last executing test programs: 1m55.263920558s ago: executing program 1 (id=6671): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r2, 0x28543634fae43ad, 0x40000, 0x0, {0x4, 0x0, 0x7900}}, 0x14}}, 0x0) 1m55.2637889s ago: executing program 1 (id=6672): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) (fail_nth: 4) 1m55.193907803s ago: executing program 1 (id=6673): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000001400)="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", 0x5e5}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065d", 0x39}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m55.193387788s ago: executing program 1 (id=6674): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x33) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0xa, 0x15, 0x1cb, &(0x7f0000000480)}) 1m55.123586651s ago: executing program 1 (id=6675): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000001400)="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", 0x8d7}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m54.853183052s ago: executing program 1 (id=6681): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}}}, 0x24}}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x9}, {0xa, 0x0, 0x5, @dev, 0x4}, 0x3, {[0xe, 0x8, 0x0, 0xfffffef9, 0x0, 0x1, 0x67e9f718]}}, 0x5c) setresuid(r5, r5, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) 1m54.747676627s ago: executing program 32 (id=6681): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}}}, 0x24}}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x9}, {0xa, 0x0, 0x5, @dev, 0x4}, 0x3, {[0xe, 0x8, 0x0, 0xfffffef9, 0x0, 0x1, 0x67e9f718]}}, 0x5c) setresuid(r5, r5, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) 1m14.673541005s ago: executing program 2 (id=7347): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x3, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r0}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x3, 0x1, 0x4a, 0x0, 0x10000000}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r5}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1m14.572715006s ago: executing program 2 (id=7348): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000001400)="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", 0x5e5}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88", 0x56}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m14.571867368s ago: executing program 2 (id=7350): setfsgid(0xee00) mount(0x0, 0x0, 0x0, 0x800000, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0xdb) 1m14.512210001s ago: executing program 2 (id=7352): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000001400)="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", 0xa38}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd7", 0x6f}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m14.507339654s ago: executing program 2 (id=7353): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd5000fdcbdf251f000000080001003100000008000300", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1m14.443224272s ago: executing program 2 (id=7355): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000001400)="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", 0xbc7}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ff", 0x6e}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m5.942328686s ago: executing program 4 (id=7457): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd9f, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, r3, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000080)={0x2, r3, 0x1ff, 0xfffffffe, 0x800, 0x800008, 0x1, 0x0, 0x100}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) getresuid(&(0x7f0000000640), &(0x7f00000006c0), &(0x7f0000000700)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5, 0xffffffffffffffff}}, './file0\x00'}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r6, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000a40)}], 0x1}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m5.797254664s ago: executing program 4 (id=7460): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x5, 0x1, 0x0, 0x2, 0x5, 0xc, 0x3, 0xa, 0xfd, 0xfffffffd, 0x1, 0x1, 0x1, 0x6, 0x101, 0xf7fffffe, 0x7f, 0x2, 0x40000001, 0x8c, 0xca9f, 0x0, 0x20001e58, 0x4, 0xe67, 0x3, 0x8, 0x4085, 0x0, 0xfbfffff8]}) (async) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x5, 0x1, 0x0, 0x2, 0x5, 0xc, 0x3, 0xa, 0xfd, 0xfffffffd, 0x1, 0x1, 0x1, 0x6, 0x101, 0xf7fffffe, 0x7f, 0x2, 0x40000001, 0x8c, 0xca9f, 0x0, 0x20001e58, 0x4, 0xe67, 0x3, 0x8, 0x4085, 0x0, 0xfbfffff8]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r11, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) (async) connect$netrom(r11, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) sendto$netrom(r11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/103, 0x67}, {&(0x7f0000000080)=""/87, 0x57}, {&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000140)=""/118, 0x76}, {&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000200)=""/52, 0x34}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000003c0)=""/48, 0x30}], 0x9) (async) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/103, 0x67}, {&(0x7f0000000080)=""/87, 0x57}, {&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000140)=""/118, 0x76}, {&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000200)=""/52, 0x34}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000003c0)=""/48, 0x30}], 0x9) 1m5.59137261s ago: executing program 4 (id=7461): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) socket(0xa, 0x3, 0x3a) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48dd0000", @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00001400080067726574617030000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18f) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r3], 0x340a) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x3, @none}, 0xe) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg$unix(r10, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2060, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r11, r11, 0x2f, 0x2000, 0x4}, 0x20) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000580), 0x1000) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x80, 0x0) ioctl$BSG_IO(r12, 0x2285, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)='vA', 0xf1f, 0x0, 0x81, 0x1, 0x60, &(0x7f0000000140), 0x0, 0x27, 0x0, 0x7b, &(0x7f00000001c0)="3a7bf31c10f430142ebb450f73b63e4c952ffbebc3c9a72954bb70c85f5cf7827ba26dd9c86715", &(0x7f0000000340)=""/123, 0x1, 0x20, &(0x7f0000000240)="1bdcb5439d68ebb634eacd865e2d58871c3e13ad3c178e298d3c3342e43967b3812dca987ab866e7382056e2b061980ce6df4a215c8dfe7367a722b4", 0x8}) 1m5.363013046s ago: executing program 4 (id=7463): r0 = semget$private(0x0, 0x4, 0x262) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000f6ff"], 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b03, 0x0) semtimedop(r0, &(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x3, 0x0, 0xc824) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(r3, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) set_mempolicy(0x1, &(0x7f00000000c0)=0xd, 0x2) set_mempolicy(0x4000, &(0x7f00000001c0)=0x7ff, 0x3f) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e23, @remote}, 0x10) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x180000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 1m3.611761902s ago: executing program 4 (id=7492): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_emit_ethernet(0x66, &(0x7f0000001a40)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}}, 0x20}}, 0x4000010) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='host1x_cdma_push_wide\x00', r2, 0x0, 0x5}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (fail_nth: 7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80d1}, 0x4084) fsetxattr$security_evm(r2, &(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="03"], 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open(&(0x7f0000000000)='./file0/file1\x00', 0x101002, 0x4) 1m2.882826502s ago: executing program 4 (id=7497): r0 = socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x7) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={0xb, 0x7, 0x1, 0x0, 0x0, [{{r0}, 0x7}]}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 1m2.748020529s ago: executing program 33 (id=7497): r0 = socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x7) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={0xb, 0x7, 0x1, 0x0, 0x0, [{{r0}, 0x7}]}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 59.274502043s ago: executing program 34 (id=7355): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000001400)="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", 0xbc7}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ff", 0x6e}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.091559021s ago: executing program 6 (id=8422): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x2000000) 11.091475143s ago: executing program 6 (id=8423): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r0, 0x0, &(0x7f0000000500)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x2, 0x0) r2 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0xb, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040), 0x10) open(&(0x7f0000000100)='./file0/file0\x00', 0x606701, 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0xff, 0x80801) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1, r5}) 11.03075174s ago: executing program 6 (id=8426): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb3, 0x3}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x13, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 11.02990758s ago: executing program 6 (id=8428): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000001500010300000008002400010000000000000000ad"], 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f00000000c0)=[0x5, 0x5000], 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xc0, 0x11cfa, 0x0, 0x8000008, 0x2, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x25, 0xe1d9, 0x4, 0xff}) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x1, 0x8b, 0x0, 0x800000}, {0xb, 0x8d, 0x0, 0x3}]}) 10.942530958s ago: executing program 6 (id=8430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 10.747989475s ago: executing program 6 (id=8436): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x5, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0x18fff) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x79bf, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1, 0x3, 0x397}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 10.642500983s ago: executing program 35 (id=8436): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x5, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0x18fff) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x79bf, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1, 0x3, 0x397}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 8.112949272s ago: executing program 3 (id=8479): ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, 0x0) unshare(0x6a040000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x84, 0x0, 0x0, [0xffffffffffff0000, 0x3, 0xac, 0x226d, 0x1, 0xa], 0x1, 0x0, 0x0, [{}]}, 0x88) 7.872199778s ago: executing program 3 (id=8480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000004c80)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x96) close(r2) read$FUSE(r3, &(0x7f0000004340)={0x2020}, 0x2020) getpeername(r1, 0x0, &(0x7f0000005680)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd5000fdcbdf251f000000080001003100000008000300"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000000000000000000004000000ffffffff05000000ffffff7f020000000000d834018000000600000007000000070000000600000002000000050000000400000005000000cd4100000700000002000000050000000900000009dcb0bac7a019000000"]) 7.871883157s ago: executing program 3 (id=8481): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000020000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 7.778797957s ago: executing program 3 (id=8482): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f0000000080)={0x0, 0x46b4, 0x8000, 0x2, 0xb2}, 0x1) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f0000000080)={0x0, 0x46b4, 0x8000, 0x2, 0xb2}, 0x1) (async) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) 7.745072398s ago: executing program 3 (id=8483): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000001400)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e5", 0x4e}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.472334967s ago: executing program 3 (id=8484): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010121, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES32=r0], 0x48}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) timer_create(0x3, &(0x7f0000000240)={0x0, 0xa, 0x1, @thr={&(0x7f0000000140)="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", &(0x7f00000002c0)="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"}}, &(0x7f0000000280)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000640)={0x4, "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"}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f002, 0x6}) 7.409301174s ago: executing program 36 (id=8484): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010121, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES32=r0], 0x48}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) timer_create(0x3, &(0x7f0000000240)={0x0, 0xa, 0x1, @thr={&(0x7f0000000140)="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", &(0x7f00000002c0)="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"}}, &(0x7f0000000280)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000640)={0x4, "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"}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f002, 0x6}) 3.281484681s ago: executing program 7 (id=8536): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) migrate_pages(0x0, 0x10b9, 0x0, &(0x7f0000000100)=0x142) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x7, &(0x7f00000001c0)={0x4, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r3}, 0x20) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, &(0x7f0000000000)={'trans=virtio,', {[{@access_any}]}}) utimes(&(0x7f00000000c0)='./file1\x00', 0x0) 2.332584045s ago: executing program 7 (id=8552): sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400888}, 0xc, 0x0}, 0x8000) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002680)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf5729000000040005800c00018008000100", @ANYRES32=0x0, @ANYBLOB="400001801400020069703665727370616e30000000000000140002006e657470636930000000000000000000140002006d6163767461703000000000000000001400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000300001800800030000000000080003000100000008000300030000001400020070696d72656730000000000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x44080}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d29"], 0x0}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000ddc0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@getchain={0x6c, 0x66, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x7, 0xb}, {0x1, 0x4}, {0x5, 0x6}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0xe1b3}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x101}]}, 0x6c}}, 0x0) r4 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de, 0x8, 0x100000}, &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f0000000480)=[{0x0, 0x53d, 0x1000}], 0x1, 0x0) semctl$SETVAL(r7, 0x1, 0x10, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d", 0x8) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) listen(r8, 0x9) syz_emit_ethernet(0x4e, &(0x7f0000002740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f50018991f309a346b9cdda50076ff44f30600fe8000000000000000000000000000aafe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESDEC=r2], 0x0) 2.122686055s ago: executing program 7 (id=8559): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32], 0x50) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f", @ANYBLOB=',rootmo']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.532367751s ago: executing program 8 (id=8574): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000001400)="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", 0x5e5}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409", 0x4c}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.531516304s ago: executing program 8 (id=8576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaad8f2892557109dc2dd60ff00f500140600fe8082290000000000000000001455a20000bbfe800000e3ff00000013080000001ad1e7ea50d9", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780005"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40002002) 1.47078741s ago: executing program 8 (id=8578): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101781) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40080, 0x0) socket(0x10, 0x3, 0x9) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000480)={0x808, r3, r2}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000200)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r6}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000340)) r8 = socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x40, 0xff, 0x6, 0x5, 0x277, 0x6, 0xdf}, &(0x7f0000000200)={0x100, 0x6, 0x7, 0x6, 0x3, 0x8, 0x0, 0x6}, &(0x7f0000000240)={0x8, 0x6, 0x9, 0x4, 0x2, 0x3, 0x468000000000, 0x7891}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x9]}, 0x8}) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) mount(&(0x7f00000004c0)=@sr0, &(0x7f0000000500)='./file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x8001fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffd, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r8, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.357936842s ago: executing program 8 (id=8583): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x40fd, 0x3, 0x5, 0x0, 0x0, "3eccd8f9d20500005a1a320900"}) 1.281889237s ago: executing program 7 (id=8585): socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/123, 0x7b}, {&(0x7f0000000100)=""/9, 0x9}], 0x2, &(0x7f0000000200)=""/71, 0x47}, 0x20) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) acct(0x0) r2 = socket$key(0xf, 0x3, 0x2) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000001000/0x2000)=nil, 0x4) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$alg(0x26, 0x5, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000b40), 0xfe31, 0x2) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r6, 0x4018aee3, &(0x7f0000000100)=@attr_pvtime_ipa) r7 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x3, 0x2, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x3, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, &(0x7f0000000380)) syz_usb_connect(0x5, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 1.17205098s ago: executing program 0 (id=8589): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000081345000008000040000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c80000090780000"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d39", 0xbc9}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc", 0x71}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r5) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.092300721s ago: executing program 0 (id=8590): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000003eb5608caa00000000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r2}, 