last executing test programs: 3m30.304135868s ago: executing program 0 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x1000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@metacopy_off}, {@xino_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x2010000, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './bus'}}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e601bae74656e642c6163638173733d616e792c63616368653d66736361636865"]) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYRESDEC=r1, @ANYRES32=r1, @ANYRES8=r1], 0x98}}, 0x4048010) 3m30.218915068s ago: executing program 0 (id=248): r0 = socket$netlink(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00100000000000000000000000000000000000c4983ebe8596d3bd2e87db0f2348277d9e471886cd718e18fabf1790b64118d8f6da4bbdb12cc5a9f385a2081be34f986211d23863d3f4b6e1445c09fc5cecbc91c72dd95b67ab60add9749d3befa34834bef9bc6d6125aee2507328d16dc1930ebdcfe11eb6d260a5dc4ce7fafd189266041de0f962d27a911daa6d7ed3fea57c4ad5d67fcda0675bad138d6cf99b1ab878f179d0c3f8b63e677ecb017821cec2e7d6b8c99a671ce3c181a8c31d430d873aac990af42eb718151245ff625c832ee07b83dd705e8133", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="a428040000000000140035", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3m30.046386069s ago: executing program 0 (id=250): setuid(0xee00) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x3, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x3, 0x2}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0xfffffffffffffeef, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r7 = socket(0x22, 0x3, 0x0) bind$inet(r7, &(0x7f0000000340)={0x22, 0x4e20, @loopback}, 0x57) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 3m29.147541142s ago: executing program 0 (id=260): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_open_dev$I2C(&(0x7f0000001000), 0x33, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000010c0)={0x1, 0xf7, 0x2, &(0x7f0000001040)={0x0, "fa6f394d6eec98aaf370535ac95977c05edbebb84734f1da4145d7dbc01de97db4"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00') mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1100) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x241, 0x0, 0x0, 0x0, 0x40, 0x403, 0x6030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x10, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x3, 0x8a, {0x9, 0x21, 0x4, 0xa1, 0x1, {0x22, 0x8a5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x59, 0x69}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x8, 0x2, 0x9, 0x10, 0x9}, 0x127, &(0x7f0000000540)={0x5, 0xf, 0x127, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x80, 0x4, 0x8, 0xf, 0xb, [0xffc0c0, 0xc000, 0xc000, 0x0]}, @ptm_cap={0x3}, @generic={0x103, 0x10, 0xb, "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"}]}, 0x2, [{0xf3, &(0x7f0000000140)=@string={0xf3, 0x3, "a1aca9703ba62375f16c128568d216d836d79749dce82c7e7dc2abd4331f4090034aa3bb184da7eace443de7acb63df4178c89fe0f186ab10778d0e9f0b01717a718cdb6f8adcd69e2006246a853f3c5933a87f370a0f72c8390fa5b61271d243e7cd958701901bb8bbdd287d8639070c9c4907cacb8a690bb2e4e35bac7e298c21f13d9ba8270021885e471bb8de90d8c8b43b5846f457e9ba97aa7003f611912f79bfd2b0a0825a9b44ee5caf5bcf809bf5a93dce0c1e0c6776aec7121f9876b437a0ccd1a372d9cd5cf6280e219df3637569fa5e4016be7f62e7a97a876a5adadf53eebc65143ae3047412c63136f7d"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x427}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x20) move_mount(r2, &(0x7f0000000100)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x30) 3m26.097106983s ago: executing program 0 (id=297): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, 0x0, &(0x7f0000000400)=""/186}, 0x20) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x4, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r4, &(0x7f0000000340)="896102aecdfcc44f1a", 0x9, 0x2}]) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x3) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r3, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r3, 0x0, 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0x59a35420, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x3a}, {}, {}, {0x0, 0x35}, {0x1d, 0x3}, {0x0, 0x0, 0x6}, {}, {0x2, 0x6}, {}, {0x73, 0x6, 0x2}, {0x0, 0x0, 0xfe}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xfa}, {0x0, 0x0, 0xfb, '\x00', 0xfe}, {0x0, 0x0, 0x40}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5}, {0x0, 0x0, 0x10}]}}) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0x59a35420, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x3a}, {}, {}, {0x0, 0x35}, {0x1d, 0x3}, {0x0, 0x0, 0x6}, {}, {0x2, 0x6}, {}, {0x73, 0x6, 0x2}, {0x0, 0x0, 0xfe}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xfa}, {0x0, 0x0, 0xfb, '\x00', 0xfe}, {0x0, 0x0, 0x40}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5}, {0x0, 0x0, 0x10}]}}) syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x2dd2, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r3, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x8, r6, 0x0, 0x4, 0xebdb2, 0x1000, &(0x7f0000000c00)="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"}) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x8, r6, 0x0, 0x4, 0xebdb2, 0x1000, &(0x7f0000000c00)="8ac8b136536b7d54675bf9d077c9a0547c569d2f323274461d646148c9f18f398cca5c6d87aef1ff781d41830215e2bcc13ad4a4c3f79dc674d41a888c2d1404329c86c1849ae9c480c32d5a555815ef5bf80760155b9437f3686804c561be63b9cc5380f943602f86c44552e1687d4423d6e422ecffedc851d0c498bceecdb02ffa8fb43f3014ba02a528bed9aec08ddb3a947742eec19731e0a4c72bc836bf818e89c40b601fe8b346ae0c302ed561a0719a0efcd6d8ad7c2813378fc2555abf312d143afa864f2e88581844cc30cb37999fa2652362190aa7981d6cadef6b60dddf03a81447049b489e6b491eba81895aaea322460ace9ae8226528bdd2f69f3e22bd6e74acc69d428452ffc59cf0b6d68d67beaa5e80c0525414f56edbafd0e6326fa0e45a842d6698b9a23c800c04ce4267ea5595e897827c46fd02a8c34c07104854895d6a7b39d6708ea1d5691e8b03bdfcac9885637d2f69950dcb1fdfcae178084b50be164aa33fe147ba40fdce104486a548c0f3081e963ccee805d8730a7a87976927a80f6654387d1993b5a2df26ef3c31419043cde35b77d491cf90e2706726b66d33a14c31ad6d41338e403877409bcffd9b23f2330cb192d04b0a3d835abdc07678e6ddc31399673e915ce777c44334f8da69caf8d8f730ba3b4ef9de630948f5d43f18dbdc8009437b9b6266432d7f8dfa17fe8de3f57cd83e2bbe47efd630a034ffb9b7eba1de9d58c18c84d5e87d9ba9b212451f1d82fe1c2f4462b26cc968cbdb621ced8563cd36f67e9f728df127ad63bba5d3153078d5ed8f9dd96e5c95e638916621160575d94ea87f7945c3d60bb122152ceb885f31cfc257297a00ffe15d4da633356148757df913aa7c916d2377926d317180470a5a3c97f378a4c1de358c21ab1e8aa940ad18cd71245eddfcc297f3824d814b303c6363c1d801b205bd9d223c7066308ad7f1f8ccfc5eaad59ca512936bd1fa00e1c132baa1ca55c2e175d49c89f6b6a7302d2a83478512473c7e9ab2e1499639211026a7d9fd369e0328a4a799840bf5cfc53bcc24a17ad6780644a4123f8bd2045f6ec7631533d4a8232ebcb9561c49d93abb1ec884adc94737487940fc9ece85d5c67e5c37ac2301cb57124fe8b998bbd1a9861585d30f64f8cfcadcf0c4ab15f927b4ba928c6f4bce05c48d97b9d28390b2e4e33cf77e099eba23f40ca5b3fc0b17f4260c6019900422dac9dc3f36bf37800188fac151367143150ee5322fa8ed9af80501bfd4bc3134aab27d85154cc226ed88603c435b7b892354e2d6b051f56c57cf8fda17d333269557b69fd634fa6010595e652f3426332f089046fb6b4ff9431cbb75f479dc87594daccfc8102647d80361be5ee077b2a2848fcf29b1aab4c1ec6f2e21ad91b717cb75ff391848ff63d81a8e7a6be6831b7c2b549cd8402d628391d41b23aab4b2e546cdcb0a7ca0099661b156c7db2fe04f89a127875c9478de3ffc93a60b4be2e17f8dfab5fc9a0ab3551215edfaa44e430a2307929934b3cf0b5a13273fd44fd3206b600d7c3d5433488ca36ed9b2fa4066d6e591ca8088158471f637c0895c029164663f81e10071c1b5132cd5233f5dc8f86e7a22e9eccaf0c59cb4525fc879dc1b29ae486028e92daf228f61044ada2a5273a4ea9b94491e4774d5c19d9f28c9bc2559d06fb21aa69a8c3ae860121db7e86f988b23da11583fc27cda5968915105c4f47ffa76d48adeed87e70df8da94b62904a81ac07cc440f3ea0123d12d2dd07c427f1bd920ca6cf0b9a014049916a63b9d7c09d8658b1f4b188d23f482acb52b8dd00c29c02e6770c1353e2083df47af8d3d3741d4ec2392cc9b78b9d70531d154b1e0dbfef086381240bd2c2c78b8af0bdba47308eaf3153d91a13dd34efff3cdcd66585449e2d31a6ce4e78f5ef26fbf7b43a16a671c34c69c966b505dafaf1f4ce8480cc24db92e8039ca58a05fe93c06003d371de4b6df83e873281660b44024a8ff719dff2a94841c3cb83e873123d5fc1aba769cfbf0952691e294fdd60356ce7fd0409c50138fe591accd7db83171c495be7bbf2a905dc329ee5ceea7a6188dabd4d2aa7534c0ef684dc381aeb18f78ff78935e9a1ebc91bf755faa02ec2a95a220b8089b6f732577b303de2172aed6ea68fae23f24e0356bbb39ecda35fd8d6236caba53724bbc2b84c9a8217b861329e53523e04c498f8ccc53a757d5d5153aa3924a040a7e3efc49a62fe27b0973cd4b2d1233cac95889a22cb1d1f70b3f7d8e96655efcc0ad1d6927ebd734fb30eaea2865057ece1ec92e5c2afdec6085d9031cbee310f67de5f5f285370cb3c5c7870856f4c479621b49e69b15e6d710b4924a33d2b083d22b7d4b1ef24e75d7770bccb1276969d4f05d249e94ad612a3062471a0bd5a28f67f8b8798ea184dfe3034237d4109cece7231034bd3a12713656738feb00b49d21f1e7cb68c99004579c9a6e5fc89388684469ed2ff612b7612c27b6eefc22066ceac8d24fec88bedfc1672ddd5d0c134e416f2937f2e160f19003861c2884f25323a3a9856659d79eba768d372eccb44d7c8a8d9ca075fde8b4c322aac85a416921827dac00ef9592ffe38635062d506b2a1a22716297e29397b71dccd4decdf29f48674e4e01e3a408ade27dec20b42fca1e5278a74125f1185199273abceea2a9750bb73b23a159c626af8a7f88b054eb26c4d9e8ec8fc4b80e41683582a68f930295a6f18a4a189e855f706452c1a57a7d3fecc0b4ce2bc0ed9fcb944e50634e4f935e10f00395977f7be1a86b0ee0c4a86799db8acdeba651fb66554a66448783fa71c33b50a8533b2a6e6fe828c537529c0c8c728f76f59cc403e3e5d041a6cc9a1004f22d72d8c923a68322b4e800e79fd6a6bb078f1f5db7416d429dbf1cbe285aa8b6761f6d502d1779ecaee1b0114a4f9df405ab7065ebc1f71e340111fe383f2b1875757c125e4167591ab7c9cb8569d69592b54b077ff5a82ba4036f093b942039824b8e7af742ac0a4a882b8c239d4cdb631a6fc20155c9a94b39f9733fcdffbb6a0a263b32e670ca48baf551cde18c505d44ec112ab909be85fafa1a0940e25cb9daf1ca420b318d0b48bb45d38cb13007d8af04e45c3112702acc655473e7f09fb85425f21d99b2177ec0794d7fbe95ca06b155638bd7255103d249df734ca05155f4fc46c0e0b766af2a2398e148d4efe2f3860edaf24114a6115645ea8264e99b42a6c42e6cb8d52d65456047722e2390b9f2d4f8491389aca17a76405b859f0bd15732c8dd5929c0d0507c636d19edcd92fd3c2ecc160da0c87c7a14dfa24ba146dfc4b3558087796afe2d2e51e37aa19d32015a646dc504809c1a72f19574531c79e5dc01bb79e67398412e75812b134e14961fc79f5e6d2bd4118af723791e90fcfa30217df7c8c3860fe043fca31ecd49e6fa40b133693d72fdcdd121e25c27734630e75929b0141c8c6bd7c5ef51920f9716eaff80aa912394218e95d410869282d17ce6423b481fdefcb40ce1b80aee4c2dda8755c1f4cc3088a25fef912d60e0e21488793d2a9623c860dc64096336647b428647f9b1bfca896b93ec8e6852f7732db3e78e235042059e5090a988e171587cbd1c247df9a3703875c3ba0f35d37c6458f34e54081351ca2871465dcdbe8713439eb143cac23f9ebec24009bc6bab17f4dc45f2648907866f18413d0ae2a89925c22e45050f31217f55536bc0d8857d1856c6ec1f73c02ef92594b1d4ba521f9f7b95a49cf3e9e5eca098637c2c100c75800e7f7624af7efccfe9837cbef24e567f08c6fcc63bf9b8721f312c8b4d535a68fd35c3dcd46263d62e64a668ee5c8c5c99b950b0aca459107dcc895143213488ac36b4c1e0fcf1af44d387e74b7ac8203bae88edddb71f1708f43cd4bcf722424a12c1adbcd900a3dba2581ae9a09982745833d606241ab755d4a54196094dcf023f854c7cb9736b9c924daf29859eddb3f478c42af63e09e5cf7bff0b0a943bdc9dca796106037c741072c0aba2b65bc598347c60f21c7d6542a38d9e3f79f3c8d4dcab0b138ea0b5c718975ded2b9aed9b374e0b6b6f0a5be701384e606e522773a64c825f440f0f4540b9229806c5f740635fce46ce05f7ece39d97ac49604be620ff6103d2ba3395a0aaf9271915498bf98a0451c99d15c848301372d5d0ea07f32a181f745a10523386efbb195fe9995035cd69d7b7f3a749836aaad572d032fa7e262ecf6d5e9262a918e37fa2b480483eb80476104040cdb809c97191e3c2be6830da5b3ee552da36156e2b8c80bd0f8e7edebc5dcb4ee8890143ca4a9791e49faecb136c49656bbb2c9689f86025d4a6da118e83f12e141f2c10c7d926d3d2747937d8f613d31ca9d99360552fa9ce531cc1f594a9d5f155d5331cf3865cbbfcdc3c5625e09ba71ecf258673a4889e65179e001c0908bf8bc511d4babd3ede3ded5cfb19933d5959b50b7c93cf21171785f723ff1e4419bd1d7a8b541a0054b52af6b71462c4aa6bb0da4afaa415a8609e1fc613c4f0014cc2ed035e08ae140111746a0adb20abf0c938350316ef17254c9774c7c5d02ab8030812df4c080c1164c78f6b68c8619ba209256b166c26e46413ce68d1dbbf73b58d638d212aa5f7bcb4d36094bcfebf065f497a58df88f962e94d7b7011de288a70d729c2439ae3f0e2b5eac172b7d7e58da06403e842914408dc9138d3b6afdd601e352f15e7b4a3ccc1d25679156099f5300287afc0af2c984ee1ea50a8d9a1fcd5aa67f1568a2c1c65d13601efdaf66fb6904bba33c120f7f4acfa85dd3e281df489b22ad51b1f8a0a9cae57b8e91063ef88ae350309342b65e0e90e3c6464494759319a9a791d887397109005c55fd3d651ec4f7cb4a746731c56065248aa29ce12cf80c1b4742cc07cdadc885f39ed88f1fa3ffc1f6c817ec5f2dc58f950378b5d77bc3c998491a6830d06894d500ace0920b068da5732cc86574c65f947eb697051376c87e836cd02fe7185b89acea3ac181bb5a9498652e929dcec1232dc3033814c0aa018d6435dcda398cde3a3d0c0c21279674dc799a8910af62181baff7096fe6768bf13753b249b7dcf925c02d2b677549fb91add011324321e2a0b8614c44618f18a87d73334c486bd47cd885668777fd569e87a31201e8af11dc0b94e213059e28d34633d12654109d4b11555af87d1b02cae0efccbc376e4f9d83c165b80aa7c400d2179b405b815f7c59e7702ffedb63a131c1d6d01e6daf97bc75caea84b59f1fe6c53b8fe24226d319c729b6ee6d8527448ca859a684d710da84630d97dea7b689b12034c360e05cdcb5a7e8ed3c191a790c4c826c3a7c7dc5fe90a746592d10e462e4b02b715d492e60d86fa980aa6af4992f2ffbd47a59e2dab5a2d1cc71db3912d09d4ccb54b67e04623987157388d9d092df85b9cd5f5831dc9cf23de2edd330171f3a6982aa72616ddbce3cb7c8e7c4616e30e325df5ea24fd5b6f10538c7a71be12e3387e7385def34d407adad703474512ed112e1ef64b99025a70b81ed33ba3d7f56f7fbd25bd3763c19dea69c69b11c8141e69f2e7446a963c747dee816575e12410d929dac4c51b30d6158fef0cc95cde5911cd6f066859891ad3a0e4531e5ddcdc49af0c1216e1696c51e5ab66d9953c4d3f62ba4f9c718906635c11f7213d8378b16096567c33e2b216e14884213fb09b574c26fcf41807f14a043fa055cdeb227b9e2d4c3886290c"}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r6, 0x0, r9}) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r6, 0x0, r9}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mkdir(&(0x7f0000000280)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) 3m25.85666004s ago: executing program 0 (id=301): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 3m25.77389788s ago: executing program 32 (id=301): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 3m23.186446289s ago: executing program 2 (id=322): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) syz_emit_ethernet(0xb0, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c200000000000000000086dd609a83c9007a2f00fe880000000000000000000000000001fe8000000000000000000000000000aa042088be00000080000600000800000086dd2126"], 0x0) write$char_usb(r0, &(0x7f00000008c0)='-', 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x34, r3, 0x1, 0x0, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}) syz_io_uring_submit(0x0, r6, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x1, 0x0, r0, &(0x7f00000003c0), &(0x7f00000002c0)='./file0\x00', 0x80, 0x4000, 0x1, {0x0, r9}}) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async) syz_emit_ethernet(0xb0, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c200000000000000000086dd609a83c9007a2f00fe880000000000000000000000000001fe8000000000000000000000000000aa042088be00000080000600000800000086dd2126"], 0x0) (async) write$char_usb(r0, &(0x7f00000008c0)='-', 0x1) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x58) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x34, r3, 0x1, 0x0, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240), &(0x7f0000000340)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) (async) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340), 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}) (async) syz_io_uring_submit(0x0, r6, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x1, 0x0, r0, &(0x7f00000003c0), &(0x7f00000002c0)='./file0\x00', 0x80, 0x4000, 0x1, {0x0, r9}}) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) (async) 3m21.797293149s ago: executing program 2 (id=326): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}]}, 0x41}}, 0x2) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 3m21.667440083s ago: executing program 2 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x40408c0}, 0x20008044) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r5, @ANYRES64=r3, @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0xffffffffffffff31, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="25003300d0000000080211000001080211000000505050505050d00009"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) 3m21.534921567s ago: executing program 2 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3m21.474257391s ago: executing program 2 (id=332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x5, 0x1, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000001c0)={0x1, r3, 0xfffffffb, 0xfff, 0x4, 0x0, 0x101}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) 3m20.336470132s ago: executing program 2 (id=345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) (async) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) (async) ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x3, 0x0, 0x98, &(0x7f0000000600)={0x400, 0x1000, 0xd}}) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC]) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f00000004c0)="673e660f38dcae2f643cc22e64f30f092ef30f09660f3840bd0000660fd9192e3e6726f30f5d070f350f78eed9fb67640fc77f00", 0x34}], 0x1, 0x40, &(0x7f0000000540), 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x2, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) (async) setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000440)=0x101, 0x4) (async, rerun: 64) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) getsockopt$sock_int(r9, 0x1, 0xa, 0x0, &(0x7f0000000100)) (async) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r11 = socket$kcm(0x11, 0x200000000000002, 0x300) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000000)=r12, 0x4) (async, rerun: 64) r13 = socket$kcm(0x11, 0x3, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$kcm(r13, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) (async, rerun: 32) fstatfs(r10, &(0x7f0000000700)=""/4096) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3m20.233940278s ago: executing program 33 (id=345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) (async) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) (async) ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x3, 0x0, 0x98, &(0x7f0000000600)={0x400, 0x1000, 0xd}}) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC]) r5 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f00000004c0)="673e660f38dcae2f643cc22e64f30f092ef30f09660f3840bd0000660fd9192e3e6726f30f5d070f350f78eed9fb67640fc77f00", 0x34}], 0x1, 0x40, &(0x7f0000000540), 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x2, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) (async) setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000440)=0x101, 0x4) (async, rerun: 64) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) getsockopt$sock_int(r9, 0x1, 0xa, 0x0, &(0x7f0000000100)) (async) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r11 = socket$kcm(0x11, 0x200000000000002, 0x300) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000000)=r12, 0x4) (async, rerun: 64) r13 = socket$kcm(0x11, 0x3, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$kcm(r13, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) (async, rerun: 32) fstatfs(r10, &(0x7f0000000700)=""/4096) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m56.054971492s ago: executing program 3 (id=812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20008020) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c010000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c0001800b0001006e756d67656e00001c000280080002400000000008000140000000000800034000000001d00004802c0001800a00010071756f74610000001c0002800c00044000000000000000020c0001"], 0x154}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f0000003240)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000001c0)=""/50, 0x32}, 0x4e27}, {{&(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000680)=""/83, 0x53}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/123, 0x7b}], 0x7, &(0x7f0000003380)=""/188, 0xbc}, 0x3}, {{&(0x7f00000009c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001000)=""/206, 0xce}, {&(0x7f0000000b80)=""/253, 0xfd}, {&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f0000000580)=""/55, 0x37}], 0x4, &(0x7f0000000900)=""/129, 0x81}, 0x101}, {{&(0x7f0000000d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000dc0)=""/21, 0x15}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x2}, 0x100}, {{&(0x7f0000001e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001ec0)=""/56, 0x38}, {&(0x7f0000000f00)=""/236, 0xec}, {&(0x7f0000004440)=""/4109, 0x100d}, {&(0x7f0000003000)=""/158, 0x9e}, {&(0x7f00000030c0)=""/133, 0x85}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/164, 0xa4}, {&(0x7f0000000e00)=""/232, 0xe8}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000001100)=""/220, 0xdc}, {&(0x7f0000000c80)=""/54, 0x36}], 0xb, &(0x7f0000003200)=""/63, 0x3f}, 0x2}], 0x5, 0x1, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r3, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x20000840) 1m34.603084611s ago: executing program 3 (id=812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20008020) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c010000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c0001800b0001006e756d67656e00001c000280080002400000000008000140000000000800034000000001d00004802c0001800a00010071756f74610000001c0002800c00044000000000000000020c0001"], 