last executing test programs: 8m41.762151277s ago: executing program 1 (id=316): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x44, r3, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x44}}, 0x0) setresgid(0xffffffffffffffff, r0, r1) syz_emit_vhci(&(0x7f0000004e40)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x2, 0xd3}}}}, 0x11) 8m41.761429022s ago: executing program 1 (id=318): mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000180)='proc\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@local, @private0, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {}, {}, 0x2b, 0x1, 0x3, 0x18}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x8001, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x2a}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x1006, 0xf, 0xffffffff, 0x0, 0x0, 0xb, 0x8, 0x7, 0xe, 0xfc, 0x2, 0x2, 0x6849, 0x4, 0x6, 0xffffffff, 0x5, 0x1a447, 0x3, 0xffff5794, 0x40, 0x2, 0xf27, 0x6, 0xb, 0xa, 0x5, 0x8, 0x4, 0xfffd, 0x6]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x16, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3", 0x10) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) kexec_load(0x3, 0x4, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000}], 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1101886, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e00)=ANY=[@ANYBLOB="a0010000dda87a879c6ea3b49cfda1820065d81e43837b2857caf1e868a3375c5b9707f8969790b39b280e8de9e1cb53eda12360381e108d4713288d727a6b8af8d33e", @ANYRES16=r6, @ANYBLOB="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"/410], 0x1a0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="c8110000", @ANYRES16=r6, @ANYBLOB="020029bd7000fbdbdf250000000008000100", @ANYRES32=r7, @ANYBLOB="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"], 0x11c8}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040040) r8 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000100)="8f", 0x1}], 0x2, 0x0, 0x0, 0x4000814}], 0x1, 0x40800) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000400)='./file0/file0/file0\x00', &(0x7f0000000500), 0x3800a2, &(0x7f0000000480)={[{@verity_off}, {@lowerdir={'lowerdir', 0x3d, './file0/file1'}}, {@nfs_export_on}], [{@obj_role={'obj_role', 0x3d, 'gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\''}}]}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') syz_emit_ethernet(0x7e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60ecff8000481100fe8000000000000000000000000000bbff02000000000000000000000000000100004e22"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e000000040000000400000004000000000000008331a55f67af676b4bd09f97a28bd4e285124beba0358775443ab8e3b12fab0fb3c020de45674cd0ff3952ce43c76a27824e68cf002561a24dee968e788357d32d05d7347a7ec061fad1b20a681798675f41e1c491eef2ee95d29c4f1680f725a35018cd2838e456dd8af60029fefc8062c17c61", @ANYRES32, @ANYBLOB='\x00\a\x00\x00\x00\x00\b\x00'/20, @ANYRES16=r9, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48) read$FUSE(r10, &(0x7f00000020c0)={0x2020}, 0x2020) 8m40.201534642s ago: executing program 1 (id=345): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = userfaultfd(0x80801) (rerun: 64) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000080900020073797a3100000000050004000000030011000300686173683a6e65742c6e65740000000014000780050015004b0000000800114000000000050005000a0000000500010006"], 0x60}}, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 8m40.081286754s ago: executing program 1 (id=347): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x8000}, 0x50) r0 = msgget$private(0x0, 0x193) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x8, 0x0) msgrcv(r0, &(0x7f0000001240)={0x0, ""/147}, 0x9b, 0x3, 0x2000) msgctl$IPC_RMID(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000080)={0x4, 0x0, [{0x40000000, 0x2, 0x0, 0xfff, 0x9, 0xffffffff, 0x9}, {0x80000019, 0x8, 0x2, 0x3390, 0x3c, 0x6, 0x7}, {0x80000000, 0x3, 0x2, 0xffffccce, 0xe, 0x6, 0x80000000}, {0xb, 0xa, 0x3, 0x9, 0x100, 0x5}]}) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000100)={0x0, 0xfffffffffffff968, [0x9, 0xac7, 0x4, 0x0, 0x34800000, 0x7]}) mkdir(&(0x7f0000000180)='./file0\x00', 0x110) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 8m40.000214091s ago: executing program 1 (id=349): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 8m39.108398872s ago: executing program 1 (id=364): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', r0, 0x4, 0x0, 0xff, 0x0, 0x8, @empty, @local, 0x700, 0xab154d6e6d8889bf, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x541b, &(0x7f0000000100)) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffe01, 0x10}, 0xc) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x1, 0xc, 0x9, 0x3, 0x1, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @map_val={0x18, 0xb, 0x2, 0x0, r2}]}, &(0x7f0000000200)='syzkaller\x00', 0x3be5, 0xaa, &(0x7f0000000300)=""/170, 0x41100, 0x8, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0xa, 0x3, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000400)=[r2, r2, r2, r2, r2], &(0x7f0000000440)=[{0x2, 0x1, 0x4, 0xa}, {0x8, 0x4, 0x1, 0xb}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r3, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000080)="e927a9e074b59d1518b1cdd94ecb21f70836df07f3871174e8a0843d533c65e8fbb8aae39903fddf6d35deb62cee8dbcb64b7b93869983182196c044e10c282fa8a8cee281de5ea90814aa1f2d71e51603743b2b62b7ad54b70e7bbfe01f927aea4a6722bd95bf22122301", &(0x7f0000000100)=@tcp}, 0x20) 8m23.981477349s ago: executing program 32 (id=364): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', r0, 0x4, 0x0, 0xff, 0x0, 0x8, @empty, @local, 0x700, 0xab154d6e6d8889bf, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x541b, &(0x7f0000000100)) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffe01, 0x10}, 0xc) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x1, 0xc, 0x9, 0x3, 0x1, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @map_val={0x18, 0xb, 0x2, 0x0, r2}]}, &(0x7f0000000200)='syzkaller\x00', 0x3be5, 0xaa, &(0x7f0000000300)=""/170, 0x41100, 0x8, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0xa, 0x3, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000400)=[r2, r2, r2, r2, r2], &(0x7f0000000440)=[{0x2, 0x1, 0x4, 0xa}, {0x8, 0x4, 0x1, 0xb}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r3, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000080)="e927a9e074b59d1518b1cdd94ecb21f70836df07f3871174e8a0843d533c65e8fbb8aae39903fddf6d35deb62cee8dbcb64b7b93869983182196c044e10c282fa8a8cee281de5ea90814aa1f2d71e51603743b2b62b7ad54b70e7bbfe01f927aea4a6722bd95bf22122301", &(0x7f0000000100)=@tcp}, 0x20) 8m12.689035363s ago: executing program 2 (id=611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x67d}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x240480c5) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a5d185ad6000000000000000000081400000011000100"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) 8m12.611679873s ago: executing program 2 (id=612): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x4, 0x80000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x400, 0x2) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x401, @loopback, 0x800000}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10001}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e22, @multicast2}], 0x68) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_AIE_ON(r3, 0x7001) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x4000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x3, 0xff, @generic=0xa7, 0x0, 0x4}) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$CDROMREADMODE1(r5, 0x530d, &(0x7f0000000280)={0x0, 0x2, 0x8, 0x7, 0x0, 0xc}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0xa}, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x100}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x17c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x34, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) r9 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) mkdir(&(0x7f00000000c0)='./file0\x00', 0x122) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000440)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)='./file0/../file0\x00') 8m12.49167785s ago: executing program 2 (id=615): socket$unix(0x1, 0x5, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x9) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206010200000000000000000000000105000100070000000900020073797a30000000000c00078005b415000100000005000400000000660e000000686173683a69702c706f727400000000050005000a000000"], 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1600fb000000000073000000fffffe8d991b34ffffffd40d2fbc251960c7bd040e34000a77422ca02ca2d989a6bd68e29a4fcba91a4230ffd465fd526005ea7bb7919d", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r6, r6], 0x0, 0x10, 0x10000}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d0223633500000000000000000000000000ad2b", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r9, 0x0, 0x8000000}, 0x27) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x34, r12, 0x1, 0x70bd2f, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc8d1}, 0x800) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="00042cbd7000fcdbdf250900000048bc634900b69d8cd30761693f133cc395df470133aca2bf642517d11180cbaab518ac970b3d155d2f5b433a222f305979486cbc9bf59c74e19b2b05df5364a766c2d3265a9f85d0f93043d64e2f1df23a5ea287c3b26ea4400de86294c2c7db006c03193305"], 0x14}}, 0xc044) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 8m12.291469516s ago: executing program 2 (id=619): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x20, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x81}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r5, @ANYBLOB="029000000080040008000a00", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockname$packet(r2, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c40)=0x14) bind$can_raw(r6, &(0x7f0000000c80)={0x1d, r7}, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="68018000", @ANYRES16=r8, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 8m12.241480506s ago: executing program 2 (id=621): fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0x4, &(0x7f0000000000)={0x0, 0x23, 0x2, @thr={&(0x7f0000000140)="f3e05497a4803afdd093683ee5bf68ed6e6f80d9ad1c5120d9d646f03a03c8cefb47947a2da5e75d879b6ea8d225358207d82559014b2288e53abbe0540d3fc4755498aace3c196fdbf6e9880769f19bda9839b1796d135f7a541e39db592875f8167f2c70cd5e4e6d1ca8c9c9fd2239431adb195347e57931afd743c26122ad10c9c904495eecb102b63164071905355306923011c11bd1c399188075906bf876f2a554d2e38301f2b6e024f06992e6ccb595fcbb5335b0daf76e718e788257a6df6b19d5014e2ac1183e1a3700"/216, &(0x7f0000000c80)="f09f8f30a2e28a3fcea9c4371ddcfe8f0121e6b7a4f3b0e15044ef85769915e7018c301bd8109bfec433fd2d12718caff6782725fec837150c289c47083142ba5b447b98817b88b682457629eb1ded199f684772b1dde78ab42e53240be5eac76ae0edc165f660016fa2b02a8fac7650c82503ef39a492cbd3adb2b8e325d33b4268964e026562d90865ddbf7ef5ba2ce0f54e0a938ae1fa4a4e3876d2b4e59bf3daee7d8d127721f21c68a1328d2b9f5824a6d7882eeb22a2996709a3d7b05a3426321c0fb6366acdb667ae6b9669e7b5f24fda5ab39af574c997eaf63feb6c64617549c5e06f506ca0aab1076299f7688b3018fef657cacaadbfe3e6cce827e74e27012a83a4ea8d56bd835b6248795a648ab7e9ffcc46303d34c5c0d2cdb32454d724d5754c068b407283368a3fefa94656e202593ed420bb9e346273ec11d21fe60880c11b203bba2c691351d82118bbb6862f29d67c0ca7fe77a4156a5c07f14c0ce3f66a4b4286d2eccc8fed6080a1fd8fe11a33c0ea158565f460d6ed985e50dbe219f82a7054e7af88768e122001d183bc71e63c8725b7fe99543bab66e3bd1c05da1f5c27f03595fe6e238e6e180f71856538d0233d3ff1876c490bf366636a4dddc696f0deb3d7e49ac138629d18cef7a8efe8e33ac9c728c0b5a3c30e1ac5d37132c7664227e65712e8b5366283af8ce0bc89a3b48623e2b739ddbac9aedd29c8bf5b13289a71e59cfd4d2f01545c543016d5fb4f716481290086127ff6f7593bd18fe048bea9552ccb44a6c9a9a90858763ebc6c6562ecc9700ba53f421136370919cb8f2d2dade4cb92f13d39bc09ceebdc387ad5636fb82fc9c0a8ec5968ba68a426d0df1b54a3a46b7deea8f1ff94d8ba8f310c4886e176efecb1bcd69f7c19f8f3e74297d78110cc65c0844ea4192f04520c9cefe1ca31e9569b9a52ff45286981fd4ea21b866ddb13ad566ffaed64d48b7a15417be8368d6f5bda7568e567a773d367ce9dfdbc1231f6569d0ee0a99a43a29697fcb8d504a1f9ec1a345982f74ec0fa47bce3ec95991119ae50b56b7d159eb9fa9a3daddb8f25df11c10402aea60c56b8b10e56920160a1370b15ea62f57a323d4995f73273621d64128a9ae48b62fdddfbeb11b678625a51abf33046597832b4e940992fa51b126f8a77a9e3de661d6dc486c0d897d55840078d02d3c68b7214f9960cb3e1183e633faeb87933f6fd30c5b731892d4a5fd559350099e25a95a0eeb3b7652257c9c054127d664b9a63fb01b542d2c6d120354294be2fde5039b4921ba50bc392e2ec4cc8040fbf3a6bbf7e76af41b9eb4aa50d22c97cd5c134118075f3b785e275cc5fb93a666439a75b5d67e1d16949b62e6ceabb8f9ba551bdf8395c2f73ea557182d138b7070a19ef2a521f0d8acaf605727da88c1a96091d05be949cf78e5279562e1f887011936e4a34b769becc1bf49f966477f9d425ece5fedd24fa1a4af964cbef15d2abda40a85116d80ace59cf8b31140d01737d1f552a269db08ed4c593272ec2deba9788805e8ac7d2f5d09128cb9f4f47014d97648a0024fe637aa246b38209c7e915fc60fc57b0f7e33cb4367592935584b4c8a45a7e5ac63e43092342b9112ac5e1e1a004eacdb966fd9269fd1ad6dc8957d06064a10b9f79e86b331ad41d38f71cc9e2c0c98ad756831f2508d2d3fb9c73e594e2e5687083acf391678a83e47ae804f09cc9965cf15f637551b8ce3e1fc8d967a5eec347583568ea438938a9949939009010de3f405015f5d17552e60b5c258b1a33e93f742192a0c57cedb48417076ba7da1b0ad3a2ffcfc6280ced449c0e838cafa09f4b3b77cf14ff4adea047f953b49bdbe10c4c414f01dacfbe6dee7dd73f4ecfad0e6f53bca6656e8ff9c13e199de60a894628e5de4177e32e5ccf35417bf9c875ad85f571398ca352f6a859ed1c3b0f7b9064da437dbe97f329de902e9e45eda729579fd19a881d2d3a1017c682556a6b7cb6a56475eeac42711e591455ee2b67e90b19a5d8889280c067beedcd2827cc1b694bb9b85b58f80cbea73bf6b95f968a389c5e8948808c75cf69e2c5a79c99fab0f75367c0bf847d5d4299918aebee25b2b475f2b80468a21bca8eaa78b494688e78fca9726888e3482b55a59cd470212c9ddef9e1358c52cbda9b3b5bedd589192fb4694152afe895987c5f5f5ffe7f9f02b9092d8d45949ffa76645d19e95679a8618aa49aef305e4032b0e30fc6367dce1388b8e1d9d75c18cff64dd99aa414e2d0643280049816c6fcae3ade99dcbf7f14fdc9e8f4c2ca1a6af9e5b79491a2258cd5b1867878e28e57cb400000008ac9a632939142cd6a87e244764fbb01f9e3d0e6a78a91ab596541ed2006f9404249cd9237cd66d9f99fb79f1dc021377a34e44528cf94cd57cc48eef2278b46bdb009000000410e081ea393a6b142d33f6e11f11c9e04403e74c4611f6edbdd04d43a0c79eb84655ffd47845e4451ebb81bb28fc9958dc0727c2f2fb5ba870bc905ccc79fab5fa4ac2aeb1e2f732af44152a5b0cddcd100375fbd80a3cc70817dab963eed26cc97ec853546f6bc515de2145372d86bad0e6d079f6428a5711fbe64ebebc24e2f89695ed0438e234f164c739f89db9fec36fce73202e08d4dbc36b4a84c52e7041c9f826ed7c944b13bdc8f453c0ab62c91d04da61a998402d008713a8b1f8f27bf713642f3a622427507daca800151fe304a42c63014245e2b54b6893555378352e9730328f7aa4c2126208a4575662a360f3b1ab167926ea72ceb6e71e87bc53c2645e984fd6eb8ef21002ebdd2b44c209f36bde8814ddb997211099a0f4ad8145804f61acc8beb9183684928b8bb5ca3bf735335b0c52d5d045df43a224955f57e604a575782d5f05782bd281f98b71d4be821a57dc6fe6391a0dbee305a51a1691a25641d3dc72079d01257fe72a429da8616bf31e4e1031258070b76400ec8d9fbb11719bd0eff98bb0d5d534b3178b4bf036c18ff457cb42a6d80be68f2b71098238ef0b51667ebea1eea9f02cf99b51ce2ce37c7c4513d959972c94f4acc8b46b2043383db7c7869fcde260fc08500a4e626026c59c0431a628361db285b481a38140aafc8720e241bbcb55ad09a19e6213d0790860ba03a1d542d6a28f4507a34ff69fc2310ccb9c11ff760f3a7ca7e112aba263442b8c733c14f1482b7a7817b33383d4fd57c42f8b124a0f5317a99f21620c5cc2dda51fa81f61f955642771270f6d1fda891e9a21d09b617acc2c74f3c7fe2c892a155bd7f4c60a7bf3cef7cc757c0993dd1a391f88c359b8f152e7c44d3f81bcbf5b3dc8b4383d80327220b750483cf991fc4e8d1a004008145082b67d2a0c8d7056582ad09b3f0dea3a0dd33e043f486ce5adb3a5c90682917ce18c65b6037941382280b106b9abc1fea62d88a8825a665900771de775eb8d42baadbaaa5a29ae06455bf2c55982ae3d0e8754a5283a633e2a33e234e1125427b1c19a1586bfe26b6716da4ba77701d87bdea82b9cb629be677270b5afbf842f794cd846ccc2c820644e0af1f2064dd0d72b74dfd9c3b1c834835124e44cdf96db290589768a38b06784de8a8f2dfa47ec2e9c06ce7f24d659670e72055a5915d287a0364782a93005a8b98cff33ef2ac4b4cab37d2ea93cf138f33998046f6f9d8fd15325a0b4edb3da042644af3940c4849d0be899f343edb9547a02697767b58bb3b31e1d4f714ff0a1bf5fa7fe18f6083e9a8911f59c38ea145c0d13bc6c4465bf9dea68527aa480b94ae31d1443c3236042281b06425da277eb495754336aa94bc6b8c37ff6d9c7db2ed3f38b38643c498b8a43b56eec1a90a5ece4de9e73d00748fce37d0a06362a6150622bd650a0dcfb8c057e944a0107074532c8cff56f4b2460a09f7345940775527873ff5fbc75160e845967ee56af06fa42009c4347424a6bee0567f07aa113aa98de73282bc3f210976c8a6c22ea8b8430cc6c6bbc9794778872d6bbac4da1014a51fc55c9276267544e3551f52ec8c77bdbc03d60573df798bb2c79063a3b65027c7712d100e0007d64e468c61413896c48d8623690f9cec64f02fbfd1b4dcf6680e89ec4e8c38d973bd993109c132a2bc4630ccdf66b23b32751642da02ed800d2a428c9d1c921b7828b8a2d541303e4700c181062e1fee766340b11eaa56b8bd974fabae188c05abfce73e3d81b36e8540dfee1665608faaa0d89bcb5cfa3c71eec71a1d4368159d92abdbc0f20e3f1ef0d52c656d064cd3da1250b17c0b307216efd8e07dd7ed709afea637b7d60dfbb2ead0a66cf3fac9a9eb3e11c0899988f1f1397ec7a74cf2c3fabd2bf82360eb08044b2314aa20302d3a1467e81f28609483b13e8345a9146ea493c51fd609579db393e1fe4252f74b2836ce710cf154cb2fba24030f1b960ffafca2b1e8834a957a0186a8a30892ddc694750a33183b424f70e4d6f68f3aca879fa7f2098188c53703efb205636d731825cad8b4709468927d7716389dce0189a6767383337607033fa1cf769e6a536659e5398b23d353480a52c4b8be22b53fd5f9bed0ee2f38f00ae7dff960fcbffbf15a337c325014a162d8bef680e96d2e7ae18b2e360336342313fceaee3d48dab7706e24e0845b230b3088eeb7b0f9b439cf66128074a9c183944c090fecdd367c5825f70ec182f6ae695e112f50b76b9448708ed7826f2ff1ad0d96df1d92265c6441ff451d5112111adbd5010975cd4a84db3c4bb560ea7863848d4ea148c7e50b1b465d484d997be441e787e8763093263d162dfa19ffa4dfcac1ef711517a50edd5a756b7c173640a7b219d139a0f53c2e4d40de01fe19ea2b4f7ebda5844b7ab707afa14d22ca7916274a46c2926b11574f712d983f98f05690c44f9691ec492cc3abfbe834137a06d74decb1e0c79a1dd04fb05a77b219efb01dae5275118ad5b438fdb8253e971fb96c1e96f105b28cd5387981e181c88af929f500af087dce0c3b6145c2d23fa6176216f5ebaff8a0ad6be045dd293a5076651bf1abd2e3251ecf18c3546f9b2151b50cd31c74fe0b937c4fa0700c13caeebbcf295236f143ac00c5498a4d3516233471c96ee64f72801d36f37e787f2127a8db1bc67ec78f0baf62a438caf53b72fde8a0efff9de1294210321e3fe8d83cb031d4b44253b0d79e1feb527d6b8717b3b36cd3429d313d467d6fc83b4bebc7e3470b4d07de5b57add461b33c9c2fd563ec6139496a50c15e4c54e003c8bc681f956ff961dc1e48a43d5c53639b007226d34a93349d31b00d4175eabbbc1d0f6a2ab34655d1ce350c9200ca5b88107febe735f11c0393573cfe35bc14f19c8326df37bcbcdd66fc6aa10bfe58980128c82a7fa6257b00018343648563a2b54582b57d4fd0e984c381bf29502feef30e991a5bc7a490b3144d0808ce3b4f94824e7408c576a77a3ee491f10248ca0a4ad728fea433c21f7aaf37fa6c9e491f04607c4c81df55735305785afeaf006ed9d8a1905495e4d91080582328cd16ff4b5edb1f1d472494f0eac406e1879df9078d679c69fdb2e287590e4edd008b01673546d9c837839d765a989081e31620ecd0581556d2e21aa70c0ebeda17c12a7e77acb3464564b1ad09ace5d0c545af445195c5021f9ff34b43bd3d00322e5cf0e33ceaefa111f8a71c8a58ac2b626e37e0a3caa982831f0e130e9119b487d78e3c906c816cd40a43f98a20ff362a19e7cae972a2cd132dd82a03e0a4efaf28c5"}}, &(0x7f0000000240)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r1, &(0x7f0000000300)) timer_settime(r0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) syz_emit_ethernet(0xe, &(0x7f00000000c0)={@multicast, @remote, @void, {@mpls_uc={0x8864}}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @local}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3ff, 0x4) 8m12.179728923s ago: executing program 2 (id=623): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000f0000000a0000007000000000000a0000000000000000ab996db0b974473e0333d6335b391042dd86f3f8de7acabd2ba136fec74fce23abafeae9aa5314efd500c32e7b05fcabebb62f5f9d487b12704096298cbd1721e975437f9a3e44895d911a19382da1762d653413f711fd0c698fc86b72"], 0x20}}, 0x0) close(r2) setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r4) r5 = inotify_init1(0x800) fcntl$setstatus(r4, 0x4, 0x2c00) r6 = gettid() fcntl$setown(r4, 0x8, r6) fcntl$setsig(r5, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000280)='./control\x00') r7 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r7) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 7m57.166117552s ago: executing program 33 (id=623): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000f0000000a0000007000000000000a0000000000000000ab996db0b974473e0333d6335b391042dd86f3f8de7acabd2ba136fec74fce23abafeae9aa5314efd500c32e7b05fcabebb62f5f9d487b12704096298cbd1721e975437f9a3e44895d911a19382da1762d653413f711fd0c698fc86b72"], 0x20}}, 0x0) close(r2) setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r4) r5 = inotify_init1(0x800) fcntl$setstatus(r4, 0x4, 0x2c00) r6 = gettid() fcntl$setown(r4, 0x8, r6) fcntl$setsig(r5, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000280)='./control\x00') r7 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r7) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 6m50.606618256s ago: executing program 0 (id=1733): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="1400000052000000fb09000000"], 0x0, 0x600) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x13e) write$cgroup_int(r0, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r1 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x13, r5, 0x2000) r6 = dup(r3) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000400)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r9, 0xc0106442, &(0x7f0000000000)={r7}) (async) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) (async) recvmmsg(r10, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000440)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/241, 0xf1}], 0x1, &(0x7f0000001b80)=""/4108, 0x100c}, 0x1}, {{&(0x7f0000001600)=@generic, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001680)=""/147, 0x93}, {&(0x7f0000001740)=""/123, 0x7b}], 0x2, &(0x7f0000001800)}, 0x2}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001840)=""/232, 0xe8}], 0x1, &(0x7f0000001980)=""/206, 0xce}, 0x10003}], 0x4, 0x10122, 0x0) (async) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000280)={0x0, @empty}, &(0x7f0000000300)=0xc) 6m50.369919609s ago: executing program 0 (id=1734): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7520757365723a6e657f20"], 0x1a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x47, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x3, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x8, 0x328}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x8005, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x4, 0x5, 0x5}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000134000480300001800b0001006f626a726566000020000280080003400000000c0900040073797a310000000008000140000000010900010073797a30000000000900020073797a32"], 0x88}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001c00070c2bbd70000000000002000000", @ANYRES32=r4, @ANYBLOB="4000100a14000100000000000000000000000000000000010a000200"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) 6m50.369210452s ago: executing program 0 (id=1735): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) read$dsp(r0, &(0x7f0000000040)=""/85, 0x55) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xa) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000100)=0x2c) r2 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x4566c000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9000a8}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r3, 0x8, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000380)) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000400)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x1, 0x10, 0x7, 0x7158, {{0x22, 0x4, 0x2, 0x2d, 0x88, 0x66, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0xc6, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x9}, {@broadcast, 0x3}, {@local, 0xffff}, {@loopback, 0x95}, {@remote, 0x18}, {@multicast1, 0x1}, {@remote, 0x3}]}, @timestamp={0x44, 0x1c, 0x5c, 0x0, 0x0, [0xffff, 0x2, 0x5, 0x8001, 0x2, 