0x38) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) 992.319069ms ago: executing program 8 (id=8592): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_emit_ethernet(0x62, &(0x7f0000000500)={@local, @random, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\a\f', 0x2c, 0x2b, 0xfc, @local, @local, {[@srh], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x5, 0xf989, "90"}, @mptcp=@mp_join={0x1e, 0x3, 0xd}, @exp_smc={0xfe, 0x6}, @nop, @eol]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0xa0, 0x2, 0x5, 0x1, 0x6, 0xa0, 0x1, r4}, &(0x7f0000000280)=0x20) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x80, 0x0) ioctl$BSG_IO(r5, 0x2285, &(0x7f0000000280)={0x51, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xcd6, 0xbffff6df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x9144e6a29fca871a, 0x0, 0x304}) r6 = socket$kcm(0x21, 0x2, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r7, 0x0, 0x80000001}, 0x18) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x28}, 0xc0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="a05620d0089de4a70b54bc1a5b4f09a536403e25263d487f78d2e72defcac824c4ec21ca17a4eab21912dac09542d2af11bbb3f315b2ee89e3c5f67fbb13ba397a19b4923326e95fe7a7e5946eb662c120d3fdfb5db67a2acfb076a13f2ecdb1188e0dc08d5fb996df9ece6fe86667aa7c40aaa0bc8f384c208d1e02818c33d09aaa65ef39b666ace6d9e103a2bb86d4356003efe51965c7164a0558f89072ddf1f61c10226d056eb6a5014b4a2882c8a6816ad593dd714b849e946d88f68c0f4f4f0b2385a0e2bceab9eaa3b0134ee22d945152bbfb5e986532756e3ec7041ad3c066b37b5cad5e210182f42ede7ddbb9e5c8d58113603e24ef54b2bfbf11003888a92be9acb81b6a9614987ed4967880f1867f7d72e3ab1ce6cc9ac7297a4e464204d3d47d1d8f3ea0ad00"], 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, &(0x7f00000007c0)={r4, @in={{0x2, 0x4e20, @private=0xa010102}}}, 0x84) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) 739.313465ms ago: executing program 5 (id=8596): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000007ea45000028000040000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c80000090780000"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000001400)}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 682.576161ms ago: executing program 5 (id=8597): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e21, 0x3, 'rr\x00', 0x1, 0x4, 0x8}, 0x2c) socket(0x28, 0xa, 0x9) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) preadv2(r2, &(0x7f0000000340)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x0, 0x0, 0x21) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x0, 0xfa00, {{0xa, 0x4e23, 0xe, @mcast1, 0x2}, {0xa, 0x4e23, 0x7, @mcast1, 0xb08}, r1, 0x7}}, 0x48) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x7, r1, 0x0, 0x0, 0x1}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @loopback, 0x8}, {0xa, 0x4e23, 0x7, @remote, 0x8}, r8, 0x10007}}, 0x48) bind$alg(0xffffffffffffffff, 0x0, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r9, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r9, 0x5001, 0x0) io_uring_setup(0x2519, &(0x7f0000009a80)={0x0, 0xf150, 0x800, 0x0, 0x212}) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000040)=0x2) close_range(r9, 0xffffffffffffffff, 0x0) 212.762111ms ago: executing program 0 (id=8598): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000380)=0x1, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x84, 0x7, &(0x7f0000000300)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) lseek(r2, 0x7, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000030000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r6, 0x29, 0x4d, 0x0, &(0x7f0000000280)) close(r5) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x3, 0x1, 0x4, {0xa, 0x4e1f, 0x9, @loopback, 0x1000097}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a0102000000000000000001"], 0xc8}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r9 = socket(0x840000000002, 0x3, 0xff) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf252600000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x8080}, 0xacc2e31ead7dbab9) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r9, &(0x7f0000001f00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200040064c6", 0x15}, {&(0x7f00000002c0)="17460081ba60ccbb9c00001a7af480", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x2, 0x4004040) 123.011087ms ago: executing program 5 (id=8599): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x38, 0x0, 0xa0c, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x45}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x0, 0x3}, {0x8, 0x6}], "c00b4f7168984363"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 122.682122ms ago: executing program 8 (id=8600): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/103) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)={0x14, 0x16, 0x4, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000300)={0x2, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r7, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r13, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x28080) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x4000, 0x3, 0x5, 0x0, 0x0, "3eccd8f9d20500005a1a320900"}) syz_open_dev$swradio(&(0x7f00000001c0), 0x1, 0x2) 68.159106ms ago: executing program 5 (id=8601): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000001400)="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", 0x5e5}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88", 0x56}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000003380)='ns/cgroup\x00') ioctl$COMEDI_CMDTEST(r5, 0x8050640a, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 67.954056ms ago: executing program 0 (id=8602): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x6, 0x6c1, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x42, 0x80) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) 65.305092ms ago: executing program 0 (id=8603): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x9, @pix_mp={0x2, 0x10001, 0xb5315241, 0x7, 0x1, [{0xf}, {0xffffffff, 0x7}, {0x81, 0xd16}, {0xf, 0x8a56}, {0x81, 0x9}, {0x0, 0x9}, {0x5, 0x7b}, {0x6, 0x1}], 0x6, 0x81, 0x1, 0x1, 0x6}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f00000005c0)={@null, 0xa, 'lo\x00'}) listen(r2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0x11}}, 0x14}}, 0x4000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x400021a1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000080000000008001e0001000000328656736e7c27f004202e91569be5f3454d8b1136af6cbd78e393277f11cd2af7265b90c070704242ee7d0ae841fbd8237675f80cdec7fed39b4c4d5939139357262961"], 0x24}}, 0x0) 12.8252ms ago: executing program 5 (id=8604): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x47, 0x8000}, 0x8}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x3, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3c, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20008044}, 0x8000442) setsockopt$sock_int(r4, 0x1, 0x13, &(0x7f0000000140)=0x20, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, &(0x7f00000000c0)) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb8295", 0x54}, {&(0x7f0000000900)="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", 0x3e6}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5", 0x17}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 11.266839ms ago: executing program 5 (id=8605): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000007ea45000028000040000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c80000090780000"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000001400)}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 0 (id=8606): r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) clock_gettime(0x0, &(0x7f0000003580)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x10000000, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffb]}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000b40)={{r2}, "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"}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) sendmsg$NFC_CMD_GET_SE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x325, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x8c88}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) kernel console output (not intermixed with test programs): ath="pipe:[105891]" dev="pipefs" ino=105891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 540.501148][ T40] audit: type=1400 audit(524835.926:1399): avc: denied { relabelfrom } for pid=25900 comm="syz.0.7456" name="" dev="pipefs" ino=116513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 540.622249][ T40] audit: type=1400 audit(524836.046:1400): avc: denied { write } for pid=25908 comm="syz.4.7460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 540.628865][ T40] audit: type=1400 audit(524836.046:1401): avc: denied { read } for pid=25908 comm="syz.4.7460" path="socket:[119104]" dev="sockfs" ino=119104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 540.824631][T25912] xt_hashlimit: size too large, truncated to 1048576 [ 540.849566][T17458] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 540.892040][T25914] afs: Unknown parameter 'dynkaller1' [ 541.020294][T17458] usb 5-1: config 0 has no interfaces? [ 541.022646][T17458] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 541.026413][T17458] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.033176][T17458] usb 5-1: config 0 descriptor?? [ 541.267946][T25922] netlink: 'syz.3.7465': attribute type 29 has an invalid length. [ 541.283427][T25922] tipc: Enabling of bearer rejected, media not registered [ 541.297041][ T29] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 541.301617][T17458] usb 5-1: USB disconnect, device number 31 [ 541.448296][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 541.451917][ T29] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 541.455364][ T29] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 541.460135][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 541.464068][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 541.468324][ T29] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.473625][ T29] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 541.477461][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.684869][ T29] usb 9-1: usb_control_msg returned -32 [ 541.686652][ T29] usbtmc 9-1:16.0: can't read capabilities [ 542.044347][T25945] usbtmc 9-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 542.080561][ T40] audit: type=1400 audit(524837.506:1402): avc: denied { add_name } for pid=25949 comm="syz.0.7476" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 542.087924][ T40] audit: type=1400 audit(524837.506:1403): avc: denied { create } for pid=25949 comm="syz.0.7476" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 542.225023][T25954] VFS: Mount too revealing [ 542.281078][T25957] binder: 25956:25957 ioctl 40182103 200000000240 returned -22 [ 542.285094][T25957] binder_alloc: 25956: binder_alloc_buf, no vma [ 542.426560][T25963] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.7482'. [ 542.641095][ T40] audit: type=1400 audit(524838.066:1404): avc: denied { accept } for pid=25977 comm="syz.3.7488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 542.647054][ T40] audit: type=1400 audit(524838.066:1405): avc: granted { setsecparam } for pid=25977 comm="syz.3.7488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 542.689607][T25981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7489'. [ 542.729344][T25984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7490'. [ 542.732889][T25984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7490'. [ 542.789950][T23726] overlayfs: failed lookup in lower (newroot/209, name='bus', err=-40): overlapping layers [ 542.793879][T23726] overlayfs: failed lookup in lower (newroot/209, name='bus', err=-40): overlapping layers [ 543.191325][ T1333] usb 9-1: USB disconnect, device number 7 [ 543.392029][ T7393] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.432572][T25995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7494'. [ 543.437977][T25995] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.475534][T26000] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.7495'. [ 543.487669][ T7393] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.645425][ T7393] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.736683][T26006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7499'. [ 543.740893][T26006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7499'. [ 543.744594][T26006] netlink: 'syz.3.7499': attribute type 12 has an invalid length. [ 543.788020][ T7393] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.860892][T18779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 543.864880][T18779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 543.874254][T18779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 543.878402][T18779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 543.881783][T18779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 544.051371][T26020] chnl_net:caif_netlink_parms(): no params data found [ 544.147964][T26020] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.151158][T26020] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.154213][T26020] bridge_slave_0: entered allmulticast mode [ 544.158162][T26020] bridge_slave_0: entered promiscuous mode [ 544.163403][T26020] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.166420][T26020] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.170222][T26020] bridge_slave_1: entered allmulticast mode [ 544.174165][T26020] bridge_slave_1: entered promiscuous mode [ 544.222956][T26020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.229663][T26020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.287250][T26020] team0: Port device team_slave_0 added [ 544.291947][T26020] team0: Port device team_slave_1 added [ 544.335149][T26020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.337876][T26020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.347760][T26020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.352403][T26020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.354971][T26020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.364278][T26020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.411596][T26020] hsr_slave_0: entered promiscuous mode [ 544.414259][T26020] hsr_slave_1: entered promiscuous mode [ 544.575777][T26020] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 544.583058][T26020] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 544.587954][T26020] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 544.592750][T26020] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 544.647313][T26020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.670263][T26020] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.677690][T24714] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.679978][T24714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.688626][T24714] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.691738][T24714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.828528][T26020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.961952][T26071] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.7515'. [ 544.989894][T26020] veth0_vlan: entered promiscuous mode [ 544.997734][T26020] veth1_vlan: entered promiscuous mode [ 545.019907][T26020] veth0_macvtap: entered promiscuous mode [ 545.024112][T26020] veth1_macvtap: entered promiscuous mode [ 545.036485][T26020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.053649][T26020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.065892][ T1231] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.068810][ T1231] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.072019][ T1231] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.074753][ T1231] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.173233][T24714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.176578][T24714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.216495][ T7397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.223001][ T7397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.232440][ T7393] bridge_slave_1: left allmulticast mode [ 545.234996][ T7393] bridge_slave_1: left promiscuous mode [ 545.237786][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.250580][ T7393] bridge_slave_0: left allmulticast mode [ 545.253000][ T7393] bridge_slave_0: left promiscuous mode [ 545.255384][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.535916][ T7393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.540181][ T7393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.543974][ T7393] bond0 (unregistering): Released all slaves [ 545.625083][ T7393] tipc: Disabling bearer [ 545.637208][ T7393] tipc: Left network mode [ 545.963336][T26102] ufs: You didn't specify the type of your ufs filesystem [ 545.963336][T26102] [ 545.963336][T26102] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 545.963336][T26102] [ 545.963336][T26102] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 545.976108][T26102] ufs: ufstype=old is supported read-only [ 545.977120][T18779] Bluetooth: hci0: command tx timeout [ 546.019039][ T7393] hsr_slave_0: left promiscuous mode [ 546.132947][ T7393] veth1_macvtap: left promiscuous mode [ 546.135469][ T7393] veth0_macvtap: left promiscuous mode [ 546.139511][ T7393] veth1_vlan: left promiscuous mode [ 546.141940][ T7393] veth0_vlan: left promiscuous mode [ 546.285009][ T40] audit: type=1400 audit(524841.706:1406): avc: denied { setopt } for pid=26137 comm="syz.5.7531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 547.075356][ T7393] team0 (unregistering): Port device team_slave_1 removed [ 547.161800][ T7393] team0 (unregistering): Port device team_slave_0 removed [ 547.330017][ T5297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 547.343019][ T5297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 547.350097][ T5297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 547.374415][ T5297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 547.379621][ T5297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 547.774352][T26138] macsec0: entered promiscuous mode [ 547.776129][T26138] macsec0: entered allmulticast mode [ 547.777881][T26138] veth1_macvtap: entered allmulticast mode [ 547.897951][T26156] netlink: 'syz.3.7538': attribute type 9 has an invalid length. [ 547.901414][T26156] netlink: 'syz.3.7538': attribute type 7 has an invalid length. [ 547.904676][T26156] netlink: 'syz.3.7538': attribute type 8 has an invalid length. [ 547.999879][T26144] chnl_net:caif_netlink_parms(): no params data found [ 548.025974][T26178] fuse: Bad value for 'fd' [ 548.057027][ T5297] Bluetooth: hci0: command tx timeout [ 548.074654][T26144] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.077583][T26144] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.081215][T26144] bridge_slave_0: entered allmulticast mode [ 548.088555][T26144] bridge_slave_0: entered promiscuous mode [ 548.099509][T26144] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.101895][T26144] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.104215][T26144] bridge_slave_1: entered allmulticast mode [ 548.106768][T26144] bridge_slave_1: entered promiscuous mode [ 548.139357][T26187] netlink: 'syz.5.7544': attribute type 10 has an invalid length. [ 548.142021][T26187] __nla_validate_parse: 1 callbacks suppressed [ 548.142031][T26187] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7544'. [ 