0x154}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f0000003240)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000001c0)=""/50, 0x32}, 0x4e27}, {{&(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000680)=""/83, 0x53}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/123, 0x7b}], 0x7, &(0x7f0000003380)=""/188, 0xbc}, 0x3}, {{&(0x7f00000009c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001000)=""/206, 0xce}, {&(0x7f0000000b80)=""/253, 0xfd}, {&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f0000000580)=""/55, 0x37}], 0x4, &(0x7f0000000900)=""/129, 0x81}, 0x101}, {{&(0x7f0000000d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000dc0)=""/21, 0x15}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x2}, 0x100}, {{&(0x7f0000001e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001ec0)=""/56, 0x38}, {&(0x7f0000000f00)=""/236, 0xec}, {&(0x7f0000004440)=""/4109, 0x100d}, {&(0x7f0000003000)=""/158, 0x9e}, {&(0x7f00000030c0)=""/133, 0x85}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/164, 0xa4}, {&(0x7f0000000e00)=""/232, 0xe8}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000001100)=""/220, 0xdc}, {&(0x7f0000000c80)=""/54, 0x36}], 0xb, &(0x7f0000003200)=""/63, 0x3f}, 0x2}], 0x5, 0x1, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r3, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x20000840) 1m16.837304687s ago: executing program 3 (id=812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20008020) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c010000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c0001800b0001006e756d67656e00001c000280080002400000000008000140000000000800034000000001d00004802c0001800a00010071756f74610000001c0002800c00044000000000000000020c0001"], 0x154}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f0000003240)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000001c0)=""/50, 0x32}, 0x4e27}, {{&(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000680)=""/83, 0x53}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/123, 0x7b}], 0x7, &(0x7f0000003380)=""/188, 0xbc}, 0x3}, {{&(0x7f00000009c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001000)=""/206, 0xce}, {&(0x7f0000000b80)=""/253, 0xfd}, {&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f0000000580)=""/55, 0x37}], 0x4, &(0x7f0000000900)=""/129, 0x81}, 0x101}, {{&(0x7f0000000d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000dc0)=""/21, 0x15}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x2}, 0x100}, {{&(0x7f0000001e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001ec0)=""/56, 0x38}, {&(0x7f0000000f00)=""/236, 0xec}, {&(0x7f0000004440)=""/4109, 0x100d}, {&(0x7f0000003000)=""/158, 0x9e}, {&(0x7f00000030c0)=""/133, 0x85}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/164, 0xa4}, {&(0x7f0000000e00)=""/232, 0xe8}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000001100)=""/220, 0xdc}, {&(0x7f0000000c80)=""/54, 0x36}], 0xb, &(0x7f0000003200)=""/63, 0x3f}, 0x2}], 0x5, 0x1, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r3, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x20000840) 55.87538038s ago: executing program 3 (id=812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20008020) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c010000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c0001800b0001006e756d67656e00001c000280080002400000000008000140000000000800034000000001d00004802c0001800a00010071756f74610000001c0002800c00044000000000000000020c0001"], 0x154}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f0000003240)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000001c0)=""/50, 0x32}, 0x4e27}, {{&(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000680)=""/83, 0x53}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/123, 0x7b}], 0x7, &(0x7f0000003380)=""/188, 0xbc}, 0x3}, {{&(0x7f00000009c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001000)=""/206, 0xce}, {&(0x7f0000000b80)=""/253, 0xfd}, {&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f0000000580)=""/55, 0x37}], 0x4, &(0x7f0000000900)=""/129, 0x81}, 0x101}, {{&(0x7f0000000d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000dc0)=""/21, 0x15}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x2}, 0x100}, {{&(0x7f0000001e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001ec0)=""/56, 0x38}, {&(0x7f0000000f00)=""/236, 0xec}, {&(0x7f0000004440)=""/4109, 0x100d}, {&(0x7f0000003000)=""/158, 0x9e}, {&(0x7f00000030c0)=""/133, 0x85}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/164, 0xa4}, {&(0x7f0000000e00)=""/232, 0xe8}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000001100)=""/220, 0xdc}, {&(0x7f0000000c80)=""/54, 0x36}], 0xb, &(0x7f0000003200)=""/63, 0x3f}, 0x2}], 0x5, 0x1, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r3, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x20000840) 33.361673955s ago: executing program 3 (id=812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20008020) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c010000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c0001800b0001006e756d67656e00001c000280080002400000000008000140000000000800034000000001d00004802c0001800a00010071756f74610000001c0002800c00044000000000000000020c0001"], 0x154}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f0000003240)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000001c0)=""/50, 0x32}, 0x4e27}, {{&(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000680)=""/83, 0x53}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/123, 0x7b}], 0x7, &(0x7f0000003380)=""/188, 0xbc}, 0x3}, {{&(0x7f00000009c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001000)=""/206, 0xce}, {&(0x7f0000000b80)=""/253, 0xfd}, {&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f0000000580)=""/55, 0x37}], 0x4, &(0x7f0000000900)=""/129, 0x81}, 0x101}, {{&(0x7f0000000d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000dc0)=""/21, 0x15}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x2}, 0x100}, {{&(0x7f0000001e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001ec0)=""/56, 0x38}, {&(0x7f0000000f00)=""/236, 0xec}, {&(0x7f0000004440)=""/4109, 0x100d}, {&(0x7f0000003000)=""/158, 0x9e}, {&(0x7f00000030c0)=""/133, 0x85}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/164, 0xa4}, {&(0x7f0000000e00)=""/232, 0xe8}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000001100)=""/220, 0xdc}, {&(0x7f0000000c80)=""/54, 0x36}], 0xb, &(0x7f0000003200)=""/63, 0x3f}, 0x2}], 0x5, 0x1, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r3, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x20000840) 13.601164765s ago: executing program 3 (id=812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20008020) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c010000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c0001800b0001006e756d67656e00001c000280080002400000000008000140000000000800034000000001d00004802c0001800a00010071756f74610000001c0002800c00044000000000000000020c0001"], 0x154}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f0000003240)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000001c0)=""/50, 0x32}, 0x4e27}, {{&(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000200)=""/4, 0x4}, {&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000600)=""/86, 0x56}, {&(0x7f0000000680)=""/83, 0x53}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/123, 0x7b}], 0x7, &(0x7f0000003380)=""/188, 0xbc}, 0x3}, {{&(0x7f00000009c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000001000)=""/206, 0xce}, {&(0x7f0000000b80)=""/253, 0xfd}, {&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f0000000580)=""/55, 0x37}], 0x4, &(0x7f0000000900)=""/129, 0x81}, 0x101}, {{&(0x7f0000000d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000dc0)=""/21, 0x15}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x2}, 0x100}, {{&(0x7f0000001e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001ec0)=""/56, 0x38}, {&(0x7f0000000f00)=""/236, 0xec}, {&(0x7f0000004440)=""/4109, 0x100d}, {&(0x7f0000003000)=""/158, 0x9e}, {&(0x7f00000030c0)=""/133, 0x85}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/164, 0xa4}, {&(0x7f0000000e00)=""/232, 0xe8}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000001100)=""/220, 0xdc}, {&(0x7f0000000c80)=""/54, 0x36}], 0xb, &(0x7f0000003200)=""/63, 0x3f}, 0x2}], 0x5, 0x1, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r3, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x20000840) 8.839701566s ago: executing program 4 (id=1829): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 8.714899129s ago: executing program 4 (id=1831): r0 = syz_usb_connect(0x3, 0x36, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000640)={0xffffffffffffffff, 0x10, 0x40, 0x40}) 8.714714731s ago: executing program 5 (id=1832): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x2aa2c2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x10}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffffffffffff}) read(r2, &(0x7f0000000140)=""/234, 0xea) 8.59538356s ago: executing program 5 (id=1833): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'caif0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x100, 0x24010}}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r8, 0x1}, 0x14}}, 0x10) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r12, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01000000000000000000010000002800018014000400000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffd}]}]}, 0x2c}}, 0x0) r14 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0) ioctl$I2C_SMBUS(r14, 0x720, &(0x7f0000000b40)={0x5, 0x0, 0x1, 0x0}) r15 = socket(0x2a, 0x2, 0x0) getsockname$packet(r15, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r16, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x100}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@bridge_delneigh={0x0, 0x1d, 0x10, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, r16, 0x40, 0x1b0, 0x4}, [@NDA_FDB_EXT_ATTRS={0x0, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH]}, @NDA_SRC_VNI={0x0, 0xb, 0x7}]}, 0x68}}, 0x80) 7.905125922s ago: executing program 4 (id=1837): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0xfa8, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') (async) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r8, 0xfffffffffffffffe, 0x1) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) (async) ioctl$int_in(r9, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f00000004c0)) (async) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f00000004c0)) dup(r10) (async) r11 = dup(r10) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000000)={0x1, r11}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async) r13 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r13, r12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r12, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r11, &(0x7f0000000440)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xd, 0x42, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@exit, @map_fd={0x18, 0x8, 0x1, 0x0, r11}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) 7.626536141s ago: executing program 5 (id=1838): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) umount2(&(0x7f0000000040)='.\x00', 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2400) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000003, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0x0, 0xfff1}, {0xfff3}}}, 0x24}}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="cc000000190000012dbd7000fcdbdf250220800dff01ff020000000095000880c51d0b5d413d5ed1d7f9bd0517d6d21ce2650eedc0653c9a210974041e22d101263dae780fb0150e5914cd4b85e8640a36d0a3da0a94f71901362c8f6c3538ae9cfeee1d1c621d6fa4beecce21774ced4a3546ba61714bc7be71f87557169cf0d81ae34e2c5796a801ae457608a4c9efe0bc65369cde85aa4f96c74eba6f27589bafe92593652ac9a3000d532dc0063d0000000008000400", @ANYRES32=r4, @ANYBLOB="05001b001100000008001900", @ANYRES32=r2, @ANYBLOB="c94eeda3f3098749eb5ae23df504c33b101f6331acb11cee1693d611421a27c5dd44bfb79f5a58e5ef95c8b2a6efc551dacc58ce39518d73a2d950c3f2fbab9d2285bbe51a198c1a9231a62f93b3a3f956e8f0f88d582870cbec5a9e3ee68fe02abad350dc838f1b02639d2ae64a8fc22d4e0a19b959bc3a89b731d228ba6e1a59b16d2d530e6858c54e75f30b85031b7367e290dc7ab5c662040f82d625dd93dd72dd0f2d79109c"], 0xcc}, 0x1, 0x0, 0x0, 0xa351414cff36c6c5}, 0x24000805) lstat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x2400) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000003, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0x0, 0xfff1}, {0xfff3}}}, 0x24}}, 0x40) (async) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="cc000000190000012dbd7000fcdbdf250220800dff01ff020000000095000880c51d0b5d413d5ed1d7f9bd0517d6d21ce2650eedc0653c9a210974041e22d101263dae780fb0150e5914cd4b85e8640a36d0a3da0a94f71901362c8f6c3538ae9cfeee1d1c621d6fa4beecce21774ced4a3546ba61714bc7be71f87557169cf0d81ae34e2c5796a801ae457608a4c9efe0bc65369cde85aa4f96c74eba6f27589bafe92593652ac9a3000d532dc0063d0000000008000400", @ANYRES32=r4, @ANYBLOB="05001b001100000008001900", @ANYRES32=r2, @ANYBLOB="c94eeda3f3098749eb5ae23df504c33b101f6331acb11cee1693d611421a27c5dd44bfb79f5a58e5ef95c8b2a6efc551dacc58ce39518d73a2d950c3f2fbab9d2285bbe51a198c1a9231a62f93b3a3f956e8f0f88d582870cbec5a9e3ee68fe02abad350dc838f1b02639d2ae64a8fc22d4e0a19b959bc3a89b731d228ba6e1a59b16d2d530e6858c54e75f30b85031b7367e290dc7ab5c662040f82d625dd93dd72dd0f2d79109c"], 0xcc}, 0x1, 0x0, 0x0, 0xa351414cff36c6c5}, 0x24000805) (async) lstat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)) (async) 7.62574025s ago: executing program 4 (id=1839): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000005000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0) 7.554887103s ago: executing program 5 (id=1840): r0 = socket(0x400000000010, 0xa, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="100000010093c35e86860e086b994445cb8a58022681cbf74722f9b1bfc67f7aac8b14ae82e826bce5ed5687a97a15c3bb36a48ff5", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x20000800) (async) bind$nfc_llcp(r0, &(0x7f0000000300)={0x27, r3, 0xffffffffffffffff, 0x3, 0x10, 0x8, "839fbf50a8c5a0dcdfc48a8b580ed04fcea8f32e8f32359d0b5783ea52568050e351ff4a7ddc1be0607f6b6867de9847a866c934334931bbc286c045bdedd8", 0x5}, 0x60) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000abc769a97c6c285a00000000810900b99a4449f0bda2ad3f0248b50e70621d9fc0c32e603ed41fd8d9391f92a2146dff62e749f311dc0f9b6fbf9d78e266239382c2640adc646ff7f319a2dcd7c9b86f019e58def51483a485c3b1f0cb9eca2d0523b909d2b568e3aca8293f0f14276a3d0570039cadb8c55dccc33b1df35816deed69acb58d37a4d7930c64434f194b0fc29ffaadfe2c1f1562815acaf076dfbb40c823e97e55bd0f4fbbd6dbfaab8bb596445aa13360da27"], 0x14}}, 0xc000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'team0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0xa, 0x81, 0x0, 0x9, 0x1, 0x5, 0x80, 0x41, 0x4, [0x8, 0x4, 0xe18, 0x972d, 0x3, 0x7, 0x6, 0x3]}}) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async, rerun: 32) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x400) (async, rerun: 32) syz_emit_ethernet(0xbe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x5, 0xf, 0x5, 0xd, 0x1}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x20, 0xfffffffc], [0x8004, 0x0, 0xc7, 0x0, 0x0, 0x4, 0x0, 0x8000], [0x6, 0xffffffff, 0x40, 0x6, 0x3, 0x8, 0x80000000]], '\x00', [{0xffffffff, 0xffffffff}, {}, {0x0, 0x4000}, {0x0, 0x1, 0x0, 0x1}, {0x10000, 0x6}, {0x9}, {0x1, 0xfffffffd}, {0x200000, 0x7}, {}, {0x7}, {0x2, 0x1000}, {0x2}], '\x00', 0xfffffffd}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRES64=r7, @ANYBLOB="832f5b0df2e2066899c832b37b9336e580c886b2722e922f9489f62b6efb88546be0fab443e2cf62ef9170b430e72ae8e30f69f3d4627cd97289b7782332d02873e3a46eee75662f41023f0f65cf0cba2dfaf60992b224bb209fc941067a800f7fb4d6f5dad080d0c7c1b139674608e8db7109584d74fb859fb0", @ANYRESDEC=r6], 0x30}, 0x1, 0x0, 0x0, 0x48010}, 0x0) (async) r9 = io_uring_setup(0x3455, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x802, 0x2da}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async, rerun: 32) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64) connect$bt_l2cap(r11, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async, rerun: 32) write$binfmt_script(r11, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) read$FUSE(r10, &(0x7f0000006140)={0x2020}, 0x2020) 7.505113822s ago: executing program 4 (id=1841): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0xfffc, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x52, &(0x7f00000005c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0x1c, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0xb, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x0, 0x7, 0x57}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x7, 0x8, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) close(0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0xc, &(0x7f0000000400)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x9, 0x0, 0x7, 0x32}, @initr0={0x18, 0x0, 0x0, 0x0, 0x70c8, 0x0, 0x0, 0x0, 0xc}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x4b}], &(0x7f0000000340)='GPL\x00', 0xd0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000500)=[{0x5, 0x1, 0x7, 0x8}]}, 0x94) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_open_dev$sg(0x0, 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SG_SET_COMMAND_Q(r9, 0x2271, &(0x7f0000000040)=0x1) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000000200)={0x2020}, 0x2020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf0f}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x0, 0x3, 0x3, 0xa, 0xffffffffffffffe0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0xf, 0xd1, &(0x7f0000000180)=""/209, 0x40f00, 0x56, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0x8, 0x0, 0x4}, 0x10, 0x1f31b, r6, 0x7, &(0x7f0000000700)=[r7, r9, r10, 0xffffffffffffffff], &(0x7f0000000740)=[{0x3, 0x3, 0x0, 0x8}, {0x5, 0x3, 0xf, 0x3}, {0x4, 0x2, 0x1, 0x9}, {0x4, 0x2, 0xe, 0xa}, {0x5, 0x4, 0x0, 0x2}, {0x4, 0x3, 0x4, 0x6}, {0x5, 0x4, 0x0, 0x5}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 7.425965267s ago: executing program 5 (id=1843): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006", @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x607956fc139b840b}, 0x84) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006", @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x607956fc139b840b}, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xc, 0xffbf}, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xc, 0xffbf}, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0xff}, "ffb00afe4e70"}}}}}}}, 0x0) sendto$l2tp(r0, &(0x7f0000000200)="83f786e133b83b22a2095c6381ef0ced702b881a250408574161a3b2fb5ad920474c2e43b42580a2a4da88ba692fbcbe5371a2", 0x33, 0x0, &(0x7f0000000240)={0x2, 0x0, @private=0xa010100, 0x3}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x989, 0x1, 0x2, 0x9, 0x7, 0x3, 0x3, 0x9, 0x7, 0x100000000, 0x1ff, 0xf, 0x0, 0x8000, 0xfffffffffffeffff, 0xd2b], 0xd000, 0x40000}) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r2, 0x0, 0x0, 0x40002000, 0x0, 0x0) 4.012530187s ago: executing program 1 (id=1849): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 3.897369204s ago: executing program 1 (id=1850): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x4000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/4096) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (rerun: 32) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000001040)=0x3) (async, rerun: 32) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000001080)={0x1, 0x0, [{0x80000008, 0x4, 0x9, 0x800, 0x5da}]}) (async, rerun: 32) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000010c0)={[0x0, 0x1, 0x0, 0x7ff, 0x90d, 0x0, 0x6, 0x5, 0x3, 0xbeec, 0x8001, 0x3ff, 0x2, 0x8000000000000001, 0x0, 0x38578c29], 0x4, 0x4181}) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000001180), 0x1, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) r3 = dup(r2) gettid() (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f00000011c0)={0xbe, 0x0, 0x1}) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000012c0)=[@text64={0x40, &(0x7f0000001240)="66baf80cb81f763b83ef66bafc0cb061ee0fc738b9940b0000b800000000ba008000000f30b92a1001c00f3266bad004b001ee0f0119b8010000000f01c1c421ab5f66fb362e420f01f80f32", 0x4c}], 0x1, 0x5, &(0x7f0000001300)=[@vmwrite={0x8, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2, 0x0, 0x4}], 0x1) (async) ioctl$KVM_SET_TSC_KHZ(r5, 0xaea2, 0x6) (async) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000001340)={0xce, 0x0, r3}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000013c0)={0x4, 0x0, [{0xb79, 0x0, 0x9}, {0xaf1, 0x0, 0x7}, {0x8f1, 0x0, 0x6}, {0x36f, 0x0, 0x6}]}) (async) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000001440)={0x9, 0xca, 0xfff}) (async) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000001480)=@x86={0x40, 0x5, 0x1, 0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x8, 0x6, 0xf7, 0x0, 0x9, 0x5, 0x4, 0x4, 0x5d, 0x9, '\x00', 0x6, 0x9}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000014c0)) (async) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000001500)=""/60) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000001540)={0x0, 