last executing test programs: 2m5.861403329s ago: executing program 2 (id=140): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x20, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, 0x21111, 0x9c35}}, 0x20}, 0x1, 0x0, 0x0, 0x58894}, 0x24055) 2m5.861143284s ago: executing program 2 (id=141): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c00008008000340"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, 0xffffffffffffffff, 0x29, 0x0, @val=@iter={0x0}}, 0x40) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000200)='btrfs\x00', 0x0, &(0x7f0000000380)='acl') ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 2m5.692376114s ago: executing program 2 (id=145): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000160085"], 0xf8}}, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x80000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8, 0x80, 0x5, 0x9, {{0x13, 0x4, 0x1, 0x2b, 0x4c, 0x64, 0x0, 0xfd, 0x4, 0x0, @private=0xa010102, @local, {[@end, @cipso={0x86, 0xa, 0x3, [{0xec1c976cd706208d, 0x4, "a4aa"}]}, @lsrr={0x83, 0x13, 0x78, [@multicast1, @multicast1, @remote, @multicast2]}, @end, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x5, [{@local, 0x40}, {@rand_addr=0x64010100, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}}}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x6, r3, 0x9}, 0xc) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) 2m5.691440523s ago: executing program 2 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) r1 = getpid() sched_setaffinity(r1, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 2m5.622351099s ago: executing program 2 (id=147): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r1 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x3, 0x600800) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0x2b, 0xebec93e830f96111}) (async, rerun: 64) io_uring_enter(r1, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) (rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 2m5.302255064s ago: executing program 2 (id=157): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) lseek(r2, 0x6aa, 0x3) lseek(r2, 0x1000000000931f, 0x0) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) pwritev2(r3, &(0x7f0000002640)=[{&(0x7f0000000580)="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", 0xff8}], 0x1, 0x7ff, 0x0, 0x0) 2m5.247812305s ago: executing program 32 (id=157): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) lseek(r2, 0x6aa, 0x3) lseek(r2, 0x1000000000931f, 0x0) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) pwritev2(r3, &(0x7f0000002640)=[{&(0x7f0000000580)="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", 0xff8}], 0x1, 0x7ff, 0x0, 0x0) 1m21.251301852s ago: executing program 1 (id=850): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000000c0)=0x9, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m20.561664503s ago: executing program 1 (id=865): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1c, 0x0, @remote, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd697a262d08383afefe8000000000000000000000000000aaff02000000000000000000000000000102009078000004fe620813313f6fff00ff0100080000000000000000000000010000000000000000000000000000000184000a3865000000"], 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000080)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@canfd={0xd, {{0x0, 0x1, 0x1, 0x1}, 0x2f, 0x2, 0x0, 0x0, "a82000012ac444e6d9129857a1593bed923fbc6fbc1ee2946cec7f0487be264ff0aad8efc92bfda7e8893716ce9a39b160933adde2c3f8a77c2c1e73eb047028"}}}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x20000000) (async) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xea2029dcd3934029}}]}}]}, 0x40}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002400)="9c", 0x1}], 0x1}, 0x800) r5 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r5, &(0x7f0000000040)=""/4109, 0x100d) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) (async) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="8f176e010064", 0x0, 0x10, 0x1001a, 0x0, 0x0}) 1m20.559969131s ago: executing program 1 (id=866): r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00') (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x40042, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)=0x6) (async) read$dsp(r4, &(0x7f0000000680)=""/180, 0xb4) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r3, 0x2586ad4018a3b31b, 0x1, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010093b95736f8bfa5349bf7c1ee5e07bf5e4170e50945fe83a44674bc0272af2abd70a472b10ad64be900fcdbdf250100000006000800a1aa00007512d387468a5abdabce4126a72c0b497ed13d967c68c6a8e541e650e75447dfde31565cca47c028a328a4909dca79136ee0f8563bd5c4ee"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r8, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) (async, rerun: 64) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x24, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x3c) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@link_local, @random="8608ab9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x3c, 0x3a, 0x1, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], "307585520d694c7f6c801176"}}}}}}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m20.498268941s ago: executing program 1 (id=867): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c000580080001400000000008000240000000000800014000000006080001"], 0xc4}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m20.496440355s ago: executing program 1 (id=869): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff80850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000009c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="48c5"], 0x69) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x9f, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffbfff8}, 0x94) mkdir(&(0x7f0000000040)='./file1\x00', 0x86) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 1m20.42113633s ago: executing program 1 (id=871): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) r2 = fsmount(r0, 0x1, 0x1) fchdir(r2) (async, rerun: 32) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 1m5.409807956s ago: executing program 33 (id=871): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) r2 = fsmount(r0, 0x1, 0x1) fchdir(r2) (async, rerun: 32) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 25.230055949s ago: executing program 5 (id=1477): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002640)={0x14, 0x3a, 0x300, 0x70bd2c, 0x25dfdbff, {0x1f}}, 0x14}}, 0x4000000) 25.229314219s ago: executing program 5 (id=1478): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x94e}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x94e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x90) socket$inet(0x10, 0x3, 0x0) (async) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$alg(0x26, 0x5, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)={0x6c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x42}}}}, [@NL80211_ATTR_BEACON_HEAD={0x4b, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @initial, {0xd, 0xef9}, @value=@ver_80211n={0x0, 0x7, 0x1, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x2, @random=0x5, 0x8540, @void, @val, @void, @void, @val={0x6, 0x2, 0x9}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x8, 0x38, 0x4}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x28, 0x72, 0x1c, 0x9}}}}]}, 0x6c}}, 0xc020) recvmsg$can_raw(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) (async) recvmsg$can_raw(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r12}, &(0x7f00000006c0), &(0x7f0000000700)=r11}, 0x20) recvmsg$unix(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r10, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x44}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8983, &(0x7f0000000140)={0x8, 'wlan1\x00', {'macsec0\x00'}, 0x466f}) 25.0612288s ago: executing program 5 (id=1482): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$inet6(0xa, 0x3, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xd, &(0x7f00000002c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], &(0x7f00000001c0)='GPL\x00', 0x83, 0x57, &(0x7f0000000780)=""/87, 0x0, 0x39, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000800)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r0, 0x1], &(0x7f0000000840)=[{0x0, 0x4, 0x9, 0x87eec8279b11ec}, {0x2, 0x1, 0x6}], 0x10, 0x3}, 0x94) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000940)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000980)={r3, r4, 0x1c, 0x0, @val=@perf_event={0x5}}, 0x18) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"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"}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) setresgid(0xee00, 0xee01, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_overlay={0x3, 0x0, 0x4, 0x70000, 0x8, {}, {0x3, 0x0, 0x3, 0x40, 0x5, 0x2, "61f277c2"}, 0x7ff, 0x3, {&(0x7f0000000140)=[{0xffffffff, 0x10000, {0x6}, 0x80000001}, {0x1, 0x9, {0x7ff}, 0x6}]}, 0x6, 0x0, r6}) setregid(0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 24.971191675s ago: executing program 5 (id=1484): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x28ebb6df408b9988}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="24c6921e368ac60e04cca5f54e3c13976334179d9572fc00a72fb6ff7d70d1427ab87f5b3f4c8bcb73cbf6ee0fe62090513cbae17f59dcd2671cf554e5", 0x3d}, {&(0x7f0000000080)="cbe2cf32db2c58edfbd5b984496fdfffbf6cf86d8dc0d3821121ec3b86a34dfa8395adb5f9256631c0fb", 0x2a}, {&(0x7f00000000c0)="d48d0b9117b8738056d1fa3fc084e824aed086a43f76ac54c87f5b231c13234cea365becf735ceb71b147b73e5db2d5fa5e0f0c6d7b037f228475536450df185502478a159b001100c944b26fe7aa79d5e9a876c644adb8db2b82cd5fb75b95705f42d6c7eb82b20c4e69e20fedbc6516ff31c52d7d9b4e3c2ae48f920e83a79005ef21c3cfb907c86215e3611c59ddb7a6396f2dfb9e6f99362a44ab9217cd36a5fd96580469f9271436fd5b218e3008e3a67af062216944337b226ba09f214038a06002198ec311926c1c49fcd3d907fbf3c43fc8d985f081fa23b282be5af416d", 0xe2}, {&(0x7f00000001c0)}, {&(0x7f0000000200)}, {&(0x7f0000000240)="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", 0xfd}, {&(0x7f0000000400)="031727f13c777f910c283f7af419d7f0ca755f6a986f487b3d96515731d57c3cc251b25ff49e37ce8dc1f6287af5ba684d3833e3f1623d4b4f8cea38b6899fd8a090092874adc386c64f0a3a366fa4a465047693fcea57902b008238a6565c24160203ea3065eed666462e6f367f2143b3b9e73819d1b167452d62eb18d6dff65e4bcb83e9d832c7aa4b78", 0x8b}, {&(0x7f0000000380)="2675508d0c5882", 0x7}, {&(0x7f00000004c0)="c65d0d97aadf2670e9b2bfd0880406e201e448fe938c11477f5a072fa5e00645e8954316d1fb42efdb09b99e9b4bb5b1840a5a20969d894f737b197fdefb24923ab892630b460f7328679d14f5c6dd07bb9b0f86a6a0faf169e3dd", 0x5b}], 0x9, &(0x7f0000000800)=[{0x98, 0x114, 0xc, "b632425b57be066835bee4be6b56442494fb5c9b51e41252c8d1eb3789aca3e25860f8d2d7f7815face59b6887a2f7cc44c7627ea538f025ad2741a0b77e081a76c463b19e8148dd244940d62cda00cb76b869e2f459a70ab95d04226d740e8060d34414f2d544ecbf5bb43be9f7d7f886d0e0853930715074985d2b01648887c5"}, {0xb8, 0x183, 0x8, "bcb29f0a559081389772679a1a17b0533bfd7071438f70bed43c384e3fd8c5dbd5a05b77f561ee15445d1bd69f4ad57b0e7b34525749fb889a09d23a43c14abeb68a7df9d0e1ece8d102387f1360194ec94bd21b485d0d084be5049a4bc12a10f01118c705ea405442b7da4706133799b9689b069278bce6ca925311e0c4bd675f867b173c9a4d191b5e3571b66cfe9bf28257514b559928423d62158366682b20adb69852"}, {0x108, 0x110, 0xa0000, "95b4a1274768044bd85373985fe26d852ed84ed00d2e80104c6130f227bdb230e9730081e784ae77db1337e96deaf8438c8f306c9644f0303078ab488a577a6f1853c7f16778ef8d17944e9cbc6bb78b226034115a3641995761fb0bb5cabe77e0298302aa448b0025ddfc76dd2d160108e366fef2a9eae6cde3eb3e3b39703db4b23ce689e72be01059f716030eb91b87e353a8963e701fdb7ef8559dbe2d9a7c8661d6f6c360e9135d218f44d895dd0faa90a9dfb2f33d34783498c46ad3c531f3f2f661c599e153fe59a10d43dd7abfad839bd58e8de10c812e1a996259b21438ff2196bbe4b6a5aea8ecd0ecdd961615920adeb8"}], 0x258}}], 0x1, 0x20000040) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r3, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) shutdown(r3, 0x1) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x7) r5 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r5, &(0x7f00000002c0)=""/75, 0x4b, 0x0) r6 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x2, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80843711, 0x0, 0xfffffcf7, 0x0, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000140)={0xb}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0x92) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 24.629602129s ago: executing program 5 (id=1488): r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000100000000001c140000fe004001000000000800010000000100"], 0x24}}, 0x2000a000) r2 = syz_pidfd_open(r0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x80800) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000180)=@ethtool_stats={0x48}}) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 23.768562798s ago: executing program 5 (id=1502): sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="9feb01001800000000000000200100002001000008000000030000000000001101000000070000000800000002000093080000000200000007000000040000000400000005000000080000000a0000000000000e040000000100000004000000000000010000000058002b020900000000000008050000000f00000000000007000000000800000004000004010000000600000001000000010000000400000000000000030000000600000004000000010000000f000000"], &(0x7f0000002080)=""/4096, 0x140, 0x1000, 0x0, 0xaed, 0x10000}, 0x28) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) getdents64(r0, &(0x7f0000000080)=""/61, 0x3d) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa00000000330000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000d0000000000000048000400656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00140073686131000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca836e8a1c6cb87cd40000000000"], 0x184}}, 0x0) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300)) (async) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) sendmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0xd, 0x24005805) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0xa2c9, 0x1000, 0x8000003a, 0x800, 0x2, 0x92001}, 0x1c) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r6, &(0x7f00000005c0), 0x0, 0x40000, &(0x7f0000000200)={0x11, 0x8100, r7, 0x1, 0xe0}, 0x14) madvise(&(0x7f00006b7000/0x2000)=nil, 0x2000, 0x9) fsopen(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x129d02, 0x0) (async) unshare(0x6a040000) 10.230367336s ago: executing program 4 (id=1684): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="9feb01001800000000000000200100002001000008000000030000000000001101000000070000000800000002000093080000000200000007000000040000000400000005000000080000000a0000000000000e040000000100000004000000000000010000000058002b020900000000000008050000000f00000000000007000000000800000004000004010000000600000001000000010000000400000000000000030000000600000004000000010000000f000000"], &(0x7f0000002080)=""/4096, 0x140, 0x1000, 0x0, 0xaed, 0x10000}, 0x28) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) getdents64(r2, &(0x7f0000000080)=""/61, 0x3d) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000580)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="20010000100013072abd700000000000ac1414aa000000000000000000000000ac1414aa0000000000af4e5b0000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa00000000330000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000d000000000000000500190033000000280017000300000026bd70002abd700028bd700026bd700000010000000000000300000010000000"], 0x120}}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1810c0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r6, 0x4004743a, &(0x7f0000000300)) (async) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000001f00)) (async) sendmmsg(r5, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24005805) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee4, 0x10010, r1, 0x8f05000) (async) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r8, &(0x7f00000005c0), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r9, 0x1, 0xe0}, 0x14) (async) madvise(&(0x7f00006b7000/0x2000)=nil, 0x2000, 0x9) (async) gettid() (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 10.169700334s ago: executing program 4 (id=1687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) accept$alg(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003440)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)="96dcf8cf814dff2ebc30b7477805e55a519c412ecf6db5d70b80edac92b9211af27b6917d3d79fe0469c09578a4b998fe87ab3aead0b86a227e4c08f10fc75bd1b8941b4c7421442029d41925407823bf745bae06eb1b2cace19e58dfbe575d86ab4245be70282af4dd6addbe7b057ed05b5551e048e0cf5f2b5443b1a894b63fc96ca230814568a89f70fc139", 0x8d}, {&(0x7f0000000480)="06d067e53cc5d3a39deab6b68711bba8db63ace916825818b2ccdb4f38a2e1e8246eb6e93be73bd7356b9859372eb3f3a9eb3517751637d80145a1ce5b86acc74bfd2e3e0e28ee79ab193723e5b336cffdb4d71c71eae59c28d1f79b519c915dcd4aaaad9cc7452103aceeb71918c05142659fc2d5534db4df65a42e76cd8ce3f855895a3035d492d887b1a02e5f3226d9d225c97b9962a602361ccb73b3e6fdac796ee37bddbcec6b9631023f7dda5202a967d3ca53a55714b0567072949c", 0xbf}, {&(0x7f0000000240)="e4fa6d5a8ec4af2dda7311c5f9dfb2462bf239ad5f5e4203bb52f915eb51aee925c3e8deeedf86e4ff493e36a8fc9beba85c2ce8de947cbc83e66d88c70678e6166cb585553c270a0a6e9f9a8bfcfd537eaccef89daf05524788883a2503d97ae13b7813", 0x64}, {&(0x7f0000000540)="f8d4a40534b65d6b4bef9a98b5192256b7d2dfecb3725a6c4bd002b496cacd8cb546536f6b73ee7bc36da2f1790ff8f86221373176d0c7c397612012eb837d26b373cfe046af10da20c04bb7c66dc73d21b994b0c09fa482737e0274d4cdc5", 0x5f}, {&(0x7f00000005c0)="7d5a28d237e29d8cf8c77454700dfdba45c6359ffdffdc7478b29b2e3272667b0acd0170441656209c5883d1cfab38271c72aadce99c754fe1c220fdf1ec68b83d25012233f43a3466486d894af467745378f6204a7bf474fa60ee846bdf2faf4d0b1a30ddcd1800f99a88be347b8f3c8995d7c691764e9a5667b38a05783d4b93e3e245e290b99addafc9c857d9689d5e7521d58341b833ec5e80c26cc9eadf436efd1290b8fdd5c83dfac3ad7a0cd4bb555d21bb12c16af428a5aa0cd89bf3ed6837176ef1376ed9170a2054c59c76", 0xd0}, {&(0x7f00000006c0)="2b79bfe3a8aa67c41cade2af19a948ec1fac2a708078a26a0336490102ac72c22fd47f9009fc32f39da333d57bf1c363b34990b88bf418acadce0a7cf02b0407ef1d3511db9b20b5ee008a44209ff9fd049cb2d6f8e663983757046a02cca65e5f3d8ec103bc649da4d57b9af0413433fb", 0x71}, {&(0x7f0000000100)="3824350fd4dc5790972f0ab2e41a897d95649c1cff61d2a607a3b2ab1cfa1ca0beef94c29487a2fcfb2301f218dc563bfb7bd757742acbad917c07", 0x3b}, {&(0x7f0000000740)="3bde2264a90c0a9eb5ceadbe2880fa884774b408373d8e7785b4dbae246e0188c96caa6c9abedf056f853cd959594fc179ddc1bda72bda4992795513f2fd59bda7bb1d97dc073927c95b8160752f3e8f5408a3245f6c47485ecf0a161a756e29cc3d9077a2057422ff2a37a1e36ef0f8270cabf98b030e622e1da608e028209b206f2aa2b24c16f45a06b467a535be209460ba3f8be37a3a8351d05f9777f56be0a3b3cc1530aee662ac7c5216cac4c83313f60bd1e6155d0a773ae313566f395d4f0dbb83d265e1", 0xc8}], 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="e8000000000000001701000002000000d4000000d87d93cd3dacf902d4affd280ef157dce9c7b815765dd9f18d0d5e8debced852a91cd79119708ac2f506ed1d06c824710400000000000000261f62f3c90426e458c63e8ac0e485a6fef6076e0cd3bf4bb3efc37bdbfc75c08882def90754a545b97c7d3e670a5b1f2abf341fd248f489371cda79d75b46666056d9ce03ebeab88ed00b4111854a670cb264fbef6543ba12ce49efe552ee27c421b0fb2e7f38f0f8b0e1002aeef864723e0cdf6ea59ff6fea8f6fcd4e8f34eb0886f03d9fb6602e4335c8b6353485d59ee8f4ef31d9fbca4b05703"], 0xe8, 0x1}, {0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f00000009c0)="c3f0b44e894d1b9132dd91957c55c53e3577ee38b48c9975d41c5e5f0c23ada5422beeca674b40af217599b77226f104b51d68351ec15559a7d1df2cee5312f947fa1fd993b09713c7f118527f2de5cbdcee5bf2cf777c08c219f971efe9ad2784afc4f037343cf1a37da2ba5235fd382204a70276aff5f4598356879e9d1685a4653c6d59e0771975225b28e69cba00c13fd51d3b2dfbcdefa6ccbb2f42d43a0c668e58d6f5aeb3ba902c036a4a0a5a1580caae2ea6ba915506c28112d318e53e435943fdf81d907c9f49d58caa52ee39", 0xd1}, {&(0x7f00000001c0)="8c6dc4add769e1c349b8c7ffefb87786b7ba7c14ce984202c516cbf8c0", 0x1d}, {&(0x7f0000000ac0)="7922405a8284224a11ae694ddd4cf9b8fa27993e90f4960fe010ec2f3fecbdf2de00ef210554ddbbcd1e39332e2e9efae3ad189c84374b7c051503d5c5dd4c5df50afe8dc515d09f6cd9cb27c2d5b1c9f05e4c39d3e15430fd4deb8aefb2dbc28c60c6c7c1ae53c4ced143af8fa4226fe9da48631e1f2370acd2fc0496be0c14fef3b70e578474d7e9f337d1119f97743f23a8f8c909817e9590f4f36f6c1d52e3b6b968a78280e814b4750ca9de166637acb8bec2f694e9c2f86746713c9905302af456dadaf320cd6f71efb3dcbe546f122b61904c0d308de59263982d06d51ffa6ede19fe7d43dde14f97a8b6", 0xee}, {&(0x7f0000000bc0)="97c8e3d7969e019692ad50370b92f05d1300e27424711105b001838790cbcdfffe6ca76734e9373a77f22360ac95e99d4d15c103b1a5913d6049dc28f0cebd1ccdf854934361bd2973bd3032d7249acfcba1674d0da74e56017b05baf839d7c048525be6b4a51e928a7987cb732db403c2a7f87013b84f02b81eae7ba400640fa8f1f8a552", 