last executing test programs: 3m40.866041665s ago: executing program 32 (id=101): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000540)=""/190, 0xbe}], 0x1, 0x37, 0xffffffff) (async) r2 = eventfd2(0x1, 0x800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x4, r2, 0x1}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="f36db9d90800000f322e6764260f350f79330f8267333a99c4e17ff057ee66baf80cb8ace60d8aef66bafc0c66ed670f01c8f365f0812109000000f3260fa520", 0x40}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$SIOCGETVIFCNT(r5, 0x89e0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008038, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) getsockopt$llc_int(r9, 0x10c, 0x9, &(0x7f0000000340), &(0x7f0000000200)=0x4) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r8, @ANYBLOB="00000000031201005080cdf211800b00010062726964000000004000028008000500010000000600270000000000080001001500080005"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0x10000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r10, 0x40045612, &(0x7f0000000040)=0x1) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r11, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1a}, 0x60) getsockopt$nfc_llcp(r11, 0x118, 0x3, &(0x7f0000000140)=""/192, 0x20000057) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0xd8}}, 0x1) (async) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x102502) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r12, 0xc0105303, &(0x7f0000000000)={0x0, 0xfe, 0x10}) 3m34.50431706s ago: executing program 33 (id=190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020000907800001e0c1306f7ffffff09000000"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000000000000008000f00fe"], 0x24}}, 0x0) 3m32.186729534s ago: executing program 2 (id=212): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x6, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e31, 0x4, @empty, 0x3}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f00000001c0)=""/179, &(0x7f00000002c0)=0xb3) write$cgroup_int(r1, &(0x7f0000000000), 0xffd2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(r0, r2, 0x0, 0xa) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0xfff) 3m32.186538047s ago: executing program 2 (id=213): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x2) socket$key(0xf, 0x3, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getown(r1, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e63925789381db3fe455e8dadc7dcf81189517730bed5d8036168bd2e27cc611027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc506c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7964a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x114, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {@in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x114}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x5c, r4, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040801}, 0x24000004) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x400000, 0x25dfdbfc, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r8 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xf8f}) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @broadcast=0xac141436}}) 3m31.986903511s ago: executing program 2 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000700)={'c', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(r3, &(0x7f0000003080)={'a', ' *:* ', 'r\x00'}, 0x17) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r4, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r5, &(0x7f0000000280), &(0x7f0000000400)=""/160}, 0x20) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r6, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000001040)=@assoc_value, &(0x7f0000000080)=0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000004c0)=@ax25={{0x3, @null, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000540)="81693c4f4331e611042c68f6f626ef61c4c2d1bbeae50e97a9dcbf660f000494bf153861aa025328fe293c246c6e28d05dd0807fa6a272b0320640b780958d29d3fbba80f7eb303d29a41805da60b0e9bd667f3cd391d825407e822c8fdab3ef157a17e6dce584041d89ce604dd1ceac3b8b640b2ed7f55b218ce6302b39d12a41034ab976240564660f2b66b7ab43ec989fb4b16a9c435c3f86c93b7e049b94385f1aa01491d35b85f6289394e00374d404cb1e3d8ea09292b2472a3d0e67381fe69d490570fe563c5c72812270e133081c0383efb6a3b71960a6fb91d3ea85c7a7cf1e9d1b9400c4b9b74d61766334f80c91ce8d1b1f54a4fe57f789e48a", 0xff}, {&(0x7f0000000640)="57db53d120ea9baa80620f045d1d30fa47e711e856d7c0021cc03a8243116245066f72feda67c169e025fba8e04027f952acc0006e94ab9a649a3efa2d5c3e5f9b3deac9d11ddf2385a9d1a0ca7f5cc32f62e553e690cdc364bc4814da0c60ae040799e363d3b0754024d57f9ea93ad448a1baaa37b701273a9f93621ff624cdac7ccda71f27a16b975c3f1dc5ba8e390a0f274bc1256fa318b870e6652bc6a9", 0xa0}, {&(0x7f0000000700)="602e48e69c39370f8d8a30f699f5568bc871f435f0549548d8cd76d0d27563ad29c7d3b1934bdc33c180b1fe82d84f0f3c85bed1776f329670e45f5d95d30ca4a3be553cb4163104505eb590c16797d725c601eb1a2de9a57a6e3bf1bf921bbffa73c287cc50b34ba1ac73c9a561b8bff80928dc9d77e68f0ff3ae320ea79386ad21d75657aa2764b2e51b98c3e82719427be0efde93f2", 0x97}], 0x3, &(0x7f0000001080)=[{0x1010, 0x10f, 0x6, "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"}, {0xc0, 0x101, 0x7fff, "e06e1d91e911b8db3fb88808d026a47d3a603d9440b5be2ecd8d6b4f177cfc1e2eed4c14553b90796bb7d2d87c15dec77656de0642dd27fe28c871e01c4f7c71fff58c768aefc6c8335dd5409a86336798c5a8387a74ec07a765f5f8a335585e3c909103b9f8e3d113b471f99498a99c761639319c7df61451d5db8011c7cc48d8ee187447d03a58d4bc0da122b7e2e3639c65dd5b6e7633b970bb46db259d08815498fbde53e794f4d061d6c3"}, {0xa0, 0x118, 0x0, "a6d73648d3afa24f81a88353272d495903a0398e27dfeedc447e4f1dc1ad96f239ca4fdb4dd8b3c6ad4c66c621e8d4f270ec5e426f9e2e1b2eb76c075524fca3224d7c63ba9eb27cb1ebdecf344b2aff13ea97d0e4d20a390e968d521796c220b2e64b5e05d3589c316463dea703e45a48c95633e4606b682cacf5037575120d730eb776e6da228b01de31cca576655a"}], 0x1170}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x800, 0x0, 0x6, 0x2, 0x81}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0xd}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) 3m31.92658297s ago: executing program 2 (id=218): mkdir(&(0x7f0000000280)='./bus\x00', 0x151) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000100)='V', 0x1) write$char_usb(r2, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) syz_usb_disconnect(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000500000040000000000000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x42000000, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xab9, @void, @value}, 0x94) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000200)=@md5={0x1, "87b141c51fff6f5678978a92842e3c2d"}, 0x11, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x20000000000000cf, &(0x7f00000002c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x10000031, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000003d00090000000000000000000500000004000000100001800c00108008000600", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="89cec78eb9ba1125a8dbc7380629a45e221a14843f5939261b2a8d57c504c1376d04cfe6f148bfc4a6ced42c9f129c1629da58820da10cfc7d0e635d8c4e76bd4fab6d7f021eb74f44c05ad700937242a1054a1c7e1d99dceb13549bd5"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x44011) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYBLOB="c95f4b8fc7c9d9d99223235c31f68cf1b613fd557c66dcc992275784e06c453d90da7fdd0c30b6bf019aa86a78a5fe8f98d93507e39a26f3614291cd13a2cebba840d700168eb69c4d409b652052af38164fb9c51e31e8e5b5526dc3b82324a5d207f03bd671958cc547c2e98f4acb4f11c09d4e4876c1", @ANYRESHEX, @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES32], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='btrfs_failed_cluster_setup\x00', r5, 0x0, 0x7fffffff}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='br_fdb_add\x00', r6, 0x0, 0x80000000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') ioperm(0x3, 0x4, 0x1000008) r9 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) ptrace(0x10, r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2a76e5d6", @ANYRES16=r11, @ANYRES8=0x0, @ANYRES8=r8, @ANYRESDEC=r4], 0x34}}, 0x0) ptrace$getregset(0x4204, r9, 0x201, &(0x7f0000000000)={0x0, 0x300}) r12 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r12, 0x8208200) 3m30.286400754s ago: executing program 2 (id=244): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 3m29.817025825s ago: executing program 2 (id=250): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x72f140, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r4) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) read$FUSE(r4, &(0x7f000000c400)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 3m29.80574016s ago: executing program 34 (id=250): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x72f140, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r4) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) read$FUSE(r4, &(0x7f000000c400)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 3m19.406088364s ago: executing program 6 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), 0x0, 0x1015, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r3, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000300)="0f60879f1ceea2440f20c0350b000000440f22c0c482b13d793c670fc73fc4c37d05a8720000008e440f20c03505000000440f22c00f7965bb0f3564f3af0fc79a9e96f0be", 0x45}], 0x1, 0xe, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0xffffffffffffff4c, 0xe, 0x0, 0x6, 0x6f5f, 0x7, 0x10, 0x286c, 0x2, 0x8, 0xfffffffffffffeff, 0x7, 0xbf6, 0x2, 0x7, 0x6], 0xdddd0000, 0x80804}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m19.286950937s ago: executing program 6 (id=467): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000280)={0xe990, 0x0, [0x29b, 0x4, 0x6, 0x7], &(0x7f00000001c0)}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x72f140, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x1, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r5 = socket(0x2a, 0x2, 0x0) sendto(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) read$qrtrtun(r4, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000008c0)={0xc0}) creat(&(0x7f0000000080)='./bus\x00', 0xa) dup2(r4, r5) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x20) 3m19.186951682s ago: executing program 6 (id=468): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x72f140, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x4d5}) 3m19.18654754s ago: executing program 6 (id=469): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x14a, 0x0) (async) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x14a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = syz_clone(0x40800000, &(0x7f0000000500)="f682a566ec5a5fcdf0cdd82ee4da79a8ce7a5eb4e2372d57c7d7cad95b2dd02acd7c92c8e7b763d4f45274fbfcf0600175802ae55acfa0d2dc1ceab9640a6704fe2b730d11117d4d6ede7ba281b630c3dd03bf72b2dd06436bd74c2f255f76f442e45badb393026d6304a9ddf741ded523b01481a9fa72522c1bc7adf77e50c81b1fecd86f2706b134dcb614045f970580f9c03e600907e765b561bf162031c04f57acc9f2ea", 0xa6, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000640)="73ab6c483362577ae9c0f0c762f231a04e2bbc53f876ac0800579012ac156ee0e4fffcc658323d9d12ba7fdb72b2e3330e04155e7489749e647a063055d9e755db9bb03bb0492d48da2298d2a87b64fc075fedeb75966b8a809e7fcd494c340d06e868a44c7350a2bd7fd2603b819cf96a396f3099d34499234ef21aefff87319d013cf32551fb1b3679289e305f4517d6deafb17428e2a68d06447856927ed7eca6a35c543bf580a9dac37811c4dd7d1f11df4d42ee90a8abe21fcb15331811ce3b54e63e4e43ceb3ba7ba6fdefd5d394e831df6c02bc1f385ce498a4550798") sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@RTM_NEWNSID={0x34, 0x58, 0x10, 0x6, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r0}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8, 0x3, r3}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@RTM_NEWNSID={0x34, 0x58, 0x10, 0x6, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r0}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_FD={0x8, 0x3, r3}]}, 0x34}}, 0x0) 3m19.056891021s ago: executing program 6 (id=470): syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) 3m18.586715151s ago: executing program 6 (id=474): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$DVD_READ_STRUCT(r3, 0x5392, &(0x7f00000002c0)=@copyright={0x1, 0x0, 0x58, 0x6}) syz_usb_connect(0x3, 0x2d, &(0x7f0000008ec0)=ANY=[@ANYBLOB="120910012b95d908e204121410ca0102030109020b000102faa0bf0904000801080662000905090100020408f8"], 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff90, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 3m18.575131286s ago: executing program 35 (id=474): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$DVD_READ_STRUCT(r3, 0x5392, &(0x7f00000002c0)=@copyright={0x1, 0x0, 0x58, 0x6}) syz_usb_connect(0x3, 0x2d, &(0x7f0000008ec0)=ANY=[@ANYBLOB="120910012b95d908e204121410ca0102030109020b000102faa0bf0904000801080662000905090100020408f8"], 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff90, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 3m6.875149177s ago: executing program 7 (id=696): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x304d}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004801}, 0x9590f6cc3aa711f2) pread64(r1, &(0x7f0000000140)=""/139, 0x8b, 0x1000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x500, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) pipe2$watch_queue(&(0x7f0000000040), 0x80) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) write$binfmt_script(r7, &(0x7f0000000d00)={'#! ', './file0', [{0x20, ','}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xc1\xab/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xfb\x06$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9\xd3\x06L\xbf\x1a\xf1}M79?L\x98e\f\xb5\x0f\xfb\bH\xa8V\xc9ty\xdaJ9E-\xd0Z\xf4\x9b\xa0\xf5\x92\x06\x1b\x81\x03\xb7\xb0\xe3\x88\x85}G\xd9\x05\x85Jn\xf7\xf0\xae\xf7\xe22\x80[\xc62\'\x8e\xafC!b\x12\x9e\xd6\x0fW\x03\xf2c\xa5\x98h\xf9H\xa2\xa8\x83\xcb\x1c\xdd\xdc\xd2}\xfezZ\xc5\xd0ua\xd7\x06\x00\xa8\xf27\x8cU\xc4\x11\x1e\"`\x06Y\xafZ\xefK\xb1\xf0\x99\xd6\x1b\xed\xf5\xb7@/\x9d\x11\x9b\xe5\x9dP\xff\x99w\x81\xca,\x9a\xfc\a\x99\f\b%\x90\xd5\xd8\xb7\xc07#\xb7\xb5\xfc!i/\x05\x865\xeawWV+\xcc\x8c\xd3\xb5\x03\xff\xe0\x00'/233}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0hJ\xd6\xc4]\xca\xf1\x8f}|\xf5Z\x9c\xc9\x1f\xd9P'}, {0x20, '\xa4\xdfy\xf5Y\xbf\xd9i@8\\\x87h\xa6\xa0\xa43\x84\xe7\xd5\x98\xe8\x01\xd3\xf0\xc72\xdf\xfb\x00\xfd\xcd\xf2q\x84\xcb-\xf3\x92\x12\xef^~v\x10/X\x1e\xc3\xb1T\xf4\xd0m|\xabr\xc7L\x9b3\xbeCJ\xad!\xb2\xb5g\x7f\xe9W\a\x00\x03=q\x8a\x83|\\w\xe1\xf3\xf1\xe8\x83\xef\xe2\x8bU\xebG4<\x1b\a57<;\xefm:?\x8e\x16\tu\xd5=\xc6P5\xd7\xeci\xcaI\x15\x00]\xc6%\x94&9\xac\xa9\xe9k\x99qc2\xc6V6\x1e\x1c\xeb\x9e\xc78\xb4y+\x85\xc4\xfa.\x15\xe4\x11\xa2\x92\t\xde\xa9\xdc\xe1\xfd\x98\xd2Ja\'r4\xe3sFv\x02\xa6\x8exO\xd0D\x8ea\xc3g\xe5V|@1\x15H4(\xb8E\xa4\xa9\x8bp:\x82k/.:\xf6\x003G(\xd4\xfc\xa0\x01\xe3Q\x805?\br\xc2\x96(y\x8c\x95\xf2Rx\xca\x06\xea\xf43\xf2/8L\xd3u\x87m\x96\xfc\x9cU]\xffiN\x14\xe7-{\xea\x9f\'D\xc0\xeeqA\x1a\xed\x8d\xc8\xad\xcdZS\x1b\xb6{\xfa\xa8\x84\nd=\x0e\x8fc9\xf0\x7fK\xd7\b\x86r\xac\xaf\xd0\xb6^y\xc5\x03c\xc22\xa9R\x90\x9e\xfc\xce\x957O\x06]\xdcZ\x17\xb3\x1bb\xc9Dm\xa2\xd3\x91'}, {0x20, 'ro\x00'}, {0x20, ':@'}, {0x20, '+'}, {0x20, ':\xf8@\xa5\xd1\xf7\x89md\x1d\x92\x8b\x12\xda\xce\x17a6\xeb`\xd8\xaa\xbc\xed\xcf\xe8\xa0>\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj0x0], 0x1}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 2m51.614498163s ago: executing program 36 (id=706): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x72f140, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 2m16.241293708s ago: executing program 0 (id=1175): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000350000000100000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) (async) r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) (async, rerun: 32) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) (async) syz_usb_disconnect(r4) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000000)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x7}}}}, 0x9) (async, rerun: 64) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f0000000040)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x17, &(0x7f0000000300)=@ringbuf={{}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @tail_call, @exit]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m13.166168059s ago: executing program 0 (id=1215): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) write$proc_mixer(r0, 0x0, 0xf8) writev(r0, &(0x7f00000023c0)=[{&(0x7f00000020c0)="02a2", 0x2}], 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r1, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="9f5463fb48", 0x5}], 0x1}}], 0x1, 0x48004) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0x5, 0x4) writev(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000000)="9110d2a5f721e0c024f1c0ed476fd12d628afb74284f116c9283f9d63e83a41d47269cf5f344d5acbb6fcd8db7820c32ebe87d653015a5ecbbd2e462be8f65439d8b3a8380086d0f809d946bc4411d0152b9fa3d8e81e8de4ad2c4ff65d5f568e95d3d5e6dc01abbb4d396572dabe811f00e3995b3a804239dfe037ad9eadb1b53f0a968e34d821d891f459456e8c330b189", 0x92}, {&(0x7f00000000c0)="3125d7c535ab8e026acc18cc7c9e07d11ee6c9e7eac325c3715930269e600d596e78d94c992ec2c2ff3d880084bfc7db46968882b061d95a61c39183dfbb5376718470ef631ae16383bb9677646b9b3cbe239d0172c66c24ac7e866843ae69d2f61063c986ebc79a6995f50696de252d7452eaad80c4f2de2defc86d415d0995a5c72f1338a742d00c1af419f0beb764adb6e2abf811699f981870886b4f1da31c91e2a1a1d7ba5e51c3a4c56595dbf504e450", 0xb3}, {&(0x7f0000000180)="268d841fc7c23b78da258e44cba9141c640fb12b19c3fbddd396f183b9dc6d98ecbc96e73640ab167cf07798a0e9cb51677e15a57b7b3327f29c0bf2318f75743d65a938469831f2dd98472aac5eb87f24ee8349ff80ed90eb234ad99b7a2f93e00da808f028b14c5975e3977afb9ed262446ad91201e1da402867fa38f31334937c6791e41720a7a5480b62f1c7d675676166557976d1841996420e88d12e029f91e1331c041cc1d7ea86", 0xab}, {&(0x7f0000001280)="58c84c75c381a0db7bd458ce65944f8605758c464c74f1e6b6a0c414f6d82743a023b486ea4f541094707720e20eaf093eefc17dede9da45a252952f4e8e2f263cbb0d5fc547e34e00cb2caaef328f75bd669274f09becb50cb1226acf5df4eccf0a58201616b1d895e06ffc054f68bc690264d3e1de8ea3bf700622a85e16", 0x7f}], 0x5) 2m12.36392654s ago: executing program 0 (id=1240): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x1000001}], 0x1, 0x40010000, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[], 0x0) 2m12.305688705s ago: executing program 0 (id=1242): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendto$inet6(r2, &(0x7f00000000c0)="9a751fa25353114b814935af46fcc04fd95738cd567176e34a8232504e173ba3cd9c03181d2af7c9a9e11ca8c8fba075bce50892a34e8c2ede9ca61ef1c033a9409d2c229831c7e0c273726a99a69f4f0a", 0x51, 0x8000, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="114aa8a4", 0x4}], 0x1}}], 0x1, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000200)) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r4, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e00240002800800010010000000100009"], 0x54}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xfffffffa, "60d7f74b38433ed7bf20a5dc0dfbb554"}}}, @TCA_STAB={0x4}]}, 0x4c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2m12.304727454s ago: executing program 0 (id=1244): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [], [0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x210, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x40, 0x3, 0x3}}, @common=@rt={{0x138}, {0xfffffffc, [0x5, 0x5], 0x400, 0x1, 0x1, [@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @private0, @remote], 0x6}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x14, 0x7f, 0xfde3}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r0, 0xedaa7000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x800) io_setup(0x423ac9aa, &(0x7f0000000440)=0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000500), 0x800) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0x5, &(0x7f0000000240)={@local, @empty, 0xfffe, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x3, 0x0, 0x80, 0x4f04}, 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x16}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x5}, @IFLA_MACSEC_CIPHER_SUITE={0xc}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0xb2}, @IFLA_MACSEC_ICV_LEN={0x5}]}}}]}, 0x60}}, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ecd000/0x1000)=nil, 0x1000, 0x2000002, 0x10010, r0, 0x0) io_cancel(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000480)="df0a195872dd7c50d0ba72a0b3d3bb28b3cdaa65d58bda525c03b627d4490bc94b42a902132d1e61d6abad1930852c5af643c23b0fc6c4132b30d237c87cebe6ba50d04b66db55d26a", 0x49, 0xf0e7, 0x0, 0x2, r3}, &(0x7f0000000580)) 2m12.166157161s ago: executing program 0 (id=1245): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008800) chmod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x72f140, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 2m0.885550735s ago: executing program 1 (id=1361): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) (async) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="bd91", 0x2}], 0x1}}], 0x1, 0x40400c1) (async) recvfrom$inet(r0, &(0x7f0000000040)=""/71, 0x47, 0x40000002, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0xa) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000200)={0x20000000000000, 0xf690}) fchown(r3, 0x0, 0xee01) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]}) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xffffffffffffffff) 2m0.826185441s ago: executing program 1 (id=1362): pwrite64(0xffffffffffffffff, &(0x7f0000000100)='i', 0x1, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 2m0.72499903s ago: executing program 1 (id=1364): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) accept4$alg(r0, 0x0, 0x0, 0x0) (async) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x198}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r6, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}]) (async) io_submit(r6, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x11}]) 2m0.65215974s ago: executing program 1 (id=1365): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000001000000001c0000001c00000009000000070000000e02000000ef69000000000000000f020000009c05000000000000006f00000000"], 0x0, 0x3d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="7465616d5f736c6176655f31323000dec2492bf22c2cec8d558f227357e50eec07deef5da4ecc5bd0630415e26aa8e869d3a1b55b45f46b5a18c0273f6548205bac36ba9e0d9d173879913dc81ca7d81be303cd8bbc7c1f0916a4efcd55b0d02a339a268872bef14fe7ca2fd21595911b192f87d5f0a2a670fb9318afdad615f3221ccb2872218d87b30fd18ae2d54a9b3c6d0a7a64cc0a4ec0f869a4aabb5562f5baf9a255c78819e85d8acbf8f17087bfeeea04100"], 0xf) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000340)={0x4, 0x80a6000, 0x2, 0xffffffffffffffff, 0xe}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x5e9001, 0x4) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x2710, 0x4, 0xd000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0x3, 0x0, &(0x7f0000000100)="ff412f", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r2, &(0x7f0000000000)='./file1\x00', 