last executing test programs: 2m22.371727485s ago: executing program 0 (id=786): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKGETNRZONES(r0, 0x80041285, &(0x7f0000000040)=0x9) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe80ffff00000e1208000f0100810401a80016ea1f000b400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r1, 0x125f, 0x0) 2m22.304445142s ago: executing program 0 (id=788): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xa, 0xfb, 0x5, 0xd, 0x0, 0x70bd2c, 0xeedc, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x1527, @mcast2, 0x6}}, @sadb_lifetime={0x4, 0x4, 0x5, 0x6, 0x3, 0xfffffffffffeffff}]}, 0x68}}, 0x4) 2m22.303747332s ago: executing program 0 (id=790): r0 = syz_io_uring_setup(0x5e52, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x400}, &(0x7f0000000080)=0x0, &(0x7f0000000380)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r7 = fanotify_init(0x200, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount(&(0x7f0000000600)=@nullb, &(0x7f0000000640)='./file0\x00', &(0x7f00000006c0)='rpc_pipefs\x00', 0x11808a, &(0x7f0000000700)='\x00') listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000) fanotify_mark(r7, 0x2, 0x40001043, r5, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="2f060000f35a00000730000000030aec0800ff0700002f55975d03000000006b0000000000000002000000000000000000000000000000ff0100"/69], 0x40) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x4e78, 0x4) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000005fe2dc3830d96ae7287514e4000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close_range(r3, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000580), &(0x7f00000005c0)=0x4) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x1ae, 0x40, 0x12345}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bind$unix(r11, &(0x7f0000000240)=@abs, 0x10) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 2m22.184398847s ago: executing program 0 (id=791): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="00d34d00", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0xffffffffffffffac, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}}}, 0x0) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x30, r6, 0x5, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44010}, 0x4) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000020}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd8, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b0bf92e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79744bea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x692b35bc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32a8e4d3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a7b7bdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25ad976b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2352d579}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e69b5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3504c4c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46d9c53e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f2231ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e444e4a}]}, {0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x4084) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf250500000008000300f3"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x304, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdd}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8014) 2m22.104474923s ago: executing program 0 (id=794): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x207ffd, 0xfffffffe}, 0x8) shutdown(r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) 2m21.971574438s ago: executing program 0 (id=795): mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000c00)={r2, 0x80000001}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5}) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fc1046", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20}}}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x0, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x240480e1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000057c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x7, 0x40) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000140)) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2504}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004004) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) unshare(0x2a020480) mq_open(&(0x7f0000000000)='\x00', 0x40, 0x4, &(0x7f0000000040)={0xa, 0x7, 0x17189a08, 0xc}) unshare(0x2c000000) 2m21.962330936s ago: executing program 32 (id=795): mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000c00)={r2, 0x80000001}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r4, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5}) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fc1046", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20}}}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x0, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x240480e1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000057c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x7, 0x40) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000140)) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2504}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004004) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) unshare(0x2a020480) mq_open(&(0x7f0000000000)='\x00', 0x40, 0x4, &(0x7f0000000040)={0xa, 0x7, 0x17189a08, 0xc}) unshare(0x2c000000) 2m20.58471821s ago: executing program 2 (id=814): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'pim6reg\x00'}) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x22, 0x9, 0xf909, 0x899d, 0x80, 0x98a, 0x7, 0x1010, 0xfffffe01, 0x1, 0x4, 0x2, 0x6, 0x4, 0x0], 0x1, 0x4000007}) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xca}]}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8}]}}}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xec}}, 0x41) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r4, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r9, 0x0, 0xffffffff004) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 2m20.38286303s ago: executing program 2 (id=820): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) fcntl$setlease(r4, 0x400, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000280)={@desc={0x1, 0x0, @auto="f0289587ff711957"}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0x4) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, 0x0, &(0x7f0000000100)) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000bc0)={"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"}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a090400000000000000000200e7136ba3503ba4e712000018000480140001800d00010073796e70726f7879000000001f9c60e6fd79aae8b78914270900010073797a30000000000900020073797a32000000001400009f26b03800000000081bf1d6bc785bf466a10b4c2158bb38033b63ae3f8548251f97388dd1bfe3bff6b3f475d035b0249d382e4f4aa581ed273670d9755fe6a4024727c26b9346ebcf430c12f92701ac792789504830949953aff9648ab14f693b4c1e893466de344f3afb8b"], 0x6c}}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010001fff000002ee0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008520199abb695eaf2b40d09001800128008000100677265000c00028006000e0003000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x4) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000240)=0x1) 2m20.003832225s ago: executing program 2 (id=833): sysinfo(&(0x7f0000000000)=""/196) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x4, 0x0, 0x400000, 0xc, "3eccd8000000000000000040000000040100"}) 2m20.0028131s ago: executing program 2 (id=834): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x18b500f, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0xc080}, 0x0) mount$9p_tcp(&(0x7f0000000080), &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000280), 0x945000, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@cache_loose}]}}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m19.871439862s ago: executing program 2 (id=838): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) r2 = eventfd(0x2) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x0, r2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) 2m19.654779802s ago: executing program 2 (id=846): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{r1, r2+10000000}, {0x0, 0x3938700}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r3, 0x0, 0x0) 2m19.653011244s ago: executing program 33 (id=846): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{r1, r2+10000000}, {0x0, 0x3938700}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r3, 0x0, 0x0) 1m41.941589485s ago: executing program 5 (id=1619): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={0x30, 0x1411, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008844}, 0x80) 1m41.941299585s ago: executing program 5 (id=1620): r0 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) r1 = fsmount(0xffffffffffffffff, 0x1, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000380)={'dummy0\x00', @ifru_ivalue=0x4}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xd, 0xf, &(0x7f00000000c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb4}], &(0x7f0000000080)='GPL\x00', 0x800000, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x8, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_crypto(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x708, 0x4, 0x0, {{'pcbc(fcrypt-generic)\x00'}, '\x00', '\x00', 0x400}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@upd={0x120, 0x12, 0x100, 0x70bd2a, 0x25dfdbfe, {{'drbg_pr_sha512\x00'}, '\x00', '\x00', 0xc00, 0x2000}, [{0x8, 0x1, 0x6}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x7}, {0x8}, {0x8, 0x1, 0xeae}, {0x8, 0x1, 0x81}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x1000}]}, 0x120}}, 0x8000) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 1m41.941064837s ago: executing program 5 (id=1621): syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x1, 0x0, 0x62ea0000, 0x0, 0x80000}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="06635c1d8ffe6b456f000000000000000000000097f1e154c72d413a28", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x94) 1m41.871433429s ago: executing program 5 (id=1622): syz_init_net_socket$ax25(0x3, 0x3, 0xc4) memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$inet6(0xa, 0x80007, 0x40000000) lseek(r0, 0xbe7, 0x0) pivot_root(&(0x7f00000000c0)='./cgroup\x00', 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) utimensat(r3, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1000, &(0x7f0000000300)={[{@gid}, {}]}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x3d, r7, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, &(0x7f0000000040)=r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) preadv(r9, 0x0, 0x0, 0x8, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) 1m41.808961643s ago: executing program 5 (id=1627): r0 = io_uring_setup(0x6ddd, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x62f) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x1, 0xd5, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) 1m41.587956205s ago: executing program 5 (id=1639): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)={0xc}, 0x8) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e27, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 1m41.539140576s ago: executing program 34 (id=1639): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)={0xc}, 0x8) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e27, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 9.689275398s ago: executing program 4 (id=3810): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000087a000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000340)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000322000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r0, 0x0) (async) r5 = dup3(r4, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000002880)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000002880)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 9.570709092s ago: executing program 4 (id=3813): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010071ec7c45f2fe000000008500000083000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c20500000000000000cceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fda4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1a5e1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9cdf99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0010067fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e800fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700000000000011b64b378ee96af15cbbc65d72ae980b6df22b5ca3ea377f36beb44b45c6f84b3f4d2c62ca91b4df16fc8cc5d18b35213e5f67ec200e768ab28feaff2195724b2965ebca822af6c0a4e598d34f9b5f1eb43de209cd5541fe72d89d5f9819c1529c242b72ccdb9541e54fcccf12457df695126458ebffaaebe98748dea4f0a0b0a1683ff327ca05070000000000000088a571761be31e4fdd530604d32149c22f81adc983adc81b335d0579f47763a97af46500c91d5b2640242661beca1b4e695f7aac5ae46a72ac99ec395bdf16e3fc75e7acbb2d10060bef6a793082f8cfd4721588787c8a8c6257a8a11d49f7f7ed9de6efb7dd8058fb0c8125ee9c1691afa39b5a70d489efcd3e95a483c59f8fa7443e795eac454a68ab647e0d5381df6528858895d57274e97046659ac9488c85e5728987fa9d43660eb28b7befbb981f8fde8754d792146e49ee14bff102540e247a8780c80e3ff0688e8cb5c500446756d0b76244766deecc69c4c3435c125f0f06c772a051b690113e59485586e0ff"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20}, 0x48) 9.570156602s ago: executing program 4 (id=3814): r0 = userfaultfd(0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000080)) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x441}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f00002e6000/0x4000)=nil) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) 9.519874821s ago: executing program 4 (id=3815): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2000782, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000040)='./file0\x00') mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000400)='tracefs\x00', 0x8, &(0x7f0000000440)='\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = fanotify_init(0x200, 0x0) r2 = dup(r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0xa0, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/25, 0x19, 0x0, 0x38}, @ptr={0x70742a85, 0x0, &(0x7f0000001040)=""/4096, 0x1000, 0x2, 0x3b}, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000380)={0x0, 0x28, 0x50}}, 0x400}, @release={0x40046306, 0xfffefffc}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x55, 0x0, &(0x7f0000000600)="f6db7d88df44ceacf9f7e1c556cd0e575487611e22e8934d5fb1fcbb3152fd39d66e17cc135d772f9781b81f70e918b00bd490adb4275111999b6ce6dff3541072e103cc4da0c7d2a31353c26a6224495513b3df16"}) fanotify_mark(r1, 0x1, 0x48001059, r2, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000005347c6360264b0ee0001006e65746465767369650000000f0002006e657464657673696d3000000e00a80066"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) 9.460774868s ago: executing program 4 (id=3818): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24044094) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r0], 0x7c}}, 0x80) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 9.209886443s ago: executing program 4 (id=3826): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="4180c2000002a0725ce9ec8a090086dd60f2130000303a00fe88000000000000fbffffffffff0001ff023e861c1a00000000000000000001040087953548d4c083de58b5a2dfad3290786000000060dd906300023a0000000000000000000000000000000000ff020000000000000000000000008a789dab9077ddf91ce58d376f2d889d0ea0d35c44c1b62d515e4c9368ec6058e145f80cc718f01b310d7034238aa28102"], 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x6}, 0x8) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, &(0x7f0000000180)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x3c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xf}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) 9.193733209s ago: executing program 35 (id=3826): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="4180c2000002a0725ce9ec8a090086dd60f2130000303a00fe88000000000000fbffffffffff0001ff023e861c1a00000000000000000001040087953548d4c083de58b5a2dfad3290786000000060dd906300023a0000000000000000000000000000000000ff020000000000000000000000008a789dab9077ddf91ce58d376f2d889d0ea0d35c44c1b62d515e4c9368ec6058e145f80cc718f01b310d7034238aa28102"], 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x6}, 