0x85}, {&(0x7f0000000c80)="931079267edcd6fc83501d7f7c7f309359783f308488745f3ea2", 0x1a}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="7854494383543cf6476f9d88ad583dfeeaa577e6b7c8e770416619d0c9b8b9d07e2923d8824bcf850d6dbbf044e98a7f06aeb7b72c51ccf573decc1d07405331e3dff2e1d30c0df6e9da70f509f311590604329c69bcf7a124f5ce485ca6d77e910d86e42601a2c6c555e2712a63ec86bdc7f0d7965f5b7a004fc0e69a9964a2499d416a9ad89557ab0123229be2c46c2b38", 0x92}, {&(0x7f0000001d80)="50973d7feefd0a21d20919e41675ff740440663c7472d666e6c6fa4d9f952374b36280cfc3254556574386199e592342ddf5c4e63ed8feedf9037ebe5c6908d7b27a4268bdc1f5a80c4c0303a81f83f4bba8731b2aca00738dc72218837c6e6bf3477f9ba708ee5510ed44bfc74a567c9916740cd0ca4f6a6fb2dc226bae3e40956a23d1253bb4279b807474e52f10f0f348d9f758110188f4692231e963f028de60e90ff2793c9eee6ba80c90c792195df132eee1f3e67937145cb08c90cfc43aff5e6799e30f23b6030f4cc9353817c29c3ab79ea41fb9cd80ad5589f4dcde436e98286e38deb95fcfb8c456f5e5", 0xef}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f0000001e80)="ef8e4d482fd44a8c30edad1684fcca7b1ddc762a11acf482d06b58298b0a00b3f2a23a105d2dfba5e4e6ebcfe720a7ce4b412e46c13fc435c4763163ab6c4e046a25dc136aa8550d781c5b2a93d5d97643eb2986c1f10085408226b0c383faf3405770ef9c38ec08ca90e66aed9828897e68753e951f331026c188010a0f052b3f094d256ea2da2d387d37436384b9b000c1483f684b2e664d8438f04ffa4ddc225c6ea03e88bffe2519f99a53b5cdecfd54cf00c57d9e882ff6043a65bf2bb045de", 0xc2}], 0xa, &(0x7f0000002040)=[@iv={0xc8, 0x117, 0x2, 0xb3, "4650ec1b5b6624d9098d5d9287ceba22b014be22f62a760ca0894ca954262e2b213074000de7331884274e00df7cb9fb98f70f84af7d15d3f0f351d374ebaef1ca65ccba1341f9e52063359fd84194427a43c320fc5ce8f3340c2538f780f1d383e09c197bbcf9a5f725c44b763c4ca7a70c4112aac6119ac6ef3a5f50169e4f8405a670ec94dde52ec03cdbb07386bd99cf97c36c57416b736d69c167e28ebedd991b96375cc0bf8debc2261196627961d9f4"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xd8f2}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x128, 0xc001}, {0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000002180)="cc73f7cf5c0d971cd75c9619211708893e136fc6c5f9c4881bd27d702e2f098aaea02ceeb059c05c0c6b9e888bcf3297d52ed8d75f32e344f368f0b709728e2bc182bc2ffa2663ae1c99626ea360b3ea6dc81aa2ab8631ac741d6300a046eb7e61d61d7a08775c1f1b2f3194d63237c294a4cf65a7", 0x75}, {&(0x7f0000002200)="c7b228dc0e1c196cdd39b25c7acd4870857c48706e42d2621eae585ae2f0c8f15b47d95e4063b45816db829bf98b9162f10b771c1ddaa19223fd67cc8557cd747c096cb0faffb7aa47e51cc036d35f48e9977b6d5b655f2936c3a7a138", 0x5d}, {&(0x7f00000033c0)="c7fb1f540d3b47604da8dc4a5c2bd7ce918fca8fe4921705233ce89e98e35820d917b937a17f4b8b689ff2d7139fe175f22cdd8f48c6207b9b7d377aca4f4eee8dc6f8ce052ae29870a80007ee4e772cfe59679ca43e55cb13afaa3cf3db99c9a9", 0x61}], 0x3, 0x0, 0x0, 0x4000}], 0x3, 0x24044000) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) r6 = dup(r5) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000002c0)=0x10000) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0xea, 0x55e, 0xffffffff, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r9, @ANYRES32=r11], 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r10, 0x0, 0x0}, 0x20) (async) fcntl$setpipe(r8, 0x407, 0x7000000) (async) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) (async) pipe2$watch_queue(&(0x7f00000002c0), 0x80) read$char_usb(r7, &(0x7f0000000040)=""/208, 0xd0) 10.021062876s ago: executing program 4 (id=1689): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xfffffccc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 9.920931417s ago: executing program 4 (id=1690): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = io_uring_setup(0x3b2f, &(0x7f0000000000)={0x0, 0x603b, 0x10, 0x1, 0x2a8}) (async) r2 = socket(0x11, 0x3, 0xffffffed) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) (async) ppoll(&(0x7f0000000c40)=[{r2, 0x20}], 0x1, 0x0, 0x0, 0x300) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r3, &(0x7f0000000000)="2e000300010003", 0x7) (async) close(r1) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 9.920314639s ago: executing program 4 (id=1691): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=@migrate={0xac, 0x21, 0x101, 0x0, 0x0, {{@in=@private=0x4, @in=@local}}, [@migrate={0x50, 0x11, [{@in, @in=@broadcast, @in, @in=@remote}]}, @policy_type={0xa, 0x10, {0x2}}]}, 0xac}}, 0x0) r1 = io_uring_setup(0x66e0, &(0x7f00000001c0)={0x0, 0xa99f, 0x80, 0x1ffe, 0x3bd}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000a54f00000000000000100800010001"], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x100000000}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x27, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001"], 0x1c}}, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) setsockopt$packet_int(r8, 0x107, 0x7, &(0x7f0000000040)=0x6, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=@migrate={0xac, 0x21, 0x101, 0x0, 0x0, {{@in=@private=0x4, @in=@local}}, [@migrate={0x50, 0x11, [{@in, @in=@broadcast, @in, @in=@remote}]}, @policy_type={0xa, 0x10, {0x2}}]}, 0xac}}, 0x0) (async) io_uring_setup(0x66e0, &(0x7f00000001c0)={0x0, 0xa99f, 0x80, 0x1ffe, 0x3bd}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000a54f00000000000000100800010001"], 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x100000000}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000000), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) (async) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x27, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001"], 0x1c}}, 0x0) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) (async) setsockopt$packet_int(r8, 0x107, 0x7, &(0x7f0000000040)=0x6, 0x4) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 9.860681372s ago: executing program 4 (id=1692): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000080)=0x2) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) fadvise64(r1, 0x4, 0x400, 0x3) (async) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) creat(&(0x7f0000000bc0)='./file0\x00', 0xecf86c37d53049cc) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000180)={0x18, 0x0, 0x0, {0x1}}, 0x18) (async) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000000)=ANY=[@ANYRES16=r7], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d6664837266646e6d3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="1663616368653d6d6d61702c6b"]) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x0) (async) r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x4, 0xdb6, 0x4}}, 0x30) (async) pwritev2(r9, &(0x7f0000000400)=[{&(0x7f0000000380)="04", 0x1}], 0x1, 0x448, 0x10001, 0x17) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRES16=r7], 0x60}, 0x1, 0x0, 0x0, 0x200c08e5}, 0x8000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) 8.604399619s ago: executing program 34 (id=1502): sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="9feb01001800000000000000200100002001000008000000030000000000001101000000070000000800000002000093080000000200000007000000040000000400000005000000080000000a0000000000000e040000000100000004000000000000010000000058002b020900000000000008050000000f00000000000007000000000800000004000004010000000600000001000000010000000400000000000000030000000600000004000000010000000f000000"], &(0x7f0000002080)=""/4096, 0x140, 0x1000, 0x0, 0xaed, 0x10000}, 0x28) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) getdents64(r0, &(0x7f0000000080)=""/61, 0x3d) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa00000000330000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000d0000000000000048000400656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00140073686131000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca836e8a1c6cb87cd40000000000"], 0x184}}, 0x0) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300)) (async) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) sendmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0xd, 0x24005805) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0xa2c9, 0x1000, 0x8000003a, 0x800, 0x2, 0x92001}, 0x1c) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r6, &(0x7f00000005c0), 0x0, 0x40000, &(0x7f0000000200)={0x11, 0x8100, r7, 0x1, 0xe0}, 0x14) madvise(&(0x7f00006b7000/0x2000)=nil, 0x2000, 0x9) fsopen(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x129d02, 0x0) (async) unshare(0x6a040000) 1.891032263s ago: executing program 3 (id=1777): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff0000004000000000fcffffffffffffff1a000000000000000100000000000000feffffffffffffff770000000000000005000000000000000000000000000000ff7f000000000000080000000000000001000300000000000a00100001"], 0xc4}}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}, 0x1, 0x0, 0x0, 0x4044054}, 0x0) 1.890164454s ago: executing program 3 (id=1778): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802681) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000080)={0x48}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0x5, 0x100000000, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x66000300) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000140)=""/57, 0x39}], 0x1, 0x8, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x46}}}, 0x7) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='efs\x00', 0x2000802, 0x0) 939.704713ms ago: executing program 3 (id=1787): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 871.119014ms ago: executing program 3 (id=1788): r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000003, 0x13, r4, 0xcd3f0000) 630.511443ms ago: executing program 3 (id=1790): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) (async) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000180)=0x4, 0x4) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af92e4b39ff, 0x0) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) chroot(&(0x7f00000001c0)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xae}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x39c}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffa}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x68}}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000380)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@newsa={0x440, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x84, r2, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x0, 0x8, 0x9, 0x6}, {0x0, 0x0, 0x22, 0xfffffffffffffffc}, {0xc, 0xf}, 0x70bd28, 0x0, 0x2}, [@sec_ctx={0x4f, 0x8, {0x4b, 0x8, 0x1, 0x3, 0x43, "e3fb545ff3a173c5f7e463d99a6922d92eeef666083f1b58d47d3a12b4606c11fb42772fb0f46eae6139e4c7052b8eb57eb753b0feeef2fd03006525c88662e330994d"}}, @algo_auth_trunc={0xc3, 0x14, {{'streebog512\x00'}, 0x3b8, 0x180, "6b26b1bef9b92a256467031d55899e71a9837f85a27bc9b5964e840d1a65d6442dd07896b273632693066db79e5d3337e9ce52d6e1fb6f3e809e7ccfaebd87390f56357f255fa1f2434979b1cac5e0c1a81ff78d777d8648fb63c0e8dd25a2740f328e61e98a59bd873a537d15be1a669ddf9ad3014903"}}, @algo_crypt={0x5c, 0x2, {{'lrw-twofish-3way\x00'}, 0xa0, "70d8b3c411a05247a97b6c5dd68a691edf44ceea"}}, @lifetime_val={0x24, 0x9, {0x7fffffff, 0x40, 0x100, 0x9}}, @tmpl={0x144, 0x5, [{{@in=@multicast2, 0x4d6, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x34ff, 0x0, 0x3, 0xa, 0x8, 0x2, 0x1b4}, {{@in=@multicast2, 0x4d2, 0x32}, 0x2, @in6=@mcast1, 0x3507, 0x4, 0x1, 0x6, 0x6, 0x28, 0xa59}, {{@in=@loopback, 0x4d5, 0x2b}, 0x2, @in6=@remote, 0x3501, 0x4, 0x1, 0x80, 0x9, 0x80000001, 0x100}, {{@in=@multicast2, 0x4d4, 0x3c}, 0xa, @in=@multicast1, 0x0, 0x3, 0x2, 0x0, 0x7, 0x2, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x3c}, 0x2, @in6=@private0, 0x34ff, 0x1, 0x2, 0x4, 0x80000001, 0x5, 0x80000001}]}, @algo_crypt={0x78, 0x2, {{'essiv(cbc(aes),sha256)\x00'}, 0x180, "d70c609bdd65544ab7370b2d8c9a1d35bd9b0918ae3d3599029bf29c5bf0ecb9c10f2c77b03b42961b5db214ed0a1f30"}}]}, 0x440}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000280), 0x10) futex(&(0x7f000000cffc), 0x7, 0xfffffffd, 0x0, 0x0, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x7, 0x240, 0x9, {0x77359400}, {0x0, 0x2710}, {0x4, 0x0, 0x1}, 0x1, @can={{0x3, 0x1}, 0x3, 0x2, 0x0, 0x0, "a2b6c6e317f93def"}}, 0x48}}, 0x20000080) setrlimit(0x8, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0xfffffffb, &(0x7f00000000c0)) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) (async) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$can_raw(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@canfd={{}, 0x6e, 0x0, 0x0, 0x0, "4e4e488e419039dda425818c34de45852abd1372621b404219373c9a72cdb611ef256a70bf66c39d7082f2809cbc3da9bb3c86e0c5e53cff15d561c53fe9ae3a"}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000540001000100006bdf5c0000000000076a45bf51271e1fd83dbd905bb1a97b99711a4977e6775161ab0dd50194d9c16f6af60ec8a7b97037fd67120e3bf7a947702b40", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x200040c4}, 0x0) (async) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 544.787072ms ago: executing program 3 (id=1795): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000003a40)=@raw={'raw\x00', 0x8, 0x3, 0xca0, 0xc08, 0x11, 0x148, 0xac8, 0x0, 0xc08, 0x2a8, 0x2a8, 0xc08, 0x2a8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth1_to_bond\x00', 'geneve1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x48}, 0x0, 0xa80, 0xac8, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xffffffff, 0x2}, {0x1bf82b2a}, {0x7, 0xd0a5622197bd9073}, {0xffffffff, 0x2}, {0x5, 0x3}, {0xfffffff7, 0x2}, {0x8, 0x2}, {0x9, 0x3}, {0xc}, {0x2, 0x3}, {0x2, 0x1}], [{0x0, 0x5}, {0xfffffe00, 0x1}, {0x7, 0x800}, {0x7, 0x5}, {0x1, 0xfffffffe}, {0xfff, 0x100}, {0xfffffffa, 0xf}, {0x6, 0x8}, {0x9db1, 0x6}, {0x5, 0xa3}, {0x1ff, 0xffffffff}], 0x9, 0x8}, {[{0x7}, {0xc9, 0x1}, {0x1000, 0x2}, {0x401, 0x2}, {0x400, 0x574ba244a9f6eb99}, {0x2, 0x1}, {0x2, 0x1}, {0x7, 0x3}, {}, {0x30000000}, {0x6, 0x2}], [{0x9, 0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x6, 0x6}, {0x8, 0x7}, {0x2, 0xa}, {0x101, 0x5}, {0x879, 0x7}, {0x4, 0x1}, {0xffff, 0x58a}, {0x8, 0xc7d}], 0x6, 0x1}, {[{0xffff, 0x1}, {0x7, 0x1}, {0x4, 0x3}, {0x4, 0x3}, {0x8001}, {0xc3}, {0x2, 0x2}, {0x9, 0x2}, {0x9a, 0x1}, {0x1, 0x2}, {0x3}], [{0x2, 0x400}, {0x150, 0x3}, {0x8000, 0x8}, {0xfffffff7, 0x3}, {0x8, 0x8}, {0x8, 0x8}, {0x6, 0x3}, {0x9, 0x1}, {0xf7, 0x8}, {0x6, 0x6}, {0x7f, 0x3}], 0x8, 0x1}, {[{0x8}, {0x159, 0x4}, {0x8, 0x1}, {0x5, 0x2}, {0x6, 0x2}, {0xdd, 0x1}, {0x1ff, 0x1}, {0x100, 0x2}, {0x7, 0x3}, {0x7, 0x2}, {0x5, 0x2}], [{0xce3, 0xfdf}, {0xfff, 0x5}, {0xfffffffd, 0x980b}, {0xffff, 0x3}, {0x1000, 0x80000001}, {0x400, 0x1}, {0x7, 0x5}, {0x200, 0x8}, {0x8001, 0x3ff}, {0x3e, 0x9}, {0xdb, 0xad}], 0x8, 0x5}, {[{0x9, 0x3}, {0x3, 0x3}, {0x2}, {}, {0x5, 0x6}, {0x6, 0x1}, {0x2, 0x1}, {0x10, 0x1}, {0x2, 0x1}, {0xfffffff9, 0x2}, {0x5, 0x1}], [{0x6, 0x7ff}, {0x4, 0x5d8}, {0x6, 0xfffffff8}, {0x0, 0x1}, {0x2, 0xfffffffa}, {0x3, 0x3}, {0x3eda, 0x6}, {0x0, 0xff}, {0x8, 0x3}, {0x0, 0x10001}, {0x3ff, 0x1ff}], 0x3, 0x8}, {[{0x0, 0x1}, {0x800}, {0x3, 0x2}, {0xfffff491, 0x2}, {0x6, 0x1}, {0x3}, {0x6, 0x3}, {0x0, 0x1}, {0x80000000, 0x1}, {0x8, 0x3}, {0x6, 0x2}], [{0x9}, {0x0, 0x2}, {0x2, 0xfffffff9}, {0xb83e, 0x3}, {0x7f, 0x3}, {0xc4}, {0x0, 0x1}, {0x4, 0xce}, {0x8, 0x6}, {0x8, 0x8001}, {0x4}], 0x7, 0xa}, {[{0x639c, 0x905462c401af0b76}, {0x7fff}, {0x1}, {0x6, 0x1}, {0xa, 0x3}, {0x0, 0x3}, {0x5}, {0x8}, {0x800, 0x2}, {0x7b, 0x2}, {0xb4, 0x1}], [{0x4, 0x2}, {0x9, 0x4}, {0x1, 0x9}, {0xe1c, 0x1}, {0x100, 0x3}, {0x10, 0xc69}, {0x100, 0x10000}, {0x3, 0xfffffffa}, {0x15, 0x6710d57f}, {0xfff, 0x80}, {0x3, 0xc97d}], 0x9, 0x1}, {[{0xf}, {0xff, 0x1}, {0x2, 0x2}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x3}, {0x81, 0x3}, {0x9, 0x1}, {0x2, 0x3}, {}, {0x10001, 0x3}], [{0xc03, 0xffff}, {0x5, 0x8}, {0x0, 0xfffffe00}, {0x4, 0x1}, {0x9, 0x19}, {0x2, 0x3ff}, {0x0, 0x2}, {0x9, 0x400}, {0xb0bf, 0x101}, {0x3, 0x4}, {0xfffffffc, 0xfffffff9}], 0xb, 0x9}, {[{0x0, 0x2}, {0x4, 0x3}, {}, {0x401, 0x2}, {0x1, 0x1}, {0x40}, {0x87d2}, {0xffffffff, 0x2}, {0x9, 0x2}, {0x1ffb, 0x1}, {0x2, 0x2}], [{0x1, 0x8}, {0x6, 0x7fffffff}, {0x4, 0x7}, {0x5, 0x81}, {0x7, 0x1}, {0x5}, {0xdc, 0x5}, {0x0, 0xfffff56a}, {0x8, 0x7}, {0xfffffffc, 0x4}, {0x1, 0x1}], 0x0, 0x4}, {[{0x0, 0x3}, {0x8, 0x3}, {0x5, 0x3}, {0x2, 0x1}, {0xee, 0x3}, {0x7fff}, {0x9, 0x1}, {0x5, 0x3}, {0x5, 0x3}, {0x0, 0x3}, {0x80000001, 0x3}], [{0x5, 0x10001}, {0x401, 0xe0000}, {0xd, 0x1ff}, {0x7, 0x10001}, {0x3c, 0x3}, {0x1, 0x6}, {0xe}, {0x5, 0x8000}, {0x9, 0x10}, {}, {0x1, 0xffffffff}], 0x1}, {[{0xaa, 0x1}, {0x1744}, {0x5, 0x2}, {0x3a6, 0x1}, {0x5, 0x2}, {0xc, 0x2}, {0x6, 0x1}, {0xed90, 0x1}, {0x2, 0x3}, {0x1, 0x3}, {0x5}], [{0x4, 0x5}, {0x101, 0x3}, {0x7, 0xff}, {0x200, 0x7}, {0x9}, {0x3, 0x9}, {0x800, 0x927}, {0x0, 0x3}, {0x2, 0x2}, {0x5, 0x3}, {0x3, 0x1}], 0xb, 0xb}], 0x2}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x7, 0x0, 0x0, 0x2]}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1a, 0x8, 0x8, 0x7ff, '\x00', 'syz0\x00', {0x6498}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xd00) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x2, 0x0) (async) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) exit(0x1ff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) (async) syz_open_procfs(r3, &(0x7f0000000000)='fd/3\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x13}) (async) r4 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r4}, &(0x7f00000000c0)) capget(&(0x7f00000000c0)={0x20071026, r4}, &(0x7f0000000140)={0x9, 0x4, 0x3, 0x8, 0x2, 0xf8e}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x1, 0x9}) 542.871193ms ago: executing program 0 (id=1796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)="95f3dc41b8", 0x5, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000100)='trusted\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 429.040784ms ago: executing program 0 (id=1799): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000040)={0x0, 0x2, 0x10100, 0x40000000, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc02c5625, &(0x7f0000000140)={0x80f0f000, 0x2, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x0, 0x0, [0x1]}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000440)=""/32, 0xffffffffffffffd5}, {&(0x7f0000000680)=""/202, 0xc7}], 0x2, 0x6b, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r6, 0x5, '\x00', r7, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) r8 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10) connect$inet(r8, &(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) 428.902488ms ago: executing program 0 (id=1800): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01530000f9ffffffffff01"], 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x8, 0x6, 0x5c0, 0xf8, 0xf8, 0x308, 0x420, 0x238, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@common=@hl={{0x28}, {0x1, 0x80}}]}, @HL={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @loopback, [], [], 'vxcan1\x00', 'veth1_macvtap\x00'}, 0x0, 0x108, 0x140, 0x0, {0x5002}, [@common=@unspec=@cgroup0={{0x28}, {0x0, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffff}, {0xffffffffffffffff}}}}, {{@ipv6={@mcast2, @mcast1, [0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0x0, 0xffffffff], 'caif0\x00', 'pim6reg0\x00', {}, {}, 0x71, 0x5, 0x0, 0x28}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10, 0x0, 0xffff, 0x1, 0x0, "4d7993aa315f2d7890b15e25816c1e96ac3fe30705df4f3a3680275eb403e852f9370ad571de244c09c6781e850eddfd21494f66766629bb476302673c1a3f62"}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ipvlan0\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) 350.251378ms ago: executing program 6 (id=1802): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000002c0)="d98ce7fa51787a02395b2b5c94d75d36d07479b1ff2adccafc0262aeb635a3986ebca688d561c1227545cf0053b5046e456accd066e7f0a89ab2fc11a083fa1e11b340a7294744721ba16aed8bd09ab866262c754fd5cb756425748065e9a9405c1bea22b574218f580410d55bb7cde43ef352ab879b6bf968187a53729389098f261daf73784535d4f48731a0ee7ddb1ffabbac8b24a38db4c74e", 0x9b, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000740)={&(0x7f0000000440), &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x1}) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r9, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r12], &(0x7f0000000200), &(0x7f0000000580)=[r11], &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000840)={0x401, 0x4, &(0x7f00000003c0)=[r2, 0x0, r3, r4], &(0x7f0000000400)=[0x80000000], &(0x7f00000007c0)=[r8, r11], &(0x7f0000000800)=[0x3], 0x0, 