last executing test programs: 4m27.692984004s ago: executing program 32 (id=308): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x6, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x0, 0x80, 0x2, 0x3, 0x8, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0xfffffffd, 0x50, 0x3c5b, 0x5, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0xfffffffe, 0x7, 0x3, 0x400, 0x4c74, 0x80000000, 0x243, 0x3, 0x2e, 0x0, 0x8000806e, 0x7, 0x4, 0x1, 0xfffffffa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x8, 0x0, 0x6, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0x2, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0xff, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x3ff, 0x6, 0x9, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x800004, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8010, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0xd, 0x3, 0x3, 0x9, 0x1, 0x8, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x1, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0xb, 0x3, 0x3, 0x20000008, 0x4, 0x6d01, 0x0, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfae, 0x1000, 0xa0, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x39f, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x9, 0x938, 0x6, 0x40, 0xfffffffc, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x103, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x8000006, 0x16, 0xffffffff, 0x80000000, 0x1005, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xe8a5, 0xa, 0xaf, 0x8, 0x3, 0x226, 0x4, 0x5, 0x8, 0x4, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1b, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x5, 0x7fffbfef}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x8, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x9}) 4m18.964490634s ago: executing program 33 (id=448): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x10, 0x1f, 0x46}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000003c0)={0x40, 0x403, 0xcca7}) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) syz_open_dev$dri(&(0x7f00000002c0), 0x6, 0x20080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000280)=0x9) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000340), 0xa3, 0x80000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 4m4.713639942s ago: executing program 34 (id=436): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r0, &(0x7f0000000040)=""/4096, 0x1000) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000001040)=0x9) 4m4.30515821s ago: executing program 35 (id=595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000100)={0xcdd3, 0x8, 0x3}) dup(r3) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000300)={0x7, 0xbb71, 0x0, 0x1bb, 0x4, 0xaf6, 0x2, 0xfffffff8}, 0x20) 3m15.929379172s ago: executing program 7 (id=1218): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r0}, 0x18) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x10000, 0x8c) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x23, &(0x7f0000000180)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff0001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x4, 0x0, 0x4, 0x5, 0x8, 0x80, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000340)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x4, 0x5, 0xfffffff9}, 0x10, 0x23e3b, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, r6], 0x0, 0x10, 0x9d019c11}, 0x94) (async) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x1, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x84) syz_clone3(&(0x7f0000000800)={0x44040000, &(0x7f0000000680)=0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000700), {0x17}, &(0x7f0000000740)=""/5, 0x5, &(0x7f0000000780)=""/33, &(0x7f00000007c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5, {r4}}, 0x58) pidfd_send_signal(r7, 0x3b, &(0x7f0000000880)={0x2, 0x7b, 0x272}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xa0, r8, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2cb}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd3b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4080044}, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r4) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r9, 0x400, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000c00)) (async) gettid() (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r10, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r11, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xfffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44000) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000d80)=0x1) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000dc0)="de56d9d74a8093c5d94c601e4ebb422e46f604e1145153a9eb09080cfd5762ccaf06b8c36d351a6526016a77bcfcccb087ecfb62e83208b628ec3299a3586d8816c7beeb9c5a6772ec710bc685ad2a04b59c8f5b07e18373c8f57655b80e8fea0107bd3a7d24e1f9514e305242494eb6cbab2f3d478b576e80d5d62929f778bb68f21a37f1548ab2c444b92cc8fb56bb4debf415c33c6fbb3d9554290c8c757d5fade8b9", 0xa4) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r5, 0x4068aea3, &(0x7f0000000e80)) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000f00)={0x80000000}) (async) r12 = dup2(r5, r3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f40)={r4, r12, 0xa, 0x0, @void}, 0x10) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r12, 0x84, 0x1e, &(0x7f0000000f80)=0x3, 0x4) (async) ioctl$LOOP_SET_DIRECT_IO(r12, 0x4c08, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000001000)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r10, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x38, r11, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000090}, 0x2000004) 3m15.20932641s ago: executing program 7 (id=1225): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x6, 0x25dfdc03, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_SRC={0x8, 0x2, @private=0xa010102}]}, 0x24}}, 0x4044000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xd) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r5, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x34, r7, 0x1, 0x0, 0xffffffff, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x1}]}, 0x34}}, 0x4044) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) syz_fuse_handle_req(r0, &(0x7f0000002100)="9432b5590e20007d3a0e913db5ac78ff0d44c15cb844e10097da0f140bff0a3215e8dc5b9522d2b969478051b28181e55083c80360e91dc5fa86a4f90cd481e0a9593943d5b9ea1ed3c7bd5d5db99d0b7881285f11e04ab5842d47c33edf0d41c8f2065f3cd4e053cd12dd242d57fa30860e69be9a316961e20f681c7452c58bf065103f3f1d3d43de54bed7c1b3a10c16f8a592febb4f08f5b9a287cf80e9f9e288af32c52e16ee51e5f776dfaa7e7371c6cf0c4b02a1384e5a588c9c2ab0314ee924cf15b315ffaabc1f45aba87acf77137ac0056bedbd87bfd621df0bb9104c56258cc0f57bee33da8bcc9b240578746af0ce39eadec6401805da18ceffa994eec7df821c1b99867df29f4634ed47b72d935940d09e06852023db050871392e08b2b0914fa8436167a7e03716ed654e1be2cf8c04398fe6fb850d48694a18e07fac846a055c2f632ea21a54c86466800c669e0dd60c91f532c389c27332a89f130114d1b4c2ce1b84f12ff05d66f85490126948b1e1c975f9b6ad84f35bb727051de21db6c14bb5135d885f1099fe16753d385ef59b15d2e97757b39be26f5ae23fa4f6a8aa161c91f0c21d58e24b3189c9f5db1b4ca412665db833c7feba5e271d0d94fd784f5c7475fa7c37789026fb067b4a804ed3f55a1cba89496581822b1a8be914083643eac98f252075e89d1e638e52900170e4b980f0723054562b27a1421ff267f2d6beff8bdbdac2fee867410ce66652b71c6b6296fd575101542dc3eb4d255c605d3586ad99b05a4a61e57064242adf20a1e820c63a813dd70b5ca3d7fe43b0a733fce164f894fe12e23c89117a0c9b6b3bba305e60cc4bf998356674bf0d5446a0876f78353a723fed6170b959b2b559a82b99fc2efb907ce031eba78c1b6a4b11f54b682f06d8ac3af0097ecb3b7bbcd1590d695ce1f042574fb812f148136edd8f47d51151a75bf182415084405d2e4464552fa12a99ab3e38e805c9bb6e1ab6ef8b8b102df784c8c7e5b83efd5f5b5ec490e94c41c369f6363b469888c42c28b331dd6e2a557c7a28be1847381dfef0e572980f0f1958714c5129bd697e5356dc2f609bf1a4c51cfb34ec44c12ab64c2e4b9bb58b0b10e80d3656c0fc65fc733cb10e3f7726c815cfedc9573be3e31f335766b853c1a7a08671315aa01813fb2db4bceb3ffab242fc2bdcc2dd09f0c039d7f932f73e9301aa1c0c2d95a522e82d5976924d1303262c8fa6445d14d967c3637581a773a1489f11010902f616c14f0cd1121c60de98c30078acc5aa5147970394d1791fb92ce7757484276adeea74746232c148704fbeedc6e8fdda09a0a0190a4843f9466ff2971305470f78b33593458c0822ee3b50a231b7ab85e4146c9d0f7e6ce51f8ae6a9036eff49146fbb4cf0f9e640d9de336f993b339d9616a00be579509ab05fb9ccb4c0f14f3a90e0a88ff1f15a4be13a422c450a0d90b9b395622799ab02ed3a08c8eabd10872ac129c8d32e1c320cef8881d60ed05a568ff63a57a4f9a8f42f5ad7de5f7126cee9c37d862e3b5ec50415c4c15b10fdcc7b1d27ed409525d9e33e4bcf2acfe0afc0c4b2d3f5f626fa42b603727f4cc28d4bc356cee44f6830ea17dccca1bd720fed70fc26dcf1d586b903352ce92298ffe216475250f36c3b3c9bffbc5c6dde4e28fbfc28d08b01f5b6f9ef802093a6981ad3d42e7ebae1a6b532add43c447a9010194f44bb83e6a7dfacf1c6baa1b8a44d32c2401d85021f27f82f4d22f697da60d4cc1557191f109464743fe9bc1a6e7c25a9d2e9299728974561e24fa27b265d751d3620ac8b32a10a51f51d1f939fe5104ab98a9d9984ca400ce8b425c480443ea6901f1e73cad3f246c649186f4cbbab760a96971368473521099a3af90e886d6464ad2173d0b248a110fb5e610c4082d28ca086adab162dd32e40af67dafcdbb9189105b2200dd0830cfae11c0ffb5c7a3edf05df33319976ffd77cc0fe3f5902cef4ad65381eb36e17af84dda66653294fe783925cf8ea5ed645fc1dc5b39e02864c03366867185dddc54c2e1825212ef366638cab11c2268526427cd4f29166224281e10d355c770ae816ac3ef3869af6b85ccc86b9e1b6f3bdd16208b01e45dea1fb1dc6209fa4f4f7743d2fddf4a645341045078608e99baac8a68ee3de586b1a5a7856165d2e5fbd58431b4068be6030671b7dcab50f980496d3c9332b9c53dc79d8e926fcf8b76e9839311d54bd12753fa85973d760460f5d882a99aca45c4a707546d8e17155a7315099196de7b5ff5d802c9d6608925f36ee42b5d073c4e7eb68e8ed4373de3cd1691b6f5f0353c394f3ec28d6ba401d820bde38c330a85b1111cebcb37084d032d250f579b1a7c79da19592f592ce89d653c769e4da578b45499772bdacbae743c899e3db8b421c72dd19a6b2e888ada5fceedcd8f523ea8d5ecf621535a6d2e8d0c798495f4a72abb1cb24112818c85a2699aef0ac76e88ee2858aef0d9f1555d0441ef77096d20e365a61205b0062d6c2662bd91d77d13605fb007688092e5061c162b80dd725fb002e88c3316ba437e954358fad79e4160efa29bb7cca3abc3a20fcf66cb9d8df99ffe255491aae05729a06e96a142b954f3cbee81649022acc0450427e8e86e2990d8b39c3c0f72258ae0e37a407618a902136ee5c26b2f2d6d352ff8afe6180703328f92c27030052ae5a15f02371365ec7df6f9c03598ccec789aecec63f6e7a5804ddbc0bbfc9415abe5ade5ec93b6e53de34058d2cebe294493b717add39f160c445ebed694e1dc5759df31c48cf92ebea29bfe369c9b4f74b5717d429c9c19069d8140d2292e70f219b1754f8d8e3d07f9329d79da6008dedd74093fa7beadb70e8c5539b331b84e2217ebd9a09769d73bffd214d91eee88759cd84da5ee117be27fbaf4cab245353c8da50580608358affce1a815075dddad08666d5b09dc8dbdfaf399b9cc4ea3f41d50db5f6a5b99f864a418fec35508fad2f9e24719dd544a783c112a9b9afe3a9ad99e8fe38b06aba9881183b3e9817cd97d46e7d085ad7468660bc86bc09feef536677396a962f21b19abf3d326f02172865621a8fd19e3fb6ac61e1b767732e0b1837b5b4523a7532633d10625ac8a510ddbc49670bbae7c764c41a2e9764bd0058664521dea3382327bed2698d2478f0b6b13bbcbbc1a46adc6575a8edba7b0072e63a977d43d95de43ff4e3dd89d342dff1996e75c51161b2aef06d6a71c72fccd943125c981da2ac9663ccfe5f6e639b2f77231d505b47aac7497fcbc07d7cb811382e442cf3cdcd971c72bc9cb3134dfb0ad22d46b2179675a7ea24ce86466ef4b83628b7e97ec48f6be1e3e2b0d8a81beb5006dafa87ad1851526029ad2401d42a6d9d4bcdb0b211736a1b67f180d394e92cc1749c253cb8028f7328c4467ceb7d7731165310c01cf7a7b8ff6aa92c4510394cec793b5fa032d738596c2b54fbb2564db9b589b8d62de608aaf1bc92fbd0c2408bfd352a8695bf71926cad71674c6b9ef9160d7a579aee8197efbb61d9d6794ad8cf5f26281080c3a3149c62ec0f029b2b5ea8c469333c329c894240e160939b5affe51dae804fa13767320c1a60ed4caacb9f8d9e9084b6a5e2420c05caa3d7a2830a0cfbb329419b528bab6ac2620d470f3eb0747c40cb23d752a681d3c9971d4100ef607f2c9458b4070b26deda51c16f8ab43c7634d7fc0e1941e9de93a6107c3c1af8aaf0c404606d72b19289c3c5d71cd43e073adab9f731ff60b6412bc5477cfc5d36c7bee34242d8da9d1eb7c042b6a68d2edf6943ae2a1b2c88465311c58cab5de0e2e6f9d5785e22ebcad8d337bbcb4cd58267e5880b50c598879bf53d769b628fddcab1588ba59134802dfa247e4e65c42ed63e29401cee6fa743e48077ca0014a3ed70ea55339b446da86b896a1e645a8083dacb7afe7d7ce0a1dae10b0aa6209bb060a8a279f596b2ce118d63222d10db18474744ee56826ba833713063a8cc28e974a53ba95226a9470fc5abc9de64414dba8c093ce7267e23b2b1eca3261c69fb46234a38e119500c717a2640e4445cb5679a93f9a49454a063222238a5a9e0a69f2bdaf384fb3b2cc3b329d27ec4a94f3267fc9de9d4b0d91f0d82e31dbed2fa5736af43388efa6e1f92151419d0f36371f6903de3accb6569d8d82b4e7753adef8a1d1ed363b0fd3c908a1c173ec4c496d27d944a73f1a4d35ae5d31c9f35ac140a8ae07a3236d369a5f0880fcdab45bc312c208fbef5f4c91f603750f437569a84a62b9a66a1be96f54193c1a8cca3571a169b43d5915a22a7e90a503b93d9ef061f75b0d4ca9a56649ae1388c2946a21d3a9d49b8d73ecb46b7e9b8ec816d85f4b9ac3bc22165bf40ec87fe964dc0d82f071580cb7181176eecd3da5f27e46156eff54beac1a9825b7555d7624e068489632b9974b5ab0b5697d4c134e5931c99a7ae5992e0fe6b02b0c0c92a608588e237dfbd28d2ddb0cebf2486a70644a2bd13665f4be1f7e85ebdf75f5e89f5d2a9dc3116012617af2082769345644b187802b61cbdfe8cd5f48d15a1834f4fbc09cb06fd670ac17a78aa82c60702c82504442e27d337b77cef2e23da5779efa34509ea96bc5dfb1ae6a24ebfd68b8e88fe0a06bdad75b53680c6ee66305e7a05c4a0d3b4e0b9b28323a19e74a48ec679d07839860ead6491dd7236e0d3a27862fa56e40e3870bfd8cdfffc711557da9e2dc2cbd1c9e6d1624a951dade7c2c097c610a81ce20506e5360bec9ba283beab2e62a359ed74dc0b818d512e5ae202b0dc556c722c8b9c8b8d651b767312afae270259c24c42c6386f79c5e49d4d2cdb6187fd31c53a13709b66598df213d42bc48b8a066670e1a35b979e88c7f4c1d1abfafa8dde6f94a8d401e314c95ad0191ce2bd4a660d9892d56067baf0facce6ac71a64a705d61aff82c32bf8129ef7a96fc50023993cd75a34a28476f57353021a12d02d7ac57c4ffd34ce1ad51d02553884179912a7d8e30fbbc1fb33afc85193cedb38913de8d0fab1565b9de4d0522e3743665ddf6430e3fb8dd38692598f665c3ad78b381be76b08fd5167fb783ecdbd117440cd965c8560fc91c5b140ccb4d5289c6beb0f1c382e612e53e5d443df2aa0ebea09bfb27c9cd946845dbd8c2c9a678eb479684f48cdd8cc133d209cf5105403cc7e200266f9da89fb9b5cce9c44c12998a0e0df05931b1660ad220940ec3bf522af9545c2364efdbb2ec0433d90c5678e78750902f71fdb0ab5617c1a145e44e87f1ef1e29d94663d0df597c487b32001119ef2aaa219ca08417658d5acb392b6fc86460b9f65c2007b2d2b276ba79d516439c34c7d0cf4eb4f9f243880179e4ce95b582f633ab6ba2247a02849f42a0a9d99d10a68f0184fe527487cf58abb216e9d21a244d98b5099a57d029e1db4026576eed9106c0e0018e29dc248c96e5302f71ed9a8ae64e0523fc8cd7718d744026c0081715e555abe31217d20bfffe7cf430b8b1e916705f4322e410a68ac87124be9cc63e71232ebeac51fb50b4264fd973f62a6cb12f3a96cc60b4603eb1fc9fb00023e0b2007958e28fb49616f86bed59a20e06187426a298313d2ba5c458102f5f49bf0673995e1a66d633f9ca55f308dde15ecbe0b35b326c2d147270eb137f543aa04c59127e065cd50ac775c64a8868ef8ebee9cc5f78ed8b8b90733edf64cab946e870f432765d3c7d20e9b7ba9f33d35098c40f86a5ec3d15dfe978776ab7660afd053cbc415cc0cf054f383caffd78607ffb50e5fee62e1ac80913c5e1ff4de4cfc2a4833154212b1a6f0e9cfab915d976171531b0cb0a2764433cf42e453a7c37371f2b7785cd5003b7f2ce56bcc436c81f5131fc4f04859413dd0a04dccd17a3f4bd64660659470c67beb433fe55a377da48c7b51114a9c867a70e502385ff8231e6bd82a731cba54a8b6168060fedfd0e1486232fe13e5dd4a85cb1dc8820eb56d16be08adb4be9465f5337f92dde274c4e7220e40d4e1e4161d9e895bb6e20ffb2bc2b84726e503952eb39eef1e23f050ede68cba8e7a35284d43be19aa1f5c9bbedf487b04adebb6c933b872ea9229b5cf9664f6993f60870074acea4d101431a27474632226467da67959490ad6dcde4963889d8f2cf17682766591f14000313b67359b2674538d178269bf6aa04d6747635a80e9a0131b2aad1c28ae5272b11077438cd830b32d9f1772578e5e8da5c9a2dfb240ff1ad918fdffd4bc5bac772c6b8cca7b037aafcb025292966ccac8f15358fe7348733bf2da1c4041583786972a3d99eab8ef89719fceaae6c4e8854e34a5a19bf40e5714b697f1bf442a9f2279df53ae13ddac9d91562c59f904b9af350f13165145b6b1ef0fe389e01560bfbc31c34c1756d1bd4d012016c9e5a957f1de0e4b01f4dd902eb5dcfa4e3b85ef06e1d61bee00e3fde7749e8b2161c6c541e31b2560e36cb9cf28546341cbbf977603c83635d4bfc79e42c2c70b1b49f4d94755aa5924f7b5abcd034dd06804ceaf20e949f689662f19056e8defdcd638ca3fee542db84173642e0e2df1af909ebd472252f83b8ec51dda41322a936b1b6f4b24eac6c83aa43a8de3076eb24969df6edcb2a5f29e9418d575dcbc10aad70ace7e770b94b70deb0720df828712fc06956bb02a395cfbae7b79d7a2d99a9193eae0003efcbedc65e3667e6a46db3cb6817ab1d7732b4c8082eb6e41493daee76a27bcff41be4cdb5e37a68944eb000f9a9383dcdd30f9f1c45a2af794a1dc00cd8c5fd291d7c6cf85612849d851818274eab89fbaaaf4108fb4accb2f73f81204f5bbf93896bf0baff6ad409e7884cdefa7d9c9d6e8903961f636d816b2e195b6d8ba1a5bf25e40e9f9a4c706471cad106e4abdfe53bb548adb373e3155fb4b69af638f1ec6b9ed32af8dea8b9bb57135449c3fe481753bd7089047a77f26f3a3e051c38f4bf372082761466c45ef9fd27d4b21447eb40d7398b9d43d0bacf27cfe09b41c851509aad6b5dcfd4c020ca5f4e2ca88bc49779a61c11cf9de8656878f0bc345640a07c729cc5a53ea01e520b310b36c8bc65ebd71c4fc10007e0c78d279ccb08c294c553f370ac865992bb1e52b379f1cc0af6df4947152363e68fe1debf708c00b163205a2528e3bdc199ab8454f5c1367856a7c2610cf2686372410dec6f6cf618c124f08c75a41fdc765a3199995c628153809ffa20a4dbd93d105f91f8088c7902cebe65c48c66f235902f000fc094f5f7100b39a706e38eaab6b704f8b8e726121752962c4106cdd11859d64731cbe2e7bcdd0efa140dda88c6aa58f9c9e40ad803a5a6c074ee52acbda26367346da3634df328c80511f26e58cd67018fa1a7100b16911e8fbbacdebb6e4832a4b9e1a7838b692b3260641fb0a12ab1c0c106775b85370bd888bdd78ea8747420a71e448f9546fc56f595d0a0b89e8fe00b65431b4d0773589dfece92b786c6b54950eb221fb47b59f7067aa28f0bfeead07c7c04d772b845e4cd3d4be482553f46e869019b88bed1fdfb6f9aaf741fe38794aebe8d66cfbfbdd17a1d5e851f2434fe46770904204f93957ef12926b47e291764cde93348d0a4d582754d2c6408a7a9bfa47e38afe14c73cbfb8d581d8b2c8c4b0994a9bec01e0add5640b2aea7faf0225ce3048d6bc2261d2dd7ec60b32185e15190e7f68360ecd4056347c683cd7b293c712611ee8e4abf375f47228c187c43fe9a638c3ad0e3f95203ac4c3d44ea55c37ef9a77d437147d4f460359d428d0ca0613422e68a74b869739f72c8137e76015f00aefd48c3fbddaae1683358c8a1baa4fb0a5a4ff3bda552cce57a20e39fceb990d72e28c4cdae2ef94e1705e4fd5780ee893b7ac166c9cf3797c38249239915a710a1aa4d462e0718d895dfc35a06c640c75ff04f07a1a6e53cdc48726cca0d4f66d6a0855ea2ba2a8de2b8f9523ae8b58a7ae24fb3d0a4a317808820f6ad15fe57acb734b76135bdb965ba0bca1acaa61b6da3e61f4f4f8319530483340d6ba19b2723914ceb42af1fa5c0bc1512e859a9ad4739814ec67148c2347506814cb08bd25c9efc34975b5053fdcf49e8a135b277e0c4daef386e08b682108c4e37426a70c87a99b156fc6534645601a759aa3bad4a1589a1ab3b91007f2a49e9af5c4830c1123a63c16d6956d2ec821ca720749d50f4819e401215d6d7bb1594e36c011b4dbe4b8a0d545b872230eeb660d72092da06803cf6609d08f9ad6889c0ab21e9a09a7107f381f858c9f9a5a9d12080995e82dceea27c3980b32452ef4cc297bcf5c0f0bf3f36c548428c8eb9d281a703d56e17162980dfd732a31b72ef630f82815df243dca38ee8fd0524ce20ce433c7af47f9be38bfdff4d230d65a2897818691281cec36f66a0e8b342c2733a6159f89eafaa7062d353a407341f1608a93d42c62baa747bef72d99842efb495812fa7df144a60fb63f8fdbd74c8205017ffebabbf674755fa3543cd1a21f8f602887ba5d1d96405a4602586b2e5ace715fdd36842608e0befb386617cdad1a5dfa91c95189dab88f137d2fc28f442b80e02e7102ce1e5639f2e521abaaff86fa7d1fe46114f365991a07177f46cb00754640322da749d2bfde095064ec9bde392ab5e5803e5a765490bd740fa05a97f1ec85c5a5f86cf0aaf914854dff7ea571de7afb366438c25b0e62be15a4749a9afcfc8a31c450f7898e5bc2ffb9c61789f8a43e726c27b73661031209e3a75316fee89c12286b4bb20dcc2a72ad4a669e9686870b427b3004caf13547e4f11d91101de574169d4fd448b4cf7421cd5a1838c8cf697cf4e8cfb7792d04657ee0c4238635e40490819601d04c7d73e6e3cbebae60afb0fea61a9feb877db85c2931d261ac790138983ab651c3b989b3f55945d3654b608d1d7cd23288ce2c88a5c783c4719c9aff9fcdbef071be5c92af530efc6c1ff644fee1a213ede69f2f162df704c98f7674b9c8ef5f7731e4d17ebb49f798cc486b02e2c7c0adfeffd26051354be98bcc45311bc1cf85a5ca1251e1d6ebddef8a099e5e1874d5de9c264eb726aa5fa3d7397e8add3171997ba1e6a3c8ad548e013a5ad80929224b8bc4882623f24b5ee194373cc300ad7c9705bf5cace7065afc402ed3bd401159776973d26de295830f35d79488e3ba10e50d1b9dde66ff66e6aeab4d5762f6869317fe42304e97f397373dd74f87cb79f67263148bc2de3f923d40519ae41112d7ac7e65527cd67d8bf7f510292b2fa394fbf23ec16c5c97201765dd64f6d515aafa4e893d72361ff2b83c149a7bc6b7b975d0c8b1f1b5b632aab5df5d9ac7be3061a41f51b9b862847b94a235eef580061e8f4eb5b151d725b6df0fcb37caa58ca352ce88807bbed52919fe1b2dd86b9c0a306af30e9d636674c44498e19204e9f5a3420047ee9bfde04381433a1070de2320bbd71b1b74974cd29881e4a0b8648c273ce40adb0bd7d3fa38e1698e0ee759fdb2dc098279b967f8d7fa47004dc73f079be2628d0ec7fcfb27f8429e00c81ceb425d6918f9bbc190e5f747095e958fa8089a68a8c3b7ee2829992a52b05caaa1f6e67eb0f41b4e7daeda6191bf11598951fd17d4f6aaedff5e2dc566be6d3e3b04ebd97818f8bbfcb0016e7304a4b28d025ca6e063347ffbae92347af6d2f5127741fcdba314eb87f39dc7802c369a39f45ef7e5ca56c440c7bf9a083ba5242d8fcdb25979613a86349dcd6cbdec3f5061b0522a631fcdf185619ee14459720c98a1fddbec3bf295fc3093ec04e441d1b42f64ab3863063283451aafeea78958a23e7c57e4d0fcd1f5a53120bf9ff45127b090aa81e95115b1f7f9269599d33771247cd71366dab6b1f98f688de147bb32feb5954ecefa83ca977fecca601910de87b0521708565b03acce213a3706d411ecbd0cf0233a4c6e1778e075008c2360b5fee6a9fe12c63152bb65ee74d4c0d5e931dda298428b40af77de28c4c0a62638f372d146d9b1bc9e3f2ede27d110a8f7816c875ec0408593cb8f5801b0406b794c0dc711dfbd431198cb0e1ed13742b5d9f072ea52b2d78b5941769e99bec5c72d3788079715dbabc0bcdfd813897ffc942fd561564abf5fbd70f1a9de7e21ce1cf94a7a759b668c36a49c4ea80b3a0ad81ddea478173067f75ba57ac50a93b5e51aede318d5801e0cc8e0404b98aa6bf6deec5075af07d4aab126de2f4306d91267d048c860d0f9b29ea348eca1c001a02bac4c80d8d1dfd1faf49811a2ae419c28fbc3934f1cbc2984c6c0035b1116764c40075be79e4dcd4eff5d57c2ab3cf821a44d05d2de52c821450137c9077b80face7de84ba79ad0ca5d487287acef7bbb970a911a7587afc59557cc6c9898c5f24ade41f1b9ff3c4ff6fb03136e02107b2848efb647dc9d2a14d7a9c8dac4121fc5b53a09467d744917b8c0c82dc176de0bc157f19d491d1852c017ebbbdd9c23d265f6f543a1028f1a1e1328755974ad18816e065c1dc2b225b436e0cad8be702dba66242d9af73d8781512f4d36e67b32ba2c6ba507f813824fb4b9699babaf71a223d0852a26487e047ddb665cb5604016d6aa3cd531589d663e80f368f375779e3a4dc27feb06f825458543bddd8c67aee27d0975cbd6ef3669d5d212ecc48c02062684275c182c5018b5999d7e5b2d4ce9419ccf6e7ceee3be7f734bd78a1b0552c7dad7795dcb2838a8ed7442a4619934aa4526f35ebb94f3b5866274ca7a819e5bb1e5647a25be789ae448eaed0a912955ae882066770ddf15001b1f00ae62954dddb0bd123aa0fb1a7ed9bacc1de87b6b6c01e352cdfc8996b15f9f19665e4c98a1051745dd23764e24bf507d7aac27b39382cfe0a6eb2ebc1ff6c5fbfbe8d1f3aa17ad2ac3d604925a16e685820d77b935c666054c58c8a3d517375955857d03e70e496eb21c0e7a8086c323a708c80f8c55e70610919dfdc7fa8c9ac196619609fa4632f27bd4505f00524dfffd2990da0914774590208f802bdbbc20dfb622e4f0c17151a440fd9bb73dcab7a4d7964480f04c5877f8c311807c6aaba2ebf1163780955b0e36b54885a3a7d2d37623b19d661c96a7d9f8ba9daffee0e272168a2721f7e6dd47a1f7129b708e1dc0bb07eb6a3b4a391999b16a953af45688b7936bc71fc3dec08a42083cc35da445639095e202136269f2860fc47939f63413063cdc309b408436762d1b2623f778b21050dabcad99900ed6eab19b4bbcadd1b2cfc2b6dbaa0e8cce3071fe34eb9f29c03731c1f27d9eef667c26ac3acc16be26aa0f8dce0d20f6655be5332abd870a4d0416ac3ed9f7ba581cba95999e0e0ba09ed4f11433ba13473ca7952c3f9cbdb3dcbc6be7395c9f290d8080086611573bd136ac08a6bf6dc676970e765d4b6b2add1443b1166daa893756af6cdb856cb06ac97e40d6435f2fd6e0bc71825d28c647902dfb899f2a2e3c0b2b461d1138a3ac946e41ec2d2db6882a079dc35f7b8c460e013e50a319b4e3e71772943444e263f39", 0x2000, &(0x7f0000001680)={&(0x7f00000000c0)={0x50, 0x0, 0x400008a4d, {0x7, 0x2b, 0x3, 0x10000006, 0x9, 0x84d, 0x3, 0x30000, 0x0, 0x0, 0x2, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x800, 0x20, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x6c9, 0x4, {}, {0xffffffffffffffff}}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x4402, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1200}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x5c4}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x600}}], [{@euid_eq={'euid', 0x3d, r10}}, {@obj_type={'obj_type', 0x3d, 'E%'}}]}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@local}, &(0x7f00000003c0)=0x14) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000880)=ANY=[@ANYBLOB='&d=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f66090000000000000030303030aeb9e1ef0100f17f040c00000830303330303030302c757365725f69643d45d861d77571f2bb285148d2672c752ebd289136ad65ddc55aa042f39c77809e2e4cd03679a667cbc13a32407b7daae1bfcf3b840bf1e82b6bf093c00debf3d6a56b27fcbfed1020adbff0e364daf5175a316e286959e2f93478fd4d6e12ccbbd549ead89c2179ed626a148393ff200e1bb2b4a14c744b1ce6da1a30dafb3a7a9b07cacc243d547837", @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r8, @ANYBLOB=',\x00']) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 3m14.338896593s ago: executing program 7 (id=1237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1, 0x2}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1003, &(0x7f0000001cc0)=""/4099, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0xd4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0xd4}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m14.266062389s ago: executing program 7 (id=1239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18}, './file0\x00'}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x40, 0x1, 0x80000001, 0x10001, {{0xb, 0x4, 0x1, 0x5, 0x2c, 0x66, 0x0, 0x6, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0x7f, 0x0, 0x0, [0x1, 0x7]}, @timestamp_addr={0x44, 0xc, 0x2c, 0x1, 0x8, [{@multicast2, 0xcf4}]}]}}}}}) r3 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0xa0000, 