0x6a, "df7d9e7d4567165a4e3453861c70db9045960317b8cd96700eb5cde5561e4649d7227791d0ec7fae042998248e6d99cb21486c4faa93b9e8414706c2639f08c070a86221a7cbf1ee0e5e51e599ed6b27e65bbc59f00924013de74550aa4a9cc3115a15bf2bbb5d8098fd"}, &(0x7f00000015c0)=0x72) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000001600)={r7, 0x2a, "b6ffb450aaf893b0dbe6d4a854c8a879bdc1a4829cab745fe891df2669d8fb31d111d9cb35e6ed054cf4"}, &(0x7f0000001640)=0x32) (async) ioctl$RTC_VL_CLR(r3, 0x7014) (async, rerun: 64) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000016c0)=[@textreal={0x8, &(0x7f0000001680)="2ef00fb17b9266b9800000c00f326635010000000f30f20faef30f94fa0f01dfb852018ed866b9800000c00f326635008000000f303e3e0fc72f0f08f30f1efc", 0x40}], 0x1, 0x1, &(0x7f0000001700)=[@cstype0={0x4, 0xd}, @cstype0={0x4, 0xd}], 0x2) (rerun: 64) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001740)={r8, 0x6}, 0x8) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r3, 0x4068aea3, &(0x7f0000001780)={0xcc, 0x0, 0x1}) 3.677967724s ago: executing program 1 (id=1851): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) read$hidraw(r0, &(0x7f0000000040)=""/40, 0x28) write$P9_ROPEN(r0, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x4, 0x3, 0x6}, 0x935c}}, 0x18) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresuid(&(0x7f0000002100), &(0x7f0000002140)=0x0, &(0x7f0000002180)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) write$FUSE_STATX(r0, &(0x7f0000002280)={0x130, 0x0, r1, {0x24, 0x7, 0x0, '\x00', {0x10000, 0xb, 0x8, 0xc, r5, r6, 0xc000, '\x00', 0x7fff, 0x4, 0xfffffffffffffff3, 0x4, {0xc, 0x1}, {0x200, 0x6d}, {0xfffffffffffffffc, 0xc43}, {0xf, 0x101}, 0xaa, 0x3, 0x10001, 0x1}}}, 0x130) mknodat$null(r0, &(0x7f00000023c0)='./file0\x00', 0x1000, 0x103) ioctl$KVM_RUN(r0, 0xae80, 0x0) writev(r0, &(0x7f0000003500)=[{&(0x7f0000002400)="438afdbd9c02dd84f8a474224c0d2ada618e7f4521ee0ccfad6215c85c5cd0f8aa4f4a41b65d8fdd9a9661256ad2072f926980a7e2593bf4d1b0b596ebf4e98a0085546cff2bed97485d094fdb71a53dfb12b69d0ec8210846002bd86361b5cfa686624316e003f1e8efa62a81accbee0f8f784233065d170cfcea2a6d7208275228b12f6032949748fe9502385debf393cbe57b59212523d0d0af09f031ca4066199c720103fa0507e321937a18a949efcb863c28e1752f02ded2482621da1578041697bc822f7d6328ad9d95c5d4ea472c9c8f845ffcfe230c5745b643b0e6087e8c89666feb6f4ac1171c9cf453bf0de2bae358eb61dfde108629ce7ba03ece61b736ec03222c77ef009a306b551ce88ed4718d62de0440abe962fa2f7e893b4e0c58765d898b4ab693f7b64c73282a5a47f2337a1a6f6cb420e315981750c1ff4a93bb870797981dddcc73ea8bd1a46cf5d9503b8726b77c7313c5567aa7cd24983b35d0831296276ae9099688729fe83d24065dfe5e12729922e79d47b63cc89c53992f942f90f34a65be0212a335db3ad91ae4c6105a0f3ec415258bca390717fd5b6d3b45b1c91bdede3b6d7a08e740197fd93804c1076dca6db98841935eafd7403f6cead3978d045db78050ecabfddd019c6f606ce841e2ce835df4824f3cde6929d3d23557f5908ebe4c9f324c90b45a326aea3c3c4bc32ebdf543806a2c8a8f2a4aebc7a73e2fc3b79643e641c3b47285db47fe747d1970acf42ebf7eb09c06ffe2bce934559a0d570b3c340f5bd956c5fe162ccac8fed659c209a97ee26898afe78453aa54e9eed519ec04e6025171ac2618dacfea303176c5ce5ca22991db2dbf80ca2b9ebf21f030db354c69b929419f3074abf0c646da8e32c2ea2af382963b98f4739804f4efcdda20bd6f7eacd42365e04589355aa78c13288a483a05077b0f6d645e1935bb6387ddf0a426c67d758146dda17f40930b14006a2b56fa82cb21f36831ef7638a798d00ca0e2de9e5679e6bec1fb7765dfd3789ddb5e109634b75f02eb7940ba76f0c068cb96008f4da3a3e561e6c259feb2b9cebe91b8553872cd5dcfc5dbd706e40f07a7556b045a4dc99aef65519dcd0e47fcd88037a1023e6fac1213de45973b5b5b0d35fb02fd06c840790bddbd3e14bac099c148413448d743e665f22919cfeb64623b53f98fc695d9d323658e13e84dbc1cee5494d89d08da691a9b8692ad5d3014b6f4ba32002bb48d99efa07a6c2942a5df17b3cdeae608a2a613b902b88d09dc5d6d9c06a74d1556ad9c0c3f8ed96a502b06b46cbc82be12fd1fe679307f1e6398758c2d328be078236faf6230ab752bdaf6498f0ca9b0c7ab16c806aafc3e8e32b4f8e1dd948c8a198dbeefe4606d5f391272cde66c31237ffd8a0815aeb377f543d6a68fc69dc6019fcb84b0f8d86526043bd5ff6cbfc33f222fd4079af9e73d6bf059f9793b283d7e64189a43bedfe794d8ef2de4579e4c1dd1edbab945dada1ca6026f27b18ee0963c3a198b983a775ecfd5335dbed108c92a5d70604b74f3f4b22b718523071422e86d9a3a18eef1659ee5576dd40996dbfbd1fa2911718f7430dbd61285f4dac690b5522b0ecd1ab6d7771b34814e9af1fbddae7b841bfba515c9fab4af067900d5c2ac376f72740d55215952a2fe4482b5f84475dbbbc2d72ccc468b6cee4373e5b4d5d3a9af3fc6350df75d2a9f9a14a08a987d152f551b967904b79a770d85a5fbc894273110c8f091d5502c907f085a980fa2d0eb0b0e36d8ae2cf6677e27899d319ff7ed7cfcbee513f425b6fcbd025361a19dfe2ba37abd1bdc0e3e04d32d43d471c550e2c036124c61ab2a9e7626fde9a6e4a1bd85eb52d6eca65216b1fca4665894a3ea70515e6272132ace9b0d2dfa82562e3a06ac727819bea59361c8dd163e1fdc2c492c24f9cf55e8e3eb29cc7da1e16d5af6bfebaff15c3a5a34a80919f60191a831766f4b822598d3205ecc10ae3943c91cb3dd405cae8c2c582f0f986e1446633cda5ea13e9b15f9a319a5ae1099aac56e9d1bb73325c563d3969d460092ca1057afcad421f5868ac906921205e760a3f9f83639abebc38f3a8e0cb3da22f44608e980600c5a408ac6875e88d270859fadce98deeaa6d92d8b48e9717af2fbf1bf7af25b6c3ef38664a0ba1d4f0390630929f171f36d4926ab1f32fed6cc77f575338667cca4b955ccd9d7401300f705daa113a6d9ebc4b85d660b5d56051db43053d1bf070f2650a0ba125319cf89e6c017e125ff3815c99a1fbe25d3e77d3376dcabdf37ddfec8c235cf7710265d471da3269e34f792674804c3103c81c90132e5edd00690a8572c2262c35ed1dcae4f33e697fc11062f0f5a7857a8e8b0a298f1e73bfe2db75656b5a070e3e3083b16684ce4c445af38e110b3e0c6ff8a106453f4898b3cbca15ea591c65772213e413286dd5a15d04d1a7f58be20d301177a70146bbafa86b48a173c8838f61e9a5cd2e3351013d44060893395f844e593f5cf28ea80e9eb5ce3838c5e4d35b5d31e8cc17ec75b81676c19758dc7fe42569816214f9b93075dc635b7b0130622938bee383d0143b13ffac7a16c674411c0f56b7764d26a6acd12f576ad2e42112cea0802feb56e8e4ed93eebb24b064b86a5a62ad54ab534d2cbed805fc2d11321ad33f888ee75e1d1f5060a413c60091d7e30ef884a5f96098d45ed6af4de3e4eec85bbd97759a65a54d188bb5702bb4dffad9558aa26e0a13c3c55faaed723b74e0b6900f9a4c1191e33cbdf8fbf1051673b621b39ad299b62ae8e55c1335980d04f03e6e5c597f04a68be88c8e91a52b5b07e0902f2e9f1ace78f06f7649c1dcb58b071194726dee49aafab9c7f595a74bb7322d0250c77590638442ea309543011865b0f464dbef281ca8df018460c82e961e2734ee54b6efe2b7b7427a23b4ece4fcd3a5f2241ebd3e992d2084d2b7c0c4f459841cd78c6585073ddede4bf8e8d4a620aac98f615fb67f0a02934d1a7dc636e3ca9f5f2ee945b3ab5db6955af96181e4294dce0f1feec572c3ac68854339ac42ca8caadabcd461d413466e3bf91d7c9740f17f36f99a3436f12926ea2be44c2e99da947156625a28ae1e87c64e1d39591bff07ac0fb6228e22b0a9993f9eba0ddf86d844eeeaadc06ec072ef48ed99713cc1471a025becad68a358c65bd1f09778e1dc312ad2b1c59a5976a869b487b1a0822f84b243f37efa807340fb293af9ed19e7c93850a928ea5ba70c3c19f3867805eee880de6fe43b9b36da7259a1197cbe7ab63844822ff1256873f08c6bbf8449c00cac7bd4c4e763e1cac63390ac7c114ad59285b2288f0a3a9fd60415f586c822e02faed48b8c380da8eb677ca4bf6087b7aa15ab52655fc525d685a2bc9be11610b64222239f731026bd0e5b3b24af1a216a9af005e4fcd51778d709b07dee7c4754d3aae6253f45b4f37f5aa33dfdc2ae9e546d186803e7c77a4bcfa3177ec8385001870a9d6678e238fb61e4bc691bc68415a25faf64cb7cc8c81d916bec9628a592fe73d0f0a865ee41624f6aad5a2b68d8fb3a815d92211219796631de871959b68821f14f397171cf4f2a2faa95f35a11fed0f125f554078b28c5460eabcb05f649a529ff722ab25ddd9e5901bc09d1663a7329d3983bdaa0b80d72ebc3113220c110b1a640b38be11c9aee13548e75aceb5b0eb9309745dd45351ed9ff84708d3f8a2e24b18657083118565e3dc343a3e1cebc217b0ec1411871098b5fbfc442f4acd6c627f3cbe4bce7aaf0a7f6036e0964adb3380d1bb9e2013d48cdd76ff3c8209ab7a4a5dc6d209ddd557ad1dc5c1179c471283e999990056cbd5f22550d6e6fbba51e559da13f9a42669db17e13bce4b122b17243baef9b227a683ba5599875fc17fa1ea6650ae81e16c7430d177711ba3f3ca1835ae8a330e9e453b59d1ffc53a847ce156e481340c65fed8ba3df26408915778ebb185b292756a5a97ca011819abf34f2b199084c1e439ab5a3b6a875acdebb085bcf1a6fa02bbe65ce0393268299f41ddb4820ef4f2cede3f3f65b6a284eba780392cd1d0da816d2692bd5db820a3bc070c7324ef6a337d519b629e5d530ed905a9ea92e3546be91b3982d59e30bfd58626a953f844197f45662f5d23f4a1880279441316afd4471d832f0d89f8e0e30bc565e12781e505d222c572ac5577ab9f262b755f0359a80a0d79da1c22a0396164e5f75f474f938006fc3cf80daf4eb406ddb7b588753f390475c57d1597e80aef6044a3cabc2d6a56f7d62d13f62e5b02578c69a6e1c26a80dac40fff43010ddfe2690f38882b822b578003b7fb209e5115f92090ebfef12be6c9cc96b4e72f09fc4b444edeabb5bcc4f764d1787fd104304f4e246f93da42787a92e02cd0c7a9b39b7c9cb849760f884e0c8a3bc1d97418a0f766876a47c25e79a93a9c079c73db277b2f0f228c13a1d0bc0e601c6f9461d30fac1a92e2eced02957ffe34b6de8e7bada3f1814cc26b1f0f22ed6ae106fdd70f2a583b8b567249c12f2c5f99cb2726485f962f15d2341aa0936d3db75e1753811fc9edd9cac4a8bec4bae82eb1ab90593c3894e627f93bf1cd0eb54be8757eac5a4493c3cbd3699e77496d9a82808cc134e8ab20d04f50f9fde653862a0235d08140bc6aec5fa3507770bd0064df2de417c3a783821c21d692e8dd9a0e36ae3e015ed901682611d1e910d63497f53c62fba8cd3abf77f9f5e3baef9528bb24f2c80934453d1b857605bbdfcf7f8611bcc354400a4b5d1b6d5cf8617e51dcc13ac1d8121b75d4c3d2886c92a55aa82506f53f41a73a26660b01b288b921256e9ce58aa6ed8d2cbb7cb05d8b35001922b8485875cd4d7347cf813084f1a784887e69894d6286f5d448af64ca1e6315f2c9de08977bf00d15ceacd7ad99c69df800c9ccbdc1d330ec3b444f74492a8307beb49d1a893c6821fbcd9dbf9119438fe4c52553cd68fd986bb0a294dbf53b6dc3c5da89faf228f75d40ff4be7de95963b967b052f4fddd949d9e0f118ec0b29b7b58712de2f5f0bf8c82310e32bda3f313dbfcdb5fc5c394377cc4941800595f58d95dedffda41e1f8138c4dc114faac4d73be1d2af85f40f8dccc4def56d5feeaef5738a3c1348996d3417e1270cf0b79e85bfc1e50f6d1ab15d064160baecf9c3ec5a3e72f5d87acea90ae3bb53c9b5f1f4316d8e03f3fcbfe8e191b66d6abd7b913f62b285918cf42f2f90654f674727db32b845c70528fc51f72da443012536b3ff5cead5015e84713e3e36040c5951484f59d96ab64f6bb4732074ed18270fec59d163a3edfa9b60bf09abfe92b4d8467f07763efda1fa02539e2095f033d646721639870dba591a849bd9cd4a971c0166e06c3cea268a9f99170f04def6d2c691d8636a7e6cb616985030408c4980a361dda3d71dd0b3b051c18fbc347b69d2a5f5ae374e06522d1832b6feb2f03a2159a9b267439668eed2475c9d11dfac835bb221007ff1f5e052efe12a3de02e6a5f60e9df64c00a2a347cc155f0077a450841de07e600038ef815780ef9ee579ceec36484c7c28ba4dda2d8f7b6c55dbf2ef1e488f9d7b7af7e0a4cda6032c7afd67c7e38fb9748d3ffaf17770b2b9b68e67d16613562205ed0480a657ec2fd49ce7531aea78acb161699e75b0a019993f089804076b801f46e9546e38afeb1b5dae7fd1e1f9d582696bf22cdb6db0c4e14cd7abe0e7fd17ef3fb23a9135abc23a8f90b0d", 0x1000}, {&(0x7f0000003400)="2339e8b1cb9728a0b37c57ed810b97fe38395fb50704a8c2908864094fa5c3", 0x1f}, {&(0x7f0000003440)="c3d338fe41e69b2c9d46c5d3eb6d72426b041fa1f9a1bca00ef246a3ffa9e7080e6d24c177cac31c4bd1aac48395b4d6b1ddf3d9a85bb2b3ab90fa4958d2e7f93ffb0ae1f36741498fbff5d82ce31a0e605700862ec648fa059d174b5ecd4dcf", 0x60}, {&(0x7f00000034c0)="048784357bec6883a348fa4f80", 0xd}], 0x4) lsetxattr$system_posix_acl(&(0x7f0000003540)='./file0\x00', &(0x7f0000003580)='system.posix_acl_access\x00', &(0x7f00000035c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r4}, {0x2, 0x0, r4}], {0x4, 0x2}, [{0x8, 0x4, r2}], {0x10, 0x4}, {0x20, 0x6}}, 0x3c, 0x3) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000003600)={0x6, "951c61eb08f64a40237b340bc166ecd78766a2a3dc4467cdedc1116200f55277", 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_PIN_FILE(r7, 0x8004f50e, &(0x7f0000003640)) mount(&(0x7f0000003680)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)='sysfs\x00', 0x0, &(0x7f0000003740)='system.posix_acl_access\x00') close(r7) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000003780)={0x30, 0x3, 0xa, 0x7, 0x5}) fsetxattr$trusted_overlay_upper(r7, &(0x7f00000037c0), &(0x7f0000003800)={0x0, 0xfb, 0x38, 0x0, 0x9, "f2b3def6ca8d67f66b6e9eb58cf77887", "f3f486db93ffdc767dac0ea9efb99c07d274837f75b93c1740fde5b7dd9e1becc532cc"}, 0x38, 0x2) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000003840)=0x8000, 0x4) llistxattr(&(0x7f0000003880)='./file0\x00', &(0x7f00000038c0)=""/243, 0xf3) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000039c0)='\x00', 0x0, r0) mount$9p_virtio(&(0x7f0000003a00), &(0x7f0000003a40)='./file0\x00', &(0x7f0000003a80), 0x10800, &(0x7f0000003ac0)={'trans=virtio,', {[{@ignoreqv}, {@cache_mmap}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@loose}, {@access_any}, {@cache_readahead}, {@msize={'msize', 0x3d, 0x4}}], [{@subj_role={'subj_role', 0x3d, 'system.posix_acl_access\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, '&@'}}, {@uid_lt={'uid<', r4}}, {@dont_hash}, {@context={'context', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'sysfs\x00'}}]}}) fcntl$lock(r7, 0x24, &(0x7f0000003c00)={0x2, 0xc, 0x40, 0x2, r3}) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000003c40), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000003c80)=0x6) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000003cc0)={0x79, 0x2, 0x8, 0x5, 0xfffffff9, 0x81}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000003d00)={0x1, "7292667dc8710ba3ee7bfe5d96d0f1539cf4f2d5a2c4660c6f694aa038b1a32f"}) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000003d40)={r0, 0x9, 0x0, r0}) r9 = epoll_create(0xfffffff9) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000003d80)={0x2}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000003dc0)=0x7, 0x4) 3.55494563s ago: executing program 1 (id=1852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xfffffffffffffff5}, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000140)={0x3000, 0x19000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7c, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 2.633940019s ago: executing program 1 (id=1853): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0xc3, 0x3e2d, 0x1, 0xc, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) (async) r4 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2001) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2000) (async) sendmsg$inet(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='#', 0xfffffdd1}], 0x1}, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00') preadv(r5, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2.554626004s ago: executing program 1 (id=1854): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000640)={0xffffffffffffffff, 0x10, 0x40, 0x40}) 13.29066ms ago: executing program 5 (id=1855): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_connect(0x3, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e10630715108856000000010902"], 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/time_for_children\x00') mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x800488, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1ffffffffffffea6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX=r5, @ANYRES32=r3, @ANYBLOB="76e02d30397efad1c6ad6ad5f19a22fa0eacb507f47cfe8febfc6608bd48c9f33a3c0817d9c300050ad97f1a7cc0fbca11020211a54991c5fdbe5758e1787c2e66aa2715d03168482fee6a3f07b8a8ce5df1b2217f51e6056d8c84f27ffce6a0466873a2c0120f968dfdb28ebf5472f6a17a821a75ef617c046b1843cd13e89193fce9afb0d58bc57f65a98905a002420199e0b1f4cc79f1ab8b952a987c88bc0586b505"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000008c0)=r6, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) close_range(r7, 0xffffffffffffffff, 0x0) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x3, {0x5, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r8, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x4400, &(0x7f00000001c0)={[{@xino_auto}, {@default_permissions}, {@verity_require}, {@xino_on}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on}, {@redirect_dir_follow}, {@workdir={'workdir', 0x3d, './file1'}}, {@nfs_export_off}], [{@permit_directio}, {@fowner_gt={'fowner>', r8}}, {@context={'context', 0x3d, 'staff_u'}}, {@appraise_type}]}) 0s ago: executing program 4 (id=1856): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000140), 0x4) kernel console output (not intermixed with test programs): idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.164548][ T55] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.167844][ T55] usb 9-1: Product: syz [ 147.169734][ T55] usb 9-1: Manufacturer: syz [ 147.177161][ T55] cdc_wdm 9-1:1.0: skipping garbage [ 147.181489][ T55] cdc_wdm 9-1:1.0: skipping garbage [ 147.185294][ T55] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 147.188578][ T55] cdc_wdm 9-1:1.0: Unknown control protocol [ 147.434559][ T9] usb 9-1: USB disconnect, device number 10 [ 147.671744][T10451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 147.680779][T10451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 147.689822][T10451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 147.696160][T10451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.782707][T10451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.796761][T10451] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.812530][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.815424][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.827435][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.830246][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.998864][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1252'. [ 148.002964][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1252'. [ 148.013188][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1252'. [ 148.041160][T10451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.097367][T10451] veth0_vlan: entered promiscuous mode [ 148.115167][T10451] veth1_vlan: entered promiscuous mode [ 148.141711][T10451] veth0_macvtap: entered promiscuous mode [ 148.147230][T10451] veth1_macvtap: entered promiscuous mode [ 148.160102][T10451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.163038][T10703] netlink: 'syz.1.1256': attribute type 10 has an invalid length. [ 148.180884][T10451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.186974][T10451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.196973][T10451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.200090][T10451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.202998][T10451] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.215361][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 148.215375][ T40] audit: type=1400 audit(1752037644.909:684): avc: denied { setopt } for pid=10707 comm="syz.4.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 148.301995][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.304569][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.333711][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.336999][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.201576][T10753] syz.4.1273: attempt to access beyond end of device [ 149.201576][T10753] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 149.206681][T10753] syz.4.1273: attempt to access beyond end of device [ 149.206681][T10753] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 149.212760][T10753] Mount JFS Failure: -5 [ 149.214727][T10753] jfs_mount failed w/return code = -5 [ 149.236407][T10724] block nbd1: shutting down sockets [ 149.435634][ T40] audit: type=1400 audit(1752037646.129:685): avc: denied { read write } for pid=5962 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.451781][ T40] audit: type=1400 audit(1752037646.129:686): avc: denied { open } for pid=5962 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.461828][ T40] audit: type=1400 audit(1752037646.129:687): avc: denied { ioctl } for pid=5962 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.665279][T10785] overlay: Unknown parameter '/' [ 149.681185][T10787] overlay: Unknown parameter '/' [ 150.007598][ T40] audit: type=1400 audit(1752037646.699:688): avc: denied { connect } for pid=10802 comm="syz.1.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 150.036959][T10801] __nla_validate_parse: 5 callbacks suppressed [ 150.036982][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 150.162755][T10801] team0: Port device team_slave_0 removed [ 150.297381][ T1149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.143793][T10860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56369 sclass=netlink_route_socket pid=10860 comm=syz.1.1294 [ 151.144386][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 151.227818][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.233166][ T5958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.236681][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.240624][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.244121][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.359607][T10870] chnl_net:caif_netlink_parms(): no params data found [ 151.417594][ T40] audit: type=1400 audit(1752037648.109:689): avc: denied { accept } for pid=10889 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 151.451786][T10870] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.456792][T10870] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.461078][T10870] bridge_slave_0: entered allmulticast mode [ 151.464662][T10870] bridge_slave_0: entered promiscuous mode [ 151.475165][T10895] affs: No valid root block on device nullb0 [ 151.475436][T10870] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.488022][T10870] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.490693][T10870] bridge_slave_1: entered allmulticast mode [ 151.494069][T10870] bridge_slave_1: entered promiscuous mode [ 151.496907][T10893] overlayfs: conflicting lowerdir path [ 151.520413][T10898] xt_TPROXY: Can be used only with -p tcp or -p udp [ 151.525006][T10898] xt_TPROXY: Can be used only with -p tcp or -p udp [ 151.553188][T10870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.559790][T10870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.607954][ T40] audit: type=1400 audit(1752037648.299:690): avc: denied { read } for pid=10902 comm="syz.4.1307" name="file0" dev="tmpfs" ino=1516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.616485][T10903] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 151.625375][T10903] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 151.639272][T10870] team0: Port device team_slave_0 added [ 151.642851][T10870] team0: Port device team_slave_1 added [ 151.675634][T10870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.678745][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.686941][T10870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.691919][T10870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.694157][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.703516][T10870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.748568][T10870] hsr_slave_0: entered promiscuous mode [ 151.751032][T10870] hsr_slave_1: entered promiscuous mode [ 151.753457][T10870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.756258][T10870] Cannot create hsr debugfs directory [ 151.790051][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.843051][T10919] batadv_slave_1: entered promiscuous mode [ 151.861227][T10919] batadv_slave_1: left promiscuous mode [ 151.901145][ T40] audit: type=1400 audit(1752037648.599:691): avc: denied { getopt } for pid=10920 comm="syz.4.