][ T6610] ip6gretap0: entered promiscuous mode [ 60.176986][ T6610] ip6gretap0: left promiscuous mode [ 60.210758][ T5947] Bluetooth: hci3: command tx timeout [ 60.225419][ T6612] NILFS (nbd4): device size too small [ 60.253406][ T6610] nfs4: Unknown parameter 'dev/nbd4' [ 60.406752][ T6621] kAFS: unable to lookup cell '/,c¾ûL' [ 60.706601][ T6641] netlink: 372 bytes leftover after parsing attributes in process `syz.3.169'. [ 60.737803][ T6643] netlink: 'syz.3.170': attribute type 142 has an invalid length. [ 60.854480][ T39] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x84 [ 60.920516][ T5952] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 60.920593][ T5947] Bluetooth: hci4: command 0xfc11 tx timeout [ 61.074623][ T6658] @: renamed from vlan0 (while UP) [ 61.775688][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 61.775699][ T40] audit: type=1400 audit(1737442143.237:336): avc: denied { ioctl } for pid=6697 comm="syz.3.188" path="socket:[15005]" dev="sockfs" ino=15005 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 61.785717][ T6699] netlink: 'syz.4.186': attribute type 25 has an invalid length. [ 61.792383][ T6698] openvswitch: netlink: Actions may not be safe on all matching packets [ 61.794414][ T6699] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.794905][ T40] audit: type=1400 audit(1737442143.247:337): avc: denied { setattr } for pid=6697 comm="syz.3.188" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 61.805799][ T6699] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.808411][ T6699] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.811044][ T6699] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.829134][ T40] audit: type=1326 audit(1737442143.287:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be1d85d29 code=0x7ffc0000 [ 61.837671][ T40] audit: type=1326 audit(1737442143.287:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be1d85d29 code=0x7ffc0000 [ 61.845945][ T40] audit: type=1326 audit(1737442143.287:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.189" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f6be1d85d29 code=0x7ffc0000 [ 61.854611][ T40] audit: type=1326 audit(1737442143.287:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be1d85d29 code=0x7ffc0000 [ 61.863081][ T40] audit: type=1326 audit(1737442143.287:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be1d85d29 code=0x7ffc0000 [ 61.870811][ T40] audit: type=1326 audit(1737442143.287:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.189" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f6be1d85d29 code=0x7ffc0000 [ 61.877395][ T40] audit: type=1326 audit(1737442143.287:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be1d85d29 code=0x7ffc0000 [ 61.885567][ T40] audit: type=1326 audit(1737442143.287:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be1d85d29 code=0x7ffc0000 [ 61.904762][ T6704] xt_TCPMSS: Only works on TCP SYN packets [ 61.919278][ T39] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x84 [ 62.023056][ T6714] gre0: Master is either lo or non-ether device [ 62.281610][ T5952] Bluetooth: hci3: command tx timeout [ 62.744687][ T6732] loop2: detected capacity change from 0 to 7 [ 62.749268][ T6732] Dev loop2: unable to read RDB block 7 [ 62.751658][ T6732] loop2: unable to read partition table [ 62.754647][ T6732] loop2: partition table beyond EOD, truncated [ 62.757074][ T6732] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 62.765737][ T6737] Bluetooth: MGMT ver 1.23 [ 62.936319][ T1136] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x84 [ 62.979930][ T6757] openvswitch: netlink: IP tunnel dst address not specified [ 63.378238][ T6778] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 63.702713][ T6775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.904440][ T6800] __nla_validate_parse: 8 callbacks suppressed [ 63.904453][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 63.904513][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'. [ 63.908418][ T6800] bridge0: port 3(macsec1) entered blocking state [ 63.913350][ T6800] bridge0: port 3(macsec1) entered disabled state [ 63.915230][ T6800] macsec1: entered allmulticast mode [ 63.918272][ T6800] macsec1: left allmulticast mode [ 63.925507][ T6802] bridge0: port 3(macsec1) entered blocking state [ 63.927841][ T6802] bridge0: port 3(macsec1) entered disabled state [ 63.930848][ T6802] macsec1: entered allmulticast mode [ 63.934380][ T6802] macsec1: left allmulticast mode [ 63.958119][ T6806] netlink: 'syz.4.219': attribute type 10 has an invalid length. [ 63.962367][ T6806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.219'. [ 63.965213][ T6806] bridge0: port 3(macvlan1) entered blocking state [ 63.967203][ T6806] bridge0: port 3(macvlan1) entered disabled state [ 63.969066][ T6806] macvlan1: entered allmulticast mode [ 63.971099][ T6806] veth1_vlan: entered allmulticast mode [ 63.974166][ T6806] macvlan1: entered promiscuous mode [ 63.977003][ T6806] bridge0: port 3(macvlan1) entered blocking state [ 63.980258][ T6806] bridge0: port 3(macvlan1) entered forwarding state [ 64.360662][ T5952] Bluetooth: hci3: command tx timeout [ 64.545569][ T6836] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 64.590683][ T6842] overlayfs: empty lowerdir [ 65.130427][ T5999] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 65.143900][ T6873] x_tables: duplicate underflow at hook 1 [ 65.241166][ T6879] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.236'. [ 65.244592][ T6879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.253388][ T6879] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 65.255379][ T6879] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 65.258468][ T6879] vhci_hcd vhci_hcd.0: Device attached [ 65.261613][ T6880] vhci_hcd: connection closed [ 65.263267][ T66] vhci_hcd: stop threads [ 65.266148][ T66] vhci_hcd: release socket [ 65.267427][ T66] vhci_hcd: disconnect device [ 65.290438][ T5999] usb 8-1: Using ep0 maxpacket: 8 [ 65.293824][ T5999] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 65.296923][ T5999] usb 8-1: config 179 has no interface number 0 [ 65.299901][ T5999] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 65.303970][ T5999] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 65.308138][ T5999] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.312718][ T5999] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 65.317658][ T5999] usb 8-1: config 179 interface 65 has no altsetting 0 [ 65.320210][ T5999] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 65.323650][ T5999] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.332814][ T6861] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 65.345552][ T5999] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input6 [ 65.384362][ T6883] overlayfs: empty lowerdir [ 65.392804][ T5333] input input6: unable to receive magic message: -110 [ 65.398879][ T5333] input input6: unable to receive magic message: -32 [ 65.414434][ T5333] input input6: unable to receive magic message: -32 [ 65.425548][ T5333] input input6: unable to receive magic message: -32 [ 65.458091][ T5940] input input6: unable to receive magic message: -32 [ 65.474607][ T5333] input input6: unable to receive magic message: -32 [ 65.477022][ T5333] input input6: unable to receive magic message: -32 [ 65.502022][ T6894] xt_hashlimit: size too large, truncated to 1048576 [ 65.513800][ T6892] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 65.544293][ T1980] usb 8-1: USB disconnect, device number 2 [ 65.546022][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 65.549176][ T1980] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 66.108310][ T6909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.243'. [ 66.383151][ T217] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.467672][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'. [ 66.519098][ T6939] xt_SECMARK: invalid mode: 0 [ 66.530782][ T217] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.550230][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.553953][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.555484][ T6947] overlayfs: empty lowerdir [ 66.557280][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.562407][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.565188][ T5947] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.567429][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.604894][ T217] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.622507][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'. [ 66.625952][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 66.674675][ T6942] chnl_net:caif_netlink_parms(): no params data found [ 66.703791][ T217] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.749332][ T6942] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.751614][ T6942] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.753847][ T6942] bridge_slave_0: entered allmulticast mode [ 66.756079][ T6942] bridge_slave_0: entered promiscuous mode [ 66.760996][ T6942] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.763917][ T6942] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.766445][ T6942] bridge_slave_1: entered allmulticast mode [ 66.768625][ T6942] bridge_slave_1: entered promiscuous mode [ 66.773382][ T6968] cgroup: No subsys list or none specified [ 66.775204][ T6969] cgroup: No subsys list or none specified [ 66.790291][ T6942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.795169][ T6942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.814885][ T6971] overlay: filesystem on ./bus not supported as upperdir [ 66.822030][ T6971] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 66.828074][ T6942] team0: Port device team_slave_0 added [ 66.831481][ T6942] team0: Port device team_slave_1 added [ 66.834169][ T6971] overlayfs: overlapping lowerdir path [ 66.872347][ T6942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.874489][ T6942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.882598][ T6942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.899503][ T6942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.910454][ T6942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.920228][ T6942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.959356][ T6942] hsr_slave_0: entered promiscuous mode [ 66.962277][ T6942] hsr_slave_1: entered promiscuous mode [ 66.964508][ T6942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.966632][ T6942] Cannot create hsr debugfs directory [ 66.968672][ T217] bridge_slave_1: left allmulticast mode [ 66.971121][ T217] bridge_slave_1: left promiscuous mode [ 66.973045][ T217] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.976771][ T217] bridge_slave_0: left allmulticast mode [ 66.978744][ T217] bridge_slave_0: left promiscuous mode [ 66.981092][ T217] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.227485][ T217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.232935][ T217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.237324][ T217] bond0 (unregistering): Released all slaves [ 67.243707][ T217] bond1 (unregistering): Released all slaves [ 67.249936][ T217] bond2 (unregistering): Released all slaves [ 67.421876][ T6942] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.433161][ T6942] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 67.437148][ T6942] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 67.441534][ T6942] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 67.532369][ T6942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.561530][ T217] hsr_slave_0: left promiscuous mode [ 67.565932][ T217] hsr_slave_1: left promiscuous mode [ 67.573229][ T217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.575353][ T217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.578411][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 67.578419][ T40] audit: type=1400 audit(1737442149.037:381): avc: denied { append } for pid=7004 comm="syz.0.272" name="nbd0" dev="devtmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.587466][ T217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.590263][ T217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.616033][ T217] veth1_macvtap: left promiscuous mode [ 67.617862][ T217] veth0_macvtap: left promiscuous mode [ 67.619430][ T217] veth1_vlan: left promiscuous mode [ 67.623987][ T217] veth0_vlan: left promiscuous mode [ 67.639636][ T7030] overlayfs: empty lowerdir [ 67.670540][ T40] audit: type=1400 audit(1737442149.127:382): avc: denied { create } for pid=7027 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 68.123952][ T217] team0 (unregistering): Port device team_slave_1 removed [ 68.192579][ T217] team0 (unregistering): Port device team_slave_0 removed [ 68.613082][ T5947] Bluetooth: hci0: command tx timeout [ 68.661012][ T6942] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.682815][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.684962][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.689122][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.691164][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.700432][ T6942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.704229][ T6942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.795960][ T6942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.799597][ T7063] program syz.4.283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.905842][ T40] audit: type=1400 audit(1737442150.367:383): avc: denied { mounton } for pid=7080 comm="syz.4.286" path="/48/file0" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 68.916274][ T6942] veth0_vlan: entered promiscuous mode [ 68.920549][ T6942] veth1_vlan: entered promiscuous mode [ 68.934334][ T6942] veth0_macvtap: entered promiscuous mode [ 68.937239][ T6942] veth1_macvtap: entered promiscuous mode [ 68.944265][ T6942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.947545][ T6942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.950298][ T6942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.954071][ T6942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.957024][ T6942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.960013][ T6942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.967220][ T6942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.969197][ T7083] 9pnet_fd: Insufficient options for proto=fd [ 68.970589][ T40] audit: type=1400 audit(1737442150.437:384): avc: denied { mounton } for pid=7080 comm="syz.4.286" path="/48/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 68.970952][ T6942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.970977][ T6942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.970982][ T6942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.970989][ T6942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.970994][ T6942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.971000][ T6942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.971393][ T6942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.002492][ T6942] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.005157][ T6942] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.007844][ T6942] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.010294][ T6942] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.585004][ T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.588175][ T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.608741][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.611383][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.656449][ T7099] overlayfs: empty lowerdir [ 69.699157][ T7104] netlink: 200 bytes leftover after parsing attributes in process `syz.1.290'. [ 69.739549][ T7106] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.773462][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'. [ 69.777390][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'. [ 69.937224][ T7137] SELinux: truncated policydb string identifier [ 69.939367][ T7137] SELinux: failed to load policy [ 69.940950][ T7139] overlayfs: empty lowerdir [ 69.941219][ T40] audit: type=1400 audit(1737442151.397:385): avc: denied { load_policy } for pid=7136 comm="syz.5.297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 69.944069][ T7137] SELinux: policydb version -1000473136 does not match my version range 15-33 [ 69.953549][ T7137] SELinux: failed to load policy [ 70.024628][ T40] audit: type=1400 audit(1737442151.487:386): avc: denied { bind } for pid=7150 comm="syz.5.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.033198][ T40] audit: type=1400 audit(1737442151.497:387): avc: denied { setopt } for pid=7150 comm="syz.5.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.039786][ T7153] netlink: 'syz.5.303': attribute type 10 has an invalid length. [ 70.045214][ T7153] netlink: 40 bytes leftover after parsing attributes in process `syz.5.303'. [ 70.050449][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.301'. [ 70.055962][ T7153] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 70.058653][ T7153] team0: Failed to send options change via netlink (err -105) [ 70.062326][ T7153] team0: Port device geneve0 added [ 70.068832][ T7155] bridge0: port 3(macvlan1) entered disabled state [ 70.070917][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.073897][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.101276][ T40] audit: type=1400 audit(1737442151.567:388): avc: denied { ioctl } for pid=7159 comm="syz.5.305" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 70.140517][ T40] audit: type=1326 audit(1737442151.597:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.4.306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3f385d29 code=0x7ffc0000 [ 70.147027][ T40] audit: type=1326 audit(1737442151.597:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7163 comm="syz.4.306" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d3f385d29 code=0x7ffc0000 [ 70.149744][ T7165] Invalid source name [ 70.170620][ T7165] UBIFS error (pid: 7165): cannot open "/dev/sg0", error -22 [ 70.231268][ T7181] overlayfs: empty lowerdir [ 70.287318][ T7185] netlink: 'syz.1.310': attribute type 13 has an invalid length. [ 70.312474][ T7185] gretap0: refused to change device tx_queue_len [ 70.314755][ T7191] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.319650][ T7185] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 70.461816][ T5998] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 70.512286][ T7212] sctp: [Deprecated]: syz.1.316 (pid 7212) Use of int in max_burst socket option. [ 70.512286][ T7212] Use struct sctp_assoc_value instead [ 70.549543][ T7217] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 70.577070][ T7217] veth0_vlan: left promiscuous mode [ 70.583886][ T7217] veth0_vlan: entered promiscuous mode [ 70.591172][ T7217] team0: Device veth0_vlan failed to register rx_handler [ 70.641235][ T5998] usb 10-1: Using ep0 maxpacket: 32 [ 70.646578][ T5998] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 70.650208][ T5998] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.654307][ T5998] usb 10-1: config 0 descriptor?? [ 70.664435][ T5998] as10x_usb: device has been detected [ 70.666481][ T5998] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 70.677152][ T5998] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 70.680505][ T5947] Bluetooth: hci0: command tx timeout [ 70.693614][ T5998] as10x_usb: error during firmware upload part1 [ 70.695689][ T5998] Registered device nBox DVB-T Dongle [ 70.846497][ T7243] xt_l2tp: v2 tid > 0xffff: 150994944 [ 70.851955][ T7243] netlink: 'syz.4.319': attribute type 1 has an invalid length. [ 70.866478][ T5998] usb 10-1: USB disconnect, device number 2 [ 70.879066][ T7247] overlayfs: empty lowerdir [ 70.879788][ T5998] Unregistered device nBox DVB-T Dongle [ 70.881317][ T5998] as10x_usb: device has been disconnected [ 71.170543][ T5997] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 71.245723][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.248134][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.341958][ T5997] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.345816][ T5997] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 71.348425][ T5997] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 71.355042][ T7273] overlayfs: conflicting options: userxattr,metacopy=on [ 71.360503][ T5997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.364202][ T5997] usb 9-1: config 0 descriptor?? [ 71.369480][ T5997] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 71.372148][ T5997] dvb-usb: bulk message failed: -22 (3/0) [ 71.383797][ T5997] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 71.394881][ T5997] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 71.396933][ T5997] usb 9-1: media controller created [ 71.399136][ T5997] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.405165][ T5997] dvb-usb: bulk message failed: -22 (6/0) [ 71.407075][ T5997] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 71.411963][ T5997] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input8 [ 71.416735][ T7281] netlink: 36 bytes leftover after parsing attributes in process `syz.0.326'. [ 71.418673][ T5997] dvb-usb: schedule remote query interval to 150 msecs. [ 71.422459][ T5997] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 71.497098][ T7293] block device autoloading is deprecated and will be removed. [ 71.548556][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.551273][ T7300] syz.0.330: attempt to access beyond end of device [ 71.551273][ T7300] loop0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 71.556469][ T7300] ADFS-fs (loop0): error: unable to read block 3, try 0 [ 71.557462][ T5947] block nbd1: Receive control failed (result -107) [ 71.561260][ T7276] md2: using deprecated bitmap file support [ 71.563247][ T7276] md2: error: bitmap file must be a regular file [ 71.574603][ T7251] dibusb: i2c wr: len=61 is too big! [ 71.574603][ T7251] [ 71.578720][ T5997] usb 9-1: USB disconnect, device number 2 [ 71.589561][ T5997] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 71.640684][ T7276] nbd1: detected capacity change from 0 to 20 [ 71.645352][ T6020] block nbd1: Dead connection, failed to find a fallback [ 71.647599][ T6020] block nbd1: shutting down sockets [ 71.649339][ T6020] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.652334][ T6020] Buffer I/O error on dev nbd1, logical block 0, async page read [ 71.656817][ T6020] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.659434][ T6020] Buffer I/O error on dev nbd1, logical block 0, async page read [ 71.662489][ T6020] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.665056][ T6020] Buffer I/O error on dev nbd1, logical block 0, async page read [ 71.667326][ T6020] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.670108][ T6020] Buffer I/O error on dev nbd1, logical block 0, async page read [ 71.673366][ T6020] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.675973][ T6020] Buffer I/O error on dev nbd1, logical block 0, async page read [ 71.678253][ T6020] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.681030][ T6020] Buffer I/O error on dev nbd1, logical block 0, async page read [ 71.683309][ T6020] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.686030][ T6020] Buffer I/O error on dev nbd1, logical block 0, async page read [ 71.688252][ T6020] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.691051][ T6020] Buffer I/O error on dev nbd1, logical block 0, async page read [ 71.693298][ T6020] ldm_validate_partition_table(): Disk read failed. [ 71.695221][ T6020] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.697690][ T6020] Buffer I/O error on dev nbd1, logical block 0, async page read [ 71.699953][ T6020] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 71.702678][ T6020] Buffer I/O error on dev nbd1, logical block 0, async page read [ 71.704994][ T6020] Dev nbd1: unable to read RDB block 0 [ 71.706849][ T6020] nbd1: unable to read partition table [ 71.708538][ T6020] nbd1: partition table beyond EOD, truncated [ 71.714114][ T7276] ldm_validate_partition_table(): Disk read failed. [ 71.716702][ T7276] Dev nbd1: unable to read RDB block 0 [ 71.718817][ T7276] nbd1: unable to read partition table [ 71.721361][ T7276] nbd1: partition table beyond EOD, truncated [ 71.725588][ T7276] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 71.728956][ T7276] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=9, location=9 [ 71.733310][ T6020] ldm_validate_partition_table(): Disk read failed. [ 71.735921][ T6020] Dev nbd1: unable to read RDB block 0 [ 71.736116][ T7276] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8, location=8 [ 71.738464][ T6020] nbd1: unable to read partition table [ 71.740473][ T7276] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=7, location=7 [ 71.742911][ T6020] nbd1: partition table beyond EOD, truncated [ 71.744785][ T7276] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 71.750281][ T7276] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 71.754378][ T7276] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=4, location=4 [ 71.757688][ T7276] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3, location=3 [ 71.760475][ T7276] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2, location=2 [ 71.763142][ T7276] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 71.766229][ T7276] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 71.769037][ T7276] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 71.772119][ T7276] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 71.774819][ T7276] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 71.777544][ T7276] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 72.136304][ T7326] kAFS: No cell specified [ 72.349720][ T7337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.335'. [ 72.406424][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 72.409058][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.339'. [ 72.413666][ T7349] Cannot find add_set index 0 as target [ 72.442342][ T7355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.760523][ T5947] Bluetooth: hci0: command tx timeout [ 72.818790][ T7392] SELinux: policydb string length -2131099640 does not match expected length 8 [ 72.821514][ T7392] SELinux: failed to load policy [ 72.823806][ T7392] loop2: detected capacity change from 0 to 7 [ 72.837574][ T7392] Dev loop2: unable to read RDB block 7 [ 72.839636][ T7392] loop2: unable to read partition table [ 72.841622][ T7392] loop2: partition table beyond EOD, truncated [ 72.843620][ T7392] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 72.947572][ T7405] netlink: 'syz.4.353': attribute type 23 has an invalid length. [ 72.955584][ T7405] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.988133][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 