0x8) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, &(0x7f0000000180)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x3c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xf}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) 2.756814052s ago: executing program 3 (id=3917): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010071ec7c45f2fe0000000085000000c3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c20500000000000000cceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fda4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1a5e1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9cdf99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0010067fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e800fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700000000000011b64b378ee96af15cbbc65d72ae980b6df22b5ca3ea377f36beb44b45c6f84b3f4d2c62ca91b4df16fc8cc5d18b35213e5f67ec200e768ab28feaff2195724b2965ebca822af6c0a4e598d34f9b5f1eb43de209cd5541fe72d89d5f9819c1529c242b72ccdb9541e54fcccf12457df695126458ebffaaebe98748dea4f0a0b0a1683ff327ca05070000000000000088a571761be31e4fdd530604d32149c22f81adc983adc81b335d0579f47763a97af46500c91d5b2640242661beca1b4e695f7aac5ae46a72ac99ec395bdf16e3fc75e7acbb2d10060bef6a793082f8cfd4721588787c8a8c6257a8a11d49f7f7ed9de6efb7dd8058fb0c8125ee9c1691afa39b5a70d489efcd3e95a483c59f8fa7443e795eac454a68ab647e0d5381df6528858895d57274e97046659ac9488c85e5728987fa9d43660eb28b7befbb981f8fde8754d792146e49ee14bff102540e247a8780c80e3ff0688e8cb5c500446756d0b76244766deecc69c4c3435c125f0f06c772a051b690113e59485586e0ff"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20}, 0x48) 2.754550557s ago: executing program 3 (id=3918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x7ff, 0x3, 0x8001}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040880) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x3, 0x6, 0x4, 0x5}, 0x4}}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b74508738c61e02cd6b4996fe4c5799314da51a74ce91edc63b8a80322c7c48ac8446843f80e46da831727cbbee49b89a579c376b94dfd5684f2b4cd94613d309a39d51d37effdd67d62fdabf4e20bcef460932d85aeedd58c52f0523342e7af39421753294e9ea6332412d445547f87c75e5c393f6671f620590286446dc40186585173890d2a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe39, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) write(r1, &(0x7f0000000200)="656598f91b4be9dc06bbbad985aebfd0a6336addfaa95df8038f5efc11eb4a016f2a3200f74004d3fc85c9331f9ad5ee966c175b944cef34eb2f87da514118e81ea23f925df607b5d6c3535659cdc7662a05f9ebaf751e36593d9ee899e9e9ce02dd0ee91fffad5d105c87f285df798a6e2639ae9373eaf33bcebb9f3dc3c6210b41f985b6a9d00547e8353fb6dc52356912e0e431c45460d0433d291bcd2249f022bf9c9963a9b792e4e1a421ceb4bfa8f58cb0209f4743fdb05d6b97bbbc06713b07a38fcc7981da72f275348afbe3b3b501c38abd161bef633f222a0e8b022357", 0xe2) 2.680738105s ago: executing program 3 (id=3920): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x5, 0x1, 0x0, 0x7f, "4041836dc400", '\x00\x00\a\x00', "0300", "185aad13", ["d5c2a7cdaeea2c6f8e00b600", "807fb3eacf821b00", "2971088d544f005a4e5200", "ff812500004000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000200)={0x8, 0x101, 0x9, 0x0, 0x7, 0x7, "b87fe12d00b800f6d72a89fea221d1af", 0x7, 0x6, 0x8e, 0x6, 0x7, 0x8}) setreuid(0xee01, 0xee01) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x14080) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000240)={0x10, 0x0, {0x3, 0x1, 0x6, 0x2, 0xa7da}, 0x7}) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x8, 0x4) recvmmsg(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001940)=""/34, 0x22}], 0x1}, 0x1}], 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa4}, {0x6}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.678979834s ago: executing program 3 (id=3921): r0 = getpid() r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000008c0)={'team0\x00', 0xe761}) r2 = syz_open_procfs(r0, &(0x7f0000000180)='oom_adj\x00') write$sysctl(r2, &(0x7f0000000140)='5\x00', 0x2) read$rfkill(r2, 0x0, 0x0) getpid() (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000008c0)={'team0\x00', 0xe761}) (async) syz_open_procfs(r0, &(0x7f0000000180)='oom_adj\x00') (async) write$sysctl(r2, &(0x7f0000000140)='5\x00', 0x2) (async) read$rfkill(r2, 0x0, 0x0) (async) 2.677677431s ago: executing program 3 (id=3922): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003220000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400070c0000000005000500000000000a00000000003300000000000000000000000000000000010700000000000000120008000804"], 0x110}, 0x1, 0x7}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x38, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40804) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) sendmsg$alg(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)="292e89baee723f879ee37c77344f5a9cdd965637b76cb7eade738e98553bcc139385b839bdd37100c276df59ea7dd4ad014075658345bb230b9265f1f9a883ebed16a14f7df90f372bff2929c5f52b264dac3c328232d147f5537d12fb279746344219ccc3ded31035b19e1e5c85efffb01fbef64e6572214416acdb2214a3bf2e2af5f8e4017bd79c5b18688ad394a8f5a7728306a6d7b4eddb96e11ebb7332bae4dff51d23aa34551aca4a5f0d10c2c8ba5ed024e6ec69a42b9244dac1627540cb1931859548fb83f5bcb9ca1ba96695b72950132aadaa23acbecbbd79635e8890431d7daf1f152cbae5", 0xeb}, {&(0x7f0000000700)="cb25d99f17afbc936b2386074a57f179eb6127e91d1df40d3b3b7955e61fe043da91a22f6631edc0c40ad2fe5c2f90df323dbd70882c284c5539f9032d2baef2165a0d4866426ee9b563f372f43aac38d6ad565b223a76aa5804e35b2dd08a9450df91e17fb0e8ed95d237823a8c8e7a9ab3314fd421fc60a0d3c57754e25db5", 0x80}], 0x2, &(0x7f0000000780)=[@assoc={0x18, 0x117, 0x4, 0xa83}, @assoc={0x18, 0x117, 0x4, 0x8000}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x4008001}, 0x8000) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000540)={0x0, 0x3}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@updpolicy={0xcc, 0x1b, 0x1, 0x0, 0x0, {{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xf, 0x0, 0x9, 0x0, 0x3}, {0x0, 0x2, 0x2}, 0x2, 0x8}, [@srcaddr={0x14, 0xd, @in=@remote}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r10 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.539806535s ago: executing program 3 (id=3924): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000001c00128009000100626f6e64000000000c000280080014000080"], 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)=0x6) r1 = syz_usb_connect(0x3, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xfffffe99) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000100)={0x14, &(0x7f0000000180)={0x0, 0x21, 0xf8, {0xf8, 0x24, "7104cbc486fa635222001cdd1b710a6356142958cfd086c77dcd79bd7b112525b713126f04b49101c0db31a6d161dcfd13bab56492a6eb0989d8bdca80a4a5e92116751d16a8b2a4532a54797da5fec5c370f63593883532ad9f83480f6b5b67839f73b080cbd8904cf63f5677c4984ad4fe8f2d3f9647bb7a447a34a4a1b8e5001705d2a1ca53b8a61d344c6b4a67efe7064aa13e1e9edbd0a8dbb3812ae48172dbfadde49dc7a668775487b03c48944769367803c55e2d84e290d3603538568d02b69c75509e9b3859c3962524b9f93e6670550bb226bcc9ae2da66125c382705aa993899a6b10404fedc00f11ca5f06d2ae403f87"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x302b}}}, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x40, 0x14, 0xf8, "e9a18706ef83474f44d7bdf5241aa482f268de29ddfadc912e3fb94d1b0b88d17c29c564088efe5cd7b60ba6943a78b3a7bc37ccf300e2b5157e07e8002a6a58ac25bb9aa30ae1da7afab1e8bdb657b95e10887eed0d7b189952761cdec9634aaff3297862c1188d4ffa0d15800fc242a3f48a199e4254f83de7c7df8fd2769b61227f37d9d47dc11bf80ca60d5c014f1ac56ff6bb333fbb26daba664149ddbc4d79931cb9df324f4eb4f87c9dcf1b44be85327012322f8b07a0607c7a6d1caf3b33d7a2ef78f1fe76145b0a072b3f7e779830210b835565003932eb43e5090849f5fcd6b65caa1021093e6b9249dc294df1e714a82df603"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xa}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000400)={0x20, 0x81, 0x1, '<'}, &(0x7f0000000440)={0x20, 0x82, 0x2, '?\r'}, &(0x7f0000000480)={0x20, 0x83, 0x3, "7e26b8"}, &(0x7f00000004c0)={0x20, 0x84, 0x2, "807b"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "412a19"}}) 1.460539622s ago: executing program 7 (id=3939): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) (async) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) (async) write$UHID_INPUT(r2, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) (async) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r3, &(0x7f0000001480)=[{&(0x7f0000000600)="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", 0x24f}, {&(0x7f0000000440)='0', 0x1}], 0x2) 1.459861932s ago: executing program 7 (id=3941): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000040)={{0x1, @name="558b12520d2ad36541ad5cf6fafd43f06123a7697e1520cbb5bbcc4bef5c2129"}, 0x8, 0x6ad, 0x7}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f00000000c0)={0xa, "feec0f5dc57f7f909e51a2fc8a7d70f7c2aa3076a2b74b9a47c0874900a22790", 0x0, 0x1}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000140)={0x2, 0x4, 0x9}) (async) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000140)={0x2, 0x4, 0x9}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = openat$incfs(r1, &(0x7f0000000200)='.log\x00', 0x1, 0x8) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000000240)={0x9, 0x2}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x49d9c73738f7da50, 0x0) sendfile(r2, r1, &(0x7f00000002c0)=0x3, 0x5) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r5, &(0x7f00000003c0)) r6 = openat$incfs(r0, &(0x7f0000000440)='.log\x00', 0x24003, 0x82) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000480)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x4000, 0x3}) (async) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000480)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x4000, 0x3}) fcntl$setflags(r6, 0x2, 0x1) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f00000004c0)) (async) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f00000004c0)) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000500)={'wlan0\x00'}) (async) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000500)={'wlan0\x00'}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000540)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000540)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) (async) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000580)=0x8, 0x4) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000005c0)={0x7ff, 0x0, 0x0, 0x8, 0x5}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x88, r9, 0x800, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000084}, 0x10) getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f00000007c0), &(0x7f0000000800)=0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000840)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000840)) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000a40)) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000a40)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000b00), 0x80, 0x0) (async) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000b00), 0x80, 0x0) ppoll(&(0x7f0000000b80)=[{r7, 0x1400}, {r1, 0x202}, {r7, 0x48}, {r3, 0x80}, {r10, 0x1280}, {r4, 0x2}, {0xffffffffffffffff, 0x8009}, {0xffffffffffffffff, 0x4b8}, {r3, 0x4000}], 0x9, &(0x7f0000000c40), &(0x7f0000000c80)={[0x8]}, 0x8) 1.459748562s ago: executing program 7 (id=3942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) syz_emit_vhci(&(0x7f0000001ac0)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fbdbdf250000000089398fbd531930f3ed76cfc8bf5efa19a78df413f24d96d82e1e9e5b6cf79038173d7a6cf2f64f816c0b9ffe69f7838ec9568fe5bf72", @ANYRES64=r1, @ANYBLOB="137c03002b1a07002c0012800e00010069703667726574617000000018000280140007000000000000000000000000000000000108001f005600000008000d0000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.400672232s ago: executing program 7 (id=3943): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) (async, rerun: 32) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (async) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) write$FUSE_INIT(r1, &(0x7f00000046c0)={0x50, 0x0, r2, {0x7, 0x9, 0x4, 0x403a1810, 0xfffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) (async) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r4, 0xb3) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r4, 0x41) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f1ff0000000071300000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040400007203200000000000e500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) (async) keyctl$revoke(0x3, r0) 1.399875048s ago: executing program 7 (id=3945): bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000038c0)=ANY=[], 0x130}, 0x1, 0x0, 0x0, 0x4080}, 0xc5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x4a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_team\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x4) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x25dfdbfd, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @mcast2}}, @NHA_OIF={0x8, 0x5, r5}]}, 0x38}}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x3, 0x8, {{0x1e, 0x4, 0x1, 0x3, 0x78, 0x66, 0x0, 0xc8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@end, @noop, @timestamp_addr={0x44, 0x44, 0xde, 0x1, 0x9, [{@remote, 0x200}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x4}, {@private=0xa010101, 0xe6bd}, {@local, 0x895f}, {@loopback, 0x1}, {@remote, 0x6}, {@empty, 0x4}]}, @timestamp={0x44, 0x10, 0x19, 0x0, 0x4, [0x8, 0x2, 0x4]}, @noop, @noop, @timestamp_prespec={0x44, 0xc, 0x54, 0x3, 0x7, [{@multicast1, 0x46a}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x3e, 0x72e, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x8, 0x10, 0x47, 0x4001bb}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20802040}, 0xc, &(0x7f0000000940)={&(0x7f0000001300)=ANY=[@ANYBLOB="f0070000", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fbdbdf250000000008000100", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ec01028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f2ffffff08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="9401028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ec01028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff01000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="3c006c6564000000000000000071c4c29a0b2b2a5ac8b344741c17ce0000000000050003000600000004000400080006001500"/71, @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0400028008000100", @ANYRES32=r6, @ANYBLOB="ec00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004001209000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004009f00000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB], 0x7f0}, 0x1, 0x0, 0x0, 0x40}, 0x44080) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffd, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0xf}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4000) r12 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r12, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x1, 0x6, 0x8, 0x1, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}]}) setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r12, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) kexec_load(0x401, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="51d8a4a4850c52e6f9b57bff327250e2162ccef0801a0aa8d705754007faf1bd4bb97277b0aebd9b2888e3d78e319432d74b5872", 0x34, 0x10000, 0xffffffffffffff04}, {&(0x7f0000000180)="b1271f81f9180d1aff2a43e6d4fd3b248f92fb5f27ccbc1f4f697bef83e76456bd0d544e4c6de8f6e7f7c2d5d933610f016dcbd401a772e316eba0b012cfba643701a69f1899fdd5221fca4a1bd302f0838540e6c898f871b9dea99b83708f80479de793d290a83891ff9861994dd4b66ffd10b6bdd8970edf148cdad7b51610e5cddb3a503bcca6cbac59d9efffd79c7555577a7c1d295c3c4d0b720ddd2039cbb17176233f2c30602d212eb04320c5a5", 0xb1, 0xfffffffffffffffe, 0x81}], 0x3e0000) accept4$alg(r2, 0x0, 0x0, 0x80800) 1.329404037s ago: executing program 7 (id=3950): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000003c0), &(0x7f0000000400), 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fanotify_init(0x500, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="98000000010201010000000000000000070000020800054000000004060007400000000044000100000006000340000300000c000280050001003a0000000c0080050001008800000014000180080001000d00000009000200e000ff020800084000000001080000000000103308000840000000031800038006000340000100000c000281050001002100"/152], 0x98}, 0x1, 0x0, 0x0, 0x11}, 0x48000) r4 = fcntl$dupfd(r2, 0x0, r3) fanotify_mark(r3, 0x1, 0x40000019, r4, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r6 