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 151.905708][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 152.136881][T10935] nbd: couldn't find a device at index -1605786504 [ 152.144266][T10923] autofs4:pid:10923:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1986356271.1668118063), cmd(0xc018937d) [ 152.149184][T10923] autofs4:pid:10923:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937d) [ 152.206017][ T1149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.226991][T10947] netlink: 'syz.5.1320': attribute type 23 has an invalid length. [ 152.246772][T10947] netlink: 14212 bytes leftover after parsing attributes in process `syz.5.1320'. [ 152.288690][ T1149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.317413][ T40] audit: type=1400 audit(1752037649.009:692): avc: denied { bind } for pid=10950 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 152.363240][ T1149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.409833][T10956] xt_hashlimit: size too large, truncated to 1048576 [ 152.429081][T10959] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1323'. [ 152.433182][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 152.505468][T10965] overlayfs: failed to clone upperpath [ 152.581078][T10974] netlink: 'syz.4.1327': attribute type 1 has an invalid length. [ 152.655737][ T1149] bridge_slave_1: left allmulticast mode [ 152.657652][ T1149] bridge_slave_1: left promiscuous mode [ 152.660513][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.664219][ T1149] bridge_slave_0: left allmulticast mode [ 152.666088][ T1149] bridge_slave_0: left promiscuous mode [ 152.669795][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.802813][ T40] audit: type=1400 audit(1752037649.499:693): avc: denied { setopt } for pid=10976 comm="syz.4.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.961929][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.969484][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.974415][ T1149] bond0 (unregistering): Released all slaves [ 153.308238][ T5958] Bluetooth: hci3: command tx timeout [ 153.337702][ T1149] hsr_slave_0: left promiscuous mode [ 153.341523][ T1149] hsr_slave_1: left promiscuous mode [ 153.344537][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.347717][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.351636][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.354438][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.402976][ T1149] veth1_macvtap: left promiscuous mode [ 153.405380][ T1149] veth0_macvtap: left promiscuous mode [ 153.407822][ T1149] veth1_vlan: left promiscuous mode [ 153.410062][ T1149] veth0_vlan: left promiscuous mode [ 154.045631][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.306490][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 154.414184][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 155.053210][T11043] xt_nat: multiple ranges no longer supported [ 155.091048][T10870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 155.095335][T10870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 155.101029][T10870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 155.105201][T10870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.124556][T11062] input: syz0 as /devices/virtual/input/input10 [ 155.201783][T11067] xt_hashlimit: size too large, truncated to 1048576 [ 155.206422][T10870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.224564][T10870] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.232321][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.234556][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.242866][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.245131][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.317657][T11074] mmap: syz.4.1342 (11074): VmData 37855232 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 155.322698][T11080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1343'. [ 155.378401][ T5958] Bluetooth: hci3: command tx timeout [ 155.403424][T10870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.420234][T11095] usb usb8: usbfs: process 11095 (syz.4.1346) did not claim interface 0 before use [ 155.443814][T10870] veth0_vlan: entered promiscuous mode [ 155.465197][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 155.471369][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 155.474549][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 155.490300][T10870] veth1_vlan: entered promiscuous mode [ 155.507937][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 155.507948][ T40] audit: type=1400 audit(1752037652.199:696): avc: denied { checkpoint_restore } for pid=11102 comm="syz.4.1348" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.512385][T10870] veth0_macvtap: entered promiscuous mode [ 155.516758][T11103] netlink: 1576 bytes leftover after parsing attributes in process `syz.4.1348'. [ 155.523186][T10870] veth1_macvtap: entered promiscuous mode [ 155.540635][T10870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.550724][T10870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.556691][T10870] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.561435][T10870] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.565105][T10870] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.568831][T10870] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.590276][T11115] overlayfs: workdir and upperdir must be separate subtrees [ 156.196788][T11157] overlay: filesystem on ./bus is read-only [ 156.197955][ T40] audit: type=1400 audit(1752037652.889:697): avc: denied { mounton } for pid=11155 comm="syz.4.1357" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 157.236667][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.242084][ T55] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 157.259082][ T55] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 157.410722][T11162] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.471499][ T5958] Bluetooth: hci3: command tx timeout [ 157.679056][T11166] 9pnet_virtio: no channels available for device syz [ 157.681932][T11166] 9pnet_virtio: no channels available for device syz [ 157.685546][T11166] 9pnet_virtio: no channels available for device syz [ 157.692024][T11166] 9pnet_virtio: no channels available for device syz [ 157.695063][T11166] 9pnet_virtio: no channels available for device syz [ 158.721174][T11152] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 158.844426][ T5958] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 159.299967][ T40] audit: type=1326 audit(1752037655.999:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11179 comm="syz.5.1365" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb48578e929 code=0x0 [ 159.388214][ T55] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 159.390569][ T55] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 159.551304][ T5958] Bluetooth: hci3: command tx timeout [ 159.575226][T11189] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1367'. [ 159.579690][T11190] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1367'. [ 160.162418][T11197] hugetlbfs: syz.5.1368 (11197): Using mlock ulimits for SHM_HUGETLB is obsolete [ 160.373323][T11206] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 160.411981][ T40] audit: type=1400 audit(1752037657.099:699): avc: denied { relabelto } for pid=11205 comm="syz.5.1369" name="369" dev="tmpfs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 160.428189][ T40] audit: type=1400 audit(1752037657.109:700): avc: denied { associate } for pid=11205 comm="syz.5.1369" name="369" dev="tmpfs" ino=2089 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 160.492335][ T40] audit: type=1400 audit(1752037657.179:701): avc: denied { remove_name } for pid=7207 comm="syz-executor" name="file0" dev="tmpfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 160.528906][ T40] audit: type=1400 audit(1752037657.179:702): avc: denied { rmdir } for pid=7207 comm="syz-executor" name="369" dev="tmpfs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 161.135052][T11233] sctp: [Deprecated]: syz.5.1375 (pid 11233) Use of int in maxseg socket option. [ 161.135052][T11233] Use struct sctp_assoc_value instead [ 161.216313][T11239] netlink: 'syz.5.1376': attribute type 2 has an invalid length. [ 161.220078][T11238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11238 comm=syz.5.1376 [ 161.842402][ T40] audit: type=1400 audit(1752037658.509:703): avc: denied { create } for pid=11265 comm="syz.5.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.860048][ T40] audit: type=1400 audit(1752037658.559:704): avc: denied { setopt } for pid=11265 comm="syz.5.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.867499][ T40] audit: type=1400 audit(1752037658.559:705): avc: denied { write } for pid=11265 comm="syz.5.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 162.020506][ T40] audit: type=1400 audit(1752037658.727:706): avc: denied { connect } for pid=11269 comm="syz.5.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 162.042133][T11272] netlink: 'syz.5.1382': attribute type 83 has an invalid length. [ 162.178630][ T55] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 162.180009][ T5958] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.181034][ T55] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 162.455326][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.482588][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.529835][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.533340][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.143955][ T40] audit: type=1400 audit(1752037659.827:707): avc: denied { unmount } for pid=6988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 163.378207][ T55] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 163.451285][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.581354][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 163.596964][ T55] usb 6-1: unable to get BOS descriptor or descriptor too short [ 163.597450][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.600137][ T55] usb 6-1: no configurations [ 163.600157][ T55] usb 6-1: can't read configurations, error -22 [ 163.707518][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.854840][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.150289][ T13] bridge_slave_1: left allmulticast mode [ 164.152835][ T13] bridge_slave_1: left promiscuous mode [ 164.203043][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.387411][ T13] bridge_slave_0: left allmulticast mode [ 164.390703][ T13] bridge_slave_0: left promiscuous mode [ 164.407376][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.467551][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1392'. [ 164.513773][ T5316] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.527719][ T5316] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.545023][ T5316] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.559247][ T5316] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.564483][ T5316] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.580335][T11330] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 164.683644][ T40] audit: type=1400 audit(1752037661.377:708): avc: denied { ioctl } for pid=11331 comm="syz.4.1394" path="socket:[40588]" dev="sockfs" ino=40588 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 164.908119][T11338] overlayfs: missing 'workdir' [ 165.269430][T11348] netlink: 'syz.4.1397': attribute type 30 has an invalid length. [ 165.706991][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.714140][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.728295][ T13] bond0 (unregistering): Released all slaves [ 165.775361][T11321] gretap1: entered allmulticast mode [ 165.823352][T11321] bridge0: port 1(gretap1) entered blocking state [ 165.847149][T11321] bridge0: port 1(gretap1) entered disabled state [ 165.855438][T11321] gretap1: entered promiscuous mode [ 166.074429][T11348] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 166.092627][T11348] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 166.122378][T11357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'. [ 166.190515][T11360] netlink: 'syz.4.1401': attribute type 1 has an invalid length. [ 166.207149][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1401'. [ 166.508170][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 166.617050][T11380] netlink: 'syz.1.1405': attribute type 14 has an invalid length. [ 166.668040][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 166.670929][ T9] usb 9-1: too many configurations: 123, using maximum allowed: 8 [ 166.682743][ T5316] Bluetooth: hci3: command tx timeout [ 166.694808][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.725518][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.752339][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.757829][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.814580][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.839818][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.843350][ T13] hsr_slave_0: left promiscuous mode [ 166.856934][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.873173][ T13] hsr_slave_1: left promiscuous mode [ 166.877059][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.882423][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.894264][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.918600][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 166.919624][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.922964][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 166.922991][ T9] usb 9-1: SerialNumber: syz [ 166.940401][ T9] usb 9-1: config 0 descriptor?? [ 166.947735][T11400] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1408'. [ 166.949816][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input12 [ 166.952635][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.054332][ T13] veth1_macvtap: left promiscuous mode [ 167.062308][ T13] veth0_macvtap: left promiscuous mode [ 167.082496][ T13] veth1_vlan: left promiscuous mode [ 167.098231][ T13] veth0_vlan: left promiscuous mode [ 167.149218][T11373] input: syz1 as /devices/virtual/input/input13 [ 167.399796][ T9682] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 167.485130][ T5351] bcm5974 9-1:0.0: could not read from device [ 167.568302][ T9682] usb 6-1: Using ep0 maxpacket: 16 [ 167.570718][ T5351] bcm5974 9-1:0.0: could not read from device [ 167.577006][ C3] vkms_vblank_simulate: vblank timer overrun [ 167.595980][ T9682] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.614450][ T9682] usb 6-1: config 1 interface 0 has no altsetting 0 [ 167.618877][ T9] usb 9-1: USB disconnect, device number 11 [ 167.658505][ T9682] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.40 [ 167.663049][ T9682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.666241][ T9682] usb 6-1: Product: syz [ 167.668889][ T9682] usb 6-1: Manufacturer: syz [ 167.671743][ T9682] usb 6-1: SerialNumber: syz [ 167.980589][T11406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1410'. [ 167.984561][ C3] vkms_vblank_simulate: vblank timer overrun [ 168.083897][T11408] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11408 comm=syz.1.1410 [ 168.095184][ C3] vkms_vblank_simulate: vblank timer overrun [ 168.134092][T11408] netlink: 724 bytes leftover after parsing attributes in process `syz.1.1410'. [ 168.738285][ T5316] Bluetooth: hci3: command tx timeout [ 168.872564][ T9] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 169.047710][ T9] usb 9-1: device descriptor read/64, error -71 [ 169.339846][ T9] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 169.483848][ T9] usb 9-1: device descriptor read/64, error -71 [ 169.604397][ T9] usb usb9-port1: attempt power cycle [ 169.982751][ T9] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 170.024487][ T9] usb 9-1: device descriptor read/8, error -71 [ 170.268290][ T9] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 170.289073][ T9] usb 9-1: device descriptor read/8, error -71 [ 170.335392][ T13] team0 (unregistering): Port device team_slave_1 removed [ 170.409921][ T9] usb usb9-port1: unable to enumerate USB device [ 170.644261][ T13] team0 (unregistering): Port device team_slave_0 removed [ 170.857752][ T5316] Bluetooth: hci3: command tx timeout [ 171.259644][ C3] vkms_vblank_simulate: vblank timer overrun [ 171.500280][ C3] vkms_vblank_simulate: vblank timer overrun [ 172.848045][ T9682] usbhid 6-1:1.0: can't add hid device: -32 [ 172.850552][ T9682] usbhid 6-1:1.0: probe with driver usbhid failed with error -32 [ 172.910743][ T5316] Bluetooth: hci3: command tx timeout [ 173.598036][T11400] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 173.865871][ T8335] usb 6-1: USB disconnect, device number 18 [ 173.991185][T11434] fuseblk: Bad value for 'fd' [ 174.120754][T11324] chnl_net:caif_netlink_parms(): no params data found [ 174.223081][T11439] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1417'. [ 174.599503][T11324] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.602782][T11324] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.605602][T11324] bridge_slave_0: entered allmulticast mode [ 174.619053][T11324] bridge_slave_0: entered promiscuous mode [ 174.648976][T11324] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.665531][T11324] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.670295][T11324] bridge_slave_1: entered allmulticast mode [ 174.674419][T11324] bridge_slave_1: entered promiscuous mode [ 174.869146][ T40] audit: type=1400 audit(1752037671.547:709): avc: denied { create } for pid=11450 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 174.927804][ T40] audit: type=1400 audit(1752037671.617:710): avc: denied { ioctl } for pid=11450 comm="syz.4.1419" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.958111][T11451] SELinux: security policydb version 18 (MLS) not backwards compatible [ 174.971673][ T40] audit: type=1400 audit(1752037671.657:711): avc: denied { read } for pid=11450 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.035487][T11451] SELinux: failed to load policy [ 175.139938][T11324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.163557][T11324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.228250][T11453] xt_hashlimit: size too large, truncated to 1048576 [ 175.296204][ T40] audit: type=1400 audit(1752037671.967:712): avc: denied { write } for pid=11450 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 175.328020][ T40] audit: type=1400 audit(1752037672.017:713): avc: denied { read } for pid=5351 comm="acpid" name="event8" dev="devtmpfs" ino=2998 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 175.348010][ T40] audit: type=1400 audit(1752037672.017:714): avc: denied { open } for pid=5351 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2998 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 175.392683][ T40] audit: type=1400 audit(1752037672.017:715): avc: denied { ioctl } for pid=5351 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2998 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 175.695201][T11461] syzkaller1: entered promiscuous mode [ 175.698375][T11461] syzkaller1: entered allmulticast mode [ 175.775629][T11324] team0: Port device team_slave_0 added [ 175.820420][T11324] team0: Port device team_slave_1 added [ 176.189202][T11324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.192401][T11324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.211316][T11324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.224769][T11324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.253500][T11324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.279189][T11324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.617502][T11324] hsr_slave_0: entered promiscuous mode [ 176.625225][T11324] hsr_slave_1: entered promiscuous mode [ 176.629136][T11324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.633390][T11324] Cannot create hsr debugfs directory [ 177.104244][T11504] netlink: 'syz.5.1432': attribute type 1 has an invalid length. [ 177.300640][T11506] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.319514][T11506] bond3: (slave bond4): making interface the new active one [ 177.323143][T11506] bond3: (slave bond4): Enslaving as an active interface with an up link [ 177.333464][T11506] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1432'. [ 177.406968][T11506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.666061][ T54] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 177.775034][ T40] audit: type=1400 audit(1752037674.457:716): avc: denied { connect } for pid=11518 comm="syz.4.