72.988148][ T40] audit: type=1400 audit(1737442154.447:451): avc: denied { sys_chroot } for pid=7415 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 73.004920][ T40] audit: type=1400 audit(1737442154.447:452): avc: denied { setgid } for pid=7415 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 73.012744][ T40] audit: type=1400 audit(1737442154.447:453): avc: denied { setuid } for pid=7415 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 73.116953][ T40] audit: type=1400 audit(1737442154.577:454): avc: denied { ioctl } for pid=7424 comm="syz.0.358" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 73.171742][ T7427] loop6: detected capacity change from 0 to 524287999 [ 73.174913][ T40] audit: type=1400 audit(1737442154.637:455): avc: denied { map } for pid=7424 comm="syz.0.358" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.182515][ T40] audit: type=1400 audit(1737442154.637:456): avc: denied { execute } for pid=7424 comm="syz.0.358" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.232591][ T40] audit: type=1400 audit(1737442154.697:457): avc: denied { checkpoint_restore } for pid=7436 comm="syz.1.360" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.239515][ T40] audit: type=1400 audit(1737442154.697:458): avc: denied { getopt } for pid=7436 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 73.354839][ T40] audit: type=1400 audit(1737442154.817:459): avc: denied { write } for pid=7438 comm="syz.0.361" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.362018][ T40] audit: type=1400 audit(1737442154.817:460): avc: denied { ioctl } for pid=7438 comm="syz.0.361" path="/dev/usbmon8" dev="devtmpfs" ino=762 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.595617][ T5952] Bluetooth: hci4: sending frame failed (-49) [ 73.598901][ T5947] Bluetooth: hci4: Entering manufacturer mode failed (-49) [ 73.670313][ T7450] netlink: 64 bytes leftover after parsing attributes in process `syz.1.365'. [ 73.758857][ T7463] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.814484][ T7463] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.857606][ T7468] configfs: Unknown parameter 'a}…$  v¿ ¦‹¬ z£1 “ò8¦ Ãzê:´„á9DªN]éæ1†rÃ>' [ 73.876737][ T7463] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.953520][ T7463] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.036742][ T7474] overlayfs: failed to resolve './file1': -2 [ 74.064867][ T7463] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.070180][ T7463] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.075865][ T7463] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.081970][ T7463] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.093294][ T7479] netlink: 'syz.4.373': attribute type 9 has an invalid length. [ 74.111147][ T7481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2828 sclass=netlink_route_socket pid=7481 comm=syz.5.374 [ 74.183308][ T7490] syz.4.377: attempt to access beyond end of device [ 74.183308][ T7490] nbd4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 74.187495][ T7490] VFS: could not find a valid V7 on nbd4. [ 74.232768][ T7496] $Hÿ: renamed from bond0 (while UP) [ 74.239489][ T7496] $Hÿ: entered promiscuous mode [ 74.243144][ T7496] bond_slave_0: entered promiscuous mode [ 74.245048][ T7496] bond_slave_1: entered promiscuous mode [ 74.840447][ T5947] Bluetooth: hci0: command tx timeout [ 75.169934][ T7535] autofs4:pid:7535:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2863311530.2147592874), cmd(0xc0189374) [ 75.174232][ T7535] autofs4:pid:7535:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 75.181330][ T7537] autofs4:pid:7537:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2863311530.2147592874), cmd(0xc0189374) [ 75.185517][ T7537] autofs4:pid:7537:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 75.330499][ T35] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.480998][ T35] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 75.485931][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.489444][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.500069][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.508088][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.514485][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.517616][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.522163][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.525500][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.529396][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.533968][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.537599][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.542217][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.549220][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.555476][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.558693][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.563622][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.567599][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.571579][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.581840][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.584969][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.588733][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.591966][ T35] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.595617][ T35] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.599723][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.612654][ T35] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 75.616382][ T35] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 75.620605][ T7578] overlayfs: empty lowerdir [ 75.622575][ T35] usb 5-1: Product: syz [ 75.624359][ T35] usb 5-1: Manufacturer: syz [ 75.625933][ T35] usb 5-1: SerialNumber: syz [ 75.631966][ T35] usb 5-1: config 0 descriptor?? [ 75.638805][ T35] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 75.689668][ T7585] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 75.767026][ T7593] __nla_validate_parse: 4 callbacks suppressed [ 75.767036][ T7593] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.401'. [ 75.771709][ T7593] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 75.812345][ T7598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.402'. [ 75.903637][ T5997] usb 5-1: USB disconnect, device number 4 [ 75.910811][ T5997] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 75.914442][ T7602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.402'. [ 75.917015][ T7602] nbd: nbd64 already in use [ 75.929890][ T7598] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.934472][ T7598] overlayfs: failed to set xattr on upper [ 75.936717][ T7598] overlayfs: ...falling back to redirect_dir=nofollow. [ 75.939430][ T7598] overlayfs: ...falling back to index=off. [ 75.942133][ T7598] overlayfs: ...falling back to uuid=null. [ 76.062966][ T7623] overlayfs: empty lowerdir [ 76.364075][ T1330] cfg80211: failed to load regulatory.db [ 76.542663][ T7654] QAT: failed to copy from user. [ 76.643854][ T7675] binder: 7674:7675 ioctl c0306201 200003c0 returned -22 [ 76.896908][ T7698] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 77.096634][ T7702] xt_TPROXY: Can be used only with -p tcp or -p udp [ 77.197235][ T7706] netlink: 140 bytes leftover after parsing attributes in process `syz.0.431'. [ 77.200275][ T7705] netlink: 140 bytes leftover after parsing attributes in process `syz.0.431'. [ 77.361415][ T7709] Invalid ELF header type: 0 != 1 [ 77.485003][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 77.514282][ T7729] syz.1.438 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 77.571715][ T7736] overlayfs: upper fs does not support tmpfile. [ 77.635872][ T7741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.442'. [ 78.187477][ T7784] xt_cgroup: xt_cgroup: no path or classid specified [ 78.287477][ T7789] Invalid source name [ 78.289186][ T7789] UBIFS error (pid: 7789): cannot open "./file0", error -22 [ 78.289291][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 78.289304][ T40] audit: type=1400 audit(1737442159.747:503): avc: denied { mounton } for pid=7788 comm="syz.0.453" path="/118/file0" dev="tmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.303789][ T40] audit: type=1400 audit(1737442159.767:504): avc: denied { read } for pid=7788 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.355278][ T7791] syzkaller0: entered promiscuous mode [ 78.356907][ T7791] syzkaller0: entered allmulticast mode [ 78.362750][ T40] audit: type=1400 audit(1737442159.827:505): avc: denied { relabelfrom } for pid=7790 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.368418][ T40] audit: type=1400 audit(1737442159.827:506): avc: denied { relabelto } for pid=7790 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.640328][ T7803] netlink: 48 bytes leftover after parsing attributes in process `syz.1.458'. [ 78.700030][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 78.943068][ T5997] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 79.102520][ T5997] usb 10-1: Using ep0 maxpacket: 32 [ 79.109778][ T5997] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 79.112514][ T5997] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 79.115530][ T5997] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 79.118493][ T5997] usb 10-1: config 1 has no interface number 0 [ 79.120408][ T5997] usb 10-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 79.123479][ T5997] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 79.127148][ T5997] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 79.129738][ T5997] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.134930][ T5997] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 79.339476][ T5997] snd_usb_pod 10-1:1.1: endpoint not available, using fallback values [ 79.342832][ T5997] snd_usb_pod 10-1:1.1: invalid control EP [ 79.344478][ T5997] snd_usb_pod 10-1:1.1: cannot start listening: -22 [ 79.346474][ T5997] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 79.348659][ T5997] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 79.493978][ T40] audit: type=1400 audit(1737442160.968:507): avc: denied { create } for pid=7819 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 79.495496][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 79.499697][ T40] audit: type=1400 audit(1737442160.968:508): avc: denied { write } for pid=7819 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 79.505938][ T7820] netlink: 'syz.4.464': attribute type 4 has an invalid length. [ 79.515928][ T7820] netlink: 'syz.4.464': attribute type 4 has an invalid length. [ 79.541744][ T5997] usb 10-1: USB disconnect, device number 3 [ 79.774804][ T40] audit: type=1400 audit(1737442161.238:509): avc: denied { execute } for pid=7828 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 79.781763][ T40] audit: type=1400 audit(1737442161.238:510): avc: denied { execute_no_trans } for pid=7828 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 79.790747][ T9] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 79.884106][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.888888][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.892199][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.896900][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.899428][ T5952] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.902157][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.951866][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.955012][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 79.958494][ T9] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 79.963777][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.968530][ T9] usb 9-1: config 0 descriptor?? [ 79.974195][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 79.976068][ T7829] chnl_net:caif_netlink_parms(): no params data found [ 79.976127][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 79.983664][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 79.986509][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 79.988559][ T9] usb 9-1: media controller created [ 79.990673][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.997785][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 79.999845][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 80.003480][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input9 [ 80.007491][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 80.009537][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 80.066639][ T7829] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.068779][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.071312][ T7829] bridge_slave_0: entered allmulticast mode [ 80.073533][ T7829] bridge_slave_0: entered promiscuous mode [ 80.076066][ T7829] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.076430][ T40] audit: type=1400 audit(1737442161.538:511): avc: denied { map } for pid=7837 comm="syz.5.470" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.078160][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.078225][ T7829] bridge_slave_1: entered allmulticast mode [ 80.091068][ T7829] bridge_slave_1: entered promiscuous mode [ 80.119966][ T7829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.125119][ T7829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.150252][ T7829] team0: Port device team_slave_0 added [ 80.153857][ T7829] team0: Port device team_slave_1 added [ 80.161736][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 