0x3}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"a2e3ad09ed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d670a8b089b3f303563030890e0879b0af8c6e70a9b334a959b669a9b2f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d073b090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669114e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813491ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb4581f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab9640071550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c513a9177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f411254c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486229e5b2e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df7227dfdb0d2b9e935c5af3cf474bed79dfc24ab0f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78c8fa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000026347ee800", 0xffca}}, 0x1014) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000280)={0x5}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="5e0827ff04df892b7c4e380fff2f5745652898240000002000000400000000000000000200200444000001"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000880)={0x1, 0xffffffff, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r9, 0xc01064b3, &(0x7f00000008c0)={r13}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 348.148751ms ago: executing program 0 (id=1803): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020100030c000000000000000000000005000500000000000a00000000000000000000000000000041ddeda6249b0000ffff00000000000000000000000005000600000000000a00000000000000fc0000000000000000000000000000000000000000010000"], 0x60}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@mcast2, 0x0}, &(0x7f0000000280)=0x14) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x6, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x3, 0x9, 0x8, 0xfffffffb, 0x7}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0xfffffffe, r6, r7, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@private=0xa010102, @in=@broadcast, 0x4e23, 0x0, 0x4e20, 0xb74, 0xa, 0x4f82e83a5c6fa348, 0x80, 0x3b, r3, r6}, {0x5, 0xdd7, 0xfab9, 0x9, 0x8, 0x40, 0xffff, 0x4}, {0x2, 0x3, 0x8000, 0x3}, 0x0, 0x6e6bb0, 0x0, 0x0, 0x2, 0x2}, {{@in6=@mcast2, 0x4d5, 0xff}, 0xa, @in6=@local, 0x0, 0x1, 0x3, 0xd2, 0x5, 0x8f3, 0x3}}, 0xe8) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r8], 0x30}}, 0x0) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000140)=[{{0x3, 0x0, 0x1, 0x1}, {0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x4, 0x1}, {0x1}}, {{}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x28) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r10 = syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x441) ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f0000000100)={0x0, 0x1}) ioctl$SG_IO(r9, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0xfffffffffffffdf3, 0x6f, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4ff00fede", &(0x7f0000002240)=""/4103, 0xfffffffe, 0x14, 0xffffffffffffffff, 0x0}) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 347.745286ms ago: executing program 0 (id=1804): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) (async) close_range(r0, r0, 0x0) 291.051552ms ago: executing program 0 (id=1805): r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x10001, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) syslog(0x0, &(0x7f00000000c0)=""/240, 0xf0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5819}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000200)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x1, 0x5e, 0xfffffffffffffffc}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0xa, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r8, 0x4008af60, &(0x7f0000000040)={@my=0x1}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x34}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r9, 0x8) accept$ax25(r9, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r10}, 0x10) socket$kcm(0x21, 0x2, 0x2) 221.129059ms ago: executing program 6 (id=1806): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000480)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x1000, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0xe156, 0xe156, 0x0, 0x0, 0x60ff, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40380) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"0ed58100", 0xa, 0x6, 0x6, 0x2, 0x3b, "f700e4000000e9ffffffffffffff00", "758900", "0300", "fcffffff", ["df932139d7a911b6000000b6", "981b00", "0c436d743c97c443084000", "ff81000000008000"]}) 220.38933ms ago: executing program 6 (id=1807): r0 = socket(0x15, 0x80002, 0x0) recvmmsg$unix(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 160.627296ms ago: executing program 6 (id=1808): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="18000000180001000000f000000000000800230064010100"], 0x18}], 0x1, 0x0, 0x0, 0x4}, 0x20000880) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 160.166663ms ago: executing program 6 (id=1809): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000340009000000000000400000020000001000018009006400a553fa"], 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003c40), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000003d40)={&(0x7f0000003c80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf25010000000500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0xa}, 0x90) (async) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x1000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 6 (id=1810): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, 0x0) r6 = accept(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r2, @ANYRES16=r3], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1, &(0x7f0000000840)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0xf7fb, 0xa1, {0x6, 0x1}, {0x64, 0x40}, @cond=[{0x7, 0x208, 0x7, 0xffff, 0x2, 0x3}, {0x8, 0x2, 0x1, 0x40, 0x9, 0xd}]}) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000800)) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32=r11, @ANYBLOB="00000000000000000c001a800800058004000280"], 0x2c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0x800, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x472997a81648a9a0}, {0xe, 0xfff2}, {0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8884) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) kernel console output (not intermixed with test programs): 16130][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.019602][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.022662][ T53] usb 8-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 113.025867][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.029970][ T53] usb 8-1: config 0 descriptor?? [ 113.075034][ T9574] fuse: blksize only supported for fuseblk [ 113.234026][ T5317] Bluetooth: hci3: command 0x0405 tx timeout [ 113.289319][ T9572] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 113.291936][ T9572] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 113.372152][ T53] usbhid 8-1:0.0: can't add hid device: -71 [ 113.375413][ T53] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 113.389168][ T53] usb 8-1: USB disconnect, device number 7 [ 113.529515][ T9589] bridge2: entered promiscuous mode [ 113.531185][ T9589] bridge2: entered allmulticast mode [ 113.875584][ T5958] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 114.037657][ T9621] netlink: 'syz.0.998': attribute type 1 has an invalid length. [ 114.040712][ T9621] __nla_validate_parse: 3 callbacks suppressed [ 114.040720][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 114.050949][ T40] audit: type=1400 audit(1752689837.893:680): avc: denied { read } for pid=5351 comm="acpid" name="event4" dev="devtmpfs" ino=3219 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 114.619429][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 114.619441][ T40] audit: type=1400 audit(1752689838.453:684): avc: denied { getopt } for pid=9636 comm="syz.0.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 115.309556][ T9654] syz.3.1010 (9654): drop_caches: 1 [ 115.314004][ T5967] Bluetooth: hci3: command 0x0405 tx timeout [ 115.329835][ T9654] syz.3.1010 (9654): drop_caches: 1 [ 115.471680][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 115.621721][ T9665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1013'. [ 116.023692][ T24] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 116.163864][ T24] usb 8-1: device descriptor read/64, error -71 [ 116.381596][ T9683] input: syz0 as /devices/virtual/input/input17 [ 116.413758][ T24] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 116.513942][ T5967] Bluetooth: hci4: command 0x1003 tx timeout [ 116.514875][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 116.563870][ T24] usb 8-1: device descriptor read/64, error -71 [ 116.674025][ T24] usb usb8-port1: attempt power cycle [ 117.033983][ T24] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 117.050136][ T9718] kvm: kvm [9715]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x9 [ 117.065840][ T24] usb 8-1: device descriptor read/8, error -71 [ 117.187933][ T5967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.196795][ T5967] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.200251][ T5967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.203247][ T5967] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.205965][ T5967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.230554][ T74] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.234227][ T74] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.315607][ T24] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 117.328680][ T74] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.331934][ T74] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.344388][ T24] usb 8-1: device descriptor read/8, error -71 [ 117.371199][ T9719] chnl_net:caif_netlink_parms(): no params data found [ 117.389184][ T74] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.392722][ T74] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.451822][ T40] audit: type=1400 audit(1752689841.283:685): avc: denied { getopt } for pid=9733 comm="syz.4.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 117.457976][ T24] usb usb8-port1: unable to enumerate USB device [ 117.484538][ T40] audit: type=1400 audit(1752689841.313:686): avc: denied { read write } for pid=6608 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.491978][ T40] audit: type=1400 audit(1752689841.313:687): avc: denied { open } for pid=6608 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.501803][ T40] audit: type=1400 audit(1752689841.313:688): avc: denied { ioctl } for pid=6608 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.502560][ T9739] netlink: 'syz.4.1032': attribute type 2 has an invalid length. [ 117.526527][ T74] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.529700][ T74] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.535503][ T9719] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.538011][ T9719] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.540326][ T9719] bridge_slave_0: entered allmulticast mode [ 117.543023][ T9719] bridge_slave_0: entered promiscuous mode [ 117.547338][ T9719] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.549645][ T9719] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.551923][ T9719] bridge_slave_1: entered allmulticast mode [ 117.555497][ T9719] bridge_slave_1: entered promiscuous mode [ 117.608529][ T9742] macvtap1: entered allmulticast mode [ 117.610252][ T9742] veth0_macvtap: entered allmulticast mode [ 117.617606][ T9719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.622281][ T9719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.679822][ T9719] team0: Port device team_slave_0 added [ 117.683193][ T9719] team0: Port device team_slave_1 added [ 117.747611][ T9719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.749755][ T9719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.759104][ T9719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.768708][ T9719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.771595][ T9719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.780376][ T9719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.787665][ T74] bridge_slave_1: left allmulticast mode [ 117.789477][ T74] bridge_slave_1: left promiscuous mode [ 117.791567][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.798121][ T74] bridge_slave_0: left allmulticast mode [ 117.799947][ T74] bridge_slave_0: left promiscuous mode [ 117.802755][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.844054][ T9754] warn_alloc: 1 callbacks suppressed [ 117.844069][ T9754] syz.4.1036: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 117.854915][ T9754] CPU: 0 UID: 0 PID: 9754 Comm: syz.4.1036 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 117.854954][ T9754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.854967][ T9754] Call Trace: [ 117.854974][ T9754] [ 117.854981][ T9754] dump_stack_lvl+0x16c/0x1f0 [ 117.855034][ T9754] warn_alloc+0x248/0x3a0 [ 117.855061][ T9754] ? __pfx_warn_alloc+0x10/0x10 [ 117.855108][ T9754] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 117.855138][ T9754] ? __vmalloc_node_noprof+0xad/0xf0 [ 117.855162][ T9754] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 117.855192][ T9754] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 117.855217][ T9754] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.855248][ T9754] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 117.855266][ T9754] vmalloc_user_noprof+0x9e/0xe0 [ 117.855285][ T9754] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 117.855304][ T9754] vb2_vmalloc_alloc+0x135/0x3f0 [ 117.855323][ T9754] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 117.855343][ T9754] __vb2_queue_alloc+0x8c6/0x1280 [ 117.855385][ T9754] vb2_core_reqbufs+0xa90/0xfe0 [ 117.855411][ T9754] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 117.855428][ T9754] ? __pfx___mutex_trylock_common+0x10/0x10 [ 117.855447][ T9754] ? __pfx___might_resched+0x10/0x10 [ 117.855474][ T9754] ? trace_contention_end+0xdd/0x130 [ 117.855493][ T9754] ? __mutex_lock+0x1ca/0xb90 [ 117.855521][ T9754] vb2_reqbufs+0x1a3/0x1f0 [ 117.855547][ T9754] ? __pfx_vb2_reqbufs+0x10/0x10 [ 117.855570][ T9754] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 117.855597][ T9754] ? kasan_quarantine_put+0x10a/0x240 [ 117.855622][ T9754] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.855645][ T9754] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 117.855674][ T9754] v4l_reqbufs+0x14f/0x1e0 [ 117.855698][ T9754] __video_do_ioctl+0xb40/0xfc0 [ 117.855726][ T9754] ? __might_fault+0xe3/0x190 [ 117.855749][ T9754] ? __pfx___video_do_ioctl+0x10/0x10 [ 117.855783][ T9754] video_usercopy+0x4d0/0x1720 [ 117.855810][ T9754] ? __pfx___video_do_ioctl+0x10/0x10 [ 117.855832][ T9754] ? selinux_kernel_read_file+0x110/0x130 [ 117.855857][ T9754] ? __pfx_video_usercopy+0x10/0x10 [ 117.855897][ T9754] v4l2_ioctl+0x1ba/0x250 [ 117.855919][ T9754] ? __pfx_v4l2_ioctl+0x10/0x10 [ 117.855942][ T9754] __x64_sys_ioctl+0x18e/0x210 [ 117.855965][ T9754] do_syscall_64+0xcd/0x4c0 [ 117.855992][ T9754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.856011][ T9754] RIP: 0033:0x7fa2c318e929 [ 117.856027][ T9754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.856044][ T9754] RSP: 002b:00007fa2c3fcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.856061][ T9754] RAX: ffffffffffffffda RBX: 00007fa2c33b5fa0 RCX: 00007fa2c318e929 [ 117.856072][ T9754] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 117.856082][ T9754] RBP: 00007fa2c3210b39 R08: 0000000000000000 R09: 0000000000000000 [ 117.856093][ T9754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.856103][ T9754] R13: 0000000000000000 R14: 00007fa2c33b5fa0 R15: 00007ffca6f9e148 [ 117.856133][ T9754] [ 117.856226][ T9754] Mem-Info: [ 117.965783][ T9754] active_anon:725 inactive_anon:12090 isolated_anon:0 [ 117.965783][ T9754] active_file:9311 inactive_file:4629 isolated_file:0 [ 117.965783][ T9754] unevictable:1768 dirty:231 writeback:0 [ 117.965783][ T9754] slab_reclaimable:7859 slab_unreclaimable:72432 [ 117.965783][ T9754] mapped:25233 shmem:2429 pagetables:1601 [ 117.965783][ T9754] sec_pagetables:304 bounce:0 [ 117.965783][ T9754] kernel_misc_reclaimable:0 [ 117.965783][ T9754] free:479600 free_pcp:26510 free_cma:0 [ 117.979806][ T9754] Node 0 active_anon:2900kB inactive_anon:48360kB active_file:37244kB inactive_file:18296kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:100844kB dirty:924kB writeback:0kB shmem:6180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13680kB pagetables:5640kB sec_pagetables:1216kB all_unreclaimable? no Balloon:0kB [ 117.990338][ T9754] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 117.999988][ T9754] Node 0 DMA free:15216kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:0kB free_cma:0kB [ 118.008928][ T9754] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 118.010747][ T9754] Node 0 DMA32 free:295748kB boost:2048kB min:29564kB low:36440kB high:43316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2900kB inactive_anon:48360kB active_file:37244kB inactive_file:18296kB unevictable:3536kB writepending:924kB present:2080628kB managed:1264184kB mlocked:0kB bounce:0kB free_pcp:87460kB local_pcp:26624kB free_cma:0kB [ 118.020835][ T9754] lowmem_reserve[]: 0 0 0 0 0 [ 118.022404][ T9754] Node 1 Normal free:1607436kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:18812kB local_pcp:0kB free_cma:0kB [ 118.031930][ T9754] lowmem_reserve[]: 0 0 0 0 0 [ 118.033488][ T9754] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 2*32kB (UE) 2*64kB (UE) 3*128kB (UE) 3*256kB (UE) 3*512kB (UE) 4*1024kB (UE) 2*2048kB (UM) 1*4096kB (U) = 15216kB [ 118.038543][ T9754] Node 0 DMA32: 1409*4kB (UM) 1040*8kB (UME) 563*16kB (UME) 335*32kB (UME) 211*64kB (ME) 233*128kB (UME) 97*256kB (UM) 76*512kB (UME) 51*1024kB (UM) 18*2048kB (UM) 16*4096kB (UM) = 295380kB [ 118.044550][ T9754] Node 1 Normal: 51*4kB (UME) 43*8kB (UME) 47*16kB (UME) 172*32kB (UME) 54*64kB (UME) 18*128kB (UME) 16*256kB (UME) 19*512kB (UME) 12*1024kB (U) 10*2048kB (UM) 378*4096kB (UM) = 1607444kB [ 118.050299][ T9754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.053204][ T9754] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 118.056140][ T9754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.059076][ T9754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 118.061946][ T9754] 16375 total pagecache pages [ 118.063429][ T9754] 10 pages in swap cache [ 118.064826][ T9754] Free swap = 124632kB [ 118.066149][ T9754] Total swap = 124996kB [ 118.067449][ T9754] 1048443 pages RAM [ 118.068652][ T9754] 0 pages HighMem/MovableOnly [ 118.070521][ T9754] 283068 pages reserved [ 118.071879][ T9754] 0 pages cma reserved [ 118.296485][ T74] bond1 (unregistering): Released all slaves [ 118.359959][ T74] . (unregistering): Released all slaves [ 118.448859][ T9771] bridge0: entered promiscuous mode [ 118.456488][ T9719] hsr_slave_0: entered promiscuous mode [ 118.459112][ T9719] hsr_slave_1: entered promiscuous mode [ 118.461829][ T9719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.465826][ T9719] Cannot create hsr debugfs directory [ 118.476052][ T74] IPVS: stopping master sync thread 7864 ... [ 118.477752][ T9771] openvswitch: netlink: Message has 3 unknown bytes. [ 118.479630][ T74] IPVS: stopping backup sync thread 8739 ... [ 118.480629][ T9771] openvswitch: netlink: Actions may not be safe on all matching packets [ 118.618995][ T9787] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1044'. [ 118.652959][ T9790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.876280][ T74] hsr_slave_0: left promiscuous mode [ 118.884128][ T40] audit: type=1400 audit(1752689842.713:689): avc: denied { write } for pid=9809 comm="syz.0.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.900018][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.902374][ T74] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.912637][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.915956][ T74] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.941146][ T74] veth1_macvtap: left promiscuous mode [ 118.942931][ T74] veth0_macvtap: left promiscuous mode [ 118.953745][ T74] veth1_vlan: left promiscuous mode [ 119.114304][ T9815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9815 comm=syz.0.1054 [ 119.233808][ T5958] Bluetooth: hci2: command tx timeout [ 119.338102][ T40] audit: type=1400 audit(1752689843.173:690): avc: denied { setopt } for pid=9827 comm="syz.3.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 119.619010][ T74] team0 (unregistering): Port device team_slave_1 removed [ 119.621961][ T40] audit: type=1400 audit(1752689843.453:691): avc: denied { getopt } for pid=9834 comm="syz.3.