0x61, 0x18}, 0x18) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x101000) ioctl$CEC_ADAP_G_CAPS(r4, 0xc04c6100, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x1fcf, 0x1, 0x40800, 0x1, 0x9, '\x00', r2, r3, 0x0, 0x10002, 0x4}, 0x50) 3m14.219625896s ago: executing program 7 (id=1240): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x8001, 0xff, 0x0, 0x6, 0x7f, 0x1, 0x6, 0x9, 0x7, 0x7, 0x0, 0x36, 0x36e5, 0x7, 0x9, 0x1, 0x3, 0x2, 0x9b, 0x2, 0x2, 0x0, 0x5f, 0x800d00, 0x4, 0xcd9, 0x84c7, 0x2, 0x4, 0x1, 0xfff, 0x8, 0x5, 0x2, 0xa, 0x6, 0x9, 0xd6, 0x0, 0x5, 0xffffffff, 0x8, 0x9a, 0x1, 0x0, 0x7f, 0x3, 0x7, 0x7, 0xb7, 0x8, 0x8000, 0x800, 0x78, 0x4, 0x4, 0x10000, 0x555, 0x93c, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x4, 0x3, 0x7b4f, 0x1, 0x200, 0x80, 0x610b, 0x4, 0x7ff, 0x6ce1, 0x3, 0x404000, 0x1, 0x0, 0xaac, 0x53, 0x3, 0x2, 0x7, 0x1, 0x1, 0xdbf4, 0xfffffffe, 0x80000000, 0x2, 0x0, 0x59b55464, 0x2, 0x4, 0xe7f, 0xba5, 0x10000, 0xfffffffb, 0x8, 0x3ff, 0xb85, 0x8, 0x3, 0xdd, 0x800, 0xbac6, 0x4, 0x93, 0x8, 0x3, 0x40, 0xffff, 0x6, 0xfffffffb, 0x5f, 0x0, 0x0, 0x9, 0x6, 0x3ff, 0x7, 0x1ff, 0xc8c, 0x7, 0x5, 0x2, 0x80000801, 0x2, 0x4]}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000000)=0x100, 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000580)='./file0\x00', 0x19e) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000300)={0x1, 0x2, [{r1, 0x0, 0xfffffffffffff000, 0xfffff000}, {r1, 0x0, 0x0, 0x4000}]}) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3m14.21509504s ago: executing program 7 (id=1241): mkdir(&(0x7f0000000300)='./bus\x00', 0x141) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa88a}]}}}]}, 0x3c}}, 0x4008080) ioprio_get$uid(0x2, 0x0) chroot(&(0x7f0000000200)='./bus\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000140)='./bus\x00') mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='f2fs\x00', 0x2800080, &(0x7f00000001c0)='discard') chmod(&(0x7f0000000180)='./bus\x00', 0x50) 3m13.81880497s ago: executing program 36 (id=1246): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000080)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000000)=""/116, 0x74}, {&(0x7f00000002c0)=""/224, 0xe0}], 0x3, 0x0) 3m12.66796185s ago: executing program 5 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x180) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000000b180), 0x100, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="ff805b46c1aeeb47c198074d71b23d27bb81f12677951415d2d5c09b4e7bc7fe4246a18d4d406ae6d21c749d24898f5897b3b84b482de1de9c419e88ea49ae87296564f97c343549bca9d086f293c08a9d5bb6f8db780ea2f039f4449bceaf3652c80f96490400000043fcef18667390bcc8"], 0x7) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f00000002c0)=0x4) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000300)={@remote, r8}, 0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r9, 0x112, 0xc, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x2) (async) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) shutdown(r0, 0x1) 3m12.666949235s ago: executing program 5 (id=1260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000200), 0x0}, 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x0, @any, 0x2}, 0xe) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x4080, @any, 0x0, 0x1}, 0xe) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, {0x0, @remote}, 0x48, {0x2, 0x4e24, @loopback}, 'ip6tnl0\x00'}) 3m12.549765044s ago: executing program 5 (id=1261): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000440)=[@acquire_done={0x400c6313}], 0x0, 0x1000000, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000003c0000801400040002004e237f000201000000000000000024000100f44da367a88ee6564f02021145672708045cebee8b1bf5eb7337341b459b3922"], 0x68}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 3m12.46988241s ago: executing program 5 (id=1262): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1], 0x1}, 0x58) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r2, &(0x7f00000019c0)=[{&(0x7f0000001740)='\"', 0x1}], 0x1, 0xffffffff, 0x4, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000200)=[{0x17, '\x00', @buffer={"bc503e211b4c1198cd98b5f801b21380f62579814aae62d886a21f20d7646202", 0x20}, 0x7}]}) 3m12.389755844s ago: executing program 5 (id=1263): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@posixacl}]}}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) utime(&(0x7f0000000000)='./file0\x00', 0x0) 3m12.109657419s ago: executing program 5 (id=1264): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}]}, 0x34}}, 0x0) 3m12.003816366s ago: executing program 37 (id=1264): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}]}, 0x34}}, 0x0) 2m59.172085984s ago: executing program 38 (id=1241): mkdir(&(0x7f0000000300)='./bus\x00', 0x141) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa88a}]}}}]}, 0x3c}}, 0x4008080) ioprio_get$uid(0x2, 0x0) chroot(&(0x7f0000000200)='./bus\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000140)='./bus\x00') mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='f2fs\x00', 0x2800080, &(0x7f00000001c0)='discard') chmod(&(0x7f0000000180)='./bus\x00', 0x50) 2m22.378310504s ago: executing program 0 (id=1836): r0 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) recvfrom$netrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) (async) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x41}, 0x2}}, 0x10) 2m22.319060908s ago: executing program 0 (id=1837): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}]}}]}, 0x44}}, 0x2000a100) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xffe0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x0, 0x3, 0x2, 0x101, 0x4, 0x8, 0xebe}}}}]}, 0x58}}, 0x64040054) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0xfffffffffffffdd4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc02, {0x0, 0x0, 0x0, r5, {0xfff3, 0x4}, {0x0, 0xf}, {0x2, 0xf}}, [@filter_kind_options=@f_cgroup={{}, {0x0, 0x2, [@TCA_CGROUP_POLICE={0x0, 0x2, [@TCA_POLICE_RESULT={0x0, 0x5, 0xfffffffa}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x4, 0x0, 0x6, 0x4, 0x9, 0x0, 0xecd0, 0x1, 0x7, 0xe, 0x3ff, 0xf, 0x7, 0x9, 0x7, 0x4, 0x6b, 0x5, 0x1, 0x4, 0x2, 0x9, 0x80, 0x57, 0x76, 0x3, 0xffff, 0x98, 0x6, 0x1, 0x1, 0x2, 0x7fffffff, 0x10000, 0x1, 0x4, 0x40, 0x2, 0x5, 0x2, 0xb5, 0x2, 0xd7, 0x6, 0x80000001, 0x1f3, 0x2, 0x3, 0x7d9, 0x2, 0x9, 0x895, 0x60e, 0x0, 0x800, 0x9, 0xe, 0x51, 0x9, 0x7, 0x2, 0x5, 0x6ae6, 0xf1, 0x1, 0x9, 0x6, 0x0, 0x5, 0x5, 0x7, 0x7fff, 0xd76, 0x7736, 0x5, 0x8ba, 0x5, 0x1, 0x0, 0x9b6, 0xfffff6eb, 0x8, 0x9, 0x7, 0x9, 0x3eb, 0x6, 0x8, 0x0, 0x1, 0xf30, 0x1, 0x5b, 0x8, 0x1, 0x8, 0x100, 0xa669, 0x5, 0x80000000, 0x8, 0xffff8001, 0x67380000, 0xfffffffb, 0x1, 0x7, 0x400, 0x6, 0x3, 0xb5, 0x10, 0x2, 0x7, 0x4f0, 0x1, 0x6, 0x1, 0x1d, 0x0, 0x2ef4, 0x0, 0x4, 0x0, 0x4, 0x5, 0x9, 0xfffffffd, 0x6, 0x9, 0x401, 0xe, 0xffff83d6, 0x56c880d0, 0x1, 0x8, 0xfffffff8, 0xe, 0x8, 0xf0, 0x100, 0x2, 0x7, 0x3, 0x800, 0x3, 0x5, 0x7, 0x7, 0x8, 0x5, 0x46, 0x27bf, 0x4, 0x3, 0x2, 0x1, 0x1ff, 0x200, 0x3ff, 0xc, 0x5, 0x2, 0x6, 0x607a, 0x0, 0x9, 0xb8, 0x70, 0x1ad, 0x4, 0x8, 0x9, 0x4, 0x4, 0x1, 0x5, 0x8, 0x6, 0xffff0000, 0xfffffffb, 0x2, 0x4, 0x3, 0x8306, 0x1, 0x7f, 0x9, 0xff, 0x5, 0x400, 0x5, 0x24b, 0x7e7, 0x3, 0x8, 0x100, 0x3, 0x2, 0x2, 0x0, 0x5, 0xbc4, 0x5c03a320, 0x3, 0x1, 0xe, 0x9, 0xee04, 0x0, 0xf1, 0x9b, 0x167, 0xa3c3, 0x1b2, 0x1959, 0x4, 0x9, 0xb32b, 0x9, 0x7, 0xe, 0x12, 0x9, 0x5, 0x10000, 0x2, 0x2, 0x8000, 0x7, 0x9, 0x3, 0x8, 0x2, 0x4, 0x1, 0x9, 0x1, 0x0, 0x3ff, 0xffffff7f, 0x4, 0x7fff, 0x4, 0x8, 0x7, 0x9, 0xfff, 0x665, 0x118, 0x0, 0x8, 0x1f51, 0x3, 0xe, 0x667a]}, @TCA_POLICE_TBF={0x0, 0x1, {0x8, 0xffffffffcffffffe, 0xe60c, 0x101, 0x7, {0x5, 0x0, 0x1, 0xffff, 0xff7, 0x4}, {0xf9, 0x0, 0x1, 0x8, 0xa, 0x6}, 0x7, 0x3, 0x8}}]}, @TCA_CGROUP_ACT={0x0, 0x1, [@m_mpls={0x0, 0x1c, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x0, 0x6, 0x3}, @TCA_MPLS_TTL={0x0, 0x7, 0x6}, @TCA_MPLS_BOS={0x0, 0x8, 0x1}, @TCA_MPLS_PARMS={0x0, 0x2, {{0x80000001, 0x0, 0x8, 0x5, 0x3}, 0x3}}, @TCA_MPLS_TTL, @TCA_MPLS_PROTO={0x0, 0x4, 0x8863}, @TCA_MPLS_PROTO={0x0, 0x4, 0xd}, @TCA_MPLS_LABEL={0x0, 0x5, 0x963cd}, @TCA_MPLS_LABEL={0x0, 0x5, 0x60b55}, @TCA_MPLS_TC={0x0, 0x6, 0x6}]}, {0x0, 0x6, "95854c"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x0, 0x7, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x0, 0x5, 0x5}, @TCA_SKBMOD_SMAC={0x0, 0x4, @random="83b45a285c2a"}, @TCA_SKBMOD_PARMS={0x0, 0x2, {{0x40c, 0x5, 0x0, 0x7, 0xffffffff}, 0xd}}]}, {0x0, 0x6, "4419bbdb99d6d4d08de01b7a21d521e547e32166f348b96e795293ffb8249ba87dd7ae3773bbd638126aff796e98b0a105d063b89daf16032dd77d1bfb4fc0d026bf9829e67a8a8a01c16c53edbe8df9975e7e42cb60c411ffd5543e2516dfa75952131a607ecb719506012e26d156884112c8bf533c828e39ecda48661770e6141163d3d925f7c2f4619e69f948277b993c1602813a430566236111c00a16789196c2138591e1a1fee6b0fa97956141cf66597092d106047f2d"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x2}}}}, @m_sample={0x0, 0x14, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x0, 0x3, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x547}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0xffffff93}]}, {0x0, 0x6, "37786aaf1576879e38325ef4"}, {}, {0x0, 0x8, {0x2, 0x1}}}}, @m_nat={0x0, 0x5, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x3, 0x8, 0x5, 0x3, 0x10001}, @remote, @broadcast, 0xffffff00}}]}, {0x0, 0x6, "034b98d9670af80519fabc21672a834749a5d393745ce541fad01af79db65ddf502c50405a0e7f7ebba01571d209d747848ccf2b03c13ae6513699dd53180a7324cbea3dc3e1703837949ab62b180c2a0cf1940ba784bf18dabfa73f"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x67ac8716b9699d25, 0x2}}}}, @m_pedit={0x0, 0x19, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x0, 0x5, 0x0, 0x1, [{0x0, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD, @TCA_PEDIT_KEY_EX_CMD={0x0, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD, @TCA_PEDIT_KEY_EX_CMD, @TCA_PEDIT_KEY_EX_CMD={0x0, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x4}]}, {0x0, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x0, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x0, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x3}]}, {0x0, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD, @TCA_PEDIT_KEY_EX_CMD, @TCA_PEDIT_KEY_EX_CMD={0x0, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x0, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD, @TCA_PEDIT_KEY_EX_CMD, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD, @TCA_PEDIT_KEY_EX_CMD={0x0, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x3}]}]}, @TCA_PEDIT_PARMS={0x0, 0x2, {{{0x5f0c, 0x5, 0x6, 0x4, 0xfc800000}, 0x53, 0x0, [{0x4, 0x2, 0xc0, 0xfffffff6, 0x8, 0x101}, {0x3, 0x2797, 0x9cf4, 0x7832, 0x7, 0x345c}, {0x1, 0x8, 0x328, 0x8, 0x8, 0x2}, {0xf, 0x40, 0x50, 0x5, 0x1000, 0xd711}, {0x6, 0x4, 0x4, 0xe, 0xbc, 0x4}, {0xcc0, 0x3, 0x3, 0x7f, 0x2, 0x1000}]}, [{0x65, 0x7fffffff, 0x380e, 0x7216, 0x4, 0xc}, {0x101, 0x8, 0x7fff, 0x772, 0x5, 0x3}, {0x5, 0x9f, 0x1, 0x5, 0x7ff, 0x3}, {0x80d5, 0x6, 0x5, 0x2f, 0x9, 0x7}, {0x2, 0xfffffff8, 0xfc, 0x1, 0x3, 0x101}, {0x2, 0x7, 0x200, 0x4, 0x4, 0x1}, {0x595, 0x3, 0x0, 0x9, 0x2, 0xfffffff8}, {0xfffffffe, 0x1, 0x269a, 0x9, 0x8, 0x6}, {0x81, 0x3, 0x5, 0x8, 0x7, 0x1}, {0x0, 0x3, 0x81, 0x6, 0x2, 0xff}, {0x200, 0x5, 0xa80, 0x7f, 0x0, 0x100}, {0x4, 0x2, 0x2000000, 0x3, 0xd}, {0x0, 0x2, 0x1bbe, 0x800, 0x800, 0xe}, {0x8001, 0x14, 0x4, 0xa2, 0x1761, 0x9}, {0x9, 0x0, 0x8, 0x2, 0x200000, 0x6}, {0x0, 0xe3c, 0x2, 0x3af344e4, 0x891, 0x7fffffff}, {0x6, 0xa71, 0x2, 0xf44f, 0x101, 0x5}, {0x1000, 0xe0c, 0x6, 0x0, 0x10001, 0x8000}, {0x3, 0x8, 0x0, 0x5, 0xea, 0x4}, {0x14cff7f2, 0x5, 0x20, 0x2, 0x3, 0x2}, {0x200, 0xd, 0x3c, 0x10, 0x1, 0x4ea6}, {0x6, 0x57f4, 0xffffffff, 0x8000, 0x3, 0xfffff751}, {0x9, 0xfffffffd, 0xfff, 0x9, 0xfffffffc}, {0x8, 0x7, 0x9, 0xbe1, 0x12, 0xc92}, {0xfffffff8, 0xfffffffc, 0x10, 0x9, 0x100, 0x3580}, {0xfffffffb, 0x9, 0x1c, 0x0, 0x401, 0x80000001}, {0x3, 0x2, 0xa8a, 0x9, 0x7, 0x3}, {0x8, 0x8, 0x81, 0x5, 0x10001}, {0x9, 0x0, 0xffffffff, 0x40, 0x4, 0x3}, {0x401, 0x2, 0xffffffff, 0x6, 0x19, 0x4}, {0x9, 0x1, 0x5, 0x3, 0x1, 0x8}, {0xffffffff, 0x3, 0x4, 0x6, 0x401, 0x9}, {0x10, 0xfffffffa, 0xe, 0x6, 0x7}, {0xc210, 0xb1, 0x81, 0x3, 0x100, 0x9}, {0x8001, 0xb91, 0x5, 0xca02, 0x8, 0x8}, {0x7, 0x9, 0xb64, 0x6, 0x5, 0x6}, {0x8001, 0x100, 0x6b, 0xcff, 0x8, 0x7}, {0x1, 0xfffffff9, 0x2, 0x1, 0x0, 0xfff}, {0x1, 0x0, 0xb, 0xfffff425, 0x101, 0x1}, {0x4, 0x401, 0x8001, 0x1, 0xc86, 0x4}, {0xfffffffe, 0x0, 0x1, 0x81, 0x4, 0x10}, {0xaf4, 0x1, 0x1, 0x5, 0x9, 0x1ff}, {0x800, 0x9, 0x3, 0xf5, 0xfffffff7, 0x80000001}, {0x0, 0xf, 0x75a, 0x3, 0x44d, 0x80}, {0x800, 0x0, 0x9, 0x8, 0x40, 0x9}, {0x6c6b, 0x4, 0xffffff01, 0x10, 0xc16, 0x5}, {0x4, 0x5, 0x2, 0xfffffff7, 0x0, 0xf}, {0xc40d, 0x8, 0x0, 0x7516b9f7, 0x200, 0x1}, {0x8000, 0x1ff, 0x5, 0xaa23, 0x7fffffff, 0x725}, {0x6, 0x2, 0x41d2, 0x8, 0x6, 0x6}, {0xe, 0x7, 0x8000, 0x400, 0x7, 0x3}, {0x0, 0x6, 0x40, 0x800, 0x50e, 0xffffff59}, {0xe, 0x1, 0x6, 0x7fff, 0x3fe0, 0x200}, {0x5, 0x3, 0xfffffffd, 0x7f, 0x6}, {0x7, 0x1, 0x5, 0x0, 0xfff, 0xb64}, {0xfffffff9, 0x8000, 0x23e, 0x4, 0x7, 0x3}, {0x7fffffff, 0xfffff001, 0xffff975e, 0x2, 0xffffffff, 0x3}, {0xa, 0x8, 0x2, 0x48, 0x9bd, 0x6}, {0x1, 0x0, 0x40, 0xd8, 0xf, 0x29}, {0x7f, 0x10001, 0x263f6032, 0x8fc9, 0x8001, 0xf61}, {0x3, 0x0, 0x80000000, 0x4, 0x8, 0x1200000}, {0x8, 0x7, 0x5, 0x2, 0x591d, 0x10001}, {0x0, 0x8, 0x155, 0xa36, 0x6}, {0x5, 0x3, 0xc56, 0x1, 0x8, 0x8}, {0x80000000, 0x3, 0x5, 0x0, 0x200, 0x4}, {0x3, 0x4, 0x5, 0x4, 0x8, 0xfffff9f6}, {0xffffffff, 0x4, 0x5, 0xff, 0x1, 0x2}, {0x3, 0x8, 0x0, 0x1, 0x2, 0x1000}, {0x800, 0x1, 0x7, 0xc827, 0xb, 0x957}, {0x63b, 0x2cb, 0xf55, 0x1, 0xfc52, 0x4}, {0x3ff, 0x3, 0xe798, 0x200, 0x239, 0x4}, {0x9, 0xfffffff5, 0x8, 0x8, 0x0, 0x5f1}, {0x8001, 0x7, 0x7, 0x0, 0x3, 0x3}, {0x40, 0xfffffff8, 0xba, 0xa961, 0xb6c2, 0x5}, {0xc, 0xffff, 0x2, 0x6142, 0x4385}, {0x3, 0x1, 0x3, 0x5, 0xb6f}, {0x6, 0x9, 0x10000, 0x1, 0x3, 0x8d2}, {0xf, 0x5, 0x7, 0x5, 0x7, 0x5}, {0x3800000, 0x770, 0x1, 0x6, 0x7f, 0x80}, {0x1, 0xa7cf, 0x5, 0x4, 0xfffffffe, 0x5}, {0x8001, 0x9, 0x81, 0x6, 0x0, 0x9}, {0x1, 0x8, 0x0, 0x8, 0x4612, 0x4}, {0x3, 0x76b5, 0x3, 0x800, 0x1, 0x5}, {0x6, 0x4, 0x6, 0x3, 0x6, 0x400}, {0x8, 0x8d, 0x9, 0x0, 0x9, 0x4}, {0x3, 0x2, 0x2, 0x8, 0x92cb, 0x3}, {0x4, 0x80000000, 0xfffffffc, 0x1, 0xfffffeff, 0x9}, {0x10001, 0x6, 0x1, 0xf, 0x10, 0x80}, {0x7, 0x5, 0x1, 0x7, 0x80, 0x6}, {0xeea7, 0x7, 0xf, 0x928, 0x65, 0x7d}, {0x7, 0x5, 0x0, 0x7, 0x2, 0x4928}, {0x1000, 0x1, 0x8aa, 0x7, 0x9, 0x3ff}, {0x2, 0x5, 0x3, 0x1, 0x7, 0x8}, {0x0, 0xf8d, 0xfb89, 0x3297aea, 0x2, 0xe001}, {0x4, 0x10, 0x1, 0x8, 0xffffff81, 0x9}, {0xff, 0x80000001, 0x0, 0xfffffe91, 0xa375, 0x1}, {0x6, 0xb73, 0x2, 0x7fffffff, 0x6, 0x9}, {0x10, 0x3, 0x7, 0x5, 0xe75, 0x9}, {0x6, 0x8000, 0x80000000, 0x2, 0x7, 0x7}, {0x2, 0x9, 0xffff7439, 0x4, 0x1}, {0x3, 0x9, 0x6, 0x800, 0x9, 0x9cd3}, {0x9b4, 0x6, 0x10001, 0x4cf, 0x3, 0x4}, {0x100, 0x9b, 0x7f, 0x400, 0x1, 0xbc}, {0x6, 0x9, 0x8, 0x3ff, 0x2ce, 0x1}, {0x18f, 0x6, 0x101, 0x9, 0x8001, 0x7}, {0x200, 0x1, 0x9, 0x2, 0x7, 0xa}, {0x11400000, 0xe, 0x8, 0xfffffff1, 0x8, 0x9}, {0xffff, 0xfffeffff, 0x3, 0x7b4, 0x3, 0xc}, {0x4, 0x5, 0x78, 0x8, 0xb, 0x679}, {0x10, 0x0, 0x2, 0x3, 0x10000, 0x7ff}, {0x3, 0x6, 0x2, 0x1, 0x7f, 0x18}, {0x5, 0x6, 0x7ff, 0x100, 0x6, 0x8}, {0x7, 0x9, 0x7, 0x8, 0x5e0b, 0xfffffffa}, {0x8, 0x1, 0x7, 0x7, 0x5, 0xffffffff}, {0x5, 0x1, 0xa, 0x800, 0x4, 0x4}, {0x800, 0x31b, 0xf9, 0x3, 0x10001, 0x7}, {0x8, 0x4, 0xb, 0xda1, 0x401, 0x3}, {0x0, 0x70, 0x7, 0x9, 0x0, 0x9}, {0x9, 0x8, 0x2, 0x1, 0xda, 0x7}, {0x6, 0x4, 0xffffffff, 0x9, 0xb, 0x2}, {0x1, 0x2, 0x4, 0x2, 0x10, 0x7}, {0x6, 0x7, 0x7ff, 0x7f, 0x2c700000, 0x81}, {0x3, 0x15d4a0e2, 0xe59, 0x5, 0x9, 0x2}, {0xfff, 0x7ff, 0xffffffff, 0x4, 0x38, 0xc}, {0x2, 0x1, 0x401, 0xffffffff, 0x3ff, 0x3}, {0xfffffff1, 0x3, 0x2, 0x10000, 0x88f6}, {0x7, 0xf972, 0x61c, 0x1622, 0x4, 0x522}, {0x8, 0x6, 0x3, 0x0, 0x6, 0x7}], [{0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x1df8f78c488c0640, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x2}, {0x2}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x3}, {0x2}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x2}, {0x4}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x24ec58e87ca1ecac}, {0x3, 0x1}, {}, {0x1}, {0x1, 0x5877a421d029c2a5}, {0xaff6c026a3d43788, 0x1}, {0x5}, {0x2}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x5}, {0x4}, {0x2}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x4}, {0x2}, {0x3, 0x6c3018968d2f3191}, {0x1, 0x7ee841a29ddc4bee}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x5, 0x1}], 0x1}}]}, {0x0, 0x6, "84cd9654c4f4ebc2e1ba86aca9a6e881ae5b6e95324cff47a8aa0a77e4ce9a3156bfe8701b48d2e7815c929ad95b9a1d1fe4300f0796d2d105b3b5c6e8a7af36b58559485ae32fcbe71cf6a5b12545fac003e220dceb4aa4"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1}}}}, @m_sample={0x0, 0xc, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x81}]}, {0x0, 0x6, "595f01ee33e7"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x1, 0x3}}}}, @m_connmark={0x0, 0x3, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x0, 0x1, {{0x101, 0xfffffffb, 0x4, 0x9, 0x9}, 0x4}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0xfffffffb, 0x39, 0x4, 0x8, 0x4}, 0x1a}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0xbab, 0x2, 0xffffffffffffffff, 0xffffffff, 0x3}, 0x4}}]}, {0x0, 0x6, "acc89148617f71ad42d2712ca32537a95bdf510f04e02faf0bd1ed21bd7bf9c687e8e1579b0d119065ea9364e8c51c19e74e729690b94b84dfa33558e35d28105e61e32689d75841b2b2cc60a249d7d4fc671daa4096c7fe41b2c15a17e6fc12138beefe04f2ed46d896eb116bdea9150cf13a35407dbb2b771bfda9f767435145fcef2736aafe8113f18508647d61b3d5f7d2e2150681fd94eb61"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x4}}}}]}, @TCA_CGROUP_POLICE={0x0, 0x2, [@TCA_POLICE_PEAKRATE={0x0, 0x3, [0x4, 0x3f33, 0x1, 0x80, 0x1c8, 0x10001, 0x5, 0x89, 0x2, 0x1000, 0x6, 0x8, 0xe8, 0x401, 0x4, 0x5, 0x6, 0x8, 0x8a, 0xa379, 0x2, 0x2, 0x401, 0x4, 0xc, 0x3, 0x101, 0xf0, 0x7, 0x9, 0x4, 0x2, 0x4, 0x0, 0x5, 0x9, 0x80000001, 0x8000, 0x0, 0x7, 0xfffffffa, 0x0, 0x8, 0x6, 0x1, 0x8, 0x9, 0x2, 0xfffffff7, 0xd8, 0x7, 0x6, 0x2, 0x7, 0x2, 0x2, 0x0, 0x7fff, 0x5, 0x4, 0x3, 0x1000, 0x4, 0x4, 0x3, 0x9f, 0xfffff800, 0x8, 0x7, 0x8, 0x7, 0x58b8, 0x178, 0x0, 0x1, 0xe, 0x40, 0x3, 0x7, 0x4, 0xaba6, 0x242, 0xffffffff, 0x9, 0xffffffff, 0x401, 0x7, 0x4e, 0x0, 0x7, 0x7, 0x2, 0x1, 0x9, 0x401, 0x6b, 0x1, 0x0, 0x8, 0x2, 0x7fffffff, 0x7, 0x1, 0x2, 0x4, 0x8000, 0x2, 0x2, 0x6, 0x7, 0x401, 0x3, 0x4, 0xf, 0x7, 0x7, 0x3, 0xff, 0x5, 0x8f, 0x9, 0xffffffff, 0x0, 0x5, 0x9, 0x6, 0x7fffffff, 0x10, 0xc, 0x3edc, 0x2f8, 0x3, 0x8000, 0xb5b, 0x1, 0x1ff, 0x9, 0x6, 0xffffffff, 0x2e1a, 0x1, 0x81, 0x80, 0xff, 0x6c7e6c74, 0x7ff, 0x448, 0x10000, 0x1, 0xb, 0xffffffff, 0x9, 0x2, 0x3, 0x3, 0x4, 0x5, 0xf, 0x10040000, 0x0, 0x4, 0x7f, 0x401, 0x7ff, 0x7, 0x5, 0xa, 0x3, 0x3, 0x2, 0x0, 0x9, 0x6, 0xfffffc01, 0x7, 0x7, 0xe75, 0xc0000000, 0x8000, 0x0, 0x80000000, 0x9, 0x6, 0x2, 0x401, 0xaac1f88, 0x7f, 0x8, 0x7, 0x1000, 0x4, 0x0, 0xfffffff7, 0x5, 0xffff, 0x7, 0x73db, 0x1, 0xc, 0x7fffffff, 0x999, 0x9b0, 0x2, 0x4, 0x9, 0x4, 0x6, 0x7, 0xfffff000, 0x401, 0x40, 0xcff, 0x5, 0xfff, 0x6, 0x93, 0x72ed5b3c, 0x2, 0x3, 0x2, 0x0, 0x61, 0x9, 0x3ff, 0x80, 0x3, 0x7fff, 0x10001, 0x0, 0x9, 0x9, 0xe, 0x6, 0x6, 0xffffffff, 0x4, 0x1, 0x7, 0x9, 0x2, 0xb5, 0x2, 0xff16, 0x400, 0x9, 0x1, 0x4b108010, 0x101, 0xa23a, 0x8, 0x9, 0xfffffffa, 0x7, 0x2, 0x0, 0x7fff]}, @TCA_POLICE_RATE64={0x0, 0x8, 0xb}]}]}}, @TCA_RATE={0x0, 0x5, {0x9, 0x80}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040054}, 0x0) 2m22.190524774s ago: executing program 0 (id=1839): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$kcm(0x2, 0xd, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) recvmmsg(r2, &(0x7f0000000d40), 0x0, 0x102, 0x0) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000000000014006f166a07010033d43afffe0b27bbaf02633bba00000000000010ff020000000000000000000000000001"], 0x340a) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 2m22.098254593s ago: executing program 0 (id=1842): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) syz_emit_vhci(&(0x7f0000003080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_auth_payload_to={{0x3b}, {0x3, 0xc8, 0x3}}}}, 0xb) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040c0808c900080b00d3030534c6ac830e8979b74633b5d450b8d79c"], 0xb) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10600, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='qnx4\x00', 0x208004, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in6=@mcast1, @in6=@remote, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x20, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, @in=@broadcast, @in6=@empty, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x60506be81b960b81}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, 0x1, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x37}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x1800}, 0xc010) 2m21.989498854s ago: executing program 0 (id=1844): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) socket$packet(0x11, 0xa, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0004110004000000b9a66eec00be00c22ffffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xf8) 2m21.559243211s ago: executing program 0 (id=1850): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x1, 0x1, 0x1, 0x1, 0x7, 0xe}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x1, 0x1, 0x1, 0x1, 0x7, 0xe}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0xe, 0x0, 0x3}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0xfffffe85) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0xe, 0x0, 0x3}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0xfffffe85) getsockname(r0, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r4) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r4) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000840)={0x1, 0x35a9, @status={[0x1ff, 0x2, 0x9c0, 0x1, 0xffff, 0x6]}, [0x5, 0x8, 0x3, 0x2233ede2, 0x8000000000000001, 0xff, 0x6, 0x5, 0x8001, 0x5, 0x10001, 0x5, 0xc4, 0xef3d, 0x7, 0x3, 0x3, 0x74, 0x7fff, 0x0, 0x7, 0xe98, 0x30, 0x7fffffffffffffff, 0x6, 0x100000001, 0x5, 0x0, 0x8000000000, 0x200, 0x4, 0x40, 0x0, 0x7, 0x9, 0x1, 0xffff, 0x4, 0x0, 0x200, 0xffffffffffff7ffe, 0x9, 0x6, 0x800, 0x3, 0x2, 0x6, 0x401, 0x5, 0x0, 0x6, 0x4, 0x8, 0x165, 0x80, 0x6, 0xc, 0xb61, 0x100, 0xffffffffffffffff, 0xffff, 0x5, 0x8, 0xfffffffffffffffe]}) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff0000/0xc000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @local}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @local}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r6, 0x6, 0x28000000}, 0x0) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r6, 0x6, 0x28000000}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x1dc9, 0x1f480, 0x0, 0x399}) r7 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x24042040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4000811) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7900fe00"/21], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0xffffd000) 2m6.481383025s ago: executing program 39 (id=1850): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x1, 0x1, 0x1, 0x1, 0x7, 0xe}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x1, 0x1, 0x1, 0x1, 0x7, 0xe}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0xe, 0x0, 0x3}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0xfffffe85) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0xe, 0x0, 0x3}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0xfffffe85) getsockname(r0, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r4) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r4) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000840)={0x1, 0x35a9, @status={[0x1ff, 0x2, 0x9c0, 0x1, 0xffff, 0x6]}, [0x5, 0x8, 0x3, 0x2233ede2, 0x8000000000000001, 0xff, 0x6, 0x5, 0x8001, 0x5, 0x10001, 0x5, 0xc4, 0xef3d, 0x7, 0x3, 0x3, 0x74, 0x7fff, 0x0, 0x7, 0xe98, 0x30, 0x7fffffffffffffff, 0x6, 0x100000001, 0x5, 0x0, 0x8000000000, 0x200, 0x4, 0x40, 0x0, 0x7, 0x9, 0x1, 0xffff, 0x4, 0x0, 0x200, 0xffffffffffff7ffe, 0x9, 0x6, 0x800, 0x3, 0x2, 0x6, 0x401, 0x5, 0x0, 0x6, 0x4, 0x8, 0x165, 0x80, 0x6, 0xc, 0xb61, 0x100, 0xffffffffffffffff, 0xffff, 0x5, 0x8, 0xfffffffffffffffe]}) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff0000/0xc000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @local}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @local}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r6, 0x6, 0x28000000}, 0x0) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r6, 0x6, 0x28000000}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x1dc9, 0x1f480, 0x0, 0x399}) r7 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x24042040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4000811) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7900fe00"/21], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0xffffd000) 