0x0) 2m0.446019664s ago: executing program 1 (id=1366): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f0000003180)={0x2020}, 0x2020) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x99) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f00000029c0)={0x658, 0x0, r7, [{{0x0, 0x2, 0x8001, 0x46, 0xff, 0x2, {0x6, 0xfa9, 0xfffffffffffffff9, 0xfff, 0x2, 0x3, 0x4, 0x0, 0xed07, 0xa000, 0x8, r8, 0x0, 0x55fd, 0x80000001}}, {0x0, 0x3, 0x6, 0x5, 'vcan0\x00'}}, {{0x6, 0x0, 0x5, 0xffffffffffffffc0, 0x3, 0x200, {0x3, 0x2, 0x5, 0xffffffffffffff01, 0xf, 0x7, 0xffff, 0x2, 0xfffffe01, 0x3000, 0x2, r8, r9, 0x5, 0x4c18}}, {0x0, 0x10001, 0x8, 0xb, '%pB \x00'}}, {{0x1, 0x0, 0xffffffff, 0x7, 0xf425, 0x2, {0x6, 0x7, 0x2, 0xf, 0xffffffffffffffff, 0x1, 0x2, 0x8, 0x9461, 0xe000, 0x7, r8, r9, 0x8000, 0x1ff8000}}, {0x1, 0xd0a9, 0xa, 0x9a5e, '/dev/cuse\x00'}}, {{0x6, 0x2, 0x5f, 0x4, 0x4, 0x1, {0x0, 0x7, 0x1000, 0xfffffffffffffff9, 0x8001, 0x0, 0x800, 0x80000000, 0xb83, 0xc000, 0x80000001, r8, r9, 0x28a, 0x7}}, {0x5, 0x4, 0x1, 0xa, '\x00'}}, {{0x5, 0x2, 0x8, 0x8001, 0xd, 0x6, {0x6, 0x184, 0x587, 0x8000, 0x8, 0x0, 0xffffffff, 0x6, 0x10, 0x2000, 0xb, r8, r9, 0x80000000, 0xb}}, {0x2, 0x8, 0x1, 0xa2, '('}}, {{0x2, 0x1, 0x9, 0x6, 0xfffffff8, 0x7fff, {0x5, 0x1, 0xc, 0xa, 0x6, 0x6, 0x3, 0x6, 0x7, 0x8000, 0x8, r8, r9, 0x5, 0x3}}, {0x3, 0x2, 0x1, 0x9, ','}}, {{0x6, 0x0, 0x5dd5, 0x3, 0x5, 0x81, {0x3, 0x100000001, 0x5, 0x2, 0x1, 0x2, 0x6, 0x69504f9e, 0x80000000, 0x2000, 0x6, r8, r9, 0x6, 0x5}}, {0x0, 0xfffffffffffffffc, 0x6, 0x4, '&\'.:&('}}, {{0x2, 0x1, 0x401, 0x5, 0x80, 0x4, {0x5, 0x404, 0x5, 0x4, 0x801, 0xff, 0x6, 0xd7a2, 0x7fff, 0x4000, 0x7f, 0x0, 0x0, 0x7fffffff, 0xc6}}, {0x4, 0x100000001, 0x4, 0xf4f, '\\--,'}}, {{0x5, 0x1, 0x7ff, 0x4, 0x3d, 0x7f, {0x6, 0x7, 0x5, 0x3, 0x59ec, 0x5, 0x4, 0xf6c, 0x80000000, 0x4000, 0x80, r8, r9, 0x6, 0x6a4a}}, {0x2, 0x54f, 0x8, 0x3ff, 'nl80211\x00'}}, {{0x5, 0x2, 0x2, 0x49f, 0x7fff, 0x65, {0x5, 0xbe4a, 0x707, 0x4b3, 0x0, 0x3, 0x10001, 0xfffff800, 0x6, 0x4000, 0x4b4cca3e, 0xee00, r9, 0x1, 0x62e2}}, {0x2, 0x101, 0x1, 0x3, '\xad'}}]}, 0x658) fcntl$notify(r5, 0x402, 0x8000003d) r10 = signalfd(r5, &(0x7f0000000040), 0x8) landlock_create_ruleset(&(0x7f0000000080)={0x200, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m0.335363667s ago: executing program 1 (id=1367): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@var={0x7, 0x0, 0x0, 0xe, 0x3}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x4d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0', [], 0xa, "03fc8eee296910f45d1ec0471b454d448414a7984983f183fe6d09e46b22772701ef000000000000000000"}, 0x36) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) write$UHID_INPUT(r0, &(0x7f0000002140)={0x8, {"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", 0x1000}}, 0x1006) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)={0x3b, 0x10, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x6, 0x4a26, [0xa6, 0xe36, 0x2]}}, @ra={0x5, 0x2, 0xffff}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x30, {0x0, 0xa, 0x4a, 0x7, [0x9, 0x101, 0x3, 0x6, 0x9]}}, @pad1, @ra, @jumbo={0xc2, 0x4, 0x8000}, @pad1, @ra={0x5, 0x2, 0xfff}, @jumbo={0xc2, 0x4, 0x7}]}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r9, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r12}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001400b59500000000000000000a00000068dbb2d282aa6c7bba804b61940160d3", @ANYRES32=r12, @ANYBLOB="1400020000000000000000000000ffff000000000800080010060000"], 0x34}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_open_procfs(0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20101, 0x0) 2m0.320746506s ago: executing program 37 (id=1367): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@var={0x7, 0x0, 0x0, 0xe, 0x3}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x4d, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0', [], 0xa, "03fc8eee296910f45d1ec0471b454d448414a7984983f183fe6d09e46b22772701ef000000000000000000"}, 0x36) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) write$UHID_INPUT(r0, &(0x7f0000002140)={0x8, {"0667ac1471a39e7e405a56fad1da33657c469277f43a3fd378bd197d6389e5b1e26f4c915122e6234741a35d5feff45cdaecf6a50ce568e26c3d9ac712395d040b9b422e85f06d1ed229b4e3e770f5ca31715663d60f7676a31a08eb04037a5d5d9c84c4c5eb4a17db2db860efa5c2d3fde2e69719c0b8d2921498e782dece314bf94161b9605b55895e1effd5326f0b9e46b372b1e4baac0c8e16db020ce566951bdcc61e0ae670832749e1792fb39fe2cd227ff0161096699ec99865feed9fff1e39dd7559b3c3452afa897fcd5c22f223d0060007df00fe14c5acfc1247f01874b501e9c95eeb0ea131259fa6711979283752c67a756c12b7b0382e9bed73ffd34202775d3b04cf904fcf445a64ae8408851f648bee65623ac7a56bfe9b7a44c5c848df4f5f508885af98d419e3c019593639c3b35a8fc5874b5f2863357f519b83d9bb37f3b7dc0d85662e83659c2d613078c2dcf580bb45c4099649df8484fa5fbd50e72a75d5a5d4d4cfa2f6a3a4b630a005158289b1e9a193c0f7dd3cfc0ac9f44cff352bf2b3914d24af628a1ede993f8c2c8139341103122d8036cb3b362872a0d5d6603cc5785c7f0917013034501b77ccce1e54d4afc41f94f79c40055c6463dca113367d5dcfb842d947a0f78a798c09a999835f1a591af7ad1d75b0215e41d1406152c674192e1703c614308008abf5228aa17954639565a5dacc1652ef3c0e514ce3fb7c0e218827673c4f710054ec7867869b4c40db2be56de65e0068ed3b21f4f5f138a395819accf412d4f6c903e510894504f066747bd26e4e483531b9330d478cbe7345a7232a684e603f5f6d947f43c5176495cb636c03da75a21b615a35db114095e4c9ae5ccb167153f790bba333ee22375eb454d912f04882c3eb39c9cb55460082b553b728f2afd5dab5e2a2698c7aa48682b46d25600d1f2ffa4b5463e9f5ea82234a683d929aff82164c797a44b07d60f966759eb4f91507c1e4a94c0d359e6ae268f47f269c76251baf3428cf64dfad87732440e15943d9e75e32f7a25ff08c89034b632823d243fc7d4cf068a17625147d99e2f1f79f139165a5b1ea5bcd92480587a7ee9543054ca5baeaad93e10c0f272686762ce75908b0be928125cc0d384dd890b665016fcd3b1f08ba9e35b6dc71b241a914bdc028eef3b1ba6ba397d88ef4fba6a00eb0a62546c4f7c4ec0f321a23feab51d89c9b71641092945bbef97ae87589f9d92e0ac7bd70a3b6ab938044f322935e50a257e04328e387f75042756d32482a0c351e7afe5116b46f64b734a552accb6b0dcd6cbeb0eef2a928eb1ee1cf56d9d0fb247a069a28f28c3462a8ce629c4feae6ad8b211e4f19801f569d0a2cce55fe2a894b9593eda0f696481e64ff481be9755a47a1e7b91c898f0f119203da21e5705b219344fbb48d70c3553e828b9bc4a8195db91168c521803d16aecd320c6e6ce1b0ba7a60af7b6289e4458c0453f81fa760dc37487c4b23e556c81e10efb9f002a2341eaddb3fc3bb55c388b115a7d2af2e8de67dd4cc4cb9a386e2c1b2bfb2e2b28f6d061d00093cb25b0b4d95dd1d01f308414105e575369a57736faba5c41502f8ff5dd27087a467604676f1e7154fffbcafa9464c2d2e4c3806f689285388686a892dd3ee6ccc14e4bb7b7e5bc5692bc28a108af91788e29df4b3eb2ad8a14daf83c75288758b5822bb45f9f531555a5518dabdd756e3bf73e5d4f0477aa250bf1041867734732faffb745018ea635217eadaee22abea004656ae1ef59e57fdb02d615da20b437d37f311f951e0bbb0857c39e537b0bb2c92d01c8a1ddaf493d8fec2e6251be7b3b462c6471330508bfcc7afff1a5dca7e646b297a7814cfdb88ab9c2829d3970a97aa7753c9a14f349ad67d9d68c9c707b8ebac8458a34ffb1ef688f4f9e1ca528578d961c6511888647ac8d3b0480ec3594aa0909b29c2bcddb5d52212f49d5c20cea05704ae75d494792529e0a8d57cf717ab7760b4506f07774ddefc299ee08de21ab44950427b1a25f4d06ac6fac10f8a5c892e02eaaff0ba4ffc992c31abe049458b88c549055d4218231182ef73cdabb51f27fff813caf8ce8651579ad7e1064324939f5ae678a29838d7baaae162f8258086366562a42d9e4952dae09052f222192cc20b16ad9f200b858e2a254d8ecce1f4755ac24aad6fc6199a588a8e2f1f0771ca6616b1271842057cb8f1df82b8c5729d7be61ee967a596627b2e7dad8612f0d35b70c242c825b739e4290d71cb5dc425c2e379958b0a0e2b1f058a4486702c7201080d87bba97537f77820b78448cda801d303c52943353a2d54505d9d99b0428a9ef425312146f74b657a31bd59480750a9f2415465ec9bfd9805a92c52490fe3de55854b1a2bb5cc25c34f95da672c03d1e82043f4daa77956cd5d2039a730f5f3f132c03572d0c7891e50f5eb509ec84205ba1488aab5e950ba439c9c3476feb5c2733e1bb37fa4d3ded8906c781b07c56fa57686a4a4ce8e9ddd778145f06228edb4b89860dabc7d8406dd4df1cd0fbb9974f2a88011e64ce09287c1124ad0afda256b461cfd59cc6f62206781131a2626f3ad8f7779ab68ed54d3d1b0d6f092d1f8d88a508062c1852ccc7bb148d00c9d24a06a30fbb71c1c1e6a1c3d7fd54860b27ac3bbc957b2d5a7cea44b2105d907cf6de1c45cebabdbe7fe98781e33fe9ab2c543a000b992bf79d816ad7f1e134a904d5bf4dd01e20ff28587fa973ceb7f6fdebc2eb3a3b684b12e85f6990b02d4dd7945fbf508529d9db15b2b80b5674cb1f4f33de96ad3a06dedbb6369edd3a8c754d22a0f2de857bfa7fa99c5725cbb2be3f5318032e06766bafd5184e5062c0f523b44526032b5f88ddabcba9721ea6376e14d9f66dd19fa67a684309f53e23cb152c592869cc7c99266123bd36cfdb198032a7085b4f895b1aec00b5d9ba8a9acbc9eb6d43bd3b387b306dcfa93c8be2b854a215b0e6112d45a08153894c070422a643111b5b3a746f83ebc5f7dabbe2f26f95b2005aae8005f92984220f5cf79945d1453e6e1f5ae406eb237b7001f11735d7d4dca2e93ac7136f40552e802585ba61b2f363f468cc9e909efe05512b60595d9070f53db5049acbd7bb5800b7aede84db92dfa0b225bf7f8a1188a9087ee7cf26e280922e67f032d53b82d75f42a2d6b3dba313e069efeed08e1f8dae89aca7575a8191518ef01ea6f649d1090d0902f18378a94b9040c34633b8b78297df1117724824ad3f507bf8c80412d585088c6f5333b39330ed679239185a37123228c1ca5edbcb4e304db7ed927123a42b914c13ff79532e524bfc01f0ee7c4603c4289b213641fffcf0da169383e45d02a18aff9ebd8941a4a6b3d25487908a30520ae95bb91f438c64d77f8f29e66b037e0a8019731a912aa63481c4661169592b7e0c349015c2f5488d85daaaeaf88ed09e53b1f01655c472687d64bc08ca9dc08dcb4630bc23d12ba168d05f67de7014df5232ebef78ec88106db68fbcf35b640ff8fd4c9af6d7cfcd1a9e7f7714c4b689e490f08ba5e9d372cee6bf2b9952ae6fdfc330954b41d1c0153724636dd78cc58849a9e9c13873dd5efd47ccdbe8434e59de9b819b09d1836371805bd2573f96314c233a6fe76bc27d83135219539f29a96a029f59778c44ccc58da759b324f74736494b64ea876373a050a076bc3ebf429a5b292836a0ac5ed2f612209b29d743faba13edcb9662e8bccaf1f926f90f6c8f3537e184beabe2062f9cbce368cbd765f4ef707739aba75aa8aa19121bc94a09748df6a1e08fef0c6f21eb54b66f3b476d0b5630b4e1ba11cd534f9a94917464df45b6d727fba47468eebf0daedbe905ca90400fa7138c24b351c76422152a00c2e1e8a260ba2fcabe1902d4a0a26e185820a1e20b3b3d2c8f96bcec99932ccddbc79f152a38914f0c34e60b0591d3c43c0d33ebd0dfd5665284ccbb67fdbac60ebe748d102f356fa4e69b50c3d61e0a80b1311a83f30c0c8a0f43a18e1226d36a8b2a92cca75544e265f4e0177adcbd4a7c7f38581a645a741754011a8f78e887d84b73918dbd54a95db989adb227fbd5fb69fb7cd45516559de141a2ac2f6897e96469b45e770b92500a75965c33102276255916f7b44c3d31dee5a5232aa321431fce2f274e187e5cd5ba5e2fc8b36c92e042adf270dd88a525bf7d519071896d08470acb754df61a65e115942031fe10fa6d8b0a503c14f32f11189827a2250e1ca4e72692a60b2e55456ea23e9d1b641c8ed6e27e85dc27622e42bce70e3e2b15ea7f9115e81788159d8afd452ce4219c017da79d5d47c6d2a688d0e804805fde5f8d49b024de3104d19aca3096a5879b0cad7dd5b51c98420f60ccd35aa5879900e7ae818b839ec3fa2b62a3175f10750e058b8e04707bb8a35fe73e1d5285be51086d4188cdd1fed0c692c922c24910bf50e07af5218545fcc80790c37d70f54b7ee055e57237e510e7e3f842a2f7d0c03c31d19a6dabb3a9af3fb645af7beda19de3bd41e396f503dcfc6963fe962da731a2c79ec8f5090469a0ba23ec94c990ff0cc576efb9405f86b14c4a856728aeb9f388404fff315ee082235579ef95a9097d007fd8c1d687dceffe2c81a58556408e714b402440611eb8bba32b1215fd0eb5feeda7b77c289d7df44409845bdacc39a2d34b5712ba2eff621462ab08b40d222c063c06d4717261e6a2a4c06f8563096e738695a526f6b4cb03889e29fbb6cd4893ce1f6cf2b1cee52b7b4769a43c24cb1122408b5d9d58208eeeee25af36a6ca9a495676ce3533bb7a1a86619f20ddd3a41d8a9d66de8158d7d146d620ee86402febcce619d2d6122174be9b793e8afcefe4c5e963230eb762cdcd9a9d678176b3f0529bcb147becf0b21eb445bbf24e216947981f8355d4f14c3a19bf24eef760ec828eb6c6919c901f4680467554232b04c0faf2fba629e433e9d0dcfd20ff1aa04a74d7ab239245db9f38bc90cdc94db1a7a77bbaf7832f6f9163b47d8ea6ff9825de9e90d76c18361b64b3ef8f837782dd66e97a2def7da111db56964177a8fda138384e5f3150355d0883be5d5e30f95b17ed19aa040ba0b17546ac05af6991dbeb13d92551e677951d00ee354314bb304dbfaf98cd13469131d935520cd29937ee064ad27504b07affa346d40412511c0d0f9f1d484bc9f8d5fee8e102a1d5126c28211f280e5f6c5373aec44b6cb82dcc46d6b630b7a91dbf7327c016807eb8c004c5d626167332dba018f595f73fb905eba252994f76707fbca30d8b0c0358186eb25c78a74a5cf96aaf9fd428f6328f46ce57551a1104920f36db499552e9d1d2d6f3f8ccec04ba0d1edecb5cb653e41407516941c1c940d6a05e1facd4b6ab8478146b81b58d389557351d7fe4a12a384f4afb48ad0fac63b0b4f66320d32cfdaac67874e4c9b0854a1e91c7982ef028ba61b4ab3fdb061200cecd26f2cfe2f4cd07d695a13617b5d51d40ff8dd24cf9cc84c87d088d922bc6dd12facc2768db3d93dcd6a7926c0e12e8254839bbf21d05acf6e7afb93efcc562da4029259d8f7185bfed0c397e48f8475489477a4952ecfc12a09c89681a30f758198c25208e15cbd1bc0f12b1fba7e2e138d0fa065d6cf66504f4a8d21256e38fdf4db6873b2f6dcca3c5e81f909a86a1a89690bef6e01b2459fe108dd7f0ffcfbfe5dc4c522cd078d9c8ac8dd09a33bb3e5b3c5d04d19e56b69a7692218e8592cbbf521f089ff4522b5", 0x1000}}, 0x1006) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)={0x3b, 0x10, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x6, 0x4a26, [0xa6, 0xe36, 0x2]}}, @ra={0x5, 0x2, 0xffff}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x30, {0x0, 0xa, 0x4a, 0x7, [0x9, 0x101, 0x3, 0x6, 0x9]}}, @pad1, @ra, @jumbo={0xc2, 0x4, 0x8000}, @pad1, @ra={0x5, 0x2, 0xfff}, @jumbo={0xc2, 0x4, 0x7}]}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r9, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r12}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001400b59500000000000000000a00000068dbb2d282aa6c7bba804b61940160d3", @ANYRES32=r12, @ANYBLOB="1400020000000000000000000000ffff000000000800080010060000"], 0x34}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_open_procfs(0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20101, 0x0) 1m57.186097022s ago: executing program 38 (id=1245): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008800) chmod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x72f140, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 1m5.427089572s ago: executing program 3 (id=2352): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x80044100, &(0x7f0000000280)={0x1, [[0x0, 0x0, 0x0, 0x0, 0x100, 0x4], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{0x0, 0x4}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x80}]}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x45bcd000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x4, 0xa]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0xa0) 1m5.426769962s ago: executing program 3 (id=2353): sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x7}, 0x18) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048082}, 0x48814) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r2], 0x398}}, 0x0) (async) unlink(&(0x7f00000001c0)='./file0/../file0\x00') 1m5.358206346s ago: executing program 3 (id=2354): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800620"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x4c004) 1m5.357964831s ago: executing program 3 (id=2355): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x9}) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r2, 0x58, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001200)={r3}, 0xc) ftruncate(r1, 0x82081fc) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000002c0)={0xfff, 0x8001, 0xffffff7a, 0x3, 0xf82f}) r4 = syz_clone(0x6d50e820d7000c4, &(0x7f0000000040)="787839eb160cc5b422a696a335249a680d11f8eeef4438a3e75914e39e7e7597a42deb29ed8fd09905eb5275eefa5451e57e3cf82c21c17a5d568b5097bf2f1b", 0x40, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000240)="147a4894763d9bc1d070e069ee74e9659db59afcfef69dc191e324918da9352a730e605cf83ff92407273da8e127790c3e626db85f8fbfe882a67505ef56fbfa") capset(&(0x7f0000000280)={0x20080522, r4}, &(0x7f0000000400)={0x0, 0x859, 0x0, 0xfffffffc}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './bus\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="b8d3d8e48974aae503984742e847457d61b9459b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd8cbb6f069a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e2", 0x99}], 0x1, 0x0, 0x0, 0x84}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r6, 0x0) r9 = syz_open_dev$vcsn(&(0x7f0000000380), 0x5, 0x40000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc2604110, &(0x7f0000000440)={0x7, [[0x3, 0x7, 0x8, 0x437dad2, 0x5, 0x6, 0x2, 0x8], [0x40, 0x3, 0x444a, 0x6, 0x4, 0x0, 0x8, 0x9], [0x97, 0x5, 0x5, 0xefa, 0x4, 0x93, 0xff, 0x8]], '\x00', [{0x8001, 0xd19, 0x1, 0x1}, {0x4c, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1}, {0x8, 0x2, 0x1}, {0xc9, 0x1, 0x1}, {0x7, 0xa9}, {0x1, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x1000, 0x3, 0x1, 0x0, 0x1}, {0x8, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x1, 0xfffffff8, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x45, 0x0, 0x0, 0x0, 0x1}], '\x00', 0x4}) truncate(&(0x7f0000000080)='./bus\x00', 0x4) 1m5.247723086s ago: executing program 3 (id=2356): socket$kcm(0x2, 0xa, 0x2) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1m5.002744475s ago: executing program 3 (id=2358): r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000580)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @loopback}, 0x10) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000040)={0x2, 0xce20, @remote}, 0x10) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f00000003c0)="00ea1c7c000700", 0x7, r2) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000440)="3a04d3", 0x3, r2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x13) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400000200fcff7f6301000000", @ANYRES32=0x0, @ANYBLOB="8842000000000000140012800b00010067656e6576650000040002801400030067656e65766531000000000000000000"], 0x48}}, 0x2000000) 1m4.948898833s ago: executing program 39 (id=2358): r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000580)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @loopback}, 0x10) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000040)={0x2, 0xce20, @remote}, 0x10) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f00000003c0)="00ea1c7c000700", 0x7, r2) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000440)="3a04d3", 0x3, r2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x13) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400000200fcff7f6301000000", @ANYRES32=0x0, @ANYBLOB="8842000000000000140012800b00010067656e6576650000040002801400030067656e65766531000000000000000000"], 0x48}}, 0x2000000) 31.851515995s ago: executing program 4 (id=2999): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20040000) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, ')'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x40000) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x24, r4, 0xdb43cfec9695d2d7, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x24}}, 0x0) 31.710643184s ago: executing program 4 (id=3000): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) sendmmsg$inet(r4, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) dup2(r1, r5) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504a9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x10001}]}}}, @IFLA_PHYS_PORT_ID={0x9, 0x22, "3909be0850"}]}, 0x48}}, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00dfffff01000000200012800c0001006d6163766c616e03000000800a0009000180c200000e000008000500", @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x0) 28.189003409s ago: executing program 4 (id=3000): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) sendmmsg$inet(r4, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) dup2(r1, r5) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504a9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x10001}]}}}, @IFLA_PHYS_PORT_ID={0x9, 0x22, "3909be0850"}]}, 0x48}}, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00dfffff01000000200012800c0001006d6163766c616e03000000800a0009000180c200000e000008000500", @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x0) 20.755533636s ago: executing program 4 (id=3000): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) sendmmsg$inet(r4, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) dup2(r1, r5) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504a9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x10001}]}}}, @IFLA_PHYS_PORT_ID={0x9, 0x22, "3909be0850"}]}, 0x48}}, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00dfffff01000000200012800c0001006d6163766c616e03000000800a0009000180c200000e000008000500", @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x0) 13.793436669s ago: executing program 4 (id=3000): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) sendmmsg$inet(r4, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) dup2(r1, r5) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504a9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x10001}]}}}, @IFLA_PHYS_PORT_ID={0x9, 0x22, "3909be0850"}]}, 0x48}}, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00dfffff01000000200012800c0001006d6163766c616e03000000800a0009000180c200000e000008000500", @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x0) 6.021961161s ago: executing program 4 (id=3000): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async) sendmmsg$inet(r4, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) dup2(r1, r5) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504a9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x10001}]}}}, @IFLA_PHYS_PORT_ID={0x9, 0x22, "3909be0850"}]}, 0x48}}, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00dfffff01000000200012800c0001006d6163766c616e03000000800a0009000180c200000e000008000500", @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x0) 3.659637329s ago: executing program 8 (id=3341): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x18) (async) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f00000000c0)) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000080)) ioctl$KDSETMODE(r1, 0x4b45, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) sendmsg$NFC_CMD_SE_IO(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0x5, 0x19, "dc"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r12, 0x1, 0x0, 0xfffffffd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) (async) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000000400)=0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r16) sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r17, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r7, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x40055) 3.441315956s ago: executing program 8 (id=3349): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@can_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "8b893b21c1f3344a"}, 0x5}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0xffffffffffffffff}}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="141bf0a4", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x2}}, 0x10) 3.374609542s ago: executing program 8 (id=3354): r0 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000080)="1d", 0x1, 0x0) r1 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000740)="69bf", 