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 177.804594][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1437'. [ 177.839973][ T54] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.854329][ T54] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 177.859129][ T54] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.863287][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.883989][T11517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.892886][T11525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63760 sclass=netlink_route_socket pid=11525 comm=syz.5.1437 [ 177.908237][ T54] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.938018][T11526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63760 sclass=netlink_route_socket pid=11526 comm=syz.5.1437 [ 178.203995][ T9682] usb 6-1: USB disconnect, device number 19 [ 178.359281][T11532] trusted_key: syz.5.1439 sent an empty control message without MSG_MORE. [ 178.624792][ T40] audit: type=1400 audit(1752037675.287:717): avc: denied { kexec_image_load } for pid=11527 comm="syz.4.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 179.166069][ T40] audit: type=1400 audit(1752037675.857:718): avc: denied { getopt } for pid=11541 comm="syz.5.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.719044][T11324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.762417][T11324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.840743][T11324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.923200][T11324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 179.989388][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'. [ 180.243852][T11324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.274322][T11324] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.301499][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.310030][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.406933][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.411876][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.643888][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1449'. [ 180.667551][T11605] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 180.697712][T11605] 9pnet_virtio: no channels available for device 127.0.0.1 [ 180.789310][T11613] netlink: 'syz.4.1448': attribute type 10 has an invalid length. [ 180.792535][T11613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1448'. [ 180.856570][T11613] team0: Port device geneve0 added [ 180.900462][T11617] sch_tbf: burst 0 is lower than device geneve0 mtu (1514) ! [ 180.913077][ T40] audit: type=1400 audit(1752037677.607:719): avc: denied { getopt } for pid=11610 comm="syz.4.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 181.005443][T11324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.145797][T11324] veth0_vlan: entered promiscuous mode [ 181.179599][T11324] veth1_vlan: entered promiscuous mode [ 181.273006][T11324] veth0_macvtap: entered promiscuous mode [ 181.342848][T11324] veth1_macvtap: entered promiscuous mode [ 181.372060][ T40] audit: type=1400 audit(1752037678.027:720): avc: denied { setattr } for pid=11629 comm="syz.4.1452" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.402785][T11324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.417982][T11324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.442706][T11324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.449108][T11324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.453068][T11324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.459503][T11324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.598513][T11639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1454'. [ 181.705500][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.710184][T11644] xt_time: unknown flags 0xb4 [ 181.729274][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.766282][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.791292][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.117425][T11668] netlink: 'syz.4.1462': attribute type 4 has an invalid length. [ 182.139438][T11668] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1462'. [ 182.145118][ T40] audit: type=1400 audit(1752037678.837:721): avc: denied { getopt } for pid=11667 comm="syz.4.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 182.331077][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1464'. [ 182.461859][T11683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1465'. [ 182.659316][ T40] audit: type=1400 audit(1752037679.357:722): avc: denied { connect } for pid=11686 comm="syz.4.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.867587][T11694] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 182.882403][T11694] overlayfs: failed to set xattr on upper [ 182.886151][T11694] overlayfs: ...falling back to redirect_dir=nofollow. [ 182.912725][T11694] overlayfs: ...falling back to index=off. [ 182.949199][T11694] overlayfs: ...falling back to uuid=null. [ 182.986591][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'. [ 183.049492][T11698] batadv_slave_1: entered promiscuous mode [ 183.052672][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1470'. [ 183.191478][T11706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1471'. [ 183.241714][T11707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=11707 comm=syz.1.1471 [ 183.498061][ T40] audit: type=1400 audit(1752037680.107:723): avc: denied { unmount } for pid=6988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 183.629316][ T40] audit: type=1400 audit(1752037680.317:724): avc: denied { bind } for pid=11713 comm="syz.4.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.742942][T11718] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11718 comm=syz.1.1471 [ 184.142219][T11697] batadv_slave_1: left promiscuous mode [ 184.303036][T11721] vlan2: entered promiscuous mode [ 184.305398][T11721] bridge0: entered promiscuous mode [ 184.685336][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.313590][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.431826][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.552688][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.873089][ T12] bridge_slave_1: left allmulticast mode [ 185.875829][ T12] bridge_slave_1: left promiscuous mode [ 185.886019][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.949837][ T12] bridge_slave_0: left allmulticast mode [ 185.952590][ T12] bridge_slave_0: left promiscuous mode [ 185.955337][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.112122][T11737] /dev/sr0: Can't open blockdev [ 186.127632][T11741] /dev/sr0: Can't open blockdev [ 186.162356][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.221518][ T5958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.226866][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.237525][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.244805][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.770864][T11770] __nla_validate_parse: 1 callbacks suppressed [ 186.770881][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1485'. [ 187.085107][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.100694][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.114573][ T12] bond0 (unregistering): Released all slaves [ 187.163015][T11764] dvmrp1: entered allmulticast mode [ 187.718576][T11784] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1490'. [ 187.772850][T11789] program syz.1.1490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.299682][ T12] hsr_slave_0: left promiscuous mode [ 188.303299][ T12] hsr_slave_1: left promiscuous mode [ 188.317596][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.326243][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.343075][ T5958] Bluetooth: hci3: command tx timeout [ 188.410818][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.413906][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.523950][ T12] veth1_macvtap: left promiscuous mode [ 188.531046][ T12] veth0_macvtap: left promiscuous mode [ 188.536868][ T12] veth1_vlan: left promiscuous mode [ 188.542900][ T12] veth0_vlan: left promiscuous mode [ 190.433043][ T5958] Bluetooth: hci3: command tx timeout [ 190.797445][ T40] audit: type=1400 audit(1752037687.497:725): avc: denied { append } for pid=11818 comm="syz.4.1494" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 191.660238][ T12] team0 (unregistering): Port device team_slave_1 removed [ 192.103643][ T12] team0 (unregistering): Port device team_slave_0 removed [ 192.508655][ T5958] Bluetooth: hci3: command tx timeout [ 194.399065][T11807] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 194.446207][T11824] CIFS: Unable to determine destination address [ 194.516534][T11821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.553012][T11751] chnl_net:caif_netlink_parms(): no params data found [ 194.584735][ T5958] Bluetooth: hci3: command tx timeout [ 195.032620][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1498'. [ 195.039620][T11837] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1498'. [ 195.044514][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1498'. [ 195.048476][T11837] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1498'. [ 195.070368][T11837] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1498'. [ 195.077396][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1498'. [ 195.086250][T11845] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1498'. [ 195.101797][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1498'. [ 195.106165][T11845] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1498'. [ 195.114830][T11845] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1498'. [ 195.194312][T11751] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.199314][T11751] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.202331][T11751] bridge_slave_0: entered allmulticast mode [ 195.205876][T11751] bridge_slave_0: entered promiscuous mode [ 195.215646][T11751] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.298132][T11751] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.301206][T11751] bridge_slave_1: entered allmulticast mode [ 195.306887][T11751] bridge_slave_1: entered promiscuous mode [ 195.550950][T11751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.623768][T11751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.769224][ T72] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 195.989170][T11751] team0: Port device team_slave_0 added [ 195.997350][T11751] team0: Port device team_slave_1 added [ 196.184555][T11751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.193614][T11751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.222906][T11751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.230351][T11751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.233345][T11751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.247147][T11751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.461813][T11751] hsr_slave_0: entered promiscuous mode [ 196.481919][T11751] hsr_slave_1: entered promiscuous mode [ 196.513373][T11751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.517746][T11751] Cannot create hsr debugfs directory [ 197.118281][T11923] usb usb8: usbfs: process 11923 (syz.1.1517) did not claim interface 0 before use [ 197.612958][T11940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.619129][T11940] IPv6: NLM_F_CREATE should be set when creating new route [ 198.062151][T11954] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 198.064768][ T40] audit: type=1400 audit(1752037950.763:726): avc: denied { create } for pid=11953 comm="syz.4.1526" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 198.066811][T11954] overlayfs: failed to resolve './file1': -2 [ 198.127064][ T40] audit: type=1400 audit(1752037950.763:727): avc: denied { associate } for pid=11953 comm="syz.4.1526" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 198.201636][ T40] audit: type=1400 audit(1752037950.763:728): avc: denied { mounton } for pid=11953 comm="syz.4.1526" path="/328/bus" dev="tmpfs" ino=1890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 198.351428][ T40] audit: type=1400 audit(1752037951.053:729): avc: denied { rmdir } for pid=6988 comm="syz-executor" name="bus" dev="tmpfs" ino=1890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 198.453200][T11964] tmpfs: Unknown parameter '0xffffffffffffffff' [ 198.540267][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.632105][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.633443][ T40] audit: type=1400 audit(1752037951.333:730): avc: denied { node_bind } for pid=11965 comm="syz.1.1529" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 198.864401][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.136399][T11751] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.142603][ T40] audit: type=1400 audit(1752037951.843:731): avc: denied { read } for pid=11981 comm="syz.5.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 199.190623][T11751] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.222188][T11751] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.228911][T11751] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.459461][T11751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.493755][T11751] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.513969][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.519194][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.567755][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.593807][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.602121][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.634053][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.642517][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.751841][ T8335] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 199.947438][ T8335] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.990750][ T8335] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.021001][ T8335] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.025715][ T8335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.039800][T12017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12017 comm=syz.5.1537 [ 200.067411][T12018] binder: binder_mmap: 12014 200000ffc000-200000fff000 bad vm_flags failed -1 [ 200.081491][T12001] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 200.109077][ T8335] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.137758][T11751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.226748][T11751] veth0_vlan: entered promiscuous mode [ 200.243660][T11751] veth1_vlan: entered promiscuous mode [ 200.273368][T11751] veth0_macvtap: entered promiscuous mode [ 200.310938][T11751] veth1_macvtap: entered promiscuous mode [ 200.346661][T11751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.365191][T11751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.378828][T11751] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.386673][T11751] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.400703][T11751] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.406105][T11751] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.476389][ T6041] usb 6-1: USB disconnect, device number 20 [ 200.543402][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.744253][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.772164][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.801552][T12041] overlayfs: failed to clone upperpath [ 200.830693][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.837829][T12043] __nla_validate_parse: 6 callbacks suppressed [ 200.837846][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 200.868115][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.913552][T12043] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.919985][T12043] bridge0: port 1() entered disabled state [ 201.075851][T12050] nfs: Unknown parameter 'nofsce0' [ 201.313684][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.593666][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1547'. [ 201.731011][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.237735][ T40] audit: type=1400 audit(1752037954.933:732): avc: denied { bind } for pid=12080 comm="syz.5.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 202.265242][ T40] audit: type=1400 audit(1752037954.953:733): avc: denied { listen } for pid=12080 comm="syz.5.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 202.321669][ T1149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.059344][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.460537][ T1149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.786417][ T1149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.923955][ T5316] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.942227][ T5316] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.948087][ T5316] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.959370][ T5316] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.998198][ T5316] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.026564][ T1149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.451614][ T1149] bridge_slave_1: left allmulticast mode [ 204.454120][ T1149] bridge_slave_1: left promiscuous mode [ 204.456931][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.498924][ T1149] bridge_slave_0: left allmulticast mode [ 204.502067][ T1149] bridge_slave_0: left promiscuous mode [ 204.505028][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.533194][T12105] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1556'. [ 204.558355][T12105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.565301][T12105] IPv6: NLM_F_CREATE should be set when creating new route [ 204.764039][T12111] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 204.767160][T12111] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.773523][T12111] vhci_hcd vhci_hcd.0: Device attached [ 204.816427][T12111] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 204.819558][T12111] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 204.840187][T12111] vhci_hcd vhci_hcd.0: Device attached [ 204.870223][T12111] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16) [ 204.873784][T12111] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 204.891983][T12111] vhci_hcd vhci_hcd.0: Device attached [ 204.906976][T12111] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 204.950550][T12111] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 204.957035][T12111] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 205.021745][T12111] vhci_hcd vhci_hcd.0: Device attached [ 205.034482][ T9] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 205.047775][T12131] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(23) [ 205.050667][T12131] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 205.112507][T12131] vhci_hcd vhci_hcd.0: Device attached [ 205.130085][T12111] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.136870][T12111] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.169805][T12111] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 205.193183][T12132] vhci_hcd: connection closed [ 205.201725][ T13] vhci_hcd: stop threads [ 205.206759][ T13] vhci_hcd: release socket [ 205.209260][T12129] vhci_hcd: connection closed [ 205.210170][ T13] vhci_hcd: disconnect device [ 205.215021][ T13] vhci_hcd: stop threads [ 205.217102][T12119] vhci_hcd: connection reset by peer [ 205.217409][T12127] vhci_hcd: connection closed [ 205.219600][T12123] vhci_hcd: connection closed [ 205.236621][ T13] vhci_hcd: release socket [ 205.236692][ T13] vhci_hcd: disconnect device [ 205.279286][ T13] vhci_hcd: stop threads [ 205.283391][ T13] vhci_hcd: release socket [ 205.287409][ T13] vhci_hcd: disconnect device [ 205.291781][ T13] vhci_hcd: stop threads [ 205.293432][ T13] vhci_hcd: release socket [ 205.303734][ T13] vhci_hcd: disconnect device [ 205.309299][ T13] vhci_hcd: stop threads [ 205.314081][ T13] vhci_hcd: release socket [ 205.326739][ T13] vhci_hcd: disconnect device [ 205.823088][T12136] random: crng reseeded on system resumption [ 205.826824][ T40] audit: type=1400 audit(1752037958.513:734): avc: denied { append } for pid=12134 comm="syz.4.1560" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 205.909659][T12136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=12136 comm=syz.4.1560 [ 205.913669][T12136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=12136 comm=syz.4.1560 [ 205.918589][T12136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=12136 comm=syz.4.1560 [ 205.923104][T12136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=12136 comm=syz.4.1560 [ 205.968295][T12136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=12136 comm=syz.4.1560 [ 205.973577][T12136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=12136 comm=syz.4.1560 [ 206.000708][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.016041][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.040164][ T1149] bond0 (unregistering): Released all slaves [ 206.063819][ T40] audit: type=1400 audit(1752037958.753:735): avc: denied { getopt } for pid=12138 comm="syz.1.