0x1]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x3e, 0x0, 0x5, [0x9, 0x66]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x80, 0x8000, 0x7, 0x8, {{0xe, 0x4, 0x3, 0x1e, 0x38, 0x68, 0x0, 0x4, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @generic={0x88, 0xf, "8783a132282282f11972930e31"}, @ssrr={0x89, 0xf, 0x70, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r1, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], 0x0, 0x59, &(0x7f0000000880)=[{}], 0x8, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ac0)={0x410, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa2000000}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x240, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7, 0x38, 0x0, 0x1}, {0x1, 0xd4, 0x0, 0x4}, {0x7, 0x7f, 0x4, 0x68574f3e}]}}}]}}]}, 0x410}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r10, 0x800, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4048014}, 0x88) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000011c0)={'erspan0\x00', &(0x7f00000010c0)={'syztnl0\x00', r6, 0x7, 0x700, 0x8, 0x1, {{0x2e, 0x4, 0x2, 0x7, 0xb8, 0x68, 0x0, 0x7, 0x29, 0x0, @multicast2, @private=0xa010101, {[@ra={0x94, 0x4}, @cipso={0x86, 0x4f, 0xffffffffffffffff, [{0x1, 0x9, "928731582051b9"}, {0x0, 0x6, "885859c6"}, {0x6, 0x9, "028b26607b27d0"}, {0x5, 0x6, "819fb7ea"}, {0x1, 0x3, "e6"}, {0x3, 0xb, "9333f56a6e25d5b323"}, {0x0, 0xe, "f31b9702360f1bd578431528"}, {0x1, 0xd, "d628ce753f5f0ec031f689"}, {0x1, 0x2}]}, @timestamp_prespec={0x44, 0x3c, 0xa2, 0x3, 0x2, [{@loopback, 0x400}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast1, 0xfffff800}, {@multicast1}, {@rand_addr=0x64010101}, {@local, 0x7}, {@remote, 0x2d66068b}]}, @ssrr={0x89, 0x13, 0xb1, [@multicast1, @empty, @private=0xa010101, @multicast1]}]}}}}}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x38, r11, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7e}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$USBDEVFS_RESET(r0, 0x5514) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x2c, r11, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc725, 0x5e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x404a8c1) getsockname$packet(r1, &(0x7f0000001440), &(0x7f0000001480)=0x14) pipe2$9p(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r12, &(0x7f0000001500)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) 6m47.911720341s ago: executing program 0 (id=1738): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x60400, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$sndseq(r0, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x0, @time={0x8, 0x50}, {0x4}, {0x6}, @addr={0x7, 0x3}}, {0xd, 0x0, 0x0, 0x0, @time={0xffff, 0x100}, {}, {0x0, 0x8}, @connect={{0x4, 0x3}, {0x3}}}, {0x0, 0x0, 0x8, 0x0, @time={0x2, 0x2}, {0x0, 0xc}, {}, @control={0x0, 0xffffffff}}, {0x81, 0x0, 0x0, 0x0, @time={0x0, 0x7}, {0x7f, 0x9}, {0x8}, @connect={{0x4}, {0x80, 0x5}}}], 0x70) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="643f0e91", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x1, 0x40) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x38}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000070000004d000000000000004500000000000000950000000000000009c9bc6631c1248c81933e3784a658d0c4baeecff9b457e5a861fd3aa4037a72ab04501be580e00b22e241ad7bea36e2e3dfad39cc7e9db6f4e02b56989ec86839d86bc24762455d4efd69399a1c0712eb2dde"], &(0x7f0000000140)='GPL\x00', 0xd, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000300)={0xeb, 0x4, 0x6, "ebfa687d4461fed7a1a04285578f64c787cb64752627405e0ff0997a8803371629cd3e41e19c94d7043815d0fe9bc846b10c12a40e593e76669dbcf6ddc660fd25b9691f14354d44a49737631c02f179b315aca55e52262060c4e3a02d6dbb7dc860018394a9e4f10a272817aefe0542e0952a0e65b59b24f5f10b4c959e7ccb8a499e964473315bea36846f438fe1ad9c7b77c847c7cdebe0b5dbd553a924386c1d866d9e929323a5e0fc16964740d9cbae784983f2886dfcf084aaf0b3e30792959c671ed4d98c657f8a463f70c9d563124225cec8359d748b0bf88ee76c1475ea37e0ddb1468cdc69c5"}) 6m47.905739705s ago: executing program 0 (id=1741): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1}, 0x161) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=@dellinkprop={0x4c, 0x6c, 0x1, 0x709d27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x289c}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'netdevsim0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2003}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = signalfd4(r4, &(0x7f00000003c0)={[0x6]}, 0x8, 0x80800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000440)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6m47.826129015s ago: executing program 0 (id=1743): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() r4 = syz_pidfd_open(r3, 0x0) poll(&(0x7f0000000100)=[{r4, 0x2058}], 0x1, 0xfffffc01) eventfd2(0x5, 0x801) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x6, 0x0, 0x0, r5}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000840)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6m47.762157343s ago: executing program 34 (id=1743): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() r4 = syz_pidfd_open(r3, 0x0) poll(&(0x7f0000000100)=[{r4, 0x2058}], 0x1, 0xfffffc01) eventfd2(0x5, 0x801) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x6, 0x0, 0x0, r5}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000840)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m16.206805451s ago: executing program 3 (id=4834): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_io_uring_setup(0x1094, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) (async) r0 = syz_io_uring_setup(0x1094, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x4033, 0x0, 0x0, 0x2}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x4033, 0x0, 0x0, 0x2}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) flock(r4, 0x8) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x1, 0x7, 0xfffffffffffffffe}}, 0x28) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x28, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m16.202312408s ago: executing program 3 (id=4835): rt_sigtimedwait(&(0x7f0000000000)={[0x4]}, &(0x7f0000000040), &(0x7f0000000100)={0x77359400}, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x38, 0x1403, 0x100, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040034}, 0xc802) 2m15.265680425s ago: executing program 3 (id=4843): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x980903, 0x8081, @value=0x7}) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000000)="a51de889070a507001c7c1653618de8fbc307e1704b99f4b46a49a42512effd2444bcb2e533a81f3ea5ffe1a8ca74707ba3eb573bb26ca4f6cd9722ee62e9a37757f6b52742334cc3a7873d6474d90abb661e5c43f93b57fcc4e7ca6b1", &(0x7f0000000200)=@tcp=r3, 0x2}, 0x20) 2m15.2446755s ago: executing program 3 (id=4845): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c8f0000", @ANYRES16=r2, @ANYBLOB="ffff2abd7000f8dbdf25030000000800040000800000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004c}, 0x20000000) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x9], [0x0, 0x0, 0x4]}) r4 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0xfc, 0x9, 0xfffff028}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x4, 0x28, 0x2f, 0x8001, 0x4, 0xb78, 0x5, 0x3, 0x0, 0x1, 0x8, 0x8000, 0x400000, 0xffffffff, 0x1b, 0x8, 0x7, 0x1f4, 0xf, 0x3, 0x800, 0x3, 0x400, 0x9, 0x5, 0x9, 0x2, 0xffffff21, 0x1, 0x15, 0x101, 0x7, 0x4, 0x9, 0x82, 0xa8, 0xda80, 0x0, 0x2, 0x4, 0x1, 0x0, 0x5, 0xa4, 0x401, 0x2, 0x3, 0x8, 0xfffffffc, 0x6, 0x0, 0x967, 0xffffffff, 0x8, 0x6, 0x6, 0x9, 0x3, 0xff, 0x7e, 0xa, 0x7fff, 0x0, 0xfffffff7, 0x9, 0x8, 0x7, 0x80000000, 0x7fffffff, 0x2, 0x5, 0x1, 0x4, 0x7, 0x10001, 0xb1a, 0x9, 0x9, 0x1, 0x0, 0x7ff, 0x4, 0x8, 0x6, 0xfffff1f0, 0x3, 0x7, 0x0, 0x9, 0xfd, 0x80000000, 0x5, 0x100036, 0x5, 0x8, 0x10, 0x4, 0x2, 0x6a5, 0x6, 0x6, 0x4, 0x4, 0x8, 0x1, 0x3, 0x7fff, 0x5c73, 0x2, 0xe0a, 0xe5, 0x7, 0x9, 0x0, 0x3, 0xfffffff7, 0x1, 0x1, 0x9, 0x80000000, 0xb, 0x5, 0xcc, 0x7fffffff, 0x0, 0xbb, 0x10, 0x7, 0xf, 0x1a, 0x8, 0x2, 0x8, 0xcb0, 0xffffffff, 0x7ff, 0x6017, 0x7ff, 0x4, 0xa9, 0x4, 0x9, 0x1, 0xfffffe01, 0x6, 0x4a032035, 0x6, 0x8, 0x7, 0xd, 0x1, 0x0, 0x8, 0x8000, 0x2000, 0xed0, 0xf62d, 0x2, 0x1ac, 0x9, 0xe, 0x6, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x72, 0x3, 0x4, 0x6, 0x6, 0x1ff, 0x7, 0x3, 0x9, 0x1, 0x100, 0x6, 0x3, 0x9, 0x0, 0xe, 0x6, 0x4, 0x55, 0x8, 0x3, 0x100, 0x7af, 0x0, 0x201, 0x2, 0x5, 0x9a000000, 0xe5ba, 0x8, 0x2, 0x1ff, 0xfffffffc, 0x4, 0x1, 0x6, 0x8, 0x9, 0x3, 0xe01, 0x6, 0x80, 0x10000006, 0x31b80000, 0x5, 0xfffffeff, 0x9992, 0x3, 0x75, 0x2, 0x48e, 0x4, 0x8, 0x2, 0x0, 0x9ee2, 0xfffffff7, 0x6, 0x3, 0x400, 0x8, 0x5, 0xdc, 0x0, 0x3, 0xc, 0x9, 0x7, 0x8, 0x7a31, 0x3ff, 0xd, 0x1214, 0xffffffff, 0x6, 0x8, 0x76f, 0x4, 0x8, 0x7, 0x0, 0x7, 0xfb, 0x100, 0xe340, 0x4, 0x8, 0x7]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xb, 0x8001, 0x3, 0xffffffff}, {0x6d, 0x0, 0x86b, 0x7, 0x8, 0x8}, 0x3, 0x7, 0xbbf}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r11, 0x5, 0x70bd28, 0x0, {{0x12}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1, 0x2, 0x5, 0x0, {0xd8, 0xa83, 0x0, 0xa6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x6, 0x7f}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r14, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20008040) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x50, r11, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x0, 0xb}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x60}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20048880) 2m14.892509071s ago: executing program 3 (id=4848): clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="810500010f0000009ab998bf184d7237c9b60166677889c9b5478cac5b9e97c3f0136383e2d87b8cd513eea4e34dbea9a8ec12d864e9d47973335076d830df55a7084cd14fe5e98dc4b91b4f71f9212233ed63d50778e3853331add282d512da1c4cf190956d844c78cc5438dbcd6e45decf559374dff43252abb41806e995d4b504c914627bdd87ceb25edd4c8575764cfafee01650f2760fcf"], 0x8) utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)={{0x77359400}, {r0, r1/1000+60000}}, 0x100) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_ifreq(r3, 0x891e, &(0x7f0000000040)={'batadv_slave_1\x00', @ifru_names='ip_vti0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000100200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) 2m14.762488155s ago: executing program 3 (id=4853): prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) unshare(0x6020400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) unshare(0x2000000) fsmount(r0, 0x0, 0x88) 2m5.732069445s ago: executing program 5 (id=4943): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) 2m5.660619082s ago: executing program 5 (id=4944): ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0401091c04"], 0x7) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 2m5.660043882s ago: executing program 5 (id=4945): syz_open_dev$dri(&(0x7f0000000040), 0x6c, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 2m5.595904143s ago: executing program 5 (id=4946): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000540), 0xc) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000040)={0x8, 0x2, {0x56, 0x40, 0x7d5a, {0x2, 0x10d2}, {0x101, 0x100}, @ramp={0x7, 0x4, {0x1, 0x6, 0x800, 0x1}}}, {0x52, 0xac4, 0x40, {0x1116, 0x352}, {0xff7d, 0x7ff}, @cond=[{0x40, 0x5, 0x9, 0x4, 0x101, 0x3}, {0x2, 0x401, 0x0, 0xe, 0x400}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0x8}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x80041285, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) socket$nl_route(0x10, 0x3, 0x0) setns(r6, 0x24020000) read$rfkill(r3, &(0x7f0000000340), 0x8) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f00000003c0)="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", &(0x7f00000004c0)=@tcp6=r3, 0x4}, 0x20) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r9 = syz_pidfd_open(r7, 0x0) setns(r9, 0x24020000) mkdirat(r8, &(0x7f0000000300)='./file0\x00', 0x30) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000000500)={0x0, 0x3, 0x647, 0x0, 0x40000}) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@bridge_getvlan={0x17, 0x72, 0x301, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 2m4.708330822s ago: executing program 5 (id=4948): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) fstat(r0, &(0x7f0000000300)) (async, rerun: 32) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) (async) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) (async, rerun: 64) sendmsg$can_j1939(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r2, 0x1, {0x2, 0x7}, 0xff}, 0x18, &(0x7f0000000240)={&(0x7f0000000180)="43a37f7cbbbd210b9f377ca32e76072400c9685d03f3f7ee2701b2181158faa36f52db3f6937e0828d20d9a6f53d5c99d894a08b76f0813c7cdf09d122eebbc1ae91c9db412a59e89f52b667c0dca4c82221fef9ecdaaa3203bdf056b830db9757d1d2f4b137ea48f2be556d0bf47a7494f9eb34df840f37c02a2e0c1aff248db6c94cef6dd3c10b3188f885f47f4e28707a0105b857440d", 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x80d0) (async, rerun: 64) getpeername(r1, 0x0, &(0x7f0000000040)) 2m4.631649344s ago: executing program 5 (id=4949): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r2, @ANYBLOB="0198000003130000240012800900010069706970"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1m58.26598847s ago: executing program 35 (id=4853): prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) unshare(0x6020400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) unshare(0x2000000) fsmount(r0, 0x0, 0x88) 1m47.707728135s ago: executing program 36 (id=4949): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r2, @ANYBLOB="0198000003130000240012800900010069706970"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1m31.651249452s ago: executing program 8 (id=5312): syz_open_dev$dri(&(0x7f0000000040), 0x6c, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1) read$FUSE(r1, &(0x7f0000001640)={0x2020}, 0x2020) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f00000000c0)={0x8df9, 0x6, 0xb6d5, 0x6, 0xa}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00000003c0)={0x3, 0x0, [{}, {}, {}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000016000000000100007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000021e56a9f01000000010000000000000000000000000000000000000200000000000000ded6ec8002ae9943e44cd23e7100e4b783acf80ecec49e96adb9bdcee1140f6f0c3f5d722f88dcf71e70be13e29b98798080655e3f8d4bce4e5a2de9276bcada60e67deb9430e9ed54ec466afffa60de98fc15e076b4c00d9192a305c6ace2145a3e11cee4d288df39960e627df73255581647575da0f4a6f43f6e94a242278cf46142c31c36037cc3270b6c637adf862b3c860451e043a917efbbe0d82895062aed2bcb09000000c77a580af2a6383a36"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000001000000000000000000851000000600000018100000", @ANYRES32=r7, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000940300000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r8, &(0x7f0000000880)=[{&(0x7f0000000340)="64e5fa06", 0x4}, {0x0, 0x3f}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r5], 0x3c}}, 0x10) 1m31.539990799s ago: executing program 8 (id=5316): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r2 = socket$inet(0x2, 0x1, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x84, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01a581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket(0x1, 0x3, 0x9) r5 = accept(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r9, 0x110, 0x1, &(0x7f0000000080)='*\x00', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000200)={0x1, 0x2, 0x40000, 0x2000, &(0x7f0000017000/0x2000)=nil}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4458c}, [@IFLA_WEIGHT={0x8, 0xf, 0x1}, @IFLA_NET_NS_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4015}, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x4, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdffffffbe, 0xfdfffffffffffff9, 0x110, 0x9, 0xc82, 0x767], 0xeeef0000, 0x80082}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0) readv(r12, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$CDROMEJECT(r0, 0x5309) 1m31.127025782s ago: executing program 8 (id=5322): syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @mcast1}}}}}}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x383800, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x2004c8d0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x8000) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000140)=0x11) (async) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000180)) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 1m30.96711026s ago: executing program 8 (id=5323): r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000100)) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x20401) r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0xc0305720, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x6, 0x7, {r2}, {0xee01}, 0x1, 0x1}) syz_open_procfs(r3, &(0x7f0000000080)='net/ip_mr_cache\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1m30.045961921s ago: executing program 8 (id=5340): r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_io_uring_setup(0x2c36, &(0x7f0000000940)={0x0, 0x40004f30, 0x3000, 0x3, 0xfd, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x5, 0x0, 0x5}]}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r6, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x22d2, 0x20, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x44, 0x0, @fd, 0x4, 0x0, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m29.777925677s ago: executing program 8 (id=5342): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) 1m13.771739045s ago: executing program 37 (id=5342): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) 4.726395081s ago: executing program 4 (id=6487): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r2 = syz_clone(0x82000, &(0x7f0000000180)="a0049afc2c2ba2276b216c3dd624837dd1c57c8b580be22aa881e913bcbbe26baa68589fac9e169e9e5df6e7d081e980e825dbf83367dd080e481a56b28a570cd68d3ed4c7306fa428abafc32f317b4ae52049c27c4ad89a4c208e969a0ba883", 0x60, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="0cd27fb8cce1afb8585976a3be47652cbb5aeb187968cf634fc90e5596cd04aa2a344ebfb3be5dbd5faf31b1965b426e5485e8cec0d2806a93cd948b7638feb3270ef03d3b69a21975a1f069e51f9011007caf6e44bd7d6e54b09b1ccfa2a4ae93f35cbc5e0964ce542b3da95d2b99a7697643f7589512f4da079677be0bd3b3a4cd2cf4ca150a7f929d40") ptrace$setopts(0x4206, r2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r4, 0x800, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x20040804) fcntl$setownex(r1, 0xf, &(0x7f0000000340)={0x1, r2}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x1, 0x58, 0x66, 0x0, 0x7, 0x2f, 0x0, @loopback, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x9, 0x1, 0x1, 0x1, 0x5, 0x9f}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x3, {{0xa, 0x2, 0x3, 0x2, 0x1, 0x1, 0x1, 0x4}, 0x2, {0x1, 0x8, 0x2, 0x1c, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) close(r1) 4.624057508s ago: executing program 4 (id=6489): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4.324536272s ago: executing program 4 (id=6493): r0 = socket(0x10, 0x3, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x5ffdd000, 0x3e0000}], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x1, {0x60, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 3.210477119s ago: executing program 4 (id=6496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r1, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wg1\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x4, 0xf, 0x0, 0x1, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x1, 0x4ce1d8c7, 0x7}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)={@broadcast, @multicast2, 0x0}, &(0x7f0000000780)=0xc) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x11c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8040000}, 0x800) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 2.873156382s ago: executing program 4 (id=6501): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x13, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0xa, 0x8, 0x5, 0x7, 0x6000000}, 0x14) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.79066246s ago: executing program 4 (id=6503): syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af01"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0x10ac01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/135) 1.3837871s ago: executing program 9 (id=6511): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0xa, 0x8000) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x7fff) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000ffff28bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba01006f1000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32, @ANYBLOB="13bd7fded05ee535ea7aedc7cab4177ce2acda9763a8442740fb9757231f77b970bfc18c1704c8e4471160930000000000000000a078a83f207be87020"], 0x44}}, 0x8004002) 1.377803545s ago: executing program 9 (id=6513): syz_emit_ethernet(0x7e, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x3c, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0x5, "91ec92"}, {0x0, 0x7, "0683fa3f39"}]}]}}}}}}}, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.215500068s ago: executing program 9 (id=6516): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x8}}, 0x14}}, 0x20048000) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0\x00'}, 0x18) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r1, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000001c0)=""/19, 0x13, 0xa0, 0x86, 0x3, 0x5, 0x1635}}, 0x120) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0xffffffff], [0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 1.12781872s ago: executing program 9 (id=6519): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0xffffffffffffff09) socket$tipc(0x1e, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x54, 0x30, 0x1, 0x0, 0x0, {}, [{0x40, 0x1, [@m_tunnel_key={0x3c, 0x18, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x0) unshare(0x26020480) gettid() socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="76be230b3f915ef9988c6c05947d9226be93ce34c27f88a0db3246d9b2983db72c9822f63a5a582566821250a0202ba8d552cf2ba4551e3aa065d1a0b86fb764dfe0c07348a0754375febea3"], 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050003030000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0a0018000303"], 0x28}, 0x1, 0x0, 0x0, 0x64040894}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 709.592381ms ago: executing program 7 (id=6534): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040841}, 0x40) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 621.554242ms ago: executing program 7 (id=6536): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0\x00'}, 0x18) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000001c0)=""/19, 0x13, 0xa0, 0x86, 0x3, 0x5, 0x1635}}, 0x120) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0xffffffff], [0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 526.555936ms ago: executing program 7 (id=6538): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x2e2, 0x0, 0x100000fff}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r6, &(0x7f0000000640)=[{&(0x7f0000000140)='1', 0x1}, {&(0x7f0000002000)="c2", 0x1}], 0x2) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000004100)={0x2020}, 0x2020) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r7, 0x1, 0x0, 0x3f, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40) 525.906279ms ago: executing program 9 (id=6540): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x4, {0x1, 0x1, 0x3, 0x1}}, 0x7) 427.770548ms ago: executing program 9 (id=6542): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0}, 0x0) syz_usb_connect$uac1(0x5, 0x9b, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0xd, 0xc0, 0xdb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1000, 