1m27.135283184s ago: executing program 9 (id=2643): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x77359400}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601010000000000000000000000001c0007800500140007000400080012400005000008000840000000000900020073797a300000002005000100070000000c000300686173683a697000050005000a000000050004"], 0x60}}, 0x8000) 1m27.074778548s ago: executing program 9 (id=2645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x6c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x25}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}]}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6d4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m27.01794948s ago: executing program 9 (id=2647): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400242, 0x140) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x600680, 0x84) ioctl$DRM_IOCTL_PANTHOR_VM_GET_STATE(r1, 0xc0086444, &(0x7f0000000080)) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24008841}, 0x24048c41) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x10001}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000340)={r4, 0x6, 0x0, 0x4}, 0x10) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000380), &(0x7f00000003c0)=0xe) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000400)={0x1, 0x5, 0x2}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000440)={r4, 0x2, 0x6, [0x5, 0x8, 0x2, 0x6, 0x21, 0x9]}, 0x14) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r6, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8136}]}, 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x40000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa8, r7, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0xa}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x26}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}]}, 0xa8}}, 0x0) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x3f5, 0x20, 0x70bd2b, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8081}, 0x20040080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffff9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x5f24417790edcfb6) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000a40)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r10, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, r11, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_CCA_MODE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) clock_gettime(0x0, &(0x7f0000000c00)={0x0, 0x0}) futimesat(r2, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c40)={{0x77359400}, {r14, r15/1000+10000}}) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000cc0)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r16, &(0x7f0000000dc0)={&(0x7f0000000c80), 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x58, r11, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r17}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008854) 1m27.017343233s ago: executing program 9 (id=2649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x8000800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2}, 0x18, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "539453ed4f95524f", "3bc66f6737a5df8d362a1e434272e43d", "f55e3720", "786d90b002a86cc9"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "602f661f360d770d", "c550d0e552b7b34714f964fd737fcef136fbeac96bc4bbbc5a283f530cd4af97", '\x00\t\x00', "553a80ef88cf9eb9"}, 0x38) close(r2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "7df0"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a310000dc5f0700000900010073797a3100000000140003000000000000000180060000140000001100010000000000000000009d0000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) 1m26.904227066s ago: executing program 9 (id=2654): socket$nl_route(0x10, 0x3, 0x0) 1m26.604042087s ago: executing program 9 (id=2660): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m26.510422638s ago: executing program 40 (id=2660): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 57.253055801s ago: executing program 4 (id=3096): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000001c0)={0x4, 0x9}, 0x2) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_emit_ethernet(0x7a, &(0x7f00000006c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x1, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88ca}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) shutdown(r1, 0x1) mount$cgroup2(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f00000003c0)={[{@pids_localevents}, {@memory_hugetlb_accounting}, {}, {@pids_localevents}, {@favordynmods}, {}], [{@euid_eq}, {@hash}, {@audit}, {@uid_lt}]}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0xc20, &(0x7f00000000c0)={[{}, {@uid={'uid', 0x3d, r3}}, {@gid={'gid', 0x3d, r5}}], [{@permit_directio}, {@smackfshat={'smackfshat', 0x3d, 'memory_hugetlb_accounting'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) 56.370851637s ago: executing program 4 (id=3108): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x827ca000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB="300000001000010800000000fddbdf25000e0000", @ANYRES32=0x0, @ANYBLOB="1499020000000000080029009527060008001b0000000000"], 0x30}}, 0x0) 56.261255899s ago: executing program 4 (id=3109): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) (async) close_range(r0, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xac, 0x1, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xfffffffffffffcc2, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0xac}}, 0x20000000) 56.201285459s ago: executing program 4 (id=3110): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags}) ioctl$sock_proto_private(r1, 0x89ec, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) fremovexattr(r0, &(0x7f0000000040)=@random={'user.', 'virt_wifi0\x00'}) syz_emit_ethernet(0xfdef, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x0) 56.090935943s ago: executing program 4 (id=3111): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400010004000000000000000a0000000400000014000100ff"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_create(r3, 0x0, 0x0) pwrite64(r3, 0x0, 0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000040) (async) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000040) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) 55.980969516s ago: executing program 4 (id=3113): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac09}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fe2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebdddad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8523b29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x1, 0x0, 0x0, 0xc}}) 40.711709482s ago: executing program 41 (id=3113): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac09}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fe2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebdddad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8523b29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x1, 0x0, 0x0, 0xc}}) 29.763876727s ago: executing program 2 (id=3436): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000000)={0x9f63422128830805, 0x0, {[0x6, 0xffffffffffffff00, 0x7ffffffd, 0x5, 0xc, 0x6]}}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000240)="66baf80cb8adc5648e48b89ab6a3fd000000000f23d80f21f835400000900f23f86dbafc0cecb972000040b804000000ba000000000f30b99a020000b800000000430f01c20f30c744240000400000c7442402dfc50000c7442406000000000f011c242642fec719c4c2590df80f38f044b75a0f07d9c9b9800000c0ae2d6666000400000f30", 0x86}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x80008002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ffffff7f00000000feffffff8500fba2f130000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x0) 29.214081566s ago: executing program 2 (id=3437): r0 = inotify_init1(0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x106, 0x1, @buffer={0x0, 0xa3, &(0x7f0000000840)=""/163}, &(0x7f0000000180)="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", 0x0, 0x10, 0x0, 0x0, 0x0}) close_range(r0, r0, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x42000820) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r2, &(0x7f0000001a40)=[{&(0x7f0000000880)="5108d2ad6f566be29603187cc57b3d3cceb764467564c0e82eaa6f2f252298f0bdd2566c20c10a6e025047febb41eca5ae18c65a06683a3d5875032c2cfea1826bf1a0fbf58130c79cded00779a0a7884262a432341e2d1143df6fba568b7c040de110c31e664930a2e81aa61587fe18ecccbc490e0e6d2b3340cf4e7b843fb1d2b1728116ae7c71545f0d8ab6cfb513f823fa6eb6cb94bfc8e9bc40258a7acb5d4ee85d59cd17df96b43938143b88001ec6059c7674a3056fd41add280091376e607f5e17ed1bccff5f36b769f6042789cf0edf50d4166c63e623f5f5adc82d566e2592c9c2fe983153535e593c16d4b236fef39bc64e38cf1a8e5898cf5b8f44400ef441560e06961b73a953a0664025ad46b60bbca3dd53e33376913a73d94f66c3eb4f4848068a10f552d800c814a501839d96e7c3b1d0528e45dc58c8a0e138c7fcfc5427604f29b283be6a51c6f9e5fc476e07221d8ed933551290833a657c689aca00f6c1ab0034eb8a65c66598704e3600999ccbe98211914e3cbe5def2e58a22f604e42fa1a66574184da760fd1b725ef5167e2130d13b287d6d3e1652443a3944de4288d702728ad9eba116d7afecdb6139382b3f9e863b85c592b57513cd3f6b270998e082dc0d1f73af025dd6e2f0b6cee65fb13b844d7d618550acea26f98ed3276a38e09eb92f478889b9f0618a4c446d6c6223f7a1446bae0a9aaac7975bbbeb2836ab5dd9df6588cafbd39f45802c0540929a60e706f0eced7bf3048b5e2ea74c494194786acdcdbe4cdbb3fe041f77a7f4e0141e336770c49f4f6cc7a456a7d1fb970f8acb1af15ba6a367d843fcb30789f8654efcc20a2cecb926b9dd9e9b820a755f9d150cc52f2c9c2deff8ae8246b1a2f590d23568438eedd6ef80a079f1b3081ccd33ae16c75b5895f0b699ea7b8fd479255e2064567afccada7201904c1e4148c522f5e1643095778c1c25e2807fd2a7eb429a2c7f27e3d1d330044356acda0fdebb67545f7139b4be264dea4da5d56a94511a80ca2975e85de87de43c4099e6e148dea1079043d593a2dacfa605fcf2f760cc0d5d783fc5fe5bca3dc8a005a53b69c46d9a6ae4722ed19c12e879d47ddde2f2ec6ed2e1c51e174cebfb33fe010047497989de59f801dcb4e4d5ae7890ef54fda32490a608501ded929ced2ac5b7df90a294347e79193c97e3997ad1108c80841f356c85f77d39246614ceb49daf4550d455014829e2740b63d9c541de733442a1cb9b5b5122647917334616c085ad638fb86bb8b7456bbbbd8f1aa755e249bdac3a53db286b333c9edd06b8006fca6a8002a63f63bb4c93da7ddf539271dd56ac492aca42178b78309283ce8b4e37a8f3a3840b53eb6d0cc2eb87b5fee3aaa13657350b6caac30a7d8bf40b4982d1f87b8de5abd4ed7466af150d8bb2544e76f4f34bca8d1a61f553a6a87887ccd301e2d4fd550b373793e56d6726412b00fc89e2be3823dd55eb24f36b45e18d5192053a45c5e27bed0d9c9d36b84b8e61dcaa2674054376d5042f2dc64d21c036dd875d24f22044a47b4a04b0d4cc1a138dab3d4efc15c4c517c02a34d8baeff2094f0b190bd", 0x473}], 0x1) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x48202) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000340)="53b2a3b29a60308ad02fbdf02499e3669c1098f81e349a6cb493f8dd2b3a468a76496a4eb1e615976e01ec26fa06f013cedef88e6b12797582770c8e7286e9a9709f5d14c77486c205d4abcdfa57", 0x4e}) read(r0, 0x0, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000003080104000000000000000005000004050003008800000004008480"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x408040, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) syz_emit_ethernet(0x68, &(0x7f0000001240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000323a0020010000000000000000000020000001ff02000000000000000000000000ef000101907802000000656f21ef37ba2bffff010000000000000000000000000001200100000000000000000000000097c7"], 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) 28.341583694s ago: executing program 2 (id=3442): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd26, 0x4, {0x2, 0x80, 0x10, 0x5, 0xfe, 0x1, 0xc8, 0x2, 0x600}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x4, {0xad308b6c, 0x81, "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", 0x8, 0xfe, 0x7, 0x5, 0x9b, 0x7, 0x2}}}, 0x128) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) (async) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7ffd}, {0x400000b1, 0x0, 0x9}]}) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7ffd}, {0x400000b1, 0x0, 0x9}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 28.341268884s ago: executing program 2 (id=3443): getitimer(0x1, &(0x7f0000000100)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x0, 0x1}, 0xfffffff8, 0x1, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x10, 0x2}, 0x8, 0x22500000, 0xc, 0x0, 0xfffffff9, 0x20000, 0x0}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CDROM_GET_CAPABILITY(r2, 0x5331) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0xafc}], 0x1, 0x12140, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 28.052540674s ago: executing program 2 (id=3449): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000b00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000140)={0x980, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x17}}}}, [@NL80211_ATTR_IE={0x20b, 0x2a, [@fast_bss_trans={0x37, 0x122, {0x9e, 0x8, "8089ade2c32c7a01038231e312539e98", "0d38e54f10bf2f7df2943f7cdb13948cb09d0f392ec308e45345a2dd12d68db0", "dcaa4fdad81a26d387bfa59b448953167b38d747dd13fe41ebb4f6d584a0d52b", [{0x3, 0x24, "7bf5b90c181c41cd4469faa609566a4df8c333b1e532d90bd2f20cfa3444cdb4c59e8c14"}, {0x4, 0x1e, "950ec0d5a811f44634078096dcc8f614ca288bfc8fad0873cf7d92e3fce8"}, {0x4, 0x13, "35ea0fa9ef247cd7f79bbe69c101db9d0c3797"}, {0x3, 0x11, "733c457a85333d8857fab5ab53c37cf67a"}, {0x4, 0x10, "770dae137775351d69554eef0daa17f5"}, {0x4, 0x28, "75d9d84660204c5062bec807cf1dff7168bb30732a9cccac0f6a7c9bd3bf7bea1cb6110b8a14d74e"}, {0x1, 0x18, "bfccc3739a997ee8d29cda780b6175dc04d0f6ba8c6d235a"}, {0x4, 0xa, "103a3cb9590c8b17bab3"}]}}, @measure_req={0x26, 0xc5, {0x80, 0x5, 0xe, "8769ab361bee1eafd121dc5ec4d45f10bffc158d4b88d5ec62e62e3fbc2c4bb3b2c28e99402773c6f4082452ecfb4bca6bdf0040db8c54f9015e1eafa3205fc65d88f90a319ac349ea66e046c5eb591abf16eb29dba6cba09d6bb3cb1e85d6aa1078b8b8b46ee6b038691365e1ce461b0f754d0ceb2ee2d614e983ca0dd4167ad941d84031c4112463fcbdc9fb912adc56934a6d3c7569368d2f441cd7cd582aad6254e2c4c1fba74bac680f858fd00c309a2e819b9b33f0e43052b014c917acede0"}}, @ht={0x2d, 0x1a, {0x400d, 0x0, 0x0, 0x0, {0x6, 0x2, 0x0, 0xff, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x400, 0x4, 0xf}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "00000000000003000000"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "2220385397ba010d6046d68b11"}], @NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4, {0xcd, 0xc9}}]}, @NL80211_ATTR_IE={0x270, 0x2a, [@peer_mgmt={0x75, 0x8, {0x1, 0x1, @val=0x2, @val=0x41, @void}}, @tim={0x5, 0x75, {0x7f, 0x27, 0x8, "d8087adbeb4ae36715ad09bdc18594cac5c709edc2321631a7d8a5804e582d8be62ca6366a122b3b7cb3326f3006d625d526513438edc5329b4c0de6cbc1dceef1fd91163b1667bb80f320543041fe575bb416e848c448130a4bb028a8b93f82242e2eac8251db63ad7514dbe579f0ecb258"}}, @random_vendor={0xdd, 0x4b, "e3bc1a7485ce1ed05e96578b0865ecfb84f46baaf720113284a4cd03b983938ca08fb9840f32b1aa0c120363afa0b604e86125b5b67a3487c26daa436f35c8bc2f2da88ee567fe30728f51"}, @ssid={0x0, 0xc, @random="89f54a99df103b1c18b0b6cb"}, @random={0x4, 0x80, "2b0bb21fdce19baa5c925217ff54fca7b2d1de9afc0027138adc1c8b912ba9330232563bc93fc8a0012374e31bbf5d8f4788021d301979655c74dd4968920a350dd01a4a7e9ffc608a52d829135cf69232bf40644457668cf847d4d6c5f75a018add7fa9be8fd9430d016da1012b14699329f5400fe8d920df682a249a32c855"}, @preq={0x82, 0x2b, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x9, 0x2, @device_a, 0xb4, @value=@device_b, 0x67e, 0xf6b3, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0x7ff}]}}, @ssid={0x0, 0x6, @default_ap_ssid}, @tim={0x5, 0xcf, {0xaa, 0xa3, 0x40, "19136ee782038219f9e879921b1b2d4ba1804f7ddb5f21fcbd91dffcfa4063c5ff14ae22796e2e3b7e463a6df461e855193e5faf3a8021ad2628eb2809aa73a7a6926f01551b55226aaad28341d50048fafff540164c253ecca3792613620acdb0acedf13b535fc301c5cb3adcdfe08075cf61e6afb6b1d0a7b440ce0c56469daac0c3ccaed8a502172530371d36c3e8f8d9129626d200d159cfdfe8f054fbcab20d8bafe0d213cb20c13dde06920d886d627629eab41cc3e6acc7e9da64d1027766ed12ab6eeaff455f6da3"}}, @dsss={0x3, 0x1, 0x68}, @channel_switch={0x25, 0x3, {0x0, 0x78, 0xf8}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4d, 0xfa, "db3ebd251f0cf6514be801fc2a6bbc25a72a29cc5599ab8ceafab39620880fbd89b672694960fcd0895c08d2a0ea587ed11d248119462675ba27d37f332e4236acffb4c3f7519fa368"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "3dd0a402"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xff, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "6787545ca3"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6000}, @NL80211_ATTR_FILS_ERP_RRK={0xfc, 0xfc, "4fd2bd421b12547c3dcc6f553fc59a10f99901d09ffcf119f23ae04e6f5534e351e9305b5a0fa2de581d4a9ac9cd8e8b71f8245edfae0eaeb956cdbe12553ed9f5973e408755d375a51064a5ced8675537c155afbb4aac27a667b0fdbb571b7985020cdbe945b1a4f3e1d93d191f1159b514676e236eed1b1069f91084bc6f56659c080c21b9386390d93b0c7daaeffeee4093c5b175a4d3562f4cb5d50d88de41aa59c47438fde476a1dd5164088d66d4dab8f214022174282d58444812c5056cf4424f3650c73780d5f9dc73a5977c8cacda2f62c4b0f0ad01db1673cdd52d7c106382a776db5c986f890b9c10f6096886de25f63953a6"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "548081f1e395fc14061531f500da0008"}, @NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "3fd4bc9e8d79c0dee1366e5328a41e2f205b29e7e002334c8682f551d6e5fbf08869b25a1b3ecb6ce88e117d894eda0443974fec3937f291a2afb5afce7b09aa2652df34fcf53d51b0d92c0130a417ab060bfa97a26b9e95558668eeed43495794829948be768b52a9ced973f4cfabff58bfc5d1dba8b61f9793500808bd2cb57643f5d2142ad8e1bc1388b0b9330c78935d40889a039ee59dfae0403fb317671383d7dc1ce149ee3fe79247740f885e499f"}, @NL80211_ATTR_FILS_ERP_RRK={0xbc, 0xfc, "9f42ca3d578581bb6f3b6f1ce0e478bac6792c8b4f02dc4b01547282ecd39f01f4d861b288b46c2c3f5be341841095825b9770e6c48284b5b914438d50740d2fffb5201ce649e3f628df0b539207941ff701e5328fbae6c00c290d6c6269968b157591ec42111bab54cf2807d1b7ffa48218bfea8eff201874f0f106b7bf2a9d337e154fbd294ef42a4fddf1890509ebe1756df7cbe0d085e7f3c23473c1904d4a49dafda02c96319d41ec4907f79f81e73eb7c349fde528"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "17c3a1f23752a3"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}], @NL80211_ATTR_IE={0xad, 0x2a, [@mic={0x8c, 0x10, {0x6b, "2d197d69386c", @short="fb0e3d43f21e176b"}}, @fast_bss_trans={0x37, 0x89, {0x7, 0x2, "f45c14f53cf3a3a4534e016ae3fca36f", "df8b864b1e3b4ad75e10bee44b49777b998ad477a9070df23cc4a7afa230a027", "7e429e322626c1b250a3e13834a68d9dfb56364f63fbc6a3f9dee66d88d6633a", [{0x1, 0x17, "e7c6379f10aca3dc1494546bd66e0d0523e0303fc40825"}, {0x3, 0x1c, "33a3e1ae080d08f7e4e0c852c6f21dffa385e0b7b01a87ff974093e9"}]}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x28}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}]}, 0x980}, 0x1, 0x0, 0x0, 0x4}, 0x84) (async, rerun: 64) r1 = socket(0x10, 0x802, 0x0) (rerun: 64) write(r1, &(0x7f0000000000)="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", 0xfc) 27.890434904s ago: executing program 2 (id=3451): r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='attr/current\x00') read$eventfd(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x800000000000000d) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 27.796761661s ago: executing program 42 (id=3451): r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='attr/current\x00') read$eventfd(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x800000000000000d) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 20.361573097s ago: executing program 8 (id=3557): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x82000000003, 0x2) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x3c, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x15, 0x2, 0x0, 0x1, [@generic="725eb862cec9a478ce2057c5241935e678"]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @dev}, &(0x7f00000000c0)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x8, 0x7, 0x0, 0x8, {{0x2b, 0x4, 0x2, 0x1d, 0xac, 0x65, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1, {[@ssrr={0x89, 0xb, 0xb8, [@private=0xa010101, @multicast2]}, @end, @cipso={0x86, 0x4c, 0x0, [{0x4, 0x10, "2e6e868369e4306b3190862e8662"}, {0x7, 0x12, "5b6fa292c1183550e45f7172d588397f"}, {0x7, 0x5, "942c73"}, {0x6, 0xb, "8e01ca0ca498589371"}, {0x1, 0xb, "0cbb41f594426bb767"}, {0x6, 0x9, "1f68856c31164c"}]}, @noop, @ssrr={0x89, 0x17, 0x80, [@rand_addr=0x64010102, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1, @local]}, @end, @noop, @timestamp_addr={0x44, 0x14, 0xbc, 0x1, 0xa, [{@multicast2, 0x8}, {@rand_addr=0x64010102, 0x3c8481f}]}, @generic={0x7, 0x11, "7d4defb2299e362994c6ba1cf30f49"}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x4, 0x5, 0xff, 0x7, 0x3a, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x40, 0xf, 0x6}}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=@mpls_getnetconf={0x34, 0x52, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8, 0x1, r4}]}, 0x34}}, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x36314d59, 0x2, @discrete={0xe840, 0x6}}) 20.302873439s ago: executing program 8 (id=3561): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x101405, 0x7, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x100, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0x0, 0x9, {0x7, 0x2b, 0x3af, 0x502c000, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x110, 0x30, 0x871a15abc695fa3d, 0x8000000, 0x0, {}, [{0xfc, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0xb0, 0x6, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xfffffff7, 0x6, 0x4d27}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0xf5f6, 0x1, 0x5, 0x55de5cb1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x0, 0x2, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x8, 0x1, 0x8, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x110}}, 0x20000054) 20.170423541s ago: executing program 8 (id=3566): unshare(0x20000400) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) io_uring_enter(r0, 0x47f5, 0x2000000, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0xffffffffffffff68) 20.091181341s ago: executing program 8 (id=3569): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x81}, 0x4c800) (async) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x5) ioctl$XFS_IOC_GET_RESBLKS(r3, 0x80105873, &(0x7f0000000000)) 19.982635367s ago: executing program 8 (id=3571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x2}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x66, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) (async) r5 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x42, 0x1000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0xfffffd88, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 19.930668085s ago: executing program 8 (id=3573): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x555600, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000100), &(0x7f0000000140)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000980)={0x0, 0x6, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f00000008c0)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0x3, 0x0, &(0x7f0000000900)=[{}, {}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000a00)={{r1, 0x0, 0xb, [0x3, 0xfffffffc]}, {0x80000000, r2, 0x3, [0x9, 0x3]}, 0x0, [0x7, 0x7f]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r4, &(0x7f0000000a80)={0xffffffffffff0001, 0x7fffffffffffffff, 0x1}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000ac0)) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000b00)={0x2, 0x0, 0x1}) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000b40)={0x1, 0xfff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{r0, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%pI4 \x00'}, 0x20) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000000c80)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000001080)={0x0, 0xffffffff}, &(0x7f00000010c0)=0x8) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) write(r5, &(0x7f0000001100)="833dd5a23aa47cf4ed26a180f1202ccdf1e93867ba216aebe2c73fabb3f4bd9266748f41aa98152fed6286dc050d725d1ffe872960702a4ebce0d7f5642150a2764d931aa06225f003f0fc72bae7967af4ae627ae3857452da697138af898048fae1300f89ebd7346d7dd4c978a42ab6ef3c7f1da24a35c3d59fe24abb04579857ab6159cc51fa13d9902a1b28f168a1a9fc51ca4f8bc648c520c2a0b0663ba8bac9ad66e813bdae2e26d3aba7c3a8fc66564905e51e1ae0a4d4c7f083f2d018d1220eff23986b234d74bf730c95d8543eaf12c9aaa725389952344124d5422c601d4aeca96e79c835d86ddf2ac1671103110682", 0xf4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001240), r3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001280)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000012c0)=0x0, &(0x7f0000001300)=0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000001340)={@local, 0x0}, &(0x7f0000001380)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001440)={'syztnl1\x00', &(0x7f00000013c0)={'ip6gre0\x00', 0x0, 0x29, 