0x2, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f0000001040)="65653c67861f1c2cbd3684e5b7c89a260d576814856e4dfa03fc61b08bf6fc4b229172e042269dbb5a70afe70a317ca9bf55cd3510aabb4631b4c6c3a63a84dae53b15d168d1defd37a3a78d51e353252046647049f532618b270555d417d5ae4fd9ad44ce6aab188712ed244f7e13be9626205596960c8679a855214129ddc76640c8cd46bb44a4876661b6fdd7bbfbfac29f16412e9fc9f57c6579fa16be2e8c900cb907d0a634b38df76c2109cc2693fe9465603b4008a2c418307ee5682b2b38daa75fc31376b3b4cb3990a9b0a3e339a0ee944d49957722ee724f0274689715e97b66ddda039818e589f4f0cb9b218966f94e0ea80688a3a2a339701cd69beffba9a75810ce82954cac35c1a71e6230e139df88132aff539c49f9f5a7ffe9d91e8aba6ddd7c4e690e56ec7d8df04c0afbd8ae83141002df9b27bc06f7107336130b7f2388149d693b52dc324bce03197149207d27fba8f685ac750bf6c29235312ac8b6a5b5c1e9f4079e4f1e7485a9092045ac3b40a53740579d50eb98a66f985d8a4d3c882058fe5daa0b3989a2bb9868f7bdad9cf201a541b55f887131b94a4399bd7ab99dfc6235bf21f803dd11d1bbc810543a47588178d967d8501aa859f8a941d23120d72c9dcf7db9790ddb8d61e726e2b549a02ba1c480c6880ce1296977163a47fab3b37febbd7234e44e85c0466776f03696085e8fcd33bed01392f333a6d1952ad19ccc2a33e1e99a6a39b03a1bc2309d47aa7a0dc590626cb904b6a9f6b3948adda7bae3b63604ab2901426199c02f38507a47e1b079a644049a1e99cd8e3c52bfe043edf0b572b7031e6878c11bf414bfde73a42ad8b1344080f7683daae5312ddb3d7410310319fa4ab79815b1a8b2239a7ffd9b9a4106f7894b47e36895b0551f4a891af9abee74a4a80746946d3ce71ba5972fe51ec5b78c0039d5bae53f9a8ef7240884a9b895299339cb1f05e1a252364d94d047dc8a55a0267329db4c347dd0f6ed266e763afdf08eb6c84bd975f86ec7ac4420b9d6a9d31c2cca6a1caa562978807bc14aabf76b9717df2fc35f2cad96a9ebffc4f0078c91ec9c2a7e2d0229675bf4c6bc6579f22e73ae745942011ab2935f0c21751298744e9275e469803b23be69749b0ca79804f38c2ab6794ff6bd581ecd1a94a468203b9d58481dda6f37ac4c9b2faafde82c42d416e0f46219b409c75061b3adc5c1888f9d8a606b14344c483be215795f807b67a938cd77d4321b101bdc3785042475920011c17a87fd8a8be74c01cf37cf5bf46a754c7ddb50802a6de1027f24cb905a32d67839f7d7e3fee9373601ad7e61d063dbc54604021aca17dee9c0f24ade81e0efd6aaf1856c0855f1e6aa9b4c61b3cf138c8c1a20e186cddd0e98883dcb3ee8a3d8d2a3790036e7dc513fa091cac8bd6bc1ec0b8801f2ad7b94ef902912d17d2c2595ebcf8eadc81096acd09de526e382ffa6dc9040ab0e6f165e233300a4ce4b86dfd1986b0c6de8aed6fabf5604dc15100a45bbe9467555c5751eae3f3a87dd6af93bb32f8c021b9f55ead0962cd3ef507c693d6a6a1cafc19d318ffed8fee77dc18d4d95f361bb9b64e7e183b92ce534da78dac5aeb5f4e6cc23563310f287df885b8b6920bb44de7ae69ee5a5ca518c085b377730cfebe62068055d98462955906bcc05f3e170ff6bf8e6e7856ff1b5ebdd21b0943329b82e69ea28460290b702bb14341ee41229a05808fb8634048a56a78c20ad0f4d7a31f17fb4f7642432d715341a8d744182b7a0ced201000000000000001ffb9e685278754baf0858f9b911140daaaa42a428295c4818b2207e5ce37fa0d589526636d244c7c17317ffd09cc9b7ae22496d06edd9fc4c7e4444f4a67edc8cc6449281f3268ac120876c3982c637ab91214d310d368e6efee70a178fe59f2f51f3232ce7d76cc0ab01f27ae4c43131278228b3cba53d733240e9977320aca214d7cd34d83574f99d95666ffe3743394ac29c7ed016e35ec76cd7d645b3a9363a50e9469a223c3eeee82bfb3f0783126079e9cf4dabd973793b8c6f4474935555951dc52d8175850fcf5cc9202a6aec7648a318aee552d27fcf078b35d6254ffb1b972ec5ce9afc98f57e1153321707f9111cb2014d731f6cb1a20e27965f876f77c1a7823029050ff308b7554dd2495731a016d0d946ae8bcd9efebb2bdf24899402977207de290789ca6fe24f88f6c770fd018334f896d400a31af17e4f848c30e1f544b817e4f05717e86ea7b4c46817833212beee472ce27478c183b9e4262611de5a20070b9a237df5e71d926740e89ff4cacdfe4f43aba7ce0b24703fa13de14be7cc490cbfb820ba2fdf2d198ac2aec7f306000000ada0ac2be87db88f1038bb2d0f516a3b3165128a7540ab52daa6d417314f0f2d3f649438aa72a0c122171a5e4c83d75bf6fc19bcd967f510f0f904a6b03ba26a43aad5a3e5d820e05c15c66ee2f645595f5862169ef6e094d9967eccaa74644d24fdda48cb63e7f3df3185b75ee5ba49c2410ddb2d8941f76ee3ba8d6ab698f6c4dfe6d906e205730f5f0900f91f483f42cf5913f04ac337b2345b9f6e8e122e92e072fb02fc974341a1ef80382c5dbb07d7b94f0b0bc4c60fe781c416f192b3afd481bccec6b062d169fba85e6ef69f269b858cce2e6327cb4e3a3ba238ba2b197f607587f31cbaa61e7238918e7167427b4397c2d392890e44ce24e319c85004adc7390c6bf35e1c44a1ed7df059d87be6237362930fdadd4145f1bb7e4f514549f5f729a4919e76068dab83f1fb111fb948596adc9923ead6e3c09bbfb518448d703a697b7ccdde24d1391ba9d838d1b3a80ce71f23e27ddbe5dd5240bdb130359d15c0d431317d", 0x801) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r1}, 0x0, 0x0, 0x0) 3.286860803s ago: executing program 8 (id=3356): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8001}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r2, 0xd0, "c0de679cccd657079ecb3136b51fac36c6dc1fe61f6026e3c9d9ffb951152a13f250393a067fd3e7a23b628b751f9c0680b65f6fe6b8ff2f532cef754f03a32350b3037dfe491b2594998d11a38fb6d881fb84fe1b94b0dc1a6d70ffe6857bcb4004af2f9ea6221fac1d771082fe8620205baf30f1fcb12e4125e69929074044da988f5a6e8aef38919dedd1bb4e967af4dc560b2538c46a5006802f552ade7c019fa2e3812ac281448713a498a17d3b372c6cc5f625ad6678dd97a7e99021cc09cd052ea21231a698691d87530297e9"}, &(0x7f0000000000)=0xd8) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173611ef171e72fcdd010203010902120001000000004904000000020697d1f1fddd2e2632170000a74c1900030000000000000062d7994104ffd77719def4c2e9583cb94e79af4c5cb3cabec02a51990c456401451b127b494982c6fc50332d4eaad1dfb6130aa0d935cf4c1714f3c9b74d63715950e42824bd0e16100fe3d22e5cdf586d"], 0x0) 523.134943ms ago: executing program 9 (id=3375): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x8, 0x531100) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000100)='./file0\x00', 0x43) setreuid(0xee00, 0x0) r1 = getuid() chown(&(0x7f0000000180)='./file0\x00', r1, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = fanotify_init(0x0, 0x0) fanotify_mark(r4, 0x90, 0x0, 0xffffffffffffffff, 0x0) fchdir(r2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x17, 0x55, 0x1e5, 0x0, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440d4}, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x8}) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r6, 0x10c, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 521.934386ms ago: executing program 9 (id=3377): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r0, 0x18, 0x0, 0x5) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x4000000) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x14, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x28804}, 0x40000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {"0000000000000000001393000000dd00"}, 0x0, 0x0, 0x7fff}}}, 0x118) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002300)={0x7, {"a2e3ad214fc752f91b4809094bf70e0dd038e7ff7fc6e5539b326d078b089b3b083872090890e0878f0e1ac6e7049b3d68959b4c9a240d5b67f3988f7ef319520007ffe8d178708c523c921b1b5b08320d075d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7076600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed050000000000000046684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5399e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df2928924486cfff799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e74322f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df11fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fffffff7f00000000758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r8 = getpgrp(0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000140)={'\x00', 0x80, 0x385, 0x7, 0x8, 0x911e, r8}) r9 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = socket$kcm(0x10, 0x5, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), r13) sendmsg$IEEE802154_ADD_IFACE(r13, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r14, @ANYBLOB="d6e7b0ca2c242d1adfa531f02da000000000000000000784c1585ac29cb1ee090f2c761a58862636d13ba4c7510bf1a6a506085ec109c3f456029238d5ae0ae67b7e1b43ac9e3102305ae77804ecf5c6f6ee7e2e30dded529b830181aa9dfca1e266a040d260597a0fced6a1ed700387fcc9819f61e84bf3d3a772ce6c54bce08babbddf8be9ede1cbd480c86e4d0a46acfcb9326bdb17bfcaf0738491fff76182a1818ec7180e9c70aeebeda51f31e3529791088b03cc63823830c5edad0c1b631919fa20db0817171ad9320a0009f1cfd8"], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4) sendmsg$inet(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea6d0db160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}, {&(0x7f0000000380)="a45ef5248031b23fda65c39e8c4398170eb72ef337243c94a36de7eb34dcdb54dbb4cb2dab59c7517e4a6655cbb06e41122dcfa4afe132191d76ef7661b237103799681196ae837c62eae8b8cc952debcc512143c31f8e0300fd68b18fb2326d6a8b43a7ec2892d530a8cd7a9a77361ca3434f152ab328af80003e0a3f9dd163c4997c5f080f5e18de5fd79c2e48a331e3092573f9efe0e9d789058731f466d579d147e786c0ed9ecb0a3fe1544c82eca668886be9dd2cdf94942eecd94f6dbd060200000041752abd9f113ae842b5abf9646dd28f0fbde5b73c1f5bac561160fce8ee0afe6477e349fbed3ed774d6421dd30cc531adad1bdc"}], 0x2, 0x0, 0xfe0b, 0x1f00c00e}, 0x0) 452.080097ms ago: executing program 9 (id=3378): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fd, 0x101042) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000480)) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x20, 0x3, 0x17, 0xfffc, 0x0, 0x2, 0x0}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0xdacd, 0x9, 0x9, 0x9, 0x8, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x28}}, 0x24044891) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1800000015000100000000000000000002200000db5a218a53a9328cbf0a3c144b3d411461db02435bedfe3bfc7d282f5e05e38c6216991c6f23e360b58e3fb70c700047b6ab30abc889d518081cd46a3d9fa13c975512eeae133c55c1bfba9f69d706a15108ba89d3e102532d8e4fd51089190b58255f696a061b8a4d1501abf98ae8303daeaf2f5dbeb8ba1bad345099f75f", @ANYRES32=r8], 0x18}, 0x1, 0x0, 0x0, 0x11}, 0x0) r9 = socket$packet(0x11, 0xa, 0x300) recvmsg(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r10, 0x40187013, &(0x7f0000000040)) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000080)={0x1f, 0x3}, 0x6) write$bt_hci(r12, &(0x7f0000000000)=ANY=[], 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) fsopen(&(0x7f0000000180)='adfs\x00', 0x1) 241.552062ms ago: executing program 8 (id=3381): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000140)=0xffffffffffffffff, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) (async) r3 = dup(0xffffffffffffffff) readv(r3, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/26, 0x1a}], 0x1) (async, rerun: 32) r4 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x8000) (rerun: 32) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x1c99) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$lock(r5, 0x407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) syz_io_uring_setup(0x2a22, &(0x7f0000000080)={0x0, 0x703a, 0x1, 0xffffffff}, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r10, &(0x7f0000002240)={0x2020}, 0x2020) (async) writev(r10, &(0x7f0000002140)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f00000000c0)="37c860346c168009fbef0c", 0xb}], 0x2) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x3c}}, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r11 = syz_open_procfs(0x0, &(0x7f0000000180)='net/l2cap\x00') writev(r11, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 241.083961ms ago: executing program 8 (id=3382): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r9 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x4000) ioctl$NBD_SET_SOCK(r9, 0xab00, r1) ioctl$NBD_SET_FLAGS(r9, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES64=r7], 0x14}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}]}, 0x20}}, 0x400c004) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r12, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r13, &(0x7f0000001140), 0x700, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 178.495766ms ago: executing program 9 (id=3383): r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect(r0, &(0x7f00000000c0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) (async) connect(r0, &(0x7f00000000c0)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000440)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r3, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}}, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0100000000000000000000000000007f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000467531690000500011"], 0xa0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x8, 0x1, 0xb57, 0xfff9, 0x8b, 0x0, 0x4, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x8, 0x1, 0xb57, 0xfff9, 0x8b, 0x0, 0x4, 'syz1\x00'}) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) umount2(&(0x7f0000000040)='./file0\x00', 0xb) (async) umount2(&(0x7f0000000040)='./file0\x00', 0xb) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="15000000009a1e6b617d699cb79008000300", @ANYRES32=r9], 0x2c}}, 0x0) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r10, &(0x7f0000001880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r10, &(0x7f0000001300)={0xb8, 0x0, 0x3, [{{0x1, 0x0, 0x5, 0x9, 0xfff00, 0x5, {0x4, 0x3, 0x100, 0x8, 0x9, 0x5, 0x7, 0x0, 0x3, 0xa000, 0x5, r11, 0x0, 0x6, 0xb137}}, {0x3, 0x4, 0xc, 0x1, '/dev/radio#\x00'}}]}, 0xb8) shutdown(r1, 0x1) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r12 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r12, 0xc0205649, &(0x7f0000000240)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x5, '\x00', @p_u32=0x0}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) 178.287586ms ago: executing program 5 (id=3384): r0 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = openat$adsp1(0xffffff9c, &(0x7f00000002c0), 0x8082, 0x0) mmap$dsp(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0xa, 0x11, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@llc={0x4, {@snap={0x2, 0x0, '=', "3b8420", 0x1c, "f4f63d0f6aaf17d03790a84cfa4df86c0e0c093f674b0f474c0b2a3e33c221de94f97e2834bf1d54ee07c627c0f9b936e5790e14d720e3880ed550b35fd7590c515f879b888f3b738114684bbd6e9ba2d7fbfdc720c43d684f82936f9709872536eabc5772dde64aa9f53933d03d655eb03297e9e000db5ec6fda349c9a777ad3a9ae527bee90dff01611d08d1f05dd2be5675a8"}}}}}, &(0x7f00000001c0)={0x0, 0x4, [0x8df, 0x2ec, 0xb70, 0x958]}) semget$private(0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 178.174977ms ago: executing program 9 (id=3385): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000cc0)=@framed, &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d000900000000000000000002000000040000000c00018008"], 0x2c}}, 0x0) 120.435417ms ago: executing program 5 (id=3386): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="a1d1f5ff0000000000f2f600"/21, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000240)=0x5, 0x0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000180)="00823e1661579e9c1cfe3ccb12cd", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x2547, 0x280b02) socket$inet_udp(0x2, 0x2, 0x0) 120.267808ms ago: executing program 9 (id=3387): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004cc0)=ANY=[@ANYBLOB="1c0000001d0021000000000000070000000500"/28], 0x1c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x48, 0x0, &(0x7f00007d0000)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='efs\x00', 0x483, 0x0) 119.977513ms ago: executing program 5 (id=3388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 60.443179ms ago: executing program 5 (id=3389): r0 = io_uring_setup(0x4d57, &(0x7f0000000200)={0x0, 0xcb9c, 0x8, 0x1, 0x143}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_io_uring_setup(0x4a9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="ee000000", @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c0001"], 0x5c}, 0x1, 0xf000, 0x0, 0x8c1}, 0x20040) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000007"], 0x118}], 0x1}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r7, 0x107, 0x9, 0x0, &(0x7f0000000100)) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000240), 0x4) ioctl$sock_ifreq(r1, 0x8905, &(0x7f0000000100)={'bond0\x00', @ifru_names='rose0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400800, 0x4) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f00000001c0)={&(0x7f0000000180)={&(0x7f0000000100)="ff", 0x1, 0x1}}, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}]}]}, 0xd0}}, 0x0) 60.134355ms ago: executing program 5 (id=3390): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800c3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000016c0)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x4, {0x0, 0x0, 0x0, r4, {0xa}, {}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x40, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x6c}}, 0x0) fcntl$setlease(r0, 0x400, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x202000, 0x80, 0x4}, 0x18) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0xfb526000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) 0s ago: executing program 5 (id=3391): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0433"], 0xa) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) pipe(&(0x7f0000000100)) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='io_uring_create\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r3, &(0x7f0000001240)=[{&(0x7f0000000200)=""/34, 0x22}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): value for 'group_id' [ 217.016440][T14614] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 217.034975][T14612] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 217.037176][T14612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.085495][T14623] 9p filesystem being mounted at /284/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 217.119384][T14627] netlink: 'syz.4.2548': attribute type 1 has an invalid length. [ 217.160433][T14629] loop2: detected capacity change from 0 to 524287999 [ 217.164893][T14630] overlayfs: conflicting options: userxattr,metacopy=on [ 217.184169][T14625] netlink: 'syz.5.2547': attribute type 10 has an invalid length. [ 217.187742][T14632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.227669][T14638] syz.8.2552: attempt to access beyond end of device [ 217.227669][T14638] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 217.232477][T14638] exFAT-fs (nbd8): unable to read boot sector [ 217.234337][T14638] exFAT-fs (nbd8): failed to read boot sector [ 217.236190][T14638] exFAT-fs (nbd8): failed to recognize exfat type [ 217.285465][ T39] audit: type=1400 audit(3477497274.815:1190): avc: denied { mount } for pid=14641 comm="syz.4.2554" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 217.329102][T14644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=14644 comm=syz.8.2553 [ 217.511364][ T66] Bluetooth: hci0: command tx timeout [ 217.523998][T14674] fuse: Bad value for 'user_id' [ 217.525534][T14674] fuse: Bad value for 'user_id' [ 217.596537][ T39] audit: type=1800 audit(3477497275.125:1191): pid=14681 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.2567" name="nullb0" dev="tmpfs" ino=534 res=0 errno=0 [ 217.635223][ T39] audit: type=1400 audit(3477497275.165:1192): avc: denied { module_load } for pid=14682 comm="syz.4.2568" path="/38/bus" dev="tmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 217.635440][T14683] Invalid ELF header magic: != ELF [ 217.766114][ T39] audit: type=1400 audit(3477497275.295:1193): avc: denied { load_policy } for pid=14691 comm="syz.4.2571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 217.766255][T14692] SELinux: policydb string length 14080 does not match expected length 8 [ 217.774323][T14692] SELinux: failed to load policy [ 217.795743][T14692] pim6reg1: entered promiscuous mode [ 217.797382][T14692] pim6reg1: entered allmulticast mode [ 217.876647][T14700] ip6t_srh: unknown srh invflags 7863 [ 217.961116][T14708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.967103][T14709] 9p filesystem being mounted at /58/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 218.138315][T14732] [U] ŕ€E`ŢŘĘ_ňďČTvß=ćĽBĄ ˛›UŇôQ;Ö®Y±\9ž©Pţâ [ 218.290718][ T7434] e1000 0000:00:06.0 eth0: Reset adapter [ 218.391142][ T7434] e1000 0000:00:06.0 eth0: Reset adapter [ 218.490682][ T7434] e1000 0000:00:06.0 eth0: Reset adapter [ 218.502022][T14754] __nla_validate_parse: 8 callbacks suppressed [ 218.502032][T14754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2589'. [ 218.630312][T14758] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 218.632186][T14758] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 218.635785][T14758] vhci_hcd vhci_hcd.0: Device attached [ 218.638646][T14758] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 218.640570][T14758] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 218.643219][T14758] vhci_hcd vhci_hcd.0: Device attached [ 218.645168][T14759] vhci_hcd: connection closed [ 218.645239][T14761] vhci_hcd: connection closed [ 218.646477][T13667] vhci_hcd: stop threads [ 218.649409][T13667] vhci_hcd: release socket [ 218.650869][T13667] vhci_hcd: disconnect device [ 218.652995][T13667] vhci_hcd: stop threads [ 218.654250][T13667] vhci_hcd: release socket [ 218.655608][T13667] vhci_hcd: disconnect device [ 220.631213][ T7434] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 220.678096][T14771] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.680365][T14771] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.734735][T14771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.777308][T14771] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.779962][T14771] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.782724][T14771] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.785305][T14771] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.699801][T14777] lo speed is unknown, defaulting to 1000 [ 221.729353][T14785] netem: incorrect gi model size [ 221.731290][T14785] netem: change failed [ 221.826085][T14795] overlayfs: failed to clone upperpath [ 221.886636][T14796] fuse: Bad value for 'user_id' [ 221.888123][T14796] fuse: Bad value for 'user_id' [ 222.079623][T14798] overlayfs: missing 'lowerdir' [ 222.707284][T14809] overlayfs: failed to clone upperpath [ 222.894818][T14832] tmpfs: Bad value for 'mpol' [ 222.920841][T14834] trusted_key: encrypted_key: master key parameter is missing [ 223.027074][T14845] overlayfs: failed to clone upperpath [ 223.101833][T14847] netlink: 47 bytes leftover after parsing attributes in process `syz.9.2622'. [ 223.405601][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888060dc6000: rx timeout, send abort [ 223.408278][ C3] vxcan0: j1939_xtp_rx_abort_one: 0xffff888060dc6000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 223.556707][T14872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2630'. [ 223.822871][T14880] syz.5.2633: attempt to access beyond end of device [ 223.822871][T14880] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 223.826484][T14880] syz.5.2633: attempt to access beyond end of device [ 223.826484][T14880] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 223.830518][T14880] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 223.833594][T14880] syz.5.2633: attempt to access beyond end of device [ 223.833594][T14880] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 223.837562][T14880] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 223.840611][T14880] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 223.842773][T14880] UDF-fs: Scanning with blocksize 512 failed [ 223.844774][T14880] syz.5.2633: attempt to access beyond end of device [ 223.844774][T14880] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 223.848461][T14880] syz.5.2633: attempt to access beyond end of device [ 223.848461][T14880] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 223.852323][T14880] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 223.855069][T14880] syz.5.2633: attempt to access beyond end of device [ 223.855069][T14880] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 