0xb}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x5, 0x8, 0x7, 0xf, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x10, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7f, 0x1, 0x0, {0x7, 0x25, 0x1, 0x82, 0xe, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc, 0xc, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x2, 0x3, 0x85, "c9"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x9, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xfa, 0x1, 0x7, {0x7, 0x25, 0x1, 0x1, 0x5, 0x4}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0xff, 0x4, 0x1, 0x20, 0x3}, 0x23, &(0x7f00000002c0)={0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x6, 0xeb}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "c730aa795680a52edbe404099ba094cc"}]}, 0x1, [{0x4a, &(0x7f0000000340)=@string={0x4a, 0x3, "201fdaba21a45fb385924a03094c80650e3a6e3ff18166096b6631d78af04642a7de49b6a9f62576a25f2c090d6b2e599823e9dd65ded0010d66be19b4f785740b902d29d21872b6"}}]}) r1 = gettid() r2 = syz_pidfd_open(r1, 0x0) timer_create(0x4, &(0x7f0000000400)={0x0, 0x10, 0x4, @tid=r1}, &(0x7f0000000300)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3, r4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x80071, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 427.271057ms ago: executing program 6 (id=6543): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0xd) (async) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0xd) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000001c0)=""/163) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 292.991685ms ago: executing program 7 (id=6544): accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x40000) (async) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x40000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @empty}, 0x8, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)='veth1_virt_wifi\x00', 0x9, 0x81, 0x8}) (async) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @empty}, 0x8, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)='veth1_virt_wifi\x00', 0x9, 0x81, 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffffffffffffffff}, 0x6) fcntl$getownex(r1, 0x10, &(0x7f0000000180)) getsockname(r0, &(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x80) (async) getsockname(r0, &(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x80) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x80800) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000480)={r2, &(0x7f0000000380)='^,#\x00', 0x2, &(0x7f00000003c0)={@align=0x80, {0x6, 0x7, 0xfffff801, 0xff}}, 0x4000, &(0x7f0000000400), &(0x7f0000000440)=0x8}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000480)={r2, &(0x7f0000000380)='^,#\x00', 0x2, &(0x7f00000003c0)={@align=0x80, {0x6, 0x7, 0xfffff801, 0xff}}, 0x4000, &(0x7f0000000400), &(0x7f0000000440)=0x8}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) r4 = syz_open_dev$MSR(&(0x7f00000004c0), 0x7, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r4, 0xc0105872, &(0x7f0000000500)={0x7, 0x5a6c}) chdir(&(0x7f0000000540)='./file0\x00') r5 = openat$cgroup_ro(r3, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0xf2c00, 0x0) (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0xf2c00, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000840)={&(0x7f0000000600), 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x150, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5d}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x98}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x193}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x152}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ea}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_MAC={0xa}]}, 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x40) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000880)=0x1f45, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f00000008c0)={0x3, 'wlan0\x00', {0x58c}, 0x77c}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000940)=0x3) (async) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000940)=0x3) recvmsg$can_raw(r6, &(0x7f0000000b80)={&(0x7f0000000980)=@sco, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/4, 0x4}], 0x1, &(0x7f0000000a80)=""/241, 0xf1}, 0x0) (async) recvmsg$can_raw(r6, &(0x7f0000000b80)={&(0x7f0000000980)=@sco, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/4, 0x4}], 0x1, &(0x7f0000000a80)=""/241, 0xf1}, 0x0) r9 = syz_open_dev$mouse(&(0x7f0000000bc0), 0xa, 0x2) accept$inet(r9, &(0x7f0000000c00)={0x2, 0x0, @multicast1}, &(0x7f0000000c40)=0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'pimreg0\x00'}) setxattr$security_evm(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), &(0x7f0000000d40)=@md5={0x1, "d4998054093b1eadc61babeb678841b7"}, 0x11, 0x1) (async) setxattr$security_evm(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), &(0x7f0000000d40)=@md5={0x1, "d4998054093b1eadc61babeb678841b7"}, 0x11, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) sendmsg$AUDIT_LIST_RULES(r10, &(0x7f0000000e80)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x10, 0x3f5, 0x2, 0x70bd29, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) 184.759727ms ago: executing program 6 (id=6545): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000a00020000000000000000000800090002"], 0x30}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffbfffd, 0x0, 0x0, {0x2, 0x8, 0xb, 0xffff, 0x204, 0x1, 0x2, 0x0, 0x120, 0x2000, 0xb9b3c01, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0xe, 0x0, 0x0, 0x7fff7ffc}, {0x0, 0xc, 0x40, 0x9}]}) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee80c000000979fd1e00d96072000001e8b9de2b79b0000e60200000000000000000000000000000000000008000000000000000200", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x5, 0x2000000000001]}}) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0xa43, 0x4) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) syz_open_dev$tty1(0xc, 0x4, 0x3) 181.854897ms ago: executing program 6 (id=6546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000040) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x2}) 181.583137ms ago: executing program 7 (id=6547): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={&(0x7f0000000700)='./file0\x00'}, 0x18) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000001c0)=""/19, 0x13, 0xa0, 0x86, 0x3, 0x5, 0x1635}}, 0x120) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0xffffffff], [0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b5d390887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b3366959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130d9b61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251a4523a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 181.421263ms ago: executing program 6 (id=6548): r0 = socket(0x1e, 0x4, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000007000000000000000000009c0001000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r5, 0x4004510f, &(0x7f0000000040)=0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 100.291917ms ago: executing program 7 (id=6549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_emit_ethernet(0xc5, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x8f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "0000000500000000260004"}, {0x0, 0x4, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d"}]}}}}}}, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) 155.193µs ago: executing program 6 (id=6550): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x4, {0x1, 0x1, 0x3, 0x1}}, 0x7) 0s ago: executing program 6 (id=6551): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) (async) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x20000) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="bf000100000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76}, 0x48) 0s ago: executing program 6 (id=6553): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf251000000006001100d104000008000100", @ANYRES32=0x0, @ANYBLOB="1a18089ea1cde8da52bd6b6a8564b6ef748fb9ef9348bc69acbe85307e6107836594faff01114487cadf044db0715541897290d855a704fc970853b36f1622882cb5f0ed57b572e2c19d0f354b6e34a17d8ec663a51f88c0e6c2dcde8c7f2bfe65bd870c95ce40bfa304a86f790dba08d5050f90297b2deee7db035c3f651f3fbe8963eb8c878d378a7cd2858c4e51431e04ee786f590000"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4048080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_sock_addr=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000600)=[{0x1e, '\x00', @st={0x4, [{0x1, @svalue=0xc9c}, {0x2, @uvalue=0x2}, {0x3, @svalue=0x2}, {0x3}]}, 0x7}]}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="080200000000000000000000000000001800000001000000000000000a0000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r8, &(0x7f0000000440), &(0x7f0000000040)=@udp=r7}, 0x20) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c0ddc428242342bcfd5600375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472e2f1b88d65c3db9cdb042d2643fe6b2c5a57df67d544af6e8dafe090000000000000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r11 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) sendmsg$nl_xfrm(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000001f00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000020001700010000002bbd700029bd70002cbd700026bd70000900000001000000340111007f00000100000000000000000000000000000000000000000000ffff7f000001fc0100000000000000000000000000010000000000000000000000000000000132010000000000000a000200fc000000000000000000000000000001fc010000000000000000000000000000fe8000000060000000000000000000bbac141420000000000000000000000000330100000535000002000200ac141400000000000000000000ffff7f000001fc83da2abce9618fd887268d12c9e2b5010000000000000000000000000001ac14140f0000000000000000000000003c0100a2ab67ccb2f4d15f1f00003500000a000a007f000001000000000000000000000000ac1414aa000000000000000000000000fc0000000000000000000000000000006401010000000000000a000200cc0003006c7a6a680000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004000046784eccdf932e50d42ec91a7fb8c801f207d91f2dfc4a2ccba5f09f892a437d06f60ef114d96f79fa7cdb3d13a06d65e29da63faa000000003f3c771381461e89b330b1a187414a3799d34053e7b1bd8e504ede89887d50858c0573742e348f7c8c721ba7eabfcef5ed121003fcd33282267751cbcbdd2e7c8bf829729bb0bae5a74114000d00fc0100fb0000000000000048550108000c00040000000000"], 0x42c}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) open_tree(r11, &(0x7f0000000400)='./file0/file0\x00', 0x8801) writev(r11, &(0x7f0000000680)=[{&(0x7f0000000040)="646a53e446de86a03ca53401a666039a19210b0c7cd7dc3ec41aede8b3c1e538631385ff5fe9491dcc08f39f53c806d40c36ab0b5b62821eddb8f74fb84295bdb901adaf9dd8cc98d6e28479fc520ba013129d273a8bb37fe91a72b544f41cb3b17e1f33ae17cdb6da17fd4d6c9e17013cd8f6e1682a96807775495b2bd94f2016d4b0", 0x83}, {&(0x7f0000000c40)="37496934018d9dc18ca975197b6fd7b9e2b69f8a99755fb19f721885d457989dc7a7fc04f4cacfa1100331e527cbfcc3fd7edda6d993e568be3887fcba98a5c55dd9e13d62305837ff5cf99f657733bed7cafb73c22b8e9e258295879b68fdb577234d4518fb0a57dcb352640e2dfc9dd6dd4d444420ad9447a4e0c3aaf8954382e5ecb46114903025c2c5ccd1f81344e3809300afe32093abea00c6b8267b01c1d7de3e6b651449bb64b1081485538ecc447e329e1018b5adc07664742748bb9f8d0ac6b3f147daca4f6493eb2c5b1e293397a7db88198400ddb7e21663b73b0a70de4b20a64e1b9245f37cc64980fceb25bc39b1489f73ac7780e303ede529a2327cf22551023c593ed3e6ea3b74a02887fa5b16b8d852343f53aea4d0ca43e0b5976410589da04efe1422c23a91de5e2e9d78f7e61dfea900154269a9e8bcc51548717b9b3c3efd32e0a09574a651ae594d4ca3a20bb87814312ca3b3d297934c77e531eea408a5d8529e88bdd506eb6fcecb29b555a03f5b151be89e683f9dc6b0179929f051421754bfcf4f5211bea965b27c6ca449908453ba9c485d0258885a288bf03d9bf290d24950158aa2d3d10d449ac096f85ab93f8407de0401c9eb66915817f65a5b827238e3ec73720ed4434f323755b22dae9642198b6901532bd9fdaa75a23a8f0c5a8fbf5528d129f3249f31590961a091a4dcc6e31589f08b79853f8654d61fb8d3e26522ca9d20f2ebbe87e20b04e909dbacb383115624a1844c66b7cceaef5b79df6223bae5b595fa8c81c3091bc082ad2bf07915a8dcab9a3b8ff823f6f58a6840d9e9205d05204021c09bb210eeaeb74d2b551fde9a178d4fd940639761ed2eac9b7a6db54d32d7105b91a0447abd5d27f6205a9cade773c396f85765a470413de7e56165be7a6c89aa7e92af89c9130e587414afeba0e7c7e2d5a4a3a68a23b931d00735cd53fc1d541a8f631e87186eb14dcb02c52117253fa51873abac1d4db1037cdbde1730abb106ab3efe3c451d307930f557fa89a463c2687a74f27b673b2cd04d82e62b88e1ca094e258fd313b53a56eaa908318f0545a3c5c6519ab9621972e2cd6fbe1796583b0297951d4709aedd6a2b2bb99eafcfbdd6544d9cc6d80ea13b89bb485fd5803bccc8a73e9042195fc45694e01a33cfdf9c60b3fe7475707500ce99e54c832f6ccf6d756e6c2dbe13c39082136573c3d70b4ec294a2899ff547659473a407b19297d7b59cd37d66be4d6be597e769f831ee438ee0206187ffb8ca4b5f6aa9b3f70066b9b2aae6cfa1267a06ece825e6bd8fe16969a982ffc6c30838ec8a69ed8d1cb8d7b6c76c04689a8144392d0bf922353c7126a02b8753b67194ec40db954658cfc1c806eb1a4319a18f2ec9d4a258ed5553fb146d838bee9fbdad0611080cf9fec8ad18af992f28d6dd0fb6791f66fbdef8d9242840dc2abbb64ccc509c3dfe7f05d5a197661b3bcd3400172e8cb396840ace01347d20eb3e6f7bebd50581ea85ea90b5524210f46662b9f3d578bbcbd92236fde56beb89b77a3311743c317f2e0590c5578bf9668c471f25d2d8068b884057d48ef85c34b67b409b487ec8c1142a6e47259af619e9eae1d95bd49c81f35094fef7374b74e3657118ab7213f270f1bad1997630dc646586ef63cca9ec8bcefa8b94072da747bb27ac83d7f7ac3d99b795ffa1dd60db9688c5cacd85ef0ae7845242dabab6cc595594beab3d9cf39a981dc18523019de557833932fbeac810feafeb4d7f01940e18d9486751e2b7696154898132768e878490dbb5acb2832281dfe9b7cefc7bd2fa63d109828583f7668a71f442a24bd3dc8c72690fe9aa9d5387a51341fa53fddfb21ddacbb1d2c928ff7a647378e6c814dfae3d80f5dd0151cce1228f92da91eb9bbedec6e05aad35ec383c559491e90a39571802f8d0c8bef2dec96dc6d54a5eb57e0eda9d21a58861826c62885f6f1af06a05551c0fb0f14756c7d57fd53249b75a96a0642931e1d61856fca108c480a4e88a0f74a56f6530410f77fe754ab10a1ecf9c1662f93b274aa7cbbd295a219a705be3466ed13c4035f4e943f54e3a90775d655da4a6ba01b80028259b6341be8cf09a812bd4baf9a4c03eee4cfd500136313261a47bbbe57f8d74fa0780f73ec005f6334c2013e4534f453baf7b11ee7e69d1658a3ae9eee451514f41b4ff065df33ebff6aa989212c5abb4373813b721b8c2dfab72a33fa1e92de38982c7b45576c82004cede95820653133594ce25e8bb367fbd8b190165114a6570ea4865ba25daa5d833d15e2d1566114bdeb65bd5951681fda6695659fa053bfad6618d4231a45fa8efa6bcdea257a1f7db5beff5ebf0da06a066438966bb3be28f251f3015617987602fc64203dfb41b3cd6f4e11a093d7a3535bdbb3b750445956f84e2245b2557b9cdc91fa7db813969f66919381cf870dc1962db2b0ed22dd628956413df58ad39a5b13903750b8a0d7cec31a0e20b72e6a55370d49ca353d3edb3cee01ebd2f9e074fecac34bcb52f2d7b16b7b134cc04b6128631b020d23741dbbc0358dc4c0e8c2bc89e071ea89649beb19b9031598fc7591735c7489a8ebb4de91ca28af0a9228f8d21eac1f2a25b0f1ba6587f8a66236817b57de29aba24aadb956ebaa13f6a02b8330dc6376a4d196e3daa5e9d3fbe425370b8b2e4276a28c4e57fc01e512d0f6a9bf55839da897f670de37729d0ef2121511b3e690cbb092d76e1cddb586c486519f996cdce2ae4fef6f5bc26bd4c67039798719e25752d0ce412da053927148728014b4ea44aed92bcc27ccbdf1a4f3582303bf1535a606f6e542ca862236f29b0abe405778e822c0478088a8f10bd0836a57dd00ab265774015887bd816e662e7d312ed05dd0b836af680b66bc652f7b76a5d17d6ca9dd6f9fd20060844eb067074a56f0cc7b8392160fd820710442cf0c4a382e955d6af4c1cbb0613886b1a56241346ea90f27f1b7d4706ac8fa11c011cf242e9e11c1511d9a4a09d4b77b85cf12c5daba8a213adfaf8f48b2d4f540a834f7a3770aa0cacfca00835d1d007fe24efeaf8de8be087c42a33c290cff8977e7fdb008edef62f2ee74607657227746450d33831a3c564f59f59f55ad259af7f69801633e409d89ccef0f71c797c69a8e34f54804ac3236610816f90810e8c63fc22b0318d1f361b6a6c729bf9f28d2328164c43504c60495bcc0fa5add6e5ec8e732b97be978d7e0068ba5652c0e8eac0baa6ff947f817e8fbdb095d221d8ec18a75c89bf30de904e3a8334e5fad239a3c70d40e3d5f3f16efd1f6a20161543a27c97a22bcc187a0e3628b94948a1fc4fb1ffd6877791588fa2ab66f940b7f978e7339e5ed29dd8ade60efc7b4d50bdd1216f64f7d4c745a6a856afd1a8687dc3649e8765a66c89470681b7f6ee5b282ce5c4f622469cde552fcf8fe906ce47bf7ea645c8a78311b5d456521ef0e3597122360fa9854eafb84e6a6f7c28a457ff0af7e20d38331f96dfc3f813056776b7d3ce30a122b337390daf3a6fe9351b8d0bb97c453042e48461af7ffa1c04e59cd7ab30989a02ae453b5b94bd4b0dcc8d34d15671c62e2e24b339570bc7cf7bba5c9d0f95b58d49a5bdb52159e9595988e62fd40c79925c83c9e5c41cfa23243abcf24a1b7cf35b5b2d55d36a682a0e2af7216db052291f9ad1208e93d0c2f9481a0a1ace304520059d47e5c17fed1fcc5964644ec78c1ad367b992c9e113c9e67dc43f21c9c91e8f18ac60f333b8aed4a8eb0c3bf1d2e74bafed42b6411d0decd02b57c087066a0c4e16c5e4e6b2ffab163b9aa56f6258e468b83baa402be28eaa0e98c4e325ca186163f76e1f0dd59b5b035324bb5ff3505699e128d919d1b5aab399f5ba332b13220c134c1e89b6f1ef44793d4e1e543f6fdf7f416e0e240685ea455cccf56c1847f27e77929a84c09d658926c8c8eaf54ca0cebb32b05d9fc565751bd6bbcd871a0e0bb0bb4738fcd09082196e525b3a9dda2f9ec2923ca9dc677a972fdfa2ddf35966d3a95e2046ebed7f6952985dc7cec84fc5f88b5225763b72b9109b84eca977ce6478bd506c73b1c9b15caf4589bff499a6a96aaed97358f8e4d0461cd784fc8bb4a1cd2c714307847000591758124d925ac66d5c75e1e9cfe22ee240e46a190d59cb85c08a84735724d80215a13408600e85e301b0aaecc21137c7f1fb90cfb27b6139a3c9c1486d6a62bcd2b1265ddf45bfdddef70bbffb27ec00059ca7056b8a9056dd355432184061447a3294da0201a846b59bb5e566bfda2d74840effc98610b5cea3accab2ece0deaa406e99106f5bec0ca6f7ac0f0f757881385fbc1df66089af6897a773ae4ff552ac4a1221111731fe0ccb0032a4cda58c69e9d74a19d3de1f486259adabda1363048d725382d88efbf8f11c861a6c01dd982362869ad2c51986f7cdad39e83ec0382500829634f477ad0a83477e3ea654033ee14d82ff03f39509476571762cc9e5bc491986d7c508e9638e2200635cb544aee6b7fa84d49753974f99220b4e7d1205f9adde1bc5cddb949e418869f907b3e81ac9e0fba5af5b140e3b8a9e519b59b42298938f2b20218d016a3633804beb5d875112fd6db287e318fbecf9d34cb48ae9bcada79d42ae61abf29f47cb50c9485abee9b4a7f1cbd74f8ad5223212dd3d4aa909b1f34378b1448f9612abf70ca46508307c308867a94ad1ca6e68c8d7d141e4f70f323e5a1b319d2ee17a0975b95e5e3f9acd22ed50443d80c321e4fb496919b828f8e5a433a8b67aa0462babf70beae61d5c4f985e7b424fe256f62a39f11eb84a3064deec6ce883f5b5c5da4631b13edd6df1473d8d9db5d19ae0f2dd6e7f10153cacd0fc84df9450190abc3e231cc2e5f80bf4d7e3f77599c123840dfdabb086d7f90e8f0909a9bd903b2789d45e269b6c32418d5e509d37ae82c7a781c0734baa7e22b40df30bd0ba291f5640d63a60bb9c642811726b904ad95e38efe1178059e39470b2fa29cf3ab8b7ce974288326828c721b9cfcba25c6d85d1a96944ccb5589bb89961c29c142ea2adefc50a4355bc05c01faff253e45c1d6a83abc80e5b279327a572bdcb73056fdd3ccb754ded68938c3471fe725bac9e4fbc5f07864f69d7d3b70417ae38a5f3fb12ef2a6ef69b926fe69596594a879944087b45d2290246456d8ab8c8648e56e757e77f41fa98fc865f1a3778486210ec6842c86fdc79bc486f326a5a5d03c9c9278753ef34850f29a92fb9a7b41e972f92a5f450e0f1fd105dfd6476765a47e693977e759f5df1db3c43f1e87ec961280b6a921b12193cc5d4dd8f448cb2c1a9f504c0773e3f886a197f69389aa0e6686fc6aeff69a400f24b12d5c7468e8744f0ea66ec18ad7ae409d406784c4cbdb17b765e4dff43bc65624139c4a910559f9b8965e97c116daaf324ff14386de2c44582553663764a072b55e2729fcfbaa5bb96a836c0e20aab22916c9117288f5999e97313909bc93e7fd4b8cac325f5f80ea513af781b40275e8d264ac015e23da41ba11db26e4dd7ff7da74150572bff4d39f8765b91ac", 0xf80}], 0x2) kernel console output (not intermixed with test programs): face deactivated: dummy0 [ 538.712034][T12944] batman_adv: batadv0: Removing interface: dummy0 [ 538.719538][T12944] bond4: (slave dummy0): making interface the new active one [ 538.722559][T12944] dummy0: entered promiscuous mode [ 538.725388][T12944] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 538.729245][T12944] netlink: 'syz.7.5739': attribute type 10 has an invalid length. [ 538.732432][T12944] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5739'. [ 538.741418][T12944] bond4: (slave dummy0): Releasing active interface [ 538.777750][T12224] usb 11-1: new high-speed USB device number 44 using dummy_hcd [ 538.844747][T13066] netlink: 440 bytes leftover after parsing attributes in process `syz.9.5746'. [ 538.847811][T13066] netlink: 4984 bytes leftover after parsing attributes in process `syz.9.5746'. [ 538.939914][T12224] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.944095][T12224] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.947762][T12224] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 538.952969][T12224] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.956434][T12224] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.982991][T12224] usb 11-1: config 0 descriptor?? [ 538.984348][T13087] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.5750'. [ 538.988163][T13087] openvswitch: netlink: Missing key (keys=40, expected=100) [ 539.012308][T13091] comedi comedi3: comedi_config --init_data is deprecated [ 539.015202][T13091] comedi comedi3: comedi_config --init_data is deprecated [ 539.017566][T13091] comedi comedi3: comedi_config --init_data is deprecated [ 539.089430][T13098] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 539.108444][T12217] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 539.176180][T13105] CIFS mount error: No usable UNC path provided in device string! [ 539.176180][T13105] [ 539.180285][T13105] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 539.268926][T12217] usb 9-1: Using ep0 maxpacket: 8 [ 539.275903][T12217] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 539.278417][T12217] usb 9-1: config 0 has no interface number 0 [ 539.281725][T12217] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 539.285570][T12217] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 539.288376][T13137] veth3: entered promiscuous mode [ 539.289201][T12217] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.297344][T12217] usb 9-1: config 0 descriptor?? [ 539.303518][T12217] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 539.413432][T13230] tipc: Started in network mode [ 539.415005][T13230] tipc: Node identity 4, cluster identity 4711 [ 539.416996][T13230] tipc: Node number set to 4 [ 539.422198][T12224] hid_parser_main: 9 callbacks suppressed [ 539.422209][T12224] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 539.427900][T12224] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 539.435861][T12224] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 539.438786][T12224] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 539.442775][T12224] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 539.445664][T12224] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 539.449244][T12224] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 539.453038][T12224] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 539.456261][T12224] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 539.459158][T12224] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 539.472715][T12224] plantronics 0003:047F:FFFF.0021: hiddev1,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 539.673356][ T6013] usb 11-1: USB disconnect, device number 44 [ 539.697311][ T40] kauditd_printk_skb: 424 callbacks suppressed [ 539.697328][ T40] audit: type=1400 audit(771.093:66168): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=46816 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 539.729257][ T40] audit: type=1400 audit(771.102:66169): avc: denied { execmem } for pid=13264 comm="syz.7.5759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 539.744427][ T53] usb 9-1: USB disconnect, device number 54 [ 539.788695][ T40] audit: type=1400 audit(771.167:66170): avc: denied { read write } for pid=6226 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 539.803778][ T40] audit: type=1400 audit(771.167:66171): avc: denied { open } for pid=6226 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 539.825135][ T40] audit: type=1400 audit(771.167:66172): avc: denied { ioctl } for pid=6226 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 539.835063][ T40] audit: type=1400 audit(771.214:66173): avc: denied { read } for pid=13280 comm="syz.4.5760" dev="nsfs" ino=4026534566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 539.847651][ T40] audit: type=1400 audit(771.214:66174): avc: denied { open } for pid=13280 comm="syz.4.5760" path="net:[4026534566]" dev="nsfs" ino=4026534566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 