last executing test programs: 1m47.478292289s ago: executing program 32 (id=63): write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x148, {0x2, 0x0, 0x100}, 0x8b, 0x0, 0x0, 0xff, 0x5, 0x4000084, 0xbf43, 0x20000008000007, 0x8, 0x400000000008, 0x200002, 0x2, 0xfffffffffffffffe, 0x4, 0x8, 0x8000000000408, 0x0, 0xfffffffffffffff7}}, 0xa0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x38, 0x55, 0x701, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@in6_addr=@loopback}}}]}, 0x38}}, 0x40080) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5393, &(0x7f00000001c0)) 1m37.736491336s ago: executing program 33 (id=181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000140)=ANY=[@ANYBLOB="2473055b", @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="04006e8004002800"], 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[], 0x14c}}, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) (async) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$cgroup_int(r6, &(0x7f0000000240)=0x2, 0x12) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0xf, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0xc, 0x0, 0x5e, 0xfffffffffffffff9}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r8, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0x1, 0x3, 0x69c9, 0x4, 0xf3d, 0x385a2d2f, 0x4, 0x100000000}) (async) shutdown(r0, 0x1) 1m34.610775369s ago: executing program 1 (id=200): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4000000000000ff000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) 1m34.530887958s ago: executing program 1 (id=202): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0xa800, 0xffffffff, {}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0xd, "bf231e4b"}, 0x0, 0x1, {}, 0xb3cd}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000400)=0x1) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r5, {}, {}, {0x0, 0xfff8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x40000) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x816, 0x8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdffff], [0x5, 0x0, 0x8002000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x1, 0x10001, 0x10021, 0x0, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0x3, 0x0, 0x1, 0x0, 0x4000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82cb, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2f1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) setns(0xc9, 0x0) r8 = socket(0x8, 0x5, 0x5) getsockopt$inet_buf(r8, 0x0, 0x20, 0x0, &(0x7f0000000240)) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000020c0), 0x2000482, &(0x7f0000000280)=ANY=[@ANYBLOB="14", @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000000000000000000000e00000020000e0ff00000000000000000000000000000000000000a02c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x154}}, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$inet6_tcp(0xa, 0x1, 0x0) 1m34.141235626s ago: executing program 1 (id=206): ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000300)={0xbf3, 0xc, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x19b, &(0x7f0000012600)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x189, 0x2, 0x1, 0x6, 0x0, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "155e67a25c"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x9, 0xfffd, 0x7}, {0x6, 0x24, 0x1a, 0x6, 0x1a}, [@obex={0x5, 0x24, 0x15, 0x9a19}, @mbim={0xc, 0x24, 0x1b, 0x8f1, 0x8, 0x7, 0xc9, 0x9ecb, 0x7f}, @mdlm_detail={0xed, 0x24, 0x13, 0x9, "03ddaaaa15b0e5dc1c83b59dc2d7631aa8017eef2d30cc8715fbcaa7d2054b6693b635bb85b0d763fff485177aa4ed58d3b38a9ef37da304571c136f8f42758acb8f72e321c07ed5c6e26ec915db13b2d8562cd2dba20ee654e397401c160984eaa342440eb37310f50eb502406d838d18f078a5602f3b640974b64bda3c6ac67b1e64b9de1531186966192022cf7abf6949bf139867ad440b2f916796e64285698d4a81f67379e2c13e10a1884a82d48c7e1a17082fc71f6e1fcd2e74aeaa9bed646f6faeaa33588fdea37a26284f8418f6bf614e8543fb9a1af5d202faca71804fcaa2dbc03931d0"}, @mdlm={0x15, 