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.696136][ T74] team0 (unregistering): Port device team_slave_0 removed [ 119.761014][ T9838] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 119.817504][ T40] audit: type=1400 audit(1752689843.663:692): avc: denied { link } for pid=9839 comm="syz.4.1063" name="file1" dev="9p" ino=36047811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.829380][ T9840] 9pnet_virtio: no channels available for device syz [ 119.831227][ T40] audit: type=1400 audit(1752689843.663:693): avc: denied { mounton } for pid=9839 comm="syz.4.1063" path="/211/file0/file1" dev="9p" ino=36047811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 120.228208][ T9719] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.234193][ T9719] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.241270][ T9719] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.249786][ T9719] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.321595][ T9719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.334294][ T9719] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.339215][ T795] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.341501][ T795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.349911][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.352310][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.364238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.368102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.372363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.376367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.380559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.384418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.519741][ T9719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.658080][ T9719] veth0_vlan: entered promiscuous mode [ 120.663115][ T9719] veth1_vlan: entered promiscuous mode [ 120.691545][ T9719] veth0_macvtap: entered promiscuous mode [ 120.697473][ T9719] veth1_macvtap: entered promiscuous mode [ 120.712065][ T9719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.719604][ T9719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.725400][ T9719] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.728211][ T9719] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.730918][ T9719] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.734502][ T9719] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.758435][ T9893] netlink: 'syz.0.1068': attribute type 2 has an invalid length. [ 120.825913][ T9846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.828089][ T9846] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.830037][ T9846] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.847616][ T9846] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.991401][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.997080][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.028860][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.031471][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.056845][ T40] audit: type=1400 audit(1752689844.883:694): avc: denied { mounton } for pid=9719 comm="syz-executor" path="/syzkaller.rxNMls/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 121.083117][ T40] audit: type=1400 audit(1752689844.913:695): avc: denied { mounton } for pid=9719 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 121.127434][ T40] audit: type=1400 audit(1752689844.963:696): avc: denied { execute } for pid=9905 comm="syz.4.1070" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=32448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 121.362583][ T9937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 121.744104][ T9968] binder: BINDER_SET_CONTEXT_MGR already set [ 121.746239][ T9968] binder: 9961:9968 ioctl 4018620d 200000000040 returned -16 [ 121.984419][ T40] audit: type=1400 audit(1752689845.823:697): avc: denied { read } for pid=9980 comm="syz.3.1086" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 121.993690][ T40] audit: type=1400 audit(1752689845.823:698): avc: denied { open } for pid=9980 comm="syz.3.1086" path="/319/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 121.999583][ T9981] sd 0:0:0:0: PR command failed: 1026 [ 122.002645][ T9981] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 122.002943][ T40] audit: type=1400 audit(1752689845.833:699): avc: denied { ioctl } for pid=9980 comm="syz.3.1086" path="/319/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 122.005732][ T9981] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 122.443843][ T5958] Bluetooth: hci3: command 0x0405 tx timeout [ 122.457087][T10008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1092'. [ 122.642510][T10015] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1095'. [ 122.696639][ T5958] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 122.774816][ T6041] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 122.808206][T10020] netlink: 'syz.5.1096': attribute type 1 has an invalid length. [ 122.843351][ T40] audit: type=1400 audit(1752689846.673:700): avc: denied { write } for pid=10024 comm="syz.5.1098" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.912147][ T40] audit: type=1400 audit(1752689846.743:701): avc: denied { read } for pid=10028 comm="syz.0.1099" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 122.923760][ T6041] usb 8-1: device descriptor read/64, error -71 [ 123.183753][ T6041] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 123.314407][ T6041] usb 8-1: device descriptor read/64, error -71 [ 123.424046][ T6041] usb usb8-port1: attempt power cycle [ 123.483702][ C0] net_ratelimit: 49155 callbacks suppressed [ 123.483714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.483720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.485706][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.490696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.494219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.499103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.502577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.507590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.511084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 123.516019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.699417][T10054] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1106'. [ 123.724668][T10054] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10054 comm=syz.5.1106 [ 123.783785][ T6041] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 123.805520][ T6041] usb 8-1: device descriptor read/8, error -71 [ 124.023801][ T8830] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 124.043774][ T6041] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 124.064592][ T6041] usb 8-1: device descriptor read/8, error -71 [ 124.184458][ T6041] usb usb8-port1: unable to enumerate USB device [ 124.193734][ T8830] usb 10-1: Invalid ep0 maxpacket: 16 [ 124.333758][ T8830] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 124.493963][ T8830] usb 10-1: Invalid ep0 maxpacket: 16 [ 124.497588][ T8830] usb usb10-port1: attempt power cycle [ 124.833741][ T8830] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 124.854601][ T8830] usb 10-1: Invalid ep0 maxpacket: 16 [ 124.983749][ T8830] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 125.006003][ T8830] usb 10-1: Invalid ep0 maxpacket: 16 [ 125.007864][ T8830] usb usb10-port1: unable to enumerate USB device [ 125.341661][ T5958] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 126.048609][T10111] overlayfs: failed to resolve './file1/file0': -2 [ 126.161339][T10113] dlm: Unknown command passed to DLM device : 255 [ 126.161339][T10113] [ 126.169104][T10113] bridge3: entered promiscuous mode [ 126.315224][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 126.315234][ T40] audit: type=1400 audit(1752689850.153:705): avc: denied { name_connect } for pid=10119 comm="syz.3.1124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 126.329970][T10120] xt_cgroup: invalid path, errno=-2 [ 126.342291][T10120] mkiss: ax0: crc mode is auto. [ 126.354247][T10120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41762 sclass=netlink_route_socket pid=10120 comm=syz.3.1124 [ 126.362495][ T40] audit: type=1400 audit(1752689850.193:706): avc: denied { create } for pid=10121 comm="syz.4.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.373724][ T40] audit: type=1400 audit(1752689850.203:707): avc: denied { getopt } for pid=10121 comm="syz.4.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.840949][T10134] netlink: 'syz.3.1128': attribute type 1 has an invalid length. [ 126.841267][T10132] usb usb9: usbfs: process 10132 (syz.5.1127) did not claim interface 0 before use [ 126.857977][T10134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.862707][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'. [ 126.865776][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'. [ 126.896008][T10135] bond2: (slave veth3): Enslaving as an active interface with a down link [ 126.978586][ T40] audit: type=1400 audit(1752689850.813:708): avc: denied { read } for pid=10140 comm="syz.3.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 127.059924][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'. [ 127.230315][T10153] netlink: 'syz.0.1134': attribute type 10 has an invalid length. [ 127.233681][T10153] macvlan0: entered promiscuous mode [ 127.244593][T10153] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 127.507172][T10168] bridge_slave_0: left allmulticast mode [ 127.508985][T10168] bridge_slave_0: left promiscuous mode [ 127.523952][T10168] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.575005][T10168] bridge_slave_1: left allmulticast mode [ 127.576817][T10168] bridge_slave_1: left promiscuous mode [ 127.578674][T10168] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.592766][T10172] netlink: 'syz.0.1139': attribute type 32 has an invalid length. [ 127.604139][T10168] bond0: (slave bond_slave_0): Releasing backup interface [ 127.656013][T10168] bond0: (slave bond_slave_1): Releasing backup interface [ 127.683345][T10177] program syz.4.1138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.702305][T10168] team0: Port device team_slave_0 removed [ 127.726790][T10168] team0: Port device team_slave_1 removed [ 127.736837][T10168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.745041][T10168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.761021][T10168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.770291][T10168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.960361][T10169] team0: Mode changed to "activebackup" [ 127.979503][T10175] vlan0: entered promiscuous mode [ 127.997199][T10175] team0: Port device vlan0 added [ 128.002569][T10180] tipc: Started in network mode [ 128.004459][T10180] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 128.022143][T10180] tipc: Enabled bearer , priority 0 [ 128.236332][T10197] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 128.268227][T10194] SELinux: policydb version 0 does not match my version range 15-34 [ 128.270639][T10194] SELinux: failed to load policy [ 128.272307][T10194] SELinux: policydb version 0 does not match my version range 15-34 [ 128.446115][T10194] SELinux: failed to load policy [ 128.447820][T10194] SELinux: policydb version 0 does not match my version range 15-34 [ 128.481829][T10194] SELinux: failed to load policy [ 128.493670][ C0] net_ratelimit: 82133 callbacks suppressed [ 128.493680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.493677][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:93:eb:2c:af:b2, vlan:0) [ 128.493849][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:93:eb:2c:af:b2, vlan:0) [ 128.494435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.494813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.495192][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.495578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.495654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.495750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.495845][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 128.599791][T10212] batman_adv: batadv0: Adding interface: dummy0 [ 128.602085][T10212] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.625566][T10212] batman_adv: batadv0: Interface activated: dummy0 [ 128.700351][T10217] NILFS (loop5): device size too small [ 128.757647][T10217] NILFS (loop5): device size too small [ 128.762461][T10217] NILFS (loop5): device size too small [ 128.787578][T10217] NILFS (loop5): device size too small [ 128.794073][T10217] NILFS (loop5): device size too small [ 128.797410][T10217] NILFS (loop5): device size too small [ 128.802204][T10217] NILFS (loop5): device size too small [ 128.807483][T10217] NILFS (loop5): device size too small [ 128.811256][T10217] NILFS (loop5): device size too small [ 128.814737][T10217] NILFS (loop5): device size too small [ 128.817917][ T40] audit: type=1400 audit(1752689852.653:709): avc: denied { getopt } for pid=10214 comm="syz.4.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 128.836042][T10217] NILFS (loop5): device size too small [ 128.838186][T10217] NILFS (loop5): device size too small [ 128.840329][T10217] NILFS (loop5): device size too small [ 128.845189][T10217] NILFS (loop5): device size too small [ 128.852770][T10217] NILFS (loop5): device size too small [ 128.855119][T10217] NILFS (loop5): device size too small [ 128.873112][T10217] NILFS (loop5): device size too small [ 128.883217][T10217] NILFS (loop5): device size too small [ 128.890225][T10217] NILFS (loop5): device size too small [ 128.895780][T10217] NILFS (loop5): device size too small [ 128.905219][T10217] NILFS (loop5): device size too small [ 128.911128][T10226] netlink: 'syz.3.1148': attribute type 1 has an invalid length. [ 128.914073][T10226] netlink: 'syz.3.1148': attribute type 4 has an invalid length. [ 128.916498][T10226] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1148'. [ 128.925655][T10217] NILFS (loop5): device size too small [ 128.930445][T10217] NILFS (loop5): device size too small [ 128.946432][T10217] NILFS (loop5): device size too small [ 128.951501][T10217] NILFS (loop5): device size too small [ 128.957141][T10217] NILFS (loop5): device size too small [ 128.959102][T10227] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 128.968618][T10217] NILFS (loop5): device size too small [ 128.978743][T10217] NILFS (loop5): device size too small [ 128.984223][T10217] NILFS (loop5): device size too small [ 128.989582][T10217] NILFS (loop5): device size too small [ 129.004864][T10217] NILFS (loop5): device size too small [ 129.009643][T10217] NILFS (loop5): device size too small [ 129.024044][T10217] NILFS (loop5): device size too small [ 129.161821][ T24] tipc: Node number set to 11578026 [ 129.304745][ T40] audit: type=1400 audit(1752689853.143:710): avc: denied { ioctl } for pid=10232 comm="syz.0.1150" path="socket:[36145]" dev="sockfs" ino=36145 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.543198][ T40] audit: type=1400 audit(1752689853.373:711): avc: denied { create } for pid=10251 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 129.558076][ T40] audit: type=1400 audit(1752689853.383:712): avc: denied { read } for pid=10251 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 129.611058][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 129.689766][ T40] audit: type=1400 audit(1752689853.523:713): avc: denied { append } for pid=10258 comm="syz.5.1159" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.833750][T10260] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1158'. [ 129.895362][ T40] audit: type=1400 audit(1752689853.733:714): avc: denied { mounton } for pid=10271 comm="syz.4.1164" path="/238/file0" dev="9p" ino=36047739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.954290][T10270] fuse: Bad value for 'user_id' [ 129.955890][T10270] fuse: Bad value for 'user_id' [ 129.988849][ T55] libceph: connect (1)[c::]:6789 error -101 [ 129.990877][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 130.028212][T10272] ceph: No mds server is up or the cluster is laggy [ 130.285461][T10279] ip6erspan0: entered promiscuous mode [ 130.506625][T10289] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1165'. [ 130.705794][T10301] binder: 10300:10301 ioctl c0306201 200000000380 returned -14 [ 130.811121][T10305] Bluetooth: MGMT ver 1.23 [ 131.313906][ T55] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 131.469087][ T55] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.471987][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.478234][ T55] usb 10-1: Product: syz [ 131.479616][ T55] usb 10-1: Manufacturer: syz [ 131.481112][ T55] usb 10-1: SerialNumber: syz [ 131.498543][ T55] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 131.574616][ T34] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 131.991347][T10330] ip6gretap1: entered promiscuous mode [ 131.998439][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 131.998449][ T40] audit: type=1400 audit(1752689855.833:718): avc: denied { write } for pid=10329 comm="syz.0.1179" name="/" dev="configfs" ino=3118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.017118][T10330] ip6gretap1: entered allmulticast mode [ 132.091270][ T40] audit: type=1400 audit(1752689855.923:719): avc: denied { ioctl } for pid=10327 comm="syz.4.1177" path="socket:[36724]" dev="sockfs" ino=36724 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.100863][T10338] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 132.100863][T10338] The task syz.3.1178 (10338) triggered the difference, watch for misbehavior. [ 132.107667][T10336] netlink: 'syz.4.1177': attribute type 29 has an invalid length. [ 132.127879][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1177'. [ 132.516546][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.519416][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.674283][ T34] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 132.678208][ T34] ath9k_htc: Failed to initialize the device [ 132.718859][ T34] usb 10-1: ath9k_htc: USB layer deinitialized [ 133.122832][T10352] SELinux: syz.0.1183 (10352) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 133.503675][ C0] net_ratelimit: 128609 callbacks suppressed [ 133.503688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.503705][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:93:eb:2c:af:b2, vlan:0) [ 133.503807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.504164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.504512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.504885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.505234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.505613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.506014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 133.506163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.014813][ T55] usb 10-1: USB disconnect, device number 6 [ 134.579826][T10385] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.153178][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1193'. [ 135.157797][T10388] 9pnet_fd: Insufficient options for proto=fd [ 135.159944][T10388] 9pnet_fd: Insufficient options for proto=fd [ 135.365258][T10336] hsr_slave_0 (unregistering): left promiscuous mode [ 135.379632][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1181'. [ 135.403632][ C1] sched: DL replenish lagged too much [ 135.452392][T10395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1195'. [ 135.469629][T10395] x_tables: duplicate underflow at hook 2 [ 136.000595][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 136.070195][ T40] audit: type=1326 audit(1752689859.903:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.4.1198" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c318e929 code=0x7ffc0000 [ 136.082627][ T40] audit: type=1326 audit(1752689859.903:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.4.1198" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c318e929 code=0x7ffc0000 [ 136.100726][ T40] audit: type=1326 audit(1752689859.903:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.4.1198" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa2c318e929 code=0x7ffc0000 [ 136.117951][ T40] audit: type=1326 audit(1752689859.903:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.4.1198" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c318e929 code=0x7ffc0000 [ 136.130088][ T40] audit: type=1326 audit(1752689859.903:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.4.1198" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c318e929 code=0x7ffc0000 [ 136.144087][ T40] audit: type=1326 audit(1752689859.903:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.4.1198" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2c318e929 code=0x7ffc0000 [ 136.172028][ T40] audit: type=1326 audit(1752689859.903:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.4.1198" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c318e929 code=0x7ffc0000 [ 136.198124][ T40] audit: type=1326 audit(1752689859.903:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10402 comm="syz.4.1198" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c318e929 code=0x7ffc0000 [ 136.270580][T10375] binder: 10373:10375 ioctl c018620b 0 returned -14 [ 136.390794][T10412] overlay: ./file1 is not a directory [ 136.610731][T10417] pimreg: entered allmulticast mode [ 136.642989][ T10] usb 8-1: config 0 has no interfaces? [ 136.700041][ T10] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.702888][ T10] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.711447][ T10] usb 8-1: Product: syz [ 136.712791][ T10] usb 8-1: Manufacturer: syz [ 136.737965][ T10] usb 8-1: config 0 descriptor?? [ 136.773453][T10426] ALSA: seq fatal error: cannot create timer (-19) [ 137.034132][ T34] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 137.059324][ T1144] Bluetooth: hci4: Frame reassembly failed (-84) [ 137.062923][T10431] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 137.067903][T10431] program syz.5.1206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.194318][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 137.210822][ T34] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 137.218888][ T34] usb 9-1: config 0 has no interface number 0 [ 137.220944][ T34] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 137.227688][ T34] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 137.236319][ T34] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 137.246645][ T34] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.253265][ T34] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 137.260022][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.273252][ T34] usb 9-1: config 0 descriptor?? [ 137.281115][ T34] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 137.346067][T10435] loop6: detected capacity change from 0 to 524287999 [ 137.403424][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 137.403439][ T40] audit: type=1400 audit(1752689861.233:746): avc: denied { setopt } for pid=10434 comm="syz.0.