539.859394][ T40] audit: type=1400 audit(771.223:66175): avc: denied { create } for pid=13280 comm="syz.4.5760" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 539.868204][ T40] audit: type=1400 audit(771.223:66176): avc: denied { map } for pid=13280 comm="syz.4.5760" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=140511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 539.878272][ T40] audit: type=1400 audit(771.223:66177): avc: denied { read } for pid=13280 comm="syz.4.5760" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=140511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 540.055744][T13289] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.5763'. [ 540.058619][T13289] openvswitch: netlink: Missing key (keys=40, expected=100) [ 540.198141][T13296] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 540.231993][T13308] netlink: 'syz.7.5768': attribute type 10 has an invalid length. [ 540.340248][T13308] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 540.533904][T13323] netlink: 'syz.4.5770': attribute type 21 has an invalid length. [ 540.537267][T13324] netlink: 'syz.4.5770': attribute type 21 has an invalid length. [ 540.554590][ T6015] usb 11-1: new full-speed USB device number 45 using dummy_hcd [ 540.704662][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5771'. [ 540.736128][ T6015] usb 11-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 540.740750][ T6015] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x6 has invalid wMaxPacketSize 0 [ 540.750566][ T6015] usb 11-1: config 0 interface 0 has no altsetting 0 [ 540.757568][ T6015] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 540.761192][ T6015] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 540.764416][ T6015] usb 11-1: Product: syz [ 540.766192][ T6015] usb 11-1: Manufacturer: syz [ 540.775887][ T6015] usb 11-1: SerialNumber: syz [ 540.789220][ T6015] usb 11-1: config 0 descriptor?? [ 540.804741][ T6015] usb 11-1: selecting invalid altsetting 0 [ 540.977214][T13353] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 541.030483][ T6000] usb 11-1: USB disconnect, device number 45 [ 541.140515][T13373] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 541.144494][T13373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=13373 comm=syz.7.5777 [ 541.179683][T13381] Cannot find del_set index 2 as target [ 541.238225][T13388] netlink: 'syz.4.5781': attribute type 10 has an invalid length. [ 541.356278][T13404] netlink: 'syz.4.5785': attribute type 9 has an invalid length. [ 541.440665][T13414] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5788'. [ 541.618602][T13428] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 541.773070][T13444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.782430][T13444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.886859][T13482] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 541.891480][T13482] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 542.082405][ T6000] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 542.245414][ T6000] usb 14-1: config 0 has no interfaces? [ 542.250025][ T6000] usb 14-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 542.253934][ T6000] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.257306][ T6000] usb 14-1: Product: syz [ 542.259229][ T6000] usb 14-1: Manufacturer: syz [ 542.261301][ T6000] usb 14-1: SerialNumber: syz [ 542.266623][ T6000] usb 14-1: config 0 descriptor?? [ 542.403535][ T6014] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 542.546725][ T6015] usb 14-1: USB disconnect, device number 2 [ 542.589607][ T6014] usb 9-1: Using ep0 maxpacket: 16 [ 542.599559][ T6014] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 542.603732][ T6014] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 542.607756][ T6014] usb 9-1: Product: syz [ 542.609581][ T6014] usb 9-1: Manufacturer: syz [ 542.611566][ T6014] usb 9-1: SerialNumber: syz [ 542.616982][ T6014] usb 9-1: config 0 descriptor?? [ 542.840004][T13504] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 543.047111][T13564] syz_tun: left allmulticast mode [ 543.049331][T13564] syz_tun: left promiscuous mode [ 543.054711][T13564] bridge0: port 1(syz_tun) entered disabled state [ 543.468879][ T6000] usb 9-1: USB disconnect, device number 55 [ 543.996137][T13656] 8021q: adding VLAN 0 to HW filter on device bond5 [ 544.003407][T13656] __nla_validate_parse: 2 callbacks suppressed [ 544.003422][T13656] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5816'. [ 544.190638][ T6014] usb 11-1: new high-speed USB device number 46 using dummy_hcd [ 544.245401][T13705] netlink: 'syz.4.5819': attribute type 10 has an invalid length. [ 544.361171][ T6014] usb 11-1: Using ep0 maxpacket: 8 [ 544.367687][ T6014] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 544.371419][ T6014] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.380015][ T6014] pvrusb2: Hardware description: Terratec Grabster AV400 [ 544.383008][ T6014] pvrusb2: ********** [ 544.384653][ T6014] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 544.388709][ T6014] pvrusb2: Important functionality might not be entirely working. [ 544.391830][ T6014] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 544.396365][ T6014] pvrusb2: ********** [ 544.592581][ T2487] pvrusb2: Invalid write control endpoint [ 544.630674][ T2487] pvrusb2: Invalid write control endpoint [ 544.632789][ T2487] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 544.636510][ T2487] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 544.640530][ T2487] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 544.644473][ T2487] pvrusb2: Device being rendered inoperable [ 544.647024][ T2487] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 544.650454][ T2487] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 544.659212][ T2487] pvrusb2: Attached sub-driver cx25840 [ 544.661949][ T2487] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 544.665984][ T2487] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 544.807217][T13651] pvrusb2: Killing an I2C write to 7 that is too large (desired=125 limit=61) [ 544.983981][T23194] Bluetooth: hci2: Frame reassembly failed (-84) [ 545.000124][T13727] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 545.007476][T23186] Bluetooth: hci5: Frame reassembly failed (-84) [ 545.056845][ T40] kauditd_printk_skb: 351 callbacks suppressed [ 545.056857][ T40] audit: type=1400 audit(776.103:66529): avc: denied { create } for pid=13734 comm="syz.9.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 545.068216][ T40] audit: type=1400 audit(776.103:66530): avc: denied { write } for pid=13734 comm="syz.9.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 545.077276][ T40] audit: type=1400 audit(776.112:66531): avc: denied { create } for pid=13736 comm="syz.7.5825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 545.086158][ T40] audit: type=1400 audit(776.112:66532): avc: denied { getopt } for pid=13736 comm="syz.7.5825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 545.096867][ T40] audit: type=1400 audit(776.112:66533): avc: denied { read write } for pid=13736 comm="syz.7.5825" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 545.106668][ T40] audit: type=1400 audit(776.112:66534): avc: denied { open } for pid=13736 comm="syz.7.5825" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 545.117373][ T40] audit: type=1400 audit(776.122:66535): avc: denied { read } for pid=13736 comm="syz.7.5825" dev="nsfs" ino=4026534785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 545.126016][ T40] audit: type=1400 audit(776.122:66536): avc: denied { open } for pid=13736 comm="syz.7.5825" path="net:[4026534785]" dev="nsfs" ino=4026534785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 545.135720][ T40] audit: type=1400 audit(776.122:66537): avc: denied { create } for pid=13736 comm="syz.7.5825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 545.143979][ T40] audit: type=1400 audit(776.131:66538): avc: denied { ioctl } for pid=13736 comm="syz.7.5825" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=951 ioctlcmd=0x6f53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 545.615560][T13768] netlink: 'syz.9.5832': attribute type 1 has an invalid length. [ 545.618939][T13768] netlink: 96 bytes leftover after parsing attributes in process `syz.9.5832'. [ 545.622703][T13768] netlink: 'syz.9.5832': attribute type 1 has an invalid length. [ 545.626501][T13768] netlink: 'syz.9.5832': attribute type 8 has an invalid length. [ 545.629293][T13768] netlink: 606 bytes leftover after parsing attributes in process `syz.9.5832'. [ 545.632214][T13768] netlink: 1 bytes leftover after parsing attributes in process `syz.9.5832'. [ 545.677666][T13771] syz.9.5833 uses old SIOCAX25GETINFO [ 545.785357][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5834'. [ 545.839358][T13779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13779 comm=syz.9.5834 [ 546.490292][T13790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.637521][T13790] nfs4: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 547.035488][ T6014] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 547.174608][ T5928] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 547.174756][ T2203] Bluetooth: hci2: command 0x1003 tx timeout [ 547.182533][T31726] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 547.217346][ T6014] usb 12-1: Using ep0 maxpacket: 16 [ 547.221875][ T6014] usb 12-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 547.224651][ T6014] usb 12-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 547.227184][ T6014] usb 12-1: Product: syz [ 547.228682][ T6014] usb 12-1: Manufacturer: syz [ 547.230155][ T6014] usb 12-1: SerialNumber: syz [ 547.233334][ T6014] usb 12-1: config 0 descriptor?? [ 547.451563][ T9] usb 12-1: USB disconnect, device number 11 [ 547.916379][T13848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.014345][T13851] netlink: 208240 bytes leftover after parsing attributes in process `syz.9.5845'. [ 548.348979][T13876] overlayfs: regular lower layers cannot follow data lower layers [ 548.650968][ T6000] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 548.755567][T13651] kexec: Could not allocate control_code_buffer [ 548.766914][ T5962] usb 11-1: USB disconnect, device number 46 [ 548.821997][ T6000] usb 12-1: Using ep0 maxpacket: 16 [ 548.841523][ T6000] usb 12-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 548.845771][ T6000] usb 12-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 548.847651][T13908] 9p: Bad value for 'rfdno' [ 548.848384][ T6000] usb 12-1: Product: syz [ 548.851732][ T6000] usb 12-1: Manufacturer: syz [ 548.853255][ T6000] usb 12-1: SerialNumber: syz [ 548.862184][ T6000] usb 12-1: config 0 descriptor?? [ 548.977349][T13931] macvtap1: entered promiscuous mode [ 548.979167][T13931] macvtap1: entered allmulticast mode [ 548.981251][T13931] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 548.984488][T13931] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 548.990396][T13931] team0: Device macvtap1 failed to register rx_handler [ 548.994429][T13931] mac80211_hwsim hwsim41 wlan0: left allmulticast mode [ 548.996854][T13931] mac80211_hwsim hwsim41 wlan0: left promiscuous mode [ 549.080852][ T6000] usb 12-1: USB disconnect, device number 12 [ 549.088111][T13933] kvm: kvm [13932]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 549.091937][T13933] kvm: kvm [13932]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 549.222887][T13972] binder: 13970:13972 ioctl c0306201 2000000003c0 returned -14 [ 549.226195][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5869'. [ 549.275164][T13972] hsr_slave_1 (unregistering): left promiscuous mode [ 549.300596][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5868'. [ 549.308277][T13984] netlink: 'syz.6.5870': attribute type 1 has an invalid length. [ 549.369693][T13984] 8021q: adding VLAN 0 to HW filter on device bond6 [ 549.372317][T13984] netlink: 'syz.6.5870': attribute type 1 has an invalid length. [ 549.397575][T13984] netlink: 'syz.6.5870': attribute type 1 has an invalid length. [ 549.412787][T14086] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 549.427606][T13985] bond6: (slave veth7): Enslaving as an active interface with a down link [ 549.430108][T14086] kvm: pic: level sensitive irq not supported [ 549.432631][T13984] netlink: 'syz.6.5870': attribute type 1 has an invalid length. [ 549.434079][T14086] kvm: pic: non byte read [ 549.441176][T14086] kvm: pic: level sensitive irq not supported [ 549.441438][T14086] kvm: pic: non byte read [ 549.447903][T14086] kvm: pic: level sensitive irq not supported [ 549.448193][T14086] kvm: pic: non byte read [ 549.455313][T14086] kvm: pic: level sensitive irq not supported [ 549.463573][T14086] kvm: pic: non byte read [ 549.470440][T13985] bond6: (slave veth9): Enslaving as an active interface with a down link [ 549.474278][T13984] netlink: 'syz.6.5870': attribute type 1 has an invalid length. [ 549.505937][T13985] bond6: (slave veth11): Enslaving as an active interface with a down link [ 549.509099][T13984] netlink: 'syz.6.5870': attribute type 1 has an invalid length. [ 549.551897][T13985] bond6: (slave veth13): Enslaving as an active interface with a down link [ 549.555206][T13984] netlink: 'syz.6.5870': attribute type 1 has an invalid length. [ 549.589309][T13985] bond6: (slave veth15): Enslaving as an active interface with a down link [ 549.614719][T13985] bond6: (slave veth17): Enslaving as an active interface with a down link [ 549.643190][T13985] bond6: (slave veth19): Enslaving as an active interface with a down link [ 549.686863][T13985] bond6: (slave veth21): Enslaving as an active interface with a down link [ 549.715681][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5874'. [ 549.725219][T13985] bond6: (slave veth23): Enslaving as an active interface with a down link [ 549.749703][T13985] bond6: (slave veth25): Enslaving as an active interface with a down link [ 549.775726][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5874'. [ 549.816734][T13985] bond6: (slave veth27): Enslaving as an active interface with a down link [ 549.861281][T13985] bond6: (slave veth29): Enslaving as an active interface with a down link [ 549.865095][T14758] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 549.914035][T14894] netlink: 71 bytes leftover after parsing attributes in process `syz.9.5877'. [ 549.920565][T13985] bond6: (slave veth31): Enslaving as an active interface with a down link [ 549.967568][T13985] bond6: (slave veth33): Enslaving as an active interface with a down link [ 550.045233][T15015] binder: 15014:15015 ioctl c0306201 200000000480 returned -22 [ 550.064732][T13985] bond6: (slave veth35): Enslaving as an active interface with a down link [ 550.111020][T13985] bond6: (slave veth37): Enslaving as an active interface with a down link [ 550.160669][T13985] bond6: (slave veth39): Enslaving as an active interface with a down link [ 550.185362][T13985] bond6: (slave veth41): Enslaving as an active interface with a down link [ 550.218256][T13985] bond6: (slave veth43): Enslaving as an active interface with a down link [ 550.270332][T15294] loop4: detected capacity change from 0 to 7 [ 550.273629][T15294] buffer_io_error: 10 callbacks suppressed [ 550.273644][T15294] Buffer I/O error on dev loop4, logical block 0, async page read [ 550.279990][T15168] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 550.283600][T15294] Buffer I/O error on dev loop4, logical block 0, async page read [ 550.286311][T15294] Buffer I/O error on dev loop4, logical block 0, async page read [ 550.288981][T15294] Buffer I/O error on dev loop4, logical block 0, async page read [ 550.291402][T15294] Buffer I/O error on dev loop4, logical block 0, async page read [ 550.293862][T15294] Buffer I/O error on dev loop4, logical block 0, async page read [ 550.296418][T15294] Buffer I/O error on dev loop4, logical block 0, async page read [ 550.300373][T15294] ldm_validate_partition_table(): Disk read failed. [ 550.302454][T15294] Buffer I/O error on dev loop4, logical block 0, async page read [ 550.304907][T15294] Buffer I/O error on dev loop4, logical block 0, async page read [ 550.306585][T15299] macvlan2: entered promiscuous mode [ 550.307321][T15294] Buffer I/O error on dev loop4, logical block 0, async page read [ 550.307340][T15294] Dev loop4: unable to read RDB block 0 [ 550.307371][T15294] loop4: unable to read partition table [ 550.315847][T15294] loop4: partition table beyond EOD, truncated [ 550.317785][T15294] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 550.368210][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5886'. [ 550.377939][T15310] netlink: 7 bytes leftover after parsing attributes in process `syz.7.5886'. [ 550.430833][ T40] kauditd_printk_skb: 177 callbacks suppressed [ 550.430849][ T40] audit: type=1400 audit(781.123:66716): avc: denied { write } for pid=15312 comm="syz.7.5887" name="snmp6" dev="proc" ino=4026534878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 550.443671][ T40] audit: type=1400 audit(781.123:66717): avc: denied { read write } for pid=15312 comm="syz.7.5887" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 550.453621][ T40] audit: type=1400 audit(781.123:66718): avc: denied { open } for pid=15312 comm="syz.7.5887" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 550.463547][ T40] audit: type=1400 audit(781.123:66719): avc: denied { ioctl } for pid=15312 comm="syz.7.5887" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 550.472192][ T40] audit: type=1400 audit(781.123:66720): avc: denied { read } for pid=15315 comm="syz.6.5888" name="demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 550.479359][ T40] audit: type=1400 audit(781.132:66721): avc: denied { open } for pid=15315 comm="syz.6.5888" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 550.487483][ T40] audit: type=1400 audit(781.141:66722): avc: denied { sys_module } for pid=15312 comm="syz.7.5887" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 550.498183][ T40] audit: type=1400 audit(781.188:66723): avc: granted { setsecparam } for pid=15315 comm="syz.6.5888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 550.502477][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5888'. [ 550.508094][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5888'. [ 550.525861][ T40] audit: type=1400 audit(781.207:66724): avc: granted { setsecparam } for pid=15315 comm="syz.6.5888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 550.544363][ T40] audit: type=1400 audit(781.216:66725): avc: denied { bpf } for pid=15327 comm="syz.7.5889" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 550.552109][T15328] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5889'. [ 550.587328][T15331] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5890'. [ 550.812219][T15342] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5892'. [ 551.137821][ T5962] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 551.315017][ T5962] usb 12-1: Using ep0 maxpacket: 16 [ 551.317597][ T5962] usb 12-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 551.317623][ T5962] usb 12-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 551.317644][ T5962] usb 12-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.317667][ T5962] usb 12-1: config 1 interface 0 has no altsetting 0 [ 551.319576][ T5962] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 551.338016][ T5962] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.338040][ T5962] usb 12-1: Product: syz [ 551.338053][ T5962] usb 12-1: Manufacturer: syz [ 551.338067][ T5962] usb 12-1: SerialNumber: syz [ 551.389558][T12217] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 551.549994][T12217] usb 9-1: Using ep0 maxpacket: 32 [ 551.553006][T12217] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 551.553027][T12217] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 551.553046][T12217] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 551.553060][T12217] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 551.553071][T12217] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 551.553085][T12217] usb 9-1: config 0 interface 0 has no altsetting 0 [ 551.572273][ T5962] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 551.572360][T12217] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 551.572377][T12217] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 551.572388][T12217] usb 9-1: Product: syz [ 551.572396][T12217] usb 9-1: Manufacturer: syz [ 551.572403][T12217] usb 9-1: SerialNumber: syz [ 551.574615][T12217] usb 9-1: config 0 descriptor?? [ 551.591592][T12217] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 551.597766][T12217] ldusb 9-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 551.627339][T15422] SELinux: Context system_u:object_r:crontab_exec_t:s0 is not valid (left unmapped). [ 551.812844][T15395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.816385][T15395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.822769][T12224] usb 9-1: USB disconnect, device number 56 [ 551.826845][T12224] ldusb 9-1:0.0: LD USB Device #1 now disconnected [ 551.828144][T15433] validate_nla: 60 callbacks suppressed [ 551.828158][T15433] netlink: 'syz.6.5902': attribute type 178 has an invalid length. [ 552.033208][T23185] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.036096][T23185] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.042727][T23185] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.045502][T23185] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.079497][T15452] sg_write: process 271 (syz.9.5905) changed security contexts after opening file descriptor, this is not allowed. [ 552.121801][T15455] cgroup: Need name or subsystem set [ 552.163173][T15461] usblp0:failed reading printer status (-32) [ 552.167963][T12217] usb 12-1: USB disconnect, device number 13 [ 552.183265][T12217] usblp0: removed [ 552.212155][T15472] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 552.435497][T15490] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 552.463254][T31726] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 552.836398][T15514] [ 553.127246][T15529] netlink: 'syz.7.5924': attribute type 1 has an invalid length. [ 553.163871][T15529] bond7: entered promiscuous mode [ 553.167326][T15529] 8021q: adding VLAN 0 to HW filter on device bond7 [ 553.203191][T15568] (syz.4.5921,15568,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 553.210223][T15529] bond7: (slave bridge3): making interface the new active one [ 553.212548][T15529] bridge3: entered promiscuous mode [ 553.214948][T15529] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 553.280897][T15577] tipc: Started in network mode [ 553.282409][T15577] tipc: Node identity 84e, cluster identity 4711 [ 553.284480][T15577] tipc: Node number set to 2126 [ 553.490965][T15618] netlink: 'syz.9.5938': attribute type 11 has an invalid length. [ 553.673051][ T6013] usb 11-1: new high-speed USB device number 47 using dummy_hcd [ 553.829641][T15665] tmpfs: Bad value for 'mpol' [ 553.836471][T15665] overlayfs: statfs failed on './file0' [ 553.838519][ T6013] usb 11-1: Using ep0 maxpacket: 16 [ 553.844488][ T6013] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 553.848076][ T6013] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 553.855760][ T6013] usb 11-1: Product: syz [ 553.871212][ T6013] usb 11-1: Manufacturer: syz [ 553.873116][ T6013] usb 11-1: SerialNumber: syz [ 553.877847][ T6013] usb 11-1: config 0 descriptor?? [ 554.107787][T12217] usb 11-1: USB disconnect, device number 47 [ 