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 206.113888][T12098] chnl_net:caif_netlink_parms(): no params data found [ 206.114041][ T5316] Bluetooth: hci3: command tx timeout [ 206.602326][T12154] netlink: 'syz.1.1565': attribute type 1 has an invalid length. [ 206.698141][T12154] bond0: entered promiscuous mode [ 206.722005][T12154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.731415][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 206.751127][T12154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12154 comm=syz.1.1565 [ 206.827285][T12155] nvme_fabrics: missing parameter 'transport=%s' [ 206.830498][T12155] nvme_fabrics: missing parameter 'nqn=%s' [ 206.905748][T12098] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.940822][T12098] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.953737][T12098] bridge_slave_0: entered allmulticast mode [ 206.959737][T12098] bridge_slave_0: entered promiscuous mode [ 206.975730][ T10] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.993859][ T10] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 206.995559][T12162] xt_hashlimit: overflow, try lower: 18446744073709551615/9 [ 207.007303][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.024784][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.049893][T12152] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 207.080517][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.236107][T12098] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.239429][T12098] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.242861][T12098] bridge_slave_1: entered allmulticast mode [ 207.247752][T12098] bridge_slave_1: entered promiscuous mode [ 207.255647][T12165] netlink: 'syz.1.1567': attribute type 29 has an invalid length. [ 207.324707][ T6024] usb 9-1: USB disconnect, device number 16 [ 207.396422][T12169] netlink: 'syz.1.1567': attribute type 29 has an invalid length. [ 207.476668][ T1149] hsr_slave_0: left promiscuous mode [ 207.482211][T12171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1568'. [ 207.505995][ T1149] hsr_slave_1: left promiscuous mode [ 207.523369][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.526890][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.586202][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.590053][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.718917][ T40] audit: type=1326 audit(1752037960.413:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12174 comm="syz.1.1570" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc372f8e929 code=0x0 [ 207.774012][ T1149] veth1_macvtap: left promiscuous mode [ 207.794661][ T1149] veth0_macvtap: left promiscuous mode [ 207.800131][ T1149] veth1_vlan: left promiscuous mode [ 207.803306][ T1149] veth0_vlan: left promiscuous mode [ 207.804861][ T40] audit: type=1400 audit(1752037960.503:737): avc: denied { nlmsg_write } for pid=12177 comm="syz.5.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 207.818223][ T40] audit: type=1107 audit(1752037960.513:738): pid=12177 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 208.206040][ T5316] Bluetooth: hci3: command tx timeout [ 208.903870][ T40] audit: type=1400 audit(1752037961.603:739): avc: granted { setsecparam } for pid=12191 comm="syz.1.1574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 210.178119][ T9] vhci_hcd: vhci_device speed not set [ 210.348095][ T5316] Bluetooth: hci3: command tx timeout [ 211.971641][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 212.435391][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 212.439854][ T5316] Bluetooth: hci3: command tx timeout [ 215.261478][T12212] tipc: Enabling of bearer rejected, failed to enable media [ 215.276651][T12098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.313052][T12098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.567994][T12234] netlink: 1936 bytes leftover after parsing attributes in process `syz.1.1581'. [ 215.886809][T12098] team0: Port device team_slave_0 added [ 215.893563][T12098] team0: Port device team_slave_1 added [ 216.062196][T12246] bad cache= option: none [ 216.062196][T12246] [ 216.066270][T12246] CIFS: VFS: bad cache= option: none [ 216.225196][T12098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.271390][T12098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.341698][T12098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.404708][T12098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.427618][T12098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.459417][T12098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.696840][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1588'. [ 216.962544][T12098] hsr_slave_0: entered promiscuous mode [ 216.966164][T12098] hsr_slave_1: entered promiscuous mode [ 217.004367][T12098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.024654][T12098] Cannot create hsr debugfs directory [ 217.413251][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 217.503902][T12301] syz.4.1596: attempt to access beyond end of device [ 217.503902][T12301] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 217.515402][T12301] befs: (nbd4): unable to read superblock [ 217.643766][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.662419][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 217.667567][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 217.673089][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.712950][T12290] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.745279][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 217.928235][ C3] vkms_vblank_simulate: vblank timer overrun [ 218.075430][T12313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1598'. [ 218.119173][ C3] vkms_vblank_simulate: vblank timer overrun [ 218.131131][ T9] usb 6-1: USB disconnect, device number 21 [ 218.179227][ C3] vkms_vblank_simulate: vblank timer overrun [ 218.383215][ C3] vkms_vblank_simulate: vblank timer overrun [ 218.397205][ T12] Bluetooth: Error in BCSP hdr checksum [ 218.652322][ T12] Bluetooth: Error in BCSP hdr checksum [ 218.763201][ C3] vkms_vblank_simulate: vblank timer overrun [ 218.843757][T12331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1601'. [ 218.925209][ T12] Bluetooth: Error in BCSP hdr checksum [ 218.926650][ C3] vkms_vblank_simulate: vblank timer overrun [ 219.078681][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1602'. [ 219.107507][ C3] vkms_vblank_simulate: vblank timer overrun [ 219.144724][T12334] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1602'. [ 219.192520][ C3] vkms_vblank_simulate: vblank timer overrun [ 219.291982][T12098] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.308832][T12098] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.332087][T12098] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.357346][T12098] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.524145][T12351] netdevsim netdevsim5 ªªªªªª: renamed from netdevsim0 [ 219.591224][ C3] vkms_vblank_simulate: vblank timer overrun [ 219.731657][T12359] misc userio: No port type given on /dev/userio [ 219.814356][T12098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.835604][T12098] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.838102][T12365] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 219.869090][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.873169][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.896674][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.901464][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.924311][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1608'. [ 220.305942][T12098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.308613][ T55] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 220.346449][ C3] vkms_vblank_simulate: vblank timer overrun [ 220.375027][T12098] veth0_vlan: entered promiscuous mode [ 220.391552][T12098] veth1_vlan: entered promiscuous mode [ 220.420192][ T5316] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 220.475781][T12098] veth0_macvtap: entered promiscuous mode [ 220.495577][T12098] veth1_macvtap: entered promiscuous mode [ 220.533887][ T55] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 220.535405][T12098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.559791][ C3] vkms_vblank_simulate: vblank timer overrun [ 220.615033][ T55] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 220.636994][ T55] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 220.639960][T12098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.650652][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.688815][ C3] vkms_vblank_simulate: vblank timer overrun [ 220.691176][T12098] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.717646][T12098] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.724302][T12098] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.730188][T12098] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.739726][T12372] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.758666][ C3] vkms_vblank_simulate: vblank timer overrun [ 220.794671][ T55] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 221.047789][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.055092][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.135794][ T837] usb 6-1: USB disconnect, device number 22 [ 221.168864][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.171938][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.498408][ C3] vkms_vblank_simulate: vblank timer overrun [ 221.502487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 221.595570][ C3] vkms_vblank_simulate: vblank timer overrun [ 221.767239][ C3] vkms_vblank_simulate: vblank timer overrun [ 221.925763][T12412] vlan3: entered promiscuous mode [ 221.935824][T12424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1617'. [ 221.943184][ C3] vkms_vblank_simulate: vblank timer overrun [ 221.958850][T12412] vlan3: entered allmulticast mode [ 221.962688][T12412] hsr_slave_1: entered allmulticast mode [ 221.989698][T12419] overlayfs: failed to clone upperpath [ 222.025889][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1616'. [ 222.106944][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1614'. [ 222.206610][T12426] 9pnet: p9_errstr2errno: server reported unknown error œª°@˜’œª°@ [ 222.751322][ T1475] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 222.777861][T12431] could not allocate digest TFM handle cryptd(blake2b-160) [ 222.979207][T12440] netlink: 'syz.5.1620': attribute type 10 has an invalid length. [ 223.222113][T12450] overlayfs: failed to clone lowerpath [ 223.314479][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.442806][ T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 223.631988][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.637276][ T9] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 223.644337][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.651815][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.671718][T12447] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.683554][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 223.774469][ C3] vkms_vblank_simulate: vblank timer overrun [ 223.921507][ T6005] usb 9-1: USB disconnect, device number 17 [ 224.496825][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.555385][ T40] audit: type=1400 audit(1752037977.243:740): avc: denied { append } for pid=12455 comm="syz.1.1625" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.649140][T12458] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 224.698376][T12459] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1625'. [ 224.741340][T12459] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 224.860010][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1627'. [ 224.866406][T12464] misc userio: No port type given on /dev/userio [ 225.076439][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.267179][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.295878][ T5958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.319392][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.327847][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.394876][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.432783][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.517236][ T1243] Bluetooth: hci4: Frame reassembly failed (-84) [ 225.688934][T12472] SELinux: ebitmap start bit (511) is not a multiple of the map unit size (64) [ 225.756482][T12472] SELinux: failed to load policy [ 226.161292][ T61] bridge_slave_1: left allmulticast mode [ 226.179612][ T61] bridge_slave_1: left promiscuous mode [ 226.183426][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.223919][ T61] bridge_slave_0: left allmulticast mode [ 226.227094][ T61] bridge_slave_0: left promiscuous mode [ 226.232314][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.083446][ T13] wlan0: Trigger new scan to find an IBSS to join [ 227.282946][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.292920][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.306146][ T61] bond0 (unregistering): Released all slaves [ 227.328290][T12475] chnl_net:caif_netlink_parms(): no params data found [ 227.337832][T12492] unknown channel width for channel at 909000KHz? [ 227.468118][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 227.507510][T12498] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1637'. [ 227.538127][ T5316] Bluetooth: hci4: command 0x1003 tx timeout [ 227.538221][ T5968] Bluetooth: hci3: command tx timeout [ 227.544909][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 227.682237][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 227.722425][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 227.727805][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 227.739101][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.746009][T12495] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 227.754960][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.090971][ T55] usb 6-1: USB disconnect, device number 24 [ 228.131089][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1642'. [ 228.247068][T12475] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.255417][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.259481][T12475] bridge_slave_0: entered allmulticast mode [ 228.263377][T12475] bridge_slave_0: entered promiscuous mode [ 228.439234][ T40] audit: type=1326 audit(1752037981.133:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12533 comm="syz.5.1643" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fb48578e929 code=0x0 [ 228.457309][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.462407][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.466190][T12475] bridge_slave_1: entered allmulticast mode [ 228.475681][T12475] bridge_slave_1: entered promiscuous mode [ 228.577630][T12540] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1644'. [ 228.645684][T12543] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1645'. [ 228.992221][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1648'. [ 229.104711][T12475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.110833][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1650'. [ 229.212588][T12549] netlink: 'syz.5.1647': attribute type 4 has an invalid length. [ 229.235347][T12475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.535144][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.562167][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.602031][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.605451][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.620390][ T5958] Bluetooth: hci3: command tx timeout [ 229.628977][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.660702][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.664152][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.677116][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.681122][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.685172][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.694266][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.703616][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.709892][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.715503][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.716076][ T61] hsr_slave_0: left promiscuous mode [ 229.729801][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.729849][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.729869][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.729889][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.729908][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.729927][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.729946][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.729963][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.729979][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.729997][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730015][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730034][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730053][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730072][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730091][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730110][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730129][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730148][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730168][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730187][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730205][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730223][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730241][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730260][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730279][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730298][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730317][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730336][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730355][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730374][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730393][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730413][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730432][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730451][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730481][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730500][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730519][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730538][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730557][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730577][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730595][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730614][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730632][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730650][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730669][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730687][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730706][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730725][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730744][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730763][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730782][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730799][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730818][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730836][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730854][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730872][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730890][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730910][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730929][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.730947][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731002][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731022][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731042][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731061][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731080][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731099][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731118][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731136][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731152][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731169][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731188][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731205][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731224][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731242][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731260][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731278][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731295][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731312][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731330][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731348][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731367][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731386][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731404][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731422][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731439][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731457][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731483][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731501][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.731519][ T8335] hid-generic 0006:0006:0005.0007: unknown main item tag 0x0 [ 229.737851][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.767549][ T8335] hid-generic 0006:0006:0005.0007: hidraw0: VIRTUAL HID vffffff.fc Device [syz0] on syz0 [ 230.328607][ T61] hsr_slave_1: left promiscuous mode [ 230.331819][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.335835][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.393601][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.403685][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.475143][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.622520][ T61] veth1_macvtap: left promiscuous mode [ 230.634640][ T61] veth0_macvtap: left promiscuous mode [ 230.644660][ T61] veth1_vlan: left promiscuous mode [ 230.673052][ T61] veth0_vlan: left promiscuous mode [ 231.180777][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.475105][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.701016][ T40] audit: type=1400 audit(1752037984.383:742): avc: denied { map } for pid=12588 comm="syz.1.1656" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 231.710207][ T5958] Bluetooth: hci3: command tx timeout [ 232.002023][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.033373][ T1243] wlan0: Trigger new scan to find an IBSS to join [ 232.178582][ T6047] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 232.350344][ T6047] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.355287][ T6047] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 232.360646][ T6047] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.374063][ T6047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.384159][T12591] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.395942][ T6047] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.626384][ T55] usb 6-1: USB disconnect, device number 25 [ 233.034462][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.117431][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.402105][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1658'. [ 233.419084][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.484641][T12595] netlink: 'syz.1.1659': attribute type 11 has an invalid length. [ 233.488142][T12595] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1659'. [ 233.778132][ T5958] Bluetooth: hci3: command tx timeout [ 233.883268][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.126087][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.133878][ T61] team0 (unregistering): Port device team_slave_1 removed [ 234.369179][ T61] team0 (unregistering): Port device team_slave_0 removed [ 235.823447][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.441909][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.223830][T12475] team0: Port device team_slave_0 added [ 237.325381][T12475] team0: Port device team_slave_1 added [ 237.672561][T12622] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 237.687262][T12475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.695191][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.715434][T12475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.735481][T12475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.746145][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.776878][T12475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.216950][T12475] hsr_slave_0: entered promiscuous mode [ 238.222002][T12475] hsr_slave_1: entered promiscuous mode [ 238.229090][T12475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.238629][T12475] Cannot create hsr debugfs directory [ 238.258263][ T9] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 238.440925][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.448817][ T9] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 238.459542][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.467159][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.701803][T12634] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 238.712712][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.764685][T12643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1667'. [ 238.818425][T12642] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1667'. [ 238.929657][ T29] usb 9-1: USB disconnect, device number 18 [ 239.163228][T12650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1668'. [ 239.342516][ T40] audit: type=1400 audit(1752037992.033:743): avc: denied { append } for pid=12654 comm="syz.1.1669" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 239.988161][ T40] audit: type=1400 audit(1752037992.683:744): avc: denied { map } for pid=12661 comm="syz.4.1670" path="socket:[48378]" dev="sockfs" ino=48378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 240.462128][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1674'. [ 240.494182][ T40] audit: type=1400 audit(1752037993.183:745): avc: denied { setattr } for pid=12667 comm="syz.4.1673" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 240.871064][T12679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1677'. [ 241.197574][T12692] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1680'. [ 241.545822][ T40] audit: type=1400 audit(1752037994.243:746): avc: denied { watch_sb } for pid=12691 comm="syz.5.1680" path="/484" dev="tmpfs" ino=2701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 241.800138][T12475] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 241.823748][T12475] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 241.931376][T12475] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 242.022734][T12475] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 242.115911][T12720] overlayfs: failed to clone upperpath [ 242.121310][ T40] audit: type=1400 audit(1752037994.813:747): avc: denied { write } for pid=12717 comm="syz.5.1686" lport=39287 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 242.172996][ T40] audit: type=1400 audit(1752037994.813:748): avc: denied { setopt } for pid=12717 comm="syz.5.1686" lport=39287 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 242.238634][ T55] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 242.248317][T12475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.265193][T12727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1687'. [ 242.378494][T12475] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.421915][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.429010][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.459022][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.469141][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.500353][ T55] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.504334][ T55] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 242.510572][ T55] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.539610][ T55] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 242.547119][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.574034][ T55] usb 6-1: Product: syz [ 242.576755][ T55] usb 6-1: Manufacturer: syz [ 242.580135][ T55] usb 6-1: SerialNumber: syz [ 242.610110][ T55] hub 6-1:1.0: bad descriptor, ignoring hub [ 242.613494][ T55] hub 6-1:1.0: probe with driver hub failed with error -5 [ 242.767113][T12745] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1692'. [ 242.788591][T12745] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1692'. [ 242.808645][ T55] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 242.850347][ T55] usb 6-1: USB disconnect, device number 26 [ 242.879081][ T55] usblp0: removed [ 243.029513][T12475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.150257][T12475] veth0_vlan: entered promiscuous mode [ 243.182477][T12475] veth1_vlan: entered promiscuous mode [ 243.241173][T12475] veth0_macvtap: entered promiscuous mode [ 243.249286][T12475] veth1_macvtap: entered promiscuous mode [ 243.268722][T12475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.290029][T12475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.302646][T12475] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.307677][T12475] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.316676][T12475] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.323633][T12475] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.379271][ T55] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 243.568073][ T1243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.571255][ T55] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.587621][ T1243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.604544][ T55] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 243.604579][ T55] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.619594][ T55] usb 6-1: string descriptor 0 read error: -22 [ 243.631404][ T55] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 243.636316][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.645508][ T55] hub 6-1:1.0: bad descriptor, ignoring hub [ 243.650325][ T55] hub 6-1:1.0: probe with driver hub failed with error -5 [ 243.656952][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.664284][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.797705][T12775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1697'. [ 243.881502][T12711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.898039][T12711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.912668][T12778] netlink: 'syz.5.1698': attribute type 1 has an invalid length. [ 243.974778][T12780] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1698'. [ 243.977112][ T55] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 243.995759][T12778] 8021q: adding VLAN 0 to HW filter on device bond6 [ 244.000750][T12780] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1698'. [ 244.031761][ T55] usb 6-1: USB disconnect, device number 27 [ 244.054414][ T55] usblp0: removed [ 244.505034][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1704'. [ 244.508611][T12806] netlink: 'syz.5.1704': attribute type 2 has an invalid length. [ 244.511228][T12806] netlink: 'syz.5.1704': attribute type 1 has an invalid length. [ 244.513969][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1704'. [ 244.872136][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1707'. [ 245.136199][T12834] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1710'. [ 245.140070][T12834] netem: invalid attributes len -17 [ 245.142079][T12834] netem: change failed [ 245.344346][T12840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12840 comm=syz.1.1710 [ 245.562136][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'. [ 245.755111][ T40] audit: type=1400 audit(1752037998.453:749): avc: denied { write } for pid=12859 comm="syz.4.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.933072][ T1234] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.314906][ T1234] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.439930][T12872] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 247.513609][ T5968] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.561496][ T5968] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.567796][ T5968] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.578704][ T5968] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.586373][ T5968] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.611769][ T1234] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.668887][ T40] audit: type=1400 audit(1752038000.363:750): avc: denied { write } for pid=12886 comm="syz.4.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 247.913873][ T1234] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.007414][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1727'. [ 248.420257][T12883] chnl_net:caif_netlink_parms(): no params data found [ 248.696774][T12917] xt_bpf: check failed: parse error [ 248.701712][T12917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9498 sclass=netlink_route_socket pid=12917 comm=syz.5.1734 [ 248.940257][ T1234] bridge_slave_1: left allmulticast mode [ 248.942674][ T1234] bridge_slave_1: left promiscuous mode [ 248.945449][ T1234] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.969578][ T1234] bridge_slave_0: left allmulticast mode [ 248.973014][ T1234] bridge_slave_0: left promiscuous mode [ 248.975662][ T1234] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.788136][ T5968] Bluetooth: hci3: command tx timeout [ 249.900372][ T1234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.936808][ T1234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.951152][ T1234] bond0 (unregistering): Released all slaves [ 250.113690][T12883] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.124639][T12937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1739'. [ 250.133812][T12883] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.212164][T12883] bridge_slave_0: entered allmulticast mode [ 250.226556][T12883] bridge_slave_0: entered promiscuous mode [ 250.248850][T12883] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.252042][T12883] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.254828][T12883] bridge_slave_1: entered allmulticast mode [ 250.262826][T12883] bridge_slave_1: entered promiscuous mode [ 250.557429][ T40] audit: type=1326 audit(1752038003.253:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.4.1738" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4b8f8e929 code=0x0 [ 250.592084][ T40] audit: type=1400 audit(1752038003.263:752): avc: denied { read } for pid=12940 comm="syz.5.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 250.672759][T12883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.740140][T12883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.097318][T12883] team0: Port device team_slave_0 added [ 251.121579][T12883] team0: Port device team_slave_1 added [ 251.359574][T12951] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 251.415075][ T1234] hsr_slave_0: left promiscuous mode [ 251.422696][ T1234] hsr_slave_1: left promiscuous mode [ 251.427292][ T1234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.450690][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.493074][ T1234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.496724][ T1234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.589874][ T1234] veth1_macvtap: left promiscuous mode [ 251.593787][ T1234] veth0_macvtap: left promiscuous mode [ 251.600773][ T1234] veth1_vlan: left promiscuous mode [ 251.605765][ T1234] veth0_vlan: left promiscuous mode [ 251.878255][ T5968] Bluetooth: hci3: command tx timeout [ 252.971816][ T55] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 253.153751][ T55] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.180164][ T55] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 253.187445][ T55] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 253.197720][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.211780][T12968] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.252383][ T55] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 253.450255][T12977] netlink: 'syz.4.1748': attribute type 3 has an invalid length. [ 253.454861][T12977] netlink: 'syz.4.1748': attribute type 1 has an invalid length. [ 253.469459][ T837] usb 6-1: USB disconnect, device number 28 [ 253.580259][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1749'. [ 253.939478][ T5968] Bluetooth: hci3: command tx timeout [ 255.204811][ T1234] team0 (unregistering): Port device team_slave_1 removed [ 255.572339][ T1234] team0 (unregistering): Port device team_slave_0 removed [ 256.018502][ T5968] Bluetooth: hci3: command tx timeout [ 258.673864][T12957] macvlan2: entered promiscuous mode [ 258.679410][T12957] macvlan2: entered allmulticast mode [ 258.746862][T12883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.750208][T12883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.793807][T12883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.821874][T12883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.825480][T12883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.878733][T12883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.883214][T12994] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1754'. [ 258.913278][T12994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.157578][T12994] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1754'. [ 259.231768][T12883] hsr_slave_0: entered promiscuous mode [ 259.240712][T12883] hsr_slave_1: entered promiscuous mode [ 259.246676][T12883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.252507][T12883] Cannot create hsr debugfs directory [ 259.354266][T13009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'. [ 259.659553][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1760'. [ 260.853434][T13043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1768'. [ 260.997387][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.006229][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.766477][T12883] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.873316][T12883] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.900024][T12883] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.935752][T12883] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.016942][T13093] tmpfs: Bad value for 'mpol' [ 262.125864][T13097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1778'. [ 262.139848][T12883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.196727][T12883] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.216174][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.222661][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.251603][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.256458][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.397556][T13108] fuse: Bad value for 'fd' [ 262.435395][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1781'. [ 262.865437][T13140] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 262.942477][T12883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.987828][T12883] veth0_vlan: entered promiscuous mode [ 263.056067][T12883] veth1_vlan: entered promiscuous mode [ 263.085003][T12883] veth0_macvtap: entered promiscuous mode [ 263.133021][T12883] veth1_macvtap: entered promiscuous mode [ 263.253274][T12883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.274576][T12883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.290073][T13154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'. [ 263.358930][T12883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.369649][T12883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.398236][T12883] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.403082][T12883] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.609569][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.633091][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.697156][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.701320][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.760237][T13165] overlayfs: missing 'workdir' [ 263.899065][ T40] audit: type=1400 audit(1752038016.583:753): avc: denied { accept } for pid=13163 comm="/dev/" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 264.291095][ T40] audit: type=1326 audit(1752038016.983:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.1.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc372f8e929 code=0x7fc00000 [ 264.300644][T13173] macvlan0: left allmulticast mode [ 264.302690][T13173] veth1_vlan: left allmulticast mode [ 264.305577][ T40] audit: type=1326 audit(1752038016.983:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.1.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc372f8e929 code=0x7fc00000 [ 264.366279][ T40] audit: type=1326 audit(1752038016.983:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.1.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc372f8e929 code=0x7fc00000 [ 264.387474][ T40] audit: type=1326 audit(1752038016.983:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.1.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc372f8e929 code=0x7fc00000 [ 264.409373][ T40] audit: type=1326 audit(1752038016.983:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.1.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc372f8e929 code=0x7fc00000 [ 264.439758][ T40] audit: type=1326 audit(1752038016.983:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.1.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc372f8e929 code=0x7fc00000 [ 264.460982][ T40] audit: type=1326 audit(1752038016.983:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.1.