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.549625][ T34] usb 9-1: USB disconnect, device number 14 [ 137.558151][ T34] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 138.246159][T10440] binder: 10439:10440 ioctl c0306201 0 returned -14 [ 138.288772][T10447] usb usb9: usbfs: process 10447 (syz.0.1210) did not claim interface 0 before use [ 138.345547][T10445] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1209'. [ 138.513640][ C0] net_ratelimit: 131954 callbacks suppressed [ 138.513652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.513664][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:93:eb:2c:af:b2, vlan:0) [ 138.513908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.514230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.514555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.514907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.515247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.515582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.515697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.515790][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 138.968825][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 139.002262][ T6111] usb 8-1: USB disconnect, device number 16 [ 139.073989][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 139.159093][ T24] usb 5-1: device descriptor read/64, error -71 [ 139.446966][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 139.635344][ T24] usb 5-1: device descriptor read/64, error -71 [ 139.754339][ T24] usb usb5-port1: attempt power cycle [ 140.280172][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 140.347022][ T24] usb 5-1: device descriptor read/8, error -71 [ 140.353804][ T5967] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 140.673125][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 140.675533][T10502] netlink: 'syz.3.1225': attribute type 4 has an invalid length. [ 140.675545][T10502] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1225'. [ 140.766436][ T24] usb 5-1: device descriptor read/8, error -71 [ 140.848763][T10512] netlink: 'syz.3.1228': attribute type 21 has an invalid length. [ 140.911787][ T24] usb usb5-port1: unable to enumerate USB device [ 140.968075][T10512] netlink: 'syz.3.1228': attribute type 6 has an invalid length. [ 140.971055][T10512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1228'. [ 141.336127][T10524] veth0_to_bond: entered allmulticast mode [ 141.368900][T10524] xt_CONNSECMARK: invalid mode: 0 [ 141.414931][T10530] block nbd4: not configured, cannot reconfigure [ 141.519532][T10534] Can't find a SQUASHFS superblock on nullb0 [ 141.576701][ T40] audit: type=1400 audit(1752689865.413:747): avc: denied { module_load } for pid=10529 comm="syz.4.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 141.754069][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1239'. [ 141.761319][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1239'. [ 141.875020][ T5958] Bluetooth: hci3: command 0x0405 tx timeout [ 142.076389][ T40] audit: type=1400 audit(1752689865.903:748): avc: denied { bind } for pid=10551 comm="syz.3.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 142.098151][ T40] audit: type=1400 audit(1752689865.913:749): avc: denied { ioctl } for pid=10551 comm="syz.3.1244" path="socket:[38160]" dev="sockfs" ino=38160 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 142.153436][T10552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.422740][ T40] audit: type=1400 audit(1752689866.253:750): avc: denied { listen } for pid=10564 comm="syz.5.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 142.449946][ T40] audit: type=1400 audit(1752689866.273:751): avc: denied { accept } for pid=10564 comm="syz.5.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 142.596098][T10578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1250'. [ 142.820538][ T40] audit: type=1400 audit(1752689866.653:752): avc: denied { ioctl } for pid=10585 comm="syz.5.1252" path="socket:[38311]" dev="sockfs" ino=38311 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.158158][T10612] afs: Unknown parameter 'smackfsdef' [ 143.523694][ C0] net_ratelimit: 133237 callbacks suppressed [ 143.523697][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:93:eb:2c:af:b2, vlan:0) [ 143.523706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.523896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.523932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.524261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.524587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.524918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.525243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.525567][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.525718][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:93:eb:2c:af:b2, vlan:0) [ 143.678051][ T5967] Bluetooth: hci2: unexpected event for opcode 0x200c [ 144.097800][ T40] audit: type=1400 audit(1752689867.933:753): avc: denied { map } for pid=10635 comm="syz.3.1266" path="socket:[38572]" dev="sockfs" ino=38572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.285219][T10658] netlink: 'syz.4.1272': attribute type 1 has an invalid length. [ 145.327499][T10658] bond2: entered promiscuous mode [ 145.329164][T10658] bond2: entered allmulticast mode [ 145.414572][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'. [ 145.509047][T10660] geneve2: entered allmulticast mode [ 145.796579][T10660] bond2: (slave geneve2): making interface the new active one [ 145.798988][T10660] geneve2: entered promiscuous mode [ 145.957681][T10660] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 145.960989][T10658] bond2: left promiscuous mode [ 145.969348][T10658] geneve2: left promiscuous mode [ 145.974904][T10658] bond2: left allmulticast mode [ 145.985710][T10667] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 0, id = 0 [ 146.377051][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.379499][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.513715][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.516262][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.728495][T10694] overlayfs: failed to resolve './file1': -2 [ 146.926556][T10699] loop6: detected capacity change from 0 to 63 [ 146.939723][ T6171] buffer_io_error: 27 callbacks suppressed [ 146.939737][ T6171] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.950085][ T6171] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.952893][ T6171] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.958018][ T6171] Buffer I/O error on dev loop6, logical block 0, async page read [ 146.966729][ T6171] Buffer I/O error on dev loop6, logical block 0, async page read [ 147.474703][T10722] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1293'. [ 147.605797][T10738] program syz.3.1297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.613465][T10736] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 147.619305][T10736] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 147.737283][T10745] program syz.0.1299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.974529][T10761] afs: Unknown parameter 'pyn' [ 148.005274][ T40] audit: type=1400 audit(1752689871.843:754): avc: denied { mounton } for pid=10760 comm="syz.5.1307" path="/55/file0/bus" dev="ramfs" ino=39121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 148.014728][T10762] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 148.027317][T10762] overlayfs: failed to set xattr on upper [ 148.028959][T10762] overlayfs: ...falling back to redirect_dir=nofollow. [ 148.030836][T10762] overlayfs: ...falling back to index=off. [ 148.032499][T10762] overlayfs: ...falling back to uuid=null. [ 148.053345][T10762] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 148.065064][T10762] futex_wake_op: syz.5.1307 tries to shift op by -1; fix this program [ 148.085405][T10768] syz.4.1309 (10768): attempted to duplicate a private mapping with mremap. This is not supported. [ 148.533671][ C2] net_ratelimit: 130083 callbacks suppressed [ 148.533682][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:93:eb:2c:af:b2, vlan:0) [ 148.533713][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 148.533755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.534420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.535063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.535700][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:93:eb:2c:af:b2, vlan:0) [ 148.536743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.537439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.538136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 148.538848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.136383][T10801] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000005 [ 149.189165][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 149.245027][T10805] xt_hashlimit: size too large, truncated to 1048576 [ 149.281926][ T40] audit: type=1400 audit(1752689873.113:755): avc: denied { ioctl } for pid=10800 comm="syz.3.1318" path="socket:[39555]" dev="sockfs" ino=39555 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 149.389336][T10803] can: request_module (can-proto-0) failed. [ 149.494669][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 149.573890][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.577170][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 149.580005][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.588679][ T24] usb 5-1: config 0 descriptor?? [ 149.822085][ T24] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 150.062401][ T34] usb 5-1: USB disconnect, device number 20 [ 150.293914][T10834] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1325'. [ 151.045456][T10854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.047792][T10854] IPv6: NLM_F_CREATE should be set when creating new route [ 151.057745][T10854] lo: entered allmulticast mode [ 151.071187][T10854] tunl0: entered allmulticast mode [ 151.075984][T10854] gre0: entered allmulticast mode [ 151.100844][T10854] gretap0: entered allmulticast mode [ 151.109254][T10854] erspan0: entered allmulticast mode [ 151.113212][T10854] ip_vti0: entered allmulticast mode [ 151.126729][T10854] ip6_vti0: entered allmulticast mode [ 151.136539][T10854] sit0: entered allmulticast mode [ 151.157617][T10854] ip6tnl0: entered allmulticast mode [ 151.160888][T10854] ip6gre0: entered allmulticast mode [ 151.178213][T10854] syz_tun: entered allmulticast mode [ 151.192795][T10854] ip6gretap0: entered allmulticast mode [ 151.202372][T10854] bridge0: port 3(veth0_to_bridge) entered disabled state [ 151.205057][T10854] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.207483][T10854] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.212586][T10854] bridge0: entered allmulticast mode [ 151.216430][T10854] vcan0: entered allmulticast mode [ 151.220096][T10854] bond0: entered allmulticast mode [ 151.221736][T10854] bond_slave_0: entered allmulticast mode [ 151.223514][T10854] bond_slave_1: entered allmulticast mode [ 151.232209][T10854] batman_adv: batadv0: Interface deactivated: dummy0 [ 151.234606][T10854] dummy0: entered allmulticast mode [ 151.243677][T10854] nlmon0: entered allmulticast mode [ 151.249140][T10854] caif0: entered allmulticast mode [ 151.251033][T10854] batadv0: entered allmulticast mode [ 151.254285][T10854] vxcan0: entered allmulticast mode [ 151.256422][T10854] vxcan1: entered allmulticast mode [ 151.259375][T10854] veth0: entered allmulticast mode [ 151.263288][T10854] veth1: entered allmulticast mode [ 151.267550][T10854] wg0: entered allmulticast mode [ 151.270572][T10854] wg1: entered allmulticast mode [ 151.273513][T10854] wg2: entered allmulticast mode [ 151.282362][T10854] veth1_to_bridge: entered allmulticast mode [ 151.288518][T10854] veth0_to_bond: entered allmulticast mode [ 151.292879][T10854] veth1_to_bond: entered allmulticast mode [ 151.298825][T10854] veth1_to_team: entered allmulticast mode [ 151.302149][T10854] team_slave_1: entered allmulticast mode [ 151.303468][T10870] overlayfs: failed to resolve './file0': -2 [ 151.304922][T10854] veth0_to_batadv: entered allmulticast mode [ 151.309614][T10854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.310951][ T40] audit: type=1326 audit(1752689875.143:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.3.1336" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff53498e929 code=0x0 [ 151.312697][T10854] batadv_slave_0: entered allmulticast mode [ 151.324188][T10854] veth1_to_batadv: entered allmulticast mode [ 151.327535][T10854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.330609][T10854] batadv_slave_1: entered allmulticast mode [ 151.333852][T10854] xfrm0: entered allmulticast mode [ 151.337257][T10854] veth1_to_hsr: entered allmulticast mode [ 151.340248][T10854] hsr_slave_1: entered allmulticast mode [ 151.343107][T10854] hsr0: entered allmulticast mode [ 151.347106][T10854] veth1_virt_wifi: entered allmulticast mode [ 151.350956][T10854] veth0_virt_wifi: entered allmulticast mode [ 151.354041][T10854] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 151.357436][T10854] veth1_vlan: entered allmulticast mode [ 151.362218][T10854] veth0_vlan: entered allmulticast mode [ 151.366164][T10854] vlan0: entered allmulticast mode [ 151.367830][T10854] vlan1: entered allmulticast mode [ 151.371560][T10854] macvlan0: entered allmulticast mode [ 151.375412][T10854] macvlan1: entered allmulticast mode [ 151.378229][T10854] ipvlan0: entered allmulticast mode [ 151.379972][T10854] ipvlan1: entered allmulticast mode [ 151.382587][T10854] veth1_macvtap: entered allmulticast mode [ 151.388566][T10854] macvtap0: entered allmulticast mode [ 151.391511][T10854] macsec0: entered allmulticast mode [ 151.395854][T10854] geneve0: entered allmulticast mode [ 151.398956][T10854] geneve1: entered allmulticast mode [ 151.401943][T10854] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 151.406610][T10854] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 151.409907][T10854] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 151.413195][T10854] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 151.421570][T10854] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 151.428549][T10854] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 151.431515][T10854] vxlan0: entered allmulticast mode [ 151.433594][T10854] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode [ 151.436819][T10854] bond1: entered allmulticast mode [ 151.438439][T10854] ip6gre1: entered allmulticast mode [ 151.440108][T10854] bridge1: left promiscuous mode [ 151.441664][T10854] bridge1: entered allmulticast mode [ 151.443515][T10854] sit1: entered allmulticast mode [ 151.454693][T10854] syztnl2: entered allmulticast mode [ 151.456689][T10854] sit2: entered allmulticast mode [ 151.464866][T10854] wlan1.1: entered allmulticast mode [ 151.466558][T10854] bridge2: entered allmulticast mode [ 151.468517][T10854] bridge3: left promiscuous mode [ 151.470142][T10854] bridge3: entered allmulticast mode [ 151.472746][T10854] erspan0.2: entered allmulticast mode [ 151.476031][T10854] bond2: entered allmulticast mode [ 151.478090][T10854] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.480860][T10854] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.484212][T10854] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.486973][T10854] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.492271][T10854] bridge4: entered allmulticast mode [ 151.610893][T10883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1339'. [ 152.053796][T10894] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1343'. [ 152.057505][T10897] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1343'. [ 152.069800][ T40] audit: type=1400 audit(1752689875.903:757): avc: denied { node_bind } for pid=10889 comm="syz.0.1341" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 152.090683][ T40] audit: type=1400 audit(1752689875.903:758): avc: denied { node_bind } for pid=10889 comm="syz.0.1341" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 152.114919][T10900] bond0: Error: Cannot enslave bond to itself. [ 152.116808][ T40] audit: type=1400 audit(1752689875.953:759): avc: denied { getopt } for pid=10899 comm="syz.3.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 152.127553][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1349'. [ 152.130368][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1349'. [ 152.133155][T10908] netlink: 'syz.5.1349': attribute type 7 has an invalid length. [ 152.136200][T10900] fuse: Unknown parameter 'user_i' [ 152.182022][T10915] 9pnet: Unknown protocol version 9p20\++} [ 152.216585][T10917] hfsplus: unable to find HFS+ superblock [ 152.232818][ T40] audit: type=1400 audit(2000000000.050:760): avc: denied { listen } for pid=10912 comm="syz.5.