0x24, 0x12, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0xf, 0x1b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x8, 0x5d}}}}}}}]}}, &(0x7f0000012cc0)={0xa, &(0x7f00000127c0)={0xa, 0x6, 0x110, 0x1, 0x80, 0xff, 0xff, 0xa}, 0x5, &(0x7f0000012800)={0x5, 0xf, 0x5}, 0x8, [{0x93, &(0x7f0000012840)=@string={0x93, 0x3, "d46bed38968f66e8a3f3d6b17ea2bfef7bc3f0b478f93cb2120c6c9b926f665e09cca6abd483b2c37453c0fe694eb045aef297065b61f15e82d322b1204b4313ead1439fce2cf6956609c689103f1af818713b25b27491acc3b42af8accb9dc0e6328ec729727a957f973802928428752e4b3a6d9285ccc9b1e47a628761f1db6733a2e7e9b460a13a176e2bf01fa1d42c"}}, {0xc1, &(0x7f0000012900)=@string={0xc1, 0x3, "ab902dcff34d35643b96663ffc972f1ae95647bf96b304360a0769be296479a87e57d98d644ad3037ce2964e5ce9fe962d816b63e52f72be8d4cc0c8366b97893b3b4f8baf0d2921cc24d419bab37eb7f6ddde61df15bdd067286ac383bb144394e0a4f093f755c33eedd24c8b41ce6ab06937d7038a8e5e5707fd7c3df384fc221c1e5f798688e1a1b474923e95a1d1ccef3db0ffe93f96c78372795ce8205f4e42365874817d3e1593b37807731a0e39478a55afc4c0069f26ab2bed59a9"}}, {0x4, &(0x7f0000012a00)=@lang_id={0x4, 0x3, 0xc50}}, {0xf6, &(0x7f0000012a40)=@string={0xf6, 0x3, "822468145a3411d51176310ccb31f0ed98fa39754e34abee8e8f4f6d0ae751ef1589c47de10fcb6c216ccfc989296e1eeeebbb0de2a5d3e1dfe4ce1ff5b5d6d62aaa44d7231554d35b6394b3ab41ca074ec6b76e41e75cc5e8abe3e552b4fdc174163adbea8ecf9d97d7685156b370177d4c0d3fa669a48ea2626bfb89c5cf8ebc1e202291084c36f8db8c55fa21e1d52625b8770bb8f24afa04ca0635fea70cc44c9ee362b186509b59fee16ef7a30fe615380f971569bfd0ee61ccced2b3e688f408858852921bcbb328f4260eb598c09b9371e9483d455b07e30ce079245994c07dc85ba3e75bc45b1ee2577b82c7211de517"}}, {0x4, &(0x7f0000012b40)=@lang_id={0x4, 0x3, 0x81a}}, {0x29, &(0x7f0000012b80)=@string={0x29, 0x3, "3bba8eae5c951cbc11b0ec9ed02aa3e4f29f8e9004a6ca9a70dfde1cdce14ee4b361ecbb37de9d"}}, {0x99, &(0x7f0000012bc0)=@string={0x99, 0x3, "56c96bd8af71e9ab759d2d52de57f2b06e97b5200484f7b1441e21bfcbfa5120f3d16a46829aded53d84efb215b98df15cdd1dbb6087e5ffba01c50fd2f433e55077d780c77259909c624b7faa05ca7a4f3a0a14115194ba382fc60a78ba390e9efcd3705fbc8b126e58f544e29d37d82484140a381de6bc6b7b41c2f9b4b82e2f7fdd7cffe551b0e9b7652e69e6eab6e7df0425247a4a"}}, {0x4, &(0x7f0000012c80)=@lang_id={0x4, 0x3, 0x2801}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = socket(0x28, 0x801, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000004c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000012480), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000125c0)={&(0x7f0000012440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000012580)={&(0x7f00000124c0)={0x88, r4, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7b}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x5, 0xf, 0x8001, 0x22, 0x8001, 0x1ff]}, @NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_b, @from_mac, {0x1}, @value=@ver_80211n={0x0, 0x20, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @sp_mp_confirm={0xf, 0x2, {0x1001, @default, {0x1, 0x6, [{0x16}, {0x2}, {0x2, 0x1}, {0x5}, {0x18, 0x1}, {0x9, 0x1}]}, @void, @void}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r5 = socket(0x2, 0x80805, 0x0) recvmmsg$unix(r5, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x33581ccc, 0xb, 0x200000, 0x3, 0x5, 0xa}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r6 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r6, &(0x7f0000012240)={0x14, &(0x7f0000000200)={0x0, 0x6, 0x64, {0x64, 0x10, "67d75babb66ff23deaf3ff681c2839102d7968544de7a9c0a5570dacd9ddd0164510859a5ba19c5f224543b205326bff987ab9655aaf08467393993c3c9f8faaf0c4a86586eb646d9f3a8128e253b76f9789e5e7c4c4b1d0d260a8a4a84c3bf4daf0"}}, &(0x7f0000012200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}}, &(0x7f0000012400)={0x2c, &(0x7f0000012280)={0x20, 0x14, 