548.168157][T26187] batadv0: entered promiscuous mode [ 548.170500][ T5297] Bluetooth: hci2: unexpected event for opcode 0x0803 [ 548.174936][T26188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7542'. [ 548.177784][T26187] batadv0: entered allmulticast mode [ 548.180640][T26187] bridge0: port 3(batadv0) entered blocking state [ 548.183246][T26187] bridge0: port 3(batadv0) entered disabled state [ 548.189911][T26187] bridge0: port 3(batadv0) entered blocking state [ 548.192589][T26187] bridge0: port 3(batadv0) entered forwarding state [ 548.202439][T26144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.209450][T26192] tmpfs: Bad value for 'mpol' [ 548.211464][ T40] audit: type=1400 audit(524843.636:1407): avc: denied { mounton } for pid=26191 comm="syz.3.7546" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 548.214545][T26144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.255470][T26196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7547'. [ 548.289941][T26144] team0: Port device team_slave_0 added [ 548.293365][T26144] team0: Port device team_slave_1 added [ 548.326513][T26144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.329939][T26144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.338699][T26144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.351315][T26144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.353723][T26144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.369831][T26144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.398596][ T7393] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.442192][T26144] hsr_slave_0: entered promiscuous mode [ 548.449250][T26144] hsr_slave_1: entered promiscuous mode [ 548.452356][T26144] debugfs: 'hsr0' already exists in 'hsr' [ 548.454773][T26144] Cannot create hsr debugfs directory [ 548.510247][ T7393] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.603572][ T7393] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.645318][T26217] Process accounting resumed [ 548.647876][ T1148] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 548.651336][ T1148] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 548.677639][ T7393] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.686630][T26144] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 548.692452][T26144] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 548.698123][T26144] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 548.706339][T26144] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 548.742061][T26144] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.743441][T26235] fuse: Unknown parameter 'group_id00000000000000000000' [ 548.744504][T26144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.750171][T26144] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.752626][T26144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.800788][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.802444][T26239] netlink: 'syz.0.7558': attribute type 10 has an invalid length. [ 548.810106][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.843615][T26239] team0: Port device dummy0 added [ 548.851675][T26239] netlink: 'syz.0.7558': attribute type 10 has an invalid length. [ 548.870560][T26239] team0: Port device dummy0 removed [ 548.874572][T26239] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 548.879652][ T7393] bridge_slave_1: left allmulticast mode [ 548.881265][ T7393] bridge_slave_1: left promiscuous mode [ 548.883378][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.889141][ T7393] bridge_slave_0: left allmulticast mode [ 548.891046][ T7393] bridge_slave_0: left promiscuous mode [ 548.892675][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.122260][T26144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.134120][T26144] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.143818][T24714] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.146587][T24714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.150867][T24714] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.153925][T24714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.205592][T26144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 549.262175][T26267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=361 sclass=netlink_route_socket pid=26267 comm=syz.3.7566 [ 549.332348][ T5681] libceph: connect (1)[c::]:6789 error -22 [ 549.334549][ T5681] libceph: mon0 (1)[c::]:6789 connect error [ 549.349439][T26144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.420435][T26275] ceph: No mds server is up or the cluster is laggy [ 549.487346][ T7393] hsr_slave_0: left promiscuous mode [ 549.489651][ T7393] hsr_slave_1: left promiscuous mode [ 549.491629][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.493957][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.496574][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.499021][ T5297] Bluetooth: hci3: command tx timeout [ 549.503669][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.524463][ T7393] veth1_macvtap: left promiscuous mode [ 549.526171][ T7393] veth0_macvtap: left promiscuous mode [ 549.528327][ T7393] veth1_vlan: left promiscuous mode [ 549.529950][ T7393] veth0_vlan: left promiscuous mode [ 549.640838][T26310] overlayfs: failed to clone upperpath [ 550.137100][ T5297] Bluetooth: hci0: command tx timeout [ 550.334929][ T40] audit: type=1326 audit(524845.756:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26318 comm="syz.3.7575" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbff978efc9 code=0x0 [ 550.390379][T26322] comedi comedi0: Minor -4 is invalid! [ 550.966854][T26144] veth0_vlan: entered promiscuous mode [ 550.979601][T26144] veth1_vlan: entered promiscuous mode [ 551.004916][T26144] veth0_macvtap: entered promiscuous mode [ 551.007277][T26326] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 551.010075][T26326] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 551.012278][T26144] veth1_macvtap: entered promiscuous mode [ 551.015228][T26326] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 551.019207][T26326] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 551.020225][T26144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.029597][T26144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.036452][ T7397] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.040581][T26326] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 551.048214][ T7397] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.057909][ T1240] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.066161][T26326] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 551.066242][ T1240] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.074222][T26326] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 551.093182][T26326] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 551.180250][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.180597][T24714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.182757][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.189032][T24714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.252036][T26340] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.7533'. [ 551.398316][T26351] netlink: 'syz.6.7581': attribute type 10 has an invalid length. [ 551.404269][T26351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.407845][T26351] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 551.418998][ T7393] IPVS: stop unused estimator thread 0... [ 551.463608][T26355] fuse: Unknown parameter '017777777777777777777770x0000000000000004' [ 551.528891][ T40] audit: type=1400 audit(524846.956:1409): avc: denied { ioctl } for pid=26354 comm="syz.6.7582" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x5644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 551.539656][T26364] QAT: Stopping all acceleration devices. [ 551.682090][T26378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7584'. [ 551.684955][T26378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7584'. [ 551.687879][T26378] netlink: 'syz.3.7584': attribute type 12 has an invalid length. [ 551.821179][ T1240] tipc: Subscription rejected, illegal request [ 552.072886][T26393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7589'. [ 552.735099][T26407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7594'. [ 552.746035][T26412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7595'. [ 552.785547][T26418] xt_l2tp: v2 doesn't support IP mode [ 552.793979][T26418] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 552.799898][T26420] netlink: 348 bytes leftover after parsing attributes in process `syz.3.7600'. [ 553.097267][T18779] Bluetooth: hci0: command 0x0c1a tx timeout [ 553.097293][ T5297] Bluetooth: hci3: command 0x040f tx timeout [ 553.097455][T23686] Bluetooth: hci2: command 0x0c1a tx timeout [ 553.097478][ T64] Bluetooth: hci1: command 0x041b tx timeout [ 553.114733][T26438] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.182497][T26444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=26444 comm=syz.3.7608 [ 553.219614][T26446] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 553.257782][T26449] __nla_validate_parse: 2 callbacks suppressed [ 553.257795][T26449] netlink: 348 bytes leftover after parsing attributes in process `syz.3.7610'. [ 553.292667][T26451] dlm: no locking on control device [ 553.463730][ T40] audit: type=1400 audit(524848.886:1410): avc: denied { listen } for pid=26468 comm="syz.3.7619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 553.595705][T26484] netlink: 348 bytes leftover after parsing attributes in process `syz.5.7625'. [ 553.928218][ T29] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 554.076490][ T29] usb 8-1: device descriptor read/64, error -71 [ 554.217135][T20374] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 554.317041][ T29] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 554.368680][T20374] usb 11-1: config 1 has an invalid interface number: 7 but max is 0 [ 554.371237][T20374] usb 11-1: config 1 has no interface number 0 [ 554.373227][T20374] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 554.376371][T20374] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 554.381307][T20374] usb 11-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 554.384157][T20374] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.386772][T20374] usb 11-1: Product: syz [ 554.388196][T20374] usb 11-1: Manufacturer: syz [ 554.389676][T20374] usb 11-1: SerialNumber: syz [ 554.393345][T26524] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 554.395682][T26524] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 554.400468][T20374] usb 11-1: Error in usbnet_get_endpoints (-22) [ 554.447101][ T29] usb 8-1: device descriptor read/64, error -71 [ 554.557243][ T29] usb usb8-port1: attempt power cycle [ 554.724111][T26542] Bluetooth: MGMT ver 1.23 [ 554.750235][T20374] usb 11-1: USB disconnect, device number 2 [ 554.897175][ T29] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 554.918218][ T29] usb 8-1: device descriptor read/8, error -71 [ 555.012928][T26550] netlink: 'syz.0.7650': attribute type 1 has an invalid length. [ 555.039819][T26550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.057337][T26550] bond1: (slave geneve2): making interface the new active one [ 555.061574][T26550] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 555.177156][ T29] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 555.177177][ T5297] Bluetooth: hci0: command 0x0c1a tx timeout [ 555.177239][T18779] Bluetooth: hci3: command 0x040f tx timeout [ 555.197632][ T29] usb 8-1: device descriptor read/8, error -71 [ 555.307367][ T29] usb usb8-port1: unable to enumerate USB device [ 555.706587][T26584] netlink: 'syz.0.7664': attribute type 10 has an invalid length. [ 555.709202][T26584] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7664'. [ 555.721874][T26586] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7665'. [ 555.724730][T26586] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7665'. [ 555.729907][T26586] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7665'. [ 555.732815][T26586] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7665'. [ 556.097486][T26611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7674'. [ 556.181119][T26619] netlink: 'syz.0.7678': attribute type 72 has an invalid length. [ 556.244861][T26623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7680'. [ 556.691442][T26643] netlink: 'syz.5.7687': attribute type 72 has an invalid length. [ 556.802908][T26652] overlayfs: missing 'workdir' [ 556.808818][T26652] pim6reg1: entered promiscuous mode [ 556.810960][T26652] pim6reg1: entered allmulticast mode [ 556.854818][T26656] tipc: Started in network mode [ 556.856513][T26656] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 556.861693][T26656] tipc: Enabled bearer , priority 10 [ 556.902725][T26658] raw_sendmsg: syz.5.7694 forgot to set AF_INET. Fix it! [ 556.986623][T26670] netlink: 'syz.6.7698': attribute type 7 has an invalid length. [ 556.990012][T26670] netlink: 'syz.6.7698': attribute type 8 has an invalid length. [ 556.994971][ T5297] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 557.094701][ T40] audit: type=1800 audit(524852.516:1411): pid=26680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.7703" name="file0" dev="tmpfs" ino=2674 res=0 errno=0 [ 557.095892][T26680] random: crng reseeded on system resumption [ 557.113273][ T40] audit: type=1804 audit(524852.536:1412): pid=26680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.7703" name="/newroot/515/file0" dev="tmpfs" ino=2674 res=1 errno=0 [ 557.187694][T26689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7707'. [ 557.257048][ T5297] Bluetooth: hci0: command 0x0c1a tx timeout [ 557.267207][ T5297] Bluetooth: hci3: command 0x040f tx timeout [ 557.607087][ T10] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 557.758577][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 557.764876][ T10] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 557.768956][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.772374][ T10] usb 8-1: Product: syz [ 557.774149][ T10] usb 8-1: Manufacturer: syz [ 557.776193][ T10] usb 8-1: SerialNumber: syz [ 557.781409][ T10] usb 8-1: config 0 descriptor?? [ 557.867237][ T6006] tipc: Node number set to 1 [ 558.009107][T26736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=26736 comm=syz.6.7725 [ 558.191192][T26705] lo: entered allmulticast mode [ 558.195756][T26705] tunl0: entered allmulticast mode [ 558.199728][T26705] gre0: entered allmulticast mode [ 558.206300][T26705] gretap0: entered allmulticast mode [ 558.212205][T26705] erspan0: entered allmulticast mode [ 558.215837][T26705] ip_vti0: entered allmulticast mode [ 558.218890][T26705] ip6_vti0: entered allmulticast mode [ 558.222211][T26705] sit0: entered allmulticast mode [ 558.225619][T26705] ip6tnl0: entered allmulticast mode [ 558.229016][T26705] ip6gre0: entered allmulticast mode [ 558.233763][T26705] ip6gretap0: entered allmulticast mode [ 558.241171][T26705] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.244853][T26705] bridge0: entered allmulticast mode [ 558.248764][T26705] vcan0: entered allmulticast mode [ 558.254792][T26705] bond0: entered allmulticast mode [ 558.257501][T26705] bond_slave_0: entered allmulticast mode [ 558.259502][T26705] bond_slave_1: entered allmulticast mode [ 558.267424][ T6006] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 558.269477][T26705] team0: entered allmulticast mode [ 558.272158][T26705] team_slave_0: entered allmulticast mode [ 558.274276][T26705] team_slave_1: entered allmulticast mode [ 558.279643][T26705] dummy0: entered allmulticast mode [ 558.285153][T26705] nlmon0: entered allmulticast mode [ 558.287972][T26705] caif0: entered allmulticast mode [ 558.289939][T26705] batadv0: entered allmulticast mode [ 558.293698][T26705] vxcan0: entered allmulticast mode [ 558.297144][T26705] vxcan1: entered allmulticast mode [ 558.301542][T26705] veth0: entered allmulticast mode [ 558.307936][T26705] veth1: entered allmulticast mode [ 558.313587][T26705] wg0: entered allmulticast mode [ 558.317495][T26705] wg1: entered allmulticast mode [ 558.320982][T26705] wg2: entered allmulticast mode [ 558.326227][T26705] veth0_to_bridge: entered allmulticast mode [ 558.331620][T26705] veth1_to_bridge: entered allmulticast mode [ 558.336657][T26705] veth0_to_bond: entered allmulticast mode [ 558.345580][T26705] veth1_to_bond: entered allmulticast mode [ 558.353133][T26705] veth0_to_team: entered allmulticast mode [ 558.362059][T26705] veth1_to_team: entered allmulticast mode [ 558.371257][T26705] veth0_to_batadv: entered allmulticast mode [ 558.376439][T26705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.382650][T26705] batadv_slave_0: entered allmulticast mode [ 558.389630][T26705] veth1_to_batadv: entered allmulticast mode [ 558.394807][T26705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.399831][T26705] batadv_slave_1: entered allmulticast mode [ 558.405016][T26705] xfrm0: entered allmulticast mode [ 558.411510][T26705] veth0_to_hsr: entered allmulticast mode [ 558.416560][T26705] hsr_slave_0: entered allmulticast mode [ 558.419095][ T6006] usb 11-1: Using ep0 maxpacket: 32 [ 558.423448][ T6006] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 558.423462][T26705] veth1_to_hsr: entered allmulticast mode [ 558.426739][ T6006] usb 11-1: can't read configurations, error -61 [ 558.434490][T26705] hsr_slave_1: entered allmulticast mode [ 558.438005][T26705] hsr0: entered allmulticast mode [ 558.444234][T26705] veth1_virt_wifi: entered allmulticast mode [ 558.450500][T26705] veth0_virt_wifi: entered allmulticast mode [ 558.454378][T26705] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 558.458708][T26705] veth1_vlan: entered allmulticast mode [ 558.463863][T26705] veth0_vlan: entered allmulticast mode [ 558.470763][T26705] vlan0: entered allmulticast mode [ 558.473594][T26705] macvlan0: entered allmulticast mode [ 558.479540][T26705] macvlan1: entered allmulticast mode [ 558.483803][T26705] ipvlan0: entered allmulticast mode [ 558.486125][T26705] ipvlan1: entered allmulticast mode [ 558.491237][T26705] veth1_macvtap: entered allmulticast mode [ 558.497473][T26705] veth0_macvtap: entered allmulticast mode [ 558.502764][T26705] macvtap0: entered allmulticast mode [ 558.507446][T26705] macsec0: entered allmulticast mode [ 558.512524][T26705] geneve0: entered allmulticast mode [ 558.518614][T26705] geneve1: entered allmulticast mode [ 558.524011][T26705] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 558.529759][T26705] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 558.534509][T26705] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 558.539325][T26705] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 558.550569][T26705] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 558.561668][T26705] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 558.566293][T26705] ip6tnl1: entered allmulticast mode [ 558.568554][ T6006] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 558.569339][T26705] vxlan0: entered allmulticast mode [ 558.573964][T26705] sit1: entered allmulticast mode [ 558.593116][T26705] ip6erspan0: entered allmulticast mode [ 558.595600][T26705] mac80211_hwsim hwsim26 veth0_macvap: entered allmulticast mode [ 558.599269][T26705] mac80211_hwsim hwsim38 wlan2: entered allmulticast mode [ 558.603925][ T7393] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.607723][ T7393] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.612980][ T7393] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.616823][ T7393] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.727270][ T6006] usb 11-1: Using ep0 maxpacket: 32 [ 558.732429][ T6006] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 558.735718][ T6006] usb 11-1: can't read configurations, error -61 [ 558.739767][ T6006] usb usb11-port1: attempt power cycle [ 558.744840][T26761] netlink: 'syz.5.7731': attribute type 10 has an invalid length. [ 558.754969][T26761] team0: Port device dummy0 added [ 558.757386][T26761] netlink: 'syz.5.7731': attribute type 10 has an invalid length. [ 558.761321][T26761] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 558.769349][T26761] team0: Failed to send options change via netlink (err -105) [ 558.772478][T26761] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 558.775918][T26761] team0: Port device dummy0 removed [ 558.781935][T26761] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 558.842791][T26775] __nla_validate_parse: 6 callbacks suppressed [ 558.842803][T26775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7735'. [ 559.023854][ T40] audit: type=1400 audit(524854.446:1413): avc: denied { getopt } for pid=26788 comm="syz.0.7741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 559.086950][ T6006] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 559.099900][T26793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7743'. [ 559.110317][ T6006] usb 11-1: Using ep0 maxpacket: 32 [ 559.117930][ T6006] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 559.121007][ T6006] usb 11-1: can't read configurations, error -61 [ 559.271239][ T6006] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 559.287686][ T6006] usb 11-1: Using ep0 maxpacket: 32 [ 559.291708][ T6006] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 559.294216][ T6006] usb 11-1: can't read configurations, error -61 [ 559.296396][ T6006] usb usb11-port1: unable to enumerate USB device [ 559.337092][ T5297] Bluetooth: hci3: command 0x040f tx timeout [ 559.748812][T26817] fuse: Bad value for 'fd' [ 559.825306][T26824] netlink: '+}[@': attribute type 4 has an invalid length. [ 559.862730][ T5297] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 560.309587][ T5297] Bluetooth: hci0: unexpected event for opcode 0x0c38 [ 560.316768][ T29] usb 8-1: USB disconnect, device number 33 [ 560.422317][T26853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7766'. [ 560.616174][T26867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7771'. [ 560.879886][T26735] orangefs_mount: mount request failed with -4 [ 560.916778][T26896] fuse: Bad value for 'fd' [ 560.939138][ T40] audit: type=1804 audit(524856.366:1414): pid=26882 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.7772" name="/newroot/523/file0/file0" dev="9p" ino=71827827 res=1 errno=0 [ 560.975671][T18779] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 561.619579][T26918] FAULT_INJECTION: forcing a failure. [ 561.619579][T26918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.624961][T26918] CPU: 2 UID: 0 PID: 26918 Comm: syz.5.7788 Not tainted syzkaller #0 PREEMPT(full) [ 561.624983][T26918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 561.624994][T26918] Call Trace: [ 561.625010][T26918] [ 561.625016][T26918] dump_stack_lvl+0x16c/0x1f0 [ 561.625061][T26918] should_fail_ex+0x512/0x640 [ 561.625092][T26918] _copy_to_user+0x32/0xd0 [ 561.625114][T26918] simple_read_from_buffer+0xcb/0x170 [ 561.625143][T26918] proc_fail_nth_read+0x197/0x240 [ 561.625163][T26918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.625185][T26918] ? rw_verify_area+0xcf/0x6c0 [ 561.625210][T26918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.625230][T26918] vfs_read+0x1e4/0xcf0 [ 561.625249][T26918] ? __pfx___mutex_lock+0x10/0x10 [ 561.625266][T26918] ? __pfx_vfs_read+0x10/0x10 [ 561.625289][T26918] ? __fget_files+0x20e/0x3c0 [ 561.625306][T26918] ? smc_listen+0x6b0/0xbb0 [ 561.625334][T26918] ksys_read+0x12a/0x250 [ 561.625350][T26918] ? __pfx_ksys_read+0x10/0x10 [ 561.625367][T26918] ? fput+0x9b/0xd0 [ 561.625392][T26918] do_syscall_64+0xcd/0xfa0 [ 561.625418][T26918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.625438][T26918] RIP: 0033:0x7fb00a78d9dc [ 561.625454][T26918] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 561.625471][T26918] RSP: 002b:00007fb00b6e9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 561.625490][T26918] RAX: ffffffffffffffda RBX: 00007fb00a9e5fa0 RCX: 00007fb00a78d9dc [ 561.625501][T26918] RDX: 000000000000000f RSI: 00007fb00b6e90a0 RDI: 0000000000000004 [ 561.625510][T26918] RBP: 00007fb00b6e9090 R08: 0000000000000000 R09: 0000000000000000 [ 561.625520][T26918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.625529][T26918] R13: 00007fb00a9e6038 R14: 00007fb00a9e5fa0 R15: 00007ffe0dc2a628 [ 561.625555][T26918] [ 561.758255][T26922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=26922 comm=syz.3.7785 [ 561.768574][T26922] [U] [ 561.769728][T26922] [U] [ 561.770629][T26922] [U] [ 561.771542][T26922] [U] [ 561.772649][T26922] [U] [ 561.773558][T26922] [U] [ 561.774462][T26922] [U] [ 561.775434][T26922] [U] [ 561.776473][T26922] [U] [ 561.777349][T26922] [U] [ 561.778253][T26922] [U] *<\È.l&”æß>·O°¾k¬F¾áð*YÏÍû͸ÛV>â [ 561.780840][T26922] [U] Á'F¼#¯Væ [ 561.783956][T26922] [U] óC¿÷À3ÂA‰.u¾$Ø [ 561.785308][T26922] [U] g2t~&xP=V—èqIæ@'¾z¡´O‹Ã¡ôÒ u'_uÕ6w0:×Ýü:ZÜ)#ì¤òk-XæÊprˆ„žz鱤–¶•6êa«ælÃÈ@S* [ 561.789463][T26922] [U] >gchîã=d–&yukùA4'ü €ÞB):¯„‡.aoˆ¢N_ò¥(Ö>Lîv¦(æÔv}"6•m’Ü4„’2æ«ì]uJê91Ü€-ã(|9=¦þÉthP*[bQDZûª¤è3¶,ðÚžUCJýmÚo¾¸i“Ŝ9™ýŸ [ 561.795107][T26922] [U] ‚ò€\ [ 561.796367][T26922] [U] ƒoöG§5Pßž6ÞA [ 561.797628][T26922] [U] Ï[v£úMråIs‘i°´™/ì2¥×LM*¥œo§¤o¿NFs_sÆÚ¯üœ±@,u‡ßÊgiynVü£xié‹ãZeAµ8n «\ˆt¬>Yù6€PfR·›uß_yâ,hs0± ö0k[;Ü夤ýy+(Ž-®jךW#²Ÿ½ù¿ìýÊÍ<ïÆÈΞýOòÒ [ 561.802607][T26922] [U] Þ+KW`¦äÑ÷ª;·&?“ÖFߊ9¢õhǵT»äòysr¾'ý¤ ï°Ôý•È;ó¤|×x¾m¿”³BÆèäûä5‚•“í;ÿ¦ý [ 561.807429][T26922] [U] [ 561.808668][T26922] [U] [ 561.809875][T26922] [U] [ 561.811083][T26922] [U] [ 561.814031][T26922] netlink: 'syz.3.7785': attribute type 10 has an invalid length. [ 561.817478][T26922] hsr0: left allmulticast mode [ 561.819438][T26922] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 561.823930][T26921] [U] [ 561.915764][T26928] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7791'. [ 562.170508][T26938] FAULT_INJECTION: forcing a failure. [ 562.170508][T26938] name failslab, interval 1, probability 0, space 0, times 0 [ 562.174745][T26938] CPU: 2 UID: 0 PID: 26938 Comm: syz.6.7795 Not tainted syzkaller #0 PREEMPT(full) [ 562.174761][T26938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 562.174767][T26938] Call Trace: [ 562.174772][T26938] [ 562.174777][T26938] dump_stack_lvl+0x16c/0x1f0 [ 562.174797][T26938] should_fail_ex+0x512/0x640 [ 562.174809][T26938] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 562.174827][T26938] should_failslab+0xc2/0x120 [ 562.174839][T26938] kmem_cache_alloc_noprof+0x75/0x6e0 [ 562.174855][T26938] ? getname_flags.part.0+0x4c/0x550 [ 562.174872][T26938] ? getname_flags.part.0+0x4c/0x550 [ 562.174886][T26938] getname_flags.part.0+0x4c/0x550 [ 562.174901][T26938] getname_flags+0x93/0xf0 [ 562.174911][T26938] __x64_sys_rename+0x58/0xa0 [ 562.174924][T26938] do_syscall_64+0xcd/0xfa0 [ 562.174940][T26938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.174951][T26938] RIP: 0033:0x7feb6d58efc9 [ 562.174961][T26938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.174971][T26938] RSP: 002b:00007feb6e382038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 562.174982][T26938] RAX: ffffffffffffffda RBX: 00007feb6d7e6090 RCX: 00007feb6d58efc9 [ 562.174988][T26938] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 562.174995][T26938] RBP: 00007feb6e382090 R08: 0000000000000000 R09: 0000000000000000 [ 562.175001][T26938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.175007][T26938] R13: 00007feb6d7e6128 R14: 00007feb6d7e6090 R15: 00007ffe15be6428 [ 562.175021][T26938] [ 562.287018][ T1333] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 562.393693][T26946] fuse: Bad value for 'fd' [ 562.397014][ T64] Bluetooth: hci2: unexpected event for opcode 0x0803 [ 562.437994][T26949] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4886 sclass=netlink_xfrm_socket pid=26949 comm=syz.0.7798 [ 562.458166][ T1333] usb 8-1: Using ep0 maxpacket: 32 [ 562.461886][ T1333] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 562.465125][ T1333] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 562.471153][ T1333] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 562.474649][ T1333] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 562.480078][ T1333] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 562.483288][ T1333] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 562.487661][ T1333] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 562.490433][ T1333] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.494910][ T1333] usb 8-1: config 0 descriptor?? [ 562.706213][ T1333] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 562.720909][ T1333] usb 8-1: USB disconnect, device number 34 [ 562.731480][ T1333] usblp0: removed [ 562.787782][ T5297] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 562.925259][T26977] nftables ruleset with unbound chain [ 563.079209][T26984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7806'. [ 563.109577][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.115324][ T1240] bridge0: port 3(batadv0) entered disabled state [ 563.115746][ T40] audit: type=1400 audit(524858.536:1415): avc: denied { lock } for pid=26988 comm="syz.6.7807" path="socket:[126252]" dev="sockfs" ino=126252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 563.126523][ T1240] bridge_slave_1: left allmulticast mode [ 563.130985][ T1240] bridge_slave_1: left promiscuous mode [ 563.132968][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.137937][ T1240] bridge_slave_0: left allmulticast mode [ 563.139892][ T1240] bridge_slave_0: left promiscuous mode [ 563.141772][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.240413][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 563.242941][ T1333] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 563.407044][ T1333] usb 8-1: Using ep0 maxpacket: 32 [ 563.410311][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 563.413909][ T1333] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 563.416602][ T1333] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 563.419649][ T1333] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 563.422641][ T1333] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 563.425966][ T1333] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 563.429397][ T24] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 563.432345][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.435058][ T24] usb 10-1: Product: syz [ 563.436405][ T24] usb 10-1: Manufacturer: syz [ 563.438051][ T1333] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 563.442197][ T1333] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 563.445305][ T1333] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.448047][ T24] usb 10-1: SerialNumber: syz [ 563.452761][ T1333] usb 8-1: config 0 descriptor?? [ 563.456483][ T24] usb 10-1: config 0 descriptor?? [ 563.564448][T27010] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.7812'. [ 563.660085][ T1333] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 563.773238][ T1240] hsr_slave_0: left promiscuous mode [ 563.776200][ T1240] hsr_slave_1: left promiscuous mode [ 563.777203][T27031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7821'. [ 563.780715][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.784488][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.788409][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.790844][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.793579][ T1240] batman_adv: batadv0: Interface deactivated: macsec1 [ 563.795837][ T1240] batman_adv: batadv0: Removing interface: macsec1 [ 563.817132][ T5297] Bluetooth: hci3: command 0x040f tx timeout [ 563.834583][ T1240] batadv_slave_1: left promiscuous mode [ 563.837113][ T1240] veth1_macvtap: left promiscuous mode [ 563.839475][ T1240] veth0_macvtap: left promiscuous mode [ 563.841943][ T1240] veth1_vlan: left promiscuous mode [ 563.924330][T27034] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 563.962341][T27034] overlayfs: failed to resolve './file1': -2 [ 563.983391][T27037] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7822'. [ 564.643409][ T1240] team0 (unregistering): Port device team_slave_1 removed [ 564.731623][ T1240] team0 (unregistering): Port device team_slave_0 removed [ 564.809390][T27039] fuse: Bad value for 'fd' [ 564.820273][T18779] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 565.341037][ T1333] usb 8-1: USB disconnect, device number 35 [ 565.349608][ T1333] usblp0: removed [ 565.433406][T27058] netlink: 'syz.0.7829': attribute type 1 has an invalid length. [ 565.518122][ T40] audit: type=1400 audit(524860.946:1416): avc: denied { read } for pid=27062 comm="syz.6.7830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 565.535056][T27067] fuse: Bad value for 'fd' [ 565.538671][T18779] Bluetooth: hci2: unexpected event for opcode 0x0803 [ 565.606807][T27071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7830'. [ 565.609595][ T1240] IPVS: stop unused estimator thread 0... [ 565.937241][T11695] usb 10-1: USB disconnect, device number 2 [ 566.114244][T27084] netlink: 'syz.5.7839': attribute type 1 has an invalid length. [ 566.259274][ T40] audit: type=1400 audit(524861.686:1417): avc: denied { read } for pid=27088 comm="syz.3.7841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 566.311499][T27091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7842'. [ 566.557745][T27099] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7845'. [ 566.808819][T27114] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=27114 comm=syz.5.7850 [ 566.819365][T27114] input: syz1 as /devices/virtual/input/input18 [ 566.844587][T27114] team0: Device gtp0 is of different type [ 566.884636][T27118] IPv6: NLM_F_CREATE should be specified when creating new route [ 566.928102][T27123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7854'. [ 566.968536][T27126] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 567.015908][T27130] netlink: 'syz.0.7858': attribute type 10 has an invalid length. [ 567.018996][T27130] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7858'. [ 567.066236][T27139] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7862'. [ 567.136635][T27149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7866'. [ 567.140833][T27149] @: renamed from vlan0 (while UP) [ 567.193239][T27156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7870'. [ 567.276463][T27160] team0 (unregistering): Port device team_slave_0 removed [ 567.280775][ T6006] hid_parser_main: 8 callbacks suppressed [ 567.280787][ T6006] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 567.285096][ T6006] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 567.288423][ T6006] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 567.288752][T27160] team0 (unregistering): Port device team_slave_1 removed [ 567.290975][ T6006] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 567.291669][T27166] qnx4: no qnx4 filesystem (no root dir). [ 567.298588][ T6006] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 567.301680][ T6006] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 567.304133][ T6006] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 567.306450][ T6006] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 567.312999][ T6006] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 567.315385][ T6006] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 567.321522][ T6006] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz0 [ 567.364703][T27170] SELinux: failed to load policy [ 567.450548][T27185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7879'. [ 567.777255][T27204] MPI: mpi too large (16392 bits) [ 567.864981][T27212] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 567.869438][T27212] SELinux: failed to load policy [ 568.073972][ T40] audit: type=1400 audit(525119.505:1418): avc: denied { map } for pid=27223 comm="syz.5.7889" path="socket:[124701]" dev="sockfs" ino=124701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 568.083716][ T40] audit: type=1400 audit(525119.505:1419): avc: denied { accept } for pid=27223 comm="syz.5.7889" path="socket:[124701]" dev="sockfs" ino=124701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 568.212236][T27180] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 568.215210][T27180] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 568.223674][T27180] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 568.226277][T27180] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 568.259168][T27180] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 568.261087][T27180] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 568.297189][T27180] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 568.301841][T27180] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 568.323140][T27246] 9p: Unknown uid 00000000004294967295 [ 568.399260][ T40] audit: type=1400 audit(525119.835:1420): avc: denied { ioctl } for pid=27250 comm="syz.6.7897" path="socket:[128107]" dev="sockfs" ino=128107 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 569.437945][ T6019] IPVS: starting estimator thread 0... [ 569.527075][T27272] IPVS: using max 43 ests per chain, 103200 per kthread [ 569.699178][T27284] trusted_key: encrypted_key: key trusted:syz not found [ 570.121682][T27291] __nla_validate_parse: 1 callbacks suppressed [ 570.121701][T27291] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7909'. [ 570.489787][T27300] netlink: 'syz.5.7913': attribute type 10 has an invalid length. [ 570.493094][T27300] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7913'. [ 571.589085][T27318] netlink: 'syz.5.7921': attribute type 1 has an invalid length. [ 571.595312][T27318] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7921'. [ 571.654302][T27321] SQUASHFS error: Failed to read block 0x0: -5 [ 571.656621][T27321] unable to read squashfs_super_block [ 571.661045][T27321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=27321 comm=syz.3.7922 [ 571.707860][T27328] hpfs: hpfs_map_sector(): read error [ 571.834688][T27333] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 572.248219][T27344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.251596][T27344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.256847][T27344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.263035][T27344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.279467][T27344] bridge0: port 3(batadv0) entered disabled state [ 572.299596][T27344] bridge0: port 3(batadv0) entered disabled state [ 572.458930][T27357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7935'. [ 572.462442][T27357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7935'. [ 572.466139][T27357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7935'. [ 572.760078][ T40] audit: type=1400 audit(525124.195:1421): avc: denied { bind } for pid=27369 comm="syz.0.7939" lport=42312 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 573.173895][T27388] netlink: 