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 152.243301][T10924] input: syz1 as /devices/virtual/input/input21 [ 152.327064][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'. [ 152.329896][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'. [ 152.332848][T10938] netlink: 'syz.0.1359': attribute type 12 has an invalid length. [ 152.366595][ T40] audit: type=1400 audit(2000000000.190:761): avc: denied { write } for pid=10941 comm="syz.5.1360" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 152.374063][ T40] audit: type=1400 audit(2000000000.190:762): avc: denied { setattr } for pid=10941 comm="syz.5.1360" name="RXRPC" dev="sockfs" ino=40965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.377146][T10944] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1361'. [ 152.398430][T10946] bridge0: entered promiscuous mode [ 152.400155][T10946] bridge0: left allmulticast mode [ 152.437345][T10946] netfs: Couldn't get user pages (rc=-14) [ 152.643150][T10956] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 152.654957][ T6040] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 152.814085][ T6040] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.817179][ T6040] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.819567][T10968] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 152.821034][ T6040] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.821048][ T6040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.832414][T10968] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 153.008176][T10974] batman_adv: batadv0: Removing interface: dummy0 [ 153.010729][T10974] veth0_to_bridge: left promiscuous mode [ 153.012615][T10974] bridge0: port 3(veth0_to_bridge) entered disabled state [ 153.018133][T10974] bridge_slave_0: left promiscuous mode [ 153.020101][T10974] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.025963][T10974] bridge_slave_1: left promiscuous mode [ 153.031640][ T6040] usb 5-1: GET_CAPABILITIES returned 0 [ 153.033783][ T6040] usbtmc 5-1:16.0: can't read capabilities [ 153.033814][T10974] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.045349][T10974] bond0: (slave bond_slave_0): Releasing backup interface [ 153.049097][T10974] bond0: (slave bond_slave_1): Releasing backup interface [ 153.052210][T10974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.055543][T10974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.058806][T10974] bond2: (slave geneve2): Releasing active interface [ 153.236024][ T6040] usb 5-1: USB disconnect, device number 21 [ 153.248277][T10986] overlay: ./file0 is not a directory [ 153.393096][T10990] syz_tun: entered allmulticast mode [ 153.412505][T10990] syz_tun: left allmulticast mode [ 153.522638][T10993] overlayfs: conflicting lowerdir path [ 153.532192][T10993] loop6: detected capacity change from 0 to 2560 [ 153.534803][T10993] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.537494][T10993] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.539913][T10993] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.542313][T10993] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.545161][T10993] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.548224][T10993] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.550956][T10993] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.553355][T10993] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.556266][T10993] ldm_validate_partition_table(): Disk read failed. [ 153.559073][T10993] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.562443][T10993] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.568513][T10993] Dev loop6: unable to read RDB block 0 [ 153.571205][T10993] loop6: unable to read partition table [ 153.573904][T10993] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 153.686828][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1380'. [ 153.740231][ T40] audit: type=1400 audit(2000000001.560:763): avc: denied { shutdown } for pid=11010 comm="syz.5.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.862122][T11025] cgroup: Name too long [ 153.866876][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1385'. [ 153.870005][T11020] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1385'. [ 153.945268][T11043] veth0: entered promiscuous mode [ 153.947706][T11041] veth0: left promiscuous mode [ 153.975568][T11046] dlm: no local IP address has been set [ 153.978159][T11046] dlm: cannot start dlm midcomms -107 [ 154.045448][T11061] tipc: Enabled bearer , priority 0 [ 154.047979][T11061] syzkaller0: entered promiscuous mode [ 154.049754][T11061] syzkaller0: entered allmulticast mode [ 154.060588][T11061] tipc: Resetting bearer [ 154.156009][T11059] tipc: Resetting bearer [ 154.164243][T11059] tipc: Disabling bearer [ 154.346863][ T40] audit: type=1400 audit(2000000002.170:764): avc: denied { connect } for pid=11085 comm="syz.5.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 154.377621][ T40] audit: type=1400 audit(2000000002.200:765): avc: denied { write } for pid=11091 comm="syz.3.1407" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 154.503225][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1410'. [ 154.513689][T11113] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 154.530632][T11106] netlink: 'syz.3.1411': attribute type 13 has an invalid length. [ 154.544382][T11106] gretap0: refused to change device tx_queue_len [ 154.546711][T11106] net_ratelimit: 70700 callbacks suppressed [ 154.546719][T11106] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 154.725401][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 154.732713][T11120] gtp0: entered allmulticast mode [ 154.847617][T11132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.850737][T11132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.852504][T11133] netlink: 'syz.5.1416': attribute type 11 has an invalid length. [ 155.063415][T11143] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x00000000000000060x000000000000000400000000000000000000' [ 155.090449][T11149] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1422'. [ 155.161303][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'. [ 155.298986][ T40] audit: type=1400 audit(2000000003.120:766): avc: denied { shutdown } for pid=11177 comm="syz.0.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.309616][T11178] ubi31: attaching mtd0 [ 155.317224][T11178] ubi31: scanning is finished [ 155.319337][T11178] ubi31: empty MTD device detected [ 155.430366][T11178] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 155.432815][T11178] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 155.435266][T11178] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 155.437518][T11178] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 155.439915][T11178] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 155.442132][T11178] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 155.444722][T11178] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 41143254 [ 155.447798][T11178] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 155.451030][T11185] ubi31: background thread "ubi_bgt31d" started, PID 11185 [ 155.501755][ T40] audit: type=1400 audit(2000000003.320:767): avc: denied { bind } for pid=11192 comm="syz.4.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.654372][T11212] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1438'. [ 155.657404][T11215] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1438'. [ 155.660910][T11212] 9pnet_fd: Insufficient options for proto=fd [ 155.717314][T11223] Failed to get privilege flags for destination (handle=0x2:0x0) [ 155.770776][T11231] random: crng reseeded on system resumption [ 155.789770][T11230] Unrecognized hibernate image header format! [ 155.792826][T11230] PM: hibernation: Image mismatch: architecture specific data [ 155.832908][T11235] Cannot find map_set index 0 as target [ 155.891708][ T40] audit: type=1400 audit(2000000003.710:768): avc: denied { create } for pid=11243 comm="syz.5.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 155.900744][ T40] audit: type=1400 audit(2000000003.730:769): avc: denied { bind } for pid=11243 comm="syz.5.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 155.912169][T11250] netlink: 'syz.0.1451': attribute type 2 has an invalid length. [ 155.914728][T11250] netlink: 784 bytes leftover after parsing attributes in process `syz.0.1451'. [ 155.919238][T11250] gfs2: path_lookup on ™6(ï+‰d‹QÌnB´!eU‚çVè!š`:Ñ 8×DSEíÄðÃÄèÎ Áy|YT¢®{-€íê°”,mb/ returned error -2 [ 155.922703][T11230] Restarting kernel threads ... [ 155.925774][ T40] audit: type=1400 audit(2000000003.740:770): avc: denied { ioctl } for pid=11229 comm="syz.3.1444" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 155.938511][T11230] Done restarting kernel threads. [ 156.020473][T11266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=247 sclass=netlink_route_socket pid=11266 comm=syz.3.1456 [ 156.193108][ T40] audit: type=1400 audit(2000000004.010:771): avc: denied { read } for pid=11286 comm="syz.0.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.266724][ T40] audit: type=1400 audit(2000000004.090:772): avc: denied { listen } for pid=11288 comm="syz.3.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 156.274083][T11289] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11289 comm=syz.3.1463 [ 156.286002][T11289] overlayfs: failed to resolve './file1': -2 [ 156.330283][T11291] NILFS (nbd3): device size too small [ 156.653719][ T6040] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 156.739385][T11299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.803721][ T6040] usb 8-1: Using ep0 maxpacket: 16 [ 156.807639][ T6040] usb 8-1: config 247 has an invalid interface number: 181 but max is 2 [ 156.813711][ T6040] usb 8-1: config 247 has an invalid descriptor of length 1, skipping remainder of the config [ 156.816974][ T6040] usb 8-1: config 247 has 1 interface, different from the descriptor's value: 3 [ 156.819907][ T6040] usb 8-1: config 247 has no interface number 0 [ 156.823048][ T6040] usb 8-1: config 247 interface 181 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 156.827386][ T6040] usb 8-1: config 247 interface 181 has no altsetting 0 [ 156.831420][ T6040] usb 8-1: New USB device found, idVendor=0bda, idProduct=0724, bcdDevice=c9.08 [ 156.834462][ T6040] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.837005][ T6040] usb 8-1: Product: ã  [ 156.838401][ T6040] usb 8-1: Manufacturer: ì©ì·¶æ¹ä¯ç®‡ìº‚칋먌á·è˜“ࢤè“妩㢎뤧劄蘔渒⬖带෤御䙗즕꺷嫜껾嚧圢뻷á…äŽç¡”羌â‹å—꤀èšç¾›ì°ç’£á¾©|᳇ë„꼃ꜗç®ã¸™å½ïª·á½·ïšŸì½¹ï¬©ä¯±è³¯á¿ªï»†Ñ‰ä´†å”샘뽜äºä‘‰î›—쬈 [ 156.845610][ T6040] usb 8-1: SerialNumber: 䤢䭬ﴥ멼ìŒï©«å¨á€¶ã€ëª¬é€¸î½¥ìå«¬âš¶é¬ªà©´ã±¼á³æ“暛拟䵚彭ሠ꾽ꑡ鋙뻟㙾à¿î¸Œç¤¨æ¨ªã¼šâ¸¸ëšë˜å‡³é’Œã–ꆭ⚒ू⡴柢䫼뎻ê€á†¢å‹¦æ…“鋈뺊籆횡똆矀-퇌ï¤ãŒ ê©–é–’å£îœ²â¨Ö³ï…亭钢行今慵죩儾㒮蜟諘虧á³ï©ä´œä°…轳쨖긣崌⭯샩 [ 156.857987][ T6040] usb 8-1: rejected 1 configuration due to insufficient available bus power [ 156.860809][ T6040] usb 8-1: no configuration chosen from 1 choice [ 156.902365][T11299] netlink: 'syz.5.1467': attribute type 9 has an invalid length. [ 157.077979][T11323] netlink: 'syz.4.1474': attribute type 13 has an invalid length. [ 157.114589][T11329] usb usb8: usbfs: process 11329 (syz.5.1475) did not claim interface 0 before use [ 157.117608][T11326] usb usb8: usbfs: process 11326 (syz.5.1475) did not claim interface 0 before use [ 157.318901][T11348] xt_hashlimit: size too large, truncated to 1048576 [ 157.339547][T11350] kvm: MWAIT instruction emulated as NOP! [ 157.548650][T11360] sp0: Synchronizing with TNC [ 157.921509][T11386] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 158.103510][T11391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11391 comm=syz.4.1494 [ 158.417150][T11397] ip6gretap2: entered promiscuous mode [ 158.419502][T11397] bridge0: port 1(ip6gretap2) entered blocking state [ 158.421621][T11397] bridge0: port 1(ip6gretap2) entered disabled state [ 158.425464][T11397] ip6gretap2: entered allmulticast mode [ 158.429594][T11397] bridge0: port 1(ip6gretap2) entered blocking state [ 158.431869][T11397] bridge0: port 1(ip6gretap2) entered forwarding state [ 158.594218][T11405] program syz.0.1498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.754946][T11420] netlink: 'syz.4.1505': attribute type 21 has an invalid length. [ 158.758092][T11420] __nla_validate_parse: 3 callbacks suppressed [ 158.758101][T11420] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1505'. [ 158.764199][T11420] netlink: 'syz.4.1505': attribute type 4 has an invalid length. [ 158.767156][T11420] netlink: 'syz.4.1505': attribute type 5 has an invalid length. [ 158.770094][T11420] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1505'. [ 158.832840][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 158.832851][ T40] audit: type=1400 audit(2000000006.650:775): avc: denied { write } for pid=11417 comm="syz.4.1505" path="socket:[43492]" dev="sockfs" ino=43492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.857857][T11428] syz.0.1507: attempt to access beyond end of device [ 158.857857][T11428] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 158.863266][T11428] XFS (nbd0): SB validate failed with error -5. [ 158.881408][ T40] audit: type=1400 audit(2000000006.700:776): avc: denied { write } for pid=11434 comm="syz.4.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 158.919310][T11441] Can't find a SQUASHFS superblock on nullb0 [ 158.957050][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 158.959817][T11448] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 158.962173][T11448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.023743][T11452] fuse: Unknown parameter 'f×' [ 159.177321][T11460] usb 8-1: USB disconnect, device number 18 [ 159.180888][T11461] fuse: Unknown parameter 'ÿÿóÀ„êÔ`V~¹Ú»hdçiß{»aòÂïHQ]´zåwhÚÉùë·›¦xþúžH–j CØ8q"Ú²ÑÝÍm¸ ÷ï€mÿ&ùF_^‰oþ¸U^ñ˜¡!þSĵþ @c¤K`…–®(v<ÑIæŸ.ªÔ®¤C1Á2²Sï' [ 159.192701][ T40] audit: type=1400 audit(2000000007.010:777): avc: denied { write } for pid=11456 comm="syz.0.1514" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 159.237116][T11463] xt_TCPMSS: Only works on TCP SYN packets [ 159.254673][T11461] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 159.433203][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1518'. [ 159.477585][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'. [ 159.538364][ T40] audit: type=1800 audit(2000000007.360:778): pid=11481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1522" name="bus" dev="9p" ino=36047811 res=0 errno=0 [ 159.839154][T11490] overlayfs: cannot append lower layer [ 159.978938][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1527'. [ 160.235462][ T34] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 160.315759][ T40] audit: type=1400 audit(2000000008.130:779): avc: denied { shutdown } for pid=11504 comm="syz.3.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 160.383131][T11513] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 160.385232][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.390435][ T34] usb 5-1: config 0 has no interfaces? [ 160.392472][ T34] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 160.398849][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.405411][ T34] usb 5-1: config 0 descriptor?? [ 160.594075][ T40] audit: type=1800 audit(2000000008.410:780): pid=11521 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1535" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 160.622343][ T6040] usb 5-1: USB disconnect, device number 22 [ 160.629458][T11497] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.636584][ T40] audit: type=1400 audit(2000000008.460:781): avc: denied { create } for pid=11496 comm="syz.0.1528" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 160.644606][ T40] audit: type=1400 audit(2000000008.460:782): avc: denied { link } for pid=11496 comm="syz.0.1528" name="file1" dev="overlay" ino=43645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 160.651463][ T40] audit: type=1400 audit(2000000008.460:783): avc: denied { setattr } for pid=11496 comm="syz.0.1528" name="#32" dev="tmpfs" ino=2363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 160.660300][ T40] audit: type=1400 audit(2000000008.460:784): avc: denied { rename } for pid=11496 comm="syz.0.1528" name="#32" dev="tmpfs" ino=2363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 160.700856][T11531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1537'. [ 160.829289][T11544] overlayfs: missing 'lowerdir' [ 160.892932][T11546] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1541'. [ 161.217461][T11563] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1545'. [ 161.310776][T11568] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 161.377682][T11575] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 161.901164][T11590] fuse: Unknown parameter 'net/ip_mr_cache' [ 162.266332][T11603] netlink: 'syz.0.1556': attribute type 1 has an invalid length. [ 162.268694][T11603] netlink: 'syz.0.1556': attribute type 1 has an invalid length. [ 162.271001][T11603] netlink: 610 bytes leftover after parsing attributes in process `syz.0.1556'. [ 163.293765][T11621] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.454152][ T6040] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 163.618200][T11652] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 163.629766][T11654] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 163.654125][T11653] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 163.659393][T11651] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 164.594005][ T5967] Bluetooth: hci3: command 0x0405 tx timeout [ 164.781768][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 164.781783][ T40] audit: type=1400 audit(2000000012.600:790): avc: denied { listen } for pid=11687 comm="syz.0.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 164.859479][T11695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 164.923982][ T6040] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 164.941254][ T40] audit: type=1326 audit(2000000012.760:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.0.1584" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef8118e929 code=0x0 [ 165.043654][ T40] audit: type=1400 audit(2000000012.860:792): avc: denied { bind } for pid=11697 comm="syz.0.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 165.075854][ T6040] usb 9-1: Using ep0 maxpacket: 8 [ 165.078938][ T6040] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 165.082037][ T6040] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 165.088295][ T6040] usb 9-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 165.091117][ T6040] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.094085][ T6040] usb 9-1: Product: syz [ 165.095380][ T6040] usb 9-1: Manufacturer: syz [ 165.096812][ T6040] usb 9-1: SerialNumber: syz [ 165.099551][ T6040] usb 9-1: config 0 descriptor?? [ 165.318879][T11703] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 165.323029][T11703] __nla_validate_parse: 7 callbacks suppressed [ 165.323038][T11703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1585'. [ 165.328255][ T6040] usb 9-1: USB disconnect, device number 15 [ 165.412837][ T40] audit: type=1400 audit(2000000013.230:793): avc: denied { cmd } for pid=11710 comm="syz.3.1587" path="socket:[43943]" dev="sockfs" ino=43943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 165.481319][T11721] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 165.486571][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1590'. [ 165.489258][T11724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1590'. [ 165.685499][T11749] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.733151][T11754] overlay: ./file0 is not a directory [ 165.741654][T11756] syzkaller0: entered promiscuous mode [ 165.743445][T11756] syzkaller0: entered allmulticast mode [ 167.076033][T11774] vivid-004: disconnect [ 167.176323][T11773] vivid-004: reconnect [ 167.235076][T11781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.244229][T11781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.247451][T11781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1606'. [ 167.563153][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1614'. [ 167.566019][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1614'. [ 167.574291][T11814] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.577030][T11814] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.579754][T11814] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.582467][T11814] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.587020][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1614'. [ 167.589780][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1614'. [ 167.615381][T11821] random: crng reseeded on system resumption [ 167.622205][T11821] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1617'. [ 168.255072][ T40] audit: type=1400 audit(2000000016.080:794): avc: denied { write } for pid=11834 comm="syz.3.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 168.391698][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'. [ 168.401699][ T40] audit: type=1400 audit(2000000016.220:795): avc: denied { ioctl } for pid=11847 comm="syz.3.1626" path="socket:[47172]" dev="sockfs" ino=47172 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 168.458171][ T40] audit: type=1400 audit(2000000016.270:796): avc: denied { create } for pid=11858 comm="syz.3.