0x4d, "b4dcdac3e07cac78e0ae02dd8a76fe7d264aaf53ec1a59d101351c6af30fa7a690c5693b2147fa65a3d789add217f2196f37521590854675e9ec643a4a8e634085895e2d7947e08db95140705e"}, &(0x7f0000012300)={0x0, 0xa, 0x1}, &(0x7f0000012340)={0x0, 0x8, 0x1, 0xac}, &(0x7f0000012380)={0xc0, 0x5, 0x5, "0d42ff63ed"}, &(0x7f00000123c0)={0x40, 0x5, 0x1, "1f"}}) 1m32.461216968s ago: executing program 1 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./proc/../file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB='ui}', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000101,\x00']) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x6a) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000680)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x40) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9fef728ca2765006650000000c0000000c0000000200000000000000000000f5ffffff000000f0ef3e2446947dfe2c0ba3c58c4c185abe8709335d46bed052081c9f2a0f12a4a2088a47b9af531cff118e279d7e48ca2c6e5b2bd8b535b3ee9a54f103581f35ecacac9254174dfe9ec2ae6f8c360f2207f896f281369b76a28933cf92a6db25786a378aeba490196d5776d5641dc6925aaef968505b8fb467f9157a8dd0067f1129113ed9a5f67f"], 0x0, 0x26}, 0x28) read$FUSE(0xffffffffffffffff, &(0x7f0000006240)={0x2020}, 0x60d) write(r2, &(0x7f0000000040)='7', 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000a80)=""/101, 0x65}, {&(0x7f0000000a00)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/109, 0x6d}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000480)=""/30, 0x1e}], 0x8, &(0x7f0000000880)=""/200, 0xc8}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r1, 0x2b, 0x0, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="a8080000000000008d0000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000000000000400"/28], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32=r2, @ANYBLOB="3400000010000000", @ANYRES32=r2, @ANYBLOB="309b23c63cbd617135f4a50d881d15260ccaf99b8937cff5c6a8", @ANYRES32=r1, @ANYBLOB, @ANYRES64=r5], 0x20) renameat2(r2, &(0x7f00000006c0)='./file2\x00', r2, &(0x7f0000000700)='./file1/file0\x00', 0x1) 1m32.310590995s ago: executing program 1 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x28, 0x0, 0x0, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x20}, {[@hopopts={0x0, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(r0, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[], 0x10) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) setns(0xc9, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000009000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r7], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}]}, 0x48}}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) r9 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0) 1m32.061678786s ago: executing program 1 (id=241): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0403220c"], 0x7) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x0) 1m32.012759455s ago: executing program 34 (id=241): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0403220c"], 0x7) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x0) 1m29.65118252s ago: executing program 4 (id=266): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) (async) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000001c0)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000005c0)={"8f784351678fc6796ef47f239c92cd1e", 0x0, 0x0, {0x81, 0xb29}, {0x0, 0x9}, 0x2, [0xcdb, 0x1af, 0x8, 0x8000000000000000, 0x1, 0x6af8, 0x8000, 0x15f, 0xe9, 0x7, 0xfffffffffffff800, 0x8, 0x6, 0x9a, 0x4429, 0x9]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000005c0)={"8f784351678fc6796ef47f239c92cd1e", 0x0, 0x0, {0x81, 0xb29}, {0x0, 0x9}, 0x2, [0xcdb, 0x1af, 0x8, 0x8000000000000000, 0x1, 0x6af8, 0x8000, 0x15f, 0xe9, 0x7, 0xfffffffffffff800, 0x8, 0x6, 0x9a, 0x4429, 0x9]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f00000006c0)={{r3}, r8, 0x6, @unused=[0x7, 0x7fff, 0x6, 