223.858767][T14880] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 223.861599][T14880] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 223.863817][T14880] UDF-fs: Scanning with blocksize 1024 failed [ 223.865764][T14880] syz.5.2633: attempt to access beyond end of device [ 223.865764][T14880] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 223.869464][T14880] syz.5.2633: attempt to access beyond end of device [ 223.869464][T14880] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 223.873597][T14880] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 223.876400][T14880] syz.5.2633: attempt to access beyond end of device [ 223.876400][T14880] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 223.880441][T14880] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 223.883140][T14880] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 223.885317][T14880] UDF-fs: Scanning with blocksize 2048 failed [ 223.888799][T14880] syz.5.2633: attempt to access beyond end of device [ 223.888799][T14880] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 223.892853][T14880] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 223.895615][T14880] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 223.898340][T14880] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 223.900621][T14880] UDF-fs: Scanning with blocksize 4096 failed [ 223.902420][T14880] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 223.961793][T14883] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 224.066902][T14891] 9pnet_fd: Insufficient options for proto=fd [ 224.189282][T14899] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 224.192758][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 224.192770][ T39] audit: type=1400 audit(3477497281.726:1200): avc: denied { relabelto } for pid=14898 comm="syz.5.2640" name="72" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 224.194311][T14900] batadv0: mtu less than device minimum [ 224.195020][ T39] audit: type=1400 audit(3477497281.726:1201): avc: denied { associate } for pid=14898 comm="syz.5.2640" name="72" dev="tmpfs" ino=405 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 224.205224][T14900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.220479][T14900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.226174][T14900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.231666][T14900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.236205][T14900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.239992][T14900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.245749][T14900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.250225][T14900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.254494][T14900] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 224.269681][T14902] batman_adv: batadv0: Adding interface: ip6gretap2 [ 224.271748][T14902] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 224.277276][T14902] batman_adv: batadv0: Interface activated: ip6gretap2 [ 224.338050][ T39] audit: type=1400 audit(3477497281.866:1202): avc: denied { write } for pid=13921 comm="syz-executor" name="72" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 224.349500][ T39] audit: type=1400 audit(3477497281.866:1203): avc: denied { remove_name } for pid=13921 comm="syz-executor" name="binderfs" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 224.357430][ T39] audit: type=1400 audit(3477497281.866:1204): avc: denied { rmdir } for pid=13921 comm="syz-executor" name="72" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 224.399087][T14911] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2643'. [ 224.435530][T14918] exFAT-fs (nbd8): unable to read boot sector [ 224.437330][T14918] exFAT-fs (nbd8): failed to read boot sector [ 224.439418][T14918] exFAT-fs (nbd8): failed to recognize exfat type [ 224.445944][T14920] fuse: Bad value for 'fd' [ 224.450205][T14921] overlayfs: failed to clone upperpath [ 224.476321][ T39] audit: type=1400 audit(3477497282.006:1205): avc: denied { read } for pid=14919 comm="syz.5.2647" path="socket:[64863]" dev="sockfs" ino=64863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.652283][ T39] audit: type=1400 audit(3477497282.186:1206): avc: denied { watch watch_reads } for pid=14940 comm="syz.8.2655" path="/proc/sys/net" dev="proc" ino=45512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=dir permissive=1 [ 225.066462][ T39] audit: type=1326 audit(3477497282.596:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14969 comm="syz.4.2665" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feed9f8cde9 code=0x0 [ 225.319969][T14974] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 225.597538][T14990] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2672'. [ 225.615501][T14994] XFS (nbd5): SB validate failed with error -5. [ 225.664352][T14994] tmpfs: Unknown parameter 'usa' [ 225.666957][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2677'. [ 225.669475][T15012] netlink: 'syz.8.2677': attribute type 22 has an invalid length. [ 225.671897][T15012] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2677'. [ 225.737858][T14994] could not allocate digest TFM handle cryptd(blake2b-160) [ 225.849424][ T39] audit: type=1400 audit(3477497283.376:1208): avc: denied { execute } for pid=15034 comm="syz.5.2684" path="/sys/kernel/debug/sync/sw_sync" dev="debugfs" ino=3892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 226.034431][ T39] audit: type=1400 audit(3477497283.566:1209): avc: denied { read } for pid=15026 comm="syz.9.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 226.045500][T15057] netlink: 344 bytes leftover after parsing attributes in process `syz.8.2690'. [ 226.499703][ T1455] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 226.659684][ T1455] usb 13-1: Using ep0 maxpacket: 32 [ 226.664715][ T1455] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 226.667167][ T1455] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 226.671620][ T1455] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 226.675838][ T1455] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 226.679546][ T1455] usb 13-1: config 0 interface 0 has no altsetting 0 [ 226.683115][ T1455] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 226.685824][ T1455] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 226.688269][ T1455] usb 13-1: Product: syz [ 226.689977][ T1455] usb 13-1: Manufacturer: syz [ 226.691425][ T1455] usb 13-1: SerialNumber: syz [ 226.693856][ T1455] usb 13-1: config 0 descriptor?? [ 226.697523][ T1455] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 226.701035][ T1455] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 226.844778][T15071] 9pnet_virtio: no channels available for device syz [ 226.950559][ T1455] usb 13-1: USB disconnect, device number 22 [ 226.950611][ C2] ldusb 13-1:0.0: usb_submit_urb failed (-19) [ 226.955502][ T1455] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 227.153674][T15069] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2694'. [ 227.156275][T15069] syz_tun: left allmulticast mode [ 227.157840][T15069] syz_tun: left promiscuous mode [ 227.159734][T15069] bridge0: port 3(syz_tun) entered disabled state [ 227.163378][T15069] bridge_slave_1: left allmulticast mode [ 227.165139][T15069] bridge_slave_1: left promiscuous mode [ 227.166878][T15069] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.169954][T15069] O#ă¤: left allmulticast mode [ 227.171373][T15069] O#ă¤: left promiscuous mode [ 227.173217][T15069] bridge0: port 1(O#ă¤) entered disabled state [ 227.217461][T15073] cgroup: release_agent respecified [ 227.217931][T15084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2698'. [ 227.445161][T15100] lo speed is unknown, defaulting to 1000 [ 227.781424][T15123] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 227.785807][T15123] netlink: 'syz.4.2707': attribute type 4 has an invalid length. [ 227.789299][T15123] netlink: 'syz.4.2707': attribute type 4 has an invalid length. [ 227.808853][T15123] hpfs: Bad magic ... probably not HPFS [ 227.809328][T15125] netlink: 'syz.5.2709': attribute type 10 has an invalid length. [ 227.818934][T15125] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 227.898436][T15144] netdevsim netdevsim4: Direct firmware load for /tun failed with error -2 [ 227.901667][T15144] netdevsim netdevsim4: Falling back to sysfs fallback for: /tun [ 228.156491][T15183] lo speed is unknown, defaulting to 1000 [ 228.268740][T15190] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2728'. [ 228.274200][T15190] netem: invalid attributes len -9 [ 228.275637][T15190] netem: change failed [ 228.356911][T15200] netlink: 4096 bytes leftover after parsing attributes in process `syz.8.2731'. [ 228.364931][T15200] overlay: Unknown parameter 'uid>00000000000000000000' [ 228.786748][T15218] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 229.010587][T15226] lo speed is unknown, defaulting to 1000 [ 229.057433][T15229] SET target dimension over the limit! [ 229.065402][T15222] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2737'. [ 229.239400][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 229.239410][ T39] audit: type=1400 audit(3477497286.766:1214): avc: denied { listen } for pid=15238 comm="syz.5.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.246477][ T39] audit: type=1400 audit(3477497286.766:1215): avc: denied { accept } for pid=15238 comm="syz.5.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.458390][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2746'. [ 229.464637][T15251] tipc: Started in network mode [ 229.466129][T15251] tipc: Node identity 4, cluster identity 4711 [ 229.467895][T15251] tipc: Node number set to 4 [ 229.469599][ T30] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 229.582541][T15257] net_ratelimit: 32 callbacks suppressed [ 229.582551][T15257] openvswitch: netlink: IP tunnel TTL not specified. [ 229.630332][ T30] usb 13-1: Using ep0 maxpacket: 8 [ 229.633898][ T30] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 229.636085][ T30] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 229.639956][ T30] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.643214][ T30] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.646271][ T30] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 229.651697][ T30] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 229.653818][ T30] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 229.656900][ T30] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.660116][ T30] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.663099][ T30] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 229.666864][ T30] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 229.668913][ T30] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 229.672268][ T30] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.675464][ T30] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.678443][ T30] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 229.684023][ T30] usb 13-1: string descriptor 0 read error: -22 [ 229.685782][ T30] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 229.688315][ T30] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.693339][ T30] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 229.898566][ T6985] usb 13-1: USB disconnect, device number 23 [ 230.153259][T15276] netlink: 'syz.9.2753': attribute type 1 has an invalid length. [ 230.155419][T15276] netlink: 112 bytes leftover after parsing attributes in process `syz.9.2753'. [ 230.165878][T15279] bond0: entered promiscuous mode [ 230.167341][T15279] bond_slave_0: entered promiscuous mode [ 230.168785][T15278] gfs2: not a GFS2 filesystem [ 230.169170][T15279] bond_slave_1: entered promiscuous mode [ 230.447996][T15299] overlayfs: failed to clone upperpath [ 230.502497][T15310] bio_check_eod: 4 callbacks suppressed [ 230.502506][T15310] syz.8.2766: attempt to access beyond end of device [ 230.502506][T15310] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0 [ 230.512111][T15310] syz.8.2766: attempt to access beyond end of device [ 230.512111][T15310] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0 [ 230.515698][T15310] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 230.518423][T15310] syz.8.2766: attempt to access beyond end of device [ 230.518423][T15310] nbd8: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 230.522642][T15310] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 230.525616][T15310] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 230.527754][T15310] UDF-fs: Scanning with blocksize 1024 failed [ 230.530830][T15310] syz.8.2766: attempt to access beyond end of device [ 230.530830][T15310] nbd8: rw=0, sector=64, nr_sectors = 4 limit=0 [ 230.534475][T15310] syz.8.2766: attempt to access beyond end of device [ 230.534475][T15310] nbd8: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 230.538105][T15310] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 230.541767][T15310] syz.8.2766: attempt to access beyond end of device [ 230.541767][T15310] nbd8: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 230.545670][T15310] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 230.548307][T15310] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 230.550693][T15310] UDF-fs: Scanning with blocksize 2048 failed [ 230.553186][T15310] syz.8.2766: attempt to access beyond end of device [ 230.553186][T15310] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0 [ 230.556763][T15310] syz.8.2766: attempt to access beyond end of device [ 230.556763][T15310] nbd8: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 230.560721][T15310] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 230.563585][T15310] syz.8.2766: attempt to access beyond end of device [ 230.563585][T15310] nbd8: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 230.567112][T15310] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 230.570133][T15310] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 230.572369][T15310] UDF-fs: Scanning with blocksize 4096 failed [ 230.574230][T15310] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 230.661383][T15331] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 230.694369][T15335] wg0 speed is unknown, defaulting to 1000 [ 230.696419][T15335] wg0 speed is unknown, defaulting to 1000 [ 230.698324][T15335] wg0 speed is unknown, defaulting to 1000 [ 230.702781][T15335] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 230.709567][T15335] wg0 speed is unknown, defaulting to 1000 [ 230.714523][T15335] wg0 speed is unknown, defaulting to 1000 [ 230.716776][T15335] wg0 speed is unknown, defaulting to 1000 [ 230.718932][T15335] wg0 speed is unknown, defaulting to 1000 [ 230.721424][T15335] wg0 speed is unknown, defaulting to 1000 [ 230.723744][T15335] wg0 speed is unknown, defaulting to 1000 [ 230.725920][T15335] wg0 speed is unknown, defaulting to 1000 [ 230.728089][T15335] wg0 speed is unknown, defaulting to 1000 [ 230.730665][T15335] wg0 speed is unknown, defaulting to 1000 [ 230.732779][T15335] wg0 speed is unknown, defaulting to 1000 [ 231.446306][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2777'. [ 231.516272][T15359] No control pipe specified [ 231.570134][T15363] overlayfs: failed to resolve './file1': -2 [ 231.661370][ T5993] IPVS: starting estimator thread 0... [ 231.749346][T15376] IPVS: using max 39 ests per chain, 93600 per kthread [ 231.758991][T15390] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 231.787538][T15399] overlayfs: failed to clone upperpath [ 231.929185][ T7434] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 231.971761][T15411] netlink: zone id is out of range [ 231.973291][T15411] netlink: zone id is out of range [ 231.974758][T15411] netlink: zone id is out of range [ 231.976218][T15411] netlink: zone id is out of range [ 231.977765][T15411] netlink: zone id is out of range [ 231.979289][T15412] netlink: zone id is out of range [ 231.979298][T15412] netlink: zone id is out of range [ 231.979301][T15412] netlink: zone id is out of range [ 231.979305][T15412] netlink: zone id is out of range [ 232.040140][ T39] audit: type=1400 audit(3477497289.576:1216): avc: denied { accept } for pid=15410 comm="syz.9.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 232.052970][T15414] netfs: Couldn't get user pages (rc=-14) [ 232.079214][ T7434] usb 13-1: Using ep0 maxpacket: 8 [ 232.081997][ T7434] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 232.085489][ T7434] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.089333][ T7434] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.092276][ T7434] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.095080][ T7434] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.098592][ T7434] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 232.101166][ T7434] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.168146][T15417] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2798'. [ 232.179326][ T39] audit: type=1800 audit(3477497289.716:1217): pid=15417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2798" name="file1" dev="tmpfs" ino=468 res=0 errno=0 [ 232.214138][T15421] netfs: Couldn't get user pages (rc=-14) [ 232.216052][T15421] netfs: Zero-sized read [R=22] [ 232.244068][T15427] overlayfs: empty lowerdir [ 232.293452][ T39] audit: type=1400 audit(3477497289.826:1218): avc: denied { getopt } for pid=15428 comm="syz.4.2802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 232.296360][T15431] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2801'. [ 232.328161][ T7434] usb 13-1: usb_control_msg returned -71 [ 232.331605][ T39] audit: type=1400 audit(3477497289.866:1219): avc: denied { unmount } for pid=9978 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 232.332205][ T7434] usbtmc 13-1:16.0: can't read capabilities [ 232.346914][ T7434] usb 13-1: USB disconnect, device number 24 [ 232.504460][ T39] audit: type=1400 audit(3477497290.036:1220): avc: denied { bind } for pid=15450 comm="syz.5.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 232.571498][T15464] netlink: 280 bytes leftover after parsing attributes in process `syz.8.2810'. [ 232.713277][ T39] audit: type=1400 audit(3477497290.246:1221): avc: denied { map } for pid=15487 comm="syz.4.2818" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 232.720694][ T39] audit: type=1400 audit(3477497290.246:1222): avc: denied { execute } for pid=15487 comm="syz.4.2818" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 232.779844][ T39] audit: type=1400 audit(3477497290.316:1223): avc: denied { unmount } for pid=14054 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 232.788147][T15503] overlayfs: conflicting lowerdir path [ 232.808714][T15506] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 232.811217][T15506] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 232.814913][T15506] vhci_hcd vhci_hcd.0: Device attached [ 232.820363][T15507] vhci_hcd: connection closed [ 232.821703][T13668] vhci_hcd: stop threads [ 232.824929][T13668] vhci_hcd: release socket [ 232.826232][T13668] vhci_hcd: disconnect device [ 232.916747][T15526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=15526 comm=syz.8.2827 [ 232.941341][T15531] vlan2: entered allmulticast mode [ 233.045783][T15544] pimreg: entered allmulticast mode [ 233.078631][T15548] devtmpfs: Cannot enable quota on remount [ 233.137849][T15552] /dev/nullb0: Can't lookup blockdev [ 233.399063][T15581] bridge0: port 3(syz_tun) entered blocking state [ 233.401050][T15581] bridge0: port 3(syz_tun) entered disabled state [ 233.403048][T15581] syz_tun: entered allmulticast mode [ 233.405295][T15581] syz_tun: entered promiscuous mode [ 233.578101][T15589] netlink: 14601 bytes leftover after parsing attributes in process `syz.8.2847'. [ 233.616507][T15591] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2848'. [ 233.664498][T13865] Bluetooth: hci1: Frame reassembly failed (-84) [ 233.666834][T15593] Bluetooth: hci1: Frame reassembly failed (-84) [ 233.882216][T15607] netlink: 'syz.9.2854': attribute type 3 has an invalid length. [ 233.884440][T15607] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2854'. [ 233.914303][T15609] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 233.967289][T15615] overlayfs: failed to clone upperpath [ 234.133937][T15624] __nla_validate_parse: 1 callbacks suppressed [ 234.133947][T15624] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2860'. [ 234.138761][T15624] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2860'. [ 234.309020][ T5964] Bluetooth: hci0: command 0x0405 tx timeout [ 234.309069][ T66] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 234.814872][T15635] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2865'. [ 235.032574][T15653] overlayfs: failed to clone upperpath [ 235.386333][T15669] 9p filesystem being mounted at /517/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 235.592225][T15683] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2880'. [ 235.596758][T15683] netlink: 112 bytes leftover after parsing attributes in process `syz.9.2880'. [ 235.669073][ T5958] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 235.669083][ T66] Bluetooth: hci1: command 0x1003 tx timeout [ 235.715311][T15691] 9pnet_fd: Insufficient options for proto=fd [ 235.717289][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 235.717297][ T39] audit: type=1400 audit(3477497293.247:1226): avc: denied { mounton } for pid=15690 comm="syz.8.2883" path=2F3335312FE91F7189591E9233614B dev="tmpfs" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 235.745953][T15691] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2883'. [ 235.776047][T15701] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 235.782299][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2885'. [ 236.158951][ T6012] usb 13-1: new high-speed USB device number 25 using dummy_hcd [ 236.309040][ T6012] usb 13-1: Using ep0 maxpacket: 8 [ 236.312954][ T6012] usb 13-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 236.315934][ T6012] usb 13-1: config 246 descriptor has 1 excess byte, ignoring [ 236.318125][ T6012] usb 13-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 236.321009][ T6012] usb 13-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 236.324347][ T6012] usb 13-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 236.327650][ T6012] usb 13-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 236.330921][ T6012] usb 13-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 236.334762][ T6012] usb 13-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 236.337365][ T6012] usb 13-1: config 246 descriptor has 1 excess byte, ignoring [ 236.339669][ T6012] usb 13-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 236.342320][ T6012] usb 13-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 236.345696][ T6012] usb 13-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 236.349104][ T6012] usb 13-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 236.352358][ T6012] usb 13-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 236.356144][ T6012] usb 13-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 236.359052][ T6012] usb 13-1: config 246 descriptor has 1 excess byte, ignoring [ 236.361813][ T6012] usb 13-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 236.364537][ T6012] usb 13-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 236.367900][ T6012] usb 13-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 236.371402][ T6012] usb 13-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 236.374720][ T6012] usb 13-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 236.380731][ T6012] usb 13-1: string descriptor 0 read error: -22 [ 236.382587][ T6012] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 236.385182][ T6012] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.390731][ T6012] adutux 13-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 236.422694][T15726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2894'. [ 236.498915][T15740] netlink: 'syz.9.2899': attribute type 2 has an invalid length. [ 236.502002][T15740] netlink: 16138 bytes leftover after parsing attributes in process `syz.9.2899'. [ 236.525504][T15747] netlink: 'syz.9.2901': attribute type 4 has an invalid length. [ 236.533523][ T6012] lo speed is unknown, defaulting to 1000 [ 236.535704][ T6012] lo speed is unknown, defaulting to 1000 [ 236.537808][T15747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15747 comm=syz.9.2901 [ 236.564592][T15749] /dev/sr0: Can't lookup blockdev [ 236.594071][T15753] lo speed is unknown, defaulting to 1000 [ 236.631619][T15753] wg0 speed is unknown, defaulting to 1000 [ 236.651998][ T30] usb 13-1: USB disconnect, device number 25 [ 236.666707][T15757] lo speed is unknown, defaulting to 1000 [ 236.706438][T15757] wg0 speed is unknown, defaulting to 1000 [ 236.734248][T15764] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15764 comm=syz.5.2907 [ 236.738078][T15764] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15764 comm=syz.5.2907 [ 238.110326][T15815] netlink: 'syz.9.2921': attribute type 16 has an invalid length. [ 238.112586][T15815] netlink: 'syz.9.2921': attribute type 3 has an invalid length. [ 238.114797][T15815] netlink: 'syz.9.2921': attribute type 1 has an invalid length. [ 238.116997][T15815] netlink: 'syz.9.2921': attribute type 2 has an invalid length. [ 238.119254][T15815] netlink: 64022 bytes leftover after parsing attributes in process `syz.9.2921'. [ 238.258452][ T39] audit: type=1400 audit(3477497295.787:1227): avc: denied { add_name } for pid=15830 comm="syz.5.2926" name="file1" dev="tmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 238.260218][T15831] overlayfs: failed to get inode (-116) [ 238.267602][T15831] overlayfs: failed to get inode (-116) [ 238.271189][T15831] overlayfs: failed to get inode (-116) [ 238.272819][T15831] overlayfs: failed to get inode (-116) [ 238.355206][T15848] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 238.368376][T15850] 9p filesystem being mounted at /546/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 238.407992][ T39] audit: type=1804 audit(3477497295.937:1228): pid=15856 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2936" name="/newroot/151/file0" dev="tmpfs" ino=847 res=1 errno=0 [ 238.416591][ T39] audit: type=1804 audit(3477497295.947:1229): pid=15857 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2936" name="/newroot/151/file0" dev="tmpfs" ino=847 res=1 errno=0 [ 238.430405][ T39] audit: type=1804 audit(3477497295.947:1230): pid=15858 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2936" name="/newroot/151/file0" dev="tmpfs" ino=847 res=1 errno=0 [ 239.271818][T15889] loop6: detected capacity change from 0 to 524287999 [ 239.274395][ C3] blk_print_req_error: 147 callbacks suppressed [ 239.274404][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.279044][ C3] buffer_io_error: 107 callbacks suppressed [ 239.279051][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.283219][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.285904][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.288344][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.291184][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.293801][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.296685][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.299294][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.302164][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.305020][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.307841][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.312824][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.315515][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.317950][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.320786][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.323469][T15889] ldm_validate_partition_table(): Disk read failed. [ 239.325424][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.328346][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.368973][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.371632][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.374241][T15889] Dev loop6: unable to read RDB block 0 [ 239.376897][T15889] loop6: unable to read partition table [ 239.379003][T15889] loop_reread_partitions: partition scan of loop6 (3ź ľxłCÖ) failed (rc=-5) [ 239.383021][T15890] ldm_validate_partition_table(): Disk read failed. [ 239.385395][T15890] Dev loop6: unable to read RDB block 0 [ 239.387650][T15890] loop6: unable to read partition table [ 239.389642][T15890] loop_reread_partitions: partition scan of loop6 (3ź ľxłCÖ) failed (rc=-5) [ 239.396362][ T5355] ldm_validate_partition_table(): Disk read failed. [ 239.399048][ T5355] Dev loop6: unable to read RDB block 0 [ 239.403200][ T5355] loop6: unable to read partition table [ 239.492955][T15901] netlink: 'syz.9.2949': attribute type 5 has an invalid length. [ 239.547513][ T39] audit: type=1800 audit(3477497297.077:1231): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2951" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 239.598601][ T5958] Bluetooth: hci0: command 0x0405 tx timeout [ 239.601677][T15912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.606428][ T39] audit: type=1800 audit(3477497297.137:1232): pid=15912 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.2953" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 239.638638][T15914] __nla_validate_parse: 1 callbacks suppressed [ 239.638648][T15914] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2952'. [ 239.767291][T15916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15916 comm=syz.5.2954 [ 239.797356][ T39] audit: type=1400 audit(3477497297.327:1233): avc: denied { read } for pid=15917 comm="syz.5.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 239.827388][T15922] random: crng reseeded on system resumption [ 239.864049][T15926] batadv_slave_1: entered promiscuous mode [ 239.880407][T15925] batadv_slave_1: left promiscuous mode [ 239.995785][ T39] audit: type=1400 audit(3477497297.527:1234): avc: denied { ioctl } for pid=15921 comm="syz.5.2957" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 240.238824][T15946] lo speed is unknown, defaulting to 1000 [ 240.278742][T15946] wg0 speed is unknown, defaulting to 1000 [ 240.318185][ T39] audit: type=1326 audit(3477497297.847:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15945 comm="syz.9.2965" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc18518cde9 code=0x0 [ 241.011571][T15977] overlayfs: workdir and upperdir must be separate subtrees [ 241.181519][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 241.181529][ T39] audit: type=1400 audit(3477497811.713:1238): avc: denied { setattr } for pid=15982 comm="syz.8.2975" name="zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 241.267109][T15987] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2976'. [ 241.375710][T15987] hsr_slave_1 (unregistering): left promiscuous mode [ 241.618532][T16001] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 241.717050][T16013] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:0 [ 241.748458][T16021] lo speed is unknown, defaulting to 1000 [ 241.818679][T16031] netlink: 'syz.4.2989': attribute type 11 has an invalid length. [ 241.861794][T16021] wg0 speed is unknown, defaulting to 1000 [ 241.865718][ T39] audit: type=1400 audit(3477497812.389:1239): avc: denied { cmd } for pid=16032 comm="syz.4.2990" path="socket:[71721]" dev="sockfs" ino=71721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 242.032423][T16052] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 242.035832][T16052] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 242.073154][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2995'. [ 242.123155][ T39] audit: type=1400 audit(3477497812.647:1240): avc: denied { accept } for pid=16064 comm="syz.4.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.160702][T16068] netlink: 'syz.4.2998': attribute type 4 has an invalid length. [ 242.224121][T14643] syz_tun (unregistering): left allmulticast mode [ 242.226435][T14643] syz_tun (unregistering): left promiscuous mode [ 242.228397][T14643] bridge0: port 3(syz_tun) entered disabled state [ 242.452689][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.465118][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.471201][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.474680][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.476054][ T39] audit: type=1400 audit(3477497812.994:1241): avc: denied { mounton } for pid=16079 comm="syz.8.3003" path="/373/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 242.478885][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 242.486062][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.507638][T16074] lo speed is unknown, defaulting to 1000 [ 242.543201][T16074] wg0 speed is unknown, defaulting to 1000 [ 242.594512][T16074] chnl_net:caif_netlink_parms(): no params data found [ 242.654351][T16074] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.656561][T16074] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.659330][T16074] bridge_slave_0: entered allmulticast mode [ 242.661639][T16074] bridge_slave_0: entered promiscuous mode [ 242.665329][T16074] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.667489][T16074] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.669988][T16074] bridge_slave_1: entered allmulticast mode [ 242.672320][T16074] bridge_slave_1: entered promiscuous mode [ 242.704012][T16074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.707943][T16074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.732532][T16074] team0: Port device team_slave_0 added [ 242.735634][T16074] team0: Port device team_slave_1 added [ 242.762440][T16074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.764498][T16074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.772108][T16074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.775979][T16074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.778009][T16074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.785487][T16074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.814572][T16074] hsr_slave_0: entered promiscuous mode [ 242.816660][T16074] hsr_slave_1: entered promiscuous mode [ 242.818552][T16074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.821383][T16074] Cannot create hsr debugfs directory [ 242.823245][T16137] netlink: 'syz.5.3013': attribute type 7 has an invalid length. [ 242.851157][T16143] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 242.854265][T16143] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 243.102276][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 243.196237][T16074] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.199710][T16074] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.203927][T16074] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.207172][T16074] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.223132][T16074] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.225272][T16074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.227497][T16074] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.229526][T16074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.253287][T16074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.264654][T13662] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.266728][ T9] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 243.266744][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.266755][ T9] usb 10-1: Product: syz [ 243.266762][ T9] usb 10-1: Manufacturer: syz [ 243.266770][ T9] usb 10-1: SerialNumber: syz [ 243.279002][ T9] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 243.280048][T13662] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.297790][ T5993] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 243.299727][T16074] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.311655][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.313780][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.316637][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.318706][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.331427][T16074] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.338942][T16074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.403012][T16074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.491894][T16074] veth0_vlan: entered promiscuous mode [ 243.496717][T16074] veth1_vlan: entered promiscuous mode [ 243.503670][T16143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.507697][T16074] veth0_macvtap: entered promiscuous mode [ 243.508103][T16143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.511179][T16074] veth1_macvtap: entered promiscuous mode [ 243.518815][T16074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.521845][T16074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.524655][T16074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.527987][T16074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.530817][T16074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.533818][T16074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.537530][T16074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.540549][T16074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.543344][T16074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.546677][T16074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.549519][T16074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.552525][T16074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.555330][T16074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.558407][T16074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.561856][T16074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.568624][T16074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.571635][T16074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.574457][T16074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.577584][T16074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.580420][T16074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.583393][T16074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.586321][T16074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.589341][T16074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.592155][T16074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.595146][T16074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.598056][T16074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.601037][T16074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.603822][T16074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.607057][T16074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.610447][T16074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.615332][T16074] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.618103][T16074] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.620649][T16074] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.623169][T16074] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.651817][ T6123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.654256][ T6123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.665968][ T6123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.668551][ T6123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.753990][ T7434] usb 10-1: USB disconnect, device number 7 [ 244.333123][ T5993] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 244.336307][ T5993] ath9k_htc: Failed to initialize the device [ 244.337514][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3015'. [ 244.342465][ T7434] usb 10-1: ath9k_htc: USB layer deinitialized [ 244.517055][T16217] netlink: 'syz.5.3018': attribute type 1 has an invalid length. [ 244.526232][T16217] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 244.529253][T16217] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 244.533347][T16217] bond1: (slave ip6gre1): making interface the new active one [ 244.536059][T16217] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 245.431461][ T39] audit: type=1326 audit(3477497815.921:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 245.438005][ T39] audit: type=1326 audit(3477497815.921:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 245.445591][ T39] audit: type=1326 audit(3477497815.921:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 245.452218][ T39] audit: type=1326 audit(3477497815.921:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 245.458669][ T39] audit: type=1326 audit(3477497815.921:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 245.465898][ T39] audit: type=1326 audit(3477497815.921:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 245.668862][T16236] tipc: Failed to obtain node identity [ 245.670519][T16236] tipc: Enabling of bearer rejected, failed to enable media [ 245.697701][T16239] netlink: 87 bytes leftover after parsing attributes in process `syz.9.3024'. [ 245.853764][T16249] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3029'. [ 245.892962][T13667] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.012174][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.025778][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.028697][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.031231][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.033648][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 246.037345][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.072759][T16266] lo speed is unknown, defaulting to 1000 [ 246.110619][T16272] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3035'. [ 246.112913][T16266] wg0 speed is unknown, defaulting to 1000 [ 246.113571][T16272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16272 comm=syz.9.3035 [ 246.120095][T16272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=16272 comm=syz.9.3035 [ 246.180082][T16266] chnl_net:caif_netlink_parms(): no params data found [ 246.185611][T16281] 9pnet_fd: Insufficient options for proto=fd [ 246.227284][ T39] kauditd_printk_skb: 9302 callbacks suppressed [ 246.227294][ T39] audit: type=1326 audit(3477497816.714:10550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 246.238827][ T39] audit: type=1326 audit(3477497816.724:10551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 246.245229][ T39] audit: type=1326 audit(3477497816.724:10552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 246.252347][ T39] audit: type=1326 audit(3477497816.724:10553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 246.259217][ T39] audit: type=1326 audit(3477497816.724:10554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 246.263550][T16266] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.265661][ T39] audit: type=1326 audit(3477497816.724:10555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 246.265680][ T39] audit: type=1326 audit(3477497816.724:10556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 246.265696][ T39] audit: type=1326 audit(3477497816.724:10557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 246.268446][T16266] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.274890][ T39] audit: type=1326 audit(3477497816.724:10558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 246.282833][T16266] bridge_slave_0: entered allmulticast mode [ 246.287938][ T39] audit: type=1326 audit(3477497816.724:10559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.5.3021" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa120f8cde9 code=0x7ff00000 [ 246.290870][T16266] bridge_slave_0: entered promiscuous mode [ 246.310148][T16266] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.312298][T16266] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.314449][T16266] bridge_slave_1: entered allmulticast mode [ 246.316811][T16266] bridge_slave_1: entered promiscuous mode [ 246.341923][T16266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.346151][T16266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.376578][T16266] team0: Port device team_slave_0 added [ 246.383736][T16266] team0: Port device team_slave_1 added [ 246.402730][T16266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.404792][T16266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.413224][T16266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.417100][T16266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.419621][T16266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.426972][T16266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.464672][T16266] hsr_slave_0: entered promiscuous mode [ 246.467020][T16266] hsr_slave_1: entered promiscuous mode [ 246.468931][T16266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.471314][T16266] Cannot create hsr debugfs directory [ 246.700992][ T6012] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 246.840471][T16299] /dev/sr0: Can't lookup blockdev [ 246.842220][T16299] /dev/sr0: Can't lookup blockdev [ 246.843838][T16299] /dev/sr0: Can't lookup blockdev [ 246.845380][T16299] /dev/sr0: Can't lookup blockdev [ 246.846989][T16299] /dev/sr0: Can't lookup blockdev [ 246.848578][T16299] /dev/sr0: Can't lookup blockdev [ 246.873309][ T6012] usb 13-1: Using ep0 maxpacket: 8 [ 246.876126][ T6012] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 246.878276][ T6012] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.881268][ T6012] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.884429][ T6012] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.887396][ T6012] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.891094][ T6012] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.893517][ T6012] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.900335][T16301] 9pnet_fd: Insufficient options for proto=fd [ 247.029079][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3046'. [ 