554.322778][T15730] kernel read not supported for file /policy (pid: 15730 comm: syz.4.5952) [ 554.392632][ T9] IPVS: starting estimator thread 0... [ 554.399428][T15742] sysfs: cannot create duplicate filename '/class/ieee80211/4Ï€!FõïVl‘uc'f`å”Þ†’;œ1µx%ñ†‹M¹Fœ-ôÁõîI' [ 554.408710][T15742] CPU: 3 UID: 0 PID: 15742 Comm: syz.9.5954 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.408739][T15742] Tainted: [L]=SOFTLOCKUP [ 554.408746][T15742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 554.408758][T15742] Call Trace: [ 554.408765][T15742] [ 554.408772][T15742] dump_stack_lvl+0x100/0x190 [ 554.408803][T15742] sysfs_warn_dup.cold+0x1c/0x28 [ 554.408830][T15742] sysfs_do_create_link_sd+0x113/0x140 [ 554.408856][T15742] sysfs_create_link+0x61/0xc0 [ 554.408880][T15742] device_add+0x675/0x1950 [ 554.408906][T15742] ? __pfx_device_add+0x10/0x10 [ 554.408928][T15742] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 554.408949][T15742] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 554.408972][T15742] wiphy_register+0x1e58/0x2d30 [ 554.408993][T15742] ? __rtnl_unlock+0xb9/0xf0 [ 554.409021][T15742] ? __pfx_wiphy_register+0x10/0x10 [ 554.409043][T15742] ? __asan_memset+0x23/0x50 [ 554.409070][T15742] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 554.409100][T15742] ieee80211_register_hw+0x2c11/0x4040 [ 554.409132][T15742] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 554.409152][T15742] ? __pfx___debug_object_init+0x10/0x10 [ 554.409179][T15742] ? find_held_lock+0x2b/0x80 [ 554.409196][T15742] ? net_generic+0xea/0x2a0 [ 554.409218][T15742] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 554.409237][T15742] ? __hrtimer_setup+0x178/0x280 [ 554.409262][T15742] mac80211_hwsim_new_radio+0x2847/0x57c0 [ 554.409295][T15742] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 554.409314][T15742] ? __asan_memcpy+0x3c/0x60 [ 554.409341][T15742] hwsim_new_radio_nl+0xc1f/0x1340 [ 554.409356][T15742] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 554.409383][T15742] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 554.409407][T15742] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 554.409430][T15742] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 554.409469][T15742] genl_family_rcv_msg_doit+0x214/0x300 [ 554.409497][T15742] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 554.409531][T15742] ? bpf_lsm_capable+0x9/0x10 [ 554.409551][T15742] ? security_capable+0x80/0x260 [ 554.409569][T15742] ? ns_capable+0xd2/0xf0 [ 554.409588][T15742] genl_rcv_msg+0x560/0x800 [ 554.409614][T15742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.409637][T15742] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 554.409656][T15742] ? __lock_acquire+0x4a5/0x2630 [ 554.409683][T15742] netlink_rcv_skb+0x159/0x420 [ 554.409723][T15742] ? __pfx_genl_rcv_msg+0x10/0x10 [ 554.409751][T15742] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 554.409784][T15742] ? netlink_deliver_tap+0x1ae/0xcc0 [ 554.409809][T15742] genl_rcv+0x28/0x40 [ 554.409830][T15742] netlink_unicast+0x5aa/0x870 [ 554.409854][T15742] ? __pfx_netlink_unicast+0x10/0x10 [ 554.409884][T15742] netlink_sendmsg+0x8b0/0xda0 [ 554.409909][T15742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.409929][T15742] ? __might_fault+0x10/0x140 [ 554.409963][T15742] ____sys_sendmsg+0xa54/0xc30 [ 554.409989][T15742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.410017][T15742] ? __pfx_futex_wake_mark+0x10/0x10 [ 554.410046][T15742] ___sys_sendmsg+0x190/0x1e0 [ 554.410072][T15742] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.410126][T15742] __sys_sendmsg+0x170/0x220 [ 554.410145][T15742] ? __pfx___sys_sendmsg+0x10/0x10 [ 554.410163][T15742] ? __x64_sys_futex+0x34f/0x4d0 [ 554.410199][T15742] do_syscall_64+0x106/0xf80 [ 554.410215][T15742] ? clear_bhb_loop+0x40/0x90 [ 554.410236][T15742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.410255][T15742] RIP: 0033:0x7f427c39bf79 [ 554.410271][T15742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.410288][T15742] RSP: 002b:00007f427d243028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.410306][T15742] RAX: ffffffffffffffda RBX: 00007f427c615fa0 RCX: 00007f427c39bf79 [ 554.410318][T15742] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006 [ 554.410329][T15742] RBP: 00007f427c4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 554.410340][T15742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.410351][T15742] R13: 00007f427c616038 R14: 00007f427c615fa0 R15: 00007ffcb25ee9c8 [ 554.410377][T15742] [ 554.523726][T15743] IPVS: using max 48 ests per chain, 115200 per kthread [ 554.530615][T15751] netlink: 'syz.9.5954': attribute type 2 has an invalid length. [ 554.540900][T15749] netfs: Duplicate cookie detected [ 554.544531][T15751] netlink: 'syz.9.5954': attribute type 1 has an invalid length. [ 554.546505][T15749] netfs: O-cookie c=0000000f [fl=4008 na=0 nA=0 s=-] [ 554.546521][T15749] netfs: O-cookie V=0000001c [9p,syz,] [ 554.546530][T15749] netfs: O-key=[8] 'a300540400000000' [ 554.546537][T15749] netfs: N-cookie c=00000010 [fl=8 na=0 nA=0 s=-] [ 554.546547][T15749] netfs: N-cookie V=0000001c [9p,syz,] [ 554.546554][T15749] netfs: N-key=[8] 'a300540400000000' [ 554.637427][T15756] i2c i2c-1: Invalid block write size 204 [ 554.639683][T15756] i2c i2c-1: Invalid block write size 204 [ 554.642484][T15756] i2c i2c-1: Invalid block write size 204 [ 555.860317][ T40] kauditd_printk_skb: 326 callbacks suppressed [ 555.860330][ T40] audit: type=1400 audit(786.190:67052): avc: denied { wake_alarm } for pid=15818 comm="syz.4.5969" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 555.950184][ T40] audit: type=1400 audit(786.283:67053): avc: denied { mount } for pid=15805 comm="syz.6.5967" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 555.950682][T15820] overlay: filesystem on ./bus is read-only [ 555.967341][ T40] audit: type=1400 audit(786.283:67054): avc: denied { mounton } for pid=15805 comm="syz.6.5967" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 556.083182][ T40] audit: type=1400 audit(786.396:67055): avc: denied { mounton } for pid=15823 comm="syz.9.5970" path="/108/file0" dev="tmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 556.106633][ T40] audit: type=1400 audit(786.414:67056): avc: denied { mount } for pid=15823 comm="syz.9.5970" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 556.141481][ T40] audit: type=1400 audit(786.461:67057): avc: denied { map_create } for pid=15823 comm="syz.9.5970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 556.149071][ T40] audit: type=1400 audit(786.461:67058): avc: denied { bpf } for pid=15823 comm="syz.9.5970" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 556.155746][ T40] audit: type=1400 audit(786.470:67059): avc: denied { perfmon } for pid=15823 comm="syz.9.5970" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 556.163196][ T40] audit: type=1400 audit(786.480:67060): avc: denied { prog_run } for pid=15823 comm="syz.9.5970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 556.226192][ T40] audit: type=1400 audit(786.536:67061): avc: denied { module_request } for pid=15823 comm="syz.9.5970" kmod=72646D612D636C69656E742D6F70615F766E0163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 556.258162][T15824] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 556.917010][T15851] netlink: 'syz.7.5975': attribute type 322 has an invalid length. [ 556.921381][T15851] __nla_validate_parse: 12 callbacks suppressed [ 556.921396][T15851] netlink: 108 bytes leftover after parsing attributes in process `syz.7.5975'. [ 556.927385][T15851] netlink: 108 bytes leftover after parsing attributes in process `syz.7.5975'. [ 556.931940][T15851] netlink: 84 bytes leftover after parsing attributes in process `syz.7.5975'. [ 556.974177][T15844] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 557.132609][T15849] overlayfs: statfs failed on './file0' [ 557.144508][T15849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5974'. [ 557.220878][ T6015] hid_parser_main: 28 callbacks suppressed [ 557.220897][ T6015] hid-generic 00A0:0086:0003.0022: unknown main item tag 0x0 [ 557.228416][ T6015] hid-generic 00A0:0086:0003.0022: unknown main item tag 0x0 [ 557.231321][ T6015] hid-generic 00A0:0086:0003.0022: unknown main item tag 0x0 [ 557.233595][ T6015] hid-generic 00A0:0086:0003.0022: unknown main item tag 0x0 [ 557.235837][ T6015] hid-generic 00A0:0086:0003.0022: unknown main item tag 0x0 [ 557.238060][ T6015] hid-generic 00A0:0086:0003.0022: unknown main item tag 0x0 [ 557.240484][ T6015] hid-generic 00A0:0086:0003.0022: unknown main item tag 0x0 [ 557.242565][ T6015] hid-generic 00A0:0086:0003.0022: unknown main item tag 0x0 [ 557.244773][ T6015] hid-generic 00A0:0086:0003.0022: unknown main item tag 0x0 [ 557.247235][ T6015] hid-generic 00A0:0086:0003.0022: unknown main item tag 0x0 [ 557.255448][ T6015] hid-generic 00A0:0086:0003.0022: hidraw1: HID v0.05 Device [syz1] on syz0 [ 557.309452][T15875] fido_id[15875]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 557.362901][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5982'. [ 557.458056][T15900] netlink: 'syz.4.5984': attribute type 3 has an invalid length. [ 557.461170][T15900] netlink: 'syz.4.5984': attribute type 3 has an invalid length. [ 557.464326][T15900] netlink: 'syz.4.5984': attribute type 3 has an invalid length. [ 557.468729][T15900] netlink: 'syz.4.5984': attribute type 3 has an invalid length. [ 557.473163][T15900] netlink: 'syz.4.5984': attribute type 3 has an invalid length. [ 557.476529][T15900] netlink: 'syz.4.5984': attribute type 3 has an invalid length. [ 557.480848][T15900] netlink: 'syz.4.5984': attribute type 3 has an invalid length. [ 557.483973][T15900] netlink: 'syz.4.5984': attribute type 3 has an invalid length. [ 557.487258][T15900] netlink: 'syz.4.5984': attribute type 3 has an invalid length. [ 557.490362][T15900] netlink: 'syz.4.5984': attribute type 3 has an invalid length. [ 557.536290][T15905] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 557.592472][ T6000] hid-generic 00A0:0086:0003.0023: hidraw1: HID v0.05 Device [syz1] on syz0 [ 557.630719][T15923] fido_id[15923]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 557.692460][T15937] vlan2: entered promiscuous mode [ 557.694629][T15937] bridge0: entered promiscuous mode [ 557.714349][T15937] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 557.760768][T15943] loop6: detected capacity change from 0 to 2560 [ 557.763868][ T4422] buffer_io_error: 14 callbacks suppressed [ 557.763880][ T4422] Buffer I/O error on dev loop6, logical block 0, async page read [ 557.768654][ T4422] Buffer I/O error on dev loop6, logical block 0, async page read [ 557.771735][ T4422] Buffer I/O error on dev loop6, logical block 0, async page read [ 557.777841][ T4422] Buffer I/O error on dev loop6, logical block 0, async page read [ 557.781021][ T4422] Buffer I/O error on dev loop6, logical block 0, async page read [ 557.784163][ T4422] Buffer I/O error on dev loop6, logical block 0, async page read [ 557.787198][ T4422] Buffer I/O error on dev loop6, logical block 0, async page read [ 557.789571][ T4422] Buffer I/O error on dev loop6, logical block 0, async page read [ 557.791893][ T4422] ldm_validate_partition_table(): Disk read failed. [ 557.793884][ T4422] Buffer I/O error on dev loop6, logical block 0, async page read [ 557.797343][T12217] usb 11-1: new high-speed USB device number 48 using dummy_hcd [ 557.801804][ T4422] Buffer I/O error on dev loop6, logical block 0, async page read [ 557.804926][ T4422] Dev loop6: unable to read RDB block 0 [ 557.807396][ T4422] loop6: unable to read partition table [ 557.810665][T15943] ldm_validate_partition_table(): Disk read failed. [ 557.812896][T15943] Dev loop6: unable to read RDB block 0 [ 557.814740][T15943] loop6: unable to read partition table [ 557.816652][T15943] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 557.967237][T12217] usb 11-1: Using ep0 maxpacket: 16 [ 557.973900][T12217] usb 11-1: New USB device found, idVendor=13ef, idProduct=721e, bcdDevice=de.06 [ 557.977701][T12217] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.982368][T12217] usb 11-1: Product: syz [ 557.984342][T12217] usb 11-1: Manufacturer: syz [ 557.986364][T12217] usb 11-1: SerialNumber: syz [ 557.991678][T12217] usb 11-1: config 0 descriptor?? [ 557.996522][T12217] usb 11-1: bad CDC descriptors [ 558.223678][ T6000] usb 11-1: USB disconnect, device number 48 [ 558.262010][T15976] 8021q: adding VLAN 0 to HW filter on device bond7 [ 558.285557][T15976] 8021q: adding VLAN 0 to HW filter on device bond8 [ 558.289001][T15976] bond7: (slave bond8): Enslaving as an active interface with a down link [ 558.293685][T15976] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5997'. [ 558.296957][T15976] 8021q: adding VLAN 0 to HW filter on device bond7 [ 558.301954][T15976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 558.396386][ T6013] hid-generic 00A0:0086:0003.0024: hidraw1: HID v0.05 Device [syz1] on syz0 [ 558.443559][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6001'. [ 558.448919][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6001'. [ 558.453087][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6001'. [ 558.457172][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6001'. [ 558.466088][T16062] fido_id[16062]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 558.583019][T16086] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 558.609601][T16086] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 558.733411][T16104] ISOFS: Unable to identify CD-ROM format. [ 558.783122][T16107] fuse: Bad value for 'fd' [ 558.836157][T16111] bond9: Removing last ns target with arp_interval on [ 559.154417][ T2203] Bluetooth: hci1: command 0x0406 tx timeout [ 559.336367][ T53] usb 11-1: new high-speed USB device number 49 using dummy_hcd [ 559.423317][ T6000] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 559.508116][ T53] usb 11-1: Using ep0 maxpacket: 8 [ 559.515051][ T53] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 559.518720][ T53] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 559.522717][ T53] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 559.526529][ T53] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 559.530661][ T53] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.535991][ T53] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 559.539968][ T53] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.614789][ T6000] usb 9-1: Using ep0 maxpacket: 8 [ 559.619646][ T6000] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 559.623317][ T6000] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.643853][ T6000] pvrusb2: Hardware description: Terratec Grabster AV400 [ 559.646688][ T6000] pvrusb2: ********** [ 559.648034][ T6000] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 559.651903][ T6000] pvrusb2: Important functionality might not be entirely working. [ 559.655083][ T6000] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 559.659844][ T6000] pvrusb2: ********** [ 559.761591][ T53] usb 11-1: usb_control_msg returned -32 [ 559.763473][ T53] usbtmc 11-1:16.0: can't read capabilities [ 559.767877][T16202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.771145][T16202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.789924][ T53] usb 11-1: USB disconnect, device number 49 [ 559.855703][T12224] hid-generic 00A0:0086:0003.0025: hidraw1: HID v0.05 Device [syz1] on syz0 [ 559.869952][ T2487] pvrusb2: Invalid write control endpoint [ 559.872768][T16228] input: syz0 as /devices/virtual/input/input70 [ 559.933982][ T2487] pvrusb2: Invalid write control endpoint [ 559.936558][ T2487] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 559.940432][ T2487] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 559.943491][ T2487] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 559.948129][ T2487] pvrusb2: Device being rendered inoperable [ 559.950650][ T2487] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 559.951574][T16244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16244 comm=syz.6.6018 [ 559.953526][ T2487] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 559.965529][ T2487] pvrusb2: Attached sub-driver cx25840 [ 559.971651][ T2487] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 559.975955][ T2487] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 559.983936][T16244] bond10: (slave bridge3): making interface the new active one [ 559.987205][T16244] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 560.083111][T16163] pvrusb2: Killing an I2C write to 7 that is too large (desired=125 limit=61) [ 560.095053][T16163] dvmrp0: entered allmulticast mode [ 560.131150][ T6015] usb 9-1: USB disconnect, device number 57 [ 560.185519][T16374] sp0: Synchronizing with TNC [ 560.998063][T16414] input: syz0 as /devices/virtual/input/input71 [ 561.000429][ T9] hid-generic 00A0:0086:0003.0026: hidraw1: HID v0.05 Device [syz1] on syz0 [ 561.075468][T16428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16428 comm=syz.4.6027 [ 561.100459][T16428] smc: adding net device bond0 with user defined pnetid SYZ2 [ 561.283701][ T40] kauditd_printk_skb: 279 callbacks suppressed [ 561.283712][ T40] audit: type=1400 audit(791.267:67341): avc: denied { read write } for pid=16494 comm="syz.4.6035" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 561.304286][ T40] audit: type=1400 audit(791.267:67342): avc: denied { open } for pid=16494 comm="syz.4.6035" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 561.308438][T16498] IPv6: NLM_F_CREATE should be specified when creating new route [ 561.318972][ T40] audit: type=1400 audit(791.267:67343): avc: denied { create } for pid=16494 comm="syz.4.6035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 561.325659][ T40] audit: type=1400 audit(791.267:67344): avc: denied { create } for pid=16496 comm="syz.9.6036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 561.332079][ T40] audit: type=1400 audit(791.276:67345): avc: denied { getopt } for pid=16496 comm="syz.9.6036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 561.338898][ T40] audit: type=1400 audit(791.314:67346): avc: denied { mount } for pid=16494 comm="syz.4.6035" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 561.358013][ T40] audit: type=1400 audit(791.332:67347): avc: denied { read } for pid=16537 comm="syz.9.6038" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 561.370082][ T40] audit: type=1400 audit(791.332:67348): avc: denied { open } for pid=16537 comm="syz.9.6038" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 561.383726][ T40] audit: type=1400 audit(791.342:67349): avc: denied { ioctl } for pid=16537 comm="syz.9.6038" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 561.389880][T12217] usb 11-1: new high-speed USB device number 50 using dummy_hcd [ 561.425367][ T40] audit: type=1400 audit(791.398:67350): avc: denied { read write } for pid=16551 comm="syz.9.6040" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 561.431493][T16552] input: syz0 as /devices/virtual/input/input72 [ 561.431731][ T53] hid-generic 00A0:0086:0003.0027: hidraw1: HID v0.05 Device [syz1] on syz0 [ 561.513365][T16575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16575 comm=syz.9.6040 [ 561.573410][T12217] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 561.576987][T12217] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 561.580368][T12217] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 561.584106][T12217] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.591168][T16470] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 561.598063][T12217] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 561.978219][ T53] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 562.150434][ T53] usb 12-1: Using ep0 maxpacket: 16 [ 562.155117][ T53] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 562.159938][ T53] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.164567][ T53] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.168525][ T53] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 562.174423][ T53] usb 12-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 562.178300][ T53] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.184391][ T53] usb 12-1: config 0 descriptor?? [ 562.494640][T16674] __nla_validate_parse: 66 callbacks suppressed [ 562.494653][T16674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6052'. [ 563.440785][ T6013] hid_parser_main: 104 callbacks suppressed [ 563.440805][ T6013] hid-generic 00A0:0086:0003.0028: unknown main item tag 0x0 [ 563.449876][ T6013] hid-generic 00A0:0086:0003.0028: unknown main item tag 0x0 [ 563.456309][T16677] input: syz0 as /devices/virtual/input/input73 [ 563.460226][ T6013] hid-generic 00A0:0086:0003.0028: unknown main item tag 0x0 [ 563.464864][ T6013] hid-generic 00A0:0086:0003.0028: unknown main item tag 0x0 [ 563.468912][ T6013] hid-generic 00A0:0086:0003.0028: unknown main item tag 0x0 [ 563.471501][ T6013] hid-generic 00A0:0086:0003.0028: unknown main item tag 0x0 [ 563.473713][ T6013] hid-generic 00A0:0086:0003.0028: unknown main item tag 0x0 [ 563.479931][ T53] usbhid 12-1:0.0: can't add hid device: -71 [ 563.480021][ T6013] hid-generic 00A0:0086:0003.0028: unknown main item tag 0x0 [ 563.484316][ T6013] hid-generic 00A0:0086:0003.0028: unknown main item tag 0x0 [ 563.485258][ T53] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 563.491970][ T6013] hid-generic 00A0:0086:0003.0028: unknown main item tag 0x0 [ 563.494161][ T53] usb 12-1: USB disconnect, device number 14 [ 563.511254][ T6013] hid-generic 00A0:0086:0003.0028: hidraw1: HID v0.05 Device [syz1] on syz0 [ 563.516121][T16690] lo speed is unknown, defaulting to 1000 [ 563.522991][T16690] lo speed is unknown, defaulting to 1000 [ 563.526153][T16690] lo speed is unknown, defaulting to 1000 [ 563.540780][T16695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16695 comm=syz.4.6053 [ 563.557552][T16694] fido_id[16694]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 563.650299][T16690] infiniband syz2: set down [ 563.651765][ T6013] lo speed is unknown, defaulting to 1000 [ 563.652924][T16690] infiniband syz2: added lo [ 563.681641][T16690] RDS/IB: syz2: added [ 563.683068][T16690] smc: adding ib device syz2 with port count 1 [ 563.685391][T16690] smc: ib device syz2 port 1 has pnetid SYZ0 (user defined) [ 563.690170][ T6000] lo speed is unknown, defaulting to 1000 [ 563.694650][T16690] lo speed is unknown, defaulting to 1000 [ 563.787887][T16690] lo speed is unknown, defaulting to 1000 [ 563.867615][T16690] lo speed is unknown, defaulting to 1000 [ 563.946565][T16690] lo speed is unknown, defaulting to 1000 [ 563.967249][ T9] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 564.024297][T16690] lo speed is unknown, defaulting to 1000 [ 564.104258][T16690] lo speed is unknown, defaulting to 1000 [ 564.116935][ T9] usb 9-1: device descriptor read/64, error -71 [ 564.185367][T16690] lo speed is unknown, defaulting to 1000 [ 564.381076][ T6014] usb 11-1: USB disconnect, device number 50 [ 564.396265][ T9] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 564.494877][T16749] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 564.566099][ T9] usb 9-1: device descriptor read/64, error -71 [ 564.664514][T16757] fuse: Unknown parameter 'dd' [ 564.695562][ T9] usb usb9-port1: attempt power cycle [ 565.058044][ T9] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 565.091207][ T9] usb 9-1: device descriptor read/8, error -71 [ 565.112673][T16789] xt_l2tp: v2 doesn't support IP mode [ 565.357537][ T9] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 565.390479][ T9] usb 