80.164392][ T9] dvb-usb: error while querying for an remote control event. [ 80.174254][ T7824] dvb-usb: bulk message failed: -22 (2/0) [ 80.179683][ T7824] netlink: 'syz.4.465': attribute type 10 has an invalid length. [ 80.181682][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.184015][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.192497][ T7829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.200290][ T7824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.204825][ T7824] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 80.207878][ T7829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.209755][ T9] usb 9-1: USB disconnect, device number 3 [ 80.210533][ T7829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.210555][ T7829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.236675][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 80.259959][ T7829] hsr_slave_0: entered promiscuous mode [ 80.264440][ T7829] hsr_slave_1: entered promiscuous mode [ 80.352838][ T7829] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 80.356826][ T7829] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 80.361610][ T7829] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 80.364813][ T7829] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 80.373780][ T7829] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.375776][ T7829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.378184][ T7829] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.380278][ T7829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.402253][ T7829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.408977][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.413629][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.425993][ T7829] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.435054][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.437099][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.442325][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.444400][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.465188][ T40] audit: type=1400 audit(1737442161.928:512): avc: denied { module_request } for pid=7829 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 80.478917][ T7847] tipc: Started in network mode [ 80.482937][ T7847] tipc: Node identity , cluster identity 4711 [ 80.484716][ T7847] tipc: Failed to set node id, please configure manually [ 80.486826][ T7847] tipc: Enabling of bearer rejected, failed to enable media [ 80.567311][ T7829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.597820][ T7838] syz.5.470 (7838): drop_caches: 2 [ 80.676627][ T7829] veth0_vlan: entered promiscuous mode [ 80.683310][ T7829] veth1_vlan: entered promiscuous mode [ 80.698542][ T7829] veth0_macvtap: entered promiscuous mode [ 80.703500][ T7829] veth1_macvtap: entered promiscuous mode [ 80.709515][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.712663][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.715527][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.718424][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.721766][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.724792][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.727686][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.730736][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.734088][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.737419][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.740335][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.743802][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.746715][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.749487][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.752563][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.755555][ T7829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.758390][ T7829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.761883][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.767570][ T7829] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.770091][ T7829] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.772960][ T7829] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.775636][ T7829] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.778764][ T7870] dccp_close: ABORT with 236 bytes unread [ 80.811897][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.479'. [ 80.815069][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.479'. [ 80.816613][ T7404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.820067][ T7404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.832937][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.835158][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.871450][ T7885] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 80.874503][ T7886] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.878364][ T7885] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 80.926084][ T7893] netlink: 4079 bytes leftover after parsing attributes in process `syz.6.482'. [ 81.155838][ T7905] dccp_close: ABORT with 236 bytes unread [ 81.283602][ T7921] netlink: 28 bytes leftover after parsing attributes in process `syz.6.490'. [ 81.310646][ T7924] netlink: 'syz.6.491': attribute type 10 has an invalid length. [ 81.316239][ T7924] team0: Device hsr_slave_0 failed to register rx_handler [ 81.372900][ T7932] CUSE: info not properly terminated [ 81.602843][ T7967] syz.6.498[7967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.602893][ T7967] syz.6.498[7967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.608988][ T7967] syz.6.498[7967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.633064][ T7967] XFS (nullb0): Invalid superblock magic number [ 81.733805][ T7986] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 81.736166][ T7986] NCSI netlink: No device for ifindex 0 [ 81.853401][ T8003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 81.971221][ T5947] Bluetooth: hci1: command tx timeout [ 81.982267][ T8005] Failed to get privilege flags for destination (handle=0x2:0x0) [ 82.225368][ T8039] netlink: 'syz.5.516': attribute type 1 has an invalid length. [ 82.259388][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.516'. [ 82.680481][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 82.682333][ T8084] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 82.685874][ T8084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.529'. [ 82.722694][ T75] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 82.850557][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 82.853552][ T9] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 82.855927][ T9] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 82.858577][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 82.861599][ T9] usb 10-1: config 1 has no interface number 0 [ 82.863412][ T9] usb 10-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 82.866431][ T9] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 82.870085][ T9] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 82.873207][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.878782][ T9] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 82.882752][ T75] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 82.886205][ T75] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 82.889358][ T75] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 82.892764][ T75] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.896510][ T75] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.899138][ T75] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.905677][ T75] usb 11-1: config 0 descriptor?? [ 83.078934][ T9] snd_usb_pod 10-1:1.1: endpoint not available, using fallback values [ 83.081627][ T9] snd_usb_pod 10-1:1.1: invalid control EP [ 83.083598][ T9] snd_usb_pod 10-1:1.1: cannot start listening: -22 [ 83.085737][ T9] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 83.088235][ T9] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 83.282462][ T9] usb 10-1: USB disconnect, device number 4 [ 83.362936][ T75] usbhid 11-1:0.0: can't add hid device: -71 [ 83.365010][ T75] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 83.368279][ T75] usb 11-1: USB disconnect, device number 2 [ 83.601837][ T8116] can0: slcan on ptm0. [ 83.680015][ T8145] capability: warning: `syz.0.538' uses 32-bit capabilities (legacy support in use) [ 83.680794][ T8116] can0 (unregistered): slcan off ptm0. [ 83.726216][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 83.726225][ T40] audit: type=1400 audit(1737442165.188:530): avc: denied { ioctl } for pid=8153 comm="syz.0.541" path="socket:[24349]" dev="sockfs" ino=24349 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 83.735024][ T40] audit: type=1400 audit(1737442165.188:531): avc: denied { setopt } for pid=8153 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.742682][ T40] audit: type=1400 audit(1737442165.188:532): avc: denied { read } for pid=8153 comm="syz.0.541" path="socket:[24696]" dev="sockfs" ino=24696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.750067][ T40] audit: type=1400 audit(1737442165.208:533): avc: denied { create } for pid=8153 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 83.925624][ T8168] netlink: 1 bytes leftover after parsing attributes in process `syz.5.544'. [ 83.930877][ T8168] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 83.931865][ T40] audit: type=1400 audit(1737442165.398:534): avc: denied { create } for pid=8175 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 83.976540][ T8181] netlink: 168 bytes leftover after parsing attributes in process `syz.6.548'. [ 84.020598][ T6045] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 84.043053][ T5947] Bluetooth: hci1: command tx timeout [ 84.180564][ T6045] usb 5-1: Using ep0 maxpacket: 32 [ 84.183554][ T6045] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 84.186176][ T6045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.189383][ T6045] usb 5-1: config 0 descriptor?? [ 84.193186][ T6045] as10x_usb: device has been detected [ 84.194930][ T6045] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 84.204240][ T6045] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 84.207870][ T6045] as10x_usb: error during firmware upload part1 [ 84.209859][ T6045] Registered device nBox DVB-T Dongle [ 84.390458][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 84.420498][ T8162] netlink: 32 bytes leftover after parsing attributes in process `syz.0.542'. [ 84.550500][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 84.553908][ T9] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 84.556451][ T9] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 84.559014][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 84.561708][ T9] usb 9-1: config 1 has no interface number 0 [ 84.563553][ T9] usb 9-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 84.566727][ T9] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 84.570502][ T9] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 84.573125][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.579117][ T9] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 84.780144][ T9] snd_usb_pod 9-1:1.1: endpoint not available, using fallback values [ 84.782650][ T9] snd_usb_pod 9-1:1.1: invalid control EP [ 84.784334][ T9] snd_usb_pod 9-1:1.1: cannot start listening: -22 [ 84.786306][ T9] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 84.788470][ T9] snd_usb_pod 9-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 84.982308][ T30] usb 9-1: USB disconnect, device number 4 [ 85.050548][ T6308] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 85.180797][ T6308] usb 10-1: device descriptor read/64, error -71 [ 85.430501][ T6308] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 85.470588][ T35] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 85.561126][ T6308] usb 10-1: device descriptor read/64, error -71 [ 85.619561][ T40] audit: type=1400 audit(1737442167.078:535): avc: denied { read } for pid=8228 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.620581][ T35] usb 11-1: Using ep0 maxpacket: 32 [ 85.630818][ T35] usb 11-1: unable to get BOS descriptor or descriptor too short [ 85.633623][ T35] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 85.635767][ T35] usb 11-1: can't read configurations, error -71 [ 85.670791][ T6308] usb usb10-port1: attempt power cycle [ 86.020429][ T6308] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 86.041562][ T6308] usb 10-1: device descriptor read/8, error -71 [ 86.130486][ T5952] Bluetooth: hci1: command tx timeout [ 86.280805][ T6308] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 86.301177][ T6308] usb 10-1: device descriptor read/8, error -71 [ 86.342965][ T40] audit: type=1400 audit(1737442167.808:536): avc: denied { connect } for pid=8240 comm="syz.6.