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 168.464439][ T40] audit: type=1400 audit(2000000016.280:797): avc: denied { sys_admin } for pid=11858 comm="syz.3.1629" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 168.668738][T11868] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 168.671052][T11868] UDF-fs: Scanning with blocksize 512 failed [ 168.673191][T11868] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 168.675924][T11868] UDF-fs: Scanning with blocksize 1024 failed [ 168.678022][T11868] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 168.680425][T11868] UDF-fs: Scanning with blocksize 2048 failed [ 168.683070][T11868] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 168.686018][T11868] UDF-fs: Scanning with blocksize 4096 failed [ 168.868391][T11897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 168.871325][T11897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 168.879392][T11897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 168.882254][T11897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 169.783400][ T40] audit: type=1400 audit(2000000017.600:798): avc: denied { getopt } for pid=11924 comm="syz.3.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 169.931559][T11932] netlink: 'syz.0.1645': attribute type 27 has an invalid length. [ 169.931879][T11933] lo: left allmulticast mode [ 169.937582][T11933] tunl0: left allmulticast mode [ 169.940295][T11933] gre0: left allmulticast mode [ 169.944251][T11933] gretap0: left allmulticast mode [ 169.946855][T11933] erspan0: left allmulticast mode [ 169.949332][T11933] ip_vti0: left allmulticast mode [ 169.951741][T11933] ip6_vti0: left allmulticast mode [ 169.952580][T11925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.957024][T11933] sit0: left allmulticast mode [ 169.962136][T11933] ip6tnl0: left allmulticast mode [ 169.965354][T11933] ip6gre0: left allmulticast mode [ 169.967716][T11933] syz_tun: left allmulticast mode [ 169.970274][T11933] ip6gretap0: left allmulticast mode [ 169.972859][T11933] bridge0: left promiscuous mode [ 169.974757][T11933] vcan0: left allmulticast mode [ 169.977878][T11933] bond0: left allmulticast mode [ 169.983076][T11933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.986793][T11933] team0: left allmulticast mode [ 169.989166][T11933] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.991448][T11933] tipc: Resetting bearer [ 169.993238][T11933] tipc: Resetting bearer [ 169.996202][T11933] dummy0: left allmulticast mode [ 170.001123][T11933] nlmon0: left allmulticast mode [ 170.008798][T11933] caif0: left allmulticast mode [ 170.010878][T11933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.013777][ T40] audit: type=1400 audit(2000000017.830:799): avc: denied { unmount } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 170.086818][T11932] bridge0: port 1(ip6gretap2) entered disabled state [ 170.096074][T11932] tipc: Resetting bearer [ 170.104081][T11932] batadv0: left allmulticast mode [ 170.105808][T11932] veth0: left allmulticast mode [ 170.107474][T11932] wg0: left allmulticast mode [ 170.108979][T11932] wg1: left allmulticast mode [ 170.110477][T11932] wg2: left allmulticast mode [ 170.112015][T11932] veth0_to_bridge: left allmulticast mode [ 170.114982][T11932] bridge_slave_0: left allmulticast mode [ 170.116783][T11932] veth1_to_bridge: left allmulticast mode [ 170.118633][T11932] bridge_slave_1: left allmulticast mode [ 170.120437][T11932] veth0_to_bond: left allmulticast mode [ 170.122232][T11932] bond_slave_0: left allmulticast mode [ 170.124153][T11932] veth1_to_bond: left allmulticast mode [ 170.125967][T11932] bond_slave_1: left allmulticast mode [ 170.127724][T11932] veth0_to_team: left allmulticast mode [ 170.129499][T11932] team_slave_0: left allmulticast mode [ 170.131205][T11932] veth1_to_team: left allmulticast mode [ 170.132934][T11932] team_slave_1: left allmulticast mode [ 170.135244][T11932] veth0_to_batadv: left allmulticast mode [ 170.137166][T11932] batadv_slave_0: left allmulticast mode [ 170.140021][T11932] veth1_to_batadv: left allmulticast mode [ 170.141847][T11932] batadv_slave_1: left allmulticast mode [ 170.144152][T11932] xfrm0: left allmulticast mode [ 170.146019][T11932] veth0_to_hsr: left allmulticast mode [ 170.147856][T11932] veth1_to_hsr: left allmulticast mode [ 170.149705][T11932] hsr0: left allmulticast mode [ 170.151223][T11932] hsr_slave_0: left allmulticast mode [ 170.152905][T11932] hsr_slave_1: left allmulticast mode [ 170.155364][T11932] veth1_virt_wifi: left allmulticast mode [ 170.157232][T11932] veth0_virt_wifi: left allmulticast mode [ 170.159101][T11932] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 170.161469][T11932] vlan0: left allmulticast mode [ 170.163296][T11932] vlan1: left allmulticast mode [ 170.166756][T11932] veth1_vlan: left allmulticast mode [ 170.168792][T11932] macvlan0: left promiscuous mode [ 170.169726][ T40] audit: type=1400 audit(2000000017.990:800): avc: denied { remove_name } for pid=11947 comm="syz.3.1649" name="file0" dev="9p" ino=36047803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.170368][T11932] macvlan0: left allmulticast mode [ 170.171559][T11932] macvlan1: left allmulticast mode [ 170.177892][ T40] audit: type=1400 audit(2000000017.990:801): avc: denied { unlink } for pid=11947 comm="syz.3.1649" name="file0" dev="9p" ino=36047803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 170.179247][T11932] ipvlan0: left allmulticast mode [ 170.182249][ T40] audit: type=1400 audit(2000000018.010:802): avc: denied { create } for pid=11947 comm="syz.3.1649" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 170.188868][T11932] ipvlan1: left allmulticast mode [ 170.197612][T11932] veth0_vlan: left allmulticast mode [ 170.199363][T11932] veth1_macvtap: left allmulticast mode [ 170.201168][T11932] veth0_macvtap: left allmulticast mode [ 170.202971][T11932] 0ªî{X¹¦: left allmulticast mode [ 170.205040][T11932] macsec0: left allmulticast mode [ 170.206704][T11932] geneve0: left allmulticast mode [ 170.208331][T11932] geneve1: left allmulticast mode [ 170.210327][T11932] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 170.213847][T11932] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 170.216127][T11932] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 170.218373][T11932] netdevsim netdevsim0 netdevsim3: left allmulticast mode [ 170.224082][T11932] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 170.228826][T11932] ip6gre1: left allmulticast mode [ 170.230999][T11932] syztnl2: left allmulticast mode [ 170.233193][T11932] ipvlan2: left allmulticast mode [ 170.237176][T11932] bridge0: left allmulticast mode [ 170.238913][T11932] bridge1: left allmulticast mode [ 170.240621][T11932] bond1: left allmulticast mode [ 170.242270][T11932] vxlan0: left allmulticast mode [ 170.244012][T11932] syztnl1: left allmulticast mode [ 170.266005][T11932] ip6gretap1: left promiscuous mode [ 170.267667][T11932] ip6gretap1: left allmulticast mode [ 170.272805][T11932] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 170.275913][T11932] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 170.278750][T11932] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 170.281493][T11932] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 170.496789][ T40] audit: type=1326 audit(2000000018.320:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.1652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8118e929 code=0x7ffc0000 [ 170.504414][ T40] audit: type=1326 audit(2000000018.320:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.1652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8118e929 code=0x7ffc0000 [ 170.511502][ T40] audit: type=1326 audit(2000000018.320:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.1652" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef8118e929 code=0x7ffc0000 [ 170.519153][ T40] audit: type=1326 audit(2000000018.320:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.1652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8118e929 code=0x7ffc0000 [ 170.526535][ T40] audit: type=1326 audit(2000000018.320:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.1652" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8118e929 code=0x7ffc0000 [ 170.533536][ T40] audit: type=1326 audit(2000000018.320:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.0.1652" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef8118e929 code=0x7ffc0000 [ 170.555373][T12011] program syz.0.1654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.561903][T12011] program syz.0.1654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.622030][T12028] QAT: failed to copy from user cfg_data. [ 170.641714][T12024] tipc: New replicast peer: 255.255.255.255 [ 170.644634][T12024] tipc: Enabled bearer , priority 10 [ 170.653424][T12025] __nla_validate_parse: 4 callbacks suppressed [ 170.653433][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 170.658421][T12025] tipc: Disabling bearer [ 170.825376][T12052] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1659'. [ 170.825626][T12044] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1659'. [ 171.335948][T12072] program syz.4.1665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.517506][T12080] fuse: Unknown parameter 'group' [ 172.047813][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 172.133004][T12121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1683'. [ 172.374790][T12139] xt_hashlimit: size too large, truncated to 1048576 [ 172.500771][T12149] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 172.565703][T12154] 9pnet: Could not find request transport: fdƒrfdnm=0x000000000000000a [ 172.593405][T12160] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 172.678443][T12167] afs: Unknown parameter 'dynoup.stat' [ 173.014200][T12178] netlink: 'syz.3.1699': attribute type 1 has an invalid length. [ 173.020932][T12178] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 173.087386][T12183] sp0: Synchronizing with TNC [ 173.611414][T12208] PKCS8: Unsupported PKCS#8 version [ 173.706733][T12215] kAFS: unparsable volume name [ 173.870963][T12220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.873906][T12220] IPv6: NLM_F_CREATE should be set when creating new route [ 173.876142][T12220] IPv6: NLM_F_CREATE should be set when creating new route [ 173.878462][T12220] IPv6: NLM_F_CREATE should be set when creating new route [ 173.882064][T12220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.971775][ T5966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.976895][ T5966] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.980002][ T5966] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.983705][ T5966] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.986595][ T5966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.106657][T12222] chnl_net:caif_netlink_parms(): no params data found [ 174.196485][T12222] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.198818][T12222] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.201205][T12222] bridge_slave_0: entered allmulticast mode [ 174.203934][T12222] bridge_slave_0: entered promiscuous mode [ 174.207295][T12222] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.209542][T12222] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.212345][T12222] bridge_slave_1: entered allmulticast mode [ 174.215370][T12222] bridge_slave_1: entered promiscuous mode [ 174.267475][T12222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.275531][T12222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.336526][T12222] team0: Port device team_slave_0 added [ 174.342010][T12222] team0: Port device team_slave_1 added [ 174.406941][T12222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.409741][T12222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.421045][T12222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.426087][T12222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.428805][T12222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.437362][T12222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.484080][T12222] hsr_slave_0: entered promiscuous mode [ 174.486333][T12222] hsr_slave_1: entered promiscuous mode [ 174.585329][T12231] XFS (nullb0): Invalid superblock magic number [ 174.620022][T12231] 9pnet_fd: p9_fd_create_tcp (12231): problem connecting socket to 127.0.0.1 [ 174.636131][T12222] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 174.640674][T12222] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.645260][T12222] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.650682][T12222] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 174.676936][T12222] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.678998][T12249] syz.3.1716: attempt to access beyond end of device [ 174.678998][T12249] loop3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 174.680016][T12222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.686086][T12249] gfs2: error -5 reading superblock [ 174.687849][T12222] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.692349][T12222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.742663][T12222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.758484][T11555] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.768784][T11555] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.785300][T12222] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.792527][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.794967][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.801351][T11555] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.803589][T11555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.912648][T12222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.053579][T12222] veth0_vlan: entered promiscuous mode [ 175.059104][T12222] veth1_vlan: entered promiscuous mode [ 175.072165][T12222] veth0_macvtap: entered promiscuous mode [ 175.079831][T12222] veth1_macvtap: entered promiscuous mode [ 175.088233][T12222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.093089][T12222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.098563][T12222] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.101258][T12222] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.104012][T12222] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.106722][T12222] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.148450][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.151080][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.164027][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.166530][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.488786][T12279] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1722'. [ 175.702650][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 175.702661][ T40] audit: type=1400 audit(2000000023.520:862): avc: denied { getopt } for pid=12293 comm="syz.3.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 175.755864][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1727'. [ 175.759056][T12295] netlink: 'syz.3.1727': attribute type 5 has an invalid length. [ 175.809102][ T40] audit: type=1400 audit(2000000023.630:863): avc: denied { setopt } for pid=12304 comm="syz.3.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.933854][ T40] audit: type=1400 audit(2000000023.750:864): avc: denied { map } for pid=12316 comm="syz.3.1733" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 175.953726][ T5967] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 175.954190][ T5317] Bluetooth: hci4: command 0x1003 tx timeout [ 176.043763][ T5967] Bluetooth: hci5: command tx timeout [ 176.209467][T12334] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1735'. [ 176.375000][ T40] audit: type=1400 audit(2000000024.190:865): avc: denied { bind } for pid=12352 comm="syz.6.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 176.382342][ T40] audit: type=1400 audit(2000000024.190:866): avc: denied { name_bind } for pid=12352 comm="syz.6.1741" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 176.388902][ T40] audit: type=1400 audit(2000000024.190:867): avc: denied { node_bind } for pid=12352 comm="syz.6.1741" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 176.433003][T12358] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 176.435668][T12358] UDF-fs: Scanning with blocksize 2048 failed [ 176.439434][T12358] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 176.441728][T12358] UDF-fs: Scanning with blocksize 4096 failed [ 176.448427][T12358] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 176.450763][T12358] UDF-fs: Scanning with blocksize 2048 failed [ 176.453104][T12358] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 176.455539][T12358] UDF-fs: Scanning with blocksize 4096 failed [ 176.499516][T12363] team0: Port device bond0 removed [ 176.516615][T12363] bond2: (slave veth3): Releasing active interface [ 176.537427][ T40] audit: type=1400 audit(2000000024.360:868): avc: denied { write } for pid=12362 comm="syz.6.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 176.723551][T12390] netlink: 'syz.6.1748': attribute type 10 has an invalid length. [ 176.732224][T12390] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 176.745748][T12392] No source specified [ 176.977302][ T40] audit: type=1404 audit(2000000024.800:869): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 176.994210][ T40] audit: type=1404 audit(2000000024.820:870): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 177.000701][ T40] audit: type=1400 audit(2000000024.820:871): avc: denied { read write } for pid=12393 comm="syz.6.1751" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.263673][ T34] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 177.356761][T12397] netlink: 'syz.0.1752': attribute type 1 has an invalid length. [ 177.368857][T12397] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.391452][T12397] bond6: (slave veth3): Enslaving as an active interface with a down link [ 177.435805][ T34] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.441678][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.445723][ T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 177.448702][ T34] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.452722][ T34] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.455604][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.460617][ T34] usb 11-1: config 0 descriptor?? [ 177.696047][T12413] overlayfs: missing 'workdir' [ 177.806031][T12418] overlayfs: statfs failed on './file0' [ 177.872393][ T34] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 177.874298][T12422] afs: Unknown parameter 'dœn' [ 178.025270][T12427] /dev/sr0: Can't open blockdev [ 178.113787][ T5967] Bluetooth: hci5: command tx timeout [ 178.223735][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 178.374350][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 178.377505][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.380238][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.383534][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.386567][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.389302][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.392592][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.395607][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.398336][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.401611][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.404531][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.407254][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.410638][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.413389][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.416336][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.419621][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.422392][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.425413][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.428709][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.431468][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.434422][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.438158][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.441289][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 178.444250][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 178.447622][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.451146][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 178.454038][ T10] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 178.456627][ T10] usb 5-1: Product: syz [ 178.457945][ T10] usb 5-1: Manufacturer: syz [ 178.459395][ T10] usb 5-1: SerialNumber: syz [ 178.462123][ T10] usb 5-1: config 0 descriptor?? [ 178.475819][ T10] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 178.668900][ T10] usb 5-1: USB