1760 bytes leftover after parsing attributes in process `syz.5.7944'. [ 573.343137][T27396] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7947'. [ 574.127851][ T40] audit: type=1326 audit(525125.565:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27440 comm="syz.3.7967" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbff978efc9 code=0x0 [ 574.348000][T27465] all: renamed from lo [ 574.678319][T27488] nfs4: Unknown parameter 'ù˜' [ 574.816796][T27500] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7990'. [ 575.284324][T27515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7994'. [ 575.581552][T27549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8005'. [ 575.621480][T27553] netlink: 'syz.0.8007': attribute type 1 has an invalid length. [ 575.626011][T27553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8007'. [ 575.704179][T27559] syz.6.8010: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 575.710728][T27559] CPU: 0 UID: 0 PID: 27559 Comm: syz.6.8010 Not tainted syzkaller #0 PREEMPT(full) [ 575.710743][T27559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 575.710750][T27559] Call Trace: [ 575.710764][T27559] [ 575.710768][T27559] dump_stack_lvl+0x16c/0x1f0 [ 575.710800][T27559] warn_alloc+0x248/0x3a0 [ 575.710823][T27559] ? __pfx_warn_alloc+0x10/0x10 [ 575.710837][T27559] ? lockdep_hardirqs_on+0x7c/0x110 [ 575.710859][T27559] ? kasan_save_stack+0x42/0x60 [ 575.710871][T27559] ? kasan_save_stack+0x33/0x60 [ 575.710881][T27559] ? kasan_save_track+0x14/0x30 [ 575.710891][T27559] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 575.710903][T27559] ? __vb2_queue_alloc+0x8c9/0x1280 [ 575.710913][T27559] ? vb2_core_create_bufs+0x559/0xab0 [ 575.710926][T27559] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 575.710939][T27559] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 575.710957][T27559] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 575.710972][T27559] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 575.710989][T27559] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 575.711001][T27559] vmalloc_user_noprof+0x9e/0xe0 [ 575.711014][T27559] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 575.711027][T27559] vb2_vmalloc_alloc+0x135/0x3f0 [ 575.711039][T27559] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 575.711051][T27559] __vb2_queue_alloc+0x8c9/0x1280 [ 575.711069][T27559] vb2_core_create_bufs+0x559/0xab0 [ 575.711083][T27559] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 575.711098][T27559] ? __mutex_trylock_common+0xe9/0x250 [ 575.711111][T27559] vb2_create_bufs+0x5e8/0x840 [ 575.711123][T27559] ? __pfx_vb2_create_bufs+0x10/0x10 [ 575.711132][T27559] ? __mutex_lock+0x1c5/0x1060 [ 575.711142][T27559] ? v4l_sanitize_colorspace+0x213/0x400 [ 575.711161][T27559] vb2_ioctl_create_bufs+0x244/0x3e0 [ 575.711172][T27559] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 575.711187][T27559] vidioc_create_bufs+0x7d/0xf0 [ 575.711204][T27559] v4l_create_bufs+0x151/0x260 [ 575.711219][T27559] __video_do_ioctl+0xb77/0xf00 [ 575.711235][T27559] ? __might_fault+0xe3/0x190 [ 575.711250][T27559] ? __pfx___video_do_ioctl+0x10/0x10 [ 575.711270][T27559] video_usercopy+0x4d0/0x1720 [ 575.711286][T27559] ? __pfx___video_do_ioctl+0x10/0x10 [ 575.711300][T27559] ? selinux_kernel_read_file+0xc0/0x130 [ 575.711320][T27559] ? __pfx_video_usercopy+0x10/0x10 [ 575.711344][T27559] v4l2_ioctl+0x1bd/0x250 [ 575.711358][T27559] ? __pfx_v4l2_ioctl+0x10/0x10 [ 575.711374][T27559] __x64_sys_ioctl+0x18e/0x210 [ 575.711391][T27559] do_syscall_64+0xcd/0xfa0 [ 575.711407][T27559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.711418][T27559] RIP: 0033:0x7feb6d58efc9 [ 575.711427][T27559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.711437][T27559] RSP: 002b:00007feb6e3a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.711447][T27559] RAX: ffffffffffffffda RBX: 00007feb6d7e5fa0 RCX: 00007feb6d58efc9 [ 575.711454][T27559] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000007 [ 575.711460][T27559] RBP: 00007feb6d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 575.711466][T27559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.711472][T27559] R13: 00007feb6d7e6038 R14: 00007feb6d7e5fa0 R15: 00007ffe15be6428 [ 575.711486][T27559] [ 575.711491][T27559] Mem-Info: [ 575.748567][ T40] audit: type=1400 audit(525127.185:1423): avc: denied { connect } for pid=27566 comm="syz.5.8014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 575.750131][T27559] active_anon:71190 inactive_anon:0 isolated_anon:0 [ 575.750131][T27559] active_file:7332 inactive_file:19641 isolated_file:0 [ 575.750131][T27559] unevictable:18213 dirty:292 writeback:0 [ 575.750131][T27559] slab_reclaimable:9764 slab_unreclaimable:79858 [ 575.750131][T27559] mapped:29028 shmem:59080 pagetables:1988 [ 575.750131][T27559] sec_pagetables:324 bounce:0 [ 575.750131][T27559] kernel_misc_reclaimable:0 [ 575.750131][T27559] free:394478 free_pcp:9739 free_cma:0 [ 575.750534][T27569] IPVS: set_ctl: invalid protocol: 135 172.20.20.11:21 [ 575.799671][ T40] audit: type=1400 audit(525127.235:1424): avc: denied { read } for pid=27566 comm="syz.5.8014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 575.802401][T27559] Node 0 active_anon:187860kB inactive_anon:0kB active_file:25184kB inactive_file:76496kB unevictable:69316kB isolated(anon):0kB isolated(file):0kB mapped:108340kB dirty:1168kB writeback:0kB shmem:136004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14256kB pagetables:7756kB sec_pagetables:1288kB all_unreclaimable? no Balloon:0kB [ 575.827530][T27576] netlink: 'syz.0.8017': attribute type 1 has an invalid length. [ 575.835201][T27559] Node 1 active_anon:96900kB inactive_anon:0kB active_file:4144kB inactive_file:2068kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:7772kB dirty:0kB writeback:0kB shmem:100316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:176kB pagetables:320kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB [ 575.867077][T27559] Node 0 DMA free:7308kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6712kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 575.877720][T27559] lowmem_reserve[]: 0 1239 1239 1239 1239 [ 575.879562][T27559] Node 0 DMA32 free:75164kB boost:0kB min:27580kB low:34472kB high:41364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:181520kB inactive_anon:0kB active_file:25180kB inactive_file:76492kB unevictable:69316kB writepending:1168kB zspages:0kB present:2080628kB managed:1269500kB mlocked:212kB bounce:0kB free_pcp:35944kB local_pcp:8672kB free_cma:0kB [ 575.890807][T27559] lowmem_reserve[]: 0 0 0 0 0 [ 575.892537][T27559] Node 1 Normal free:1495048kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96900kB inactive_anon:0kB active_file:4144kB inactive_file:2068kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 575.903229][T27559] lowmem_reserve[]: 0 0 0 0 0 [ 575.904750][T27559] Node 0 DMA: 15*4kB (UM) 26*8kB (UM) 20*16kB (UM) 24*32kB (UM) 29*64kB (UM) 8*128kB (UM) 8*256kB (U) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 7308kB [ 575.909850][T27559] Node 0 DMA32: 62*4kB (M) 145*8kB (UME) 242*16kB (UME) 277*32kB (UE) 40*64kB (UE) 35*128kB (UME) 108*256kB (UME) 50*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 74432kB [ 575.915682][T27559] Node 1 Normal: 142*4kB (UM) 286*8kB (UME) 212*16kB (UME) 323*32kB (UME) 155*64kB (UME) 67*128kB (UME) 39*256kB (UME) 18*512kB (UM) 13*1024kB (UM) 13*2048kB (UM) 342*4096kB (UM) = 1495048kB [ 575.921346][T27584] overlayfs: failed to resolve './file1': -2 [ 575.922780][T27559] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 575.928910][T27559] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 575.932379][T27559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 575.935907][T27559] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 575.940049][T27559] 102441 total pagecache pages [ 575.941588][T27559] 0 pages in swap cache [ 575.943333][T27559] Free swap = 124996kB [ 575.944991][T27559] Total swap = 124996kB [ 575.946652][T27559] 1048443 pages RAM [ 575.948119][T27559] 0 pages HighMem/MovableOnly [ 575.950179][T27559] 281755 pages reserved [ 575.951798][T27559] 0 pages cma reserved [ 575.959445][T27587] tipc: Enabling of bearer rejected, failed to enable media [ 576.019753][T27593] netlink: 'syz.0.8023': attribute type 15 has an invalid length. [ 576.433411][T27618] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8034'. [ 576.655021][T27628] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8038'. [ 576.810734][T27634] tipc: Enabling of bearer rejected, failed to enable media [ 576.838743][T27636] netlink: 228 bytes leftover after parsing attributes in process `syz.6.8043'. [ 576.908271][T27649] netlink: 8800 bytes leftover after parsing attributes in process `syz.6.8047'. [ 576.912542][ T40] audit: type=1400 audit(525128.345:1425): avc: denied { shutdown } for pid=27648 comm="syz.6.8047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 576.980351][T27658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8048'. [ 576.985191][T27651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8048'. [ 577.011762][T27660] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8051'. [ 577.297057][ T6019] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 577.447703][ T6019] usb 10-1: too many configurations: 137, using maximum allowed: 8 [ 577.461658][ T6019] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 577.464512][ T6019] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.467184][ T6019] usb 10-1: Product: syz [ 577.468830][ T6019] usb 10-1: Manufacturer: syz [ 577.470825][ T6019] usb 10-1: SerialNumber: syz [ 577.479996][ T6019] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 577.496500][ T1333] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 578.254842][T27696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.258811][T27696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.537400][ T1333] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 578.540799][ T1333] ath9k_htc: Failed to initialize the device [ 578.564672][ T1333] usb 10-1: ath9k_htc: USB layer deinitialized [ 578.569383][ T1030] usb 10-1: USB disconnect, device number 3 [ 579.009935][T27719] netlink: 'syz.3.8074': attribute type 24 has an invalid length. [ 579.128440][T27727] netlink: 'syz.3.8078': attribute type 1 has an invalid length. [ 579.258600][T27737] xt_connbytes: Forcing CT accounting to be enabled [ 579.314962][T27744] FAULT_INJECTION: forcing a failure. [ 579.314962][T27744] name failslab, interval 1, probability 0, space 0, times 0 [ 579.320182][T27744] CPU: 1 UID: 0 PID: 27744 Comm: syz.5.8085 Not tainted syzkaller #0 PREEMPT(full) [ 579.320197][T27744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 579.320204][T27744] Call Trace: [ 579.320208][T27744] [ 579.320212][T27744] dump_stack_lvl+0x16c/0x1f0 [ 579.320232][T27744] should_fail_ex+0x512/0x640 [ 579.320244][T27744] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 579.320262][T27744] should_failslab+0xc2/0x120 [ 579.320275][T27744] kmem_cache_alloc_node_noprof+0x78/0x770 [ 579.320290][T27744] ? __alloc_skb+0x2b2/0x380 [ 579.320306][T27744] ? __alloc_skb+0x2b2/0x380 [ 579.320316][T27744] ? __pfx_netlink_insert+0x10/0x10 [ 579.320330][T27744] __alloc_skb+0x2b2/0x380 [ 579.320341][T27744] ? __pfx___alloc_skb+0x10/0x10 [ 579.320354][T27744] ? netlink_autobind.isra.0+0x158/0x370 [ 579.320371][T27744] netlink_alloc_large_skb+0x69/0x140 [ 579.320386][T27744] netlink_sendmsg+0x698/0xdd0 [ 579.320403][T27744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.320423][T27744] ____sys_sendmsg+0xa98/0xc70 [ 579.320439][T27744] ? copy_msghdr_from_user+0x10a/0x160 [ 579.320453][T27744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.320474][T27744] ___sys_sendmsg+0x134/0x1d0 [ 579.320488][T27744] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.320500][T27744] ? __lock_acquire+0x622/0x1c90 [ 579.320532][T27744] __sys_sendmsg+0x16d/0x220 [ 579.320545][T27744] ? __pfx___sys_sendmsg+0x10/0x10 [ 579.320567][T27744] do_syscall_64+0xcd/0xfa0 [ 579.320583][T27744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.320593][T27744] RIP: 0033:0x7fb00a78efc9 [ 579.320602][T27744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.320612][T27744] RSP: 002b:00007fb00b6e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.320622][T27744] RAX: ffffffffffffffda RBX: 00007fb00a9e5fa0 RCX: 00007fb00a78efc9 [ 579.320629][T27744] RDX: 0000000000048080 RSI: 0000200000000340 RDI: 0000000000000003 [ 579.320636][T27744] RBP: 00007fb00b6e9090 R08: 0000000000000000 R09: 0000000000000000 [ 579.320642][T27744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.320648][T27744] R13: 00007fb00a9e6038 R14: 00007fb00a9e5fa0 R15: 00007ffe0dc2a628 [ 579.320661][T27744] [ 579.523129][T27747] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27747 comm=syz.5.8086 [ 579.527783][ T40] audit: type=1400 audit(525130.965:1426): avc: denied { accept } for pid=27746 comm="syz.5.8086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 579.570502][T27757] netlink: 'syz.5.8089': attribute type 1 has an invalid length. [ 579.897566][T27777] orangefs_devreq_open: device cannot be opened in blocking mode [ 579.908800][T27771] syzkaller0: entered promiscuous mode [ 579.911200][T27771] syzkaller0: entered allmulticast mode [ 580.448719][T27789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 580.690207][T27801] bond0: (slave dummy0): Releasing backup interface [ 580.691060][ T40] audit: type=1400 audit(525132.125:1427): avc: denied { unmount } for pid=26020 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 580.704194][T27801] bridge0: port 3(batadv0) entered disabled state [ 580.711361][T27801] bridge_slave_0: left allmulticast mode [ 580.713239][T27801] bridge_slave_0: left promiscuous mode [ 580.715165][T27801] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.721100][T27801] bridge_slave_1: left allmulticast mode [ 580.723024][T27801] bridge_slave_1: left promiscuous mode [ 580.724888][T27801] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.734918][T27801] bond0: (slave bond_slave_0): Releasing backup interface [ 580.740918][T27801] bond0: (slave bond_slave_1): Releasing backup interface [ 580.752168][T27801] team0: Port device team_slave_0 removed [ 580.757816][T27801] team0: Port device team_slave_1 removed [ 580.760026][T27801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.762428][T27801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.771217][T27801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.774108][T27801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.781583][T27801] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 580.782007][T27808] __nla_validate_parse: 6 callbacks suppressed [ 580.782016][T27808] netlink: 92 bytes leftover after parsing attributes in process `syz.6.8108'. [ 580.815565][T27801] team0: Mode changed to "loadbalance" [ 580.827585][T27801] vlan0: entered promiscuous mode [ 580.834203][T27801] team0: Port device vlan0 added [ 580.845014][T27801] tipc: Enabled bearer , priority 0 [ 580.937466][T27821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8112'. [ 581.058817][T27834] netlink: 'syz.0.8116': attribute type 2 has an invalid length. [ 581.061370][T27834] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8116'. [ 581.124043][T27840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8119'. [ 581.150685][T27843] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8121'. [ 581.187910][T27848] bond0: entered promiscuous mode [ 581.189831][T27848] bond_slave_0: entered promiscuous mode [ 581.191835][T27848] bond_slave_1: entered promiscuous mode [ 581.193886][T27848] batadv0: entered promiscuous mode [ 581.198133][T27848] bond0: left promiscuous mode [ 581.199730][T27848] bond_slave_0: left promiscuous mode [ 581.201510][T27848] bond_slave_1: left promiscuous mode [ 581.203303][T27848] batadv0: left promiscuous mode [ 581.458032][T27878] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8132'. [ 581.565678][T27884] binder_alloc: binder_alloc_mmap_handler: 27883 200000ffe000-200000fff000 already mapped failed -16 [ 581.805488][T27890] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 582.281593][T27912] openvswitch: netlink: IP tunnel dst address not specified [ 582.282561][T27914] overlayfs: failed to clone lowerpath [ 582.609999][ T40] audit: type=1804 audit(525134.045:1428): pid=27936 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.8148" name="/newroot/177/file0/file0" dev="9p" ino=71827827 res=1 errno=0 [ 582.642177][T27942] netlink: 'syz.6.8151': attribute type 1 has an invalid length. [ 582.649340][T27942] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8151'. [ 582.813331][T27951] tipc: Started in network mode [ 582.815670][T27951] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 582.820470][T27951] tipc: Enabled bearer , priority 10 [ 582.862067][T27953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.867748][T27953] batadv_slave_0: entered promiscuous mode [ 582.870390][T27953] batadv_slave_0: entered allmulticast mode [ 583.078729][T27962] (syz.6.8160,27962,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 583.083094][T27962] (syz.6.8160,27962,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 583.087005][T27962] (syz.6.8160,27962,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 583.093028][T27962] (syz.6.8160,27962,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 583.277101][T27963] could not allocate digest TFM handle cryptd(blake2b-160) [ 583.314848][T27989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8165'. [ 583.324125][T27989] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.462580][T27998] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8169'. [ 583.593357][T28008] comedi comedi3: comedi_config --init_data is deprecated [ 583.947029][ T1333] tipc: Node number set to 1 [ 584.147318][T28026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8178'. [ 584.406519][T28040] netlink: 'syz.5.8184': attribute type 10 has an invalid length. [ 584.417911][T28042] Cannot find map_set index 65532 as target [ 584.459928][ T40] audit: type=1400 audit(525135.895:1429): avc: denied { mounton } for pid=28045 comm="syz.5.8186" path="/187/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 584.460123][T28048] overlayfs: failed to resolve 'euid=00000000000000060929': -2 [ 584.564831][T28061] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 584.621374][T28066] netlink: 'syz.3.8194': attribute type 10 has an invalid length. [ 584.624700][T28066] batadv0: entered promiscuous mode [ 584.627350][T28066] bridge0: port 3(batadv0) entered blocking state [ 584.630321][T28066] bridge0: port 3(batadv0) entered disabled state [ 584.724988][T28075] netlink: 'syz.3.8198': attribute type 10 has an invalid length. [ 584.727079][T28076] netlink: 'syz.3.8198': attribute type 10 has an invalid length. [ 584.729217][T28075] team0: left allmulticast mode [ 584.734566][T28075] batman_adv: batadv0: Adding interface: team0 [ 584.737626][T28075] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.748093][T28075] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 584.789794][T28081] all: renamed from lo (while UP) [ 584.799060][ T40] audit: type=1400 audit(525136.235:1430): avc: denied { read } for pid=28079 comm="syz.5.8201" name="file0" dev="tmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 584.810549][T28084] netlink: 'syz.6.8202': attribute type 5 has an invalid length. [ 