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.346524][ T8241] binder: 8240:8241 ioctl c018620c 20000100 returned -22 [ 86.356136][ T8241] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 86.419039][ T40] audit: type=1400 audit(1737442167.878:537): avc: denied { view } for pid=8247 comm="syz.6.566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 86.427054][ T6308] usb usb10-port1: unable to enumerate USB device [ 86.440530][ T5952] Bluetooth: hci4: command 0x1003 tx timeout [ 86.443766][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 86.474659][ T69] usb 5-1: USB disconnect, device number 5 [ 86.488135][ T69] Unregistered device nBox DVB-T Dongle [ 86.489319][ T69] as10x_usb: device has been disconnected [ 86.498125][ T8251] sp0: Synchronizing with TNC [ 86.523587][ T40] audit: type=1400 audit(1737442167.988:538): avc: denied { map } for pid=8252 comm="syz.6.567" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.551924][ T8256] __nla_validate_parse: 2 callbacks suppressed [ 86.551933][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.569'. [ 86.552868][ T5947] Bluetooth: hci1: Malformed Event: 0x02 [ 86.553933][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.569'. [ 86.561685][ T5947] Bluetooth: hci1: Malformed Event: 0x02 [ 86.562139][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.569'. [ 86.565928][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.569'. [ 86.587566][ T8260] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 86.589460][ T8260] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 86.593326][ T8260] vhci_hcd vhci_hcd.0: Device attached [ 86.596506][ T40] audit: type=1400 audit(1737442168.058:539): avc: denied { create } for pid=8259 comm="syz.6.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.622321][ T8261] vhci_hcd: connection closed [ 86.623486][ T1206] vhci_hcd: stop threads [ 86.625999][ T1206] vhci_hcd: release socket [ 86.627243][ T1206] vhci_hcd: disconnect device [ 86.750417][ T5997] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 86.905356][ T5997] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.908446][ T5997] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 86.911333][ T5997] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 86.914033][ T5997] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.918227][ T8251] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 86.922918][ T5997] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.951017][ T8275] netlink: 'syz.0.573': attribute type 26 has an invalid length. [ 87.079372][ T8288] netlink: 'syz.0.575': attribute type 21 has an invalid length. [ 87.081776][ T8288] netlink: 128 bytes leftover after parsing attributes in process `syz.0.575'. [ 87.084746][ T8288] netlink: 'syz.0.575': attribute type 5 has an invalid length. [ 87.086949][ T8288] netlink: 'syz.0.575': attribute type 6 has an invalid length. [ 87.089150][ T8288] netlink: 3 bytes leftover after parsing attributes in process `syz.0.575'. [ 87.092799][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.575'. [ 87.095654][ T8290] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 87.130146][ T69] usb 9-1: USB disconnect, device number 5 [ 87.130803][ T8250] [U] è [ 87.504768][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 87.508766][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 87.513158][ T8121] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x84 [ 87.841250][ T8328] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 87.899556][ T8332] netlink: 'syz.5.587': attribute type 10 has an invalid length. [ 87.902741][ T8332] syz_tun: entered promiscuous mode [ 87.906805][ T8332] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 88.018697][ T8347] vxcan1: tx address claim with dest, not broadcast [ 88.024365][ T8347] netlink: 'syz.5.590': attribute type 2 has an invalid length. [ 88.087162][ T8351] netlink: 'syz.5.591': attribute type 1 has an invalid length. [ 88.104631][ T8351] bond2: entered promiscuous mode [ 88.106282][ T8351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.124307][ T8351] 8021q: adding VLAN 0 to HW filter on device bond3 [ 88.127937][ T8351] bond2: (slave bond3): making interface the new active one [ 88.130038][ T8351] bond3: entered promiscuous mode [ 88.132339][ T8351] bond2: (slave bond3): Enslaving as an active interface with an up link [ 88.210624][ T5947] Bluetooth: hci1: command tx timeout [ 88.388031][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 88.587931][ T8392] SELinux: policydb string does not match my string SE Linux [ 88.591875][ T8392] SELinux: failed to load policy [ 88.630635][ T6308] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 88.790505][ T6308] usb 9-1: Using ep0 maxpacket: 8 [ 88.793896][ T6308] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.797465][ T6308] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.801649][ T6308] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.805517][ T6308] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.807352][ T8420] Device name cannot be null; rc = [-22] [ 88.810910][ T6308] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.815808][ T6308] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.869733][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 88.869748][ T40] audit: type=1400 audit(1737442170.328:595): avc: denied { ioctl } for pid=8425 comm="syz.5.610" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 89.003311][ T8428] binder: 8427:8428 ioctl 400c620e 20001580 returned -22 [ 89.005698][ T8428] binder: 8427:8428 unknown command 1937339183 [ 89.007461][ T8428] binder: 8427:8428 ioctl c0306201 20000080 returned -22 [ 89.026123][ T6308] usb 9-1: usb_control_msg returned -71 [ 89.027786][ T6308] usbtmc 9-1:16.0: can't read capabilities [ 89.033031][ T6308] usb 9-1: USB disconnect, device number 6 [ 89.356549][ T8436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.359506][ T8436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.367104][ T8436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.369753][ T8436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.387879][ T40] audit: type=1400 audit(1737442170.848:596): avc: denied { write } for pid=8437 comm="syz.0.614" name="fdinfo" dev="proc" ino=25057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 89.394683][ T40] audit: type=1400 audit(1737442170.848:597): avc: denied { add_name } for pid=8437 comm="syz.0.614" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 89.394797][ T40] audit: type=1400 audit(1737442170.848:598): avc: denied { create } for pid=8437 comm="syz.0.614" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 89.423961][ T40] audit: type=1400 audit(1737442170.848:599): avc: denied { associate } for pid=8437 comm="syz.0.614" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 89.451329][ T40] audit: type=1400 audit(1737442170.888:600): avc: denied { bind } for pid=8442 comm="syz.6.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.484835][ T40] audit: type=1400 audit(1737442170.888:601): avc: denied { getopt } for pid=8445 comm="syz.6.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 89.598913][ T40] audit: type=1326 audit(1737442171.058:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.4.619" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d3f385d29 code=0x0 [ 89.653479][ T40] audit: type=1326 audit(1737442171.118:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8458 comm="syz.6.621" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa796185d29 code=0x0 [ 89.713599][ T40] audit: type=1400 audit(1737442171.178:604): avc: denied { append } for pid=8458 comm="syz.6.621" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 89.720202][ T8121] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x84 [ 89.756925][ T8478] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:4096x16 (0x33424752, 8, 0, 0, 0) [ 90.666083][ T8520] Bluetooth: MGMT ver 1.23 [ 91.430451][ T8536] mmap: syz.5.637 (8536) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.567568][ T8552] __nla_validate_parse: 4 callbacks suppressed [ 91.567579][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 91.573694][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.644'. [ 91.612379][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.642'. [ 91.684064][ T8563] netlink: 'syz.4.646': attribute type 5 has an invalid length. [ 91.686363][ T8562] netlink: 'syz.4.646': attribute type 5 has an invalid length. [ 91.737397][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.648'. [ 92.040462][ T6045] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.135810][ T8594] SELinux: Context system_u:object_r:crash_device_t:s0 is not valid (left unmapped). [ 92.180666][ T6045] usb 5-1: device descriptor read/64, error -71 [ 92.340819][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 92.344696][ T8607] macvlan1: left allmulticast mode [ 92.346824][ T8607] veth1_vlan: left allmulticast mode [ 92.348905][ T8607] macvlan1: left promiscuous mode [ 92.351578][ T8607] bridge0: port 3(macvlan1) entered disabled state [ 92.354514][ T8607] bridge_slave_1: left allmulticast mode [ 92.356192][ T8607] bridge_slave_1: left promiscuous mode [ 92.357892][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.362366][ T8607] bridge_slave_0: left allmulticast mode [ 92.364321][ T8607] bridge_slave_0: left promiscuous mode [ 92.366712][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.398655][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.661'. [ 92.422064][ T6045] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.550601][ T6045] usb 5-1: device descriptor read/64, error -71 [ 92.614921][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.617580][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.635282][ T8613] netlink: 1256 bytes leftover after parsing attributes in process `syz.6.662'. [ 92.638019][ T8613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.671532][ T6045] usb usb5-port1: attempt power cycle [ 92.688139][ T8628] netlink: 6 bytes leftover after parsing attributes in process `syz.5.666'. [ 92.694370][ T8628] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.850472][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 92.990449][ T5997] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 93.001162][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 93.004283][ T9] usb 9-1: config 0 has no interfaces? [ 93.005976][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.008622][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.012079][ T6045] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.012992][ T9] usb 9-1: config 0 descriptor?? [ 93.040995][ T6045] usb 5-1: device descriptor read/8, error -71 [ 93.141836][ T5997] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 93.144930][ T5997] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.148087][ T5997] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.152340][ T5997] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 93.157528][ T5997] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 93.160100][ T5997] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 93.162511][ T5997] usb 10-1: Manufacturer: syz [ 93.164864][ T5997] usb 10-1: config 0 descriptor?? [ 93.223422][ T8621] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 93.225339][ T8621] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 93.227661][ T8621] vhci_hcd vhci_hcd.0: Device attached [ 93.230800][ T8640] usbip_core: unknown command [ 93.232286][ T8640] vhci_hcd: unknown pdu 5246272 [ 93.233408][ T2155] usb 9-1: USB disconnect, device number 7 [ 93.233769][ T8640] usbip_core: unknown command [ 93.238978][ T11] vhci_hcd: stop threads [ 93.240649][ T11] vhci_hcd: release socket [ 93.242190][ T11] vhci_hcd: disconnect device [ 93.280464][ T6045] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 93.303239][ T6045] usb 5-1: device descriptor read/8, error -71 [ 93.412562][ T6045] usb usb5-port1: unable to enumerate USB device [ 93.574625][ T5997] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 93.578033][ T5997] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 93.587225][ T5997] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 93.860525][ T8661] overlayfs: missing 'lowerdir' [ 93.900925][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 93.900935][ T40] audit: type=1400 audit(1737442175.368:618): avc: denied { shutdown } for pid=8663 comm="syz.4.