0xff, 0x81, 0x8, 0x8, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x0, 0x8, 0x10000000}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001500)={'syztnl2\x00', &(0x7f0000001480)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x1, 0x4, 0x51, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x80, 0x4, 0x80}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={r3, 0x58, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001680)={'ip6tnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x29, 0xd6, 0xd, 0x432, 0x21, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x60, 0x1ff, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000016c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001700)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000001980)={&(0x7f0000001200), 0xc, &(0x7f0000001940)={&(0x7f0000001740)={0x1c4, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x23444f05affecf3a}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x800}, 0x20004001) r16 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000019c0), r16) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000001c80)={&(0x7f0000001a00), 0xc, &(0x7f0000001c40)={&(0x7f0000001a80)={0x1b4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0xc084}, 0xc0) 19.374515407s ago: executing program 3 (id=3581): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r2, 0x4b4b, &(0x7f0000000000)={0x4, 0x0, 0x3, 0x1d, 0x1d3, 0x0}) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$kcm(0x2, 0x2, 0x73) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000200)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa400, 0x26) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2400a6c7822aa832894dc16a931b100f118a7754d296141f2a62371f5b12ed235752c9a8904ef74a25a99dd17b401a1d93918f04911cf572d8b57ee7f80d4d3bbe307052c15837828229dff7fffad58648925a5ddf5aebc61662a699e8cc9ebc52d0f0547bcbe1ac5b4fc8e38225ab57b360dd903f222616ea8b1262b82c98c118ee00507a40bc85bd52eb2e717e4ff0d0354f7b2a5fd092ca99862719c8", @ANYRES16=r7, @ANYBLOB="000227bd7000fbdbdf250e00000005003300010000000500300001000000"], 0x24}, 0x1, 0x0, 0x0, 0x818}, 0x4000000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) preadv(r4, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/78, 0x4e}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x2, 0x5, 0x1) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)={0x140, r8, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc5, 0x69}}}}, [@NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xfe, 0xbe, "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"}]}, 0x140}, 0x1, 0x0, 0x0, 0x4001}, 0xc084) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000100000000000000f040004000000000000006100"], 0x0, 0x35, 0x0, 0x1}, 0x28) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000640)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000000680)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) 19.24138299s ago: executing program 3 (id=3583): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x32) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0xc254, 0x4}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) fchdir(r1) (async) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x67) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x32) (async) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0xc254, 0x4}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) (async) 19.107269694s ago: executing program 3 (id=3585): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0x2, &(0x7f0000000100)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x3, 0x0, r2, &(0x7f0000000000)="98", 0x1, 0x1000000, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x9d, r2, &(0x7f0000000500)="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", 0x1000, 0x4}]) 18.950688887s ago: executing program 3 (id=3587): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1800de1bc2082e0e8441014cc8a162743600090027bd7000"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0xffffffff, 0x8001, 0x1}}, 0x44) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x58a, 0x8, 0x0, 0x85}}, @in_dx={0x69, 0x20, {0x3523, 0x4}}, @code={0xa, 0x4e, {"c4810160723fc483b50de700c7442400dc000000c744240200600000ff2c24410f01dfc4a24ddcd50f01ca45d8d34e0fc71e0fc7ab625c7c55650f01c9"}}, @wrmsr={0x65, 0x20, {0x398, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_code={0x12e, 0x4f, {0x0, "66bad00466ed460f2287433400673e64663664670f228565420f30663e0f320f20e035000400000f22e066b86b008ed046a565430f01df"}}, @wrmsr={0x65, 0x20, {0x64a, 0x6}}, @rdmsr={0x66, 0x18, {0xa9a}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0x82, 0x1}}, @nested_create_vm={0x12d, 0x18}, @out_dx={0x6a, 0x28, {0x1b4f, 0x2, 0x9}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x2, 0x3}}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0x9, 0x3, 0x200}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0xd000, 0x34d5}}, @nested_load_syzos={0x136, 0xf0, {0x3, 0x3, [@nested_create_vm={0x12d, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0x1680, 0x4, 0x1}}, @rdmsr={0x66, 0x18, {0x97b}}, @wrmsr={0x65, 0x20, {0xbea, 0x7}}, @nested_load_syzos={0x136, 0x20, {0x1, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xc5, 0x1}}, @rdmsr={0x66, 0x18, {0x8b6}}]}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_load_code={0x12e, 0x68, {0x0, "670f0767f343a766baa000b0e0eef20f011f3647dca4c1a69d000048b877000000000000000f23d80f21f835c00000f00f23f8c463d1cf7700abc40225a6bb0000000066ba4000b0bbeef3470fc777f6"}}, @nested_amd_vmsave={0x183, 0x18}, @out_dx={0x6a, 0x28, {0xfd3f, 0x4, 0x9}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xe6, 0x3, 0x3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x21, 0x8, 0x4, 0x7a}}, @out_dx={0x6a, 0x28, {0x2c17, 0x3, 0x1}}, @wr_drn={0x68, 0x20, {0x1, 0xfc19}}], 0x535}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.949384178s ago: executing program 3 (id=3588): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}, 0x1, 0x0, 0x0, 0x59fdc81b6d1d1db8}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') setpgid(0x0, r1) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) socket(0x29, 0x800, 0x6) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000340)={'trans=virtio,', {[{@afid={'afid', 0x3d, 0xb900}}], [{@uid_lt={'uid<', r2}}, {@context={'context', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@appraise_type}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@uid_gt={'uid>', r2}}, {@measure}, {@smackfshat}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x61, 0x32, 0x66, 0x4, 0x33, 0x64, 0x66], 0x2d, [0x62, 0x65, 0x33, 0x31], 0x2d, [0x64, 0x66, 0x36, 0x33], 0x2d, [0x66, 0x30, 0x64, 0x32], 0x2d, [0x32, 0x0, 0x36, 0x62, 0x6f, 0x36, 0x65, 0x61]}}}]}}) 18.947495596s ago: executing program 6 (id=3590): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000080)=""/4096, 0x0, 0x1000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x189000, 0x0) ioctl$COMEDI_UNLOCK(r4, 0x6406) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44c, 0x2c, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x41c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x9}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x9}, @TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x6, 0x7, 0x3, 0x8001, 0x7f, 0x3, 0x6, 0x3ad, 0x9, 0x10000, 0xe, 0x0, 0x878, 0x3, 0x2, 0xb, 0xffffffff, 0x5, 0xfffffffb, 0x8, 0x4, 0x1f, 0x9, 0x41f0, 0x5, 0x6, 0x7, 0x400, 0x7fff, 0x7, 0x0, 0x1, 0x4, 0x5, 0x2, 0x0, 0xbc, 0x9f, 0x2d, 0xfffffffc, 0x231, 0xe4, 0x1, 0x10001, 0x80000000, 0x3, 0x10001, 0x1, 0x1, 0x9, 0x3ff, 0x80000001, 0xfffffffb, 0x19d, 0x3, 0xa5c0, 0x3, 0x7fff, 0x3, 0x3000, 0xffffffff, 0x4, 0xfffffa7b, 0xe, 0x1, 0x8, 0x5, 0xe0f0, 0x6, 0x84, 0x6, 0x200, 0x7fffffff, 0x4, 0xfffffc01, 0x5, 0x0, 0x48, 0x10001, 0x408000, 0x6, 0x48bdd290, 0x8, 0x47, 0x2, 0x6, 0x1, 0x6, 0xd1e, 0x7, 0xbaa, 0xb, 0x8001, 0x6, 0x80000000, 0x3, 0x3, 0x2b9b, 0x6, 0x5, 0x100, 0x7, 0x8e1, 0x7, 0x5, 0x4, 0xa4c, 0x6, 0x2, 0x3, 0x6, 0x0, 0x7, 0xa, 0x2, 0x3ff, 0x7, 0x4, 0x1, 0xd, 0x4, 0x6, 0x10, 0x3, 0x0, 0x4, 0x300000, 0x8, 0x9, 0xfffffff9, 0xfffffbb6, 0x0, 0x40000, 0x4, 0x1, 0xffffd9be, 0x6, 0x9, 0x4, 0x5, 0xbe7b, 0x10001, 0xa, 0x356d51d9, 0x0, 0x0, 0x4, 0x7f, 0x1ff, 0x9, 0x100, 0x5, 0xfffffeff, 0x0, 0x80, 0x5, 0xa, 0x9, 0x3fb8, 0x6, 0x2, 0x7d07, 0x407, 0x9, 0x1, 0x8, 0x6, 0x7, 0x6, 0x8, 0xe6, 0xcdb9, 0x9, 0x4, 0x3, 0x3, 0x0, 0x9, 0x9, 0x2, 0x0, 0xffff, 0x10001, 0x7, 0x0, 0x7, 0x853, 0x6, 0x2, 0x401, 0xffffffff, 0x80000001, 0x8, 0x3ff, 0xc94, 0x5, 0x0, 0x7, 0x1, 0x9, 0x8, 0xad19, 0x4, 0x2, 0x8d, 0x2, 0x2, 0x5, 0x7, 0x114d, 0x3, 0x1000, 0x4, 0x5, 0x80000001, 0x4070, 0x81, 0x76fd2e91, 0x9, 0x2, 0xffff, 0x6, 0x80, 0x5, 0x7ff, 0xfff, 0x5, 0x2, 0x6, 0x4, 0x7, 0x783, 0x4, 0x715, 0x8479, 0xfffffffa, 0x2, 0x81, 0xffff, 0x7, 0xfffffffa, 0xa, 0x766, 0x0, 0xff, 0xa, 0x7ff, 0x4, 0x7, 0x9, 0x1, 0x5, 0xfffffffc, 0x6, 0xfffffffd]}]}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x101042, 0x0) r6 = socket(0x22, 0x2, 0x2) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000040), 0x4) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f00000002c0)=[&(0x7f0000000200)={0xffffff7f00000000, 0x0, 0xa0, 0x1, 0x0, r5, 0x0}]) sigaltstack(0x0, &(0x7f0000001a00)={0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r8, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x31}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8815}, 0x4891) mlock(&(0x7f0000479000/0x2000)=nil, 0x2000) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mprotect(&(0x7f00003dd000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x50001000, 0x0, 0x37, 0x0, 0x0, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mmap$IORING_OFF_SQES(&(0x7f00005dd000/0x3000)=nil, 0x3000, 0x1000000, 0x30, r10, 0x10000000) 18.799972828s ago: executing program 3 (id=3591): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x3c, r11, 0x801, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x70bd2a, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffff}}, 0x1c}, 0x1, 0x0, 0x0, 0xb71b46126d0b821b}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r0, 0x2000) socket$inet6_tcp(0xa, 0x1, 0x0) 18.510307286s ago: executing program 6 (id=3594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x50400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8001000b) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000f9d000/0x18000)=nil, &(0x7f00000038c0)=[@text32={0x20, 0x0}], 0x1, 0x62, 0x0, 0x0) 18.506468229s ago: executing program 6 (id=3596): mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './bus/../file0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000400)=0x1ff, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000020303000000000c00000000000000080800010001000006090002000000000900000000"], 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x80) socket$nl_route(0x10, 0x3, 0x0) write$selinux_create(r0, &(0x7f0000000340)=@access={'system_u:object_r:passwd_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x1}, 0x48) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='exfat\x00', 0x400080, &(0x7f00000001c0)='discard') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000040000100070001800c00de08000200"/35, @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) statx(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@filename='./bus\x00', r5, &(0x7f0000000140)={0x7, 0x3, 0x7, 0x2, 0x1000, 0x7, 0xaf1, 0x0, 0x7fff}) 18.409665354s ago: executing program 1 (id=3597): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) 18.329199629s ago: executing program 1 (id=3598): syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e1d, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x2, 0x22, {0x22, 0x1306b880d924795b, "a1cabfb98b16af7aa5473a309d7e7ad318210e9f6668a5adba9c31a2f15baf83"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, &(0x7f0000000780)=ANY=[@ANYBLOB="c2c507aa133198534c000f89c5f4989ba67724d7d2cbc436777db8a8d50d49e0110a30d84fe9d2f0ebb9d245f275405abcf28d25735a7da2126e96b0dea273501b7a1e6ee135fef0f29f35bebcb26ec7ad7ce9d1d50e706cd6e9ea26c74296dc439de00bf001e84343601a4d7c4659"], &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x9, 0x40, "7519614a", "42d5de18"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x4, 0x4, 0x4, 0x3, 0x5, 0x6}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x40, 0x17, 0x45, "b09431c63327ad4b634fddbe68c63ebd912448208d92dff3e619a06245d75c79fb9214ef5352a05df57d0005b8a9de2d957c7e543c880409bcc01bbf0a5de8a9f7140cce09"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xd4}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x100, 0x20, [0x77]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0xe0}, &(0x7f0000000480)={0x40, 0xb, 0x2, "58ae"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "c89d"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x91}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000640)={0x40, 0x1e, 0x1}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x4}}) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) (async) syz_usb_disconnect(r0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xfcff}}]}) 18.270468924s ago: executing program 6 (id=3599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) r3 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r3, &(0x7f0000000080)=""/116, 0xfffffeb2) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x9) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000400), 0x0) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) read(r3, &(0x7f0000000280)=""/96, 0x60) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000040)={0x8, 0x2, {0x56, 0x40, 0x7d5a, {0x2, 0x10d2}, {0x101, 0x100}, @ramp={0x7, 0x4, {0x1, 0x6, 0x800, 0x1}}}, {0x52, 0xac4, 0x40, {0x1116, 0x352}, {0xff7d, 0x7ff}, @cond=[{0x40, 0x5, 0x9, 0x4, 0x101, 0x3}, {0x2, 0x401, 0x0, 0xe, 0x400}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0x8}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000200001c00128009000100766c616e000000000c0002800600012101000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl724\x00', [0x8001, 0x6, 0x1, 0xffffffff, 0x0, 0xcc7, 0x8, 0x7, 0xe, 0x2, 0x6, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x1ae, 0xfffffff5]}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1b, &(0x7f0000000740)="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", 0xfffffffffffffd49) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x80003, r8}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r8, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400800000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0) 18.159042626s ago: executing program 6 (id=3600): r0 = gettid() r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRES16=r0, @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d032, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0xc94, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 18.09011438s ago: executing program 6 (id=3601): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) (rerun: 32) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async, rerun: 32) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f00000003c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0]) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000009c0), 0x42800, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000001300)={0x7}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)='%pK \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x62a21058, 0x8, 0x1, 0x424a, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0xc}, 0x50) (async, rerun: 64) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0xa3d, 0x9, {{0x10, 0x4, 0x1, 0x5, 0x40, 0x65, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010101, {[@timestamp_addr={0x44, 0x2c, 0xd9, 0x1, 0x2, [{@private=0xa010102, 0x6}, {@rand_addr=0x64010100, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0x5}, {@remote, 0x3}]}]}}}}}) 15.267242455s ago: executing program 1 (id=3602): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x1, 0xe9d, 0x22, 0x20000007, 0x3, 0x44233, 0x200000000000007, 0x81, 0x9bf, 0x8001, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2, 0x80300}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) read$FUSE(r3, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000040000005a"]) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r5, 0x0, 0x25a5, 0x0) socket$inet(0x2, 0x800, 0xde) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7fec}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r6, 0xffffffffffffffff, 0x200000000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r6], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x81800, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x20000, 0x0) 15.156010879s ago: executing program 1 (id=3603): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0xa, 0xd0e0000, 0x0, 0x100, 0x450, 0x1d8, 0x1d8, 0x450, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @loopback, 0xffffffff, 0xff, 'batadv0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x1, 0x3, 0x26}, 0x0, 0x2c8, 0x328, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xfff}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x7008, 0x4, [0x22, 0x36, 0x16, 0x35, 0x14, 0x8, 0x3, 0x8, 0x1f, 0x2, 0x2b, 0x3c, 0xc, 0x2d, 0x15, 0x3e], 0x2, 0xb, 0x7}}}, {{@uncond, 0x3202, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x7, 0x8001, 0x1, 'snmp_trap\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 15.155818365s ago: executing program 1 (id=3604): r0 = socket(0x28, 0x800, 0x400) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) 15.096789223s ago: executing program 1 (id=3605): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x154, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28, 0xeaa}}]}, 0x154}}, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3", 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}, 0x40900) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r4, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0x41}]) 3.045411729s ago: executing program 43 (id=3591): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x201, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x3c, r11, 0x801, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8040) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x70bd2a, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffff}}, 0x1c}, 0x1, 0x0, 0x0, 0xb71b46126d0b821b}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r0, 0x2000) socket$inet6_tcp(0xa, 0x1, 0x0) 3.003650649s ago: executing program 44 (id=3601): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) (rerun: 32) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async, rerun: 32) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f00000003c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0]) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000009c0), 0x42800, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000001300)={0x7}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)='%pK \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x62a21058, 0x8, 0x1, 0x424a, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0xc}, 0x50) (async, rerun: 64) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x0, 0x7800, 0xa3d, 0x9, {{0x10, 0x4, 0x1, 0x5, 0x40, 0x65, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010101, {[@timestamp_addr={0x44, 0x2c, 0xd9, 0x1, 0x2, [{@private=0xa010102, 0x6}, {@rand_addr=0x64010100, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback, 0x5}, {@remote, 0x3}]}]}}}}}) 0s ago: executing program 45 (id=3605): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x154, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28, 0xeaa}}]}, 0x154}}, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3", 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}, 0x40900) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r4, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0x41}]) kernel console output (not intermixed with test programs): [ 274.498383][T17028] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2939'. [ 274.516889][T17032] FAULT_INJECTION: forcing a failure. [ 274.516889][T17032] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 274.520907][T17032] CPU: 0 UID: 0 PID: 17032 Comm: syz.3.2941 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.520925][T17032] Tainted: [L]=SOFTLOCKUP [ 274.520929][T17032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 274.520935][T17032] Call Trace: [ 274.520947][T17032] [ 274.520951][T17032] dump_stack_lvl+0x100/0x190 [ 274.520983][T17032] should_fail_ex.cold+0x5/0xa [ 274.520998][T17032] _copy_from_user+0x2e/0xd0 [ 274.521022][T17032] copy_msghdr_from_user+0x9f/0x4f0 [ 274.521050][T17032] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 274.521072][T17032] ___sys_sendmsg+0x106/0x1e0 [ 274.521089][T17032] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.521120][T17032] __sys_sendmsg+0x170/0x220 [ 274.521133][T17032] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.521154][T17032] do_syscall_64+0x106/0xf80 [ 274.521164][T17032] ? clear_bhb_loop+0x40/0x90 [ 274.521177][T17032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.521188][T17032] RIP: 0033:0x7f0a6039bf79 [ 274.521197][T17032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.521208][T17032] RSP: 002b:00007f0a61292028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.521219][T17032] RAX: ffffffffffffffda RBX: 00007f0a60615fa0 RCX: 00007f0a6039bf79 [ 274.521226][T17032] RDX: 0000000004000800 RSI: 0000200000000300 RDI: 0000000000000003 [ 274.521233][T17032] RBP: 00007f0a61292090 R08: 0000000000000000 R09: 0000000000000000 [ 274.521239][T17032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.521245][T17032] R13: 00007f0a60616038 R14: 00007f0a60615fa0 R15: 00007ffd60e7ec68 [ 274.521262][T17032] [ 274.594373][ T40] audit: type=1400 audit(2000524643.717:1272): avc: denied { ioctl } for pid=17034 comm="syz.8.2942" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 274.602423][T17035] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2942'. [ 274.670220][T17035] netlink: 228 bytes leftover after parsing attributes in process `syz.8.2942'. [ 274.674024][T17035] openvswitch: netlink: Flow actions attr not present in new flow. [ 274.750550][T17058] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 274.753037][T17058] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 274.849722][T17082] xt_CONNSECMARK: invalid mode: 0 [ 274.849757][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2957'. [ 275.021823][T17106] NILFS (nbd3): device size too small [ 275.031435][ T40] audit: type=1326 audit(2000524644.156:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17105 comm="syz.3.2963" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a6039bf79 code=0x0 [ 275.040826][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2962'. [ 275.040869][T17107] batadv0: left promiscuous mode [ 275.040979][T17107] bridge0: port 3(batadv0) entered disabled state [ 275.096965][T17110] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 275.563040][T17107] bridge_slave_1: left allmulticast mode [ 275.565108][T17107] bridge_slave_1: left promiscuous mode [ 275.567540][T17107] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.573546][T17107] bridge_slave_0: left allmulticast mode [ 275.576038][T17107] bridge_slave_0: left promiscuous mode [ 275.578696][T17107] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.657743][T17116] ext4: Unknown parameter '/\)' [ 275.846127][T17128] netlink: 59 bytes leftover after parsing attributes in process `syz.8.2969'. [ 275.896596][ T40] audit: type=1400 audit(2000524645.014:1274): avc: denied { connect } for pid=17132 comm="syz.4.