584.841300][T28086] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 584.861373][ T40] audit: type=1400 audit(525136.295:1431): avc: denied { write } for pid=28087 comm="syz.6.8204" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 584.862407][T28088] tmpfs: Unknown parameter 'Üakª«Ý§ault' [ 584.871111][ T40] audit: type=1400 audit(525136.295:1432): avc: denied { setopt } for pid=28087 comm="syz.6.8204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 585.047473][T24714] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 585.051190][T24714] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 585.275607][T28120] NILFS (nbd3): device size too small [ 585.502372][ T40] audit: type=1400 audit(525136.935:1433): avc: denied { mount } for pid=28144 comm="syz.0.8226" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 585.557313][ T40] audit: type=1400 audit(525136.985:1434): avc: denied { getopt } for pid=28138 comm="syz.5.8223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 585.604172][T28154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=28154 comm=syz.0.8229 [ 585.643885][ T40] audit: type=1326 audit(525137.075:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28156 comm="syz.0.8230" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86c958efc9 code=0x0 [ 585.661685][T28139] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 585.737592][T28161] : entered promiscuous mode [ 586.341499][T28189] __nla_validate_parse: 5 callbacks suppressed [ 586.341514][T28189] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8241'. [ 586.347353][T28189] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8241'. [ 586.351551][T28189] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8241'. [ 586.414111][ T40] audit: type=1400 audit(525137.845:1436): avc: denied { mount } for pid=28188 comm="syz.5.8241" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 586.422992][ T40] audit: type=1400 audit(525137.845:1437): avc: denied { remount } for pid=28188 comm="syz.5.8241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 586.470912][T28194] netlink: 'syz.3.8242': attribute type 2 has an invalid length. [ 586.540165][T28198] netlink: 'syz.0.8244': attribute type 32 has an invalid length. [ 586.721509][T28210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8246'. [ 586.775524][T28210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=28210 comm=syz.0.8246 [ 586.910312][T28222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8250'. [ 586.913835][T28222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8250'. [ 586.920901][T28222] xt_l2tp: v2 doesn't support IP mode [ 586.966632][T28227] tipc: Can't bind to reserved service type 1 [ 587.046815][T28230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8253'. [ 587.050501][T28230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8253'. [ 587.162373][T28238] overlayfs: failed to clone lowerpath [ 587.188020][ T40] audit: type=1400 audit(525138.625:1438): avc: denied { unmount } for pid=26020 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 587.355633][T28252] sit0: entered promiscuous mode [ 587.360715][T28252] sit0: left allmulticast mode [ 587.362636][T28252] netlink: 'syz.3.8261': attribute type 1 has an invalid length. [ 587.365013][T28252] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8261'. [ 587.365299][ T40] audit: type=1326 audit(525138.795:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28247 comm="syz.0.8259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c958efc9 code=0x7fc00000 [ 587.401497][T28256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=28256 comm=syz.3.8262 [ 587.530287][T28264] netlink: 'syz.0.8266': attribute type 10 has an invalid length. [ 587.534282][T28264] batadv0: left promiscuous mode [ 587.536402][T28264] batadv0: left allmulticast mode [ 587.543798][T28264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.548451][T28264] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 587.601105][T28273] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8270'. [ 587.760539][T28284] xt_hashlimit: size too large, truncated to 1048576 [ 587.885805][ T5297] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 587.890478][ T5297] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 587.894012][ T5297] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 587.898542][ T5297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 587.901262][ T5297] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 587.910253][T18779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 587.915518][T18779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 587.918535][T18779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 587.921183][T18779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 587.924406][T18779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 588.008360][T28299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 588.010931][T28299] IPv6: NLM_F_CREATE should be set when creating new route [ 588.013255][T28299] IPv6: NLM_F_CREATE should be set when creating new route [ 588.041635][T28288] chnl_net:caif_netlink_parms(): no params data found [ 588.137865][T28288] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.140849][T28288] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.143933][T28288] bridge_slave_0: entered allmulticast mode [ 588.149536][T28288] bridge_slave_0: entered promiscuous mode [ 588.153995][T28288] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.156753][T28288] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.159764][T28288] bridge_slave_1: entered allmulticast mode [ 588.163515][T28288] bridge_slave_1: entered promiscuous mode [ 588.213722][T28288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.221047][T28288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.258870][T28313] netlink: 'syz.5.8282': attribute type 12 has an invalid length. [ 588.280011][T28288] team0: Port device team_slave_0 added [ 588.283382][T28288] team0: Port device team_slave_1 added [ 588.325550][T28288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.327648][T28288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.334764][T28288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.339728][T28288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.341800][T28288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.350070][T28288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.399059][T28317] bond0: Error: Cannot enslave bond to itself. [ 588.405606][T28288] hsr_slave_0: entered promiscuous mode [ 588.409022][T28288] hsr_slave_1: entered promiscuous mode [ 588.412013][T28288] debugfs: 'hsr0' already exists in 'hsr' [ 588.414281][T28288] Cannot create hsr debugfs directory [ 588.450293][T28319] overlay: ./file0 is not a directory [ 588.672786][T28339] netlink: 'syz.6.8296': attribute type 2 has an invalid length. [ 588.675451][T28339] netlink: 'syz.6.8296': attribute type 1 has an invalid length. [ 588.678669][T28339] netlink: 'syz.6.8296': attribute type 1 has an invalid length. [ 588.721896][T28341] program syz.5.8295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.908275][T28288] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 588.915472][T28288] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 588.919618][T28288] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 588.923643][T28288] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 588.941313][T28288] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.943633][T28288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.946085][T28288] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.948548][T28288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.992021][T28288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.002720][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.008264][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.036741][T28288] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.044774][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.047531][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.055809][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.058913][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.078594][T28369] nbd: must specify an index to disconnect [ 589.170937][T28288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.194620][T28288] veth0_vlan: entered promiscuous mode [ 589.200645][T28288] veth1_vlan: entered promiscuous mode [ 589.216742][T28288] veth0_macvtap: entered promiscuous mode [ 589.228932][T28288] veth1_macvtap: entered promiscuous mode [ 589.237015][T28288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.241395][T28288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.254857][ T1147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.261125][ T1147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.264009][ T1147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.268239][ T1147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.302236][T24714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.304826][T24714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.329307][T24714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.332774][T24714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.405662][T28385] xt_bpf: check failed: parse error [ 589.449870][T28389] netlink: 'syz.3.8308': attribute type 1 has an invalid length. [ 589.540039][T28398] netlink: 'syz.6.8311': attribute type 10 has an invalid length. [ 589.648636][T28409] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 589.660439][T28410] delete_channel: no stack [ 589.977569][T18779] Bluetooth: hci4: command tx timeout [ 590.459263][T28439] overlayfs: failed to resolve './file2': -2 [ 590.489463][T28443] openvswitch: netlink: Flow key attribute not present in set flow. [ 590.593232][T28451] FAULT_INJECTION: forcing a failure. [ 590.593232][T28451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.598731][T28451] CPU: 2 UID: 0 PID: 28451 Comm: syz.6.8334 Not tainted syzkaller #0 PREEMPT(full) [ 590.598753][T28451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 590.598762][T28451] Call Trace: [ 590.598777][T28451] [ 590.598783][T28451] dump_stack_lvl+0x16c/0x1f0 [ 590.598824][T28451] should_fail_ex+0x512/0x640 [ 590.598852][T28451] _copy_from_user+0x2e/0xd0 [ 590.598874][T28451] do_sock_getsockopt+0x3ca/0x440 [ 590.598899][T28451] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 590.598920][T28451] ? __fget_files+0x204/0x3c0 [ 590.598955][T28451] __sys_getsockopt+0x12f/0x260 [ 590.598981][T28451] __x64_sys_getsockopt+0xbd/0x160 [ 590.598998][T28451] ? do_syscall_64+0x91/0xfa0 [ 590.599020][T28451] ? lockdep_hardirqs_on+0x7c/0x110 [ 590.599043][T28451] do_syscall_64+0xcd/0xfa0 [ 590.599067][T28451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.599082][T28451] RIP: 0033:0x7feb6d58efc9 [ 590.599096][T28451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.599112][T28451] RSP: 002b:00007feb6e3a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 590.599129][T28451] RAX: ffffffffffffffda RBX: 00007feb6d7e5fa0 RCX: 00007feb6d58efc9 [ 590.599139][T28451] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 590.599150][T28451] RBP: 00007feb6e3a3090 R08: 0000200000000380 R09: 0000000000000000 [ 590.599160][T28451] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 590.599170][T28451] R13: 00007feb6d7e6038 R14: 00007feb6d7e5fa0 R15: 00007ffe15be6428 [ 590.599193][T28451] [ 591.021313][ T40] kauditd_printk_skb: 1019 callbacks suppressed [ 591.021326][ T40] audit: type=1400 audit(525142.455:2459): avc: denied { getopt } for pid=28470 comm="syz.3.8341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 591.390380][T28474] netdevsim netdevsim0: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 591.843833][T28488] __nla_validate_parse: 11 callbacks suppressed [ 591.843844][T28488] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8346'. [ 592.021347][T28499] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 592.030176][T28501] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.8353'. [ 592.109162][T28508] validate_nla: 1 callbacks suppressed [ 592.109172][T28508] netlink: 'syz.6.8356': attribute type 1 has an invalid length. [ 592.124635][T28508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 592.129365][T28508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8356'. [ 592.132117][T28508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8356'. [ 592.292963][T28527] warn_alloc: 1 callbacks suppressed [ 592.292973][T28527] syz.6.8363: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 592.300098][T28527] CPU: 3 UID: 0 PID: 28527 Comm: syz.6.8363 Not tainted syzkaller #0 PREEMPT(full) [ 592.300117][T28527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 592.300126][T28527] Call Trace: [ 592.300137][T28527] [ 592.300142][T28527] dump_stack_lvl+0x16c/0x1f0 [ 592.300175][T28527] warn_alloc+0x248/0x3a0 [ 592.300197][T28527] ? __pfx_warn_alloc+0x10/0x10 [ 592.300213][T28527] ? __pfx_stack_trace_save+0x10/0x10 [ 592.300234][T28527] ? kasan_save_stack+0x42/0x60 [ 592.300247][T28527] ? kasan_save_stack+0x33/0x60 [ 592.300257][T28527] ? kasan_save_track+0x14/0x30 [ 592.300269][T28527] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 592.300283][T28527] ? __vb2_queue_alloc+0x8c9/0x1280 [ 592.300296][T28527] ? vb2_core_create_bufs+0x559/0xab0 [ 592.300310][T28527] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 592.300324][T28527] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 592.300343][T28527] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 592.300360][T28527] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 592.300380][T28527] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 592.300400][T28527] vmalloc_user_noprof+0x9e/0xe0 [ 592.300416][T28527] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 592.300432][T28527] vb2_vmalloc_alloc+0x135/0x3f0 [ 592.300448][T28527] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 592.300463][T28527] __vb2_queue_alloc+0x8c9/0x1280 [ 592.300484][T28527] vb2_core_create_bufs+0x559/0xab0 [ 592.300499][T28527] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 592.300536][T28527] ? __mutex_trylock_common+0xe9/0x250 [ 592.300554][T28527] vb2_create_bufs+0x5e8/0x840 [ 592.300570][T28527] ? __pfx_vb2_create_bufs+0x10/0x10 [ 592.300581][T28527] ? __mutex_lock+0x1c5/0x1060 [ 592.300594][T28527] ? v4l_sanitize_colorspace+0x213/0x400 [ 592.300615][T28527] vb2_ioctl_create_bufs+0x244/0x3e0 [ 592.300628][T28527] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 592.300646][T28527] vidioc_create_bufs+0x7d/0xf0 [ 592.300665][T28527] v4l_create_bufs+0x151/0x260 [ 592.300681][T28527] __video_do_ioctl+0xb77/0xf00 [ 592.300700][T28527] ? __might_fault+0xe3/0x190 [ 592.300717][T28527] ? __pfx___video_do_ioctl+0x10/0x10 [ 592.300739][T28527] video_usercopy+0x4d0/0x1720 [ 592.300757][T28527] ? __pfx___video_do_ioctl+0x10/0x10 [ 592.300773][T28527] ? selinux_kernel_read_file+0xc0/0x130 [ 592.300794][T28527] ? __pfx_video_usercopy+0x10/0x10 [ 592.300834][T28527] v4l2_ioctl+0x1bd/0x250 [ 592.300856][T28527] ? __pfx_v4l2_ioctl+0x10/0x10 [ 592.300885][T28527] __x64_sys_ioctl+0x18e/0x210 [ 592.300914][T28527] do_syscall_64+0xcd/0xfa0 [ 592.300947][T28527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.300965][T28527] RIP: 0033:0x7feb6d58efc9 [ 592.300977][T28527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.300988][T28527] RSP: 002b:00007feb6e3a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.300999][T28527] RAX: ffffffffffffffda RBX: 00007feb6d7e5fa0 RCX: 00007feb6d58efc9 [ 592.301006][T28527] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000003 [ 592.301013][T28527] RBP: 00007feb6d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 592.301020][T28527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.301026][T28527] R13: 00007feb6d7e6038 R14: 00007feb6d7e5fa0 R15: 00007ffe15be6428 [ 592.301042][T28527] [ 592.301083][T28527] Mem-Info: [ 592.347704][T28529] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.8364'. [ 592.349343][T28527] active_anon:52788 inactive_anon:0 isolated_anon:0 [ 592.349343][T28527] active_file:7332 inactive_file:19642 isolated_file:0 [ 592.349343][T28527] unevictable:18160 dirty:285 writeback:0 [ 592.349343][T28527] slab_reclaimable:9925 slab_unreclaimable:81537 [ 592.349343][T28527] mapped:26138 shmem:39804 pagetables:1938 [ 592.349343][T28527] sec_pagetables:324 bounce:0 [ 592.349343][T28527] kernel_misc_reclaimable:0 [ 592.349343][T28527] free:400340 free_pcp:19023 free_cma:0 [ 592.431761][T28527] Node 0 active_anon:164152kB inactive_anon:0kB active_file:25184kB inactive_file:76500kB unevictable:69104kB isolated(anon):0kB isolated(file):0kB mapped:96780kB dirty:1136kB writeback:0kB shmem:109172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14480kB pagetables:7444kB sec_pagetables:1288kB all_unreclaimable? no Balloon:0kB [ 592.442582][T28527] Node 1 active_anon:46628kB inactive_anon:0kB active_file:4144kB inactive_file:2068kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:7772kB dirty:4kB writeback:0kB shmem:50044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:176kB pagetables:308kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB [ 592.442630][T28527] Node 0 DMA free:11388kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2660kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:104kB free_cma:0kB [ 592.442682][T28527] lowmem_reserve[]: 0 1239 1239 1239 1239 [ 592.442720][T28527] Node 0 DMA32 free:68184kB boost:0kB min:27580kB low:34472kB high:41364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:161492kB inactive_anon:0kB active_file:25180kB inactive_file:76496kB unevictable:69104kB writepending:1136kB zspages:0kB present:2080628kB managed:1269500kB mlocked:0kB bounce:0kB free_pcp:50776kB local_pcp:15824kB free_cma:0kB [ 592.442775][T28527] lowmem_reserve[]: 0 0 0 0 0 [ 592.442810][T28527] Node 1 Normal free:1521788kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46628kB inactive_anon:0kB active_file:4144kB inactive_file:2068kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:25592kB local_pcp:7192kB free_cma:0kB [ 592.442862][T28527] lowmem_reserve[]: 0 0 0 0 0 [ 592.442898][T28527] Node 0 DMA: 15*4kB (UM) 22*8kB (UM) 15*16kB (UM) 27*32kB (UM) 25*64kB (UM) 10*128kB (UM) 8*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 0*4096kB = 11388kB [ 592.442998][T28527] Node 0 DMA32: 2317*4kB (UME) 1042*8kB (UME) 357*16kB (UME) 324*32kB (UM) 169*64kB (UME) 17*128kB (UME) 24*256kB (UME) 12*512kB (UM) 9*1024kB (UM) 0*2048kB 0*4096kB = 68180kB [ 592.443082][T28527] Node 1 Normal: 163*4kB (UM) 302*8kB (UME) 276*16kB (UME) 362*32kB [ 592.461383][T28535] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8367'. [ 592.464185][T28527] (UME) [ 592.491374][T28536] netlink: 'syz.5.8365': attribute type 9 has an invalid length. [ 592.491571][T28527] 242*64kB [ 592.505088][T28527] (UME) [ 592.517960][T28538] ip6t_srh: unknown srh invflags 51E8 [ 592.518041][T28539] ip6t_srh: unknown srh invflags 51E8 [ 592.518088][T28527] 129*128kB (UME) 97*256kB (UME) 22*512kB (UM) 13*1024kB (UM) 10*2048kB (UM) 342*4096kB (UM) = 1521788kB [ 592.518180][T28527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 592.518197][T28527] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 592.518212][T28527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 592.518228][T28527] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 592.518243][T28527] 83166 total pagecache pages [ 