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.999022][ T40] audit: type=1400 audit(1737442175.458:619): avc: denied { unmount } for pid=6404 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 94.055695][ T40] audit: type=1400 audit(1737442175.518:620): avc: denied { bind } for pid=8675 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.100522][ T8676] loop6: detected capacity change from 0 to 524287999 [ 94.104867][ C3] blk_print_req_error: 111 callbacks suppressed [ 94.104881][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.110833][ C3] buffer_io_error: 102 callbacks suppressed [ 94.110845][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.117832][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.121514][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.123997][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.126624][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.129138][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.132824][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.136019][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.139570][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.142956][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.145623][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.148125][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.150639][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.155092][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.157786][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.160165][ T8676] ldm_validate_partition_table(): Disk read failed. [ 94.162457][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.165421][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.168602][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 94.171133][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.175762][ T8676] Dev loop6: unable to read RDB block 0 [ 94.178235][ T8676] loop6: unable to read partition table [ 94.180059][ T8676] loop_reread_partitions: partition scan of loop6 (Í¢†ÃÙÇ´ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 94.262575][ T8684] ptrace attach of "/syz-executor exec"[6404] was attempted by "/syz-executor exec"[8684] [ 94.307895][ T8686] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 94.311970][ T8686] overlayfs: missing 'lowerdir' [ 94.341483][ T8688] overlayfs: missing 'lowerdir' [ 94.373566][ T8690] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 94.586668][ T40] audit: type=1400 audit(1737442176.048:621): avc: denied { unmount } for pid=7829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 94.665211][ T40] audit: type=1400 audit(1737442176.128:622): avc: denied { map } for pid=8704 comm="syz.6.691" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 94.806627][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'. [ 94.809991][ T8719] netlink: 'syz.0.693': attribute type 30 has an invalid length. [ 94.812565][ T8719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.693'. [ 94.865145][ T8726] overlayfs: missing 'lowerdir' [ 94.902907][ T8730] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 94.904828][ T8730] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.907524][ T8730] vhci_hcd vhci_hcd.0: Device attached [ 94.910263][ T8732] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 94.913379][ T40] audit: type=1400 audit(1737442176.378:623): avc: denied { setattr } for pid=8729 comm="syz.0.697" name="PACKET" dev="sockfs" ino=25530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.913553][ T84] vhci_hcd: stop threads [ 94.923161][ T84] vhci_hcd: release socket [ 94.927502][ T84] vhci_hcd: disconnect device [ 94.940913][ T40] audit: type=1326 audit(1737442176.398:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8735 comm="syz.6.699" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa796185d29 code=0x0 [ 94.952251][ T8738] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 94.955775][ T8738] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 95.503660][ T8131] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x84 [ 95.610996][ T40] audit: type=1400 audit(1737442177.078:625): avc: denied { getopt } for pid=8750 comm="syz.4.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 95.664913][ T8753] SELinux: policydb string length 181403656 does not match expected length 8 [ 95.668404][ T8753] SELinux: failed to load policy [ 95.685235][ T5997] usb 10-1: USB disconnect, device number 9 [ 95.836238][ T8759] overlayfs: missing 'lowerdir' [ 95.984201][ T40] audit: type=1400 audit(1737442177.448:626): avc: denied { ioctl } for pid=8764 comm="syz.6.709" path="socket:[28775]" dev="sockfs" ino=28775 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 96.328306][ T8768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.331867][ T8768] openvswitch: netlink: IP tunnel TTL not specified. [ 96.334441][ T8770] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 96.342813][ T8770] binder: 8769:8770 ioctl 4018620d 0 returned -22 [ 96.378543][ T40] audit: type=1400 audit(1737442177.838:627): avc: denied { map } for pid=8778 comm="syz.4.714" path="/174" dev="tmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 96.384299][ T8784] overlayfs: missing 'lowerdir' [ 96.397675][ T8785] SELinux: policydb version 0 does not match my version range 15-33 [ 96.401391][ T8785] SELinux: failed to load policy [ 96.426364][ T8787] ÿÿÿÿ: renamed from ip6gre0 (while UP) [ 96.433475][ T8789] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 96.567203][ T1206] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x84 [ 96.580527][ T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 96.731878][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.736152][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.739954][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.745215][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.748975][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.754630][ T9] usb 10-1: config 0 descriptor?? [ 96.959888][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.962176][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.964397][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.966623][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.968822][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.971343][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.973531][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.975900][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.981381][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.983796][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.986031][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.988226][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.990748][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.992906][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.995103][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.997324][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 96.999519][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.002058][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.004264][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.005798][ T8817] netlink: 'syz.5.724': attribute type 1 has an invalid length. [ 97.006424][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.012017][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.014154][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.016267][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.018393][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.020528][ T8817] bond4: entered promiscuous mode [ 97.020757][ T8817] 8021q: adding VLAN 0 to HW filter on device bond4 [ 97.022431][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.027916][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.030061][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.032594][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.034895][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.037118][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.039255][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.040561][ T8817] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 97.041777][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.047542][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.052062][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.054310][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.056439][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.058700][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.061775][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 97.064104][ T9] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 97.070335][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 97.077431][ T9] usb 10-1: USB disconnect, device number 10 [ 97.087916][ T8817] 8021q: adding VLAN 0 to HW filter on device bond5 [ 97.091174][ T8817] bond4: (slave bond5): making interface the new active one [ 97.093306][ T8817] bond5: entered promiscuous mode [ 97.095054][ T8817] bond4: (slave bond5): Enslaving as an active interface with an up link [ 97.167288][ T8824] overlayfs: missing 'lowerdir' [ 97.420238][ T8841] __nla_validate_parse: 2 callbacks suppressed [ 97.420249][ T8841] netlink: 68 bytes leftover after parsing attributes in process `syz.6.733'. [ 97.443490][ T8846] netlink: 236 bytes leftover after parsing attributes in process `syz.0.735'. [ 97.459191][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.736'. [ 97.691523][ T5999] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 97.850456][ T5999] usb 5-1: Using ep0 maxpacket: 16 [ 97.855851][ T5999] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 97.858841][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.861908][ T5999] usb 5-1: Product: syz [ 97.863528][ T5999] usb 5-1: Manufacturer: syz [ 97.865320][ T5999] usb 5-1: SerialNumber: syz [ 97.869310][ T8878] netlink: 200 bytes leftover after parsing attributes in process `syz.6.744'. [ 97.872106][ T5999] r8152-cfgselector 5-1: Unknown version 0x0000 [ 97.873982][ T5999] r8152-cfgselector 5-1: config 0 descriptor?? [ 98.079675][ T8846] netlink: 156 bytes leftover after parsing attributes in process `syz.0.735'. [ 98.161760][ T5999] r8152-cfgselector 5-1: Unknown version 0x0000 [ 98.164529][ T5999] r8152-cfgselector 5-1: bad CDC descriptors [ 98.170155][ T5999] r8152-cfgselector 5-1: USB disconnect, device number 10 [ 98.175572][ T8709] udevd[8709]: setting mode of /dev/bus/usb/005/010 to 020664 failed: No such file or directory [ 98.180256][ T8709] udevd[8709]: setting owner of /dev/bus/usb/005/010 to uid=0, gid=0 failed: No such file or directory [ 98.213812][ T8880] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 98.625234][ T84] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x84 [ 98.720834][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.751'. [ 98.723816][ T8909] netlink: 5044 bytes leftover after parsing attributes in process `syz.0.751'. [ 99.549063][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.754'. [ 99.555570][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.754'. [ 99.731894][ T8933] netlink: 'syz.6.757': attribute type 10 has an invalid length. [ 99.735104][ T8933] syz_tun: entered promiscuous mode [ 99.742999][ T8933] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 99.856841][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 99.856852][ T40] audit: type=1400 audit(1737442181.318:640): avc: denied { ioctl } for pid=8939 comm="syz.6.759" path="socket:[28613]" dev="sockfs" ino=28613 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 99.868645][ T8941] hfsplus: unable to find HFS+ superblock [ 100.050153][ T40] audit: type=1400 audit(1737442181.508:641): avc: denied { sys_ptrace } for pid=8955 comm="syz.5.764" capability=19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 100.180470][ T40] audit: type=1400 audit(1737442181.638:642): avc: denied { call } for pid=8960 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 100.238636][ T8980] netlink: 64 bytes leftover after parsing attributes in process `syz.5.772'. [ 100.605470][ T40] audit: type=1400 audit(1737442182.068:643): avc: denied { mount } for pid=9009 comm="syz.5.779" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 100.630438][ T35] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 100.688635][ T9014] Failed to initialize the IGMP autojoin socket (err -2) [ 100.790442][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 100.793235][ T35] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 100.795351][ T35] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.798534][ T35] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 100.803406][ T35] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 100.808118][ T35] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 100.810262][ T35] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.814785][ T35] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 100.817961][ T35] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 100.827470][ T35] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 100.829702][ T35] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.833273][ T35] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 100.836379][ T35] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 100.841559][ T35] usb 5-1: string descriptor 0 read error: -22 [ 100.843434][ T35] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 100.846065][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.854271][ T35] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 100.937944][ T9022] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 101.003943][ T40] audit: type=1326 audit(1737442182.468:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.6.786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa796185d29 code=0x7ffc0000 [ 101.010546][ T40] audit: type=1326 audit(1737442182.468:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.6.786" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa796185d29 code=0x7ffc0000 [ 101.122695][ T40] audit: type=1326 audit(1737442182.588:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.6.786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa796185d29 code=0x7ffc0000 [ 101.130432][ T40] audit: type=1326 audit(1737442182.588:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.6.786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa796185d29 code=0x7ffc0000 [ 101.249152][ T9037] binder: 9036:9037 unknown command 0 [ 101.250871][ T9037] binder: 9036:9037 ioctl c0306201 200001c0 returned -22 [ 101.421554][ T9048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=9048 comm=syz.5.791 [ 101.870464][ T75] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 102.000429][ T75] usb 11-1: device descriptor read/64, error -71 [ 102.240513][ T75] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 102.380507][ T75] usb 11-1: device descriptor read/64, error -71 [ 102.490712][ T75] usb usb11-port1: attempt power cycle [ 102.840496][ T75] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 102.861274][ T75] usb 11-1: device descriptor read/8, error -71 [ 103.110489][ T75] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 103.130773][ T75] usb 11-1: device descriptor read/8, error -71 [ 103.242964][ T75] usb usb11-port1: unable to enumerate USB device [ 103.918615][ T40] audit: type=1400 audit(1737442185.378:648): avc: denied { accept } for pid=9087 comm="syz.5.