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc372f8e929 code=0x7fc00000 [ 264.490809][ T40] audit: type=1326 audit(1752038016.983:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.1.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc372f8e929 code=0x7fc00000 [ 264.511713][ T40] audit: type=1326 audit(1752038016.983:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13157 comm="syz.1.1790" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc372f8e929 code=0x7fc00000 [ 264.855214][T13185] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 264.871599][T13185] overlayfs: failed to set xattr on upper [ 264.874828][T13185] overlayfs: ...falling back to redirect_dir=nofollow. [ 264.879193][T13185] overlayfs: ...falling back to metacopy=off. [ 264.884118][T13185] overlayfs: ...falling back to index=off. [ 264.893134][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1798'. [ 264.908235][T13185] overlayfs: ...falling back to uuid=null. [ 265.299515][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 265.476313][ T1143] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 265.537070][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 265.543783][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 265.548477][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 265.568646][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.577440][T13196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.612442][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 265.889747][ T10] usb 6-1: USB disconnect, device number 29 [ 266.112908][ T1243] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.972419][ T1243] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.113682][ T1243] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.207814][ T1243] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.344536][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1808'. [ 267.738757][ T5958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.771508][T13243] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=13243 comm=syz.1.1812 [ 267.792039][T13243] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=41 sclass=netlink_audit_socket pid=13243 comm=syz.1.1812 [ 267.806216][ T5958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.810699][T13243] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=42 sclass=netlink_audit_socket pid=13243 comm=syz.1.1812 [ 267.844266][ T5958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.866806][ T5958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.872538][T13243] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=13243 comm=syz.1.1812 [ 267.877155][ T1243] bridge_slave_1: left allmulticast mode [ 267.891292][T13243] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=39 sclass=netlink_audit_socket pid=13243 comm=syz.1.1812 [ 267.891324][T13243] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=13243 comm=syz.1.1812 [ 267.891343][T13243] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=13243 comm=syz.1.1812 [ 267.891359][T13243] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=55 sclass=netlink_audit_socket pid=13243 comm=syz.1.1812 [ 267.933809][ T1243] bridge_slave_1: left promiscuous mode [ 267.937746][ T5958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 267.937781][ T1243] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.999143][ T1243] bridge_slave_0: left allmulticast mode [ 267.999166][ T1243] bridge_slave_0: left promiscuous mode [ 267.999326][ T1243] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.384983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 268.608339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 268.977515][T13275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1820'. [ 269.637493][ T1243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.644624][ T1243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.667063][ T1243] bond0 (unregistering): Released all slaves [ 269.766222][T13284] netlink: 'syz.5.1822': attribute type 7 has an invalid length. [ 269.783777][T13284] netlink: 'syz.5.1822': attribute type 8 has an invalid length. [ 269.919694][T13295] overlay: Unknown parameter 'euid>00000000000000000000' [ 270.020719][ T5958] Bluetooth: hci3: command tx timeout [ 270.251882][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1829'. [ 270.278169][ T40] kauditd_printk_skb: 425 callbacks suppressed [ 270.278187][ T40] audit: type=1400 audit(1752038022.973:1188): avc: denied { mount } for pid=13303 comm="syz.1.1830" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 270.395709][ T40] audit: type=1400 audit(1752038023.093:1189): avc: denied { mounton } for pid=13303 comm="syz.1.1830" path="/519/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 270.514208][ T40] audit: type=1400 audit(1752038023.163:1190): avc: denied { unmount } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 270.640215][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1833'. [ 270.645289][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1833'. [ 270.881049][ C3] vkms_vblank_simulate: vblank timer overrun [ 271.234697][ C3] vkms_vblank_simulate: vblank timer overrun [ 271.502182][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1839'. [ 271.579088][ T1243] hsr_slave_0: left promiscuous mode [ 271.595500][ T1243] hsr_slave_1: left promiscuous mode [ 271.601809][ T1243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.605098][ T1243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.617373][ T1243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.621355][ T1243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.770474][ C3] vkms_vblank_simulate: vblank timer overrun [ 271.816901][ T1243] veth1_macvtap: left promiscuous mode [ 271.819847][ T1243] veth0_macvtap: left promiscuous mode [ 271.822482][ T1243] veth1_vlan: left promiscuous mode [ 271.824986][ T1243] veth0_vlan: left promiscuous mode [ 271.872501][ C3] vkms_vblank_simulate: vblank timer overrun [ 271.912357][ C3] vkms_vblank_simulate: vblank timer overrun [ 272.098227][ T5958] Bluetooth: hci3: command tx timeout [ 272.734885][ C3] vkms_vblank_simulate: vblank timer overrun [ 272.795743][ C3] vkms_vblank_simulate: vblank timer overrun [ 272.866778][ C3] vkms_vblank_simulate: vblank timer overrun [ 272.982714][ C3] vkms_vblank_simulate: vblank timer overrun [ 273.018733][ C3] vkms_vblank_simulate: vblank timer overrun [ 273.235609][ C3] vkms_vblank_simulate: vblank timer overrun [ 273.694820][ C3] vkms_vblank_simulate: vblank timer overrun [ 273.862394][ C3] vkms_vblank_simulate: vblank timer overrun [ 274.064882][ C3] vkms_vblank_simulate: vblank timer overrun [ 274.094052][ C3] vkms_vblank_simulate: vblank timer overrun [ 274.178415][ T5958] Bluetooth: hci3: command tx timeout [ 274.634318][ C3] vkms_vblank_simulate: vblank timer overrun [ 275.096673][T13387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1849'. [ 275.295895][ C3] vkms_vblank_simulate: vblank timer overrun [ 275.346770][ C3] vkms_vblank_simulate: vblank timer overrun [ 275.382661][ C3] vkms_vblank_simulate: vblank timer overrun [ 275.410666][ C3] vkms_vblank_simulate: vblank timer overrun [ 275.429007][T13394] sysfs: Unknown parameter 'system.posix_acl_access' [ 275.449366][ C3] vkms_vblank_simulate: vblank timer overrun [ 275.542045][ T1243] team0 (unregistering): Port device team_slave_1 removed [ 275.679042][ C3] vkms_vblank_simulate: vblank timer overrun [ 276.175583][ T1243] team0 (unregistering): Port device team_slave_0 removed [ 276.268189][ T5958] Bluetooth: hci3: command tx timeout [ 276.819050][ T6041] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 277.020514][ T6041] usb 6-1: device descriptor read/64, error -71 [ 277.268466][ T6041] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 277.395000][ T6041] usb 6-1: device descriptor read/64, error -71 [ 277.509882][ T6041] usb usb6-port1: attempt power cycle [ 277.878767][ T6041] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 277.910929][ T6041] usb 6-1: device descriptor read/8, error -71 [ 278.178093][ T6041] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 278.208764][ T6041] usb 6-1: device descriptor read/8, error -71 [ 278.318407][ T6041] usb usb6-port1: unable to enumerate USB device [ 279.153637][T13241] chnl_net:caif_netlink_parms(): no params data found [ 279.227536][T13413] 9pnet: Found fid 0 not clunked [ 279.231271][T13413] 9pnet: Tag 0 still in use [ 279.246187][T13413] ------------[ cut here ]------------ [ 279.249624][T13413] refcount_t: underflow; use-after-free. [ 279.264481][T13413] WARNING: CPU: 2 PID: 13413 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 279.288259][T13413] Modules linked in: [ 279.289702][T13413] CPU: 2 UID: 0 PID: 13413 Comm: syz.5.1855 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 279.301246][T13413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.305676][T13413] RIP: 0010:refcount_warn_saturate+0x14a/0x210 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 279.308066][T13413] Code: ff 89 de e8 b8 94 df fc 84 db 0f 85 66 ff ff ff e8 cb 99 df fc c6 05 bd 7d b5 0b 01 90 48 c7 c7 20 3b 15 8c e8 b7 92 9e fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 a8 99 df fc 0f b6 1d 98 7d b5 0b 31 [ 279.330113][T13413] RSP: 0018:ffffc90005a1f9e0 EFLAGS: 00010282 [ 279.333791][T13413] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90006f91000 [ 279.338460][T13413] RDX: 0000000000080000 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 279.344718][T13413] RBP: ffff88803be9aaa8 R08: 0000000000000001 R09: 0000000000000000 [ 279.349376][T13413] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88803be9aaa8 [ 279.354010][T13413] R13: ffff8880555c1c00 R14: dffffc0000000000 R15: 1ffff92000b43f47 [ 279.359013][T13413] FS: 00007fb4865326c0(0000) GS:ffff8880d6916000(0000) knlGS:0000000000000000 [ 279.364475][T13413] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.368792][T13413] CR2: 00007fb485986560 CR3: 00000000563dc000 CR4: 0000000000352ef0 [ 279.375420][T13413] Call Trace: [ 279.377576][T13413] [ 279.379580][T13413] p9_req_put+0x1ec/0x250 [ 279.382322][T13413] p9_client_destroy+0x22b/0x480 [ 279.385360][T13413] ? __pfx_p9_client_destroy+0x10/0x10 [ 279.388867][T13413] ? v9fs_session_init+0xb87/0x1a80 [ 279.391831][T13413] v9fs_session_init+0xbab/0x1a80 [ 279.395365][T13413] ? __pfx_v9fs_session_init+0x10/0x10 [ 279.398502][T13413] v9fs_mount+0xc5/0xa30 [ 279.400724][T13413] ? __pfx_v9fs_mount+0x10/0x10 [ 279.403336][T13413] ? cap_capable+0xb3/0x250 [ 279.405749][T13413] ? __pfx_v9fs_mount+0x10/0x10 [ 279.408376][T13413] legacy_get_tree+0x109/0x220 [ 279.410862][T13413] vfs_get_tree+0x8e/0x340 [ 279.413130][T13413] path_mount+0x1414/0x2020 [ 279.415784][T13413] ? kmem_cache_free+0x2d1/0x4d0 [ 279.419202][T13413] ? __pfx_path_mount+0x10/0x10 [ 279.422349][T13413] ? putname+0x154/0x1a0 [ 279.425052][T13413] __x64_sys_mount+0x28d/0x310 [ 279.428379][T13413] ? __pfx___x64_sys_mount+0x10/0x10 [ 279.432808][T13413] do_syscall_64+0xcd/0x4c0 [ 279.435784][T13413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.439878][T13413] RIP: 0033:0x7fb48578e929 [ 279.442625][T13413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.454449][T13413] RSP: 002b:00007fb486532038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 279.459101][T13413] RAX: ffffffffffffffda RBX: 00007fb4859b5fa0 RCX: 00007fb48578e929 [ 279.463058][T13413] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000200000000040 [ 279.466881][T13413] RBP: 00007fb485810b39 R08: 0000200000000940 R09: 0000000000000000 [ 279.470026][T13413] R10: 0000000000800488 R11: 0000000000000246 R12: 0000000000000000 [ 279.472951][T13413] R13: 0000000000000000 R14: 00007fb4859b5fa0 R15: 00007fff3c78a898 [ 279.476379][T13413] [ 279.477594][T13413] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 279.480950][T13413] CPU: 2 UID: 0 PID: 13413 Comm: syz.5.1855 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 279.489952][T13413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.496718][T13413] Call Trace: [ 279.498948][T13413] [ 279.500774][T13413] dump_stack_lvl+0x3d/0x1f0 [ 279.502950][T13413] panic+0x71c/0x800 [ 279.504659][T13413] ? __pfx_panic+0x10/0x10 [ 279.506864][T13413] ? show_trace_log_lvl+0x29b/0x3e0 [ 279.528215][T13413] ? refcount_warn_saturate+0x14a/0x210 [ 279.562850][T13413] check_panic_on_warn+0xab/0xb0 [ 279.565332][T13413] __warn+0xf6/0x3c0 [ 279.578050][T13413] ? preempt_schedule_notrace+0x62/0xe0 [ 279.581903][T13413] ? refcount_warn_saturate+0x14a/0x210 [ 279.585292][T13413] report_bug+0x3c3/0x580 [ 279.588978][T13413] ? refcount_warn_saturate+0x14a/0x210 [ 279.592558][T13413] handle_bug+0x184/0x210 [ 279.595292][T13413] exc_invalid_op+0x17/0x50 [ 279.598089][T13413] asm_exc_invalid_op+0x1a/0x20 [ 279.600869][T13413] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 279.604603][T13413] Code: ff 89 de e8 b8 94 df fc 84 db 0f 85 66 ff ff ff e8 cb 99 df fc c6 05 bd 7d b5 0b 01 90 48 c7 c7 20 3b 15 8c e8 b7 92 9e fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 a8 99 df fc 0f b6 1d 98 7d b5 0b 31 [ 279.617531][T13413] RSP: 0018:ffffc90005a1f9e0 EFLAGS: 00010282 [ 279.621401][T13413] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90006f91000 [ 279.627146][T13413] RDX: 0000000000080000 RSI: ffffffff817af1b5 RDI: 0000000000000001 [ 279.632391][T13413] RBP: ffff88803be9aaa8 R08: 0000000000000001 R09: 0000000000000000 [ 279.640131][T13413] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88803be9aaa8 [ 279.652188][T13413] R13: ffff8880555c1c00 R14: dffffc0000000000 R15: 1ffff92000b43f47 [ 279.657310][T13413] ? __warn_printk+0x1a5/0x350 [ 279.660142][T13413] p9_req_put+0x1ec/0x250 [ 279.662898][T13413] p9_client_destroy+0x22b/0x480 [ 279.666434][T13413] ? __pfx_p9_client_destroy+0x10/0x10 [ 279.669917][T13413] ? v9fs_session_init+0xb87/0x1a80 [ 279.673153][T13413] v9fs_session_init+0xbab/0x1a80 [ 279.676412][T13413] ? __pfx_v9fs_session_init+0x10/0x10 [ 279.679738][T13413] v9fs_mount+0xc5/0xa30 [ 279.682505][T13413] ? __pfx_v9fs_mount+0x10/0x10 [ 279.685591][T13413] ? cap_capable+0xb3/0x250 [ 279.688763][T13413] ? __pfx_v9fs_mount+0x10/0x10 [ 279.692039][T13413] legacy_get_tree+0x109/0x220 [ 279.696291][T13413] vfs_get_tree+0x8e/0x340 [ 279.698674][T13413] path_mount+0x1414/0x2020 [ 279.701122][T13413] ? kmem_cache_free+0x2d1/0x4d0 [ 279.708006][T13413] ? __pfx_path_mount+0x10/0x10 [ 279.710113][T13413] ? putname+0x154/0x1a0 [ 279.716776][T13413] __x64_sys_mount+0x28d/0x310 [ 279.718746][T13413] ? __pfx___x64_sys_mount+0x10/0x10 [ 279.720934][T13413] do_syscall_64+0xcd/0x4c0 [ 279.731763][T13413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.734539][T13413] RIP: 0033:0x7fb48578e929 [ 279.739345][T13413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.750939][T13413] RSP: 002b:00007fb486532038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 279.756239][T13413] RAX: ffffffffffffffda RBX: 00007fb4859b5fa0 RCX: 00007fb48578e929 [ 279.760632][T13413] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000200000000040 [ 279.764632][T13413] RBP: 00007fb485810b39 R08: 0000200000000940 R09: 0000000000000000 [ 279.769500][T13413] R10: 0000000000800488 R11: 0000000000000246 R12: 0000000000000000 [ 279.776431][T13413] R13: 0000000000000000 R14: 00007fb4859b5fa0 R15: 00007fff3c78a898 [ 279.781803][T13413] [ 279.806115][T13413] Kernel Offset: disabled [ 279.809114][T13413] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:09:36 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff816a36ff RDX=0000000000000000 RSI=ffffffff816a370d RDI=ffffffff8df40da8 RBP=0000000000000001 RSP=ffffc90000aef868 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=fffffbfff1c84f5d R13=dffffc0000000000 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff816a3775 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6716000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000558011dcd300 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4b9011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4b9011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4b9011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4b9011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4b9011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4b9011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4b9185488 00007fe4b9185480 00007fe4b9185478 00007fe4b9185450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4b9ced100 00007fe4b9185440 00007fe4b9180004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4b9185498 00007fe4b9185490 00007fe4b9185488 00007fe4b9185480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000044 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffff94000235498 RBX=fffff94000235499 RCX=ffffffff820fb04b RDX=fffff94000235499 RSI=0000000000000008 RDI=ffffea00011aa4c0 RBP=fffff94000235498 RSP=ffffc900033377c0 R8 =0000000000000000 R9 =fffff94000235498 R10=ffffea00011aa4c7 R11=0000000000000001 R12=ffffea00011aa4c0 R13=ffff88802a497540 R14=ffffea00011aa4c0 R15=0000000000000000 RIP=ffffffff8222cc49 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6816000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7a310e7d60 CR3=0000000030f5e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7a305856a3 00007f7a305856a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca27dc6a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558673328f 0000555586732c70 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555867174a8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555586732c62 00005555867321d0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2008001290037202 000e032802000c03 2802000a0302d802 00080302b8c80484 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010810000580045e 0800020800010000 0208060a016f8600 080005800304c0a0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a2a0100002100012 8004010000020806 080158bc00080012 f00300080012e003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00100012d0030fff ffffffffff0412c0 0302100012b00302 1000049003e60208 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0280030280040480 0304800412a00320 0800129003720200 0e032802000c0328 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bc355 RDI=ffffffff9b0c42a0 RBP=ffffffff9b0c4260 RSP=ffffc90005a1f350 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000006c R14=ffffffff9b0c4260 R15=ffffffff855bc2f0 RIP=ffffffff855bc37f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb4865326c0 ffffffff 00c00000 GS =0000 ffff8880d6916000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb485986560 CR3=00000000563dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb485811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb485811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb485811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb485811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb485811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb485811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb485985488 00007fb485985480 00007fb485985478 00007fb485985450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb4864ed100 00007fb485985440 00007fb485985458 00007fb4859854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb485985498 00007fb485985490 00007fb485985488 00007fb485985480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f4eb9658dd353fc 5a560df0b47c6466 a6012b04d5526b77 7071c6640e388377 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a5415d40fd6d043e 144f2dfa8f6f8094 ff3787366dc3b06d 19de797fed942356 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 951bc8b8a0102403 ba8df3da1a868f56 11e442ceba539a1a a0c00e76352d6fd3 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 86edb095794e6bbd c2a01baf4ad4a229 b310db6244a4421b 22909d485efb8dcb ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 53cf517029b509f5 f72f155004c3be32 486a1f24a80266c4 6a03793cea7f4eb9 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffc90004046a78 RCX=ffffc9000404690c RDX=1ffff92000808d4f RSI=ffffffff8222a0f9 RDI=ffffc90004046a84 RBP=0000000000000002 RSP=ffffc90004046998 R8 =ffffffff914d21fe R9 =0000000000000000 R10=0000000000000000 R11=000000000001229c R12=ffffffff81a79250 R13=ffffc90004046a78 R14=0000000000000000 R15=ffff88804f62a440 RIP=ffffffff81a792ff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555584fab500 ffffffff 00c00000 GS =0000 ffff8880d6a16000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f47586e7d60 CR3=000000005af22000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000808010 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4757a11ad4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4757a11ae7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4757a11adf ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4757a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4757a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4757a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4757a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4757a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4757a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6376003065676469 7262003070617465 7267367069007061 7465726736706900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 465300154042414c 5747001555445140 574213554c005544 5140574213554c00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000