9-1: device descriptor read/8, error -71 [ 565.469402][T16803] Cannot find add_set index 0 as target [ 565.515808][ T9] usb usb9-port1: unable to enumerate USB device [ 565.563937][T16820] ip6erspan0: entered promiscuous mode [ 565.652145][ T9] hid-generic 00A0:0086:0003.0029: hidraw1: HID v0.05 Device [syz1] on syz0 [ 565.653043][T16827] input: syz0 as /devices/virtual/input/input74 [ 565.806783][T16854] validate_nla: 42 callbacks suppressed [ 565.806801][T16854] netlink: 'syz.7.6078': attribute type 10 has an invalid length. [ 565.851499][T16856] netlink: 'syz.7.6079': attribute type 4 has an invalid length. [ 565.967928][T16868] netlink: 'syz.6.6082': attribute type 10 has an invalid length. [ 565.974069][T16868] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 566.286375][T16882] syzkaller0: entered promiscuous mode [ 566.288518][T16882] syzkaller0: entered allmulticast mode [ 566.306087][T16882] tipc: Enabling of bearer rejected, failed to enable media [ 566.706187][ T40] kauditd_printk_skb: 241 callbacks suppressed [ 566.706204][ T40] audit: type=1400 audit(796.344:67592): avc: denied { bpf } for pid=16906 comm="syz.7.6090" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 566.713159][T16907] team_slave_0: entered promiscuous mode [ 566.718635][T16907] team_slave_1: entered promiscuous mode [ 566.722708][T16907] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 566.726644][ T40] audit: type=1400 audit(796.363:67593): avc: denied { create } for pid=16904 comm="syz.9.6089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 566.726688][T16907] team0: Device macvlan3 is already an upper device of the team interface [ 566.733794][ T40] audit: type=1400 audit(796.363:67594): avc: denied { bind } for pid=16904 comm="syz.9.6089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 566.738215][T16907] team_slave_0: left promiscuous mode [ 566.746244][ T40] audit: type=1400 audit(796.382:67595): avc: denied { create } for pid=16904 comm="syz.9.6089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 566.748163][T16907] team_slave_1: left promiscuous mode [ 566.762807][ T40] audit: type=1400 audit(796.391:67596): avc: denied { create } for pid=16906 comm="syz.7.6090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 566.770571][ T40] audit: type=1400 audit(796.400:67597): avc: denied { connect } for pid=16906 comm="syz.7.6090" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 566.806597][T16911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.024884][ T40] audit: type=1400 audit(796.634:67598): avc: denied { name_bind } for pid=16934 comm="syz.4.6096" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 567.065124][ T40] audit: type=1400 audit(796.671:67599): avc: denied { setopt } for pid=16937 comm="syz.4.6097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 567.079495][ T40] audit: type=1400 audit(796.671:67600): avc: denied { write } for pid=16937 comm="syz.4.6097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 567.086536][ T40] audit: type=1400 audit(796.671:67601): avc: denied { connect } for pid=16937 comm="syz.4.6097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 567.309141][T16969] syzkaller1: entered promiscuous mode [ 567.311543][T16969] syzkaller1: entered allmulticast mode [ 567.466065][T16986] lo speed is unknown, defaulting to 1000 [ 567.613513][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6111'. [ 568.478341][T17078] syzkaller0: entered promiscuous mode [ 568.481914][T17078] syzkaller0: entered allmulticast mode [ 568.563400][T17085] IPVS: Unknown mcast interface: syzkaller1 [ 569.482248][T17182] netlink: 'syz.9.6149': attribute type 39 has an invalid length. [ 569.496631][T17185] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 569.687822][T17215] xt_hashlimit: size too large, truncated to 1048576 [ 569.783935][T17223] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6166'. [ 569.860132][T31726] Bluetooth: hci3: command tx timeout [ 569.893025][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6169'. [ 569.901447][T17232] bridge_slave_1: left allmulticast mode [ 569.907440][T17232] bridge_slave_1: left promiscuous mode [ 569.910027][T17232] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.917586][T17232] bridge_slave_0: left allmulticast mode [ 569.919595][T17232] bridge_slave_0: left promiscuous mode [ 569.921634][T17232] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.006358][T17242] syzkaller0: entered promiscuous mode [ 570.008829][T17242] syzkaller0: entered allmulticast mode [ 570.048312][T17259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6174'. [ 570.329592][T17284] team_slave_0: entered promiscuous mode [ 570.332202][T17284] team_slave_1: entered promiscuous mode [ 570.336169][T17284] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 570.339717][T17284] team0: Device macvlan2 is already an upper device of the team interface [ 570.346001][T17284] team_slave_0: left promiscuous mode [ 570.348605][T17284] team_slave_1: left promiscuous mode [ 570.574928][T17311] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.578533][T17311] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.885637][T17311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.895522][T17311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.269451][T24962] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.272903][T24962] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.281813][T17339] team_slave_0: entered promiscuous mode [ 571.284561][T17339] team_slave_1: entered promiscuous mode [ 571.289542][T17339] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 571.293240][T17339] team0: Device macvlan3 is already an upper device of the team interface [ 571.298103][T17339] team_slave_0: left promiscuous mode [ 571.300399][T17339] team_slave_1: left promiscuous mode [ 571.328700][T24962] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.331585][T24962] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.460713][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6201'. [ 571.586440][T17377] syzkaller0: entered promiscuous mode [ 571.588864][T17377] syzkaller0: entered allmulticast mode [ 571.684758][T17391] syz_tun: entered allmulticast mode [ 571.687689][T17391] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 571.691410][T17391] mroute: pending queue full, dropping entries [ 571.697635][T17390] syz_tun: left allmulticast mode [ 571.735418][T17403] netlink: 332 bytes leftover after parsing attributes in process `syz.7.6213'. [ 571.827429][T17415] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6217'. [ 571.857931][T17418] syzkaller0: entered promiscuous mode [ 571.859823][T17418] syzkaller0: entered allmulticast mode [ 572.217097][ T6013] IPVS: starting estimator thread 0... [ 572.320294][T17459] IPVS: using max 30 ests per chain, 72000 per kthread [ 573.799196][T17451] batadv0: entered promiscuous mode [ 573.800978][T17451] batadv0: entered allmulticast mode [ 573.803885][T17451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.828453][ T40] kauditd_printk_skb: 192 callbacks suppressed [ 573.828465][ T40] audit: type=1400 audit(803.001:67794): avc: denied { create } for pid=17469 comm="syz.7.6229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 573.836868][ T40] audit: type=1400 audit(803.001:67795): avc: denied { ioctl } for pid=17469 comm="syz.7.6229" path="socket:[149766]" dev="sockfs" ino=149766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 573.867875][ T40] audit: type=1400 audit(803.029:67796): avc: denied { read write } for pid=17473 comm="syz.7.6230" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 573.879977][ T40] audit: type=1400 audit(803.029:67797): avc: denied { open } for pid=17473 comm="syz.7.6230" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 573.892752][ T40] audit: type=1400 audit(803.029:67798): avc: denied { ioctl } for pid=17473 comm="syz.7.6230" path="/dev/virtual_nci" dev="devtmpfs" ino=709 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 573.901775][ T40] audit: type=1400 audit(803.029:67799): avc: denied { read } for pid=17473 comm="syz.7.6230" dev="nsfs" ino=4026534785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 573.908578][ T40] audit: type=1400 audit(803.029:67800): avc: denied { open } for pid=17473 comm="syz.7.6230" path="net:[4026534785]" dev="nsfs" ino=4026534785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 573.915885][ T40] audit: type=1400 audit(803.057:67801): avc: denied { create } for pid=17480 comm="syz.9.6231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 573.922736][ T40] audit: type=1400 audit(803.057:67802): avc: denied { bind } for pid=17480 comm="syz.9.6231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 573.930943][ T40] audit: type=1400 audit(803.057:67803): avc: denied { connect } for pid=17480 comm="syz.9.6231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 575.015392][ T3246] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 575.154453][ T3246] usb 9-1: device descriptor read/64, error -71 [ 575.155071][T17559] bond2: (slave bond_slave_1): Device is not bonding slave [ 575.159774][T17559] bond2: option active_slave: invalid value (bond_slave_1) [ 575.164473][T17559] bond2 (unregistering): Released all slaves [ 575.179120][T17556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.413989][ T3246] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 575.542870][T17647] input: syz0 as /devices/virtual/input/input76 [ 575.546524][T12119] hid_parser_main: 28 callbacks suppressed [ 575.546538][T12119] hid-generic 00A0:0086:0003.002A: unknown main item tag 0x0 [ 575.553516][ T3246] usb 9-1: device descriptor read/64, error -71 [ 575.559159][T12119] hid-generic 00A0:0086:0003.002A: unknown main item tag 0x0 [ 575.562594][T12119] hid-generic 00A0:0086:0003.002A: unknown main item tag 0x0 [ 575.564957][T12119] hid-generic 00A0:0086:0003.002A: unknown main item tag 0x0 [ 575.567315][T12119] hid-generic 00A0:0086:0003.002A: unknown main item tag 0x0 [ 575.569721][T12119] hid-generic 00A0:0086:0003.002A: unknown main item tag 0x0 [ 575.572321][T12119] hid-generic 00A0:0086:0003.002A: unknown main item tag 0x0 [ 575.574692][T12119] hid-generic 00A0:0086:0003.002A: unknown main item tag 0x0 [ 575.577065][T12119] hid-generic 00A0:0086:0003.002A: unknown main item tag 0x0 [ 575.579482][T12119] hid-generic 00A0:0086:0003.002A: unknown main item tag 0x0 [ 575.585883][T12119] hid-generic 00A0:0086:0003.002A: hidraw1: HID v0.05 Device [syz1] on syz0 [ 575.664355][T17664] netlink: 'syz.6.6257': attribute type 7 has an invalid length. [ 575.668586][ T3246] usb usb9-port1: attempt power cycle [ 575.671023][T17664] netlink: 'syz.6.6257': attribute type 7 has an invalid length. [ 575.671105][T24962] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.676773][T24962] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.682843][T24962] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.686149][T24962] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.042014][ T3246] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 576.063763][ T3246] usb 9-1: device descriptor read/8, error -71 [ 576.084672][T12119] usb 11-1: new high-speed USB device number 51 using dummy_hcd [ 576.245064][T12119] usb 11-1: Using ep0 maxpacket: 32 [ 576.248052][T12119] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 576.251186][T12119] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 576.254984][T12119] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 576.259479][T12119] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 576.263226][T12119] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 576.268797][T12119] usb 11-1: config 0 interface 0 has no altsetting 0 [ 576.274280][T12119] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 576.277992][T12119] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 576.281188][T12119] usb 11-1: Product: syz [ 576.282805][T12119] usb 11-1: Manufacturer: syz [ 576.284625][T12119] usb 11-1: SerialNumber: syz [ 576.288036][T12119] usb 11-1: config 0 descriptor?? [ 576.292430][T12119] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 576.297779][T12119] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 576.330747][ T3246] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 576.352837][ T3246] usb 9-1: device descriptor read/8, error -71 [ 576.471860][ T3246] usb usb9-port1: unable to enumerate USB device [ 576.506486][T17687] ldusb 11-1:0.0: Couldn't submit interrupt_in_urb -90 [ 576.513744][ T6013] usb 11-1: USB disconnect, device number 51 [ 576.517169][ T6013] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 577.081215][T17474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 577.183847][ T6013] hid-generic 00A0:0086:0003.002B: hidraw1: HID v0.05 Device [syz1] on syz0 [ 577.190641][T17722] input: syz0 as /devices/virtual/input/input77 [ 577.271644][T31726] Bluetooth: hci3: link tx timeout [ 577.276219][T31726] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 577.352867][T31726] Bluetooth: hci3: link tx timeout [ 577.355109][T31726] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 577.365596][T17753] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 577.381925][T31726] Bluetooth: hci3: link tx timeout [ 577.383638][T31726] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 577.587548][T17776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17776 comm=syz.7.6272 [ 577.725247][T31726] Bluetooth: hci3: link tx timeout [ 577.727131][T31726] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 578.023535][T17829] team_slave_1: mtu greater than device maximum [ 578.025775][T17829] team0: Device team_slave_1 failed to change mtu [ 578.026078][T17831] team_slave_1: mtu greater than device maximum [ 578.030313][T17831] team0: Device team_slave_1 failed to change mtu [ 578.169036][T17850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.330972][T31726] Bluetooth: hci3: link tx timeout [ 578.332668][T31726] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 578.480361][T12119] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 578.576813][ T6015] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 578.651537][T12119] usb 9-1: Using ep0 maxpacket: 32 [ 578.654586][T12119] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.658169][T12119] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.661224][T12119] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 578.664388][T12119] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.668306][T12119] usb 9-1: config 0 descriptor?? [ 578.737027][ T6015] usb 12-1: device descriptor read/64, error -71 [ 578.836243][T31726] Bluetooth: hci3: link tx timeout [ 578.838525][T31726] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 578.993798][ T6015] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 579.148172][ T6015] usb 12-1: device descriptor read/64, error -71 [ 579.193205][T31726] Bluetooth: hci3: link tx timeout [ 579.195194][T31726] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 579.261987][ T6015] usb usb12-port1: attempt power cycle [ 579.442987][T31726] Bluetooth: hci3: command 0x0406 tx timeout [ 579.625549][ T6015] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 579.647098][ T6015] usb 12-1: device descriptor read/8, error -71 [ 579.902789][ T6015] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 579.924784][ T6015] usb 12-1: device descriptor read/8, error -71 [ 579.988496][ T5962] SELinux: failure in sel_netif_sid_slow(), invalid network interface (125) [ 580.042589][ T6015] usb usb12-port1: unable to enumerate USB device [ 580.450304][T24957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.504457][T24957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.527570][T24957] bond0 (unregistering): Released all slaves [ 580.656917][T24957] bond1 (unregistering): Released all slaves [ 580.768294][T24957] bond2 (unregistering): Released all slaves [ 580.775274][T24957] bond3 (unregistering): Released all slaves [ 580.782030][T24957] bond4 (unregistering): Released all slaves [ 580.788557][T24957] bond5 (unregistering): Released all slaves [ 580.904030][T24957] : left promiscuous mode [ 580.909759][T17801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 580.940463][ T40] kauditd_printk_skb: 235 callbacks suppressed [ 580.940481][ T40] audit: type=1400 audit(809.640:68039): avc: denied { recv } for pid=5864 comm="syz-executor" saddr=127.0.0.1 src=46816 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 580.955911][ T40] audit: type=1400 audit(809.649:68040): avc: denied { recv } for pid=5862 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46816 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 580.967840][ T40] audit: type=1400 audit(809.659:68041): avc: denied { create } for pid=17894 comm="syz.6.6291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 580.976087][ T40] audit: type=1400 audit(809.668:68042): avc: denied { bind } for pid=17894 comm="syz.6.6291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 580.986160][ T40] audit: type=1400 audit(809.687:68043): avc: denied { create } for pid=17896 comm="syz.9.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 581.007734][ T40] audit: type=1400 audit(809.705:68044): avc: denied { read } for pid=17900 comm="syz.6.6293" name="media1" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 581.014377][ T40] audit: type=1400 audit(809.705:68045): avc: denied { open } for pid=17900 comm="syz.6.6293" path="/dev/media1" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 581.022379][ T40] audit: type=1400 audit(809.724:68046): avc: denied { prog_load } for pid=17900 comm="syz.6.6293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 581.029258][ T40] audit: type=1400 audit(809.724:68047): avc: denied { read write } for pid=17900 comm="syz.6.6293" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 581.036356][ T40] audit: type=1400 audit(809.724:68048): avc: denied { open } for pid=17900 comm="syz.6.6293" path="/dev/dri/renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 581.036566][T24957] tipc: Left network mode [ 581.112169][T17905] SELinux: syz.9.6294 (17905) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 581.512020][T12119] usbhid 9-1:0.0: can't add hid device: -71 [ 581.517818][T12119] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 581.523852][T12119] usb 9-1: USB disconnect, device number 66 [ 581.675650][T17935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.733401][ T5962] hid_parser_main: 28 callbacks suppressed [ 581.733415][ T5962] hid-generic 00A0:0086:0003.002C: unknown main item tag 0x0 [ 581.737644][ T5962] hid-generic 00A0:0086:0003.002C: unknown main item tag 0x0 [ 581.740129][ T5962] hid-generic 00A0:0086:0003.002C: unknown main item tag 0x0 [ 581.743340][ T5962] hid-generic 00A0:0086:0003.002C: unknown main item tag 0x0 [ 581.745703][ T5962] hid-generic 00A0:0086:0003.002C: unknown main item tag 0x0 [ 581.748052][ T5962] hid-generic 00A0:0086:0003.002C: unknown main item tag 0x0 [ 581.750418][ T5962] hid-generic 00A0:0086:0003.002C: unknown main item tag 0x0 [ 581.752782][ T5962] hid-generic 00A0:0086:0003.002C: unknown main item tag 0x0 [ 581.755557][ T5962] hid-generic 00A0:0086:0003.002C: unknown main item tag 0x0 [ 581.757882][ T5962] hid-generic 00A0:0086:0003.002C: unknown main item tag 0x0 [ 581.761383][ T5962] hid-generic 00A0:0086:0003.002C: hidraw1: HID v0.05 Device [syz1] on syz0 [ 581.794514][T17953] fido_id[17953]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 581.988031][T24957] hsr_slave_0: left promiscuous mode [ 581.999840][T24957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.002204][T24957] batadv0: mtu less than device minimum [ 582.004622][T24957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.009204][T24957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.013024][T24957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.016763][T24957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.020622][T24957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.024362][T24957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.028493][T24957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.032424][T24957] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.041998][T24957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.045639][T24957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.057598][T24957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.060495][T24957] batman_adv: batadv0: Interface deactivated: dummy0 [ 582.062686][T24957] batman_adv: batadv0: Removing interface: dummy0 [ 582.081661][T24957] veth1_macvtap: left promiscuous mode [ 582.083487][T24957] veth0_macvtap: left allmulticast mode [ 582.085552][T24957] veth0_macvtap: left promiscuous mode [ 582.151239][T24957] pimreg (unregistering): left allmulticast mode [ 582.208293][ T6015] hid-generic 00A0:0086:0003.002D: hidraw1: HID v0.05 Device [syz1] on syz0 [ 582.237178][ T5962] usb 11-1: new high-speed USB device number 52 using dummy_hcd [ 582.241285][T18002] fido_id[18002]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 582.394767][ T5962] usb 11-1: device descriptor read/64, error -71 [ 582.662239][ T5962] usb 11-1: new high-speed USB device number 53 using dummy_hcd [ 582.801259][ T5962] usb 11-1: device descriptor read/64, error -71 [ 582.929683][ T5962] usb usb11-port1: attempt power cycle [ 582.936685][T18030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=18030 comm=syz.7.6313 [ 583.270079][T12119] hid-generic 00A0:0086:0003.002E: hidraw1: HID v0.05 Device [syz1] on syz0 [ 583.299316][T24957] IPVS: stop unused estimator thread 0... [ 583.303803][ T5962] usb 11-1: new high-speed USB device number 54 using dummy_hcd [ 583.307698][T18056] fido_id[18056]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 583.325880][ T5962] usb 11-1: device descriptor read/8, error -71 [ 583.403395][ T2203] Bluetooth: hci4: connection err: -111 [ 583.442927][T19661] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 583.509853][T18083] FAULT_INJECTION: forcing a failure. [ 583.509853][T18083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.514051][T18083] CPU: 2 UID: 0 PID: 18083 Comm: syz.7.6322 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.514070][T18083] Tainted: [L]=SOFTLOCKUP [ 583.514074][T18083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 583.514080][T18083] Call Trace: [ 583.514086][T18083] [ 583.514091][T18083] dump_stack_lvl+0x100/0x190 [ 583.514111][T18083] should_fail_ex.cold+0x5/0xa [ 583.514126][T18083] _copy_from_user+0x2e/0xd0 [ 583.514144][T18083] move_addr_to_kernel+0x65/0x170 [ 583.514161][T18083] __sys_bind+0x11d/0x260 [ 583.514177][T18083] ? __pfx___sys_bind+0x10/0x10 [ 583.514192][T18083] ? __fget_files+0x21f/0x3d0 [ 583.514209][T18083] ? __pfx_ksys_write+0x10/0x10 [ 583.514223][T18083] __x64_sys_bind+0x72/0xb0 [ 583.514238][T18083] ? lockdep_hardirqs_on+0x78/0x100 [ 583.514256][T18083] do_syscall_64+0x106/0xf80 [ 583.514265][T18083] ? clear_bhb_loop+0x40/0x90 [ 583.514277][T18083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.514288][T18083] RIP: 0033:0x7f4d15b9bf79 [ 583.514298][T18083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.514309][T18083] RSP: 002b:00007f4d16a11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 583.514320][T18083] RAX: ffffffffffffffda RBX: 00007f4d15e15fa0 RCX: 00007f4d15b9bf79 [ 583.514327][T18083] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 583.514333][T18083] RBP: 00007f4d16a11090 R08: 0000000000000000 R09: 0000000000000000 [ 583.514340][T18083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.514346][T18083] R13: 00007f4d15e16038 R14: 00007f4d15e15fa0 R15: 00007ffd9cdf9f68 [ 583.514360][T18083] [ 583.646206][ T5962] usb 11-1: new high-speed USB device number 55 using dummy_hcd [ 583.668076][ T5962] usb 11-1: device descriptor read/8, error -71 [ 583.796173][ T5962] usb usb11-port1: unable to enumerate USB device [ 584.139527][T18121] kvm: kvm [18119]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 584.143160][T18121] kvm: kvm [18119]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 584.188570][T18124] usb usb9: usbfs: process 18124 (syz.7.6330) did not claim interface 0 before use [ 584.321943][T18128] FAULT_INJECTION: forcing a failure. [ 584.321943][T18128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.326902][T18128] CPU: 3 UID: 0 PID: 18128 Comm: syz.4.6331 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.326921][T18128] Tainted: [L]=SOFTLOCKUP [ 584.326925][T18128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 584.326931][T18128] Call Trace: [ 584.326936][T18128] [ 584.326940][T18128] dump_stack_lvl+0x100/0x190 [ 584.326960][T18128] should_fail_ex.cold+0x5/0xa [ 584.326976][T18128] _copy_to_user+0x32/0xd0 [ 584.326994][T18128] simple_read_from_buffer+0xcb/0x170 [ 584.327007][T18128] proc_fail_nth_read+0x1af/0x230 [ 584.327023][T18128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 584.327037][T18128] ? rw_verify_area+0xce/0x6d0 [ 584.327053][T18128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 584.327066][T18128] vfs_read+0x1e4/0xb30 [ 584.327078][T18128] ? __pfx_vfs_read+0x10/0x10 [ 584.327088][T18128] ? __fget_files+0x215/0x3d0 [ 584.327102][T18128] ? __fget_files+0x21f/0x3d0 [ 584.327117][T18128] ksys_read+0x12a/0x250 [ 584.327127][T18128] ? __pfx_ksys_read+0x10/0x10 [ 584.327141][T18128] do_syscall_64+0x106/0xf80 [ 584.327151][T18128] ? clear_bhb_loop+0x40/0x90 [ 584.327186][T18128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.327199][T18128] RIP: 0033:0x7f7cd9f5c84e [ 584.327208][T18128] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 584.327218][T18128] RSP: 002b:00007f7cdaef9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 584.327229][T18128] RAX: ffffffffffffffda RBX: 00007f7cdaefa6c0 RCX: 00007f7cd9f5c84e [ 584.327236][T18128] RDX: 000000000000000f RSI: 00007f7cdaefa0a0 RDI: 0000000000000003 [ 584.327242][T18128] RBP: 00007f7cdaefa090 R08: 0000000000000000 R09: 0000000000000000 [ 584.327248][T18128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.327254][T18128] R13: 00007f7cda216038 R14: 00007f7cda215fa0 R15: 00007fffad409738 [ 584.327268][T18128] [ 584.715573][T18152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6336'. [ 585.022653][T18159] netlink: 'syz.7.6339': attribute type 15 has an invalid length. [ 585.025102][T18159] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6339'. [ 585.025992][T18160] netlink: 'syz.7.6339': attribute type 15 has an invalid length. [ 585.030850][T18160] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6339'. [ 586.201649][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6347'. [ 586.216884][T18198] 8021q: adding VLAN 0 to HW filter on device bond8 [ 586.225295][T18198] bond8: (slave batadv1): Opening slave failed [ 586.318822][T18237] QAT: failed to copy from user cfg_data. [ 586.334108][ T40] kauditd_printk_skb: 161 callbacks suppressed [ 586.334120][ T40] audit: type=1400 audit(814.689:68210): avc: denied { create } for pid=18236 comm="syz.4.6348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 586.343446][ T40] audit: type=1400 audit(814.689:68211): avc: denied { read } for pid=18236 comm="syz.4.6348" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 586.455766][ T40] audit: type=1400 audit(814.801:68212): avc: denied { prog_run } for pid=18248 comm="syz.7.6350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 586.465293][ T3246] hid-generic 00A0:0086:0003.002F: hidraw1: HID v0.05 Device [syz1] on syz0 [ 586.501328][T18253] fido_id[18253]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 586.520204][ T40] audit: type=1400 audit(814.857:68213): avc: denied { create } for pid=18257 comm="syz.7.6351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 586.527281][ T40] audit: type=1400 audit(814.867:68214): avc: denied { allowed } for pid=18257 comm="syz.7.6351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 586.534329][ T40] audit: type=1400 audit(814.867:68215): avc: denied { create } for pid=18257 comm="syz.7.6351" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 586.609201][ T40] audit: type=1400 audit(814.951:68216): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46816 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 586.629770][ T40] audit: type=1400 audit(814.960:68217): avc: denied { read } for pid=18257 comm="syz.7.6351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 586.691854][ T40] audit: type=1400 audit(815.016:68218): avc: denied { getopt } for pid=18257 comm="syz.7.6351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 586.833450][ T40] audit: type=1400 audit(815.157:68219): avc: denied { create } for pid=18269 comm="syz.9.6353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 586.901834][T18270] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6353'. [ 586.907101][T18270] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6353'. [ 587.072268][T18282] netlink: 'syz.7.6356': attribute type 1 has an invalid length. [ 587.074790][T18282] netlink: 'syz.7.6356': attribute type 3 has an invalid length. [ 587.077303][T18282] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6356'. [ 587.246441][T12217] hid_parser_main: 66 callbacks suppressed [ 587.246455][T12217] hid-generic 00A0:0086:0003.0030: unknown main item tag 0x0 [ 587.251583][T12217] hid-generic 00A0:0086:0003.0030: unknown main item tag 0x0 [ 587.254135][T12217] hid-generic 00A0:0086:0003.0030: unknown main item tag 0x0 [ 587.256694][T12217] hid-generic 00A0:0086:0003.0030: unknown main item tag 0x0 [ 587.259152][T12217] hid-generic 00A0:0086:0003.0030: unknown main item tag 0x0 [ 587.263248][T12217] hid-generic 00A0:0086:0003.0030: unknown main item tag 0x0 [ 587.265648][T12217] hid-generic 00A0:0086:0003.0030: unknown main item tag 0x0 [ 587.268094][T12217] hid-generic 00A0:0086:0003.0030: unknown main item tag 0x0 [ 587.270488][T12217] hid-generic 00A0:0086:0003.0030: unknown main item tag 0x0 [ 587.273061][T12217] hid-generic 00A0:0086:0003.0030: unknown main item tag 0x0 [ 587.277844][T12217] hid-generic 00A0:0086:0003.0030: hidraw1: HID v0.05 Device [syz1] on syz0 [ 587.325450][T18301] fido_id[18301]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 588.100040][T18337] net_ratelimit: 34 callbacks suppressed [ 588.100053][T18337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.281711][T18344] syzkaller0: entered promiscuous mode [ 588.283510][T18344] syzkaller0: entered allmulticast mode [ 588.511034][T18174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 588.563003][T18369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.667423][T18382] syzkaller0: entered promiscuous mode [ 588.669213][T18382] syzkaller0: entered allmulticast mode [ 588.813435][T18399] binder: 18388:18399 ioctl c0306201 200000000640 returned -22 [ 588.816809][T18389] binder: 18388:18389 ioctl c0306201 200000000640 returned -22 [ 588.860155][T18405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6385'. [ 588.877570][T18405] bond11: entered promiscuous mode [ 588.879505][T18405] 8021q: adding VLAN 0 to HW filter on device bond11 [ 588.884199][T18405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6385'. [ 588.888432][T18405] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6385'. [ 588.906243][T18405] bond11: (slave sit1): refused to change device type [ 588.946880][T18451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.996970][T18455] random: crng reseeded on system resumption [ 589.139588][T12217] hid-generic 00A0:0086:0003.0031: hidraw1: HID v0.05 Device [syz1] on syz0 [ 589.189314][T18473] fido_id[18473]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 589.191098][T18477] syzkaller0: entered promiscuous mode [ 589.196598][T18477] syzkaller0: entered allmulticast mode [ 589.382646][T18499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.512840][T19661] hid-generic 00A0:0086:0003.0032: hidraw1: HID v0.05 Device [syz1] on syz0 [ 589.584112][T18525] fido_id[18525]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 589.719816][T18543] syzkaller0: entered promiscuous mode [ 589.724552][T18543] syzkaller0: entered allmulticast mode [ 589.749397][T18548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.853397][ T7816] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 589.935125][T18571] netlink: 'syz.4.6408': attribute type 29 has an invalid length. [ 589.937817][T18571] netlink: 'syz.4.6408': attribute type 3 has an invalid length. [ 589.945069][T18571] xt_l2tp: invalid flags combination: 8 [ 589.978000][T18572] xt_l2tp: invalid flags combination: 8 [ 590.028162][ T7816] usb 12-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 590.033821][ T7816] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 590.036742][ T7816] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 590.039640][ T7816] usb 12-1: SerialNumber: syz [ 590.111146][ T5962] hid-generic 00A0:0086:0003.0033: hidraw1: HID v0.05 Device [syz1] on syz0 [ 590.120832][T18589] __nla_validate_parse: 3 callbacks suppressed [ 590.120843][T18589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6412'. [ 590.139871][T18589] 8021q: adding VLAN 0 to HW filter on device bond5 [ 590.144779][T18594] fido_id[18594]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 590.149960][T18589] bond5: (slave batadv1): Opening slave failed [ 590.312301][T18647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.354404][T18658] syzkaller0: entered promiscuous mode [ 590.356271][T18658] syzkaller0: entered allmulticast mode [ 590.402918][T18658] tipc: Enabled bearer , priority 0 [ 590.416580][T18658] tipc: Resetting bearer [ 590.453344][T18654] tipc: Resetting bearer [ 590.467520][T18654] tipc: Disabling bearer [ 590.480734][T23185] bridge_slave_1: left allmulticast mode [ 590.482632][T23185] bridge_slave_1: left promiscuous mode [ 590.484844][T23185] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.488583][T23185] bridge_slave_0: left allmulticast mode [ 590.490463][T23185] bridge_slave_0: left promiscuous mode [ 590.493053][T23185] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.628324][T18654] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 590.696934][T18684] Mount JFS Failure: -5 [ 590.698345][T18684] jfs_mount failed w/return code = -5 [ 590.702823][ T7816] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -71 [ 590.707804][ T7816] usb 12-1: USB disconnect, device number 20 [ 590.737051][T23185] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 590.760034][T18705] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6426'. [ 590.763341][T18705] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6426'. [ 590.826799][T18711] binder: 18682:18711 ioctl 43403d05 200000000500 returned -22 [ 590.829419][T18711] binder: 18682:18711 ioctl 4008af30 2000000003c0 returned -22 [ 591.127652][T23185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.177090][T23185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.198166][T23185] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 591.275512][T23185] bond0 (unregistering): Released all slaves [ 591.425534][T23185] bond1 (unregistering): Released all slaves [ 591.537311][T23185] bond2 (unregistering): (slave bond3): Releasing backup interface [ 591.583028][T23185] bond2 (unregistering): Released all slaves [ 591.702606][T23185] bond3 (unregistering): Released all slaves [ 591.711584][T23185] bond4 (unregistering): Released all slaves [ 591.720411][T23185] bond5 (unregistering): Released all slaves [ 591.727211][T23185] bond6 (unregistering): Released all slaves [ 591.744239][T18713] tun0: tun_chr_ioctl cmd 1074025675 [ 591.746241][T18713] tun0: persist enabled [ 591.753659][T18714] tun0: tun_chr_ioctl cmd 1074025675 [ 591.755561][T18714] tun0: persist disabled [ 591.771530][ T40] kauditd_printk_skb: 291 callbacks suppressed [ 591.771541][ T40] audit: type=1400 audit(819.775:68511): avc: denied { prog_load } for pid=18718 comm="syz.7.6427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 591.779902][ T40] audit: type=1400 audit(819.775:68512): avc: denied { bpf } for pid=18718 comm="syz.7.6427" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 591.786471][ T40] audit: type=1400 audit(819.775:68513): avc: denied { write } for pid=18725 comm="syz.9.6429" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 591.793394][ T40] audit: type=1400 audit(819.775:68514): avc: denied { prog_load } for pid=18723 comm="syz.6.6428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 591.800719][ T40] audit: type=1400 audit(819.775:68515): avc: denied { perfmon } for pid=18723 comm="syz.6.6428" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 591.808815][ T40] audit: type=1400 audit(819.804:68516): avc: denied { recv } for pid=18725 comm="syz.9.6429" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46816 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 591.816469][ T40] audit: type=1400 audit(819.804:68517): avc: denied { prog_run } for pid=18723 comm="syz.6.6428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 591.822779][ T40] audit: type=1400 audit(819.804:68518): avc: denied { read write } for pid=18723 comm="syz.6.6428" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 591.830131][ T40] audit: type=1400 audit(819.813:68519): avc: denied { open } for pid=18723 comm="syz.6.6428" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 591.837387][ T40] audit: type=1400 audit(819.813:68520): avc: denied { create } for pid=18723 comm="syz.6.6428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 591.852526][T18726] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 591.883627][T23185] tipc: Left network mode [ 591.971844][T18735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6431'. [ 592.045682][T18749] netlink: 'syz.7.6433': attribute type 5 has an invalid length. [ 592.130169][T18770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 592.353986][T18799] fuse: Unknown parameter ' ' [ 592.393631][T18805] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6448'. [ 592.455921][T18819] netlink: 'syz.9.6448': attribute type 9 has an invalid length. [ 592.458506][T18819] netlink: 'syz.9.6448': attribute type 11 has an invalid length. [ 592.461149][T18819] netlink: 'syz.9.6448': attribute type 12 has an invalid length. [ 592.463688][T18819] netlink: 210020 bytes leftover after parsing attributes in process `syz.9.6448'. [ 592.466699][T18819] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6448'. [ 592.710088][T23185] hsr_slave_0: left promiscuous mode [ 592.712579][T23185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.726239][T23185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.754990][T23185] pimreg3 (unregistering): left allmulticast mode [ 593.123624][T23185] team0 (unregistering): Port device team_slave_1 removed [ 593.162871][T23185] team0 (unregistering): Port device team_slave_0 removed [ 593.670880][T18872] kvm: kvm [18871]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x5b00 [ 593.680883][T18872] kvm: kvm [18871]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0xe400 [ 593.710317][T18872] kvm: kvm [18871]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x5000 [ 593.722470][T18872] kvm: kvm [18871]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0xba00 [ 593.829091][T18898] syzkaller0: entered promiscuous mode [ 593.830903][T18898] syzkaller0: entered allmulticast mode [ 593.847812][T18898] tipc: Enabled bearer , priority 0 [ 593.890020][T31726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 593.896184][T31726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 593.900944][T31726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 593.911998][T18898] tipc: Resetting bearer [ 593.914047][T31726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 593.918693][T31726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 593.924513][T18898] tipc: Resetting bearer [ 593.948888][T18898] tipc: Disabling bearer [ 593.971407][T18872] kvm: kvm [18871]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0xdb00 [ 593.984684][T18904] lo speed is unknown, defaulting to 1000 [ 593.991068][T18872] kvm: kvm [18871]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x900 [ 594.089677][T18927] netlink: 'syz.9.6471': attribute type 10 has an invalid length. [ 594.092347][T18927] netlink: 228 bytes leftover after parsing attributes in process `syz.9.6471'. [ 594.098480][T31726] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 594.100868][T18931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.230277][T23185] IPVS: stop unused estimator thread 0... [ 594.342973][T18904] chnl_net:caif_netlink_parms(): no params data found [ 594.441568][T18904] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.444091][T18904] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.446654][T18904] bridge_slave_0: entered allmulticast mode [ 594.450315][T18904] bridge_slave_0: entered promiscuous mode [ 594.453737][T18904] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.456417][T18904] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.459735][T18904] bridge_slave_1: entered allmulticast mode [ 594.462575][T18904] bridge_slave_1: entered promiscuous mode [ 594.484202][T18904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.491684][T18904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.522089][T18904] team0: Port device team_slave_0 added [ 594.525805][T18904] team0: Port device team_slave_1 added [ 594.533716][ T6013] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 594.552062][T18904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.554360][T18904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.565021][T18904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.569714][T18904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.571973][T18904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.580765][T18904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.589379][ T39] hid_parser_main: 66 callbacks suppressed [ 594.589392][ T39] hid-generic 00A0:0086:0003.0034: unknown main item tag 0x0 [ 594.594891][ T39] hid-generic 00A0:0086:0003.0034: unknown main item tag 0x0 [ 594.597276][ T39] hid-generic 00A0:0086:0003.0034: unknown main item tag 0x0 [ 594.601398][ T39] hid-generic 00A0:0086:0003.0034: unknown main item tag 0x0 [ 594.604112][ T39] hid-generic 00A0:0086:0003.0034: unknown main item tag 0x0 [ 594.606457][ T39] hid-generic 00A0:0086:0003.0034: unknown main item tag 0x0 [ 594.608865][T18904] hsr_slave_0: entered promiscuous mode [ 594.611724][T18904] hsr_slave_1: entered promiscuous mode [ 594.612883][ T39] hid-generic 00A0:0086:0003.0034: unknown main item tag 0x0 [ 594.614062][T18904] debugfs: 'hsr0' already exists in 'hsr' [ 594.617073][ T39] hid-generic 00A0:0086:0003.0034: unknown main item tag 0x0 [ 594.618327][T18904] Cannot create hsr debugfs directory [ 594.621070][ T39] hid-generic 00A0:0086:0003.0034: unknown main item tag 0x0 [ 594.625414][ T39] hid-generic 00A0:0086:0003.0034: unknown main item tag 0x0 [ 594.630337][ T39] hid-generic 00A0:0086:0003.0034: hidraw1: HID v0.05 Device [syz1] on syz0 [ 594.681174][T19168] fido_id[19168]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 594.691489][T19179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.706921][ T6013] usb 12-1: Using ep0 maxpacket: 32 [ 594.710313][ T6013] usb 12-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 594.713161][ T6013] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.731701][ T6013] usb 12-1: config 0 descriptor?? [ 594.735920][ T6013] as10x_usb: device has been detected [ 594.744085][ T6013] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 594.759826][ T6013] usb 12-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 594.791171][ T6013] as10x_usb: error during firmware upload part1 [ 594.793186][ T6013] Registered device nBox DVB-T Dongle [ 594.793813][T18904] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.799948][T18904] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 594.835867][T19239] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6481'. [ 594.862525][T18904] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.865749][T18904] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 594.911593][T18904] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.914755][T18904] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 594.973869][ T6013] usb 12-1: USB disconnect, device number 21 [ 595.003154][ T6013] Unregistered device nBox DVB-T Dongle [ 595.010216][ T6013] as10x_usb: device has been disconnected [ 595.016460][T18904] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.020566][T18904] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 595.153144][T18904] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 595.172524][T18904] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 595.176686][T18904] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 595.180861][T18904] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 595.221745][T18904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.237166][T18904] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.242604][T23194] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.244930][T23194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.250826][T23185] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.253137][T23185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.372254][T18904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.520509][T18904] veth0_vlan: entered promiscuous mode [ 595.530588][T18904] veth1_vlan: entered promiscuous mode [ 595.555811][T18904] veth0_macvtap: entered promiscuous mode [ 595.562280][T18904] veth1_macvtap: entered promiscuous mode [ 595.574187][T18904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.580956][T18904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.588839][T23185] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.592033][T23185] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.596375][T23185] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.599367][T23185] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.613415][T19197] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 595.618567][T19197] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 595.684351][T19197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 595.686374][T19197] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 595.693315][T19197] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 595.695854][T19197] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 595.734121][T19197] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 595.736034][T19197] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 595.778222][T19197] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 595.885071][T23185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.887545][T23185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.912168][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.921299][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.965169][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 596.033689][ T9] hid-generic 00A0:0086:0003.0035: hidraw1: HID v0.05 Device [syz1] on syz0 [ 596.106125][ T1026] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 596.134515][T19379] fido_id[19379]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 596.266251][ T1026] usb 14-1: Using ep0 maxpacket: 8 [ 596.269951][ T1026] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 