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0x10}, {0x16}]}, 0x10) sendto$inet6(r6, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @generic}) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000040)=""/185) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r11 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r11, 0x107, 0x11, 0x0, &(0x7f0000000080)) write$tun(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0006"], 0xfdef) r12 = syz_io_uring_setup(0xbe4, &(0x7f0000000640)={0x0, 0x4211, 0x400, 0x2, 0x40000337, 0x0, r4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000140)={0x0, 0x1, r4, 0x9, 0x80000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r12, 0x847ba, 0x0, 0xe, 0x0, 0x0) 977.281942ms ago: executing program 6 (id=3958): mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2}, 0x48) keyctl$set_reqkey_keyring(0xe, 0x6) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x402) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x4000, &(0x7f00000000c0)='rdma') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="28040000130001000000000000000000000000000000000000000000000000017f0000010000000000000000000000000000000000000000020020202b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x428}}, 0x0) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2}, 0x48) (async) keyctl$set_reqkey_keyring(0xe, 0x6) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x402) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x4000, &(0x7f00000000c0)='rdma') (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r1}, 0x48) (async) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="28040000130001000000000000000000000000000000000000000000000000017f0000010000000000000000000000000000000000000000020020202b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x428}}, 0x0) (async) 918.626883ms ago: executing program 6 (id=3960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0xa5bfce6, 0x0, 0x3, 0x1d, 0x1, "646b4c7fed409e3eedca8000f59e164dc63367e7e08474071e9f67cc6481368e22ccf521b6bbe3a6a0157ada941ad42d2b62cb6d7dc5352a94b52ae0bde3bb2c", "0db14295dccd224f8b5ef2619871507eddc5fcc80afaa01d4c3b062568a39748aa03fab4400f982510e9de5b54ae1d7051b12a0cb84eb89391fef5ca6b49111e", "d05ec8eb94ee9afa9810416be0e28111a4a710927747eda9cb44bcdc7563144f", [0x7, 0x7fffffffffffffff]}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000001080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_inq_rsp_tx_power={{0x3}, {0x0, 0xf}}}}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000003c0007010008000000000000027c00000400fc80"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000003c0007010008000000000000027c00000400fc80"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c000000190001090000000000000000021800000000fd090000000008000100ac14140008000f00ff007f"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0x80005520, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) 915.287462ms ago: executing program 6 (id=3962): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x130}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 670.545967ms ago: executing program 1 (id=3966): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0xff, 0x0, 0x3, 0x2}, 0x20) r1 = socket$isdn(0x22, 0x2, 0x25) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) bind$isdn(r1, &(0x7f0000000200)={0x22, 0x7f, 0x6, 0x3, 0x5}, 0x6) 608.929233ms ago: executing program 1 (id=3967): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) close(r5) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x1, 0x4, &(0x7f0000000240)=0x6}) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000140)="24000000010006", 0x7) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x4000) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) close(r5) (async) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x1, 0x4, &(0x7f0000000240)=0x6}) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) 480.485117ms ago: executing program 1 (id=3968): r0 = fsopen(&(0x7f00000001c0)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1b) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1b) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x7}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) lsm_get_self_attr(0x0, 0x0, &(0x7f0000000140), 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800010000180012800e00010009000000000000001ea186198d3a38677561726400000004000280"], 0x38}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@dev, @broadcast, 0x0}, &(0x7f0000000380)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYRES16=r3], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', r7, @fallback=0x35}, 0x94) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) socket(0xa, 0x5, 0x0) (async) r9 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000000080)=0x6, 0x4) (async) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000000080)=0x6, 0x4) sendto$inet6(r9, &(0x7f0000000240)="d519", 0x2, 0x40, &(0x7f0000000040)={0xa, 0x4e21, 0x3ff, @rand_addr=' \x01\x00', 0xec000000}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0xc0f85403, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x4}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0xc0f85403, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x4}) 480.207352ms ago: executing program 1 (id=3969): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0xaae, &(0x7f0000000000)={0x0, 0xffffeffa, 0x800, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 417.631438ms ago: executing program 1 (id=3970): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@netfilter={0x1, 0x1, 0x3, 0x1}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="10c00000000000001800128008000100677470000c00028008000200", @ANYBLOB='\b\x00'], 0x40}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x5863, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000f40)="b8b28225cc772f31e7e8c7", 0xb}, {&(0x7f0000000300)="ed9788fb", 0x4}], 0x2}, 0x44000) 417.15382ms ago: executing program 1 (id=3971): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x3d, 0x4) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x8001, 0x0, 0x3, 0x1, 0xfe}, 0x8) 50.69964ms ago: executing program 6 (id=3972): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x20}, 0x48) 49.996229ms ago: executing program 6 (id=3973): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r0]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f0000002700)=[{0x0, 0x0, 0x0, @broadcast}]}) 0s ago: executing program 6 (id=3974): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) r2 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900082b0100060000000000000000ffffac1e0001fe8000000000000000000000000000aaff"], 0x0) recvmsg$unix(r2, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x40000102) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfd}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)="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", 0x1000}, 0x1, 0x0, 0x0, 0x801}, 0x24000000) connect$llc(r2, &(0x7f0000000000)={0x1a, 0xf, 0x34, 0x3, 0xd8, 0xd3, @local}, 0x10) kernel console output (not intermixed with test programs): riptor's value: 3 [ 184.625020][ T1340] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.628047][ T1340] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.806990][ T10] libceph: connect (1)[c::]:6789 error -101 [ 184.807002][T10748] libceph: connect (1)[c::]:6789 error -101 [ 184.807075][T10748] libceph: mon0 (1)[c::]:6789 connect error [ 184.809755][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 184.842886][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 184.842900][ T40] audit: type=1400 audit(184.440:1360): avc: denied { cmd } for pid=15939 comm="syz.1.2992" path="socket:[70290]" dev="sockfs" ino=70290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 184.888123][ T1340] usb 9-1: usb_control_msg returned -32 [ 184.889720][ T1340] usbtmc 9-1:16.0: can't read capabilities [ 184.995776][ T40] audit: type=1400 audit(184.590:1361): avc: denied { read write } for pid=15953 comm="syz.1.2995" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 185.004768][ T40] audit: type=1400 audit(184.590:1362): avc: denied { open } for pid=15953 comm="syz.1.2995" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 185.013742][ T40] audit: type=1400 audit(184.600:1363): avc: denied { write } for pid=15953 comm="syz.1.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 185.317634][ T1340] libceph: connect (1)[c::]:6789 error -101 [ 185.320315][ T1340] libceph: mon0 (1)[c::]:6789 connect error [ 185.329996][ T10] libceph: connect (1)[c::]:6789 error -101 [ 185.333265][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 185.378795][T15933] ceph: No mds server is up or the cluster is laggy [ 185.378840][T15931] ceph: No mds server is up or the cluster is laggy [ 185.484251][ T40] audit: type=1400 audit(185.080:1364): avc: denied { listen } for pid=16014 comm="syz.6.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 185.491670][ T40] audit: type=1400 audit(185.080:1365): avc: denied { accept } for pid=16014 comm="syz.6.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 185.510971][T16020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=16020 comm=syz.6.3014 [ 185.517153][T16020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=16020 comm=syz.6.3014 [ 185.522052][T16020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=16020 comm=syz.6.3014 [ 185.526479][T16020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=16020 comm=syz.6.3014 [ 185.531408][T16020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=16020 comm=syz.6.3014 [ 185.535807][T16020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=16020 comm=syz.6.3014 [ 185.540570][T16020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=16020 comm=syz.6.3014 [ 185.544549][T16020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=16020 comm=syz.6.3014 [ 185.548923][T16020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=16020 comm=syz.6.3014 [ 185.552801][T16020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=16020 comm=syz.6.3014 [ 185.595098][ T40] audit: type=1400 audit(185.190:1366): avc: denied { accept } for pid=16025 comm="syz.3.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.596895][ T1340] usb 9-1: USB disconnect, device number 24 [ 185.661767][ T40] audit: type=1400 audit(185.260:1367): avc: denied { append } for pid=16042 comm="syz.4.3021" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 185.919768][T16050] fuse: Bad value for 'group_id' [ 185.921476][T16050] fuse: Bad value for 'group_id' [ 185.936652][ C2] net_ratelimit: 3 callbacks suppressed [ 185.936665][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 186.086723][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 186.441974][ T40] audit: type=1400 audit(186.040:1368): avc: denied { getopt } for pid=16067 comm="syz.4.3028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.464523][ T40] audit: type=1400 audit(186.060:1369): avc: denied { read write } for pid=16069 comm="syz.4.3029" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 186.489286][T16072] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 186.775252][T16091] netlink: 'syz.6.3037': attribute type 1 has an invalid length. [ 186.781181][T16091] all: renamed from lo [ 186.836241][T16100] __nla_validate_parse: 18 callbacks suppressed [ 186.836253][T16100] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3040'. [ 186.863282][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3041'. [ 186.940102][T16123] netlink: 'syz.3.3049': attribute type 1 has an invalid length. [ 186.952669][T16123] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.962259][T16123] bond4: (slave wlan0): Enslaving as an active interface with a down link [ 186.966721][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 187.009660][T16141] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3054'. [ 187.024384][T16141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3054'. [ 187.027538][T16141] netlink: 'syz.3.3054': attribute type 7 has an invalid length. [ 187.030007][T16141] netlink: 'syz.3.3054': attribute type 8 has an invalid length. [ 187.033482][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3054'. [ 187.100220][T16156] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3060'. [ 187.108777][T16158] netlink: 'syz.4.3061': attribute type 1 has an invalid length. [ 187.117942][T16158] 8021q: adding VLAN 0 to HW filter on device bond8 [ 187.125560][T16158] bond8: (slave geneve3): making interface the new active one [ 187.130129][T16158] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 187.133866][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3062'. [ 187.136870][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 187.141764][T16163] overlayfs: failed to clone upperpath [ 187.188395][T16174] overlayfs: failed to clone upperpath [ 187.188700][T16173] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3067'. [ 187.193866][T16173] dummy0: entered promiscuous mode [ 187.194543][T16174] autofs: Unknown parameter 'ethtool' [ 187.195918][T16173] bridge0: port 1(dummy0) entered blocking state [ 187.199343][T16174] overlayfs: cannot append lower layer [ 187.199871][T16173] bridge0: port 1(dummy0) entered disabled state [ 187.204431][T16173] dummy0: entered allmulticast mode [ 187.205022][T16174] overlayfs: failed to clone upperpath [ 187.207269][T16173] bridge0: port 1(dummy0) entered blocking state [ 187.210417][T16173] bridge0: port 1(dummy0) entered listening state [ 187.237649][T16179] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3070'. [ 187.244165][T16176] bond5: (slave bridge3): making interface the new active one [ 187.247009][T16176] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 187.251263][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3069'. [ 187.254959][T16176] 8021q: adding VLAN 0 to HW filter on device bond5 [ 187.345401][T16197] CIFS mount error: No usable UNC path provided in device string! [ 187.345401][T16197] [ 187.349647][T16197] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 187.438944][T16206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.448471][T16206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.478236][T16210] overlayfs: failed to clone upperpath [ 187.532578][T16225] overlayfs: missing 'workdir' [ 187.753181][T16236] vlan3: entered promiscuous mode [ 187.754945][T16236] vlan3: entered allmulticast mode [ 187.756676][T16236] hsr_slave_1: entered allmulticast mode [ 188.006769][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 188.166721][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 188.426958][T16286] overlayfs: missing 'lowerdir' [ 188.427142][T16285] overlayfs: failed to resolve './bus': -2 [ 188.481768][T16300] futex_wake_op: syz.3.3113 tries to shift op by 32; fix this program [ 188.482898][T16302] overlay: ./file0 is not a directory [ 188.529314][T16309] loop6: detected capacity change from 0 to 63 [ 188.531895][ T5979] buffer_io_error: 138 callbacks suppressed [ 188.531904][ T5979] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.536305][ T5979] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.539974][ T5979] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.542522][ T5979] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.544980][ T5979] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.547557][ T5979] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.550071][ T5979] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.552531][ T5979] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.555050][ T5979] ldm_validate_partition_table(): Disk read failed. [ 188.557501][ T5979] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.560916][ T5979] Buffer I/O error on dev loop6, logical block 0, async page read [ 188.564425][ T5979] Dev loop6: unable to read RDB block 0 [ 188.567785][ T5979] loop6: unable to read partition table [ 188.573953][T16309] ldm_validate_partition_table(): Disk read failed. [ 188.576211][T16309] Dev loop6: unable to read RDB block 0 [ 188.578708][T16309] loop6: unable to read partition table [ 188.580943][T16309] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 188.748619][T16329] fuse: Unknown parameter '0000000000000000000000318446744073709551615' [ 188.750201][T16345] bond9: entered allmulticast mode [ 188.751902][T16329] validate_nla: 2 callbacks suppressed [ 188.751910][T16329] netlink: 'syz.6.3121': attribute type 21 has an invalid length. [ 188.753289][T16345] 8021q: adding VLAN 0 to HW filter on device bond9 [ 188.783466][T16358] delete_channel: no stack [ 188.804653][T16363] [U] zͻi[27| [ 188.806059][T16363] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 188.810455][T16363] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 188.812660][T16363] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 188.823965][T16363] [U] 8)X)YvxRĻbmbN@ox;JD, [ 188.825992][T16363] [U] *Cn3v7KEXgt_3 [ 188.828001][T16363] [U] D/QazҬEHgE1$_ks=R@ [ 188.829879][T16363] [U] ϼcEv @ [ 188.831145][T16363] [U] a% [ 188.832185][T16363] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 188.838439][T16363] [U] f1p3 [ 188.839550][T16363] [U] N0[L;a_l&kMC [ 188.841104][T16363] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 188.844241][T16361] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 [ 199.606604][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.615593][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3359'. [ 199.619187][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3359'. [ 199.647564][T17056] veth0_macvtap: left allmulticast mode [ 199.652257][T17056] veth1_macvtap: left allmulticast mode [ 199.685658][ T8050] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.689274][ T8050] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.693240][ T8050] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.696300][ T8050] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.699652][ T8050] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.702403][ T8050] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.705135][ T8050] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.708872][ T8050] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.827292][T17098] netlink: 'syz.1.3368': attribute type 64 has an invalid length. [ 199.829764][T17098] netlink: 'syz.1.3368': attribute type 4 has an invalid length. [ 199.832505][T17098] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3368'. [ 199.859228][ T40] audit: type=1400 audit(199.460:1430): avc: denied { mounton } for pid=17099 comm="syz.1.3369" path="/143/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 199.879854][ T6028] IPVS: starting estimator thread 0... [ 199.882046][ T40] audit: type=1400 audit(199.480:1431): avc: denied { override_creds } for pid=17102 comm="syz.1.