disconnect, device number 23 [ 178.673732][ T10] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 179.272919][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 179.278343][T12431] xfs: Unknown parameter 'discardyÐ àHÇÂl' [ 179.362084][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 179.363821][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1763'. [ 179.555403][ T6111] usb 11-1: reset high-speed USB device number 2 using dummy_hcd [ 179.785026][T12464] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 180.194308][ T5317] Bluetooth: hci5: command tx timeout [ 180.648205][ T34] usb 11-1: USB disconnect, device number 2 [ 180.880130][ T40] kauditd_printk_skb: 96 callbacks suppressed [ 180.880144][ T40] audit: type=1400 audit(2000000028.700:968): avc: denied { unmount } for pid=12222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 180.945706][ T40] audit: type=1400 audit(2000000028.770:969): avc: denied { execute } for pid=12502 comm="syz.6.1780" name="file1" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 180.952483][ T40] audit: type=1400 audit(2000000028.770:970): avc: denied { execute_no_trans } for pid=12502 comm="syz.6.1780" path="/22/file1" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 180.960127][ T40] audit: type=1400 audit(2000000028.770:971): avc: denied { read write } for pid=12502 comm="syz.6.1780" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 180.967595][ T40] audit: type=1400 audit(2000000028.770:972): avc: denied { open } for pid=12502 comm="syz.6.1780" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 180.975442][ T40] audit: type=1400 audit(2000000028.800:973): avc: denied { ioctl } for pid=12502 comm="syz.6.1780" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 181.089584][ T40] audit: type=1400 audit(2000000028.910:974): avc: denied { mount } for pid=12512 comm="syz.6.1784" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 181.111060][ T40] audit: type=1400 audit(2000000028.930:975): avc: denied { mounton } for pid=12512 comm="syz.6.1784" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 181.111099][T12514] overlay: filesystem on ./bus is read-only [ 181.120723][T12514] overlay: filesystem on ./bus is read-only [ 181.122868][T12514] overlay: filesystem on ./bus is read-only [ 181.125248][T12514] overlay: filesystem on ./bus is read-only [ 181.127880][T12514] overlay: filesystem on ./bus is read-only [ 181.130200][T12514] overlay: filesystem on ./bus is read-only [ 181.132394][T12514] overlay: filesystem on ./bus is read-only [ 181.135028][T12514] overlay: filesystem on ./bus is read-only [ 181.137175][T12514] overlay: filesystem on ./bus is read-only [ 181.139382][T12514] overlay: filesystem on ./bus is read-only [ 181.141678][T12514] overlay: filesystem on ./bus is read-only [ 181.144213][T12514] overlay: filesystem on ./bus is read-only [ 181.146634][T12514] overlay: filesystem on ./bus is read-only [ 181.148726][T12514] overlay: filesystem on ./bus is read-only [ 181.150850][T12514] overlay: filesystem on ./bus is read-only [ 181.152923][T12514] overlay: filesystem on ./bus is read-only [ 181.157178][T12514] overlay: filesystem on ./bus is read-only [ 181.159328][T12514] overlay: filesystem on ./bus is read-only [ 181.161444][T12514] overlay: filesystem on ./bus is read-only [ 181.163547][T12514] overlay: filesystem on ./bus is read-only [ 181.165831][T12514] overlay: filesystem on ./bus is read-only [ 181.167900][T12514] overlay: filesystem on ./bus is read-only [ 181.170006][T12514] overlay: filesystem on ./bus is read-only [ 181.172143][T12514] overlay: filesystem on ./bus is read-only [ 181.174803][T12514] overlay: filesystem on ./bus is read-only [ 181.176892][T12514] overlay: filesystem on ./bus is read-only [ 181.178994][T12514] overlay: filesystem on ./bus is read-only [ 181.181085][T12514] overlay: filesystem on ./bus is read-only [ 181.183206][T12514] overlay: filesystem on ./bus is read-only [ 181.185495][T12514] overlay: filesystem on ./bus is read-only [ 181.187578][T12514] overlay: filesystem on ./bus is read-only [ 181.189795][T12514] overlay: filesystem on ./bus is read-only [ 181.191940][T12514] overlay: filesystem on ./bus is read-only [ 181.194183][T12514] overlay: filesystem on ./bus is read-only [ 181.196414][T12514] overlay: filesystem on ./bus is read-only [ 181.198550][T12514] overlay: filesystem on ./bus is read-only [ 181.200752][T12514] overlay: filesystem on ./bus is read-only [ 181.202906][T12514] overlay: filesystem on ./bus is read-only [ 181.205236][T12514] overlay: filesystem on ./bus is read-only [ 181.207401][T12514] overlay: filesystem on ./bus is read-only [ 181.209754][T12514] overlay: filesystem on ./bus is read-only [ 181.212797][T12514] overlay: filesystem on ./bus is read-only [ 181.215922][T12514] overlay: filesystem on ./bus is read-only [ 181.218060][T12514] overlay: filesystem on ./bus is read-only [ 181.220154][T12514] overlay: filesystem on ./bus is read-only [ 181.222377][T12514] overlay: filesystem on ./bus is read-only [ 181.224554][T12514] overlay: filesystem on ./bus is read-only [ 181.226760][T12514] overlay: filesystem on ./bus is read-only [ 181.228858][T12514] overlay: filesystem on ./bus is read-only [ 181.231070][T12514] overlay: filesystem on ./bus is read-only [ 181.233332][T12514] overlay: filesystem on ./bus is read-only [ 181.235666][T12514] overlay: filesystem on ./bus is read-only [ 181.237889][T12514] overlay: filesystem on ./bus is read-only [ 181.240570][T12514] overlay: filesystem on ./bus is read-only [ 181.242863][T12514] overlay: filesystem on ./bus is read-only [ 181.245684][T12514] overlay: filesystem on ./bus is read-only [ 181.247857][T12514] overlay: filesystem on ./bus is read-only [ 181.250206][T12514] overlay: filesystem on ./bus is read-only [ 181.252324][T12514] overlay: filesystem on ./bus is read-only [ 181.254807][T12514] overlay: filesystem on ./bus is read-only [ 181.256999][T12514] overlay: filesystem on ./bus is read-only [ 181.259171][T12514] overlay: filesystem on ./bus is read-only [ 181.261328][T12514] overlay: filesystem on ./bus is read-only [ 181.263501][T12514] overlay: filesystem on ./bus is read-only [ 181.265796][T12514] overlay: filesystem on ./bus is read-only [ 181.298271][ T40] audit: type=1400 audit(2000000029.120:976): avc: denied { bind } for pid=12516 comm="syz.6.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 181.304832][ T40] audit: type=1400 audit(2000000029.120:977): avc: denied { setopt } for pid=12516 comm="syz.6.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 181.745515][T12529] openvswitch: netlink: Missing key (keys=40, expected=100) [ 181.794958][ T5967] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 181.795724][ T5317] Bluetooth: hci4: command 0x1003 tx timeout [ 181.834301][T12544] netlink: 'syz.0.1793': attribute type 2 has an invalid length. [ 181.970437][T12558] netlink: 'syz.6.1798': attribute type 1 has an invalid length. [ 182.012170][T12562] xt_connbytes: Forcing CT accounting to be enabled [ 182.014584][T12562] Cannot find add_set index 0 as target [ 182.232645][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1808'. [ 182.237777][T12584] binder_alloc: 12583: binder_alloc_buf, no vma [ 182.273865][ T5967] Bluetooth: hci5: command tx timeout [ 182.442584][ T6111] ================================================================== [ 182.445184][ T6111] BUG: KASAN: slab-use-after-free in __mutex_lock+0xa65/0xb90 [ 182.447537][ T6111] Read of size 8 at addr ffff888034bc2320 by task kworker/3:4/6111 [ 182.451091][ T6111] [ 182.452553][ T6111] CPU: 3 UID: 0 PID: 6111 Comm: kworker/3:4 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 182.452570][ T6111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.452578][ T6111] Workqueue: events l2cap_chan_timeout [ 182.452597][ T6111] Call Trace: [ 182.452601][ T6111] [ 182.452605][ T6111] dump_stack_lvl+0x116/0x1f0 [ 182.452622][ T6111] print_report+0xcd/0x610 [ 182.452638][ T6111] ? __virt_addr_valid+0x81/0x610 [ 182.452651][ T6111] ? __phys_addr+0xe8/0x180 [ 182.452664][ T6111] ? __mutex_lock+0xa65/0xb90 [ 182.452679][ T6111] kasan_report+0xe0/0x110 [ 182.452694][ T6111] ? __mutex_lock+0xa65/0xb90 [ 182.452711][ T6111] __mutex_lock+0xa65/0xb90 [ 182.452726][ T6111] ? add_lock_to_list+0x9d/0x130 [ 182.452742][ T6111] ? l2cap_chan_timeout+0x6d/0x310 [ 182.452757][ T6111] ? __pfx___mutex_lock+0x10/0x10 [ 182.452772][ T6111] ? debug_object_deactivate+0x1ec/0x3a0 [ 182.452800][ T6111] ? l2cap_chan_timeout+0x6d/0x310 [ 182.452817][ T6111] l2cap_chan_timeout+0x6d/0x310 [ 182.452833][ T6111] process_one_work+0x9cf/0x1b70 [ 182.452847][ T6111] ? __pfx_process_one_work+0x10/0x10 [ 182.452861][ T6111] ? assign_work+0x1a0/0x250 [ 182.452872][ T6111] worker_thread+0x6c8/0xf10 [ 182.452885][ T6111] ? __kthread_parkme+0x19e/0x250 [ 182.452901][ T6111] ? __pfx_worker_thread+0x10/0x10 [ 182.452912][ T6111] kthread+0x3c5/0x780 [ 182.452923][ T6111] ? __pfx_kthread+0x10/0x10 [ 182.452933][ T6111] ? rcu_is_watching+0x12/0xc0 [ 182.452948][ T6111] ? __pfx_kthread+0x10/0x10 [ 182.452958][ T6111] ret_from_fork+0x5d7/0x6f0 [ 182.452974][ T6111] ? __pfx_kthread+0x10/0x10 [ 182.452984][ T6111] ret_from_fork_asm+0x1a/0x30 [ 182.453000][ T6111] [ 182.453004][ T6111] [ 182.506452][ T6111] Allocated by task 10553: [ 182.507846][ T6111] kasan_save_stack+0x33/0x60 [ 182.509345][ T6111] kasan_save_track+0x14/0x30 [ 182.510827][ T6111] __kasan_kmalloc+0xaa/0xb0 [ 182.512285][ T6111] l2cap_conn_add.part.0+0x60/0xa60 [ 182.513944][ T6111] l2cap_chan_connect+0x15e5/0x2020 [ 182.515583][ T6111] l2cap_sock_connect+0x3b7/0x740 [ 182.517164][ T6111] kernel_connect+0x104/0x180 [ 182.518707][ T6111] rfcomm_dlc_open+0x821/0xaa0 [ 182.520216][ T6111] rfcomm_sock_connect+0x423/0x670 [ 182.521834][ T6111] __sys_connect_file+0x13e/0x1a0 [ 182.523413][ T6111] __sys_connect+0x13b/0x160 [ 182.524873][ T6111] __x64_sys_connect+0x72/0xb0 [ 182.526404][ T6111] do_syscall_64+0xcd/0x4c0 [ 182.527844][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.529695][ T6111] [ 182.530468][ T6111] Freed by task 10684: [ 182.531747][ T6111] kasan_save_stack+0x33/0x60 [ 182.533231][ T6111] kasan_save_track+0x14/0x30 [ 182.534755][ T6111] kasan_save_free_info+0x3b/0x60 [ 182.536345][ T6111] __kasan_slab_free+0x51/0x70 [ 182.538222][ T6111] kfree+0x2b4/0x4d0 [ 182.539769][ T6111] l2cap_conn_del+0x59c/0x730 [ 182.541638][ T6111] l2cap_disconn_cfm+0x96/0xd0 [ 182.543528][ T6111] hci_conn_hash_flush+0x10e/0x260 [ 182.545566][ T6111] hci_dev_close_sync+0x602/0x11d0 [ 182.547579][ T6111] hci_dev_do_close+0x2e/0x90 [ 182.549476][ T6111] hci_unregister_dev+0x227/0x640 [ 182.551443][ T6111] vhci_release+0x79/0xf0 [ 182.553153][ T6111] __fput+0x3ff/0xb70 [ 182.554740][ T6111] task_work_run+0x14d/0x240 [ 182.556562][ T6111] do_exit+0x86c/0x2bd0 [ 182.558212][ T6111] do_group_exit+0xd3/0x2a0 [ 182.560006][ T6111] get_signal+0x2673/0x26d0 [ 182.561804][ T6111] arch_do_signal_or_restart+0x8f/0x7d0 [ 182.563968][ T6111] exit_to_user_mode_loop+0x84/0x110 [ 182.565897][ T6111] do_syscall_64+0x3f6/0x4c0 [ 182.567356][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.569188][ T6111] [ 182.569968][ T6111] The buggy address belongs to the object at ffff888034bc2000 [ 182.569968][ T6111] which belongs to the cache kmalloc-1k of size 1024 [ 182.574189][ T6111] The buggy address is located 800 bytes inside of [ 182.574189][ T6111] freed 1024-byte region [ffff888034bc2000, ffff888034bc2400) [ 182.578390][ T6111] [ 182.579155][ T6111] The buggy address belongs to the physical page: [ 182.581154][ T6111] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34bc0 [ 182.583856][ T6111] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 182.586473][ T6111] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 182.588919][ T6111] page_type: f5(slab) [ 182.590186][ T6111] raw: 00fff00000000040 ffff88801b842dc0 0000000000000000 dead000000000001 [ 182.593331][ T6111] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 182.596658][ T6111] head: 00fff00000000040 ffff88801b842dc0 0000000000000000 dead000000000001 [ 182.600047][ T6111] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 182.603394][ T6111] head: 00fff00000000003 ffffea0000d2f001 00000000ffffffff 00000000ffffffff [ 182.606744][ T6111] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 182.610106][ T6111] page dumped because: kasan: bad access detected [ 182.612617][ T6111] page_owner tracks the page as allocated [ 182.614838][ T6111] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5355, tgid 5355 (start-stop-daem), ts 20598862727, free_ts 18767075947 [ 182.622727][ T6111] post_alloc_hook+0x1c0/0x230 [ 182.624614][ T6111] get_page_from_freelist+0x1321/0x3890 [ 182.626798][ T6111] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 182.629124][ T6111] alloc_pages_mpol+0x1fb/0x550 [ 182.631047][ T6111] new_slab+0x23b/0x330 [ 182.632671][ T6111] ___slab_alloc+0xd9c/0x1940 [ 182.634537][ T6111] __slab_alloc.constprop.0+0x56/0xb0 [ 182.636631][ T6111] __kmalloc_noprof+0x2f2/0x510 [ 182.638568][ T6111] tomoyo_init_log+0x1385/0x2140 [ 182.640517][ T6111] tomoyo_supervisor+0x302/0x13b0 [ 182.642500][ T6111] tomoyo_execute_permission+0x38e/0x4b0 [ 182.644342][ T6111] tomoyo_find_next_domain+0x38d/0x20b0 [ 182.646095][ T6111] tomoyo_bprm_check_security+0x12e/0x1d0 [ 182.647868][ T6111] security_bprm_check+0x1b9/0x1e0 [ 182.649479][ T6111] bprm_execve+0x810/0x1650 [ 182.650905][ T6111] do_execveat_common.isra.0+0x4a5/0x610 [ 182.652666][ T6111] page last free pid 72 tgid 72 stack trace: [ 182.654542][ T6111] __free_frozen_pages+0x7fe/0x1180 [ 182.656176][ T6111] vfree+0x1fd/0xb50 [ 182.657412][ T6111] delayed_vfree_work+0x56/0x70 [ 182.659232][ T6111] process_one_work+0x9cf/0x1b70 [ 182.660953][ T6111] worker_thread+0x6c8/0xf10 [ 182.662427][ T6111] kthread+0x3c5/0x780 [ 182.663714][ T6111] ret_from_fork+0x5d7/0x6f0 [ 182.665174][ T6111] ret_from_fork_asm+0x1a/0x30 [ 182.666665][ T6111] [ 182.667462][ T6111] Memory state around the buggy address: [ 182.669671][ T6111] ffff888034bc2200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 182.672784][ T6111] ffff888034bc2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 182.675921][ T6111] >ffff888034bc2300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 182.679064][ T6111] ^ [ 182.681070][ T6111] ffff888034bc2380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 182.684213][ T6111] ffff888034bc2400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 182.687321][ T6111] ================================================================== [ 182.690892][ T6111] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 182.693708][ T6111] CPU: 3 UID: 0 PID: 6111 Comm: kworker/3:4 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 182.698378][ T6111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.702528][ T6111] Workqueue: events l2cap_chan_timeout [ 182.704667][ T6111] Call Trace: [ 182.706060][ T6111] [ 182.707373][ T6111] dump_stack_lvl+0x3d/0x1f0 [ 182.709203][ T6111] panic+0x71c/0x800 [ 182.710766][ T6111] ? __pfx_panic+0x10/0x10 [ 182.712536][ T6111] ? mark_held_locks+0x49/0x80 [ 182.714429][ T6111] ? __mutex_lock+0xa65/0xb90 [ 182.716298][ T6111] ? check_panic_on_warn+0x1f/0xb0 [ 182.718309][ T6111] ? __mutex_lock+0xa65/0xb90 [ 182.720164][ T6111] check_panic_on_warn+0xab/0xb0 [ 182.722117][ T6111] end_report+0x107/0x170 [ 182.723823][ T6111] kasan_report+0xee/0x110 [ 182.725744][ T6111] ? __mutex_lock+0xa65/0xb90 [ 182.727609][ T6111] __mutex_lock+0xa65/0xb90 [ 182.729425][ T6111] ? add_lock_to_list+0x9d/0x130 [ 182.731380][ T6111] ? l2cap_chan_timeout+0x6d/0x310 [ 182.733332][ T6111] ? __pfx___mutex_lock+0x10/0x10 [ 182.734935][ T6111] ? debug_object_deactivate+0x1ec/0x3a0 [ 182.736710][ T6111] ? l2cap_chan_timeout+0x6d/0x310 [ 182.738356][ T6111] l2cap_chan_timeout+0x6d/0x310 [ 182.739938][ T6111] process_one_work+0x9cf/0x1b70 [ 182.741511][ T6111] ? __pfx_process_one_work+0x10/0x10 [ 182.743372][ T6111] ? assign_work+0x1a0/0x250 [ 182.745329][ T6111] worker_thread+0x6c8/0xf10 [ 182.747202][ T6111] ? __kthread_parkme+0x19e/0x250 [ 182.748786][ T6111] ? __pfx_worker_thread+0x10/0x10 [ 182.750409][ T6111] kthread+0x3c5/0x780 [ 182.751695][ T6111] ? __pfx_kthread+0x10/0x10 [ 182.753193][ T6111] ? rcu_is_watching+0x12/0xc0 [ 182.754707][ T6111] ? __pfx_kthread+0x10/0x10 [ 182.756171][ T6111] ret_from_fork+0x5d7/0x6f0 [ 182.757643][ T6111] ? __pfx_kthread+0x10/0x10 [ 182.759105][ T6111] ret_from_fork_asm+0x1a/0x30 [ 182.760611][ T6111] [ 182.762288][ T6111] Kernel Offset: disabled [ 182.763648][ T6111] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:18:26 Registers: info registers vcpu 0 CPU#0 RAX=0000000000199221 RBX=0000000000000000 RCX=ffffffff8b885c99 RDX=0000000000000000 RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6713000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3ea0be CR3=000000004e2f3000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000006 DR2=0000000000000004 DR3=0000000000001000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001a642f RBX=0000000000000001 RCX=ffffffff8b885c99 RDX=0000000000000000 RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=ffffed1003bd8488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801dec2440 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6813000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f78727726e0 CR3=0000000032668000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555585ad21cd 0000555585ad2110 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555585aef4db 0000555585ae4190 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04040140d8007375 622f2e01ffffffff fffffffff3080380 0300100001818004 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0601f18004040273 90004c424c4e555f 4c424c4e01ffffff 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f180032010000610 00201000060073be 408080a010000580 040108000601688c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02a182080005e003 00100005d0030010 0005c00302100005 b003481000069003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fa53a50064000980 0100100000000200 0040000000000000 090034000000243e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02a182080005e003 00100005d0030010 0005c00302100005 b003481000069003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f180032010000610 00201000060073be 408080a010000580 040108000601688c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005ba8008 000100000a080606 011efa0010000fff ffffffffff042210 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000015aed9 RBX=0000000000000002 RCX=ffffffff8b885c99 RDX=0000000000000000 RSI=ffffffff8de32e3f RDI=ffffffff8c158f60 RBP=ffffed1003bd8910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801dec4880 R14=ffffffff90a98750 R15=0000000000000000 RIP=ffffffff8b8847ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6913000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f78729b7bac CR3=0000000055967000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006b636173645f70 63742f347670692f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff534a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff534a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff534a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff534a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff534a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff534a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff534b85488 00007ff534b85480 00007ff534b85478 00007ff534b85450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff5356ed100 00007ff534b85440 00007ff534b85458 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff534b85498 00007ff534b85490 00007ff534b85488 00007ff534b85480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bced5 RDI=ffffffff9b0c72a0 RBP=ffffffff9b0c7260 RSP=ffffc90003c3f540 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031313654 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b0c7260 R15=ffffffff855bce70 RIP=ffffffff855bceff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6a13000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000003a7ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca01c3900 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7872811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7872811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7872811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7872811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7872811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7872811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000