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 103.959586][ T9090] __nla_validate_parse: 34 callbacks suppressed [ 103.959602][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.805'. [ 103.970695][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.805'. [ 103.974439][ T9090] netlink: 60 bytes leftover after parsing attributes in process `syz.5.805'. [ 103.982223][ T30] usb 5-1: USB disconnect, device number 11 [ 104.039430][ T40] audit: type=1400 audit(1737442185.498:649): avc: denied { read } for pid=9098 comm="syz.0.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 104.183903][ T9110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9110 comm=syz.0.811 [ 104.184893][ T9111] netlink: 'syz.0.811': attribute type 1 has an invalid length. [ 104.206684][ T9111] bond0: entered promiscuous mode [ 104.208267][ T9111] bond0: entered allmulticast mode [ 104.212592][ T9110] batadv1: entered promiscuous mode [ 104.215944][ T9110] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 104.219747][ T9110] bond0: (slave batadv1): making interface the new active one [ 104.222605][ T9110] batadv1: entered allmulticast mode [ 104.225607][ T9110] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 104.254189][ T9115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.812'. [ 104.407002][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 104.551903][ T9133] netlink: 'syz.0.818': attribute type 21 has an invalid length. [ 104.554484][ T9133] netlink: 132 bytes leftover after parsing attributes in process `syz.0.818'. [ 104.672991][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.822'. [ 104.676372][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.822'. [ 104.704753][ T9146] overlayfs: failed to resolve './file0': -2 [ 104.735087][ T9148] netlink: 'syz.0.824': attribute type 9 has an invalid length. [ 104.785486][ T9155] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.788013][ T9155] netlink: 16 bytes leftover after parsing attributes in process `syz.6.827'. [ 104.823615][ T9155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9155 comm=syz.6.827 [ 104.825877][ T9164] Bluetooth: hci4: Frame reassembly failed (-84) [ 104.843308][ T9166] netlink: 16 bytes leftover after parsing attributes in process `syz.6.827'. [ 104.883253][ T9170] ceph: Path missing in source [ 105.054602][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 105.054612][ T40] audit: type=1400 audit(1737442186.518:656): avc: denied { create } for pid=9185 comm="syz.6.836" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.062432][ T40] audit: type=1400 audit(1737442186.518:657): avc: denied { mounton } for pid=9185 comm="syz.6.836" path="/104/file0" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.314283][ T40] audit: type=1400 audit(1737442186.778:658): avc: denied { unlink } for pid=7829 comm="syz-executor" name="file0" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.332575][ T40] audit: type=1400 audit(1737442186.798:659): avc: denied { read } for pid=9193 comm="syz.6.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 105.560747][ T35] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 105.694090][ T35] usb 10-1: device descriptor read/64, error -71 [ 105.930688][ T35] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 106.060789][ T35] usb 10-1: device descriptor read/64, error -71 [ 106.171942][ T35] usb usb10-port1: attempt power cycle [ 106.339832][ T40] audit: type=1326 audit(1737442187.798:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.6.844" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa796185d29 code=0x7ffc0000 [ 106.351313][ T40] audit: type=1326 audit(1737442187.798:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.6.844" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa796185d29 code=0x7ffc0000 [ 106.359686][ T40] audit: type=1326 audit(1737442187.798:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.6.844" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fa796185d29 code=0x7ffc0000 [ 106.367830][ T40] audit: type=1326 audit(1737442187.798:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.6.844" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fa796185d29 code=0x7ffc0000 [ 106.375442][ T40] audit: type=1326 audit(1737442187.798:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.6.844" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fa796185d29 code=0x7ffc0000 [ 106.383820][ T40] audit: type=1326 audit(1737442187.798:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.6.844" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fa796185d29 code=0x7ffc0000 [ 106.530536][ T35] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 106.553173][ T35] usb 10-1: device descriptor read/8, error -71 [ 106.801422][ T35] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 106.831023][ T35] usb 10-1: device descriptor read/8, error -71 [ 106.850704][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 106.851659][ T5952] Bluetooth: hci4: command 0x1003 tx timeout [ 106.952939][ T35] usb usb10-port1: unable to enumerate USB device [ 108.385091][ T9239] Failed to initialize the IGMP autojoin socket (err -2) [ 108.734078][ T9262] bpf: Bad value for 'gid' [ 108.781363][ T9266] Failed to initialize the IGMP autojoin socket (err -2) [ 108.872790][ T9272] GUP no longer grows the stack in syz.0.863 (9272): 20004000-2000a000 (20002000) [ 108.876599][ T9272] CPU: 0 UID: 0 PID: 9272 Comm: syz.0.863 Not tainted 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0 [ 108.879484][ T9272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.883299][ T9272] Call Trace: [ 108.884603][ T9272] [ 108.885497][ T9272] dump_stack_lvl+0x16c/0x1f0 [ 108.886927][ T9272] gup_vma_lookup+0x1d2/0x220 [ 108.888280][ T9272] __get_user_pages+0x236/0x3b50 [ 108.889687][ T9272] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 108.891289][ T9272] ? __gup_longterm_locked+0x123/0x1870 [ 108.892852][ T9272] ? __gup_longterm_locked+0x123/0x1870 [ 108.894447][ T9272] ? __pfx___get_user_pages+0x10/0x10 [ 108.895990][ T9272] ? down_read_killable+0xcc/0x380 [ 108.897495][ T9272] ? __pfx_down_read_killable+0x10/0x10 [ 108.899087][ T9272] ? mark_lock+0xb5/0xc60 [ 108.900344][ T9272] ? find_held_lock+0x2d/0x110 [ 108.902127][ T9272] __gup_longterm_locked+0x211/0x1870 [ 108.904004][ T9272] ? __pfx_lock_release+0x10/0x10 [ 108.905610][ T9272] ? trace_lock_acquire+0x14e/0x1f0 [ 108.907376][ T9272] ? __pfx___gup_longterm_locked+0x10/0x10 [ 108.909424][ T9272] ? gup_fast_fallback+0x84c/0x2690 [ 108.911213][ T9272] ? __pfx_lock_release+0x10/0x10 [ 108.912957][ T9272] ? mark_held_locks+0x9f/0xe0 [ 108.914650][ T9272] gup_fast_fallback+0x1802/0x2690 [ 108.916413][ T9272] ? __pfx_gup_fast_fallback+0x10/0x10 [ 108.918307][ T9272] ? hlock_class+0x4e/0x130 [ 108.919891][ T9272] get_user_pages_fast+0xa8/0x100 [ 108.921683][ T9272] ? __pfx_get_user_pages_fast+0x10/0x10 [ 108.923614][ T9272] ? __mutex_trylock_common+0xea/0x250 [ 108.925504][ T9272] __iov_iter_get_pages_alloc+0x8ed/0x2280 [ 108.927500][ T9272] ? trace_contention_end+0xee/0x140 [ 108.929344][ T9272] ? __mutex_lock+0x1cc/0xa60 [ 108.930845][ T9272] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 108.932849][ T9272] ? pipe_lock+0x64/0x80 [ 108.934202][ T9272] ? __fget_files+0x1fc/0x3a0 [ 108.935709][ T9272] ? __pfx___mutex_lock+0x10/0x10 [ 108.937328][ T9272] ? import_ubuf+0x1b6/0x220 [ 108.938825][ T9272] iov_iter_get_pages2+0xa4/0x100 [ 108.940442][ T9272] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 108.942323][ T9272] ? wait_for_space+0x224/0x2d0 [ 108.944046][ T9272] __do_sys_vmsplice+0xa0f/0xee0 [ 108.945828][ T9272] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 108.947682][ T9272] ? __pfx_futex_wait+0x10/0x10 [ 108.949363][ T9272] ? lock_acquire.part.0+0x11b/0x380 [ 108.951148][ T9272] ? find_held_lock+0x2d/0x110 [ 108.952697][ T9272] ? rcu_is_watching+0x12/0xc0 [ 108.954337][ T9272] ? do_syscall_64+0xcd/0x250 [ 108.955839][ T9272] do_syscall_64+0xcd/0x250 [ 108.957323][ T9272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.959332][ T9272] RIP: 0033:0x7fd5e2585d29 [ 108.960881][ T9272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.967144][ T9272] RSP: 002b:00007fd5e3393038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 108.969989][ T9272] RAX: ffffffffffffffda RBX: 00007fd5e2775fa0 RCX: 00007fd5e2585d29 [ 108.972722][ T9272] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 108.975402][ T9272] RBP: 00007fd5e2601b08 R08: 0000000000000000 R09: 0000000000000000 [ 108.978072][ T9272] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 108.980722][ T9272] R13: 0000000000000000 R14: 00007fd5e2775fa0 R15: 00007ffd70c65888 [ 108.983303][ T9272] [ 109.279120][ T9288] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 109.392897][ T9302] vlan0: entered promiscuous mode [ 109.395130][ T9302] erspan0: entered promiscuous mode [ 109.652272][ T9309] 9pnet_fd: p9_fd_create_tcp (9309): problem creating socket [ 109.684094][ T9310] __nla_validate_parse: 7 callbacks suppressed [ 109.684111][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.874'. [ 109.690700][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.874'. [ 109.697422][ T9310] netlink: 60 bytes leftover after parsing attributes in process `syz.6.874'. [ 110.465189][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'. [ 110.520512][ T5947] Bluetooth: hci1: command tx timeout [ 110.625162][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 110.627888][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 110.634457][ T9351] netlink: 60 bytes leftover after parsing attributes in process `syz.0.886'. [ 110.729834][ T40] kauditd_printk_skb: 75 callbacks suppressed [ 110.729844][ T40] audit: type=1400 audit(1737442192.188:741): avc: denied { connect } for pid=9357 comm="syz.6.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 110.894929][ T9368] overlay: filesystem on ./bus not supported [ 110.894930][ T40] audit: type=1400 audit(1737442192.358:742): avc: denied { mounton } for pid=9367 comm="syz.6.893" path="/129/file1/bus" dev="autofs" ino=31352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 110.925151][ T40] audit: type=1400 audit(1737442192.388:743): avc: denied { append } for pid=9371 comm="syz.5.894" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 111.024953][ T40] audit: type=1400 audit(1737442192.488:744): avc: denied { create } for pid=9382 comm="syz.6.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 111.031523][ T40] audit: type=1400 audit(1737442192.498:745): avc: denied { connect } for pid=9382 comm="syz.6.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 111.088292][ T9387] infiniband syz!: set active [ 111.090909][ T9387] infiniband syz!: added team_slave_0 [ 111.101258][ T9387] syz!: rxe_create_cq: returned err = -12 [ 111.103190][ T9387] infiniband syz!: Couldn't create ib_mad CQ [ 111.105021][ T9387] infiniband syz!: Couldn't open port 1 [ 111.124130][ T9387] RDS/IB: syz!: added [ 111.125638][ T9387] smc: adding ib device syz! with port count 1 [ 111.127596][ T9387] smc: ib device syz! port 1 has pnetid [ 111.130897][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.902'. [ 111.134072][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.902'. [ 111.181159][ T9402] overlayfs: empty lowerdir [ 111.232084][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'. [ 111.261786][ T9417] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 111.266046][ T9417] [ 111.266775][ T9417] ====================================================== [ 111.268785][ T9417] WARNING: possible circular locking dependency detected [ 111.270777][ T9417] 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0 Not tainted [ 111.273352][ T9417] ------------------------------------------------------ [ 111.276144][ T9417] syz.6.908/9417 is trying to acquire lock: [ 111.277848][ T9417] ffff8880307d1f20 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xe3/0x190 [ 111.280377][ T9417] [ 111.280377][ T9417] but task is already holding lock: [ 111.282489][ T9417] ffff88802577c3c8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xc9/0x290 [ 111.285200][ T9417] [ 111.285200][ T9417] which lock already depends on the new lock. [ 111.285200][ T9417] [ 111.288143][ T9417] [ 111.288143][ T9417] the existing dependency chain (in reverse order) is: [ 111.290708][ T9417] [ 111.290708][ T9417] -> #5 (&q->debugfs_mutex){+.+.