596.274401][ T1026] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 596.278156][ T1026] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.289114][ T1026] usb 14-1: config 0 descriptor?? [ 596.490872][ T9] usb 11-1: new high-speed USB device number 56 using dummy_hcd [ 596.537596][ T1026] iowarrior 14-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 596.551523][ T1026] usb 14-1: USB disconnect, device number 4 [ 596.651507][ T9] usb 11-1: device descriptor read/64, error -71 [ 596.828599][T19414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.840016][T19414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.908048][ T9] usb 11-1: new high-speed USB device number 57 using dummy_hcd [ 596.972469][ T2203] Bluetooth: hci4: command 0x0406 tx timeout [ 597.047063][ T9] usb 11-1: device descriptor read/64, error -71 [ 597.164837][ T9] usb usb11-port1: attempt power cycle [ 597.403412][ T40] kauditd_printk_skb: 320 callbacks suppressed [ 597.403423][ T40] audit: type=1400 audit(825.040:68841): avc: denied { egress } for pid=24962 comm="kworker/u32:34" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 597.414548][ T40] audit: type=1400 audit(825.040:68842): avc: denied { sendto } for pid=24962 comm="kworker/u32:34" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 597.449582][T19443] geneve2: entered promiscuous mode [ 597.454005][ T40] audit: type=1400 audit(825.077:68843): avc: denied { read } for pid=19450 comm="syz.4.6496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 597.480227][ T40] audit: type=1400 audit(825.114:68844): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46816 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 597.494170][T19453] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6496'. [ 597.495761][ T40] audit: type=1400 audit(825.114:68845): avc: denied { search } for pid=19455 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.506996][ T40] audit: type=1400 audit(825.114:68846): avc: denied { search } for pid=19455 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.514867][ T40] audit: type=1400 audit(825.114:68847): avc: denied { search } for pid=19455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.522569][ T40] audit: type=1400 audit(825.114:68848): avc: denied { search } for pid=19455 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.530057][ T40] audit: type=1400 audit(825.124:68849): avc: denied { read open } for pid=19460 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.537507][ T40] audit: type=1400 audit(825.124:68850): avc: denied { getattr } for pid=19460 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 597.549740][ T9] usb 11-1: new high-speed USB device number 58 using dummy_hcd [ 597.583200][ T9] usb 11-1: device descriptor read/8, error -71 [ 597.802180][T19548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 597.829981][ T2203] Bluetooth: hci1: command 0x0406 tx timeout [ 597.849417][ T9] usb 11-1: new high-speed USB device number 59 using dummy_hcd [ 597.900246][ T9] usb 11-1: device descriptor read/8, error -71 [ 597.913867][ T2203] Bluetooth: hci2: command 0x041b tx timeout [ 597.918831][ T2203] Bluetooth: hci3: command 0x0406 tx timeout [ 598.021174][ T9] usb usb11-port1: unable to enumerate USB device [ 598.148644][T19661] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 598.319795][T19661] usb 9-1: Using ep0 maxpacket: 16 [ 598.322417][T19661] usb 9-1: no configurations [ 598.324395][T19661] usb 9-1: can't read configurations, error -22 [ 598.469522][T19661] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 598.629914][T19661] usb 9-1: Using ep0 maxpacket: 16 [ 598.632292][T19661] usb 9-1: no configurations [ 598.633842][T19661] usb 9-1: can't read configurations, error -22 [ 598.636223][T19661] usb usb9-port1: attempt power cycle [ 599.004245][T19661] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 599.028087][ T1026] hid-generic 00A0:0086:0003.0036: hidraw1: HID v0.05 Device [syz1] on syz0 [ 599.038349][T19661] usb 9-1: Using ep0 maxpacket: 16 [ 599.044257][T19661] usb 9-1: no configurations [ 599.046181][T19661] usb 9-1: can't read configurations, error -22 [ 599.088595][T19668] fido_id[19668]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 599.197320][T19661] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 599.199326][ T2203] Bluetooth: hci4: command 0x0406 tx timeout [ 599.218847][T19661] usb 9-1: Using ep0 maxpacket: 16 [ 599.229090][T19661] usb 9-1: no configurations [ 599.230628][T19661] usb 9-1: can't read configurations, error -22 [ 599.232831][T19661] usb usb9-port1: unable to enumerate USB device [ 599.263673][T19696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.322678][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6512'. [ 599.463954][T19710] QAT: Device 6 not found [ 599.474278][T19710] QAT: Device 255 not found [ 599.490958][T16324] hid-generic 00A0:0086:0003.0037: hidraw1: HID v0.05 Device [syz1] on syz0 [ 599.541468][T19718] fido_id[19718]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 599.575501][T19734] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6519'. [ 599.581432][T19734] netlink: 'syz.9.6519': attribute type 10 has an invalid length. [ 599.584384][T19737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.632912][T19742] binder: 19741:19742 ioctl c0306201 2000000001c0 returned -14 [ 599.736251][T19755] syzkaller0: entered promiscuous mode [ 599.738221][T19755] syzkaller0: entered allmulticast mode [ 599.771858][T19661] hid-generic 00A0:0086:0003.0038: hidraw1: HID v0.05 Device [syz1] on syz0 [ 599.809980][T19774] fido_id[19774]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 599.820839][T19777] bond1: Removing last ns target with arp_interval on [ 599.912132][T19827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.959663][T19832] bridge0: entered promiscuous mode [ 599.961298][T19832] bridge0: entered allmulticast mode [ 599.964257][T19832] team0: Port device bridge0 added [ 599.970594][T19832] bridge0: port 1(team0) entered blocking state [ 599.972696][T19832] bridge0: port 1(team0) entered disabled state [ 599.974929][T19832] team0: entered allmulticast mode [ 599.976559][T19832] team_slave_0: entered allmulticast mode [ 599.978462][T19832] team_slave_1: entered allmulticast mode [ 599.981902][T19832] team0: left allmulticast mode [ 599.983510][T19832] team_slave_0: left allmulticast mode [ 599.989099][T19832] team_slave_1: left allmulticast mode [ 600.044120][T12224] hid_parser_main: 85 callbacks suppressed [ 600.044134][T12224] hid-generic 00A0:0086:0003.0039: unknown main item tag 0x0 [ 600.048402][T12224] hid-generic 00A0:0086:0003.0039: unknown main item tag 0x0 [ 600.051429][T12224] hid-generic 00A0:0086:0003.0039: unknown main item tag 0x0 [ 600.052341][ T2203] Bluetooth: hci1: command 0x0406 tx timeout [ 600.057221][T12224] hid-generic 00A0:0086:0003.0039: unknown main item tag 0x0 [ 600.059890][T12224] hid-generic 00A0:0086:0003.0039: unknown main item tag 0x0 [ 600.062601][T12224] hid-generic 00A0:0086:0003.0039: unknown main item tag 0x0 [ 600.066870][T12224] hid-generic 00A0:0086:0003.0039: unknown main item tag 0x0 [ 600.069586][T12224] hid-generic 00A0:0086:0003.0039: unknown main item tag 0x0 [ 600.071876][T12224] hid-generic 00A0:0086:0003.0039: unknown main item tag 0x0 [ 600.074670][T12224] hid-generic 00A0:0086:0003.0039: unknown main item tag 0x0 [ 600.084507][T12224] hid-generic 00A0:0086:0003.0039: hidraw1: HID v0.05 Device [syz1] on syz0 [ 600.136022][T19842] fido_id[19842]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 600.138158][ T2203] Bluetooth: hci3: command 0x0406 tx timeout [ 600.139579][T31726] Bluetooth: hci2: command 0x041b tx timeout [ 600.224779][T19870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.283408][T19882] 9pnet_fd: p9_fd_create_unix (19882): problem connecting socket: ./file0: -111 [ 600.283562][T19883] 9pnet_fd: p9_fd_create_unix (19883): problem connecting socket: ./file0: -111 [ 600.421741][T19883] syz.6.6543 (19883): drop_caches: 2 [ 600.424472][T19882] syz.6.6543 (19882): drop_caches: 2 [ 600.516636][ T39] hid-generic 00A0:0086:0003.003A: hidraw1: HID v0.05 Device [syz1] on syz0 [ 600.533617][ T5995] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 600.534223][T19899] binder_alloc: 19897: binder_alloc_buf, no vma [ 600.574529][T19904] fido_id[19904]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 600.698748][ T5995] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.703098][ T5995] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.708085][ T5995] usb 14-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 600.711619][ T5995] usb 14-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 600.714770][ T5995] usb 14-1: Manufacturer: syz [ 600.719213][ T5995] usb 14-1: config 0 descriptor?? [ 600.732049][T19933] ================================================================== [ 600.735210][T19933] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 [ 600.738161][T19933] Write of size 4 at addr ffff88802d09cf08 by task syz.6.6553/19933 [ 600.742707][T19933] [ 600.743910][T19933] CPU: 2 UID: 0 PID: 19933 Comm: syz.6.6553 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 600.743928][T19933] Tainted: [L]=SOFTLOCKUP [ 600.743933][T19933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 600.743940][T19933] Call Trace: [ 600.743945][T19933] [ 600.743950][T19933] dump_stack_lvl+0x100/0x190 [ 600.743969][T19933] print_report+0x156/0x4c9 [ 600.743985][T19933] ? __virt_addr_valid+0x81/0x620 [ 600.744000][T19933] ? __phys_addr+0xe8/0x180 [ 600.744016][T19933] ? try_module_get+0x4c/0xd0 [ 600.744028][T19933] kasan_report+0xdf/0x1a0 [ 600.744042][T19933] ? try_module_get+0x4c/0xd0 [ 600.744054][T19933] kasan_check_range+0x10f/0x1e0 [ 600.744068][T19933] try_module_get+0x4c/0xd0 [ 600.744079][T19933] dvb_device_open+0x124/0x3b0 [ 600.744111][T19933] ? __pfx_dvb_device_open+0x10/0x10 [ 600.744128][T19933] chrdev_open+0x234/0x6a0 [ 600.744142][T19933] ? __pfx_chrdev_open+0x10/0x10 [ 600.744155][T19933] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 600.744173][T19933] do_dentry_open+0x6d8/0x1660 [ 600.744185][T19933] ? __pfx_chrdev_open+0x10/0x10 [ 600.744198][T19933] vfs_open+0x82/0x3f0 [ 600.744213][T19933] path_openat+0x208c/0x31a0 [ 600.744228][T19933] ? __pfx_path_openat+0x10/0x10 [ 600.744242][T19933] do_file_open+0x20e/0x430 [ 600.744255][T19933] ? __pfx_do_file_open+0x10/0x10 [ 600.744276][T19933] ? alloc_fd+0x476/0x790 [ 600.744290][T19933] ? do_getname+0x191/0x390 [ 600.744305][T19933] do_sys_openat2+0x10d/0x1e0 [ 600.744318][T19933] ? __pfx_do_sys_openat2+0x10/0x10 [ 600.744335][T19933] __x64_sys_openat+0x12d/0x210 [ 600.744350][T19933] ? __pfx___x64_sys_openat+0x10/0x10 [ 600.744369][T19933] do_syscall_64+0x106/0xf80 [ 600.744388][T19933] ? clear_bhb_loop+0x40/0x90 [ 600.744401][T19933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.744413][T19933] RIP: 0033:0x7f2fdc55c84e [ 600.744424][T19933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 600.744436][T19933] RSP: 002b:00007f2fdd3bfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 600.744448][T19933] RAX: ffffffffffffffda RBX: 00007f2fdd3c06c0 RCX: 00007f2fdc55c84e [ 600.744456][T19933] RDX: 0000000000000002 RSI: 00007f2fdd3bfc00 RDI: ffffffffffffff9c [ 600.744464][T19933] RBP: 00007f2fdd3bfc00 R08: 0000000000000000 R09: 0000000000000000 [ 600.744472][T19933] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 600.744479][T19933] R13: 00007f2fdc816038 R14: 00007f2fdc815fa0 R15: 00007fff22356998 [ 600.744491][T19933] [ 600.744495][T19933] [ 600.826082][T19933] Allocated by task 6226: [ 600.827493][T19933] kasan_save_stack+0x30/0x50 [ 600.829041][T19933] kasan_save_track+0x14/0x30 [ 600.830626][T19933] __kasan_kmalloc+0xaa/0xb0 [ 600.832223][T19933] __kmalloc_noprof+0x347/0x9c0 [ 600.833763][T19933] __register_sysctl_table+0xbe4/0x1650 [ 600.835549][T19933] __devinet_sysctl_register+0x1b9/0x360 [ 600.837344][T19933] devinet_sysctl_register+0x17b/0x210 [ 600.839231][T19933] inetdev_init+0x2b8/0x570 [ 600.840712][T19933] inetdev_event+0x7fa/0x17f0 [ 600.842169][T19933] notifier_call_chain+0x99/0x3b0 [ 600.843799][T19933] call_netdevice_notifiers_info+0xbe/0x110 [ 600.845687][T19933] register_netdevice+0x16b9/0x21d0 [ 600.847494][T19933] macvlan_common_newlink+0xf70/0x18a0 [ 600.849249][T19933] rtnl_newlink+0x1494/0x2380 [ 600.850746][T19933] rtnetlink_rcv_msg+0x95e/0xe90 [ 600.852337][T19933] netlink_rcv_skb+0x159/0x420 [ 600.853859][T19933] netlink_unicast+0x5aa/0x870 [ 600.855382][T19933] netlink_sendmsg+0x8b0/0xda0 [ 600.856912][T19933] __sys_sendto+0x4aa/0x520 [ 600.858350][T19933] __x64_sys_sendto+0xe0/0x1c0 [ 600.859866][T19933] do_syscall_64+0x106/0xf80 [ 600.861328][T19933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.863212][T19933] [ 600.863984][T19933] The buggy address belongs to the object at ffff88802d09ce00 [ 600.863984][T19933] which belongs to the cache kmalloc-256 of size 256 [ 600.868211][T19933] The buggy address is located 71 bytes to the right of [ 600.868211][T19933] allocated 193-byte region [ffff88802d09ce00, ffff88802d09cec1) [ 600.872482][T19933] [ 600.873220][T19933] The buggy address belongs to the physical page: [ 600.875159][T19933] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d09c [ 600.877761][T19933] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 600.880322][T19933] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 600.882700][T19933] page_type: f5(slab) [ 600.884051][T19933] raw: 00fff00000000040 ffff88801b842b40 0000000000000000 dead000000000001 [ 600.886626][T19933] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 600.889235][T19933] head: 00fff00000000040 ffff88801b842b40 0000000000000000 dead000000000001 [ 600.891833][T19933] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 600.894385][T19933] head: 00fff00000000001 ffffea0000b42701 00000000ffffffff 00000000ffffffff [ 600.896953][T19933] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 600.899576][T19933] page dumped because: kasan: bad access detected [ 600.901506][T19933] page_owner tracks the page as allocated [ 600.903345][T19933] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 20002727291, free_ts 0 [ 600.909233][T19933] post_alloc_hook+0x1e1/0x250 [ 600.910737][T19933] get_page_from_freelist+0x111d/0x3140 [ 600.912426][T19933] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 600.914194][T19933] alloc_pages_mpol+0x1fb/0x550 [ 600.915682][T19933] new_slab+0x2c4/0x440 [ 600.916997][T19933] ___slab_alloc+0xdb3/0x1cb0 [ 600.918475][T19933] __slab_alloc.isra.0+0x63/0x110 [ 600.920338][T19933] __kmalloc_cache_noprof+0x531/0x810 [ 600.922125][T19933] bus_add_driver+0x92/0x5b0 [ 600.923542][T19933] driver_register+0x1e2/0x360 [ 600.925030][T19933] do_one_initcall+0x11d/0x690 [ 600.926530][T19933] kernel_init_freeable+0x6e5/0x790 [ 600.928161][T19933] kernel_init+0x1f/0x1e0 [ 600.929546][T19933] ret_from_fork+0x754/0xd80 [ 600.931063][T19933] ret_from_fork_asm+0x1a/0x30 [ 600.932584][T19933] page_owner free stack trace missing [ 600.934295][T19933] [ 600.935093][T19933] Memory state around the buggy address: [ 600.936866][T19933] ffff88802d09ce00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 600.939435][T19933] ffff88802d09ce80: 00 00 00 00 00 00 00 00 01 fc fc fc fc fc fc fc [ 600.941945][T19933] >ffff88802d09cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 600.944447][T19933] ^ [ 600.945793][T19933] ffff88802d09cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 600.948311][T19933] ffff88802d09d000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 600.950765][T19933] ================================================================== [ 600.966575][T19933] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 600.968921][T19933] CPU: 2 UID: 0 PID: 19933 Comm: syz.6.6553 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.972474][T19933] Tainted: [L]=SOFTLOCKUP [ 600.973761][T19933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 600.976884][T19933] Call Trace: [ 600.977969][T19933] [ 600.978933][T19933] dump_stack_lvl+0x100/0x190 [ 600.980474][T19933] vpanic+0x20d/0x630 [ 600.981789][T19933] panic+0xd1/0xd1 [ 600.982976][T19933] ? __pfx_panic+0x10/0x10 [ 600.984427][T19933] ? try_module_get+0x4c/0xd0 [ 600.985929][T19933] ? preempt_schedule_common+0x42/0xc0 [ 600.987699][T19933] check_panic_on_warn.cold+0x19/0x34 [ 600.989414][T19933] end_report.part.0+0x3a/0x90 [ 600.990894][T19933] kasan_report.cold+0xe/0x18 [ 600.992410][T19933] ? try_module_get+0x4c/0xd0 [ 600.993918][T19933] kasan_check_range+0x10f/0x1e0 [ 600.995542][T19933] try_module_get+0x4c/0xd0 [ 600.996994][T19933] dvb_device_open+0x124/0x3b0 [ 600.998466][T19933] ? __pfx_dvb_device_open+0x10/0x10 [ 601.000149][T19933] chrdev_open+0x234/0x6a0 [ 601.001553][T19933] ? __pfx_chrdev_open+0x10/0x10 [ 601.003158][T19933] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 601.005130][T19933] do_dentry_open+0x6d8/0x1660 [ 601.006725][T19933] ? __pfx_chrdev_open+0x10/0x10 [ 601.008290][T19933] vfs_open+0x82/0x3f0 [ 601.009615][T19933] path_openat+0x208c/0x31a0 [ 601.011123][T19933] ? __pfx_path_openat+0x10/0x10 [ 601.012702][T19933] do_file_open+0x20e/0x430 [ 601.014161][T19933] ? __pfx_do_file_open+0x10/0x10 [ 601.015873][T19933] ? alloc_fd+0x476/0x790 [ 601.017271][T19933] ? do_getname+0x191/0x390 [ 601.018734][T19933] do_sys_openat2+0x10d/0x1e0 [ 601.020291][T19933] ? __pfx_do_sys_openat2+0x10/0x10 [ 601.021919][T19933] __x64_sys_openat+0x12d/0x210 [ 601.023470][T19933] ? __pfx___x64_sys_openat+0x10/0x10 [ 601.025162][T19933] do_syscall_64+0x106/0xf80 [ 601.026624][T19933] ? clear_bhb_loop+0x40/0x90 [ 601.028126][T19933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.030023][T19933] RIP: 0033:0x7f2fdc55c84e [ 601.031481][T19933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 601.037435][T19933] RSP: 002b:00007f2fdd3bfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 601.040082][T19933] RAX: ffffffffffffffda RBX: 00007f2fdd3c06c0 RCX: 00007f2fdc55c84e [ 601.042440][T19933] RDX: 0000000000000002 RSI: 00007f2fdd3bfc00 RDI: ffffffffffffff9c [ 601.044861][T19933] RBP: 00007f2fdd3bfc00 R08: 0000000000000000 R09: 0000000000000000 [ 601.047248][T19933] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 601.049735][T19933] R13: 00007f2fdc816038 R14: 00007f2fdc815fa0 R15: 00007fff22356998 [ 601.052185][T19933] [ 601.053695][T19933] Kernel Offset: disabled [ 601.055056][T19933] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:19:31 Registers: info registers vcpu 0 CPU#0 RAX=00000000006d8153 RBX=ffffffff8e4975c0 RCX=ffffffff8b7cbc75 RDX=0000000000000000 RSI=ffffffff8de5c1cf RDI=ffffffff8c1a92a0 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed100d486755 R10=ffff88806a433aab R11=0000000000000000 R12=fffffbfff1c92eb8 R13=0000000000000000 R14=ffffffff90d822d0 R15=0000000000000000 RIP=ffffffff8b7ca5df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d63a8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000180 CR3=0000000061ad0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023646e65746e6f 72662f2372657470 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff22356e86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff22356e86 00007fff22356e8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fdc632e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fdc632e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fdc632fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fdc632e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8822166fb3530897 fc04a755d8907289 415571b04d04dfca 87441101fffa9465 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f1f653f5c03dbe7 ee2d7b29900f05d5 08ba0d796fa804a3 bf40ce950c87bd65 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000596f78ee041e 43514e8c85d27c8a 378d878ceb6389be 3f1f653f5c03dbe7 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ee2d7b29900f05d5 08ba0d796fa804a3 bf40ce950c87bd65 fe2b7f8cdedcc2e6 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c0881fa563c68e7d a1346e4b350f9dc1 e272b557edf0b52c 8822166fb3530897 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc04a755d8907289 415571b04d04dfca 87441101fffa9465 8307617e3085beac ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc900049afb08 RBX=ffffea000181c4c0 RCX=ffffffff8256a4ab RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000129 RSP=ffffc900049af808 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffea000181c4c0 R14=ffff8880330846b8 R15=8000000060713867 RIP=ffffffff82072f7c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d64a8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbf56947e20 CR3=000000000e596000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca28e4910 00007ffca28e4910 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf55dea6c3 00007fbf55dea6c3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf55dead20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf55dead20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555588ac67e8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080022b0030e 040022ac03180400 22a8030c040022a4 0308040022a00300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10900300080022d0 0300080022c80310 040022c403180400 22c00300080022b8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010f800400100000 00000008061e1000 080152e80180040f ffffffffffff0418 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800000800010000 0408060a010bbe00 0800018003000800 0210000410000604 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 72ee001000038004 0100000208060601 6ac800080003e003 00100003d0030010 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003c00302100003 b00301d810001090 0300080022d00300 080022c803100400 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856dd8c5 RDI=ffffffff9b43cc20 RBP=ffffffff9b43cbe0 RSP=ffffc90007d1f2b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666657 R12=0000000000000000 R13=0000000000000031 R14=0000000000000010 R15=ffffffff856dd860 RIP=ffffffff856dd8ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2fdd3c06c0 ffffffff 00c00000 GS =0000 ffff8880d65a8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000000c0 CR3=0000000061ad0000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000fc02fefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff22356e86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff22356e86 00007fff22356e8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fdc632e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fdc632e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fdc632fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fdc632e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fdc7ea498 00007f2fdc7ea468 00007f2fdc7ea4a0 00007f2fdc7ea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000046 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8de36106 RDI=ffffffff8c1a92a0 RBP=ffffffff8e7e7060 RSP=ffffc9000320f420 R8 =00000000177fcb41 R9 =0000000000000007 R10=0000000000000200 R11=0000000000000000 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e380de RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66a8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4d15e17dac CR3=0000000039d3c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7570637265705f65 676173752e746363 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffad409c26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffad409c26 00007fffad409c2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cda032e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cda032e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cda032fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cda032e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000