592.518250][T28527] 0 pages in swap cache [ 592.518257][T28527] Free swap = 124996kB [ 592.518265][T28527] Total swap = 124996kB [ 592.518273][T28527] 1048443 pages RAM [ 592.518280][T28527] 0 pages HighMem/MovableOnly [ 592.518287][T28527] 281755 pages reserved [ 592.518294][T28527] 0 pages cma reserved [ 592.622972][T28549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8371'. [ 592.626863][T28549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8371'. [ 593.020636][T28575] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8376'. [ 593.100791][T28579] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 593.196376][ T40] audit: type=1400 audit(525144.625:2460): avc: denied { map } for pid=28582 comm="syz.0.8380" path="socket:[134835]" dev="sockfs" ino=134835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 593.206628][ T40] audit: type=1400 audit(525144.625:2461): avc: denied { accept } for pid=28582 comm="syz.0.8380" path="socket:[134835]" dev="sockfs" ino=134835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 593.261417][T28585] cgroup: Setting release_agent not allowed [ 593.462649][T28611] Cannot find add_set index 1 as target [ 593.629291][T28619] netdevsim netdevsim6: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 593.629369][T28620] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8392'. [ 593.699234][T28617] infiniband syz2: set active [ 593.701021][T28617] infiniband syz2: added bond0 [ 593.734844][T28617] RDS/IB: syz2: added [ 593.736569][T28617] smc: adding ib device syz2 with port count 1 [ 593.738887][T28617] smc: ib device syz2 port 1 has no pnetid [ 593.748106][T28625] netlink: 'syz.6.8395': attribute type 1 has an invalid length. [ 593.977292][T18779] Bluetooth: hci4: command tx timeout [ 594.469173][ T40] audit: type=1400 audit(525145.905:2462): avc: denied { ioctl } for pid=28638 comm="syz.5.8399" path="socket:[133885]" dev="sockfs" ino=133885 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 594.472103][T28639] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 594.488941][T28639] fuse: Bad value for 'fd' [ 594.609760][T28645] netdevsim netdevsim5: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 594.997676][T28661] BIDI support in bsg has been removed. [ 595.091022][T28665] netlink: 'syz.5.8409': attribute type 1 has an invalid length. [ 595.153507][T28669] overlayfs: missing 'lowerdir' [ 595.288386][T28684] tmpfs: Bad value for 'mpol' [ 595.445653][ T40] audit: type=1400 audit(525146.875:2463): avc: denied { mounton } for pid=28704 comm="syz.6.8428" path="/190/file0" dev="autofs" ino=136520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 595.559329][T28712] ip6erspan0: entered promiscuous mode [ 595.949647][T28742] netlink: 'syz.3.8443': attribute type 1 has an invalid length. [ 595.952248][T28742] netlink: 'syz.3.8443': attribute type 3 has an invalid length. [ 595.954660][T28742] NCSI netlink: No device for ifindex 813332851 [ 595.988192][ T5297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 595.993422][ T5297] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 595.998972][ T5297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 596.001241][T28745] xt_TPROXY: Can be used only with -p tcp or -p udp [ 596.003323][ T5297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 596.010332][ T5297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 596.057111][ T5297] Bluetooth: hci4: command tx timeout [ 596.062618][T28753] netlink: 'syz.3.8447': attribute type 10 has an invalid length. [ 596.227124][T28746] chnl_net:caif_netlink_parms(): no params data found [ 596.345114][T28746] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.349329][T28746] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.351817][T28746] bridge_slave_0: entered allmulticast mode [ 596.354934][T28746] bridge_slave_0: entered promiscuous mode [ 596.359702][T28746] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.361975][T28746] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.364230][T28746] bridge_slave_1: entered allmulticast mode [ 596.366874][T28746] bridge_slave_1: entered promiscuous mode [ 596.440437][T28781] netlink: 'syz.0.8456': attribute type 12 has an invalid length. [ 596.454163][T28746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.464065][T28746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.529558][T28746] team0: Port device team_slave_0 added [ 596.533774][T28746] team0: Port device team_slave_1 added [ 596.560879][T28791] overlayfs: missing 'lowerdir' [ 596.573312][T28746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.575455][T28746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.584168][T28746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.588806][T28746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.591221][T28746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.601817][T28746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.652379][T28746] hsr_slave_0: entered promiscuous mode [ 596.654696][T28746] hsr_slave_1: entered promiscuous mode [ 596.658122][T28746] debugfs: 'hsr0' already exists in 'hsr' [ 596.659979][T28746] Cannot create hsr debugfs directory [ 596.815135][T28801] team0 (unregistering): Port device team_slave_0 removed [ 596.820454][T28801] team0 (unregistering): Port device team_slave_1 removed [ 596.912460][T28746] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 596.916868][T28746] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 596.923557][T28746] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 596.929349][T28746] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 596.981827][T28746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.992658][T28746] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.997543][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.999742][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.007231][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.010016][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.041310][ T40] audit: type=1400 audit(525148.475:2464): avc: denied { map } for pid=28816 comm="syz.3.8468" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 597.044591][T28817] sctp: [Deprecated]: syz.3.8468 (pid 28817) Use of int in maxseg socket option. [ 597.044591][T28817] Use struct sctp_assoc_value instead [ 597.072742][ T40] audit: type=1400 audit(525148.475:2465): avc: denied { execute } for pid=28816 comm="syz.3.8468" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 597.125653][T28746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.177016][ T6019] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 597.241498][T28834] __nla_validate_parse: 6 callbacks suppressed [ 597.241509][T28834] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8472'. [ 597.285136][T28746] veth0_vlan: entered promiscuous mode [ 597.290394][T28746] veth1_vlan: entered promiscuous mode [ 597.306158][T28746] veth0_macvtap: entered promiscuous mode [ 597.313544][T28746] veth1_macvtap: entered promiscuous mode [ 597.329672][T28746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.335247][T28840] netlink: 'syz.3.8474': attribute type 3 has an invalid length. [ 597.337964][ T6019] usb 10-1: Using ep0 maxpacket: 8 [ 597.341051][ T6019] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.341953][T28746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.344096][T28840] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 597.345274][ T6019] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 597.353490][ T1147] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.354261][ T6019] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 597.358241][ T1147] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.361380][ T6019] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 597.363539][ T1147] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.367115][ T6019] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 597.371242][ T1147] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.373703][ T6019] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.383802][T28806] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 597.389032][ T6019] hub 10-1:1.0: bad descriptor, ignoring hub [ 597.394095][ T6019] hub 10-1:1.0: probe with driver hub failed with error -5 [ 597.399908][ T6019] cdc_wdm 10-1:1.0: skipping garbage [ 597.402208][ T6019] cdc_wdm 10-1:1.0: skipping garbage [ 597.405271][ T6019] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 597.407703][ T6019] cdc_wdm 10-1:1.0: Unknown control protocol [ 597.423433][T24714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.426677][T24714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.445670][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.449070][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.662703][ C0] wdm_int_callback: 5 callbacks suppressed [ 597.662716][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 597.666960][ C0] wdm_int_callback: 5 callbacks suppressed [ 597.666969][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 598.057371][ T5297] Bluetooth: hci1: command tx timeout [ 598.532700][T28860] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8480'. [ 598.639379][T28864] nbd: nbd3 already in use [ 598.648641][T28865] nbd: nbd3 already in use [ 598.983458][ T7393] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.079116][ T7393] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.161104][ T7393] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.174205][T18779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 599.181620][T18779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 599.184817][T18779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 599.190301][T18779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 599.193007][T18779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 599.240292][ T7393] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.373063][ T7393] bridge_slave_1: left allmulticast mode [ 599.375071][ T7393] bridge_slave_1: left promiscuous mode [ 599.377028][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.380810][ T7393] bridge_slave_0: left allmulticast mode [ 599.382717][ T7393] bridge_slave_0: left promiscuous mode [ 599.384869][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.688906][ T7393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.693338][ T7393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.698158][ T7393] bond0 (unregistering): Released all slaves [ 599.784435][T28870] chnl_net:caif_netlink_parms(): no params data found [ 599.899500][T28870] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.902722][T28870] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.905898][T28870] bridge_slave_0: entered allmulticast mode [ 599.915385][T28870] bridge_slave_0: entered promiscuous mode [ 599.917258][ T34] usb 10-1: USB disconnect, device number 4 [ 599.922404][T28870] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.925489][T28870] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.928605][T28870] bridge_slave_1: entered allmulticast mode [ 599.930210][T28907] tipc: Trying to set illegal importance in message [ 599.932761][T28870] bridge_slave_1: entered promiscuous mode [ 600.019358][T28870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.026425][T28870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.060905][T28870] team0: Port device team_slave_0 added [ 600.064812][T28870] team0: Port device team_slave_1 added [ 600.101343][T28870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.103867][T28870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.112675][T28870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.119690][T28870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.122205][T28870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.132777][T28870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.137431][T18779] Bluetooth: hci1: command tx timeout [ 600.140023][T28917] overlayfs: failed to clone upperpath [ 600.231592][ T7393] hsr_slave_0: left promiscuous mode [ 600.234485][ T7393] hsr_slave_1: left promiscuous mode [ 600.237936][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.240295][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.243316][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.245654][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.284165][ T7393] veth1_macvtap: left promiscuous mode [ 600.286454][ T7393] veth0_macvtap: left promiscuous mode [ 600.288409][ T7393] veth1_vlan: left promiscuous mode [ 600.290168][ T7393] veth0_vlan: left promiscuous mode [ 601.260821][T18779] Bluetooth: hci3: command tx timeout [ 601.696403][T28870] hsr_slave_0: entered promiscuous mode [ 601.699891][T28870] hsr_slave_1: entered promiscuous mode [ 601.702764][T28870] debugfs: 'hsr0' already exists in 'hsr' [ 601.705254][T28870] Cannot create hsr debugfs directory [ 601.723618][T28938] tipc: Enabling of bearer rejected, failed to enable media [ 601.764109][ T40] audit: type=1400 audit(525153.195:2466): avc: denied { write } for pid=28939 comm="syz.7.8505" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 601.835160][T28947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8507'. [ 602.114120][T28960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.138177][ T34] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 602.193234][T28870] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 602.211908][T28870] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 602.218242][T18779] Bluetooth: hci1: command tx timeout [ 602.225754][T28870] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 602.235375][T28969] kAFS: Can only specify source 'none' with -o dyn [ 602.242053][T28870] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 602.319183][ T34] usb 12-1: unable to get BOS descriptor or descriptor too short [ 602.322885][T28870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.323070][ T34] usb 12-1: not running at top speed; connect to a high speed hub [ 602.338116][ T34] usb 12-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 602.340976][T28870] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.343401][ T34] usb 12-1: config 1 interface 0 has no altsetting 0 [ 602.346056][ T34] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.351632][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.353040][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.355580][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.362405][ T34] usb 12-1: Product: syz [ 602.364365][ T34] usb 12-1: Manufacturer: syz [ 602.366042][T24714] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.366341][ T34] usb 12-1: SerialNumber: syz [ 602.368677][T24714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.391667][T28992] netlink: 'syz.0.8518': attribute type 1 has an invalid length. [ 602.409479][T28994] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=28994 comm=syz.5.8519 [ 602.522276][T28870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.606342][ T34] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -71 [ 602.627186][ T34] usb 12-1: USB disconnect, device number 2 [ 602.644181][T29019] kAFS: Can only specify source 'none' with -o dyn [ 602.692298][ T40] audit: type=1800 audit(525154.125:2467): pid=29023 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.8526" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 602.699159][T28870] veth0_vlan: entered promiscuous mode [ 602.709384][T28870] veth1_vlan: entered promiscuous mode [ 602.725137][T28870] veth0_macvtap: entered promiscuous mode [ 602.730331][T28870] veth1_macvtap: entered promiscuous mode [ 602.745177][T28870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.752844][T28870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.762175][T24714] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.765923][T24714] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.770022][ T7393] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.774762][ T7393] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.821741][T24714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.825595][T24714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.851205][ T7397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.854545][ T7397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.007036][ T40] audit: type=1326 audit(525154.445:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29043 comm="syz.0.8533" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86c958efc9 code=0x0 [ 603.222013][ T40] audit: type=1400 audit(525154.655:2469): avc: denied { write } for pid=29054 comm="syz.7.8536" name="/" dev="9p" ino=71827825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 603.231836][ T40] audit: type=1400 audit(525154.665:2470): avc: denied { ioctl } for pid=29062 comm="syz.8.8539" path="socket:[140349]" dev="sockfs" ino=140349 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 603.232314][T29065] No control pipe specified [ 603.347039][T18779] Bluetooth: hci3: command tx timeout [ 603.361689][T29073] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8543'. [ 603.433727][ T1030] IPVS: starting estimator thread 0... [ 603.537181][T29077] IPVS: using max 32 ests per chain, 76800 per kthread [ 604.066996][ T40] audit: type=1400 audit(525155.495:2471): avc: denied { lock } for pid=29089 comm="syz.8.8550" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 604.069360][T29094] netlink: 'syz.8.8550': attribute type 1 has an invalid length. [ 604.086757][T29094] : renamed from veth0_vlan (while UP) [ 604.189274][T29102] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8556'. [ 604.251548][ T40] audit: type=1400 audit(525155.685:2472): avc: denied { listen } for pid=29103 comm="syz.7.8552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 604.297074][T18779] Bluetooth: hci1: command tx timeout [ 604.357684][T29124] tipc: Enabled bearer , priority 0 [ 604.363123][T29124] input: syz0 as /devices/virtual/input/input19 [ 604.376020][T29124] syzkaller0: MTU too low for tipc bearer [ 604.378373][T29124] tipc: Disabling bearer [ 604.506153][T29139] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8567'. [ 604.523680][T29142] tipc: Resetting bearer [ 604.603748][T29142] tipc: Disabling bearer [ 604.609988][T29142] team0 (unregistering): Port device vlan0 removed [ 604.766991][ T1030] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 604.771737][T29153] netlink: 292 bytes leftover after parsing attributes in process `syz.0.8571'. [ 604.927331][ T1030] usb 10-1: Using ep0 maxpacket: 8 [ 604.931350][ T1030] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 604.934087][ T1030] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 604.938252][ T1030] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 604.944220][ T1030] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 604.948568][ T1030] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.953336][ T1030] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 604.956747][ T1030] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.010018][T29175] netlink: 'syz.0.8580': attribute type 10 has an invalid length. [ 605.015280][T29175] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 605.020084][ T40] audit: type=1400 audit(525156.455:2473): avc: denied { mounton } for pid=29176 comm="syz.7.8581" path="/12/file0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 605.021600][T29177] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8581'. [ 605.115071][ T40] audit: type=1400 