}-{4:4}: [ 111.292931][ T9417] __mutex_lock+0x19b/0xa60 [ 111.294398][ T9417] blk_mq_init_sched+0x42b/0x640 [ 111.295965][ T9417] elevator_init_mq+0x2cd/0x420 [ 111.297510][ T9417] add_disk_fwnode+0x113/0x1300 [ 111.299041][ T9417] sd_probe+0xa86/0x1000 [ 111.300412][ T9417] really_probe+0x23e/0xa90 [ 111.301866][ T9417] __driver_probe_device+0x1de/0x440 [ 111.303557][ T9417] driver_probe_device+0x4c/0x1b0 [ 111.305159][ T9417] __device_attach_driver+0x1df/0x310 [ 111.306852][ T9417] bus_for_each_drv+0x157/0x1e0 [ 111.308380][ T9417] __device_attach_async_helper+0x1d3/0x290 [ 111.310215][ T9417] async_run_entry_fn+0x9c/0x530 [ 111.311778][ T9417] process_one_work+0x9c5/0x1ba0 [ 111.313384][ T9417] worker_thread+0x6c8/0xf00 [ 111.314849][ T9417] kthread+0x2c1/0x3a0 [ 111.316180][ T9417] ret_from_fork+0x45/0x80 [ 111.317597][ T9417] ret_from_fork_asm+0x1a/0x30 [ 111.319145][ T9417] [ 111.319145][ T9417] -> #4 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 111.321684][ T9417] blk_queue_enter+0x50f/0x640 [ 111.323200][ T9417] blk_mq_alloc_request+0x59b/0x950 [ 111.324845][ T9417] scsi_execute_cmd+0x1da/0xf40 [ 111.326411][ T9417] read_capacity_16+0x213/0xe10 [ 111.327969][ T9417] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 111.329787][ T9417] sd_probe+0x904/0x1000 [ 111.331164][ T9417] really_probe+0x23e/0xa90 [ 111.332613][ T9417] __driver_probe_device+0x1de/0x440 [ 111.334316][ T9417] driver_probe_device+0x4c/0x1b0 [ 111.335919][ T9417] __device_attach_driver+0x1df/0x310 [ 111.337631][ T9417] bus_for_each_drv+0x157/0x1e0 [ 111.339176][ T9417] __device_attach_async_helper+0x1d3/0x290 [ 111.341022][ T9417] async_run_entry_fn+0x9c/0x530 [ 111.342558][ T9417] process_one_work+0x9c5/0x1ba0 [ 111.344153][ T9417] worker_thread+0x6c8/0xf00 [ 111.345631][ T9417] kthread+0x2c1/0x3a0 [ 111.346968][ T9417] ret_from_fork+0x45/0x80 [ 111.348408][ T9417] ret_from_fork_asm+0x1a/0x30 [ 111.349940][ T9417] [ 111.349940][ T9417] -> #3 (&q->limits_lock){+.+.}-{4:4}: [ 111.352121][ T9417] __mutex_lock+0x19b/0xa60 [ 111.353563][ T9417] __nbd_set_size+0x2c0/0x730 [ 111.355060][ T9417] nbd_start_device+0x8fd/0xd70 [ 111.356564][ T9417] nbd_ioctl+0x21a/0xfd0 [ 111.357951][ T9417] blkdev_ioctl+0x276/0x6d0 [ 111.359390][ T9417] __x64_sys_ioctl+0x190/0x200 [ 111.360915][ T9417] do_syscall_64+0xcd/0x250 [ 111.362379][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.364227][ T9417] [ 111.364227][ T9417] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 111.366688][ T9417] blk_mq_submit_bio+0x1fb6/0x24c0 [ 111.368313][ T9417] __submit_bio+0x384/0x540 [ 111.369767][ T9417] submit_bio_noacct_nocheck+0x698/0xd70 [ 111.371528][ T9417] submit_bio_noacct+0x93a/0x1e20 [ 111.373114][ T9417] block_read_full_folio+0x812/0xa50 [ 111.374794][ T9417] filemap_read_folio+0xc6/0x2a0 [ 111.376352][ T9417] filemap_get_pages+0x155f/0x1be0 [ 111.377969][ T9417] filemap_read+0x3ca/0xd70 [ 111.379419][ T9417] blkdev_read_iter+0x187/0x480 [ 111.380949][ T9417] vfs_read+0x87f/0xbe0 [ 111.382299][ T9417] ksys_read+0x12b/0x250 [ 111.383709][ T9417] do_syscall_64+0xcd/0x250 [ 111.385167][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.386997][ T9417] [ 111.386997][ T9417] -> #1 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 111.389445][ T9417] down_read+0x9a/0x330 [ 111.390809][ T9417] page_cache_ra_unbounded+0x173/0x750 [ 111.392515][ T9417] page_cache_ra_order+0x8f2/0xc80 [ 111.394157][ T9417] filemap_fault+0x14a5/0x2820 [ 111.395666][ T9417] __do_fault+0x10a/0x490 [ 111.397082][ T9417] do_pte_missing+0xebd/0x3e00 [ 111.398597][ T9417] __handle_mm_fault+0x103c/0x2a40 [ 111.400723][ T9417] handle_mm_fault+0x3fa/0xaa0 [ 111.402445][ T9417] __get_user_pages+0x8d9/0x3b50 [ 111.404028][ T9417] get_user_pages_unlocked+0x1c2/0x780 [ 111.405756][ T9417] hva_to_pfn+0x8be/0xc20 [ 111.407156][ T9417] kvm_follow_pfn+0x29f/0x3f0 [ 111.408659][ T9417] __kvm_faultin_pfn+0x11c/0x1a0 [ 111.410223][ T9417] kvm_mmu_faultin_pfn+0x469/0x1f30 [ 111.411861][ T9417] kvm_tdp_page_fault+0x182/0x3d0 [ 111.413483][ T9417] kvm_mmu_do_page_fault+0x58d/0x690 [ 111.415274][ T9417] kvm_mmu_page_fault+0x20f/0x1bb0 [ 111.416893][ T9417] handle_ept_violation+0x25a/0x640 [ 111.418538][ T9417] vmx_handle_exit+0x733/0x1f70 [ 111.420084][ T9417] vcpu_run+0x3047/0x4f50 [ 111.421500][ T9417] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 111.423268][ T9417] kvm_vcpu_ioctl+0x6ce/0x1520 [ 111.424793][ T9417] __x64_sys_ioctl+0x190/0x200 [ 111.426329][ T9417] do_syscall_64+0xcd/0x250 [ 111.427805][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.429652][ T9417] [ 111.429652][ T9417] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 111.431802][ T9417] __lock_acquire+0x249e/0x3c40 [ 111.433364][ T9417] lock_acquire.part.0+0x11b/0x380 [ 111.434974][ T9417] __might_fault+0x11b/0x190 [ 111.436440][ T9417] _copy_from_user+0x29/0xd0 [ 111.437910][ T9417] __blk_trace_setup+0xa8/0x180 [ 111.439442][ T9417] blk_trace_ioctl+0x163/0x290 [ 111.440949][ T9417] blkdev_ioctl+0x109/0x6d0 [ 111.442403][ T9417] __x64_sys_ioctl+0x190/0x200 [ 111.443955][ T9417] do_syscall_64+0xcd/0x250 [ 111.445407][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.447243][ T9417] [ 111.447243][ T9417] other info that might help us debug this: [ 111.447243][ T9417] [ 111.450147][ T9417] Chain exists of: [ 111.450147][ T9417] &mm->mmap_lock --> &q->q_usage_counter(queue)#51 --> &q->debugfs_mutex [ 111.450147][ T9417] [ 111.454197][ T9417] Possible unsafe locking scenario: [ 111.454197][ T9417] [ 111.456331][ T9417] CPU0 CPU1 [ 111.457886][ T9417] ---- ---- [ 111.459421][ T9417] lock(&q->debugfs_mutex); [ 111.460762][ T9417] lock(&q->q_usage_counter(queue)#51); [ 111.463083][ T9417] lock(&q->debugfs_mutex); [ 111.465142][ T9417] rlock(&mm->mmap_lock); [ 111.466449][ T9417] [ 111.466449][ T9417] *** DEADLOCK *** [ 111.466449][ T9417] [ 111.468754][ T9417] 1 lock held by syz.6.908/9417: [ 111.470171][ T9417] #0: ffff88802577c3c8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xc9/0x290 [ 111.472921][ T9417] [ 111.472921][ T9417] stack backtrace: [ 111.474620][ T9417] CPU: 2 UID: 0 PID: 9417 Comm: syz.6.908 Not tainted 6.13.0-syzkaller-00603-g3d3a9c8b89d4 #0 [ 111.477510][ T9417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.480568][ T9417] Call Trace: [ 111.481546][ T9417] [ 111.482407][ T9417] dump_stack_lvl+0x116/0x1f0 [ 111.483799][ T9417] print_circular_bug+0x419/0x5d0 [ 111.485257][ T9417] check_noncircular+0x31a/0x400 [ 111.486690][ T9417] ? __pfx_check_noncircular+0x10/0x10 [ 111.488263][ T9417] ? __pfx_widen_string+0x10/0x10 [ 111.489731][ T9417] ? lockdep_lock+0xc6/0x200 [ 111.491071][ T9417] ? __pfx_lockdep_lock+0x10/0x10 [ 111.492522][ T9417] __lock_acquire+0x249e/0x3c40 [ 111.493957][ T9417] ? __pfx___lock_acquire+0x10/0x10 [ 111.495442][ T9417] lock_acquire.part.0+0x11b/0x380 [ 111.496915][ T9417] ? __might_fault+0xe3/0x190 [ 111.498284][ T9417] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 111.499902][ T9417] ? rcu_is_watching+0x12/0xc0 [ 111.501293][ T9417] ? trace_lock_acquire+0x14e/0x1f0 [ 111.502789][ T9417] ? vsnprintf+0x320/0x1180 [ 111.504084][ T9417] ? __might_fault+0xe3/0x190 [ 111.505450][ T9417] ? lock_acquire+0x2f/0xb0 [ 111.506768][ T9417] ? __might_fault+0xe3/0x190 [ 111.508134][ T9417] ? __might_fault+0xe3/0x190 [ 111.509493][ T9417] __might_fault+0x11b/0x190 [ 111.510838][ T9417] ? __might_fault+0xe3/0x190 [ 111.512190][ T9417] _copy_from_user+0x29/0xd0 [ 111.513520][ T9417] __blk_trace_setup+0xa8/0x180 [ 111.514905][ T9417] ? __pfx___blk_trace_setup+0x10/0x10 [ 111.516460][ T9417] ? __pfx_snprintf+0x10/0x10 [ 111.517831][ T9417] blk_trace_ioctl+0x163/0x290 [ 111.519203][ T9417] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 111.520716][ T9417] blkdev_ioctl+0x109/0x6d0 [ 111.522029][ T9417] ? __pfx_blkdev_ioctl+0x10/0x10 [ 111.523484][ T9417] ? selinux_file_ioctl+0x180/0x270 [ 111.524857][ T9417] ? selinux_file_ioctl+0xb4/0x270 [ 111.526247][ T9417] ? __pfx_blkdev_ioctl+0x10/0x10 [ 111.527713][ T9417] __x64_sys_ioctl+0x190/0x200 [ 111.529126][ T9417] do_syscall_64+0xcd/0x250 [ 111.530481][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.532293][ T9417] RIP: 0033:0x7fa796185d29 [ 111.533814][ T9417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.539295][ T9417] RSP: 002b:00007fa796f37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.541687][ T9417] RAX: ffffffffffffffda RBX: 00007fa796375fa0 RCX: 00007fa796185d29 [ 111.543923][ T9417] RDX: 00000000200021c0 RSI: 00000000c0481273 RDI: 0000000000000003 [ 111.546185][ T9417] RBP: 00007fa796201b08 R08: 0000000000000000 R09: 0000000000000000 [ 111.548453][ T9417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.550731][ T9417] R13: 0000000000000000 R14: 00007fa796375fa0 R15: 00007fffbb34cb78 [ 111.552986][ T9417] [ 111.553916][ C2] vkms_vblank_simulate: vblank timer overrun [ 111.572003][ T40] audit: type=1400 audit(1737442193.038:746): avc: denied { setopt } for pid=9416 comm="syz.6.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 VM DIAGNOSIS: 06:49:52 Registers: info registers vcpu 0 CPU#0 RAX=fffff94000248b88 RBX=fffff94000248b89 RCX=ffffffff81f3f5de RDX=fffff94000248b89 RSI=0000000000000008 RDI=ffffea0001245c40 RBP=fffff94000248b88 RSP=ffffc90006977548 R8 =0000000000000000 R9 =fffff94000248b88 R10=ffffea0001245c47 R11=0000000000005bfb R12=0000000000000151 R13=ffff88802d737a98 R14=ffffea0001245c40 R15=0000000000000000 RIP=ffffffff81fcdc71 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2ed1eff8 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6567646972620001 000c0012001c0000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e2602a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e2602aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e2602aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e2602ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e2602b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e2602c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e274b488 00007fd5e274b480 00007fd5e274b478 00007fd5e274b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e32ad100 00007fd5e274b440 00007fd5e2740004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd5e274b498 00007fd5e274b490 00007fd5e274b488 00007fd5e274b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000150012 RBX=ffff888100089e00 RCX=0000000000000000 RDX=0000000000150013 RSI=ffff888035f045e0 RDI=ffffc90006ab6990 RBP=ffffc90006ab69c0 RSP=ffffc90006ab6910 R8 =0000000000000001 R9 =ffffffff81fcf369 R10=0000000000000000 R11=0000000000000000 R12=ffff888035f04468 R13=0000000000000000 R14=0000000000150012 R15=ffffea0000d7c100 RIP=ffffffff81f234c4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f08452d36c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd5e3392f98 CR3=000000004984c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557a3c7cf0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557a434600 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557a42f779 000055557a42f2d0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557a3c6b44 000055557a3c6b40 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06045afa04080020 8610002010000602 5afa000800061000 20100006005bce18 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1494030804001490 030008001488030e 0800148003010800 13f80302080013f0 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040014b003020800 14a80300080014a0 030e0400149c0318 04001498030c0400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02100005b00302c8 10000d9003040800 14c00306080014b8 0310040014b40318 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004010000000806 060154a804808008 0005e00300100005 d00300100005c003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104808080801000 0580040100000008 06060154a8048080 080005e003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05d00300100005c0 0302100005b00302 c810000d90030408 0014c00306080014 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b80310040014b403 18040014b0030208 0014a80300080014 a0030e0400149c03 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1804001498030c04 0014940308040014 9003000800148803 0e08001480030108 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851f5465 RDI=ffffffff9ab32e20 RBP=ffffffff9ab32de0 RSP=ffffc90006aff3a8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000039 R14=ffffffff851f5400 R15=0000000000000000 RIP=ffffffff851f548f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa796f376c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200021c0 CR3=0000000049848000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffc00 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa796202a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa796202aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa796202aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa796202ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa796202b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa796202c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003370 6f6f6c2f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001053 4c4c4f0c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=dffffc0000000000 RCX=0000000000000001 RDX=ffffffff81fcb0d4 RSI=0000000000000010 RDI=ffffc900045af490 RBP=0000000000000001 RSP=ffffc900045af408 R8 =0000000000000000 R9 =fffffbfff20c136a R10=ffffffff90609b57 R11=00000000000a4001 R12=0000000000000c40 R13=ffffc900045af488 R14=0000000000001000 R15=ffffffff846439e9 RIP=ffffffff8185ee0d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555582dad500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa796ef4f98 CR3=0000000052c20000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2def8500 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d3f402a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d3f402aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d3f402aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d3f402ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d3f402b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6d3f402c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000