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 275.897201][T17134] overlay: Bad value for 'workdir' [ 275.932193][T13213] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 275.944955][T17139] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 275.949713][ T40] audit: type=1800 audit(2000524645.064:1275): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.2974" name="file0" dev="tmpfs" ino=2584 res=0 errno=0 [ 275.963047][ T40] audit: type=1804 audit(2000524645.074:1276): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.2974" name="/newroot/484/file0" dev="tmpfs" ino=2584 res=1 errno=0 [ 275.963397][T17140] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 275.975392][T17140] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 275.978864][T17140] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 275.988107][T17140] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 275.988136][T17145] xt_hashlimit: size too large, truncated to 1048576 [ 276.034402][ T40] audit: type=1326 audit(2000524645.154:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17153 comm="syz.8.2978" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46839bf79 code=0x7ffc0000 [ 276.055176][ T40] audit: type=1326 audit(2000524645.154:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17153 comm="syz.8.2978" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46839bf79 code=0x7ffc0000 [ 276.072851][ T40] audit: type=1326 audit(2000524645.154:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17153 comm="syz.8.2978" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc46835c84e code=0x7ffc0000 [ 276.165882][T17165] netlink: 'syz.3.2981': attribute type 1 has an invalid length. [ 276.231046][T17165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.239580][T17167] vlan2: entered promiscuous mode [ 276.241638][T17167] bond1: entered promiscuous mode [ 276.244727][T17167] vlan2: entered allmulticast mode [ 276.246724][T17167] bond1: entered allmulticast mode [ 276.280723][T17165] bond1: (slave bridge1): making interface the new active one [ 276.283596][T17165] bridge1: entered promiscuous mode [ 276.285456][T17165] bridge1: entered allmulticast mode [ 276.289088][T17165] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 276.314200][T17169] ceph: Path missing in source [ 276.436452][T17186] netlink: 'syz.2.2988': attribute type 13 has an invalid length. [ 276.439016][T17186] syz_tun: refused to change device tx_queue_len [ 276.443017][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 276.598985][T17208] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 276.792340][T17220] usb 1-1: USB disconnect, device number 2 [ 276.965249][T13223] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 277.475139][T13213] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 277.784009][T17232] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.787183][T17232] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 277.798663][T17232] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 277.800640][T17232] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 277.804915][T17232] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 277.809162][T17232] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 277.811136][T17232] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 277.969014][T17264] block device autoloading is deprecated and will be removed. [ 277.986854][ T46] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 278.076017][T17279] netlink: 'syz.4.3016': attribute type 10 has an invalid length. [ 278.177566][ T63] Bluetooth: hci0: Malformed Event: 0x13 [ 278.335495][T17304] __nla_validate_parse: 1 callbacks suppressed [ 278.335506][T17304] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3026'. [ 278.350408][T17307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3027'. [ 278.353240][T17307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3027'. [ 278.359134][T17308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3027'. [ 278.362209][T17308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3027'. [ 278.365674][T17304] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3026'. [ 278.372842][T17304] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.442038][T17314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3029'. [ 278.498349][ T58] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 278.523051][T17326] overlay: Unknown parameter 'audit' [ 278.577291][T17329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3034'. [ 278.660223][T17339] fuse: Bad value for 'group_id' [ 278.662427][T17339] fuse: Bad value for 'group_id' [ 278.765291][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3039'. [ 278.768987][T17344] netlink: 'syz.4.3039': attribute type 20 has an invalid length. [ 278.770535][T17346] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 278.785265][T13223] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.785374][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3039'. [ 278.789086][T13223] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.795560][T17344] netlink: 'syz.4.3039': attribute type 20 has an invalid length. [ 278.796186][T13223] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.804907][T13223] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.813184][T17344] netlink: 'syz.4.3039': attribute type 1 has an invalid length. [ 278.816310][T17344] nbd: error processing sock list [ 278.928926][T17352] batadv_slave_1: entered promiscuous mode [ 278.974665][T17351] batadv_slave_1: left promiscuous mode [ 278.985223][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 278.985234][ T40] audit: type=1400 audit(2000524648.097:1289): avc: denied { map } for pid=17359 comm="syz.4.3045" path="socket:[81118]" dev="sockfs" ino=81118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 279.019114][T13221] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 279.028560][ T63] Bluetooth: hci3: command 0x0406 tx timeout [ 279.042220][T17367] : entered promiscuous mode [ 279.290817][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 279.432744][T17398] hub 6-0:1.0: USB hub found [ 279.434865][T17398] hub 6-0:1.0: 1 port detected [ 279.540905][T13221] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 279.680061][ T74] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 279.830414][ T5936] Bluetooth: hci2: command 0x0c1a tx timeout [ 279.831438][ T63] Bluetooth: hci0: command 0x0406 tx timeout [ 279.835241][ T74] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 279.837785][ T74] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 279.840817][ T74] usb 13-1: config 0 interface 0 has no altsetting 0 [ 279.844561][ T74] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 279.847352][ T74] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 279.849901][ T74] usb 13-1: Product: syz [ 279.851307][ T74] usb 13-1: Manufacturer: syz [ 279.852805][ T74] usb 13-1: SerialNumber: syz [ 279.860686][ T74] usb 13-1: config 0 descriptor?? [ 279.863975][ T74] hub 13-1:0.0: bad descriptor, ignoring hub [ 279.865877][ T74] hub 13-1:0.0: probe with driver hub failed with error -5 [ 279.869438][ T74] usb 13-1: selecting invalid altsetting 0 [ 280.050930][T13221] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 280.562158][T13221] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 280.792691][T17400] usb 13-1: reset high-speed USB device number 18 using dummy_hcd [ 280.944825][T17400] usb 13-1: device firmware changed [ 280.952149][ T74] usb 13-1: USB disconnect, device number 18 [ 281.093189][ T74] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 281.123473][ T63] Bluetooth: hci3: command 0x0406 tx timeout [ 281.245027][ T74] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 281.247625][ T74] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 281.250874][ T74] usb 13-1: config 0 interface 0 has no altsetting 0 [ 281.255924][ T74] usb 13-1: string descriptor 0 read error: -22 [ 281.258012][ T74] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 281.260885][ T74] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 281.265180][ T74] usb 13-1: config 0 descriptor?? [ 281.269341][ T74] hub 13-1:0.0: bad descriptor, ignoring hub [ 281.271849][ T74] hub 13-1:0.0: probe with driver hub failed with error -5 [ 281.276688][ T74] usb 13-1: selecting invalid altsetting 0 [ 281.381490][ T40] audit: type=1400 audit(2000524650.481:1290): avc: denied { listen } for pid=17424 comm="syz.4.3068" path=2F3130342FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 281.450325][T17434] IPVS: length: 18 != 8 [ 281.452450][T17434] block nbd4: NBD_DISCONNECT [ 281.574699][ T39] usb 13-1: USB disconnect, device number 19 [ 281.585029][T13223] net_ratelimit: 1 callbacks suppressed [ 281.585044][T13223] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 281.660084][T17437] SELinux: failed to load policy [ 281.915138][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 281.915153][ T5936] Bluetooth: hci0: command 0x0406 tx timeout [ 282.020125][T17454] netlink: 'syz.2.3077': attribute type 29 has an invalid length. [ 282.070869][T17459] tmpfs: Bad value for 'mpol' [ 282.115572][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 282.181326][ T40] audit: type=1400 audit(2000524651.280:1291): avc: denied { lock } for pid=17464 comm="syz.2.3082" path="socket:[81238]" dev="sockfs" ino=81238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 282.235976][ T39] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 282.262403][T17471] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 282.264830][T17471] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 282.324894][T17477] netlink: 'syz.2.3086': attribute type 7 has an invalid length. [ 282.327822][T17477] netlink: 'syz.2.3086': attribute type 8 has an invalid length. [ 282.356557][T17482] binder: 17479:17482 ioctl 5000943f 200000001b80 returned -22 [ 282.367246][ T39] usb 13-1: device descriptor read/64, error -71 [ 282.606532][ T39] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 282.638399][T13221] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 282.736834][ T39] usb 13-1: device descriptor read/64, error -71 [ 282.797027][ T29] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 282.847547][ T39] usb usb13-port1: attempt power cycle [ 282.951524][ T29] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 282.954160][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.957459][ T29] usb 7-1: config 0 has no interfaces? [ 282.959140][ T29] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 282.961889][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.972421][ T29] usb 7-1: config 0 descriptor?? [ 283.148306][T13221] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 283.187083][T13780] usb 7-1: USB disconnect, device number 17 [ 283.188919][ T39] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 283.208453][ T39] usb 13-1: device descriptor read/8, error -71 [ 283.319565][T17514] cgroup2: Unknown parameter 'euid' [ 283.448695][ T39] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 283.469168][ T39] usb 13-1: device descriptor read/8, error -71 [ 283.580989][ T39] usb usb13-port1: unable to enumerate USB device [ 283.658962][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 283.709055][T17531] __nla_validate_parse: 10 callbacks suppressed [ 283.709068][T17531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3103'. [ 283.715007][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3103'. [ 283.749392][T17530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3103'. [ 283.753344][T17530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3103'. [ 283.955094][T17536] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3105'. [ 284.000093][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 284.140467][T17546] lo: entered promiscuous mode [ 284.173847][T13221] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 284.266056][T17549] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.3109'. [ 284.417858][T17554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3111'. [ 284.422896][T17554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3111'. [ 284.425934][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3111'. [ 284.469541][T17554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3111'. [ 284.515963][ T40] audit: type=1400 audit(2000524653.615:1292): avc: denied { unmount } for pid=15933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 284.555422][T17561] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 284.575494][T17561] nvme_fabrics: missing parameter 'transport=%s' [ 284.577576][T17561] nvme_fabrics: missing parameter 'nqn=%s' [ 284.681138][ T46] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 284.700705][ T40] audit: type=1326 audit(2000524653.794:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17575 comm="syz.3.3118" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a6039bf79 code=0x0 [ 284.865416][T17595] netlink: 'syz.2.3122': attribute type 2 has an invalid length. [ 284.870872][T17594] SELinux: ebitmap: start bit 0 comes after start bit 384 [ 284.874055][T17595] !: entered promiscuous mode [ 284.877890][T17595] netlink: 'syz.2.3122': attribute type 2 has an invalid length. [ 284.880459][T17594] SELinux: failed to load policy [ 284.908394][T17594] ptrace attach of "/syz-executor exec"[17598] was attempted by "/syz-executor exec"[17594] [ 284.923885][T17604] fuse: Bad value for 'fd' [ 285.192537][ T58] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 285.713317][T13213] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 286.224227][T13221] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 286.735843][T13213] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 287.158098][T17677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 287.160218][T17677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 287.162187][T17677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 287.247411][T13221] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 287.477515][ T40] audit: type=1400 audit(2000524656.579:1294): avc: denied { map } for pid=17696 comm="syz.8.3136" path="socket:[83026]" dev="sockfs" ino=83026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 287.757427][T13221] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 287.829545][T17709] 9p: Unknown uid 00000000004294967295 [ 288.000840][T17725] input: syz1 as /devices/virtual/input/input40 [ 288.099959][T17740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.233279][T17754] 8021q: VLANs not supported on sit0 [ 288.238255][ T5992] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 288.268707][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 288.398595][ T5992] usb 7-1: Using ep0 maxpacket: 8 [ 288.401733][ T5992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.405151][ T5992] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 288.406194][ T40] audit: type=1400 audit(2000524657.497:1295): avc: denied { map } for pid=17778 comm="syz.3.3152" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 288.407964][ T5992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.409216][ T5936] Bluetooth: hci3: command 0x0406 tx timeout [ 288.413046][ T5992] usb 7-1: config 0 descriptor?? [ 288.416425][ T40] audit: type=1400 audit(2000524657.497:1296): avc: denied { ioctl } for pid=17778 comm="syz.3.3152" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x5006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 288.508797][T13780] usb 13-1: new full-speed USB device number 24 using dummy_hcd [ 288.625496][ T5992] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 288.681822][T17801] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 288.683264][T13780] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 288.686554][T13780] usb 13-1: can't read configurations, error -71 [ 288.688623][T17801] ALSA: mixer_oss: invalid OSS volume '0x0000000000000000' [ 288.789832][T13222] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 288.810992][T17822] __nla_validate_parse: 8 callbacks suppressed [ 288.811011][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 288.837795][T17819] overlayfs: conflicting options: nfs_export=on,index=off [ 289.084673][ T8370] usb 7-1: USB disconnect, device number 18 [ 289.220636][ T5936] Bluetooth: hci0: command 0x0406 tx timeout [ 289.220658][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 289.300572][T13213] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 289.752222][T17857] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 289.755732][ T40] audit: type=1400 audit(2000524658.844:1297): avc: denied { relabelto } for pid=17856 comm="syz.2.3162" name="505" dev="tmpfs" ino=2745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 289.765738][ T40] audit: type=1400 audit(2000524658.844:1298): avc: denied { associate } for pid=17856 comm="syz.2.3162" name="505" dev="tmpfs" ino=2745 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 289.790641][ T40] audit: type=1400 audit(2000524658.874:1299): avc: denied { remove_name } for pid=11039 comm="syz-executor" name="file0" dev="tmpfs" ino=2750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 289.799879][ T40] audit: type=1400 audit(2000524658.884:1300): avc: denied { rmdir } for pid=11039 comm="syz-executor" name="505" dev="tmpfs" ino=2745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 289.826249][T13221] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 290.194986][T17882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3168'. [ 290.333490][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 290.843584][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 291.491151][T17940] .`: (slave vlan3): Opening slave failed [ 291.716484][T17952] mkiss: ax0: crc mode is auto. [ 291.740167][T17965] nfs: Unknown parameter '/proc/sysvipc/shm' [ 291.750143][ T40] audit: type=1400 audit(2000524660.830:1301): avc: denied { unmount } for pid=13661 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 291.861785][T17972] netlink: 'syz.3.3186': attribute type 10 has an invalid length. [ 291.865790][T13221] net_ratelimit: 1 callbacks suppressed [ 291.865804][T13221] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 291.871426][T17972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.876886][T17972] .`: (slave batadv0): Enslaving as an active interface with an up link [ 292.084715][T17982] fuse: Unknown parameter '0000000000000000000500000000000000000000006' [ 292.227099][ T1125] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 292.230192][ T1125] sr 2:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 292.232893][ T1125] sr 2:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 292.236559][ T1125] sr 2:0:0:0: [sr0] tag#0 CDB: ATA command pass through(16) 85 07 42 65 13 cb [ 292.251595][T17987] sp0: Synchronizing with TNC [ 292.260977][T17986] [U] ` [ 292.386349][T13222] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 292.897487][T13222] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 293.397255][T18033] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 293.397389][ T40] audit: type=1400 audit(2000524662.477:1302): avc: denied { getattr } for pid=18031 comm="syz.2.3196" name="/" dev="9p" ino=72614025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 293.408892][T13222] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 293.571679][T18046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3197'. [ 293.919187][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 294.204877][T18103] netlink: 'syz.3.3199': attribute type 10 has an invalid length. [ 294.430531][T13222] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 294.435320][T18125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3204'. [ 294.513672][T18130] kvm: kvm [18127]: vcpu0, guest rIP: 0x540a3 Unhandled RDMSR(0x4000008e) [ 294.533730][T18134] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 294.538750][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3206'. [ 294.584320][T18141] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 294.857701][T18167] SELinux: ebitmap start bit (29548) is not a multiple of the map unit size (64) [ 294.876093][T18167] SELinux: failed to load policy [ 294.941689][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 294.989453][T18189] misc userio: Invalid payload size [ 295.002802][ T5991] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 295.117074][T18207] pim6reg: entered allmulticast mode [ 295.120426][T18207] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3222'. [ 295.130329][T18207] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3222'. [ 295.153490][ T5991] usb 7-1: Using ep0 maxpacket: 8 [ 295.171594][ T5991] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 295.174252][ T5991] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.177321][ T5991] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.180425][ T5991] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.188729][T18211] team0: Device gtp0 is of different type [ 295.201409][ T5991] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.206018][ T5991] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 295.208867][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.451861][T13222] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 295.537019][T18231] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3226'. [ 295.539980][T18231] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3226'. [ 295.594321][T18238] overlay: ./file0 is not a directory [ 295.779607][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3233'. [ 295.974311][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 296.002209][T18281] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 296.012798][ T8370] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 296.070227][ T29] usb 7-1: USB disconnect, device number 19 [ 296.169379][T18299] netlink: 'syz.3.3242': attribute type 1 has an invalid length. [ 296.173313][ T8370] usb 13-1: Using ep0 maxpacket: 32 [ 296.177022][ T8370] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 296.182837][ T8370] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 296.189164][ T8370] usb 13-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 296.193237][ T8370] usb 13-1: Product: syz [ 296.193716][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3242'. [ 296.194642][ T8370] usb 13-1: Manufacturer: syz [ 296.198910][ T8370] usb 13-1: SerialNumber: syz [ 296.200997][T18299] x_tables: duplicate underflow at hook 1 [ 296.211918][ T8370] usb 13-1: config 0 descriptor?? [ 296.218903][T18254] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 296.225348][ T8370] hub 13-1:0.0: bad descriptor, ignoring hub [ 296.227275][ T8370] hub 13-1:0.0: probe with driver hub failed with error -5 [ 296.446547][T18357] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3247'. [ 296.465634][T18357] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 296.470277][T18357] bond3 (unregistering): Released all slaves [ 296.494447][T13222] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 296.534568][ T5992] usb 13-1: USB disconnect, device number 26 [ 296.831074][T18454] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 296.833915][T18454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 296.842142][T18454] vhci_hcd vhci_hcd.0: Device attached [ 296.850993][T18454] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 296.853806][T18454] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 296.860761][T18454] vhci_hcd vhci_hcd.0: Device attached [ 297.004780][T13213] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 297.044922][T18454] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(10) [ 297.047628][T18454] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 297.053543][T18454] vhci_hcd vhci_hcd.0: Device attached [ 297.069856][T18470] bond3: option fail_over_mac: invalid value (10) [ 297.074375][T18470] bond3 (unregistering): Released all slaves [ 297.104771][ T29] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 297.124960][T18537] overlay: filesystem on ./bus is read-only [ 297.126190][ T40] audit: type=1400 audit(2000524666.200:1303): avc: denied { mounton } for pid=18536 comm="syz.8.3256" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 297.222929][T18542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3257'. [ 297.525593][ T1169] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 297.651874][T18468] vhci_hcd: connection closed [ 297.652026][T18458] vhci_hcd: connection closed [ 297.652096][T18455] vhci_hcd: connection reset by peer [ 297.652286][ T1169] vhci_hcd vhci_hcd.2: stop threads [ 297.652310][ T1169] vhci_hcd vhci_hcd.2: release socket [ 297.655193][ T1169] vhci_hcd vhci_hcd.2: disconnect device [ 297.665786][ T1169] vhci_hcd vhci_hcd.2: stop threads [ 297.669562][ T1169] vhci_hcd vhci_hcd.2: release socket [ 297.671428][ T1169] vhci_hcd vhci_hcd.2: disconnect device [ 297.673480][ T1169] vhci_hcd vhci_hcd.2: stop threads [ 297.675195][ T1169] vhci_hcd vhci_hcd.2: release socket [ 297.678489][ T1169] vhci_hcd vhci_hcd.2: disconnect device [ 298.046447][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 298.497414][ T5991] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 298.560022][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 298.685625][ T5991] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.690667][ T5991] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.693790][ T5991] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.701392][ T5991] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.705776][ T5991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.717622][ T5991] usb 7-1: config 0 descriptor?? [ 299.068962][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 299.142736][ T5991] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 299.455141][T18616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3266'. [ 299.583867][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 299.888483][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.893982][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.899073][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.905844][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.910095][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.971883][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3270'. [ 300.094790][T18621] chnl_net:caif_netlink_parms(): no params data found [ 300.100499][ T1169] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 300.169303][T18621] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.175688][T18621] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.178963][T18621] bridge_slave_0: entered allmulticast mode [ 300.183585][T18621] bridge_slave_0: entered promiscuous mode [ 300.188641][T18621] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.192014][T18621] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.195322][T18621] bridge_slave_1: entered allmulticast mode [ 300.199317][T18621] bridge_slave_1: entered promiscuous mode [ 300.227262][T18621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.235167][T18621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.264279][T18621] team0: Port device team_slave_0 added [ 300.268954][T18621] team0: Port device team_slave_1 added [ 300.294093][T18621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.297046][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.308126][T18621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.314236][T18621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.317107][T18621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.327790][T18621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.370985][T18621] hsr_slave_0: entered promiscuous mode [ 300.374265][T18621] hsr_slave_1: entered promiscuous mode [ 300.377348][T18621] debugfs: 'hsr0' already exists in 'hsr' [ 300.379873][T18621] Cannot create hsr debugfs directory [ 300.571187][T11325] usb 7-1: reset high-speed USB device number 20 using dummy_hcd [ 300.611678][T13213] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 300.625455][T18905] syzkaller0: entered promiscuous mode [ 300.627812][T18905] syzkaller0: entered allmulticast mode [ 300.858646][T18927] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20003 [ 301.010422][ T63] Bluetooth: hci3: Unknown advertising packet type: 0x18 [ 301.058629][T18621] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 301.068105][T18621] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 301.090586][T18621] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 301.095655][T18621] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 301.121598][T13213] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 301.166558][T18621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.176563][T18621] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.182192][T13235] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.184706][T13235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.197750][T13213] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.200797][T13213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.240079][T18621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.354429][T18621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.377253][T18621] veth0_vlan: entered promiscuous mode [ 301.386015][T18621] veth1_vlan: entered promiscuous mode [ 301.413127][T18621] veth0_macvtap: entered promiscuous mode [ 301.420333][T18621] veth1_macvtap: entered promiscuous mode [ 301.436030][T18621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.443102][ T74] usb 13-1: new full-speed USB device number 27 using dummy_hcd [ 301.448603][T18621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.461042][ T1169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.465313][ T1169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.487412][ T1169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.491561][ T1169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.535612][T13223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.544461][T13223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.560500][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.566574][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.614515][ T74] usb 13-1: not running at top speed; connect to a high speed hub [ 301.623782][ T74] usb 13-1: config 9 has an invalid interface number: 48 but max is 2 [ 301.626974][ T74] usb 13-1: config 9 has an invalid interface number: 90 but max is 2 [ 301.629499][ T74] usb 13-1: config 9 has an invalid interface number: 11 but max is 2 [ 301.633445][ T1169] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 301.642364][ T74] usb 13-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 301.647113][ T74] usb 13-1: config 9 has no interface number 0 [ 301.650536][ T74] usb 13-1: config 9 has no interface number 1 [ 301.652677][ T74] usb 13-1: config 9 has no interface number 2 [ 301.654698][ T74] usb 13-1: config 9 interface 48 altsetting 6 endpoint 0x5 has invalid maxpacket 983, setting to 64 [ 301.658610][ T74] usb 13-1: config 9 interface 48 altsetting 6 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 301.659811][ T40] audit: type=1400 audit(2000524670.723:1304): avc: denied { mounton } for pid=19024 comm="syz.1.3269" path="/proc/3/cgroup" dev="proc" ino=85530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 301.662191][ T74] usb 13-1: config 9 interface 90 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 301.678906][ T40] audit: type=1400 audit(2000524670.733:1305): avc: denied { remount } for pid=19024 comm="syz.1.3269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 301.707002][ T74] usb 13-1: config 9 interface 11 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 301.710376][ T74] usb 13-1: config 9 interface 11 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 301.719636][ T74] usb 13-1: config 9 interface 11 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 301.723195][ T74] usb 13-1: config 9 interface 11 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 301.726509][ T74] usb 13-1: config 9 interface 11 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 301.729888][ T74] usb 13-1: config 9 interface 11 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 301.736823][ T74] usb 13-1: config 9 interface 11 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 301.740901][ T74] usb 13-1: config 9 interface 11 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 301.740960][ T8370] IPVS: starting estimator thread 0... [ 301.744754][ T74] usb 13-1: config 9 interface 11 altsetting 4 has 11 endpoint descriptors, different from the interface descriptor's value: 12 [ 301.751346][ T74] usb 13-1: config 9 interface 48 has no altsetting 0 [ 301.754211][ T74] usb 13-1: config 9 interface 90 has no altsetting 0 [ 301.756402][ T74] usb 13-1: config 9 interface 11 has no altsetting 0 [ 301.760696][ T74] usb 13-1: Dual-Role OTG device on HNP port [ 301.763098][ T74] usb 13-1: New USB device found, idVendor=1a61, idProduct=3410, bcdDevice=dd.2a [ 301.766279][ T74] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.768752][ T74] usb 13-1: Product: 錍ㅉ턯꿚謧哄螋㮼糐ദ仡浰瀒ৰ邏ﬣ茢俌쭳ꈦ择㷙ᘗ킾㣹ᣅ峝␸舛᧝磊ᇮ舚ⳇ㴦ឃ廊窬⚂᫳ౘ㎨镅聞糾뭆蘁ɘ⸤ꙮ髅ꚛ〨簖蘋쫤禰„궫뜻〖졭ꯘ類륂⁝㺓翼귊뚩鲱뤶뫠⏊癡쪶瀭綧瞯퐓嗒索㥜望Ꝋ釮卶ꭠ팅亠딢挭 [ 301.779212][ T74] usb 13-1: Manufacturer: 埉螡䈟餐”稕瑈䒦뉢ॸꏽ [ 301.781869][ T74] usb 13-1: SerialNumber: ⟱셂茀Ꝅｎ섌糒鎛沥䇻ઍ᾵᦬쿅弸ວ祟㪫醜폠辮稹熭ꬰ漇薫㇇輼隶✿뮑ꬪ䪾彪뱕箝 [ 301.853489][T19035] IPVS: using max 45 ests per chain, 108000 per kthread [ 301.953365][ T63] Bluetooth: hci1: command tx timeout [ 301.958374][T19069] batadv_slave_1: entered promiscuous mode [ 301.960804][T19069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3287'. [ 301.966870][ T40] audit: type=1400 audit(2000524671.032:1306): avc: denied { read } for pid=19064 comm="syz.3.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 301.967685][T19065] SELinux: Context /dev/kvm is not valid (left unmapped). [ 301.980708][ T40] audit: type=1400 audit(2000524671.042:1307): avc: denied { relabelto } for pid=19064 comm="syz.3.3288" name="swradio6" dev="devtmpfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="/dev/kvm" [ 301.991498][ T40] audit: type=1400 audit(2000524671.042:1308): avc: denied { associate } for pid=19064 comm="syz.3.3288" name="swradio6" dev="devtmpfs" ino=1057 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="/dev/kvm" [ 302.006582][ T74] ti_usb_3410_5052 13-1:9.48: required endpoints missing [ 302.013903][ T74] ti_usb_3410_5052 13-1:9.90: required endpoints missing [ 302.021236][T19069] team0 (unregistering): Port device team_slave_1 removed [ 302.023787][ T5991] usb 7-1: USB disconnect, device number 20 [ 302.045270][ T74] ti_usb_3410_5052 13-1:9.11: required endpoints missing [ 302.073104][ T74] usb 13-1: USB disconnect, device number 27 [ 302.096536][T19067] batadv_slave_1: left promiscuous mode [ 302.160226][ T40] audit: type=1400 audit(2000524671.222:1309): avc: denied { accept } for pid=19114 comm="syz.2.3291" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 302.163901][ T1169] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 302.237863][T19126] overlayfs: failed to resolve './file1': -2 [ 302.263821][ T29] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 302.285290][T19132] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 302.440025][T19188] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 302.569525][T19220] vxfs: unable to read disk superblock at 1 [ 302.573073][T19220] vxfs: unable to read disk superblock at 8 [ 302.584084][T19220] vxfs: can't find superblock. [ 302.591751][T19220] XFS (loop8): SB validate failed with error -5. [ 302.715615][T13223] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 303.206481][T19284] netlink: 'syz.1.3304': attribute type 4 has an invalid length. [ 303.206477][T19283] netlink: 'syz.1.3304': attribute type 4 has an invalid length. [ 303.228513][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 303.458890][ T63] Bluetooth: hci1: unexpected subevent 0x19 length: 24 < 28 [ 303.487127][T19308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3308'. [ 303.493627][ T40] audit: type=1400 audit(2000524672.550:1310): avc: denied { shutdown } for pid=19306 comm="syz.1.3308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 303.736051][ T1169] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 304.046133][ T63] Bluetooth: hci1: command tx timeout [ 304.246492][T13223] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 304.517655][ T40] audit: type=1400 audit(2000524673.588:1311): avc: denied { setattr } for pid=19357 comm="syz.8.3317" name="RAW" dev="sockfs" ino=87539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 304.570425][ T63] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 304.583273][T19362] program syz.8.3318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.587270][T19362] ata1.00: invalid transfer count 0 [ 304.735149][T19372] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.3321'. [ 304.757380][ T46] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 304.818068][T19379] xt_recent: Unsupported userspace flags (000000b2) [ 304.850139][T19381] openvswitch: netlink: IP tunnel TTL not specified. [ 304.910120][T19386] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 305.106899][T19400] ptrace attach of "/syz-executor exec"[13661] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 305.108191][T19400] fuse: Unknown parameter 'o1؟' [ 305.268010][T13213] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 305.273103][T19411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3333'. [ 305.273111][T19412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3333'. [ 305.311602][T19411] vcan0: entered allmulticast mode [ 305.319401][T19412] vcan1: entered allmulticast mode [ 305.449033][ T40] audit: type=1326 audit(2000524674.507:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19434 comm="syz.3.3338" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6039bf79 code=0x7ffc0000 [ 305.455935][ T40] audit: type=1326 audit(2000524674.517:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19434 comm="syz.3.3338" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6039bf79 code=0x7ffc0000 [ 305.458096][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3338'. [ 305.463356][ T40] audit: type=1326 audit(2000524674.517:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19434 comm="syz.3.3338" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0a6039bf79 code=0x7ffc0000 [ 305.466178][T19435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3338'. [ 305.474659][ T40] audit: type=1326 audit(2000524674.517:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19434 comm="syz.3.3338" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6039bf79 code=0x7ffc0000 [ 305.484495][ T40] audit: type=1326 audit(2000524674.517:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19434 comm="syz.3.3338" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6039bf79 code=0x7ffc0000 [ 305.492340][ T40] audit: type=1326 audit(2000524674.517:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19436 comm="syz.3.3338" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0a6035c84e code=0x7ffc0000 [ 305.492366][ T40] audit: type=1326 audit(2000524674.517:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19434 comm="syz.3.3338" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a6039bf79 code=0x7ffc0000 [ 305.538681][T19443] tipc: Started in network mode [ 305.538700][T19443] tipc: Node identity ac1414aa, cluster identity 4711 [ 305.539218][T19443] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 305.559834][T19443] tipc: Enabled bearer , priority 10 [ 305.678688][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 305.773877][T19453] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 306.120293][ T63] Bluetooth: hci1: command tx timeout [ 306.524322][T19475] loop6: detected capacity change from 0 to 524288000 [ 306.601057][T19475] loop6: detected capacity change from 524288000 to 0 [ 306.602232][ C2] blk_print_req_error: 10 callbacks suppressed [ 306.602249][ C2] invalid error, dev loop6, sector 524287984 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 306.676559][T19486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3349'. [ 306.707551][ T8370] tipc: Node number set to 2886997162 [ 306.715650][T19486] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19486 comm=syz.3.3349 [ 306.726788][T19486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3349'. [ 306.733735][T19486] xfrm1: entered promiscuous mode [ 306.735411][T19486] xfrm1: entered allmulticast mode [ 306.795086][T19562] gfs2: error -5 reading superblock [ 306.807786][T19567] netlink: 'syz.2.3353': attribute type 1 has an invalid length. [ 306.835789][T19567] bond6: entered promiscuous mode [ 306.837665][T19567] 8021q: adding VLAN 0 to HW filter on device bond6 [ 306.858046][T19567] 8021q: adding VLAN 0 to HW filter on device bond6 [ 306.861980][T19567] bond6: (slave xfrm2): The slave device specified does not support setting the MAC address [ 306.866496][T19567] bond6: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 306.873067][T19567] bond6: (slave xfrm2): making interface the new active one [ 306.875569][T19567] xfrm2: entered promiscuous mode [ 306.878046][T19567] bond6: (slave xfrm2): Enslaving as an active interface with an up link [ 307.245487][ T8337] Process accounting resumed [ 307.267168][T19648] program syz.2.3364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.324530][ T63] Bluetooth: hci2: hardware error 0x4f [ 307.332666][T13223] net_ratelimit: 11 callbacks suppressed [ 307.332682][T13223] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 307.421082][T19653] Process accounting resumed [ 307.544771][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 307.544783][ T40] audit: type=1400 audit(2000524676.604:1355): avc: denied { read } for pid=19691 comm="syz.2.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 307.621607][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 307.684389][T19727] netlink: 'syz.8.3381': attribute type 17 has an invalid length. [ 307.687870][T19727] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3381'. [ 307.694140][T19727] macvtap0: entered allmulticast mode [ 307.696453][T19727] veth0_macvtap: entered allmulticast mode [ 307.703444][T19727] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 307.718340][T19727] netlink: 'syz.8.3381': attribute type 1 has an invalid length. [ 307.731067][T19727] 8021q: adding VLAN 0 to HW filter on device bond12 [ 307.763579][T19727] bond12: (slave veth7): Enslaving as an active interface with a down link [ 307.773416][T19727] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 307.775907][T19727] bond12: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 307.815875][T19826] netlink: 'syz.2.3382': attribute type 3 has an invalid length. [ 307.818313][T19826] netlink: 'syz.2.3382': attribute type 1 has an invalid length. [ 307.820724][T19826] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3382'. [ 307.856727][T13222] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 308.047110][ T40] audit: type=1400 audit(2000524677.103:1356): avc: denied { listen } for pid=19838 comm="syz.3.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 308.047842][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3384'. [ 308.058761][T19855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.162306][T13779] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 308.202524][ T5936] Bluetooth: hci1: command tx timeout [ 308.347063][T13779] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 308.350312][T13779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.353427][T13779] usb 6-1: Product: syz [ 308.355224][T13779] usb 6-1: Manufacturer: syz [ 308.357164][T13779] usb 6-1: SerialNumber: syz [ 308.363364][ T46] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 308.365822][T13779] usb 6-1: config 0 descriptor?? [ 308.580388][T19895] binder: BINDER_SET_CONTEXT_MGR already set [ 308.582414][T19895] binder: 19841:19895 ioctl 4018620d 200000004a80 returned -16 [ 308.582742][T19896] binder_alloc: 19841: binder_alloc_buf, no vma [ 308.600497][T13779] usb 6-1: USB disconnect, device number 15 [ 308.683107][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 308.707442][T19921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29037 sclass=netlink_route_socket pid=19921 comm=syz.1.3393 [ 308.883358][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 308.907540][T19929] netlink: 'syz.3.3395': attribute type 3 has an invalid length. [ 308.910080][T19929] netlink: 'syz.3.3395': attribute type 3 has an invalid length. [ 309.106405][T19947] batman_adv: batadv0: Adding interface: dummy0 [ 309.108227][T19947] batman_adv: batadv0: Interface activated: dummy0 [ 309.117465][T19947] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.216484][T19967] syz.8.3404: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 309.221137][T19967] CPU: 0 UID: 0 PID: 19967 Comm: syz.8.3404 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.221157][T19967] Tainted: [L]=SOFTLOCKUP [ 309.221162][T19967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 309.221168][T19967] Call Trace: [ 309.221174][T19967] [ 309.221179][T19967] dump_stack_lvl+0x100/0x190 [ 309.221219][T19967] warn_alloc.cold+0x95/0x1c1 [ 309.221240][T19967] ? __pfx_warn_alloc+0x10/0x10 [ 309.221269][T19967] ? kasan_save_stack+0x3f/0x50 [ 309.221279][T19967] ? kasan_save_stack+0x30/0x50 [ 309.221289][T19967] ? kasan_save_track+0x14/0x30 [ 309.221300][T19967] ? xskq_create+0xfb/0x1d0 [ 309.221328][T19967] __vmalloc_node_range_noprof+0x1252/0x1530 [ 309.221349][T19967] ? xskq_create+0xfb/0x1d0 [ 309.221369][T19967] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 309.221393][T19967] ? xskq_create+0xfb/0x1d0 [ 309.221408][T19967] vmalloc_user_noprof+0x9e/0xe0 [ 309.221424][T19967] ? xskq_create+0xfb/0x1d0 [ 309.221440][T19967] xskq_create+0xfb/0x1d0 [ 309.221456][T19967] xsk_setsockopt+0x725/0xa90 [ 309.221471][T19967] ? __pfx_xsk_setsockopt+0x10/0x10 [ 309.221485][T19967] ? find_held_lock+0x2b/0x80 [ 309.221496][T19967] ? __fget_files+0x215/0x3d0 [ 309.221511][T19967] ? selinux_socket_setsockopt+0x6a/0x80 [ 309.221534][T19967] ? __pfx_xsk_setsockopt+0x10/0x10 [ 309.221550][T19967] do_sock_setsockopt+0xf3/0x1d0 [ 309.221568][T19967] __sys_setsockopt+0x195/0x220 [ 309.221584][T19967] __x64_sys_setsockopt+0xbd/0x160 [ 309.221597][T19967] ? do_syscall_64+0x95/0xf80 [ 309.221607][T19967] ? lockdep_hardirqs_on+0x78/0x100 [ 309.221624][T19967] do_syscall_64+0x106/0xf80 [ 309.221633][T19967] ? clear_bhb_loop+0x40/0x90 [ 309.221646][T19967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.221658][T19967] RIP: 0033:0x7fc46839bf79 [ 309.221669][T19967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.221680][T19967] RSP: 002b:00007fc469234028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 309.221690][T19967] RAX: ffffffffffffffda RBX: 00007fc468615fa0 RCX: 00007fc46839bf79 [ 309.221698][T19967] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 309.221704][T19967] RBP: 00007fc4684327e0 R08: 0000000000000004 R09: 0000000000000000 [ 309.221710][T19967] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.221717][T19967] R13: 00007fc468616038 R14: 00007fc468615fa0 R15: 00007ffe1cedb3f8 [ 309.221731][T19967] [ 309.221736][T19967] Mem-Info: [ 309.248123][T19969] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 309.249975][T19967] active_anon:10484 inactive_anon:42299 isolated_anon:0 [ 309.249975][T19967] active_file:6443 inactive_file:14584 isolated_file:0 [ 309.249975][T19967] unevictable:1768 dirty:63 writeback:0 [ 309.249975][T19967] slab_reclaimable:8523 slab_unreclaimable:79965 [ 309.249975][T19967] mapped:28653 shmem:41903 pagetables:4588 [ 309.249975][T19967] sec_pagetables:317 bounce:0 [ 309.249975][T19967] kernel_misc_reclaimable:0 [ 309.249975][T19967] free:412397 free_pcp:24803 free_cma:0 [ 309.251465][ T40] audit: type=1400 audit(2000524678.301:1357): avc: denied { relabelto } for pid=19956 comm="syz.1.3402" name="27" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 309.261225][T19967] Node 0 active_anon:41172kB inactive_anon:169192kB active_file:24216kB inactive_file:58208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37016kB dirty:244kB writeback:0kB shmem:163440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17152kB pagetables:16872kB sec_pagetables:1268kB all_unreclaimable? no Balloon:0kB [ 309.274046][ T40] audit: type=1400 audit(2000524678.301:1358): avc: denied { associate } for pid=19956 comm="syz.1.3402" name="27" dev="tmpfs" ino=157 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:clock_device_t:s0" [ 309.275933][T19967] Node 1 active_anon:888kB inactive_anon:4kB active_file:1556kB inactive_file:128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:77844kB dirty:8kB writeback:0kB shmem:4420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:1356kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 309.364433][T19969] netlink: 'syz.1.3402': attribute type 3 has an invalid length. [ 309.366885][T19969] netlink: 'syz.1.3402': attribute type 1 has an invalid length. [ 309.372185][T19967] Node 0 DMA free:6944kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:208kB local_pcp:104kB free_cma:0kB [ 309.382147][T19967] lowmem_reserve[]: 0 1232 1232 1232 1232 [ 309.384393][T19967] Node 0 DMA32 free:240772kB boost:0kB min:27484kB low:34352kB high:41220kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58160kB inactive_anon:169192kB active_file:24216kB inactive_file:58208kB unevictable:3536kB writepending:244kB zspages:2184kB present:2080628kB managed:1262536kB mlocked:0kB bounce:0kB free_pcp:47232kB local_pcp:15796kB free_cma:0kB [ 309.387157][T19957] syzkaller0: entered promiscuous mode [ 309.397306][T19967] lowmem_reserve[]: 0 0 0 0 0 [ 309.397794][T13222] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 309.398883][T19967] Node 1 Normal free:1386104kB boost:89440kB min:129196kB low:139132kB high:149068kB reserved_highatomic:0KB free_highatomic:0KB active_anon:888kB inactive_anon:4kB active_file:1556kB inactive_file:128kB unevictable:3536kB writepending:8kB zspages:3380kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:50316kB local_pcp:160kB free_cma:0kB [ 309.404118][ T63] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 309.414508][T19957] syzkaller0: entered allmulticast mode [ 309.426126][T19967] lowmem_reserve[]: 