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 199.966670][T17104] IPVS: using max 52 ests per chain, 124800 per kthread [ 200.486713][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 200.650340][T17142] NILFS (nbd1): device size too small [ 200.656640][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 200.917305][T17176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17176 comm=syz.3.3389 [ 200.942688][T17179] tipc: Enabled bearer , priority 10 [ 201.028202][ T40] audit: type=1400 audit(200.630:1432): avc: denied { getopt } for pid=17184 comm="syz.6.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 201.032802][T17185] overlayfs: failed to clone upperpath [ 201.286706][ T5967] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 201.287309][ T5963] Bluetooth: hci3: command 0x1003 tx timeout [ 201.298220][T17211] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3406'. [ 201.334219][T17220] overlayfs: missing 'lowerdir' [ 201.334853][T17219] overlayfs: missing 'lowerdir' [ 201.462775][ T40] audit: type=1400 audit(201.060:1433): avc: denied { read append } for pid=17247 comm="syz.4.3416" path="/540/file0/blkio.throttle.io_service_bytes_recursive" dev="9p" ino=35913961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.536664][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 201.686902][ T5967] Bluetooth: hci0: command 0x0406 tx timeout [ 201.689847][T17262] tmpfs: Unknown parameter 'indo64' [ 201.696592][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 201.773858][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3427'. [ 201.974030][ T40] audit: type=1400 audit(201.570:1434): avc: denied { connect } for pid=17276 comm="syz.6.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 202.056848][ T7981] tipc: Node number set to 2017117324 [ 202.070186][T17282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17282 comm=syz.6.3430 [ 202.104703][T17284] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3431'. [ 202.122824][T17286] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3432'. [ 202.126309][T17286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.186084][ T40] audit: type=1400 audit(201.780:1435): avc: denied { write } for pid=17285 comm="syz.1.3432" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 202.408120][T17328] netlink: 4388 bytes leftover after parsing attributes in process `syz.6.3446'. [ 202.411223][T17329] netlink: 4388 bytes leftover after parsing attributes in process `syz.6.3446'. [ 202.443795][T17334] overlayfs: failed to clone upperpath [ 202.551599][ T40] audit: type=1400 audit(202.150:1436): avc: denied { watch_sb watch_reads } for pid=17335 comm="syz.1.3448" path="/164/bus" dev="tmpfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 202.566700][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 202.643455][T17351] tipc: Enabling of bearer rejected, failed to enable media [ 202.646496][T17351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=17351 comm=syz.3.3454 [ 202.681267][ T40] audit: type=1400 audit(202.280:1437): avc: denied { read } for pid=17354 comm="syz.3.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 202.694916][T17359] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3453'. [ 202.726617][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 202.768240][T17367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=17367 comm=syz.3.3458 [ 202.825485][T17367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=17367 comm=syz.3.3458 [ 202.916038][T17374] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.3459'. [ 202.919472][T17374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3459'. [ 202.946695][T17379] netlink: 'syz.3.3460': attribute type 27 has an invalid length. [ 202.950048][T17379] lo: left promiscuous mode [ 202.955311][T17379] macvtap0: left allmulticast mode [ 202.958834][T17379] macsec0: left promiscuous mode [ 202.960911][T17379] macsec0: left allmulticast mode [ 202.963784][T17379] vlan2: left promiscuous mode [ 202.965914][T17379] vlan2: left allmulticast mode [ 202.969843][T17379] hsr_slave_1: left allmulticast mode [ 202.971838][T17379] macvlan2: left promiscuous mode [ 202.973477][T17379] macvlan2: left allmulticast mode [ 202.985907][T17379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.989548][T17379] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.994617][T17379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.026170][T17389] netlink: 'syz.6.3463': attribute type 1 has an invalid length. [ 203.034332][T17389] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 203.041145][T17389] bond7: (slave bridge11): making interface the new active one [ 203.043742][T17389] bond7: (slave bridge11): Enslaving as an active interface with an up link [ 203.070138][T17394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3465'. [ 203.151521][ T40] audit: type=1400 audit(202.750:1438): avc: denied { ioctl } for pid=17398 comm="syz.6.3467" path="socket:[79896]" dev="sockfs" ino=79896 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.189637][T17402] fuse: Bad value for 'fd' [ 203.192210][T17402] overlayfs: failed to clone upperpath [ 203.216158][T17404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.221237][T17404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.554842][ T40] audit: type=1400 audit(203.150:1439): avc: denied { mounton } for pid=17415 comm="syz.3.3472" path="/490/bus" dev="tmpfs" ino=2661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 203.554846][T17416] /dev/sg0: Can't lookup blockdev [ 203.616652][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 203.634371][T17434] netlink: 'syz.4.3477': attribute type 21 has an invalid length. [ 203.637327][T17434] netlink: 'syz.4.3477': attribute type 22 has an invalid length. [ 203.639841][T17434] netlink: 'syz.4.3477': attribute type 23 has an invalid length. [ 203.642346][T17434] netlink: 'syz.4.3477': attribute type 25 has an invalid length. [ 203.644792][T17434] netlink: 'syz.4.3477': attribute type 26 has an invalid length. [ 203.647383][T17434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3477'. [ 203.776634][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 203.892422][ T40] audit: type=1326 audit(203.490:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17445 comm="syz.6.3480" exe="/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f61b9b8ebe9 code=0x0 [ 203.995285][T17454] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 203.995317][T17453] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 204.082431][T17470] netlink: 'syz.6.3486': attribute type 16 has an invalid length. [ 204.085119][T17470] netlink: 2898 bytes leftover after parsing attributes in process `syz.6.3486'. [ 204.279416][T17488] netlink: 'syz.3.3491': attribute type 10 has an invalid length. [ 204.281888][T17488] netlink: 'syz.3.3491': attribute type 27 has an invalid length. [ 204.284706][T17488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.284889][T17493] 9pnet_fd: Insufficient options for proto=fd [ 204.493465][ T8046] Bluetooth: hci3: Frame reassembly failed (-84) [ 204.495584][T17510] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 204.557488][ T40] audit: type=1400 audit(204.160:1441): avc: denied { setopt } for pid=17502 comm="syz.6.3497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 204.629318][ T40] audit: type=1400 audit(204.230:1442): avc: denied { listen } for pid=17519 comm="syz.6.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 204.646650][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 204.689527][T17530] macsec1: entered promiscuous mode [ 204.691613][T17530] bridge0: entered promiscuous mode [ 204.693625][T17530] bridge0: port 3(macsec1) entered blocking state [ 204.695819][T17530] bridge0: port 3(macsec1) entered disabled state [ 204.698276][T17530] macsec1: entered allmulticast mode [ 204.700011][T17530] bridge0: entered allmulticast mode [ 204.702176][T17530] macsec1: left allmulticast mode [ 204.703853][T17530] bridge0: left allmulticast mode [ 204.705897][T17530] bridge0: left promiscuous mode [ 204.759042][T17530] macsec1: entered promiscuous mode [ 204.760756][T17530] bridge0: entered promiscuous mode [ 204.762738][T17530] bridge0: port 3(macsec1) entered blocking state [ 204.764750][T17530] bridge0: port 3(macsec1) entered disabled state [ 204.767099][T17530] macsec1: entered allmulticast mode [ 204.768757][T17530] bridge0: entered allmulticast mode [ 204.770975][T17530] macsec1: left allmulticast mode [ 204.772558][T17530] bridge0: left allmulticast mode [ 204.774499][T17530] bridge0: left promiscuous mode [ 204.819392][T17530] macsec1: entered promiscuous mode [ 204.821178][T17530] bridge0: entered promiscuous mode [ 204.823269][T17530] bridge0: port 3(macsec1) entered blocking state [ 204.825388][T17530] bridge0: port 3(macsec1) entered disabled state [ 204.828066][T17530] macsec1: entered allmulticast mode [ 204.829778][T17530] bridge0: entered allmulticast mode [ 204.831940][T17530] macsec1: left allmulticast mode [ 204.833575][T17530] bridge0: left allmulticast mode [ 204.835613][T17530] bridge0: left promiscuous mode [ 204.876603][ T53] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 204.899155][T17530] macsec1: entered promiscuous mode [ 204.900835][T17530] bridge0: entered promiscuous mode [ 204.902703][T17530] bridge0: port 3(macsec1) entered blocking state [ 204.904712][T17530] bridge0: port 3(macsec1) entered disabled state [ 204.907199][T17530] macsec1: entered allmulticast mode [ 204.909154][T17530] bridge0: entered allmulticast mode [ 204.911350][T17530] macsec1: left allmulticast mode [ 204.912935][T17530] bridge0: left allmulticast mode [ 204.914998][T17530] bridge0: left promiscuous mode [ 204.989052][T17530] macsec1: entered promiscuous mode [ 204.991000][T17530] bridge0: entered promiscuous mode [ 204.993073][T17530] bridge0: port 3(macsec1) entered blocking state [ 204.995223][T17530] bridge0: port 3(macsec1) entered disabled state [ 204.997451][T17530] macsec1: entered allmulticast mode [ 204.999156][T17530] bridge0: entered allmulticast mode [ 205.001754][T17530] macsec1: left allmulticast mode [ 205.003385][T17530] bridge0: left allmulticast mode [ 205.005483][T17530] bridge0: left promiscuous mode [ 205.038041][ T53] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 205.040860][ T53] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 205.044062][ T53] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 205.047409][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 205.050781][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 205.055535][ T53] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 205.058555][ T53] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 205.061026][ T53] usb 6-1: Product: syz [ 205.062402][ T53] usb 6-1: Manufacturer: syz [ 205.066087][ T53] cdc_wdm 6-1:1.0: skipping garbage [ 205.067967][ T53] cdc_wdm 6-1:1.0: skipping garbage [ 205.068768][T17530] macsec1: entered promiscuous mode [ 205.070066][ T53] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 205.071373][T17530] bridge0: entered promiscuous mode [ 205.073273][ T53] cdc_wdm 6-1:1.0: Unknown control protocol [ 205.075380][T17530] bridge0: port 3(macsec1) entered blocking state [ 205.079176][T17530] bridge0: port 3(macsec1) entered disabled state [ 205.081262][T17530] macsec1: entered allmulticast mode [ 205.082999][T17530] bridge0: entered allmulticast mode [ 205.085434][T17530] macsec1: left allmulticast mode [ 205.087126][T17530] bridge0: left allmulticast mode [ 205.089154][T17530] bridge0: left promiscuous mode [ 205.139349][T17530] macsec1: entered promiscuous mode [ 205.141068][T17530] bridge0: entered promiscuous mode [ 205.142920][T17530] bridge0: port 3(macsec1) entered blocking state [ 205.144921][T17530] bridge0: port 3(macsec1) entered disabled state [ 205.147042][T17530] macsec1: entered allmulticast mode [ 205.149096][T17530] bridge0: entered allmulticast mode [ 205.151228][T17530] macsec1: left allmulticast mode [ 205.152831][T17530] bridge0: left allmulticast mode [ 205.154940][T17530] bridge0: left promiscuous mode [ 205.200648][T17530] macsec1: entered promiscuous mode [ 205.202891][T17530] bridge0: entered promiscuous mode [ 205.205391][T17530] bridge0: port 3(macsec1) entered blocking state [ 205.208289][T17530] bridge0: port 3(macsec1) entered disabled state [ 205.211028][T17530] macsec1: entered allmulticast mode [ 205.213212][T17530] bridge0: entered allmulticast mode [ 205.216244][T17530] macsec1: left allmulticast mode [ 205.218427][T17530] bridge0: left allmulticast mode [ 205.221096][T17530] bridge0: left promiscuous mode [ 205.267748][ T7981] usb 6-1: USB disconnect, device number 28 [ 205.290068][T17530] macsec1: entered promiscuous mode [ 205.292362][T17530] bridge0: entered promiscuous mode [ 205.295091][T17530] bridge0: port 3(macsec1) entered blocking state [ 205.298508][T17530] bridge0: port 3(macsec1) entered disabled state [ 205.301180][T17530] macsec1: entered allmulticast mode [ 205.303385][T17530] bridge0: entered allmulticast mode [ 205.306355][T17530] macsec1: left allmulticast mode [ 205.308496][T17530] bridge0: left allmulticast mode [ 205.311106][T17530] bridge0: left promiscuous mode [ 205.379312][T17530] macsec1: entered promiscuous mode [ 205.380981][T17530] bridge0: entered promiscuous mode [ 205.383109][T17530] bridge0: port 3(macsec1) entered blocking state [ 205.385255][T17530] bridge0: port 3(macsec1) entered disabled state [ 205.387619][T17530] macsec1: entered allmulticast mode [ 205.389349][T17530] bridge0: entered allmulticast mode [ 205.391671][T17530] macsec1: left allmulticast mode [ 205.393346][T17530] bridge0: left allmulticast mode [ 205.395428][T17530] bridge0: left promiscuous mode [ 205.459126][T17530] macsec1: entered promiscuous mode [ 205.460773][T17530] bridge0: entered promiscuous mode [ 205.462835][T17530] bridge0: port 3(macsec1) entered blocking state [ 205.464919][T17530] bridge0: port 3(macsec1) entered disabled state [ 205.467128][T17530] macsec1: entered allmulticast mode [ 205.468759][T17530] bridge0: entered allmulticast mode [ 205.471179][T17530] macsec1: left allmulticast mode [ 205.472703][T17530] bridge0: left allmulticast mode [ 205.474797][T17530] bridge0: left promiscuous mode [ 205.906627][ T6028] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 206.057923][ T6028] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 206.060619][ T6028] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 206.063791][ T6028] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 206.066829][ T6028] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 206.070197][ T6028] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 206.075162][ T6028] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 206.078701][ T6028] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 206.081266][ T6028] usb 6-1: Product: syz [ 206.082650][ T6028] usb 6-1: Manufacturer: syz [ 206.087202][ T6028] cdc_wdm 6-1:1.0: skipping garbage [ 206.088893][ T6028] cdc_wdm 6-1:1.0: skipping garbage [ 206.090938][ T6028] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 206.092805][ T6028] cdc_wdm 6-1:1.0: Unknown control protocol [ 206.289156][ T7981] usb 6-1: USB disconnect, device number 29 [ 206.566736][ T5971] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 206.566738][ T5967] Bluetooth: hci3: command 0x1003 tx timeout [ 206.736664][ C2] net_ratelimit: 3 callbacks suppressed [ 206.736719][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 206.804666][ T40] audit: type=1400 audit(206.400:1443): avc: denied { ioctl } for pid=17562 comm="syz.4.3518" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 206.858246][T17571] syz_tun: entered promiscuous mode [ 206.860374][T17571] batadv_slave_0: entered promiscuous mode [ 206.863038][T17571] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 206.866349][T17571] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.870029][T17571] hsr1: entered allmulticast mode [ 206.871755][T17571] syz_tun: entered allmulticast mode [ 206.873422][T17571] batadv_slave_0: entered allmulticast mode [ 206.886615][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 207.081611][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 207.081626][ T40] audit: type=1400 audit(206.680:1445): avc: denied { accept } for pid=17592 comm="syz.4.