247.111604][ T6012] usb 13-1: usb_control_msg returned -32 [ 247.113132][ T6012] usbtmc 13-1:16.0: can't read capabilities [ 247.467012][T16313] usbtmc 13-1:16.0: INITIATE_ABORT_BULK_OUT returned 12 [ 247.673436][ T5993] usb 13-1: USB disconnect, device number 26 [ 247.727689][T13667] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.791060][T13667] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.851923][T13667] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.945112][T13667] bridge_slave_1: left allmulticast mode [ 247.946690][T13667] bridge_slave_1: left promiscuous mode [ 247.948291][T13667] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.957860][T13667] bridge_slave_0: left allmulticast mode [ 247.959446][T13667] bridge_slave_0: left promiscuous mode [ 247.963345][T13667] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.127417][ T5958] Bluetooth: hci0: command tx timeout [ 248.280664][T13667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.285821][T13667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.289384][T13667] bond0 (unregistering): Released all slaves [ 248.592444][T13667] hsr_slave_0: left promiscuous mode [ 248.594314][T13667] hsr_slave_1: left promiscuous mode [ 248.596091][T13667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.598142][T13667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.600450][T13667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.602434][T13667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.638519][T13667] veth1_macvtap: left promiscuous mode [ 248.640219][T13667] veth0_macvtap: left promiscuous mode [ 248.641868][T13667] veth1_vlan: left promiscuous mode [ 248.643413][T13667] veth0_vlan: left promiscuous mode [ 248.786865][ T7434] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 248.943878][ T7434] usb 10-1: Using ep0 maxpacket: 32 [ 248.946666][ T7434] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 248.949341][ T7434] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.952685][ T7434] usb 10-1: config 0 descriptor?? [ 249.509739][T13667] team0 (unregistering): Port device team_slave_1 removed [ 249.608091][T13667] team0 (unregistering): Port device team_slave_0 removed [ 250.227672][ T5958] Bluetooth: hci0: command tx timeout [ 250.406975][ T7434] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 250.413149][ T7434] usb 10-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 250.416201][ T7434] usb 10-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 250.445590][T16266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.449313][T16266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.455585][T16266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.468565][T16266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.528895][T16266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.538190][T16354] net_ratelimit: 13 callbacks suppressed [ 250.538200][T16354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.547027][T16266] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.573626][T13668] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.576274][T13668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.581934][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.584073][ T6123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.676080][T16266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.714528][T16375] tmpfs: Unknown parameter '00000000000000000000000' [ 250.715081][T16376] xt_hashlimit: size too large, truncated to 1048576 [ 250.718708][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3060'. [ 250.766392][T16383] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3062'. [ 250.772727][T16384] xt_hashlimit: size too large, truncated to 1048576 [ 250.777621][T16266] veth0_vlan: entered promiscuous mode [ 250.781521][T16266] veth1_vlan: entered promiscuous mode [ 250.790928][T16266] veth0_macvtap: entered promiscuous mode [ 250.798917][T16266] veth1_macvtap: entered promiscuous mode [ 250.805348][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.808673][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.811467][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.815312][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.818083][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.820982][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.823824][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.826760][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.829510][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.832557][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.835346][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.838283][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.841036][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.844028][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.847498][T16266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.857495][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.860449][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.864690][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.867711][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.870483][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.877131][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.879989][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.884503][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.887295][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.890291][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.893205][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.896110][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.898856][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.901831][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.905320][T16266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.909204][T16266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.911700][T16266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.914558][T16266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.917063][T16266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.949522][T16393] overlayfs: failed to clone upperpath [ 250.978101][T13668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.980454][T13668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.994634][T13668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.998859][T13668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.018761][T16413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3070'. [ 251.023605][T16413] tmpfs: Bad value for 'mpol' [ 251.025278][T16413] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3070'. [ 251.230767][T16427] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3075'. [ 251.378653][ T39] kauditd_printk_skb: 34958 callbacks suppressed [ 251.378664][ T39] audit: type=1400 audit(3477497821.835:45518): avc: denied { append } for pid=16432 comm="syz.8.3077" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 251.597271][T16454] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3080'. [ 251.611138][T16454] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3080'. [ 251.663330][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3080'. [ 251.817878][T16474] netlink: 'syz.9.3086': attribute type 178 has an invalid length. [ 251.928788][T16490] tmpfs: Group quota block hardlimit too large. [ 251.935244][T16490] tun0: tun_chr_ioctl cmd 1074025675 [ 251.936599][ T39] audit: type=1400 audit(3477497822.381:45519): avc: denied { bind } for pid=16491 comm="syz.9.3092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 251.936831][T16490] tun0: persist enabled [ 251.945274][T16490] tun0: tun_chr_ioctl cmd 1074025675 [ 251.946843][T16490] tun0: persist enabled [ 252.005702][ T39] audit: type=1400 audit(3477497822.451:45520): avc: denied { read } for pid=16501 comm="syz.9.3095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 252.057385][ T39] audit: type=1400 audit(3477497822.501:45521): avc: denied { setopt } for pid=16501 comm="syz.9.3095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 252.176816][T16520] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3101'. [ 252.246434][T16526] tmpfs: Bad value for 'mpol' [ 252.260408][T16528] nfs4: Bad value for 'source' [ 252.290030][T16532] bridge0: port 1(gretap0) entered blocking state [ 252.291994][T16532] bridge0: port 1(gretap0) entered disabled state [ 252.294322][T16532] gretap0: entered allmulticast mode [ 252.296469][T16532] gretap0: entered promiscuous mode [ 252.299658][T16532] gretap0: left allmulticast mode [ 252.301104][T16532] gretap0: left promiscuous mode [ 252.305670][T16532] bridge0: port 1(gretap0) entered disabled state [ 252.317010][T16532] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3106'. [ 252.323953][ T39] audit: type=1400 audit(3477497822.769:45522): avc: denied { write } for pid=16529 comm="syz.5.3105" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 252.344836][T16536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16536 comm=syz.9.3107 [ 252.384084][T16530] syz.5.3105: attempt to access beyond end of device [ 252.384084][T16530] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 252.387734][T16530] syz.5.3105: attempt to access beyond end of device [ 252.387734][T16530] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 252.391309][T16530] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 252.394267][T16530] syz.5.3105: attempt to access beyond end of device [ 252.394267][T16530] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 252.397798][T16530] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 252.400776][T16530] syz.5.3105: attempt to access beyond end of device [ 252.400776][T16530] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 252.413645][T16530] syz.5.3105: attempt to access beyond end of device [ 252.413645][T16530] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 252.417321][T16530] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 252.419984][T16530] syz.5.3105: attempt to access beyond end of device [ 252.419984][T16530] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 252.423882][T16530] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 252.426936][T16530] syz.5.3105: attempt to access beyond end of device [ 252.426936][T16530] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 252.430549][T16530] syz.5.3105: attempt to access beyond end of device [ 252.430549][T16530] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 252.434172][T16530] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 252.436971][T16530] syz.5.3105: attempt to access beyond end of device [ 252.436971][T16530] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 252.440765][T16530] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 252.443654][T16530] syz.5.3105: attempt to access beyond end of device [ 252.443654][T16530] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 252.447285][T16530] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 252.450000][T16530] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 252.452546][T16530] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 252.457393][T16529] block nbd5: shutting down sockets [ 252.493753][T16552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2312 sclass=netlink_route_socket pid=16552 comm=syz.5.3110 [ 252.499889][T16552] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.502447][T16552] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.505117][T16552] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.507542][T16552] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.511066][T16552] vxlan0: entered promiscuous mode [ 252.512565][T16552] vxlan0: entered allmulticast mode [ 252.515567][T16552] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.518098][T16552] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.520636][T16552] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.523110][T16552] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.620134][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3113'. [ 252.904360][ T39] audit: type=1400 audit(3477497823.345:45523): avc: denied { setattr } for pid=16591 comm="syz.5.3121" name="NETLINK" dev="sockfs" ino=74350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 252.997201][T16605] syzkaller0: entered promiscuous mode [ 252.999437][T16605] syzkaller0: entered allmulticast mode [ 253.001619][T16605] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 253.160437][T16618] 9pnet: Could not find request transport: Éo=0x0000000000000006 [ 253.326829][T13668] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.457281][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.460292][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.466095][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.470944][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.473370][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 253.475483][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.495427][T16634] lo speed is unknown, defaulting to 1000 [ 253.535298][T16634] wg0 speed is unknown, defaulting to 1000 [ 253.586676][T16634] chnl_net:caif_netlink_parms(): no params data found [ 253.640241][T16634] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.650507][T16634] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.652819][T16634] bridge_slave_0: entered allmulticast mode [ 253.654999][T16634] bridge_slave_0: entered promiscuous mode [ 253.663984][T16634] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.666056][T16634] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.666629][T16643] dns_resolver: Unsupported content type (234) [ 253.668168][T16634] bridge_slave_1: entered allmulticast mode [ 253.672085][T16634] bridge_slave_1: entered promiscuous mode [ 253.696749][T16634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.700555][T16634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.715661][ T39] audit: type=1400 audit(3477497824.149:45524): avc: denied { connect } for pid=16646 comm="syz.9.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 253.732572][T16634] team0: Port device team_slave_0 added [ 253.736329][T16634] team0: Port device team_slave_1 added [ 253.759462][T16634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.761937][T16634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.770797][T16634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.775110][T16634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.777142][T16634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.785301][T16634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.800503][T16652] xt_CT: No such helper "pptp" [ 253.812015][T16634] hsr_slave_0: entered promiscuous mode [ 253.814593][T16634] hsr_slave_1: entered promiscuous mode [ 253.816477][T16634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.818646][T16634] Cannot create hsr debugfs directory [ 254.313721][T16703] overlay: filesystem on ./bus not supported as upperdir [ 254.315513][ T39] audit: type=1400 audit(3477497824.745:45525): avc: denied { watch watch_reads } for pid=16704 comm="syz.9.3155" path="pipe:[42382]" dev="pipefs" ino=42382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 254.325404][T16703] overlay: filesystem on ./bus not supported as upperdir [ 254.330780][T16703] overlay: filesystem on ./bus not supported as upperdir [ 254.333469][T16703] overlay: filesystem on ./bus not supported as upperdir [ 254.337854][T16703] overlay: filesystem on ./bus not supported as upperdir [ 254.342448][T16703] overlay: filesystem on ./bus not supported as upperdir [ 254.344950][T16703] overlay: filesystem on ./bus not supported as upperdir [ 254.348671][T16703] overlay: filesystem on ./bus not supported as upperdir [ 254.351515][T16703] overlay: filesystem on ./bus not supported as upperdir [ 254.354208][T16703] overlay: filesystem on ./bus not supported as upperdir [ 254.357188][T16703] overlay: filesystem on ./bus not supported as upperdir [ 254.360263][T16703] overlay: filesystem on ./bus not supported as upperdir [ 254.363230][T16703] overlay: filesystem on ./bus not supported as upperdir [ 254.432021][T16722] fuse: Bad value for 'user_id' [ 254.433899][T16722] fuse: Bad value for 'user_id' [ 254.438670][T16722] netlink: 'syz.9.3161': attribute type 21 has an invalid length. [ 254.440747][T16722] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.568646][T16731] lo speed is unknown, defaulting to 1000 [ 254.606322][T16731] wg0 speed is unknown, defaulting to 1000 [ 254.616456][T16737] overlayfs: failed to clone upperpath [ 254.654756][T16740] bridge0: failed insert local address into bridge forwarding table [ 254.833029][T16755] bad cache= option: none [ 254.833029][T16755] [ 254.839233][T16755] CIFS: VFS: bad cache= option: none [ 254.917590][T13668] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.989397][T13668] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.054763][T13668] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.140538][T13668] bridge_slave_1: left allmulticast mode [ 255.142160][T13668] bridge_slave_1: left promiscuous mode [ 255.144410][T13668] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.147720][T13668] bridge_slave_0: left allmulticast mode [ 255.149382][T13668] bridge_slave_0: left promiscuous mode [ 255.151100][T13668] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.474346][T13668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.478537][T13668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.482293][T13668] bond0 (unregistering): Released all slaves [ 255.535434][ T5958] Bluetooth: hci0: command tx timeout [ 255.627482][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.832343][T13668] hsr_slave_0: left promiscuous mode [ 255.835013][T13668] hsr_slave_1: left promiscuous mode [ 255.837992][T13668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.840192][T13668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.842847][T13668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.845084][T13668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.882403][T13668] veth1_macvtap: left promiscuous mode [ 255.884117][T13668] veth0_macvtap: left promiscuous mode [ 255.885693][T13668] veth1_vlan: left promiscuous mode [ 255.887352][T13668] veth0_vlan: left promiscuous mode [ 256.584007][T16787] __nla_validate_parse: 15 callbacks suppressed [ 256.584016][T16787] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3180'. [ 256.850109][T13668] team0 (unregistering): Port device team_slave_1 removed [ 256.957594][T13668] team0 (unregistering): Port device team_slave_0 removed [ 257.639454][ T5958] Bluetooth: hci0: command tx timeout [ 257.649471][T16778] bridge0: port 3(gretap0) entered blocking state [ 257.651620][T16778] bridge0: port 3(gretap0) entered disabled state [ 257.654089][T16778] gretap0: entered allmulticast mode [ 257.659105][T16778] gretap0: entered promiscuous mode [ 257.660987][T16778] bridge0: port 3(gretap0) entered blocking state [ 257.662867][T16778] bridge0: port 3(gretap0) entered forwarding state [ 257.665448][T16786] gretap0: left allmulticast mode [ 257.666950][T16786] gretap0: left promiscuous mode [ 257.668481][T16786] bridge0: port 3(gretap0) entered disabled state [ 257.751719][T16634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.761345][T16634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.781289][T16634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.785844][T16634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.820370][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3187'. [ 257.839609][T16634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.850293][T16634] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.865113][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.865579][T16807] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3189'. [ 257.872152][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.875750][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.877802][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.955552][T16634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.068469][T16836] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3196'. [ 258.080849][T16634] veth0_vlan: entered promiscuous mode [ 258.087294][T16634] veth1_vlan: entered promiscuous mode [ 258.101899][T16634] veth0_macvtap: entered promiscuous mode [ 258.106182][T16634] veth1_macvtap: entered promiscuous mode [ 258.118520][T16634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.121505][T16634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.124963][T16634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.128152][T16634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.131124][T16634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.134370][T16634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.141222][T16634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.144414][T16634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.147181][T16634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.150103][T16634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.155388][T16634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.158334][T16634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.161073][T16634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.164276][T16634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.167762][T16634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.171090][T16634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.174809][T16634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.177595][T16634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.180514][T16634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.185750][T16634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.188678][T16634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.191361][T16634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.194831][T16634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.197592][T16634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.200451][T16634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.203520][T16634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.206447][T16634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.209142][T16634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.212001][T16634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.215788][T16634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.222044][T16634] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.229192][T16634] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.232104][T16634] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.234824][T16634] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.238146][T16844] »»»»»»: renamed from lo [ 258.292313][T16849] netlink: 61211 bytes leftover after parsing attributes in process `syz.9.3200'. [ 258.311288][ T7561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.313554][ T7561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.329224][ T7561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.331479][ T7561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.343769][T16853] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3201'. [ 258.376250][ T39] audit: type=1400 audit(3477497828.787:45526): avc: denied { accept } for pid=16857 comm="syz.9.3202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.617782][T16867] netlink: 100 bytes leftover after parsing attributes in process `syz.9.3206'. [ 258.724502][T16875] overlayfs: failed to clone upperpath [ 258.781960][T16882] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3211'. [ 258.873735][T16885] netlink: zone id is out of range [ 258.875308][T16885] netlink: zone id is out of range [ 258.876793][T16885] netlink: zone id is out of range [ 258.879474][T16885] netlink: zone id is out of range [ 258.881056][T16885] netlink: zone id is out of range [ 258.882558][T16885] netlink: zone id is out of range [ 258.884111][T16885] netlink: zone id is out of range [ 258.885633][T16885] netlink: zone id is out of range [ 258.887208][T16885] netlink: zone id is out of range [ 258.889455][T16885] netlink: zone id is out of range [ 258.899350][T16885] netlink: 124 bytes leftover after parsing attributes in process `syz.9.3212'. [ 259.223888][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3218'. [ 259.226567][T16904] netlink: 'syz.5.3218': attribute type 6 has an invalid length. [ 259.265239][T16910] netlink: 'syz.5.3219': attribute type 19 has an invalid length. [ 259.304171][T16914] program syz.5.3220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.390889][T16917] trusted_key: encrypted_key: insufficient parameters specified [ 259.434051][T16917] md2: using deprecated bitmap file support [ 259.435975][T16917] md2: error: failed to get bitmap file [ 259.470581][T16924] »»»»»» speed is unknown, defaulting to 1000 [ 259.507110][T16924] wg0 speed is unknown, defaulting to 1000 [ 259.770617][ T39] audit: type=1800 audit(3477497830.158:45527): pid=16942 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.3226" name="file1" dev="tmpfs" ino=3658 res=0 errno=0 [ 259.910689][T16950] autofs: Unknown parameter 'Ŕ' [ 259.913961][T16958] ip6t_srh: unknown srh invflags 7D00 [ 260.208643][T16963] netlink: 'syz.5.3232': attribute type 19 has an invalid length. [ 260.236385][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.243145][ T39] audit: type=1400 audit(3477497830.635:45528): avc: denied { append } for pid=16964 comm="syz.5.3233" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 260.292850][T13667] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.326883][ T30] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.739606][T13865] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.748698][T16968] bio_check_eod: 2 callbacks suppressed [ 260.748711][T16968] syz.8.3234: attempt to access beyond end of device [ 260.748711][T16968] loop8: rw=0, sector=16, nr_sectors = 1 limit=0 [ 260.755368][T16968] qnx6: unable to read the first superblock [ 260.759736][T16968] syz.8.3234: attempt to access beyond end of device [ 260.759736][T16968] loop8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 260.765944][T16968] qnx6: unable to read the first superblock [ 260.767831][T16968] qnx6: unable to read the first superblock [ 260.833499][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.840563][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.843530][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.845992][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.848113][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.851304][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.887191][T16973] »»»»»» speed is unknown, defaulting to 1000 [ 260.957574][T16973] wg0 speed is unknown, defaulting to 1000 [ 261.011389][ T39] audit: type=1400 audit(3477497831.390:45529): avc: denied { map } for pid=16971 comm="syz.5.3236" path="socket:[76284]" dev="sockfs" ino=76284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 261.062029][T16973] chnl_net:caif_netlink_parms(): no params data found [ 261.162053][T16973] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.168342][T16973] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.170698][T16973] bridge_slave_0: entered allmulticast mode [ 261.174239][T16973] bridge_slave_0: entered promiscuous mode [ 261.177637][T16973] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.180015][T16973] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.182013][T16973] bridge_slave_1: entered allmulticast mode [ 261.184951][T16973] bridge_slave_1: entered promiscuous mode [ 261.214868][T16973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.218433][T16973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.250511][T16973] team0: Port device team_slave_0 added [ 261.254215][T16973] team0: Port device team_slave_1 added [ 261.265434][T17004] 9p filesystem being mounted at /436/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 261.307171][T16973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.309154][T16973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.321715][T16973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.326542][T16973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.328483][T16973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.341988][T16973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.347782][T17006] siw: device registration error -23 [ 261.350068][T17006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17006 comm=syz.9.3245 [ 261.358877][T17006] trusted_key: encrypted_key: master key parameter 'Ş÷Ă´űÁ ŤĂălB5í¶×“zQËŠčc}%P1—c°oDtńRu¬"Ó®ft' is invalid [ 261.365786][T17006] ksmbd: Unknown IPC event: 1, ignore. [ 261.388659][T16973] hsr_slave_0: entered promiscuous mode [ 261.390926][T16973] hsr_slave_1: entered promiscuous mode [ 261.392759][T16973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.395344][T16973] Cannot create hsr debugfs directory [ 261.429854][T17012] overlayfs: failed to clone upperpath [ 261.573051][ T39] audit: type=1400 audit(3477497831.957:45530): avc: denied { accept } for pid=17020 comm="syz.8.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 261.821617][ T7561] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.826026][ T7561] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.310247][T17043] overlayfs: failed to clone upperpath [ 262.333891][T13667] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.393575][T13667] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.455942][T13667] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.556381][T17056] netlink: 'syz.8.3258': attribute type 11 has an invalid length. [ 262.558832][T13667] bridge_slave_1: left allmulticast mode [ 262.560478][T13667] bridge_slave_1: left promiscuous mode [ 262.567158][T13667] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.568636][T17058] __nla_validate_parse: 5 callbacks suppressed [ 262.568645][T17058] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3260'. [ 262.574673][T13667] bridge_slave_0: left allmulticast mode [ 262.576299][T13667] bridge_slave_0: left promiscuous mode [ 262.577930][T13667] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.792630][ T30] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.892132][T13667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.896415][T13667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.899897][T13667] bond0 (unregistering): Released all slaves [ 262.943313][ T66] Bluetooth: hci0: command tx timeout [ 263.152567][T17072] libceph: resolve ' [ 263.152567][T17072] -&őĚ×fÍYąÇť˛a×ďĹ2i [ 263.152567][T17072] .ÖúŐ?Çý&Ť*»§&' (ret=-3): failed [ 263.240548][T13667] hsr_slave_0: left promiscuous mode [ 263.243345][T13667] hsr_slave_1: left promiscuous mode [ 263.246799][T13667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.249788][T13667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.255575][T13667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.258526][T13667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.309394][T13667] veth1_macvtap: left promiscuous mode [ 263.311010][T13667] veth0_macvtap: left promiscuous mode [ 263.312669][T13667] veth1_vlan: left promiscuous mode [ 263.314174][T13667] veth0_vlan: left promiscuous mode [ 264.207836][T13667] team0 (unregistering): Port device team_slave_1 removed [ 264.318069][T13667] team0 (unregistering): Port device team_slave_0 removed [ 264.888101][T17091] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3271'. [ 265.045875][ T66] Bluetooth: hci0: command tx timeout [ 265.094282][T17091] net_ratelimit: 3 callbacks suppressed [ 265.094293][T17091] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 265.126832][T17096] random: crng reseeded on system resumption [ 265.228601][T17094] kernel read not supported for file /policy (pid: 17094 comm: syz.8.3272) [ 265.237667][T17105] xt_cgroup: xt_cgroup: no path or classid specified [ 265.302265][T16973] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.303486][ T39] audit: type=1400 audit(3477497835.664:45531): avc: denied { getopt } for pid=17107 comm="syz.9.3276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 265.340255][T16973] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.345743][T16973] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.361638][T16973] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.409201][T16973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.415910][T16973] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.428763][T13865] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.430835][T13865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.442205][T13668] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.444209][T13668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.535026][T16973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.603164][T17136] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3283'. [ 265.605863][T17136] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3283'. [ 265.633248][T16973] veth0_vlan: entered promiscuous mode [ 265.637879][T16973] veth1_vlan: entered promiscuous mode [ 265.650206][T16973] veth0_macvtap: entered promiscuous mode [ 265.654706][T16973] veth1_macvtap: entered promiscuous mode [ 265.662052][T16973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.665108][T16973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.667891][T16973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.671899][T16973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.674574][T16973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.677541][T16973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.680453][T16973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.683267][T16973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.685961][T16973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.688862][T16973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.691575][T16973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.694380][T16973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.697084][T16973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.700042][T16973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.703286][T16973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.707604][T16973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.710889][T16973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.713533][T16973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.716685][T16973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.719407][T16973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.722397][T16973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.725056][T16973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.728090][T16973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.731017][T16973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.733886][T16973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.736551][T16973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.739314][T16973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.741975][T16973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.744783][T16973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.748124][T16973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.752402][T16973] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.754705][T16973] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.757230][T16973] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.759610][T16973] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.797886][ T7561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.804110][ T7561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.815773][T13667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.818059][T13667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.921194][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.932184][T17155] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3287'. [ 265.937543][T17155] 9p filesystem being mounted at /708/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 265.993237][T17157] ufs: Invalid option: "grpquota‹" or missing value [ 265.995193][T17157] ufs: wrong mount options [ 266.103836][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3290'. [ 266.104945][T17167] infiniband syz!: set active [ 266.108380][T17167] infiniband syz!: added team_slave_0 [ 266.112480][T17165] O3ăc¤±: renamed from bridge_slave_0 [ 266.127341][T17167] RDS/IB: syz!: added [ 266.134254][T17167] smc: adding ib device syz! with port count 1 [ 266.136108][T17167] smc: ib device syz! port 1 has pnetid [ 266.685759][T17176] overlayfs: overlapping lowerdir path [ 266.697635][T17176] gtp0: entered promiscuous mode [ 266.699131][T17176] gtp0: entered allmulticast mode [ 266.757729][T17183] netlink: 'syz.8.3295': attribute type 3 has an invalid length. [ 266.759910][T17183] netlink: 'syz.8.3295': attribute type 1 has an invalid length. [ 266.761286][T17185] VFS: unable to find oldfs superblock on device nullb0 [ 266.762091][T17183] netlink: 216 bytes leftover after parsing attributes in process `syz.8.3295'. [ 266.766880][T17183] NCSI netlink: No device for ifindex 33022 [ 266.816446][T17197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=17197 comm=syz.5.3298 [ 266.834682][T17197] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.841150][T17197] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3298'. [ 267.687876][T17201] ALSA: mixer_oss: invalid OSS volume '˘' [ 267.718009][T17204] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 267.720226][T17204] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 267.725217][T17212] sp0: Synchronizing with TNC [ 267.736702][T17204] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 267.779112][T17212] program syz.8.3303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.811663][ T39] audit: type=1400 audit(3477497838.150:45532): avc: denied { mounton } for pid=17220 comm="syz.8.3306" path="/454/file0/bus" dev="ramfs" ino=78249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 267.817979][T17221] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 267.820519][T17221] overlayfs: failed to set xattr on upper [ 267.822680][T17221] overlayfs: ...falling back to redirect_dir=nofollow. [ 267.824968][T17221] overlayfs: ...falling back to metacopy=off. [ 267.827009][T17221] overlayfs: ...falling back to index=off. [ 267.828901][T17221] overlayfs: ...falling back to uuid=null. [ 267.913732][ T39] audit: type=1400 audit(3477497838.259:45533): avc: denied { read } for pid=17227 comm="syz.8.3308" lport=39323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 267.919984][T17231] xt_TPROXY: Can be used only with -p tcp or -p udp [ 268.050446][T13865] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.685749][ T5958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.690832][ T5958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.694436][ T5958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.699500][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.702470][ T5958] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 268.704912][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.728817][T17241] »»»»»» speed is unknown, defaulting to 1000 [ 268.772209][T17241] wg0 speed is unknown, defaulting to 1000 [ 268.862403][T17263] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3315'. [ 268.866630][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3315'. [ 268.888906][T17241] chnl_net:caif_netlink_parms(): no params data found [ 268.891317][T17248] block nbd5: shutting down sockets [ 268.951711][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3319'. [ 268.954311][T17276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3319'. [ 268.971220][T17266] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3316'. [ 268.975351][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3319'. [ 268.975399][T17241] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.977985][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3319'. [ 268.978642][ T5958] Bluetooth: hci4: command 0x0c1a tx timeout [ 268.986538][T17241] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.989056][T17241] bridge_slave_0: entered allmulticast mode [ 268.991326][T17241] bridge_slave_0: entered promiscuous mode [ 268.994206][T17241] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.996377][T17241] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.998437][T17241] bridge_slave_1: entered allmulticast mode [ 269.007230][T17241] bridge_slave_1: entered promiscuous mode [ 269.032541][T17241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.036532][T17241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.074928][T17241] team0: Port device team_slave_0 added [ 269.077991][ T39] audit: type=1400 audit(3477497839.412:45534): avc: denied { setcheckreqprot } for pid=17285 comm="syz.5.3321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 269.079163][T17241] team0: Port device team_slave_1 added [ 269.083743][T17286] SELinux: syz.5.3321 (17286) set checkreqprot to 1. This is no longer supported. [ 269.111846][T17241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.113857][T17241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.129008][T17241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.134198][T17241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.136266][T17241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.149614][T17241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.213934][T17241] hsr_slave_0: entered promiscuous mode [ 269.216201][T17241] hsr_slave_1: entered promiscuous mode [ 269.218864][T17241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.222343][T17241] Cannot create hsr debugfs directory [ 269.532476][T17304] RDS: rds_bind could not find a transport for fe80::41, load rds_tcp or rds_rdma? [ 269.556922][T17307] tmpfs: Unknown parameter 'smackfsfloor' [ 269.559763][T17307] xt_hashlimit: invalid interval [ 269.585762][T17310] efs: device does not support 512 byte blocks [ 269.587659][T17310] device does not support 512 byte blocks [ 269.587659][T17310] [ 269.650502][T13865] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.710991][T13865] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.753995][T17316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3331'. [ 269.800409][T13865] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.809322][T17323] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3334'. [ 269.824438][T17320] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3332'. [ 269.828099][T17320] netlink: 'syz.9.3332': attribute type 39 has an invalid length. [ 269.901072][T13865] bridge_slave_1: left allmulticast mode [ 269.903339][T13865] bridge_slave_1: left promiscuous mode [ 269.906023][T13865] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.910032][T13865] bridge_slave_0: left allmulticast mode [ 269.912246][T13865] bridge_slave_0: left promiscuous mode [ 269.915467][T13865] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.249746][T13865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.254804][T13865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.258891][T13865] bond0 (unregistering): Released all slaves [ 270.512614][T17346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.647935][T17385] autofs: Bad value for 'fd' [ 270.652113][T17385] xt_socket: unknown flags 0xc [ 270.654366][ T39] audit: type=1400 audit(3477497840.984:45535): avc: denied { accept } for pid=17383 comm="syz.5.