audit(525156.545:2474): avc: denied { unmount } for pid=28746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 605.181886][ T1030] usb 10-1: usb_control_msg returned -32 [ 605.183817][ T1030] usbtmc 10-1:16.0: can't read capabilities [ 605.194835][T29192] netlink: 'syz.5.8569': attribute type 29 has an invalid length. [ 605.214020][ T10] usb 10-1: USB disconnect, device number 5 [ 605.253091][T29201] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8588'. [ 605.256286][T29201] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8588'. [ 605.422540][T29223] netlink: 'syz.5.8591': attribute type 8 has an invalid length. [ 605.427161][T29223] netlink: 'syz.5.8591': attribute type 8 has an invalid length. [ 605.466026][T29230] program syz.5.8593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 605.472490][T29230] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8593'. [ 605.519742][T29233] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8592'. [ 605.543738][T29236] SELinux: security policydb version 17 (MLS) not backwards compatible [ 605.546386][T29236] SELinux: failed to load policy [ 606.137027][T18779] Bluetooth: hci3: command tx timeout [ 606.288742][T29249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8598'. [ 606.355624][ T40] audit: type=1400 audit(525157.785:2475): avc: denied { ioctl } for pid=29257 comm="syz.5.8601" path="cgroup:[4026533064]" dev="nsfs" ino=4026533064 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 606.457519][ T1333] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 606.462675][ T1333] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 606.466961][ C0] ------------[ cut here ]------------ [ 606.469685][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 606.472511][ C0] WARNING: CPU: 0 PID: 29273 at kernel/workqueue.c:2257 __queue_work+0xd03/0x1160 [ 606.476220][ C0] Modules linked in: [ 606.478299][ C0] CPU: 0 UID: 0 PID: 29273 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 606.483561][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 606.486929][ C0] RIP: 0010:__queue_work+0xd03/0x1160 [ 606.488616][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 20 27 8c 8b e8 1e 15 f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 0f e2 38 00 90 0f 0b 90 e9 b4 f5 ff [ 606.495453][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 606.497373][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b3ee8 [ 606.499999][ C0] RDX: ffff888013864900 RSI: ffffffff817b3ef5 RDI: 0000000000000001 [ 606.502484][ C0] RBP: ffff888053c98978 R08: 0000000000000001 R09: 0000000000000000 [ 606.504912][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000000f8f [ 606.507519][ C0] R13: 0000000080000100 R14: ffffffff81843990 R15: ffff888055108178 [ 606.510002][ C0] FS: 0000000000000000(0000) GS:ffff8880d6a0a000(0000) knlGS:0000000000000000 [ 606.512827][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 606.514901][ C0] CR2: 00007ffcef1c4ff8 CR3: 000000000b760000 CR4: 0000000000352ef0 [ 606.517407][ C0] Call Trace: [ 606.518722][ C0] [ 606.519679][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 606.521545][ C0] call_timer_fn+0x19a/0x620 [ 606.523011][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 606.524578][ C0] ? __run_timers+0x559/0x960 [ 606.526072][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 606.527922][ C0] __run_timers+0x569/0x960 [ 606.529393][ C0] ? __pfx___run_timers+0x10/0x10 [ 606.530932][ C0] run_timer_base+0x114/0x190 [ 606.532440][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 606.534107][ C0] run_timer_softirq+0x1a/0x40 [ 606.535660][ C0] handle_softirqs+0x219/0x8e0 [ 606.537186][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 606.538880][ C0] __irq_exit_rcu+0x109/0x170 [ 606.540381][ C0] irq_exit_rcu+0x9/0x30 [ 606.541762][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 606.543561][ C0] [ 606.544502][ C0] [ 606.545450][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 606.547347][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 606.548971][ C0] Code: 75 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 32 0c e9 0e 0f 82 74 02 00 00 8b 35 aa 3c e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 49 75 08 12 0f 85 c7 02 00 00 48 83 c4 [ 606.554997][ C0] RSP: 0018:ffffc900043def70 EFLAGS: 00000206 [ 606.556925][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c4460 RCX: 00000000693d868b [ 606.559436][ C0] RDX: 0000000000000000 RSI: ffffffff8da048dd RDI: ffffffff8bf06e40 [ 606.561938][ C0] RBP: 0000000000000002 R08: 06bdbb53914234c7 R09: 0000000000000000 [ 606.564447][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 606.566922][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 606.569384][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 606.571035][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 606.573005][ C0] unwind_next_frame+0xd1/0x20a0 [ 606.574606][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 606.576226][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 606.577815][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 606.579805][ C0] arch_stack_walk+0x94/0x100 [ 606.581293][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 606.582909][ C0] stack_trace_save+0x8e/0xc0 [ 606.584376][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 606.586074][ C0] ? kernel_text_address+0x8d/0x100 [ 606.587753][ C0] ? unwind_get_return_address+0x59/0xa0 [ 606.589573][ C0] ? arch_stack_walk+0xa6/0x100 [ 606.591122][ C0] kasan_save_stack+0x33/0x60 [ 606.592646][ C0] ? kasan_save_stack+0x33/0x60 [ 606.594194][ C0] ? kasan_save_track+0x14/0x30 [ 606.595929][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 606.597594][ C0] kasan_save_track+0x14/0x30 [ 606.599295][ C0] __kasan_slab_alloc+0x89/0x90 [ 606.601418][ C0] kmem_cache_alloc_noprof+0x250/0x6e0 [ 606.603166][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 606.605094][ C0] ? mas_preallocate+0xe6a/0x11f0 [ 606.606720][ C0] ? mas_preallocate+0xe6a/0x11f0 [ 606.608498][ C0] mas_preallocate+0xe6a/0x11f0 [ 606.610296][ C0] ? __pfx_mas_preallocate+0x10/0x10 [ 606.611976][ C0] ? rcu_is_watching+0x12/0xc0 [ 606.613507][ C0] ? anon_vma_name+0x81/0x2f0 [ 606.615011][ C0] __split_vma+0x34a/0x1070 [ 606.616532][ C0] ? __pfx___split_vma+0x10/0x10 [ 606.618110][ C0] vms_gather_munmap_vmas+0x1cb/0x1340 [ 606.619845][ C0] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 606.621742][ C0] ? mas_walk+0x6f5/0x980 [ 606.623210][ C0] __mmap_region+0x434/0x27a0 [ 606.624706][ C0] ? __pfx___mmap_region+0x10/0x10 [ 606.626342][ C0] ? __pfx_mt_validate_nulls+0x10/0x10 [ 606.628071][ C0] ? find_held_lock+0x2b/0x80 [ 606.629617][ C0] ? avc_has_perm_noaudit+0x117/0x3b0 [ 606.631391][ C0] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 606.633278][ C0] mmap_region+0x1ab/0x3f0 [ 606.634725][ C0] ? __get_unmapped_area+0x267/0x440 [ 606.636317][ C0] do_mmap+0xa3e/0x1210 [ 606.637521][ C0] ? __pfx_do_mmap+0x10/0x10 [ 606.639019][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 606.641027][ C0] vm_mmap_pgoff+0x29e/0x470 [ 606.642557][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 606.644171][ C0] ? __fget_files+0x20e/0x3c0 [ 606.645658][ C0] ksys_mmap_pgoff+0x32c/0x5c0 [ 606.647180][ C0] __x64_sys_mmap+0x125/0x190 [ 606.648697][ C0] do_syscall_64+0xcd/0xfa0 [ 606.650180][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.652051][ C0] RIP: 0033:0x7fbec7b5a242 [ 606.653527][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 606.659514][ C0] RSP: 002b:00007ffcef1c4ff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 606.662139][ C0] RAX: ffffffffffffffda RBX: 00007fbec7a59000 RCX: 00007fbec7b5a242 [ 606.664624][ C0] RDX: 0000000000000003 RSI: 0000000000006000 RDI: 00007fbec7a59000 [ 606.667090][ C0] RBP: 0000000000000812 R08: 0000000000000000 R09: 00000000001cc000 [ 606.669609][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffcef1c50b8 [ 606.672083][ C0] R13: 00007fbec7b2e5f0 R14: 00007ffcef1c5830 R15: 00000fff9de38a02 [ 606.674550][ C0] [ 606.675567][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 606.677839][ C0] CPU: 0 UID: 0 PID: 29273 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 606.680570][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 606.683845][ C0] Call Trace: [ 606.684830][ C0] [ 606.685710][ C0] dump_stack_lvl+0x3d/0x1f0 [ 606.687144][ C0] vpanic+0x640/0x6f0 [ 606.688714][ C0] ? __queue_work+0xd03/0x1160 [ 606.690727][ C0] panic+0xca/0xd0 [ 606.692312][ C0] ? __pfx_panic+0x10/0x10 [ 606.694173][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 606.695811][ C0] check_panic_on_warn+0xab/0xb0 [ 606.697365][ C0] __warn+0xf6/0x3c0 [ 606.698816][ C0] ? __queue_work+0xd03/0x1160 [ 606.700305][ C0] report_bug+0x3c3/0x580 [ 606.701660][ C0] ? __queue_work+0xd03/0x1160 [ 606.703158][ C0] handle_bug+0x184/0x210 [ 606.704532][ C0] exc_invalid_op+0x17/0x50 [ 606.705963][ C0] asm_exc_invalid_op+0x1a/0x20 [ 606.707543][ C0] RIP: 0010:__queue_work+0xd03/0x1160 [ 606.709469][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 4b 04 00 00 48 8b 75 18 4c 89 fa 48 c7 c7 20 27 8c 8b e8 1e 15 f7 ff 90 <0f> 0b 90 90 e9 2f f7 ff ff e8 0f e2 38 00 90 0f 0b 90 e9 b4 f5 ff [ 606.716155][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 606.718190][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817b3ee8 [ 606.720866][ C0] RDX: ffff888013864900 RSI: ffffffff817b3ef5 RDI: 0000000000000001 [ 606.723398][ C0] RBP: ffff888053c98978 R08: 0000000000000001 R09: 0000000000000000 [ 606.725857][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000000f8f [ 606.728358][ C0] R13: 0000000080000100 R14: ffffffff81843990 R15: ffff888055108178 [ 606.730867][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 606.732734][ C0] ? __warn_printk+0x198/0x350 [ 606.734279][ C0] ? __warn_printk+0x1a5/0x350 [ 606.735814][ C0] ? __queue_work+0xd02/0x1160 [ 606.737342][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 606.739241][ C0] call_timer_fn+0x19a/0x620 [ 606.740717][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 606.742404][ C0] ? __run_timers+0x559/0x960 [ 606.743972][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 606.745873][ C0] __run_timers+0x569/0x960 [ 606.747350][ C0] ? __pfx___run_timers+0x10/0x10 [ 606.749012][ C0] run_timer_base+0x114/0x190 [ 606.750559][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 606.752238][ C0] run_timer_softirq+0x1a/0x40 [ 606.753806][ C0] handle_softirqs+0x219/0x8e0 [ 606.755362][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 606.757046][ C0] __irq_exit_rcu+0x109/0x170 [ 606.758560][ C0] irq_exit_rcu+0x9/0x30 [ 606.759941][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 606.761692][ C0] [ 606.762612][ C0] [ 606.763465][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 606.765270][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 606.766845][ C0] Code: 75 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 32 0c e9 0e 0f 82 74 02 00 00 8b 35 aa 3c e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 49 75 08 12 0f 85 c7 02 00 00 48 83 c4 [ 606.772569][ C0] RSP: 0018:ffffc900043def70 EFLAGS: 00000206 [ 606.774458][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c4460 RCX: 00000000693d868b [ 606.776945][ C0] RDX: 0000000000000000 RSI: ffffffff8da048dd RDI: ffffffff8bf06e40 [ 606.779439][ C0] RBP: 0000000000000002 R08: 06bdbb53914234c7 R09: 0000000000000000 [ 606.781941][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 606.784443][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 606.786974][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 606.788627][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 606.790638][ C0] unwind_next_frame+0xd1/0x20a0 [ 606.792235][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 606.793853][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 606.795468][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 606.797422][ C0] arch_stack_walk+0x94/0x100 [ 606.798965][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 606.800700][ C0] stack_trace_save+0x8e/0xc0 [ 606.802286][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 606.803943][ C0] ? kernel_text_address+0x8d/0x100 [ 606.805610][ C0] ? unwind_get_return_address+0x59/0xa0 [ 606.807413][ C0] ? arch_stack_walk+0xa6/0x100 [ 606.808977][ C0] kasan_save_stack+0x33/0x60 [ 606.810489][ C0] ? kasan_save_stack+0x33/0x60 [ 606.812083][ C0] ? kasan_save_track+0x14/0x30 [ 606.813765][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 606.815415][ C0] kasan_save_track+0x14/0x30 [ 606.816906][ C0] __kasan_slab_alloc+0x89/0x90 [ 606.818390][ C0] kmem_cache_alloc_noprof+0x250/0x6e0 [ 606.820634][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 606.822619][ C0] ? mas_preallocate+0xe6a/0x11f0 [ 606.824215][ C0] ? mas_preallocate+0xe6a/0x11f0 [ 606.825790][ C0] mas_preallocate+0xe6a/0x11f0 [ 606.827381][ C0] ? __pfx_mas_preallocate+0x10/0x10 [ 606.829180][ C0] ? rcu_is_watching+0x12/0xc0 [ 606.830695][ C0] ? anon_vma_name+0x81/0x2f0 [ 606.832204][ C0] __split_vma+0x34a/0x1070 [ 606.833679][ C0] ? __pfx___split_vma+0x10/0x10 [ 606.835284][ C0] vms_gather_munmap_vmas+0x1cb/0x1340 [ 606.837027][ C0] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 606.838956][ C0] ? mas_walk+0x6f5/0x980 [ 606.840345][ C0] __mmap_region+0x434/0x27a0 [ 606.841900][ C0] ? __pfx___mmap_region+0x10/0x10 [ 606.843549][ C0] ? __pfx_mt_validate_nulls+0x10/0x10 [ 606.845286][ C0] ? find_held_lock+0x2b/0x80 [ 606.846819][ C0] ? avc_has_perm_noaudit+0x117/0x3b0 [ 606.848532][ C0] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 606.850388][ C0] mmap_region+0x1ab/0x3f0 [ 606.851824][ C0] ? __get_unmapped_area+0x267/0x440 [ 606.853430][ C0] do_mmap+0xa3e/0x1210 [ 606.854749][ C0] ? __pfx_do_mmap+0x10/0x10 [ 606.856231][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 606.857999][ C0] vm_mmap_pgoff+0x29e/0x470 [ 606.859758][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 606.861840][ C0] ? __fget_files+0x20e/0x3c0 [ 606.863794][ C0] ksys_mmap_pgoff+0x32c/0x5c0 [ 606.865773][ C0] __x64_sys_mmap+0x125/0x190 [ 606.867705][ C0] do_syscall_64+0xcd/0xfa0 [ 606.869589][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.872042][ C0] RIP: 0033:0x7fbec7b5a242 [ 606.873905][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 606.880424][ C0] RSP: 002b:00007ffcef1c4ff8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 606.883024][ C0] RAX: ffffffffffffffda RBX: 00007fbec7a59000 RCX: 00007fbec7b5a242 [ 606.885470][ C0] RDX: 0000000000000003 RSI: 0000000000006000 RDI: 00007fbec7a59000 [ 606.887955][ C0] RBP: 0000000000000812 R08: 0000000000000000 R09: 00000000001cc000 [ 606.890483][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffcef1c50b8 [ 606.892988][ C0] R13: 00007fbec7b2e5f0 R14: 00007ffcef1c5830 R15: 00000fff9de38a02 [ 606.895495][ C0] [ 606.897188][ C0] Kernel Offset: disabled [ 606.898573][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:56:57 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff852950d0 RDI=ffffffff9add6740 RBP=ffffffff9add6700 RSP=ffffc900000074f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35bad3a R15=dffffc0000000000 RIP=ffffffff852950f7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffcef1c4ff8 CR3=000000000b760000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000088 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000033e8 00000000001cdc18 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000008000 RCX=0000000000008041 RDX=1ffff11009901030 RSI=ffffffff8b9fcc80 RDI=0000000000008000 RBP=ffffffff8b9fcc80 RSP=ffffc900034cfa68 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000100000 R11=0000000000000001 R12=0000000000008000 R13=ffffffff8e5f0c40 R14=0000000000000000 R15=ffffc900034cfc20 RIP=ffffffff81bd0602 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fdc3a1a1880 ffffffff 00c00000 GS =0000 ffff8880d6b0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3b56e3 CR3=0000000022308000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000054 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c4000000 Opmask01=0000000000004211 Opmask02=0000000001010037 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 38333a383332632f 617461642f766564 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00007ffe2dacd2b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc3a1b77f0 00007fdc3a1b77e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464310442a7b914 6464310442a18e04 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464310442a18e0c 6464310442a18e0c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055601500706d 742e38333a383332 632f617461642f76 6564752f6e75722f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00184d4554535953 4255530018485441 505645440056001f 56000e004c004b00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 00007ffe2dacd2b0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000556015b27cdc 0000000000000000 0000000000000075 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 5f393030322c3948 43492b3533515f43 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70625f32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a63b580 RCX=ffffffff81b114e3 RDX=ffff88801d6fc900 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc90000157cf8 RSP=ffffc90000157ba0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c79e5e R12=1ffff9200002af7c R13=0000000000000001 R14=0000000000000001 R15=ffffed100d4c76b1 RIP=ffffffff81b114b8 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f86c97e7dac CR3=00000000342b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefee000 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556026cfd450 0000556026cfd450 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00007ffe2dacd2b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc39bf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc39bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464310442a07a14 6464310442a015e4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6464310442a015ec 6464310442a015ec ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 00007ffe2dacd2b0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000004540a 0000000000000000 00000000000063a4 0000000000000001 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 5f393030322c3948 43492b3533515f43 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70625f32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0031392f3737332f 0000000000000021 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000002f 0000000000000021 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffff88802781dbd0 RCX=1ffff11004f03b7d RDX=dffffc0000000000 RSI=0000000000000004 RDI=ffff88802781dbe8 RBP=ffffc90005f8fd28 RSP=ffffc90005f8fc40 R8 =0000000000000001 R9 =fffff52000bf1f76 R10=0000000000000202 R11=0000000000000001 R12=1ffff92000bf1f8c R13=ffffc90005f8fd68 R14=ffffffff9adaf308 R15=ffffffff9adaf310 RIP=ffffffff84ac8f28 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555558eb7500 ffffffff 00c00000 GS =0000 ffff8880d6d0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c262d73 CR3=00000000453a2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddd268d20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe211012fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe211012fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe211012fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe211012ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe21101307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe21101315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000