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 207.127276][T17597] __nla_validate_parse: 9 callbacks suppressed [ 207.127290][T17597] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3530'. [ 207.136638][ T53] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 207.152069][ T40] audit: type=1400 audit(206.750:1446): avc: denied { write } for pid=17599 comm="syz.4.3531" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 207.235262][T17605] tmpfs: Cannot change global quota limit on remount [ 207.237195][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3535'. [ 207.270297][T17610] o2cb: This node has not been configured. [ 207.272426][T17610] o2cb: Cluster check failed. Fix errors before retrying. [ 207.274796][T17610] (syz.6.3535,17610,0):user_dlm_register:674 ERROR: status = -22 [ 207.278010][T17610] (syz.6.3535,17610,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 207.298604][ T53] usb 6-1: Invalid ep0 maxpacket: 32 [ 207.308539][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3537'. [ 207.333532][T10748] IPVS: starting estimator thread 0... [ 207.376322][T17641] usb usb9: usbfs: process 17641 (syz.4.3543) did not claim interface 0 before use [ 207.377604][T17642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3544'. [ 207.382595][T17642] gretap0: entered promiscuous mode [ 207.416965][T17626] IPVS: using max 52 ests per chain, 124800 per kthread [ 207.427082][ T53] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 207.586629][ T53] usb 6-1: Invalid ep0 maxpacket: 32 [ 207.589170][ T53] usb usb6-port1: attempt power cycle [ 207.766734][ C3] bridge0: port 1(dummy0) entered learning state [ 207.776765][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 207.926653][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 207.929513][ T53] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 207.947507][ T53] usb 6-1: Invalid ep0 maxpacket: 32 [ 208.076697][ T53] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 208.230433][ T53] usb 6-1: Invalid ep0 maxpacket: 32 [ 208.232508][ T53] usb usb6-port1: unable to enumerate USB device [ 208.243471][ T5971] Bluetooth: hci4: connection err: -111 [ 208.452715][T17692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3559'. [ 208.469341][T17692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3559'. [ 208.487835][ T40] audit: type=1400 audit(208.090:1447): avc: denied { map } for pid=17691 comm="syz.3.3559" path="socket:[78396]" dev="sockfs" ino=78396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.806642][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 208.830846][T17699] could not allocate digest TFM handle cryptd(streebog512-generic) [ 208.966633][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 208.984966][T17721] validate_nla: 3 callbacks suppressed [ 208.984977][T17721] netlink: 'syz.4.3564': attribute type 1 has an invalid length. [ 208.989617][T17721] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3564'. [ 208.992827][T17721] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 209.149531][T17746] netlink: 'syz.4.3572': attribute type 10 has an invalid length. [ 209.156016][T17746] bond0: (slave a): Enslaving as an active interface with an up link [ 209.172963][T17748] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3568'. [ 209.234842][T17758] tipc: Resetting bearer [ 209.283893][T17761] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 209.421875][ T40] audit: type=1400 audit(209.020:1448): avc: denied { ioctl } for pid=17784 comm="syz.4.3583" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 209.442929][T17792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3585'. [ 209.447413][T17792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3585'. [ 209.451015][T17792] netlink: 'syz.3.3585': attribute type 18 has an invalid length. [ 209.458114][ T8046] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.458168][T17792] netlink: 'syz.3.3585': attribute type 18 has an invalid length. [ 209.460914][ T8046] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.460936][ T8046] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.470455][ T8046] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.738973][T17827] fuse: Bad value for 'group_id' [ 209.740735][T17827] fuse: Bad value for 'group_id' [ 209.846902][T17838] overlayfs: failed to resolve './file1': -2 [ 209.856634][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 209.876013][T17842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17842 comm=syz.6.3600 [ 209.977726][ T5971] block nbd0: Receive control failed (result -32) [ 210.000036][T17849] syz.1.3603: attempt to access beyond end of device [ 210.000036][T17849] nbd1: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 210.004960][T17849] XFS (nbd1): SB validate failed with error -5. [ 210.007002][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 210.051243][T17863] netlink: 'syz.6.3606': attribute type 1 has an invalid length. [ 210.095626][T17869] sctp: [Deprecated]: syz.6.3608 (pid 17869) Use of int in max_burst socket option deprecated. [ 210.095626][T17869] Use struct sctp_assoc_value instead [ 210.101964][T17869] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 210.104978][T17869] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 210.109424][T17868] delete_channel: no stack [ 210.134990][ T40] audit: type=1326 audit(209.730:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17870 comm="syz.6.3609" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61b9b8ebe9 code=0x0 [ 210.135035][T17873] netlink: 'syz.6.3609': attribute type 1 has an invalid length. [ 210.245100][T17876] binder: 17875:17876 ioctl c0306201 200000000040 returned -22 [ 210.247856][T17876] binder: 17875:17876 ioctl c0306201 200000000380 returned -22 [ 210.378774][ T40] audit: type=1400 audit(209.980:1450): avc: denied { write } for pid=17888 comm="syz.4.3614" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 210.575857][T17908] overlayfs: failed to resolve './file0': -2 [ 210.582590][T17908] overlayfs: failed to resolve './file0': -2 [ 210.620367][ T8046] Bluetooth: hci3: Frame reassembly failed (-84) [ 210.623049][T17917] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 210.627607][T17919] lo speed is unknown, defaulting to 1000 [ 210.630211][T17919] lo speed is unknown, defaulting to 1000 [ 210.632340][T17919] lo speed is unknown, defaulting to 1000 [ 210.681377][T17919] infiniband syz2: set active [ 210.683131][T10748] lo speed is unknown, defaulting to 1000 [ 210.684184][T17919] infiniband syz2: added lo [ 210.695296][T17919] RDS/IB: syz2: added [ 210.697041][T17919] smc: adding ib device syz2 with port count 1 [ 210.699704][T17919] smc: ib device syz2 port 1 has pnetid [ 210.702051][T10748] lo speed is unknown, defaulting to 1000 [ 210.704193][T17919] lo speed is unknown, defaulting to 1000 [ 210.753578][T17919] lo speed is unknown, defaulting to 1000 [ 210.786419][T17919] lo speed is unknown, defaulting to 1000 [ 210.819638][T17919] lo speed is unknown, defaulting to 1000 [ 210.852575][T17919] lo speed is unknown, defaulting to 1000 [ 210.886616][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 210.933213][T17930] overlayfs: failed to clone lowerpath [ 210.936165][T17930] overlayfs: failed to clone lowerpath [ 210.986159][T17932] nfs: Unknown parameter 'nomI޳sac' [ 211.046669][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 211.640154][T17936] bridge0: port 4(syz_tun) entered blocking state [ 211.643039][T17936] bridge0: port 4(syz_tun) entered disabled state [ 211.687066][ T40] audit: type=1400 audit(211.290:1451): avc: denied { write } for pid=17937 comm="syz.1.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 211.787064][T10748] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 211.849133][T17957] binder: 17956:17957 ioctl c0306201 200000000040 returned -22 [ 211.852593][T17957] binder: 17956:17957 ioctl c0306201 200000000380 returned -22 [ 211.926676][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 212.086649][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 212.646724][ T5971] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 212.646796][ T5967] Bluetooth: hci3: command 0x1003 tx timeout [ 212.787585][T17975] __nla_validate_parse: 12 callbacks suppressed [ 212.787596][T17975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3645'. [ 212.798071][T17975] vlan0: entered allmulticast mode [ 212.799867][T17975] bridge0: entered allmulticast mode [ 212.801814][T17975] bridge0: port 1(vlan0) entered blocking state [ 212.804069][T17975] bridge0: port 1(vlan0) entered disabled state [ 212.814764][T17980] netlink: 'syz.6.3646': attribute type 12 has an invalid length. [ 212.819386][T17982] binder: 17981:17982 ioctl c0306201 200000000040 returned -22 [ 212.822061][T17982] binder: 17981:17982 ioctl c0306201 200000000380 returned -22 [ 212.841199][T17984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3648'. [ 212.896367][ T40] audit: type=1400 audit(212.490:1452): avc: denied { bind } for pid=17985 comm="syz.1.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 212.905849][ T40] audit: type=1400 audit(212.500:1453): avc: denied { write } for pid=17985 comm="syz.1.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 212.923814][T18001] openvswitch: netlink: Message has 8 unknown bytes. [ 212.925598][T17999] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3653'. [ 212.935685][T18001] team0 (unregistering): Port device team_slave_0 removed [ 212.939202][T18001] team0 (unregistering): Port device team_slave_1 removed [ 212.966843][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 212.987494][T18006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.126728][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 213.214892][T18017] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.3659'. [ 213.215405][T18016] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3660'. [ 213.218301][T18017] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.3659'. [ 213.277438][T18032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3667'. [ 213.311877][T18037] binder: 18036:18037 ioctl c0306201 0 returned -14 [ 213.315076][T18037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3669'. [ 213.329425][T18037] netlink: 460 bytes leftover after parsing attributes in process `syz.1.3669'. [ 213.336150][T18038] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3665'. [ 213.399801][ T5967] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.402139][ T5967] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.404829][ T5967] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.407794][ T5967] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.410528][ T5967] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.427707][T18042] lo speed is unknown, defaulting to 1000 [ 213.530827][T18042] chnl_net:caif_netlink_parms(): no params data found [ 213.575294][T18042] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.576092][ T40] audit: type=1400 audit(213.170:1454): avc: denied { accept } for pid=18055 comm="syz.1.3673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 213.577632][T18042] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.577701][T18042] bridge_slave_0: entered allmulticast mode [ 213.578124][T18042] bridge_slave_0: entered promiscuous mode [ 213.591873][T18042] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.594399][T18042] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.597082][T18042] bridge_slave_1: entered allmulticast mode [ 213.599832][T18042] bridge_slave_1: entered promiscuous mode [ 213.626493][T18042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.631665][T18042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.652143][T18042] team0: Port device team_slave_0 added [ 213.655561][T18042] team0: Port device team_slave_1 added [ 213.689860][T18042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.693083][T18042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.704131][T18042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.711242][T18042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.713423][T18042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.717546][T18054] netlink: 'syz.6.3672': attribute type 10 has an invalid length. [ 213.723755][T18042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.765423][T18042] hsr_slave_0: entered promiscuous mode [ 213.768463][T18042] hsr_slave_1: entered promiscuous mode [ 213.770800][T18042] debugfs: 'hsr0' already exists in 'hsr' [ 213.773166][T18042] Cannot create hsr debugfs directory [ 213.830464][T18042] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.834391][T18042] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.846315][T18067] netlink: 'syz.6.3677': attribute type 1 has an invalid length. [ 213.891740][T18042] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.895334][T18042] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.999194][T18042] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.003123][T18042] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.016607][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 214.050146][T18042] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.054343][T18042] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.122486][T18096] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.155251][T18042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 214.161499][T18042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.166635][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 214.171298][T18042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.199309][T18042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.227138][T18042] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.229448][T18042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.232465][T18042] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.235457][T18042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.248513][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.252156][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.272105][T18042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.281112][T18042] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.286425][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.289543][ T8050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.295476][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.298063][ T8056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.389161][T18042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.500243][T18042] veth0_vlan: entered promiscuous mode [ 214.504274][T18042] veth1_vlan: entered promiscuous mode [ 214.517381][T18042] veth0_macvtap: entered promiscuous mode [ 214.520695][T18042] veth1_macvtap: entered promiscuous mode [ 214.528013][T18042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.533012][T18042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.539619][ T8050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.542674][ T8050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.545653][ T8050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.549064][ T8050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.555301][T18171] geneve2: entered promiscuous mode [ 214.557500][T18171] geneve2: entered allmulticast mode [ 214.574412][ T8050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.576938][ T8050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.589378][ T8067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.592773][ T8067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.662702][ T40] audit: type=1400 audit(214.260:1455): avc: denied { shutdown } for pid=18191 comm="syz.6.