0 0 0 0 0 [ 309.435064][T19967] Node 0 DMA: 3*4kB (U) 2*8kB (U) 1*16kB (U) 2*32kB (U) 3*64kB (U) 4*128kB (U) 0*256kB 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 0*4096kB = 6956kB [ 309.439820][T19967] Node 0 DMA32: 2908*4kB (UME) 2945*8kB (UME) 1879*16kB (UE) 175*32kB (UE) 166*64kB (UME) 151*128kB (UME) 152*256kB (UME) 99*512kB (U) 35*1024kB (U) 3*2048kB (U) 0*4096kB = 232392kB [ 309.445811][T19967] Node 1 Normal: 288*4kB (UME) 268*8kB (UME) 282*16kB (UME) 364*32kB (UME) 308*64kB (UME) 215*128kB (UME) 204*256kB (UME) 169*512kB (UM) 163*1024kB (U) 13*2048kB (U) 241*4096kB (U) = 1386112kB [ 309.452843][T19967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.456202][T19967] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 309.459723][T19967] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.463519][T19967] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 309.466821][T19967] 69152 total pagecache pages [ 309.468373][T19967] 118 pages in swap cache [ 309.469750][T19967] Free swap = 81256kB [ 309.473454][T19967] Total swap = 124996kB [ 309.476199][T19967] 1048443 pages RAM [ 309.477504][T19967] 0 pages HighMem/MovableOnly [ 309.480000][T19967] 283498 pages reserved [ 309.480271][T19992] No control pipe specified [ 309.481380][T19967] 0 pages cma reserved [ 309.716535][T20027] netlink: 'syz.8.3413': attribute type 9 has an invalid length. [ 309.734564][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 309.751472][T20035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20035 comm=syz.8.3414 [ 309.791344][ T40] audit: type=1400 audit(2000524678.841:1359): avc: denied { watch watch_reads } for pid=20037 comm="syz.1.3415" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 309.803177][T20043] ipt_rpfilter: unknown options [ 309.836737][T20049] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 309.838933][T20049] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 309.841630][T20049] vhci_hcd vhci_hcd.0: Device attached [ 309.846132][T20049] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 309.848315][T20049] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 309.850879][T20049] vhci_hcd vhci_hcd.0: Device attached [ 309.857371][T20049] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 309.859546][T20049] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 309.862991][T20049] vhci_hcd vhci_hcd.0: Device attached [ 309.865333][T20052] vhci_hcd: connection closed [ 309.866972][T20050] vhci_hcd: connection closed [ 309.870285][T20056] vhci_hcd: connection closed [ 309.874763][T13235] vhci_hcd vhci_hcd.1: stop threads [ 309.878060][T13235] vhci_hcd vhci_hcd.1: release socket [ 309.879918][T13235] vhci_hcd vhci_hcd.1: disconnect device [ 309.882568][T13235] vhci_hcd vhci_hcd.1: stop threads [ 309.884362][T13235] vhci_hcd vhci_hcd.1: release socket [ 309.886841][T13235] vhci_hcd vhci_hcd.1: disconnect device [ 309.889456][T13235] vhci_hcd vhci_hcd.1: stop threads [ 309.891218][T13235] vhci_hcd vhci_hcd.1: release socket [ 309.893042][T13235] vhci_hcd vhci_hcd.1: disconnect device [ 309.940079][ T40] audit: type=1804 audit(2000524678.990:1360): pid=20066 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.3419" name="/newroot/570/file0" dev="tmpfs" ino=3038 res=1 errno=0 [ 310.220142][T20078] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 310.679754][T20137] xfrm0 speed is unknown, defaulting to 1000 [ 310.681653][T20137] xfrm0 speed is unknown, defaulting to 1000 [ 310.684597][T20137] xfrm0 speed is unknown, defaulting to 1000 [ 310.693102][T20137] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 310.707825][T20137] xfrm0 speed is unknown, defaulting to 1000 [ 310.711505][T20137] xfrm0 speed is unknown, defaulting to 1000 [ 310.714270][T20137] xfrm0 speed is unknown, defaulting to 1000 [ 310.717032][T20137] xfrm0 speed is unknown, defaulting to 1000 [ 310.719506][T20137] xfrm0 speed is unknown, defaulting to 1000 [ 310.953470][ T40] audit: type=1400 audit(2000524680.009:1361): avc: denied { write } for pid=20132 comm="syz.1.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 310.955393][T20156] __nla_validate_parse: 6 callbacks suppressed [ 310.955410][T20156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3432'. [ 310.996411][ T74] usb 13-1: new high-speed USB device number 28 using dummy_hcd [ 311.146619][ T74] usb 13-1: Using ep0 maxpacket: 8 [ 311.150639][ T74] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 311.153184][ T74] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 311.156419][ T74] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 311.159956][ T74] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.163840][ T74] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 311.167491][ T74] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 311.171644][ T74] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 311.176831][ T74] usb 13-1: config 168 interface 0 has no altsetting 0 [ 311.179785][ T74] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 311.182179][ T74] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 311.185762][ T74] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 311.189389][ T74] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.193246][ T74] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 311.196820][ T74] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 311.200110][ T74] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 311.204430][ T74] usb 13-1: config 168 interface 0 has no altsetting 0 [ 311.208706][ T74] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 311.211126][ T74] usb 13-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 311.214645][ T74] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 311.218394][ T74] usb 13-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.222223][ T74] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 311.225789][ T74] usb 13-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid wMaxPacketSize 0 [ 311.229037][ T74] usb 13-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 311.233316][ T74] usb 13-1: config 168 interface 0 has no altsetting 0 [ 311.237950][ T74] usb 13-1: string descriptor 0 read error: -22 [ 311.239950][ T74] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 311.242815][ T74] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.254306][ T74] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 311.505770][T20144] QAT: Device 2 not found [ 311.577192][ T5936] Bluetooth: hci1: command 0x0405 tx timeout [ 311.587946][T20179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3438'. [ 311.621971][T20179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3438'. [ 311.793901][T20179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.825751][ T74] usb 13-1: USB disconnect, device number 28 [ 311.856105][ C2] ata1: illegal qc_active transition (00000000->00000001) [ 311.989188][T20213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3440'. [ 312.163436][ T40] audit: type=1400 audit(2000524681.217:1362): avc: denied { ioctl } for pid=20225 comm="syz.2.3442" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 312.182066][ T1115] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 312.186590][ T1115] ata1.00: configured for UDMA/100 [ 312.349624][T20249] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 312.369244][T20275] Cannot find add_set index 65532 as target [ 312.503010][T13222] net_ratelimit: 7 callbacks suppressed [ 312.503022][T13222] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 312.844911][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.848997][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 312.861829][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.869173][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.875405][ T5936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.878357][ T5936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.915813][T20426] xfrm0 speed is unknown, defaulting to 1000 [ 312.969377][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3460'. [ 312.973367][T20479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3460'. [ 313.023940][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 313.047411][T20426] chnl_net:caif_netlink_parms(): no params data found [ 313.118531][T20426] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.121749][T20426] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.124844][T20426] bridge_slave_0: entered allmulticast mode [ 313.127601][T20426] bridge_slave_0: entered promiscuous mode [ 313.131228][T20426] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.133531][T20426] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.135927][T20426] bridge_slave_1: entered allmulticast mode [ 313.138545][T20426] bridge_slave_1: entered promiscuous mode [ 313.155730][T20426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.156874][T20577] vhci_hcd vhci_hcd.0: port 0 already used [ 313.161374][T20426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.200654][T20426] team0: Port device team_slave_0 added [ 313.204443][T20426] team0: Port device team_slave_1 added [ 313.218312][T20426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.220927][T20426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.228900][T20426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.233334][T20426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.235519][T20426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.244232][T20426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.268072][T20426] hsr_slave_0: entered promiscuous mode [ 313.270558][T20426] hsr_slave_1: entered promiscuous mode [ 313.272966][T20426] debugfs: 'hsr0' already exists in 'hsr' [ 313.274833][T20426] Cannot create hsr debugfs directory [ 313.364382][T20708] pimreg: entered allmulticast mode [ 313.529859][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 313.797203][T20479] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 313.799325][T20479] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 313.802542][T20479] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 313.809482][T20479] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 313.821875][T20479] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 313.823517][T20426] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.825043][T20479] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 313.836823][T20426] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 313.837538][T20479] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 313.845028][T20426] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.857322][T20426] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.869423][T20708] dvmrp1: entered allmulticast mode [ 313.890286][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 313.890692][T20707] pimreg: left allmulticast mode [ 313.895444][T20707] dvmrp1: left allmulticast mode [ 314.013156][T20426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.026383][T20426] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.035103][T13222] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.037945][T13222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.041382][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 314.064329][T13235] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.067259][T13235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.172120][T20426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.321023][T20824] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.330068][T20426] veth0_vlan: entered promiscuous mode [ 314.341145][T20426] veth1_vlan: entered promiscuous mode [ 314.358167][T20426] veth0_macvtap: entered promiscuous mode [ 314.364962][T20426] veth1_macvtap: entered promiscuous mode [ 314.376043][T20426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.387498][T20426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.396589][T13213] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.403728][T13213] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.407578][T13213] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.417553][T13213] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.475466][ T40] audit: type=1326 audit(2000524683.524:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20840 comm="syz.1.3471" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f926ad9bf79 code=0x0 [ 314.520069][T13221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.540937][T13221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.551339][ T1169] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 314.568549][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.576223][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.675464][T20879] efs: cannot read volume header [ 314.721397][T20874] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 314.804670][ T40] audit: type=1400 audit(2000524683.854:1364): avc: denied { getopt } for pid=20891 comm="syz.3.3477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 314.878982][ T40] audit: type=1400 audit(2000524683.924:1365): avc: denied { getopt } for pid=20898 comm="syz.3.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 314.941920][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 314.982393][T20907] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3479'. [ 315.046077][T20919] binder: BINDER_SET_CONTEXT_MGR already set [ 315.048557][T20919] binder: 20918:20919 ioctl 4018620d 200000000480 returned -16 [ 315.053295][T20919] binder: BINDER_SET_CONTEXT_MGR already set [ 315.055277][T20919] binder: 20918:20919 ioctl 4018620d 200000000040 returned -16 [ 315.062783][T13223] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 315.105966][T20930] loop6: detected capacity change from 0 to 2640 [ 315.110569][T20930] buffer_io_error: 10 callbacks suppressed [ 315.110585][T20930] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.116397][T20930] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.118980][T20930] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.121488][T20930] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.125285][T20930] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.128659][T20930] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.133638][T20930] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.140378][T20930] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.144427][T20930] ldm_validate_partition_table(): Disk read failed. [ 315.147324][T20930] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.150704][T20930] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.154276][T20930] Dev loop6: unable to read RDB block 0 [ 315.157548][T20930] loop6: unable to read partition table [ 315.166389][T20939] binder: BINDER_SET_CONTEXT_MGR already set [ 315.168378][T20930] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 315.168973][T20939] binder: 20927:20939 ioctl 4018620d 200000000100 returned -16 [ 315.172508][ T5936] Bluetooth: hci3: command 0x0406 tx timeout [ 315.181373][T20939] binder: 20927:20939 ioctl c0306201 200000000640 returned -22 [ 315.185072][T20939] binder: 20927:20939 ioctl 80885659 200000000400 returned -22 [ 315.198287][ T5337] ldm_validate_partition_table(): Disk read failed. [ 315.200544][ T5337] Dev loop6: unable to read RDB block 0 [ 315.202629][ T5337] loop6: unable to read partition table [ 315.291499][T20948] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3485'. [ 315.295542][T20948] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3485'. [ 315.300891][T20948] netlink: 45 bytes leftover after parsing attributes in process `syz.6.3485'. [ 315.334080][T20956] program syz.1.3486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.378699][T20964] kAFS: No cell specified [ 315.533301][T20961] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 315.584051][T13235] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 315.666020][T21000] support for the xor transformation has been removed. [ 315.822895][ T5936] Bluetooth: hci1: command 0x0405 tx timeout [ 315.875015][T21025] xt_recent: Unsupported userspace flags (000000b2) [ 315.892293][T21025] mkiss: ax0: crc mode is auto. [ 315.903147][ T5936] Bluetooth: hci0: command 0x041b tx timeout [ 316.007805][ T40] audit: type=1400 audit(2000524685.052:1366): avc: denied { shutdown } for pid=21045 comm="syz.3.3500" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.027104][ T40] audit: type=1326 audit(2000524685.072:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21037 comm="syz.6.3498" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c0d19bf79 code=0x0 [ 316.061705][ T63] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 316.078239][ T63] Bluetooth: hci0: ACL packet for unknown connection handle 173 [ 316.080906][T21056] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 316.083566][T21056] overlayfs: failed to set xattr on upper [ 316.085533][T21056] overlayfs: ...falling back to redirect_dir=nofollow. [ 316.087847][T21056] overlayfs: ...falling back to index=off. [ 316.089786][T21056] overlayfs: ...falling back to uuid=null. [ 316.108702][T21056] fuse: Bad value for 'fd' [ 316.216412][T21112] __nla_validate_parse: 1 callbacks suppressed [ 316.216424][T21112] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3507'. [ 316.305215][ T39] usb 13-1: new low-speed USB device number 29 using dummy_hcd [ 316.444140][ T39] usb 13-1: device descriptor read/64, error -71 [ 316.648920][ T6010] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 316.695667][ T39] usb 13-1: new low-speed USB device number 30 using dummy_hcd [ 316.796040][ T6010] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 316.800826][ T6010] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 316.805132][ T6010] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 316.808480][ T6010] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.814791][T21133] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 316.820776][ T6010] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.825068][ T39] usb 13-1: device descriptor read/64, error -71 [ 316.935206][ T39] usb usb13-port1: attempt power cycle [ 317.045315][ T6011] usb 6-1: USB disconnect, device number 16 [ 317.286371][ T39] usb 13-1: new low-speed USB device number 31 using dummy_hcd [ 317.310957][ T39] usb 13-1: device descriptor read/8, error -71 [ 317.558335][T21213] kAFS: unparsable volume name [ 317.561276][ T39] usb 13-1: new low-speed USB device number 32 using dummy_hcd [ 317.596317][ T39] usb 13-1: device descriptor read/8, error -71 [ 317.614577][T21221] smc: net device bond0 applied user defined pnetid SYZ2 [ 317.619400][T21221] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3527'. [ 317.644970][T21221] smc: removing net device bond0 with user defined pnetid SYZ2 [ 317.645254][T13223] net_ratelimit: 25 callbacks suppressed [ 317.645265][T13223] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01 [ 317.656204][T21221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.697064][T21221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.705987][ T39] usb usb13-port1: unable to enumerate USB device [ 317.743297][ T40] audit: type=1400 audit(2000524686.780:1368): avc: denied { execute } for pid=21229 comm="syz.1.3530" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=92490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 317.756097][T21221] bond0 (unregistering): Released all slaves [ 317.920583][T21245] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3533'. [ 317.920629][T21246] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3533'. [ 317.929084][T21245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.975842][ T63] Bluetooth: hci0: command 0x041b tx timeout [ 318.055688][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 318.136426][T21260] geneve1: entered allmulticast mode [ 318.165904][T13222] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01 [ 318.490049][T21285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3540'. bicramfs 8@  /dev/fusefd=0x0000000000000007,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000nl8021548-p%  macvlan0BP)HL  [ 318.701548][T21291] macsec1: entered promiscuous mode ./file0/file0./file0./file0fuse[ 319.097062][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available .file0ރm#։!f۪y&jAcaAC|D9 ^瀘hyfH8fC2l%S`-$mRFZ|H7M[ >Q,EGXIQ5J?V9g4aS3% FhM^6)Q7:L]>]bHYv€r8`)5ݺŦ.=W&W!s.)#>01A'^䮅nȈgQR~UvCD/p%E:b& Zq`CJjM37`xl!Xۀv`6o{FН,gIKL,gPe[^++ǀ bQ=䌸+?0?Znv?60EFy#H5LⅯ unK"qYBfQdiq kxcK]۠y18_MQAİ"Ϸ RUZWlˌ[dtgvb-Bl\[;ΑŏqM?Xdr ]O "?]:n6Sq\R`V U]Q\@|ή)tP3H8dh.gjo9j|:5yX566 ڔX$ogX?q=w2H*xxBaubrx;21#[v#U~vv'1A T!kmzMxqFQe[ԙcS[K@|ZYŸ 'ĩÊU^B0Sd ;޻p) 5G~M(ylU ou&&3+ 1u䦗fCU-mΖQ0qD"^._g|t>ˊ6y#!rb6hԘki$әhN.v^wkXȔn; 6#< ޏ*t\^M9y [qU7f!:; Nѫ.a w*uU@m`K|0e)^ޔ8c~)$Kt^x,Q ;*5'e\ݖ~sq :,D)0RP=1HT{OM,᐀x(P6M4>s~z͡]y"inkP&;t(v>%`lOsZO6qԑ]8G\{E_Q;CLa M&Fn67I4W֘E-&xܥKJR[hCB:n 8ȿAr'J4-g qĕQQo!˱&]sLr])U;:y]-`Bxo rI?ǒvCfJ52 о j$l6Wƹ܃zCީH`cs̄"M3"Bȕ@uqg86ʹaUj`dfSEz֮"IFBxH`"s٠ϠڎrG^ND(7QI4G>ն>@HMUK?.x?L:5dPU:}"BWXYyTՌt*lv2knRsd$MC?ȁ? *$3Ij{ E* r=ڏem!{U4+\<|뻝OLf]EMҋ!~a1x^ڼH&q}ZX6;K9/PHto^FPByF FN9SM3Ke5)h* mF/.X{7.b!HqqW]Dž^zg1ZFhd`ڷjc̀&:IUkHz X_-LAFg|J,K^Jtk~oKqKp(I (wk¨|ao 2G?';[:@Ic}̼/ zfq|YlV h^ޖ{>拌YVL;k,X8~08,QEe QkyVj g?ت`w7WIDQzh$PFG$wbAr"mf+$>]ܨ(|WQ @,6 4}KI^/xɥ;cd>dGnh[;-͉<hhI&}o+N{iu*Jgh4/B$|R|+ `dPz-&7YF*hh C㖹t5a%GТ'7 6oCKI/]b0|6oԅ|@IXqU5/R$mF.p2vdMŘo'?9Q!B@EƼ6bs <'C"L5p})dn u|eM;)oz$VQ6*YVZƱث̔Ƴ;1OnP`WdU]O@,~%ˤ"9IXuC:"\BwFv}z:Je:f?*;&^i"pX*K\!,4_O~$fOs|`gd_]KlFK<~rŵˮsd!<F׸ln;^(+|n{Ѱ!0̯zY)Qdut<]ɁK;%bGy50~nÀ q0³UHSIVS%sn|$\)Z=^:ra(5 j0) u=u)-+6iY ^@}ދĖq#&jvk@$a)gmGwBn>Im.q(r֮3 yȶNز L,K 0K{ݜf@"0Al_~A)GRa?J((HR̫.axzݨ<wH׵$8HC-Y.aq,/qC*#IU$@#44L{j/''dϕxF.;>bCZg^%65ߪh>օA?[Q ЦFt,娇FLF $Q-(՗. I۾gc"N2;ԽTDR.#14>fbj:r^C9`@#|K^tӮ|DVpT7q,nQc*LMoÄ#ո( 5Ad*kpPPu/OkC߃ h*ogzL[;{cʦ{q1UU,q88a] {%Js?