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 270.754439][T13865] hsr_slave_0: left promiscuous mode [ 270.756409][T13865] hsr_slave_1: left promiscuous mode [ 270.759029][ T5958] Bluetooth: hci0: command tx timeout [ 270.762802][T13865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.765024][T13865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.767516][T13865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.772862][T13865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.827633][T13865] veth1_macvtap: left promiscuous mode [ 270.829734][T13865] veth0_macvtap: left promiscuous mode [ 270.834229][T13865] veth1_vlan: left promiscuous mode [ 270.835822][T13865] veth0_vlan: left promiscuous mode [ 270.989811][T10628] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 271.086698][ T5958] Bluetooth: hci4: command 0x0c1a tx timeout [ 271.130553][T10628] usb 13-1: device descriptor read/64, error -71 [ 271.412696][T10628] usb 13-1: new high-speed USB device number 28 using dummy_hcd [ 271.545227][T10628] usb 13-1: device descriptor read/64, error -71 [ 271.657254][T10628] usb usb13-port1: attempt power cycle [ 271.786721][T13865] team0 (unregistering): Port device team_slave_1 removed [ 271.893247][T13865] team0 (unregistering): Port device team_slave_0 removed [ 272.018890][T10628] usb 13-1: new high-speed USB device number 29 using dummy_hcd [ 272.035807][T10628] usb 13-1: device descriptor read/8, error -71 [ 272.291339][T10628] usb 13-1: new high-speed USB device number 30 using dummy_hcd [ 272.317837][T10628] usb 13-1: device descriptor read/8, error -71 [ 272.431752][T10628] usb usb13-port1: unable to enumerate USB device [ 272.641966][T17241] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.646844][T17241] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 272.657812][T17241] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 272.662211][T17241] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 272.699800][T17241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.699971][ T5958] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 272.720329][T17241] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.724360][T13662] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.726490][T13662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.736692][T13668] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.739478][T13668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.852377][T17241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.854594][ T5958] Bluetooth: hci0: command tx timeout [ 272.940804][T17241] veth0_vlan: entered promiscuous mode [ 272.944884][T17241] veth1_vlan: entered promiscuous mode [ 272.956447][T17241] veth0_macvtap: entered promiscuous mode [ 272.959460][T17241] veth1_macvtap: entered promiscuous mode [ 272.966548][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.970478][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.974071][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.977907][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.981833][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.984179][T17457] nft_compat: unsupported protocol 0 [ 272.985637][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.990955][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.995102][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.998774][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.002879][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.006515][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.010349][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.014152][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.017977][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.022393][T17241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.027191][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.031802][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.034730][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.037805][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.040891][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.044148][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.046974][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.049982][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.053144][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.056279][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.059103][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.062405][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.065249][T17241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.068278][T17241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.071955][T17241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.086103][T17241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.088667][T17241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.091611][T17241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.094148][T17241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.138467][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.141431][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.155281][T13662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.158337][T13662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.172420][ T5958] Bluetooth: hci4: command 0x0c1a tx timeout [ 273.367483][T17472] overlayfs: failed to clone upperpath [ 273.865713][T17503] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 273.893920][ T39] audit: type=1326 audit(3477497844.206:45536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.9.3387" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc18518cde9 code=0x0 [ 273.955383][T17512] __nla_validate_parse: 14 callbacks suppressed [ 273.955393][T17512] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3389'. [ 273.959838][T17512] netlink: 'syz.5.3389': attribute type 1 has an invalid length. [ 274.016687][ T5958] Bluetooth: hci4: unexpected event 0x33 length: 7 < 10 [ 274.047700][T17502] [ 274.048673][T17502] ====================================================== [ 274.051239][T17502] WARNING: possible circular locking dependency detected [ 274.053812][T17502] 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 Not tainted [ 274.054887][ T39] audit: type=1400 audit(3477497844.365:45537): avc: denied { write } for pid=5939 comm="syz-executor" path="pipe:[7237]" dev="pipefs" ino=7237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 274.057856][T17502] ------------------------------------------------------ [ 274.057862][T17502] syz.8.3382/17502 is trying to acquire lock: [ 274.057870][T17502] ffff8880233d4910 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x99/0x2a0 [ 274.057934][T17502] [ 274.057934][T17502] but task is already holding lock: [ 274.057938][T17502] ffff888025a89838 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x4a7/0x1360 [ 274.057970][T17502] [ 274.057970][T17502] which lock already depends on the new lock. [ 274.057970][T17502] [ 274.057974][T17502] [ 274.057974][T17502] the existing dependency chain (in reverse order) is: [ 274.057977][T17502] [ 274.057977][T17502] -> #6 (&q->sysfs_lock){+.+.}-{4:4}: [ 274.057992][T17502] __mutex_lock+0x19b/0xb10 [ 274.058009][T17502] blk_mq_update_nr_hw_queues+0x4a7/0x1360 [ 274.058019][T17502] nbd_start_device+0x172/0xcd0 [ 274.095067][T17502] nbd_ioctl+0x21a/0xd60 [ 274.096863][T17502] blkdev_ioctl+0x276/0x6d0 [ 274.098739][T17502] __x64_sys_ioctl+0x190/0x200 [ 274.100715][T17502] do_syscall_64+0xcd/0x250 [ 274.102586][T17502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.104957][T17502] [ 274.104957][T17502] -> #5 (&q->q_usage_counter(io)#57){++++}-{0:0}: [ 274.108140][T17502] blk_mq_submit_bio+0x20db/0x25f0 [ 274.110206][T17502] __submit_bio+0x3d1/0x690 [ 274.112080][T17502] submit_bio_noacct_nocheck+0x698/0xd70 [ 274.114334][T17502] submit_bio_noacct+0x50d/0x1ec0 [ 274.116417][T17502] mpage_readahead+0x41d/0x590 [ 274.118378][T17502] read_pages+0x1a7/0xc60 [ 274.120201][T17502] page_cache_ra_unbounded+0x426/0x7d0 [ 274.122433][T17502] force_page_cache_ra+0x24b/0x340 [ 274.124533][T17502] page_cache_sync_ra+0x158/0xa30 [ 274.126621][T17502] filemap_get_pages+0xb62/0x1c30 [ 274.128793][T17502] filemap_read+0x3c5/0xe70 [ 274.130715][T17502] blkdev_read_iter+0x187/0x4b0 [ 274.132692][T17502] vfs_read+0x886/0xbf0 [ 274.134478][T17502] ksys_read+0x12b/0x250 [ 274.136310][T17502] do_syscall_64+0xcd/0x250 [ 274.138406][T17502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.140817][T17502] [ 274.140817][T17502] -> #4 (mapping.invalidate_lock#2){++++}-{4:4}: [ 274.143941][T17502] down_read+0x9a/0x330 [ 274.145703][T17502] filemap_fault+0x1845/0x2ca0 [ 274.147707][T17502] __do_fault+0x10a/0x490 [ 274.149528][T17502] do_pte_missing+0xecf/0x3e10 [ 274.151492][T17502] __handle_mm_fault+0x1166/0x2c60 [ 274.153539][T17502] handle_mm_fault+0x3fa/0xaa0 [ 274.155499][T17502] do_user_addr_fault+0x7a3/0x13f0 [ 274.157634][T17502] exc_page_fault+0x5c/0xc0 [ 274.159513][T17502] asm_exc_page_fault+0x26/0x30 [ 274.161534][T17502] _copy_from_iter+0x380/0x1560 [ 274.163492][T17502] tipc_msg_build+0x308/0x1120 [ 274.165465][T17502] __tipc_sendstream+0x6fa/0x1190 [ 274.167542][T17502] tipc_sendstream+0x4f/0x70 [ 274.169470][T17502] sock_write_iter+0x4fe/0x5b0 [ 274.171135][T17502] vfs_write+0x5ae/0x1150 [ 274.172707][T17502] ksys_write+0x207/0x250 [ 274.174746][T17502] do_syscall_64+0xcd/0x250 [ 274.176839][T17502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.179512][T17502] [ 274.179512][T17502] -> #3 (sk_lock-AF_TIPC){+.+.}-{0:0}: [ 274.182732][T17502] lock_sock_nested+0x3a/0xf0 [ 274.184940][T17502] tipc_shutdown+0x65/0x580 [ 274.187085][T17502] nbd_mark_nsock_dead+0xae/0x5d0 [ 274.189436][T17502] sock_shutdown+0x17c/0x280 [ 274.191591][T17502] nbd_ioctl+0x49b/0xd60 [ 274.193148][T17502] blkdev_ioctl+0x276/0x6d0 [ 274.194637][T17502] __x64_sys_ioctl+0x190/0x200 [ 274.196204][T17502] do_syscall_64+0xcd/0x250 [ 274.197664][T17502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.199520][T17502] [ 274.199520][T17502] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 274.201730][T17502] __mutex_lock+0x19b/0xb10 [ 274.203199][T17502] nbd_queue_rq+0x424/0x1220 [ 274.204692][T17502] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 274.206502][T17502] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 274.208463][T17502] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 274.210335][T17502] blk_mq_run_hw_queue+0x239/0x670 [ 274.211963][T17502] blk_mq_flush_plug_list+0x673/0x1c60 [ 274.213690][T17502] __blk_flush_plug+0x2c5/0x4b0 [ 274.215286][T17502] __submit_bio+0x547/0x690 [ 274.216775][T17502] submit_bio_noacct_nocheck+0x698/0xd70 [ 274.218756][T17502] submit_bio_noacct+0x50d/0x1ec0 [ 274.220383][T17502] block_read_full_folio+0x812/0xa50 [ 274.222046][T17502] filemap_read_folio+0xc6/0x2a0 [ 274.223628][T17502] do_read_cache_folio+0x263/0x5c0 [ 274.225245][T17502] read_part_sector+0xd4/0x310 [ 274.226801][T17502] adfspart_check_ICS+0x94/0x940 [ 274.228382][T17502] bdev_disk_changed+0x71f/0x1520 [ 274.229975][T17502] blkdev_get_whole+0x187/0x290 [ 274.231518][T17502] bdev_open+0x2c7/0xe20 [ 274.232920][T17502] blkdev_open+0x272/0x3f0 [ 274.234359][T17502] do_dentry_open+0x735/0x1c40 [ 274.235895][T17502] vfs_open+0x82/0x3f0 [ 274.237248][T17502] path_openat+0x1e88/0x2d80 [ 274.238733][T17502] do_filp_open+0x20c/0x470 [ 274.240212][T17502] do_sys_openat2+0x17a/0x1e0 [ 274.241716][T17502] __x64_sys_openat+0x175/0x210 [ 274.243265][T17502] do_syscall_64+0xcd/0x250 [ 274.244732][T17502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.246617][T17502] [ 274.246617][T17502] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 274.248718][T17502] __mutex_lock+0x19b/0xb10 [ 274.250190][T17502] nbd_queue_rq+0xbe/0x1220 [ 274.251653][T17502] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 274.253400][T17502] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 274.255352][T17502] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 274.257228][T17502] blk_mq_run_hw_queue+0x239/0x670 [ 274.258846][T17502] blk_mq_flush_plug_list+0x673/0x1c60 [ 274.260584][T17502] __blk_flush_plug+0x2c5/0x4b0 [ 274.262130][T17502] __submit_bio+0x547/0x690 [ 274.263604][T17502] submit_bio_noacct_nocheck+0x698/0xd70 [ 274.265378][T17502] submit_bio_noacct+0x50d/0x1ec0 [ 274.266992][T17502] block_read_full_folio+0x812/0xa50 [ 274.268682][T17502] filemap_read_folio+0xc6/0x2a0 [ 274.270264][T17502] do_read_cache_folio+0x263/0x5c0 [ 274.271890][T17502] read_part_sector+0xd4/0x310 [ 274.273419][T17502] adfspart_check_ICS+0x94/0x940 [ 274.274992][T17502] bdev_disk_changed+0x71f/0x1520 [ 274.276602][T17502] blkdev_get_whole+0x187/0x290 [ 274.278163][T17502] bdev_open+0x2c7/0xe20 [ 274.279570][T17502] blkdev_open+0x272/0x3f0 [ 274.281015][T17502] do_dentry_open+0x735/0x1c40 [ 274.282547][T17502] vfs_open+0x82/0x3f0 [ 274.283893][T17502] path_openat+0x1e88/0x2d80 [ 274.285372][T17502] do_filp_open+0x20c/0x470 [ 274.286851][T17502] do_sys_openat2+0x17a/0x1e0 [ 274.287401][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 274.288354][T17502] __x64_sys_openat+0x175/0x210 [ 274.293011][T17502] do_syscall_64+0xcd/0x250 [ 274.294481][T17502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.296363][T17502] [ 274.296363][T17502] -> #0 (set->srcu){.+.+}-{0:0}: [ 274.298377][T17502] __lock_acquire+0x249e/0x3c40 [ 274.299910][T17502] lock_sync+0xf5/0x190 [ 274.301289][T17502] __synchronize_srcu+0xa9/0x2a0 [ 274.302861][T17502] blk_mq_quiesce_queue+0x149/0x1b0 [ 274.304527][T17502] elevator_disable+0xe9/0x570 [ 274.306061][T17502] blk_mq_update_nr_hw_queues+0x41c/0x1360 [ 274.307885][T17502] nbd_start_device+0x172/0xcd0 [ 274.309435][T17502] nbd_ioctl+0x21a/0xd60 [ 274.310803][T17502] blkdev_ioctl+0x276/0x6d0 [ 274.312263][T17502] __x64_sys_ioctl+0x190/0x200 [ 274.313782][T17502] do_syscall_64+0xcd/0x250 [ 274.315246][T17502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.317116][T17502] [ 274.317116][T17502] other info that might help us debug this: [ 274.317116][T17502] [ 274.319985][T17502] Chain exists of: [ 274.319985][T17502] set->srcu --> &q->q_usage_counter(io)#57 --> &q->sysfs_lock [ 274.319985][T17502] [ 274.323727][T17502] Possible unsafe locking scenario: [ 274.323727][T17502] [ 274.325842][T17502] CPU0 CPU1 [ 274.327413][T17502] ---- ---- [ 274.328993][T17502] lock(&q->sysfs_lock); [ 274.330233][T17502] lock(&q->q_usage_counter(io)#57); [ 274.332447][T17502] lock(&q->sysfs_lock); [ 274.334368][T17502] sync(set->srcu); [ 274.335460][T17502] [ 274.335460][T17502] *** DEADLOCK *** [ 274.335460][T17502] [ 274.337755][T17502] 5 locks held by syz.8.3382/17502: [ 274.339233][T17502] #0: ffff888025a97998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xd60 [ 274.341853][T17502] #1: ffff888025a978d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x8f/0x1360 [ 274.344919][T17502] #2: ffff888025a89308 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x264/0x1360 [ 274.348186][T17502] #3: ffff888025a89340 (&q->q_usage_counter(queue)#41){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x264/0x1360 [ 274.351498][T17502] #4: ffff888025a89838 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x4a7/0x1360 [ 274.354449][T17502] [ 274.354449][T17502] stack backtrace: [ 274.356119][T17502] CPU: 3 UID: 0 PID: 17502 Comm: syz.8.3382 Not tainted 6.14.0-rc1-syzkaller-00028-g5c8c229261f1 #0 [ 274.356131][T17502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 274.356137][T17502] Call Trace: [ 274.356141][T17502] [ 274.356146][T17502] dump_stack_lvl+0x116/0x1f0 [ 274.356157][T17502] print_circular_bug+0x490/0x760 [ 274.356176][T17502] check_noncircular+0x31a/0x400 [ 274.356188][T17502] ? __pfx_check_noncircular+0x10/0x10 [ 274.356200][T17502] ? __pfx_stack_trace_save+0x10/0x10 [ 274.356211][T17502] ? lockdep_lock+0xc6/0x200 [ 274.356221][T17502] ? __pfx_lockdep_lock+0x10/0x10 [ 274.356231][T17502] __lock_acquire+0x249e/0x3c40 [ 274.356246][T17502] ? __pfx___lock_acquire+0x10/0x10 [ 274.356257][T17502] ? hlock_class+0x4e/0x130 [ 274.356266][T17502] ? mark_lock+0xb5/0xc60 [ 274.356277][T17502] ? __pfx___lock_acquire+0x10/0x10 [ 274.356289][T17502] ? hlock_class+0x4e/0x130 [ 274.356298][T17502] ? __synchronize_srcu+0x99/0x2a0 [ 274.356312][T17502] lock_sync+0xf5/0x190 [ 274.356323][T17502] ? __synchronize_srcu+0x99/0x2a0 [ 274.356337][T17502] __synchronize_srcu+0xa9/0x2a0 [ 274.356350][T17502] ? __pfx___synchronize_srcu+0x10/0x10 [ 274.356363][T17502] ? synchronize_srcu+0xa2/0x270 [ 274.356381][T17502] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 274.356397][T17502] blk_mq_quiesce_queue+0x149/0x1b0 [ 274.356410][T17502] elevator_disable+0xe9/0x570 [ 274.356418][T17502] blk_mq_update_nr_hw_queues+0x41c/0x1360 [ 274.356429][T17502] ? __mutex_lock+0x101/0xb10 [ 274.356439][T17502] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 274.356450][T17502] ? rcu_is_watching+0x12/0xc0 [ 274.356459][T17502] nbd_start_device+0x172/0xcd0 [ 274.356469][T17502] ? bpf_lsm_capable+0x9/0x10 [ 274.356481][T17502] nbd_ioctl+0x21a/0xd60 [ 274.356489][T17502] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 274.356503][T17502] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 274.356517][T17502] ? __pfx_nbd_ioctl+0x10/0x10 [ 274.356524][T17502] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 274.356539][T17502] ? __pfx_lock_release+0x10/0x10 [ 274.356551][T17502] ? __pfx_nbd_ioctl+0x10/0x10 [ 274.356559][T17502] blkdev_ioctl+0x276/0x6d0 [ 274.356572][T17502] ? __pfx_blkdev_ioctl+0x10/0x10 [ 274.356585][T17502] ? selinux_file_ioctl+0x180/0x270 [ 274.356597][T17502] ? selinux_file_ioctl+0xb4/0x270 [ 274.356610][T17502] ? __pfx_blkdev_ioctl+0x10/0x10 [ 274.356623][T17502] __x64_sys_ioctl+0x190/0x200 [ 274.356636][T17502] do_syscall_64+0xcd/0x250 [ 274.356645][T17502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.356659][T17502] RIP: 0033:0x7f237b58cde9 [ 274.356667][T17502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.356676][T17502] RSP: 002b:00007f237c488038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.356685][T17502] RAX: ffffffffffffffda RBX: 00007f237b7a6080 RCX: 00007f237b58cde9 [ 274.356691][T17502] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 274.356696][T17502] RBP: 00007f237b60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 274.356701][T17502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.356706][T17502] R13: 0000000000000000 R14: 00007f237b7a6080 R15: 00007ffe63247348 [ 274.356715][T17502] [ 274.552118][T17502] block nbd8: shutting down sockets [ 275.064978][T13668] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.114054][T13668] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.174269][T13668] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.241458][T13668] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.313378][T13668] bridge_slave_1: left promiscuous mode [ 275.315066][T13668] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.317782][T13668] bridge_slave_0: left allmulticast mode [ 275.319415][T13668] bridge_slave_0: left promiscuous mode [ 275.321173][T13668] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.339224][T13668] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 275.683675][T13668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.686838][T13668] bond_slave_0: left promiscuous mode [ 275.689110][T13668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.691835][T13668] bond_slave_1: left promiscuous mode [ 275.693760][T13668] bond0 (unregistering): Released all slaves [ 275.697129][T13668] bond1 (unregistering): Released all slaves [ 275.756819][T13668] tipc: Left network mode [ 276.035665][T13668] hsr_slave_0: left promiscuous mode [ 276.037632][T13668] hsr_slave_1: left promiscuous mode [ 276.039341][T13668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.041392][T13668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.043719][T13668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.045976][T13668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.050160][T13668] veth1_macvtap: left promiscuous mode [ 276.051767][T13668] veth0_macvtap: left promiscuous mode [ 276.053343][T13668] veth1_vlan: left promiscuous mode [ 276.054881][T13668] veth0_vlan: left promiscuous mode [ 276.283967][T13668] team0 (unregistering): Port device team_slave_1 removed [ 276.333906][T13668] team0 (unregistering): Port device team_slave_0 removed [ 276.336356][T13662] smc: removing ib device syz! [ 276.977592][T13668] IPVS: stop unused estimator thread 0... [ 277.044330][T13668] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.124012][T13668] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.205254][T13668] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.285023][T13668] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.344318][T13668] bridge_slave_1: left allmulticast mode [ 277.346003][T13668] bridge_slave_1: left promiscuous mode [ 277.347668][T13668] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.350214][T13668] bridge_slave_0: left allmulticast mode [ 277.352072][T13668] bridge_slave_0: left promiscuous mode [ 277.354024][T13668] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.429593][T13668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.432908][T13668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.437139][T13668] bond0 (unregistering): Released all slaves [ 277.731020][T13668] hsr_slave_0: left promiscuous mode [ 277.733371][T13668] hsr_slave_1: left promiscuous mode [ 277.735774][T13668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.738043][T13668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.740558][T13668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.742875][T13668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.747067][T13668] veth1_macvtap: left promiscuous mode [ 277.748793][T13668] veth0_macvtap: left promiscuous mode [ 277.750496][T13668] veth1_vlan: left promiscuous mode [ 277.752110][T13668] veth0_vlan: left promiscuous mode [ 277.863991][T13668] team0 (unregistering): Port device team_slave_1 removed [ 277.911974][T13668] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 08:53:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=00000000000000f0 RCX=ffffffff8199a6ea RDX=ffff88801f2f0000 RSI=0000000000000000 RDI=0000000000000001 RBP=1ffff920000eef76 RSP=ffffc90000777b98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000200 R14=ffff88804e262440 R15=ffffc90000777c68 RIP=ffffffff81b9cbdb RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000016c0 CR3=000000004e7a2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3a0f33a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc18520f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc18520f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc18520f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc18520f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc18520f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc18520f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000003 RDX=ffff8880244fc880 RSI=ffffffff8bd34c00 RDI=ffffffff8bd34c40 RBP=ffff88806a728580 RSP=ffffc90003dbf620 R8 =ffffffff816ac990 R9 =fffffbfff20c4502 R10=ffffffff90622817 R11=0000000000000000 R12=0000000000000003 R13=ffffffff816ac990 R14=ffffffff90625b34 R15=dffffc0000000000 RIP=ffffffff81adc884 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2440ed7d60 CR3=0000000024454000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f244037c6a3 00007f244037c6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda86e2af0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555574ae17ac 0000555574ae1230 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555574a6fa28 0000555574a6f8f0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04018010000c014c ae0010000bf0030f fffffffe10000be0 030010000bd00300 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 040fffffffffffff 040b80040fffffff ffffff0407800401 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8010000c014cae00 10000bf0030fffff fffe10000be00300 10000bd003001000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0bc0030010000bb0 030010000ba00300 10000b90030ffe10 000b800300100007 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f00300100007e003 00100007d0030010 0007c00300100007 b00306100007a003 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000026e14c RBX=0000000000000002 RCX=ffffffff8b565469 RDX=ffffed100d506f86 RSI=ffffffff8bd34c00 RDI=ffffffff81906ff9 RBP=ffffed1003a50000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d506f85 R10=ffff88806a837c2b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d280000 R14=ffffffff90622810 R15=0000000000000000 RIP=ffffffff8b56684f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f237c466f98 CR3=0000000039b68000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000001000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85402955 RDI=ffffffff9ab78740 RBP=ffffffff9ab78700 RSP=ffffc90003ed7288 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e34312e36 R12=0000000000000000 R13=0000000000000074 R14=ffffffff9ab78700 R15=0000000000000000 RIP=ffffffff8540297f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f237c4886c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c32938a CR3=0000000100af4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000