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.693632][T18202] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 214.734593][ T40] audit: type=1400 audit(214.330:1456): avc: denied { map } for pid=18199 comm="syz.1.3709" path="socket:[85243]" dev="sockfs" ino=85243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 214.735082][T18214] Invalid source name [ 214.743423][T18214] UBIFS error (pid: 18214): cannot open "/dev/sg0", error -22 [ 214.748597][T18214] binder: 18211:18214 ioctl 8040942d 2000000001c0 returned -22 [ 214.758726][T18214] binder: 18211:18214 ioctl c08c5114 200000000480 returned -22 [ 214.804020][T18223] overlayfs: failed to clone upperpath [ 214.808246][T18225] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 214.974129][T18240] netlink: 'syz.3.3723': attribute type 1 has an invalid length. [ 214.988437][T18240] bond6: (slave geneve3): Opening slave failed [ 215.037389][T18247] 8021q: adding VLAN 0 to HW filter on device bond6 [ 215.046764][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 215.065401][T18246] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 215.076395][T18246] 8021q: adding VLAN 0 to HW filter on device bond8 [ 215.091700][T18252] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 215.207191][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 215.289880][ T5967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.293581][ T5967] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.297366][ T5967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.301069][ T5967] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.304378][ T5967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.321658][T18264] lo speed is unknown, defaulting to 1000 [ 215.343356][ T40] audit: type=1400 audit(214.940:1457): avc: denied { bind } for pid=18268 comm="syz.3.3733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 215.352454][ T40] audit: type=1400 audit(214.940:1458): avc: denied { name_bind } for pid=18268 comm="syz.3.3733" src=28326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 215.361279][T18271] overlayfs: failed to clone upperpath [ 215.364623][ T40] audit: type=1400 audit(214.940:1459): avc: denied { node_bind } for pid=18268 comm="syz.3.3733" saddr=172.20.20.170 src=28326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 215.422225][T18264] chnl_net:caif_netlink_parms(): no params data found [ 215.447666][ T5967] Bluetooth: hci3: command tx timeout [ 215.471270][T18264] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.474369][T18264] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.478278][T18264] bridge_slave_0: entered allmulticast mode [ 215.481044][T18264] bridge_slave_0: entered promiscuous mode [ 215.484781][T18264] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.489472][T18264] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.492807][T18264] bridge_slave_1: entered allmulticast mode [ 215.497451][T18264] bridge_slave_1: entered promiscuous mode [ 215.543840][T18264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.549560][T18264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.577958][T18264] team0: Port device team_slave_0 added [ 215.580933][T18264] team0: Port device team_slave_1 added [ 215.600753][T18264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.603301][T18264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.612056][T18264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.617689][T18264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.620527][T18264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.629748][T18264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.654819][T18264] hsr_slave_0: entered promiscuous mode [ 215.657071][T18264] hsr_slave_1: entered promiscuous mode [ 215.658946][T18264] debugfs: 'hsr0' already exists in 'hsr' [ 215.660885][T18264] Cannot create hsr debugfs directory [ 215.709683][T18264] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 215.769224][T18264] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 215.776817][ T40] audit: type=1400 audit(215.380:1460): avc: denied { mounton } for pid=18311 comm="syz.4.3747" path="mnt:[4026532871]" dev="nsfs" ino=4026532871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 215.808846][T18264] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 215.826669][ T53] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 215.827951][T18323] overlayfs: failed to clone upperpath [ 215.849616][T18316] "syz.4.3749" (18316) uses obsolete ecb(arc4) skcipher [ 215.869420][T18264] netdevsim netdevsim6  (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 215.924053][T18264] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 215.928123][T18264] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 215.933062][T18264] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 215.939185][T18264] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 215.962362][T18264] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.964778][T18264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.967236][T18264] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.969544][T18264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.989074][T18264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.995053][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.996858][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 216.000054][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.001095][ T53] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.007519][ T53] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.011767][ T53] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.016054][ T53] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.023301][ T53] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.027310][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.034601][T18264] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.042068][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.045308][ T8050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.053410][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.056167][ T8050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.147225][T18367] netlink: 'syz.4.3763': attribute type 1 has an invalid length. [ 216.163744][T18264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.239750][ T53] usb 6-1: GET_CAPABILITIES returned 0 [ 216.241802][ T53] usbtmc 6-1:16.0: can't read capabilities [ 216.262403][T18264] veth0_vlan: entered promiscuous mode [ 216.266355][T18264] veth1_vlan: entered promiscuous mode [ 216.284088][T18264] veth0_macvtap: entered promiscuous mode [ 216.287968][T18264] veth1_macvtap: entered promiscuous mode [ 216.295580][T18264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.302046][T18264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.308527][ T8050] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.312439][ T8050] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.315298][ T8050] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.319241][ T8058] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.342197][ T8058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.344707][ T8058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.355531][ T8066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.358501][ T8066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.441178][T18389] netlink: 'syz.3.3766': attribute type 1 has an invalid length. [ 216.446043][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 216.451409][T18389] 8021q: adding VLAN 0 to HW filter on device bond7 [ 216.455492][ T10] usb 6-1: USB disconnect, device number 34 [ 216.478535][T18392] 9pnet: p9_errstr2errno: server reported unknown error [ 216.636800][ T6028] usb 11-1: new full-speed USB device number 10 using dummy_hcd [ 216.644612][ T40] audit: type=1326 audit(216.240:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18397 comm="syz.3.3770" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b5e78ebe9 code=0x0 [ 216.798530][ T6028] usb 11-1: config 0 has no interfaces? [ 216.800382][ T6028] usb 11-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 216.803189][ T6028] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.807111][ T6028] usb 11-1: config 0 descriptor?? [ 217.002877][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.006082][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.009729][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.012742][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.015639][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.019004][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.019188][ T1340] usb 11-1: USB disconnect, device number 10 [ 217.022110][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.027626][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.031412][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.034455][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.038163][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.041997][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.045702][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.049963][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.053387][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.056409][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.062928][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.066295][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.070091][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.073101][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.074635][T18413] netlink: 'syz.4.3774': attribute type 28 has an invalid length. [ 217.076223][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.079708][T18413] netlink: 'syz.4.3774': attribute type 3 has an invalid length. [ 217.083838][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.090210][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.093230][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.097067][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.100711][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.104222][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.108075][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.111556][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.114669][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.118790][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.122058][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.125105][T18405] program syz.1.3772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.128087][ C2] net_ratelimit: 3 callbacks suppressed [ 217.128097][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 217.179167][T18433] SELinux: Context is not valid (left unmapped). [ 217.184251][T18433] tipc: Started in network mode [ 217.186191][T18433] tipc: Node identity ac1414aa, cluster identity 4711 [ 217.190071][T18433] tipc: Enabled bearer , priority 10 [ 217.194719][T18435] /dev/sr0: Can't open blockdev [ 217.223300][T18435] netlink: 'syz.6.3781': attribute type 10 has an invalid length. [ 217.231278][T18435] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 217.286614][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 217.338529][T18459] loop7: detected capacity change from 0 to 7 [ 217.340990][ C0] blk_print_req_error: 138 callbacks suppressed [ 217.341000][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.345883][ C0] buffer_io_error: 43 callbacks suppressed [ 217.345893][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.350557][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.354112][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.359724][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.363504][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.367385][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.371095][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.374237][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.377402][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.380736][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.381327][ T5967] Bluetooth: hci2: command tx timeout [ 217.384950][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.390317][T18459] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.395249][T18459] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.397928][T18459] ldm_validate_partition_table(): Disk read failed. [ 217.400029][T18459] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.402908][T18459] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.405681][T18459] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.409099][T18459] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.411675][T18459] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.414760][T18459] Buffer I/O error on dev loop7, logical block 0, async page read [ 217.419081][T18459] Dev loop7: unable to read RDB block 0 [ 217.421045][T18459] loop7: unable to read partition table [ 217.422882][T18459] loop7: partition table beyond EOD, truncated [ 217.424851][T18459] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 217.482751][T18478] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 217.485381][ T8058] Bluetooth: hci1: Frame reassembly failed (-84) [ 217.526856][ T5971] Bluetooth: hci3: command tx timeout [ 217.577657][T18488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=18488 comm=syz.6.3795 [ 217.784160][T18494] erspan0: entered promiscuous mode [ 217.914944][T18503] __nla_validate_parse: 17 callbacks suppressed [ 217.914956][T18503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3801'. [ 218.166701][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 218.216724][ T60] tipc: Node number set to 2886997162 [ 218.336600][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 218.485640][T18509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.697912][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3805'. [ 218.701679][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3805'. [ 218.780491][T18518] could not allocate digest TFM handle hmac(sha224-avx2) [ 218.834062][T18536] binder_alloc: binder_alloc_mmap_handler: 18531 200000ffd000-200001000000 already mapped failed -16 [ 218.841725][T18532] binder_alloc: 18531: binder_alloc_buf, no vma [ 218.841821][T18536] binder_alloc: 18531: binder_alloc_buf, no vma [ 218.847654][T18532] binder_alloc: binder_alloc_mmap_handler: 18531 200000ffe000-200001000000 already mapped failed -16 [ 218.992502][T18546] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 219.018096][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 219.018111][ T40] audit: type=1400 audit(218.620:1463): avc: denied { append } for pid=18551 comm="syz.3.3817" name="file0" dev="tmpfs" ino=3135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.031431][ T40] audit: type=1400 audit(218.620:1464): avc: denied { unmount } for pid=18042 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 219.058625][T18554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.063672][ T60] lo speed is unknown, defaulting to 1000 [ 219.175862][T18573] macsec2: entered promiscuous mode [ 219.178977][T18573] macsec2: entered allmulticast mode [ 219.206698][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 219.280029][ T8053] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.302675][T18573] overlayfs: failed to clone upperpath [ 219.337694][ T24] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 219.351785][ T8053] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.376630][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 219.419883][ T8053] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.447605][ T5971] Bluetooth: hci2: command tx timeout [ 219.447765][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.452496][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.455000][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.458198][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.460932][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.464258][ T8053] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.476015][T18579] lo speed is unknown, defaulting to 1000 [ 219.496824][ T24] usb 11-1: Using ep0 maxpacket: 32 [ 219.499110][ T24] usb 11-1: too many configurations: 125, using maximum allowed: 8 [ 219.502877][ T24] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 219.505314][ T24] usb 11-1: can't read configurations, error -61 [ 219.526756][ T63] Bluetooth: hci1: command 0x1003 tx timeout [ 219.528852][ T5967] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 219.557151][ T8053] bridge_slave_1: left allmulticast mode [ 219.559187][ T8053] bridge_slave_1: left promiscuous mode [ 219.561471][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.565047][ T8053] bridge_slave_0: left allmulticast mode [ 219.567295][ T8053] bridge_slave_0: left promiscuous mode [ 219.569171][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.647306][ T24] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 219.661799][ T8053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.666198][ T8053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.670818][ T8053] bond0 (unregistering): Released all slaves [ 219.693139][T18579] chnl_net:caif_netlink_parms(): no params data found [ 219.732000][T18579] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.734680][T18579] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.738198][T18579] bridge_slave_0: entered allmulticast mode [ 219.741857][T18579] bridge_slave_0: entered promiscuous mode [ 219.746336][T18579] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.750263][T18579] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.753390][T18579] bridge_slave_1: entered allmulticast mode [ 219.756887][T18579] bridge_slave_1: entered promiscuous mode [ 219.806908][ T24] usb 11-1: Using ep0 maxpacket: 32 [ 219.808794][T18579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.809738][ T24] usb 11-1: too many configurations: 125, using maximum allowed: 8 [ 219.815119][T18579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.817586][ T24] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 219.822955][ T24] usb 11-1: can't read configurations, error -61 [ 219.825695][ T24] usb usb11-port1: attempt power cycle [ 219.848142][T18579] team0: Port device team_slave_0 added [ 219.853896][T18579] team0: Port device team_slave_1 added [ 219.892870][T18579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.895759][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.906016][T18579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.912544][T18579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.915399][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.925604][T18579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.955970][T18579] hsr_slave_0: entered promiscuous mode [ 219.958368][T18579] hsr_slave_1: entered promiscuous mode [ 219.960649][T18579] debugfs: 'hsr0' already exists in 'hsr' [ 219.962543][T18579] Cannot create hsr debugfs directory [ 220.013894][ T8053] hsr_slave_0: left promiscuous mode [ 220.017052][ T8053] hsr_slave_1: left promiscuous mode [ 220.019049][ T8053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.021354][ T8053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.024362][ T8053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.027020][ T8053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.034942][ T8053] veth1_macvtap: left promiscuous mode [ 220.036799][ T8053] veth0_macvtap: left promiscuous mode [ 220.038599][ T8053] veth1_vlan: left promiscuous mode [ 220.040264][ T8053] veth0_vlan: left promiscuous mode [ 220.187025][ T24] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 220.208267][ T24] usb 11-1: Using ep0 maxpacket: 32 [ 220.211570][ T24] usb 11-1: too many configurations: 125, using maximum allowed: 8 [ 220.215730][ T24] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 220.218548][ T24] usb 11-1: can't read configurations, error -61 [ 220.246639][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 220.285706][ T8053] team0 (unregistering): Port device team_slave_1 removed [ 220.288441][T18610] overlayfs: unescaped trailing colons in lowerdir mount option. [ 220.308712][ T8053] team0 (unregistering): Port device team_slave_0 removed [ 220.346943][ T24] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 220.369296][ T24] usb 11-1: Using ep0 maxpacket: 32 [ 220.371637][ T24] usb 11-1: too many configurations: 125, using maximum allowed: 8 [ 220.375263][ T24] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 220.377811][ T24] usb 11-1: can't read configurations, error -61 [ 220.380174][ T24] usb usb11-port1: unable to enumerate USB device [ 220.406620][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 220.524377][T18579] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 220.529843][T18579] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 220.533930][T18579] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 220.537979][T18579] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 220.564586][T18579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.572605][T18579] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.576779][ T8066] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.579260][ T8066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.584297][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.586957][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.593779][T18627] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 220.608609][T18627] 8021q: adding VLAN 0 to HW filter on device bond8 [ 220.684284][T18579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.693473][T18646] tipc: Enabling of bearer rejected, already enabled [ 220.780578][T18579] veth0_vlan: entered promiscuous mode [ 220.784625][T18579] veth1_vlan: entered promiscuous mode [ 220.803077][T18579] veth0_macvtap: entered promiscuous mode [ 220.805955][T18579] veth1_macvtap: entered promiscuous mode [ 220.818585][T18579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.823988][T18579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.831815][ T8056] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.835232][ T8056] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.839808][ T8056] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.845169][ T8056] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.870004][ T8053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.873799][ T8053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.882666][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.885224][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.998812][T18679] binder: 18676:18679 ioctl c0306201 0 returned -14 [ 221.001872][T18679] binder: 18676:18679 ioctl c0306201 200000000380 returned -22 [ 221.039593][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.043001][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.046003][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.050592][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.054179][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.067270][T18680] lo speed is unknown, defaulting to 1000 [ 221.145993][T18680] chnl_net:caif_netlink_parms(): no params data found [ 221.191589][T18680] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.194441][T18680] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.197652][T18680] bridge_slave_0: entered allmulticast mode [ 221.220583][T18680] bridge_slave_0: entered promiscuous mode [ 221.223380][T18680] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.225654][T18680] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.228203][T18680] bridge_slave_1: entered allmulticast mode [ 221.231143][T18680] bridge_slave_1: entered promiscuous mode [ 221.254644][T18680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.259188][T18680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.280406][T18680] team0: Port device team_slave_0 added [ 221.283725][T18680] team0: Port device team_slave_1 added [ 221.304471][T18680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.307221][T18680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.314959][T18680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.319528][T18680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.321653][T18680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.329434][T18680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.354621][T18680] hsr_slave_0: entered promiscuous mode [ 221.357889][T18680] hsr_slave_1: entered promiscuous mode [ 221.359793][T18680] debugfs: 'hsr0' already exists in 'hsr' [ 221.361538][T18680] Cannot create hsr debugfs directory [ 221.412021][T18680] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.490198][T18680] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.527259][ T63] Bluetooth: hci3: command tx timeout [ 221.527718][ T5967] Bluetooth: hci2: command tx timeout [ 221.558468][T18680] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.599514][T18680] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.663876][T18680] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.667944][T18680] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.672160][T18680] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.678092][T18680] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.708967][T18680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.716090][T18680] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.720599][ T8053] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.723181][ T8053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.728680][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.730699][ T8053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.823087][T18705] syz.7.3851: attempt to access beyond end of device [ 221.823087][T18705] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 221.827671][T18705] syz.7.3851: attempt to access beyond end of device [ 221.827671][T18705] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 221.831498][T18680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.831606][T18705] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 221.837128][T18705] syz.7.3851: attempt to access beyond end of device [ 221.837128][T18705] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 221.842856][T18705] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 221.847198][T18705] syz.7.3851: attempt to access beyond end of device [ 221.847198][T18705] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 221.850752][T18705] syz.7.3851: attempt to access beyond end of device [ 221.850752][T18705] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 221.854715][T18705] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 221.858179][T18705] syz.7.3851: attempt to access beyond end of device [ 221.858179][T18705] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 221.862352][T18705] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 221.865646][T18705] syz.7.3851: attempt to access beyond end of device [ 221.865646][T18705] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 221.869919][T18705] syz.7.3851: attempt to access beyond end of device [ 221.869919][T18705] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 221.872764][T18680] veth0_vlan: entered promiscuous mode [ 221.874697][T18705] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 221.878585][ T8053] dummy0: left allmulticast mode [ 221.880542][T18705] syz.7.3851: attempt to access beyond end of device [ 221.880542][T18705] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 221.881787][ T8053] bridge0: port 1(dummy0) entered disabled state [ 221.888179][T18705] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 221.893706][T18705] syz.7.3851: attempt to access beyond end of device [ 221.893706][T18705] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 221.898511][T18705] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 221.901987][T18705] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 221.905245][T18705] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 221.956359][ T8053] bond8 (unregistering): (slave geneve3): Releasing active interface [ 221.965708][ T8053] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 221.968724][ T8053] bond0 (unregistering): (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 221.989905][T18714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=18714 comm=syz.7.3851 [ 222.156645][ T53] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 222.201570][ T8053] bond0 (unregistering): (slave a): Releasing backup interface [ 222.205646][ T8053] bond0 (unregistering): Released all slaves [ 222.209859][ T8053] bond1 (unregistering): Released all slaves [ 222.213996][ T8053] bond2 (unregistering): Released all slaves [ 222.217772][ T8053] bond3 (unregistering): Released all slaves [ 222.221491][ T8053] bond4 (unregistering): Released all slaves [ 222.225517][ T8053] bond5 (unregistering): Released all slaves [ 222.229383][ T8053] bond6 (unregistering): Released all slaves [ 222.233204][ T8053] bond7 (unregistering): Released all slaves [ 222.239148][ T8053] bond8 (unregistering): Released all slaves [ 222.244107][ T8053] bond9 (unregistering): Released all slaves [ 222.256103][T18680] veth1_vlan: entered promiscuous mode [ 222.264533][ C3] net_ratelimit: 2 callbacks suppressed [ 222.264544][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.272465][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.282607][T18680] veth0_macvtap: entered promiscuous mode [ 222.285615][T18680] veth1_macvtap: entered promiscuous mode [ 222.292561][T18680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.297691][T18680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.301991][ T8059] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.304916][ T8059] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.310004][ T8059] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.312764][ T8059] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.317561][ T8053] tipc: Disabling bearer [ 222.319828][ T8053] tipc: Left network mode [ 222.336694][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 222.339126][ T8066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.341349][ T53] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 222.341369][ T53] usb 6-1: config 0 has no interface number 0 [ 222.341393][ T53] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 222.341413][ T53] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 222.341435][ T53] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 222.341455][ T53] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 222.341476][ T53] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 222.341501][ T53] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 222.341531][ T53] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 222.341549][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.342360][ T8066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.342677][ T53] usb 6-1: config 0 descriptor?? [ 222.346968][T18713] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 222.347809][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.351613][T18713] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 222.364990][ T8059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.368191][ T53] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 222.370828][ T8059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.408329][T18718] netlink: 'syz.6.3854': attribute type 25 has an invalid length. [ 222.408592][T18719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=18719 comm=syz.6.3854 [ 222.432152][T18723] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 222.456116][T18730] batadv_slave_1: entered promiscuous mode [ 222.459068][ T40] audit: type=1400 audit(222.060:1465): avc: denied { watch_mount } for pid=18727 comm="syz.3.3857" path="/1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 222.468700][T18727] batadv_slave_1: left promiscuous mode [ 222.496686][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 222.509837][T18733] binder: 18728:18733 ioctl c0306201 0 returned -14 [ 222.512284][T18733] binder: 18728:18733 ioctl c0306201 200000000380 returned -22 [ 222.573246][ T7982] usb 6-1: USB disconnect, device number 35 [ 222.576063][ T7982] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 222.664749][ T8053] hsr_slave_0: left promiscuous mode [ 222.675408][ T8053] veth1_macvtap: left promiscuous mode [ 222.677086][T18738] netlink: 'syz.7.3860': attribute type 4 has an invalid length. [ 222.677359][ T8053] veth0_macvtap: left promiscuous mode [ 222.682153][ T8053] veth1_vlan: left promiscuous mode [ 222.729265][T18739] netlink: 'syz.7.3860': attribute type 4 has an invalid length. [ 222.873010][ T40] audit: type=1400 audit(222.470:1466): avc: denied { ioctl } for pid=18748 comm="syz.3.3863" path="/6/file0/file0" dev="fuse" ino=64 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 223.137666][ T5967] Bluetooth: hci1: command tx timeout [ 223.348374][T18778] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 223.366646][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 223.471415][T18792] binder: 18790:18792 ioctl c0306201 200000000380 returned -22 [ 223.526633][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 223.541819][T18798] overlayfs: workdir and upperdir must be separate subtrees [ 223.567001][T18800] program syz.6.3879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.606867][ T5967] Bluetooth: hci3: command tx timeout [ 223.616694][ T5967] Bluetooth: hci2: command tx timeout [ 223.783535][T18824] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3886'. [ 223.787161][T18824] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3886'. [ 223.835566][T18838] binder: 18837:18838 unknown command 0 [ 223.837690][T18838] binder: 18837:18838 ioctl c0306201 200000000080 returned -22 [ 223.863331][T18841] fuse: Unknown parameter '' [ 223.907118][ T7977] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 223.924139][T18848] syzkaller0: entered promiscuous mode [ 223.926393][T18848] syzkaller0: entered allmulticast mode [ 223.988708][T18850] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 224.056758][ T7977] usb 11-1: Using ep0 maxpacket: 16 [ 224.060394][ T7977] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.065121][ T7977] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 224.069802][ T7977] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 224.074678][ T7977] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.080333][ T7977] usb 11-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 224.084085][ T7977] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.091103][ T7977] usb 11-1: config 0 descriptor?? [ 224.093665][T18813] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 224.100878][ T7977] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input31 [ 224.283845][T18854] openvswitch: netlink: IP tunnel dst address not specified [ 224.416744][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 224.423521][ T7974] usb 11-1: USB disconnect, device number 15 [ 224.425409][ C2] pxrc 11-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 224.874924][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3900'. [ 224.880711][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3900'. [ 224.954614][T18876] : renamed from lo (while UP) [ 224.957912][ T40] audit: type=1400 audit(224.560:1467): avc: denied { accept } for pid=18875 comm="syz.6.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 225.019145][ T40] audit: type=1400 audit(224.620:1468): avc: denied { accept } for pid=18877 comm="syz.6.3902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 225.056683][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 225.216728][ T5967] Bluetooth: hci1: command tx timeout [ 225.225237][T18887] binder: 18883:18887 ioctl c0306201 200000000380 returned -22 [ 225.455770][T18906] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3910'. [ 225.578581][T18920] [U] zͻi[27| [ 225.580026][T18920] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 225.585709][T18920] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 225.589024][T18920] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 225.603291][T18920] [U] 8)X)YvxRĻbmbN@ox;JD, [ 225.605425][T18920] [U] *Cn3v7KEXgt_3 [ 225.607128][T18920] [U] D/QazҬEHgE1$_ks=R@ [ 225.608901][T18920] [U] ϼcEv @ [ 225.610269][T18920] [U] a% [ 225.611586][T18920] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 225.619321][T18920] [U] f1p3 [ 225.620742][T18920] [U] N0[L;a_l&kMC [ 225.622410][T18920] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 225.632970][T18920] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc 3e 0d [ 228.998794][T19124] RSP: 0018:ffffc900061578f0 EFLAGS: 00010202 [ 229.001108][T19124] RAX: dffffc0000000000 RBX: ffff888048d7a460 RCX: 0000000000000000 [ 229.003844][T19124] RDX: 000000000000000b RSI: ffffffff8b890035 RDI: 0000000000000058 [ 229.007025][T19124] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff211c67c [ 229.010188][T19124] R10: ffffffff908e33e3 R11: 0000000000000001 R12: 0000000000000000 [ 229.013498][T19124] R13: 0000000000000001 R14: 1ffff92000c2af26 R15: ffffffff908e33a0 [ 229.016800][T19124] FS: 00007f4857f826c0(0000) GS:ffff8880d69bc000(0000) knlGS:0000000000000000 [ 229.020483][T19124] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.023256][T19124] CR2: 000000110c3ff1d3 CR3: 0000000032aec000 CR4: 0000000000352ef0 [ 229.026503][T19124] Call Trace: [ 229.027899][T19124] [ 229.029140][T19124] klist_remove+0x13f/0x2e0 [ 229.030897][T19124] ? __pfx_klist_remove+0x10/0x10 [ 229.032491][T19124] ? get_device_parent+0x1ed/0x4e0 [ 229.034100][T19124] device_move+0x12d/0x10d0 [ 229.035576][T19124] hci_conn_del_sysfs+0x81/0x180 [ 229.037194][T19124] hci_conn_del+0x566/0xdc0 [ 229.038654][T19124] hci_conn_hash_flush+0x186/0x260 [ 229.040292][T19124] hci_dev_close_sync+0x602/0x11d0 [ 229.041918][T19124] ? __pfx_bt_err+0x10/0x10 [ 229.043381][T19124] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 229.045124][T19124] ? do_raw_spin_lock+0x12c/0x2b0 [ 229.046719][T19124] hci_dev_do_close+0x2e/0x90 [ 229.048197][T19124] hci_rfkill_set_block+0x225/0x360 [ 229.049822][T19124] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 229.051635][T19124] rfkill_set_block+0x1fe/0x550 [ 229.053190][T19124] rfkill_fop_write+0x2c0/0x580 [ 229.054743][T19124] ? __pfx_rfkill_fop_write+0x10/0x10 [ 229.056431][T19124] ? bpf_lsm_kernfs_init_security+0x10/0x10 [ 229.058303][T19124] ? security_file_permission+0x71/0x210 [ 229.060066][T19124] ? rw_verify_area+0xcf/0x6c0 [ 229.061584][T19124] ? __pfx_rfkill_fop_write+0x10/0x10 [ 229.063308][T19124] vfs_write+0x29d/0x11d0 [ 229.064671][T19124] ? __pfx_vfs_write+0x10/0x10 [ 229.066173][T19124] ? __fget_files+0x204/0x3c0 [ 229.067677][T19124] ? rcu_is_watching+0x12/0xc0 [ 229.069181][T19124] ? lock_release+0x201/0x2f0 [ 229.070676][T19124] ? __fget_files+0x20e/0x3c0 [ 229.072192][T19124] ksys_write+0x1f8/0x250 [ 229.073549][T19124] ? __pfx_ksys_write+0x10/0x10 [ 229.075083][T19124] do_syscall_64+0xcd/0x4c0 [ 229.076625][T19124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.078542][T19124] RIP: 0033:0x7f485718ebe9 [ 229.079953][T19124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.085914][T19124] RSP: 002b:00007f4857f82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.088582][T19124] RAX: ffffffffffffffda RBX: 00007f48573b5fa0 RCX: 00007f485718ebe9 [ 229.091103][T19124] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 229.093634][T19124] RBP: 00007f4857211e19 R08: 0000000000000000 R09: 0000000000000000 [ 229.096160][T19124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.098654][T19124] R13: 00007f48573b6038 R14: 00007f48573b5fa0 R15: 00007ffc2247c138 [ 229.101130][T19124] [ 229.102133][T19124] Modules linked in: [ 229.103736][T19124] ---[ end trace 0000000000000000 ]--- [ 229.106800][T19124] RIP: 0010:klist_put+0x4d/0x1b0 [ 229.108743][T19124] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc 3e 0d [ 229.115311][T19124] RSP: 0018:ffffc900061578f0 EFLAGS: 00010202 [ 229.118414][T19124] RAX: dffffc0000000000 RBX: ffff888048d7a460 RCX: 0000000000000000 [ 229.121013][T19124] RDX: 000000000000000b RSI: ffffffff8b890035 RDI: 0000000000000058 [ 229.123711][T19124] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff211c67c [ 229.126477][T19124] R10: ffffffff908e33e3 R11: 0000000000000001 R12: 0000000000000000 [ 229.129812][T19124] R13: 0000000000000001 R14: 1ffff92000c2af26 R15: ffffffff908e33a0 [ 229.132537][T19124] FS: 00007f4857f826c0(0000) GS:ffff8880d66bc000(0000) knlGS:0000000000000000 [ 229.135416][T19124] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.138260][T19124] CR2: 0000555564feb808 CR3: 0000000032aec000 CR4: 0000000000352ef0 [ 229.140903][T19124] Kernel panic - not syncing: Fatal exception [ 229.143496][T19124] Kernel Offset: disabled [ 229.144874][T19124] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:35:14 Registers: info registers vcpu 0 CPU#0 RAX=00000000001b365c RBX=0000000000000000 RCX=ffffffff8b939c29 RDX=ffffed100d486656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555564feb808 CR3=000000004a3f5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=000000000000003f Opmask02=00000000fffdffbf Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fb22865fd0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fb22879c80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68089f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ffff000000ff 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 465b5c564045025b 414a594a021f011f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 151e151f024d5c5a 0219014b4c477056 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 78742f7365756575 712f3070656e622f 74656e2f3030323a 316963682f316963 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302d78742f736575 6575712f3070656e 622f74656e2f3030 323a316963682f31 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6963682f68746f6f 7465756c622f6c61 75747269762f7365 63697665642f7379 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68089f1b80 000055fe7d353593 0000000000000021 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fb228782b0 000055fb22885a20 000055fb228859a0 000055fb22885940 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fb226331e0 000055fb22633160 000055fb22633260 000055fb22633080 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fb2286d8b0 000055fb2286d830 000055fb2286d7b0 000055fb2286d750 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88802831c800 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88802831c802 RBP=dffffc0000000000 RSP=ffffc90003d8efc0 R8 =0000000000000001 R9 =ffff88806a53b294 R10=ffff88802831c803 R11=0000000000000000 R12=0000000000005c8a R13=0000000000000000 R14=ffff88806a53b280 R15=ffffed1005063900 RIP=ffffffff8b965b78 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3d493bd300 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561b74749f40 CR3=0000000033b6b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=b696b4309c4ee9fa 6ee4c87fd91e3807 b696b4309c4ee9fa 6ee4c87fd91e3807 b696b4309c4ee9fa 6ee4c87fd91e3807 b696b4309c4ee9fa 6ee4c87fd91e3807 ZMM18=a1f5d269a90c2df6 5e088dc7e98176e6 a1f5d269a90c2df6 5e088dc7e98176e6 a1f5d269a90c2df6 5e088dc7e98176e6 a1f5d269a90c2df6 5e088dc7e98176e6 ZMM19=3111000000000000 0000000000000004 3111000000000000 0000000000000003 3111000000000000 0000000000000002 3111000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003a60300020003 a40328020003a203 04020003a00304dd feeff60800039803 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0785f4d608000390 03020400038c0342 0400038803580800 0380030380040680 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0306800408a00300 08000890030fffff ffffffff04088003 0008000610002010 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000003000000 00000008ffffffaa 0000000003000000 00000008ffffff9a ZMM25=5e088dc75e088dc7 5e088dc75e088dc7 5e088dc75e088dc7 5e088dc75e088dc7 5e088dc75e088dc7 5e088dc75e088dc7 5e088dc75e088dc7 5e088dc75e088dc7 ZMM26=a90c2df6a90c2df6 a90c2df6a90c2df6 a90c2df6a90c2df6 a90c2df6a90c2df6 a90c2df6a90c2df6 a90c2df6a90c2df6 a90c2df6a90c2df6 a90c2df6a90c2df6 ZMM27=a1f5d269a1f5d269 a1f5d269a1f5d269 a1f5d269a1f5d269 a1f5d269a1f5d269 a1f5d269a1f5d269 a1f5d269a1f5d269 a1f5d269a1f5d269 a1f5d269a1f5d269 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3011000030110000 3011000030110000 3011000030110000 3011000030110000 3011000030110000 3011000030110000 3011000030110000 3011000030110000 info registers vcpu 2 CPU#2 RAX=ffffc9000013d110 RBX=0000000000000000 RCX=1ffff11005063886 RDX=0000000000000008 RSI=ffffc9000013d100 RDI=ffff88802831c430 RBP=ffff88802831c800 RSP=ffffc90000648e50 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000648ff8 R12=dffffc0000000000 R13=0000000000000001 R14=ffffed100506390a R15=ffff888105fb0000 RIP=ffffffff866d4bbf RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff8880d68bc000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffff0addc00 CR3=0000000052372000 CR4=00352ef0 DR0=0000000100000000 DR1=0000000000001000 DR2=0000000000000009 DR3=0000000000000800 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a57cf5020fe5bf5 a37a1b11c49ed394 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8cc6a76bb32d070a f776bbc70ddfff99 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 62fb3e21fa66ada2 2abb66377b0bc074 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d3186889610b65a8 a68d42eafab60fd7 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ad40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a01e008078c80080 008bcc6052040080 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000001000000 0100000077760080 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 008bcc3601000000 5e320080008bcc35 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000000008bcc80 008bcc6101000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45ca101a63f63865 9eaf371257aa6d78 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 db383e51a133b010 4c3d586752682a85 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f488ad874a8 00007f488ad874a0 00007f488ad87498 00007f488ad87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f488b8ed100 00007f488ad87460 00007f488ad80004 00080000000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f488ad874b8 00007f488ad874b0 00007f488ad874a8 00007f488ad874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002100 0100058102000c00 0001004003000680 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300180300000040 0800083310000000 0000080100000040 08000802ff00e000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200090000000d00 0100088001001400 0000880001000580 000c0000003a0001 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00058002000c0000 0300400300060000 0001004400000000 4007000604000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856437c5 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc900061572f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b10dfe0 R15=ffffffff85643760 RIP=ffffffff856437ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4857f826c0 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3ff1d3 CR3=0000000032aec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4b3f9460 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4b3f95e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4b3f95e6 00007ffe4b3f95ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f488ac12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f488ac12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f488ac12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f488ac12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f488ac12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f488ac12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000