%&3b]=C K{Z ;6 {5y, _ u(;8\ rB^Q D<^Ő؝`t* ,/E}] kO].ox"VO/N^^1e7LΎxrc8'g0b;*p!qzKqKr9ľ ]9d4A ;Mgz8ke=ݮ[0ג>4!Y!)d]n!]SkNb:C^ A K,I{~>✌ &d66LHQOU6$A\_704x¬;E(O| } 76%8gTtwyMfJ'dsuc0LlIdThR3JVXDA|u ;hhkVmw%[ 319.524851][ T1169] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (0); Ignoring new local tt entry: 33:33:00:00:00:01 [ 319.541025][T21301] pimreg3: entered allmulticast mode [ 319.684668][T21327] tipc: Started in network mode [ 319.686780][T21327] tipc: Node identity , cluster identity 4711 [ 319.730230][T21342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3550'. [ 319.734138][T21342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3550'. [ 319.748349][T21350] netlink: 'syz.8.3552': attribute type 1 has an invalid length. [ 319.777725][T21350] bond13: entered promiscuous mode [ 319.779107][T21348] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 319.779602][T21350] 8021q: adding VLAN 0 to HW filter on device bond13 [ 319.790261][T21350] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3552'. [ 319.793154][T21350] bond13: entered allmulticast mode [ 319.802661][T21350] bond13: (slave bridge0): making interface the new active one [ 319.805191][T21350] bridge0: entered promiscuous mode [ 319.806939][T21350] bridge0: entered allmulticast mode [ 319.811140][T21350] bond13: (slave bridge0): Enslaving as an active interface with an up link [ 319.816855][T21350] netlink: 'syz.8.3552': attribute type 10 has an invalid length. [ 319.822795][T21350] batman_adv: batadv0: Interface deactivated: dummy0 [ 319.825546][T21350] batman_adv: batadv0: Removing interface: dummy0 [ 319.838356][T21350] bond0: (slave bond_slave_0): Releasing backup interface [ 319.872528][T21394] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 319.880798][T21350] bond0: (slave bond_slave_1): Releasing backup interface [ 319.933883][T21350] team0: Port device team_slave_0 removed [ 319.941173][T21350] team0: Port device team_slave_1 removed [ 319.943596][T21350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.949519][T21350] batman_adv: batadv0: Removing interface: gretap1 [ 319.952571][T21350] bond2: (slave geneve2): Releasing active interface [ 319.981122][T21350] batman_adv: batadv0: Removing interface: macsec1 [ 319.984513][T21350] bond7: (slave vxcan3): Releasing backup interface [ 320.025239][T21350] bond12: (slave veth7): Releasing active interface [ 320.058121][ T63] Bluetooth: hci0: command 0x041b tx timeout [ 320.064520][T21350] bond13: (slave bridge0): Releasing backup interface [ 320.066774][T21350] bridge0: left promiscuous mode [ 320.068972][T21350] bridge0: left allmulticast mode [ 320.108855][T21402] wg1: entered promiscuous mode [ 320.111054][T21402] wg1: entered allmulticast mode [ 320.138420][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 320.163437][T21412] netlink: 'syz.8.3557': attribute type 2 has an invalid length. [ 320.325652][T21439] input: syz0 as /devices/virtual/input/input44 [ 320.351058][T21439] bridge1: entered promiscuous mode [ 320.523565][T21472] netlink: 'syz.6.3570': attribute type 9 has an invalid length. [ 320.574169][T21454] kvm: kvm [21452]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 320.587173][T21454] kvm: kvm [21452]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 320.617730][T21468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'. [ 320.734250][T15761] vhci_hcd: connection closed [ 320.734482][T15753] vhci_hcd: connection reset by peer [ 320.734936][T15757] vhci_hcd: connection closed [ 320.740895][T13223] vhci_hcd vhci_hcd.8: stop threads [ 320.745100][T13223] vhci_hcd vhci_hcd.8: release socket [ 320.761439][T13223] vhci_hcd vhci_hcd.8: disconnect device [ 320.767974][T13223] vhci_hcd vhci_hcd.8: stop threads [ 320.767997][T13223] vhci_hcd vhci_hcd.8: release socket [ 320.772663][T13223] vhci_hcd vhci_hcd.8: disconnect device [ 320.774478][T13223] vhci_hcd vhci_hcd.8: stop threads [ 320.774496][T13223] vhci_hcd vhci_hcd.8: release socket [ 320.777834][T13223] vhci_hcd vhci_hcd.8: disconnect device [ 320.833714][ T5936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.840393][ T5993] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 320.843525][ T5936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.848232][ T5936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.865067][ T5936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.875071][ T5936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.961915][T21497] xfrm0 speed is unknown, defaulting to 1000 [ 321.024074][T21510] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 321.179689][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 321.240840][T21497] chnl_net:caif_netlink_parms(): no params data found [ 321.418881][T21653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3584'. [ 321.425199][T21653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3584'. [ 321.452909][T21497] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.455610][T21497] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.458500][T21497] bridge_slave_0: entered allmulticast mode [ 321.477649][T21497] bridge_slave_0: entered promiscuous mode [ 321.483725][T21497] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.486391][T21497] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.489942][T21497] bridge_slave_1: entered allmulticast mode [ 321.493356][T21497] bridge_slave_1: entered promiscuous mode [ 321.570039][T21497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.585593][T21497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.628417][T21720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3588'. [ 321.639587][T21727] bridge_slave_1: left allmulticast mode [ 321.642707][T21727] bridge_slave_1: left promiscuous mode [ 321.647634][T21727] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.654907][T21727] bridge_slave_0: left allmulticast mode [ 321.657361][T21727] bridge_slave_0: left promiscuous mode [ 321.662062][T21727] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.662404][T21720] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 321.756929][T21497] team0: Port device team_slave_0 added [ 321.883642][T21497] team0: Port device team_slave_1 added [ 321.916845][T21752] ip6tnl1: entered promiscuous mode [ 321.921778][T21497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.924262][T21497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.933312][T21497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.938196][T21497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.940494][T21497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.949363][T21497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.976664][T21752] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3593'. [ 321.987135][T21497] hsr_slave_0: entered promiscuous mode [ 321.990587][T21497] hsr_slave_1: entered promiscuous mode [ 322.001109][T21497] debugfs: 'hsr0' already exists in 'hsr' [ 322.003558][T21497] Cannot create hsr debugfs directory [ 322.062283][T21810] tipc: Enabling of bearer rejected, media not registered [ 322.069193][T21810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3595'. [ 322.132946][T21857] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.3597'. [ 322.141187][ T5936] Bluetooth: hci0: command 0x041b tx timeout [ 322.184688][T21877] /dev/nullb0: Can't open blockdev [ 322.220851][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 322.387851][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.941579][ T5936] Bluetooth: hci4: command tx timeout [ 323.263851][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 324.223023][ T5936] Bluetooth: hci0: command 0x041b tx timeout [ 324.303261][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 325.023975][ T5936] Bluetooth: hci4: command tx timeout [ 325.232643][T21910] program syz.1.3602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.344362][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 326.305623][ T5936] Bluetooth: hci0: command 0x041b tx timeout [ 326.385471][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 327.106168][ T5936] Bluetooth: hci4: command tx timeout [ 327.426563][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 328.387760][ T5936] Bluetooth: hci0: command 0x041b tx timeout [ 328.467607][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 329.188471][ T5936] Bluetooth: hci4: command tx timeout [ 329.508787][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 330.549873][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 331.590965][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 332.632673][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 333.672958][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 334.713947][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 335.754966][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 336.795976][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 337.550994][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.555493][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.558411][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.560927][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.563311][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.634622][ T63] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.639653][ T63] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.643083][ T63] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.645950][ T63] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.648655][ T63] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.836849][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 338.877795][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 339.598582][ T5936] Bluetooth: hci3: command tx timeout [ 339.678557][ T5936] Bluetooth: hci5: command tx timeout [ 339.918875][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 340.555578][ T1421] ================================================================== [ 340.558121][ T1421] BUG: KASAN: slab-use-after-free in handle_tx+0x5e0/0x620 [ 340.560500][ T1421] Read of size 8 at addr ffff888036ded020 by task aoe_tx0/1421 [ 340.564190][ T1421] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 340.565430][ T1421] CPU: 0 UID: 0 PID: 1421 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.565447][ T1421] Tainted: [L]=SOFTLOCKUP [ 340.565451][ T1421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 340.565458][ T1421] Call Trace: [ 340.565463][ T1421] [ 340.565467][ T1421] dump_stack_lvl+0x100/0x190 [ 340.565486][ T1421] print_report+0x156/0x4c9 [ 340.565501][ T1421] ? __virt_addr_valid+0x81/0x620 [ 340.565515][ T1421] ? __phys_addr+0xe8/0x180 [ 340.565528][ T1421] ? handle_tx+0x5e0/0x620 [ 340.565539][ T1421] kasan_report+0xdf/0x1a0 [ 340.565551][ T1421] ? handle_tx+0x5e0/0x620 [ 340.565563][ T1421] handle_tx+0x5e0/0x620 [ 340.565576][ T1421] dev_hard_start_xmit+0x127/0x6c0 [ 340.565594][ T1421] __dev_queue_xmit+0x6dd/0x46f0 [ 340.565612][ T1421] ? finish_task_switch.isra.0+0x205/0xb80 [ 340.565630][ T1421] ? __pfx___dev_queue_xmit+0x10/0x10 [ 340.565648][ T1421] ? __lock_acquire+0x4a5/0x2630 [ 340.565662][ T1421] ? ref_tracker_free+0x37e/0x6c0 [ 340.565674][ T1421] ? do_raw_spin_lock+0x128/0x260 [ 340.565690][ T1421] ? find_held_lock+0x2b/0x80 [ 340.565700][ T1421] ? skb_dequeue+0x126/0x180 [ 340.565715][ T1421] ? skb_dequeue+0x126/0x180 [ 340.565729][ T1421] ? find_held_lock+0x2b/0x80 [ 340.565739][ T1421] ? tx+0xa4/0x130 [ 340.565752][ T1421] ? tx+0xa4/0x130 [ 340.565764][ T1421] ? rcu_is_watching+0x12/0xc0 [ 340.565775][ T1421] ? __pfx_tx+0x10/0x10 [ 340.565787][ T1421] tx+0xc4/0x130 [ 340.565800][ T1421] kthread+0x1d8/0x3c0 [ 340.565812][ T1421] ? __kthread_parkme+0xbb/0x230 [ 340.565824][ T1421] ? __pfx_kthread+0x10/0x10 [ 340.565835][ T1421] ? rcu_is_watching+0x12/0xc0 [ 340.565844][ T1421] ? __pfx_default_wake_function+0x10/0x10 [ 340.565857][ T1421] ? __kthread_parkme+0x18c/0x230 [ 340.565869][ T1421] ? kthread+0x13a/0x450 [ 340.565884][ T1421] ? __pfx_kthread+0x10/0x10 [ 340.565895][ T1421] kthread+0x370/0x450 [ 340.565908][ T1421] ? __pfx_kthread+0x10/0x10 [ 340.565923][ T1421] ret_from_fork+0x754/0xd80 [ 340.565938][ T1421] ? __pfx_ret_from_fork+0x10/0x10 [ 340.565954][ T1421] ? __switch_to+0x7b4/0x10c0 [ 340.565965][ T1421] ? __pfx_kthread+0x10/0x10 [ 340.565979][ T1421] ret_from_fork_asm+0x1a/0x30 [ 340.565994][ T1421] [ 340.565998][ T1421] [ 340.569181][ T40] audit: type=1400 audit(2000524709.586:1369): avc: denied { write } for pid=5905 comm="syz-executor" path="pipe:[6622]" dev="pipefs" ino=6622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 340.570278][ T1421] Allocated by task 20213: [ 340.637533][ T63] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.638348][ T1421] kasan_save_stack+0x30/0x50 [ 340.645628][ T63] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.646861][ T1421] kasan_save_track+0x14/0x30 [ 340.649533][ T63] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.650914][ T1421] __kasan_kmalloc+0xaa/0xb0 [ 340.653703][ T63] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.655161][ T1421] alloc_tty_struct+0x96/0x8c0 [ 340.657113][ T63] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.659329][ T1421] tty_init_dev.part.0+0x20/0x470 [ 340.659350][ T1421] tty_open+0xa63/0xfa0 [ 340.659364][ T1421] chrdev_open+0x234/0x6a0 [ 340.659379][ T1421] do_dentry_open+0x6d8/0x1660 [ 340.659392][ T1421] vfs_open+0x82/0x3f0 [ 340.659408][ T1421] path_openat+0x208c/0x31a0 [ 340.659426][ T1421] do_file_open+0x20e/0x430 [ 340.659441][ T1421] do_sys_openat2+0x10d/0x1e0 [ 340.659457][ T1421] __x64_sys_openat+0x12d/0x210 [ 340.659476][ T1421] do_syscall_64+0x106/0xf80 [ 340.659487][ T1421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.659502][ T1421] [ 340.659506][ T1421] Freed by task 29: [ 340.659514][ T1421] kasan_save_stack+0x30/0x50 [ 340.659527][ T1421] kasan_save_track+0x14/0x30 [ 340.659540][ T1421] kasan_save_free_info+0x3b/0x70 [ 340.659558][ T1421] __kasan_slab_free+0x5f/0x80 [ 340.659572][ T1421] kfree+0x1c7/0x690 [ 340.659589][ T1421] process_one_work+0x9c2/0x1840 [ 340.659609][ T1421] worker_thread+0x5da/0xe40 [ 340.659633][ T1421] kthread+0x370/0x450 [ 340.659650][ T1421] ret_from_fork+0x754/0xd80 [ 340.659670][ T1421] ret_from_fork_asm+0x1a/0x30 [ 340.659685][ T1421] [ 340.659689][ T1421] Last potentially related work creation: [ 340.659694][ T1421] kasan_save_stack+0x30/0x50 [ 340.659706][ T1421] kasan_record_aux_stack+0xa7/0xc0 [ 340.659726][ T1421] insert_work+0x36/0x230 [ 340.659745][ T1421] __queue_work+0x96f/0x10f0 [ 340.659764][ T1421] queue_work_on+0x180/0x1e0 [ 340.659783][ T1421] release_tty+0x4f3/0x5f0 [ 340.716862][ T1421] tty_release_struct+0xb7/0xe0 [ 340.718445][ T1421] tty_release+0xd7a/0x1300 [ 340.719910][ T1421] __fput+0x3ff/0xb40 [ 340.721194][ T1421] task_work_run+0x150/0x240 [ 340.722720][ T1421] do_exit+0x829/0x2a30 [ 340.724060][ T1421] do_group_exit+0xd5/0x2a0 [ 340.725518][ T1421] get_signal+0x1ec7/0x21e0 [ 340.726987][ T1421] arch_do_signal_or_restart+0x91/0x7a0 [ 340.728750][ T1421] exit_to_user_mode_loop+0x86/0x4a0 [ 340.730490][ T1421] do_syscall_64+0x67c/0xf80 [ 340.732344][ T1421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.734707][ T1421] [ 340.735673][ T1421] The buggy address belongs to the object at ffff888036ded000 [ 340.735673][ T1421] which belongs to the cache kmalloc-cg-2k of size 2048 [ 340.740879][ T1421] The buggy address is located 32 bytes inside of [ 340.740879][ T1421] freed 2048-byte region [ffff888036ded000, ffff888036ded800) [ 340.745791][ T1421] [ 340.746763][ T1421] The buggy address belongs to the physical page: [ 340.749291][ T1421] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36de8 [ 340.752783][ T1421] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 340.756106][ T1421] memcg:ffff8880334aa181 [ 340.757794][ T1421] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 340.760766][ T1421] page_type: f5(slab) [ 340.762381][ T1421] raw: 00fff00000000040 ffff88801b84c140 ffffea0000d7fe00 dead000000000002 [ 340.765762][ T1421] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff8880334aa181 [ 340.768766][ T1421] head: 00fff00000000040 ffff88801b84c140 ffffea0000d7fe00 dead000000000002 [ 340.771571][ T1421] head: 0000000000000000 0000000000080008 00000000f5000000 ffff8880334aa181 [ 340.774280][ T1421] head: 00fff00000000003 ffffea0000db7a01 00000000ffffffff 00000000ffffffff [ 340.776984][ T1421] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 340.779710][ T1421] page dumped because: kasan: bad access detected [ 340.781662][ T1421] page_owner tracks the page as allocated [ 340.783471][ T1421] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5639, tgid 5639 (dhcpcd), ts 33900780075, free_ts 33019911486 [ 340.789801][ T1421] post_alloc_hook+0x1e1/0x250 [ 340.791339][ T1421] get_page_from_freelist+0x111d/0x3140 [ 340.793108][ T1421] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 340.794981][ T1421] alloc_pages_mpol+0x1fb/0x550 [ 340.796518][ T1421] new_slab+0x2c4/0x440 [ 340.797843][ T1421] ___slab_alloc+0xdb3/0x1cb0 [ 340.799342][ T1421] __slab_alloc.isra.0+0x63/0x110 [ 340.800950][ T1421] __kmalloc_node_track_caller_noprof+0x629/0x9d0 [ 340.802985][ T1421] kmalloc_reserve+0xef/0x2c0 [ 340.804476][ T1421] __alloc_skb+0x186/0x410 [ 340.805888][ T1421] alloc_skb_with_frags+0xe0/0x810 [ 340.807520][ T1421] sock_alloc_send_pskb+0x801/0x980 [ 340.809157][ T1421] unix_dgram_sendmsg+0x3c7/0x1820 [ 340.810789][ T1421] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 340.812824][ T1421] sock_write_iter+0x566/0x610 [ 340.814396][ T1421] do_iter_readv_writev+0x6ee/0x920 [ 340.816087][ T1421] page last free pid 5639 tgid 5639 stack trace: [ 340.818024][ T1421] __free_frozen_pages+0x822/0x1130 [ 340.819676][ T1421] __put_partials+0x127/0x160 [ 340.821172][ T1421] qlist_free_all+0x47/0xe0 [ 340.822646][ T1421] kasan_quarantine_reduce+0x1a0/0x1f0 [ 340.824362][ T1421] __kasan_slab_alloc+0x69/0x90 [ 340.825895][ T1421] kmem_cache_alloc_node_noprof+0x303/0x880 [ 340.827681][ T1421] __alloc_skb+0x156/0x410 [ 340.829091][ T1421] alloc_skb_with_frags+0xe0/0x810 [ 340.830731][ T1421] sock_alloc_send_pskb+0x801/0x980 [ 340.832387][ T1421] unix_dgram_sendmsg+0x3c7/0x1820 [ 340.833999][ T1421] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 340.835694][ T1421] sock_write_iter+0x566/0x610 [ 340.837210][ T1421] do_iter_readv_writev+0x6ee/0x920 [ 340.838863][ T1421] vfs_writev+0x360/0xe10 [ 340.840234][ T1421] do_writev+0x28a/0x340 [ 340.841575][ T1421] do_syscall_64+0x106/0xf80 [ 340.843063][ T1421] [ 340.843835][ T1421] Memory state around the buggy address: [ 340.845590][ T1421] ffff888036decf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 340.848090][ T1421] ffff888036decf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 340.850585][ T1421] >ffff888036ded000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 340.853114][ T1421] ^ [ 340.854734][ T1421] ffff888036ded080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 340.857220][ T1421] ffff888036ded100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 340.859716][ T1421] ================================================================== [ 340.862318][ T1421] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 340.864588][ T1421] CPU: 0 UID: 0 PID: 1421 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.867846][ T1421] Tainted: [L]=SOFTLOCKUP [ 340.869213][ T1421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 340.872394][ T1421] Call Trace: [ 340.873461][ T1421] [ 340.874407][ T1421] dump_stack_lvl+0x100/0x190 [ 340.875915][ T1421] vpanic+0x20d/0x630 [ 340.877196][ T1421] panic+0xd1/0xd1 [ 340.878403][ T1421] ? __pfx_panic+0x10/0x10 [ 340.879827][ T1421] ? check_panic_on_warn+0x1f/0x90 [ 340.881450][ T1421] check_panic_on_warn.cold+0x19/0x34 [ 340.883182][ T1421] end_report.part.0+0x3a/0x90 [ 340.884709][ T1421] kasan_report.cold+0xe/0x18 [ 340.886204][ T1421] ? handle_tx+0x5e0/0x620 [ 340.887629][ T1421] handle_tx+0x5e0/0x620 [ 340.888979][ T1421] dev_hard_start_xmit+0x127/0x6c0 [ 340.890596][ T1421] __dev_queue_xmit+0x6dd/0x46f0 [ 340.892174][ T1421] ? finish_task_switch.isra.0+0x205/0xb80 [ 340.894018][ T1421] ? __pfx___dev_queue_xmit+0x10/0x10 [ 340.895721][ T1421] ? __lock_acquire+0x4a5/0x2630 [ 340.897401][ T1421] ? ref_tracker_free+0x37e/0x6c0 [ 340.899066][ T1421] ? do_raw_spin_lock+0x128/0x260 [ 340.900785][ T1421] ? find_held_lock+0x2b/0x80 [ 340.902244][ T1421] ? skb_dequeue+0x126/0x180 [ 340.903668][ T1421] ? skb_dequeue+0x126/0x180 [ 340.905114][ T1421] ? find_held_lock+0x2b/0x80 [ 340.906603][ T1421] ? tx+0xa4/0x130 [ 340.907812][ T1421] ? tx+0xa4/0x130 [ 340.909011][ T1421] ? rcu_is_watching+0x12/0xc0 [ 340.910648][ T1421] ? __pfx_tx+0x10/0x10 [ 340.911997][ T1421] tx+0xc4/0x130 [ 340.913139][ T1421] kthread+0x1d8/0x3c0 [ 340.914445][ T1421] ? __kthread_parkme+0xbb/0x230 [ 340.916027][ T1421] ? __pfx_kthread+0x10/0x10 [ 340.917483][ T1421] ? rcu_is_watching+0x12/0xc0 [ 340.919006][ T1421] ? __pfx_default_wake_function+0x10/0x10 [ 340.920839][ T1421] ? __kthread_parkme+0x18c/0x230 [ 340.922429][ T1421] ? kthread+0x13a/0x450 [ 340.923798][ T1421] ? __pfx_kthread+0x10/0x10 [ 340.925270][ T1421] kthread+0x370/0x450 [ 340.926558][ T1421] ? __pfx_kthread+0x10/0x10 [ 340.928102][ T1421] ret_from_fork+0x754/0xd80 [ 340.929623][ T1421] ? __pfx_ret_from_fork+0x10/0x10 [ 340.931273][ T1421] ? __switch_to+0x7b4/0x10c0 [ 340.932808][ T1421] ? __pfx_kthread+0x10/0x10 [ 340.934295][ T1421] ret_from_fork_asm+0x1a/0x30 [ 340.935838][ T1421] [ 340.937712][ T1421] Kernel Offset: disabled [ 340.939316][ T1421] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:33:13 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff856dd980 RDI=ffffffff9b43cc20 RBP=ffffffff9b43cbe0 RSP=ffffc9000719f3b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff36879d6 R15=dffffc0000000000 RIP=ffffffff856dd9a7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d63a8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000bbdffc CR3=000000000e596000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000800 DR2=000000000000004e DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000fefef000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff34e90b66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff34e90b66 00007fff34e90b6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c0d232e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c0d232e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c0d232fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c0d232e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5c0d3ea498 00007f5c0d3ea468 00007f5c0d3ea4a0 00007f5c0d3ea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000012ba9 RCX=ffffffff84c6418e RDX=ffff8880280ac900 RSI=ffffffff84c6419c RDI=ffff8880280ac900 RBP=ffffea000000000f RSP=ffffc90003887560 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000000 R12=ffff88807ffd6440 R13=0000000000000002 R14=ffffea00004aea40 R15=ffff888034288d98 RIP=ffffffff8207354a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f646b1e4300 ffffffff 00c00000 GS =0000 ffff8880d64a8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055a0dd789f40 CR3=000000002f0ee000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=2f7247ef28459109 d361d1384e5bf48d 2f7247ef28459109 d361d1384e5bf48d 2f7247ef28459109 d361d1384e5bf48d 2f7247ef28459109 d361d1384e5bf48d ZMM18=8ec09cddcc896ea8 a230acc80462e492 8ec09cddcc896ea8 a230acc80462e492 8ec09cddcc896ea8 a230acc80462e492 8ec09cddcc896ea8 a230acc80462e492 ZMM19=0a10000000000000 0000000000000004 0a10000000000000 0000000000000003 0a10000000000000 0000000000000002 0a10000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300020002960300 0200029403000200 0292030384020002 900302800200028e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03020200028c0302 d40200028a03aaaa aaaaaa01ffffffff fffffffff5080280 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300100002100000 04060076f800232d 6332692f7665642f 01ffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000008 ffffffae00000000 0300000000000008 ffffff9e00000000 ZMM25=a230acc8a230acc8 a230acc8a230acc8 a230acc8a230acc8 a230acc8a230acc8 a230acc8a230acc8 a230acc8a230acc8 a230acc8a230acc8 a230acc8a230acc8 ZMM26=cc896ea8cc896ea8 cc896ea8cc896ea8 cc896ea8cc896ea8 cc896ea8cc896ea8 cc896ea8cc896ea8 cc896ea8cc896ea8 cc896ea8cc896ea8 cc896ea8cc896ea8 ZMM27=8ec09cdd8ec09cdd 8ec09cdd8ec09cdd 8ec09cdd8ec09cdd 8ec09cdd8ec09cdd 8ec09cdd8ec09cdd 8ec09cdd8ec09cdd 8ec09cdd8ec09cdd 8ec09cdd8ec09cdd ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0910000009100000 0910000009100000 0910000009100000 0910000009100000 0910000009100000 0910000009100000 0910000009100000 0910000009100000 info registers vcpu 2 CPU#2 RAX=ffff888104378000 RBX=0000000000000000 RCX=ffffc9000013d110 RDX=0000000000000008 RSI=ffffc9000013d100 RDI=ffff888105e6a438 RBP=0000000000000000 RSP=ffffc90000648e48 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff888105e6a918 R13=dffffc0000000000 R14=ffff888105e6a800 R15=0000000000000001 RIP=ffffffff8676a461 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d65a8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9e97345000 CR3=000000000e596000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=0000000010000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0437f3b5b666d2b 401e75cd50c1c757 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 112cff3062ff2aa4 bdfb545ffe3ffc08 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 490d4006338c03d8 461810b7354b42bf ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b9918f5736b0df03 3fa8ffdb54aa5c1e ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000380 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b99f62e105350ec0 00000000000000cf ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c1bbfa9857dcb310 5b0386b8007c26af ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 57b0d7b8000000cf ae216c1ffebb651f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000cf00000000 5a1045bc00800100 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f0ae8904ca4dc2c 6a1f96226c22de78 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f9ac9ab1c643edba 39521f7674e19e58 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e302e3432322050 4455203a66766f20 3a53565049205d33 43202020205b5d39 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746361706d692064 6c756f6320686369 6877203272657961 6c206e6f20646574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e656d6761726620 6562206c6c697720 656361667265746e 6920736968742072 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65766f20676e696f 67207374656b6361 50202e7374656b63 6170207664612d6e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616d74616220666f 2074726f70736e61 7274206568742065 6c646e6168206f74 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffed100d4e823c RBX=ffff88806a741180 RCX=0000000000000801 RDX=ffff88806a7411e0 RSI=0000000000000000 RDI=ffff88807ffd7b80 RBP=ffffc900076a7818 RSP=ffffc900076a74f8 R8 =ffff88806a741180 R9 =ffff88806a7411e0 R10=ffff88807ffd7b80 R11=0000000000000000 R12=0000000000000060 R13=dffffc0000000000 R14=ffff88807ffd7b80 R15=dffffc0000000000 RIP=ffffffff82644665 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556cec6500 ffffffff 00c00000 GS =0000 ffff8880d66a8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f17f2416038 CR3=000000002acfc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f17f2f4d020 00007f17f23ea460 00007f17f23ea470 00007f17f23ea4b0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f17f23ea498 00007f17f23ea468 00007f17f23ea4a0 00007f17f23ea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000