0x1], @subvolid}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"04dfc86351907bcbc9293982262169af775bedfb0a63cb8031ecdc5351097e022d45a9640a4a4b506dc328e65610b8f6e25f9eaf1a9f48ac011b67d68f8725991345a1f8ed6450a11246c6424cd7837f6bfc47209662ba0d0f44149fcefbbf6fa5b40644bce6cf7210107f57b850d0c9af06c766af1c637aa057167a6910e2e185b8d972e49eeda481d9a58394ef43958ce7407e73d6460653fc672aa4ab6a26bd1a631fa3a0f2b025ba137b8e3f933af28e1ea9984bc0438ea00b5f5b16893a22bb83ef1c92407a946d4dc7d347d526db0e71bb28f873937ca7343fb7248867adf5decd52e74f05c768c3917b2abe3d3305e32b8db562d19dd7c83fde6dbe03ef72aa7ddc00144895b2a1981105046a28ca0852521afb0c15cd9f33e36417a251af7100392b6cdb0bbed4670d746c45fb5589f279cfd594911cb11f2a7336af10b2332e731f2eec8287c735f2f586000000000000d6c7020000005bb280e222976d5721ee6dd6068cfd6174d2382f524672a2656eed5cf34eff27c2974deebf2aa6226e3fa2f15ea8db5891a062d422607a450a32cfdfaaeadfb2498e79fe9e47089b2a8bbdbdcbb0768c189cb4c3ffffc00a34176a1c46a924ab4c3877215e5666c7b384e9238b3ad6ac559d90e22170d6915c7150a1858eb3f20a1847642018840b49c335074496991fb3193914f5213846ff8bf5b389298d797dfdd4a1d116caec17f13152c9699caab72a96d364134266030e67ada0de8d2bb05091f7d855fe1c435574856b0f8de9dc6af14ce179e3c0b6b563ccb8e02900fa000001000e5fa71a6e0300000000000000daeb929d0cbd96f9f4501bc9d6d9d0b4f462aaf2556ce92ae6438bb3e3aa258c8c4ba6646f99f5a3d4f14f6773538faee834613461239487bee1b53724eb28301420ced16a8110a8680c91c665f8eff65e2d48f95db7ad4f30d079a39a2286fb3df3472d330f6f11fc7d1939a923c50263b3e0314037ec808df7cec279df5785fa2124d1650563799defc378cb9506ee7142eb108b3f4125ade3d9a73646bfdac795c753895b2ad51d358aff496d1c1a885c30b85b50eca89bf14ee50ae3301805f1691b3a391d7575c9a0a514710ad3e590491c60bdab122222c66cbb155452a01cb9750d14ffdc77ad11d4495c53bf38c8185c769c1409eb0b1c613eac8101d6784c9510790dd1df8fa6f2b4dbdbde3bdcbf6bfc456f68b680f2595853178e89a32e9c56d66fd2210fb0fc0e3cda61e6980e16e47ae8071182af80950c43ba221fe072e6945107a6edcd38bfeb201a657969bf340960a67e30987e56c953a177404fdf67b5d99bbc06d705a0fc9659336b458ea0d575ddfe59706738d1e65c50527200"}) (async) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m29.24700356s ago: executing program 4 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff113}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x41) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000007, 0x204031, 0xffffffffffffffff, 0x42796000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r3, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) 1m29.008252524s ago: executing program 4 (id=270): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000000c0)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @multicast1}}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x2, 0x0, 0x6}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x8) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f0000001800)={'syz1\x00', {0xfffe, 0x3, 0x1ff, 0x40}, 0x40, [0x0, 0x8, 0x5, 0x3, 0x10, 0x80000002, 0x1, 0x22, 0x2, 0x0, 0xffff, 0xf816, 0x6, 0x4, 0x5, 0x434, 0x7, 0x4, 0x3e, 0x9, 0x401, 0x800, 0x5, 0x8, 0xffffffb6, 0x2, 0x5, 0x5, 0x4, 0x40, 0x0, 0x171, 0x8b5d, 0x80000002, 0x6, 0x3, 0x100, 0x5, 0x7fffffff, 0xd, 0x7, 0xfffffff3, 0xfffffffd, 0x7, 0x5, 0x2, 0x8, 0x8, 0x3, 0x1, 0x5, 0x4, 0x3, 0x9, 0x7f, 0x6, 0x40, 0xfd, 0x238, 0x2, 0xf, 0x0, 0x8, 0xbd4], [0x4, 0x3d31d21a, 0x2, 0x3f, 0x6, 0x10000000, 0x3, 0xfffff632, 0x9, 0x4, 0x1ff, 0x6, 0x1, 0x6, 0x2, 0x0, 0xb99, 0x5, 0x0, 0xbe534c70, 0x8000, 0x1, 0x2, 0x3, 0x4, 0x5, 0x1, 0x5, 0x7fffffff, 0x2, 0x9, 0x7, 0xa1, 0x3, 0x2c, 0x7, 0x8, 0x2ba40000, 0x5, 0x9, 0x675, 0x0, 0x7, 0x10, 0x1, 0x1, 0x7fffffff, 0x28b, 0x8001, 0x6, 0x10000, 0x9, 0x10, 0xe2, 0x8, 0x80000001, 0x0, 0x380, 0x4, 0x0, 0xc, 0x40, 0x3, 0x5], [0x7, 0x9, 0x3, 0x7, 0x1, 0x7ff, 0x6, 0x3, 0xffffffff, 0x10000, 0x1800000, 0x7, 0x4, 0x2, 0x0, 0x1, 0x61, 0x10000, 0x0, 0x0, 0x7, 0xf68, 0x3, 0x4d8, 0x7, 0x4, 0x4, 0xfff, 0xa2d9, 0x80000000, 0x80, 0xfffffff7, 0x3, 0x5, 0x8, 0x6, 0x8, 0x0, 0x8001, 0xe, 0xffff, 0x10000, 0x7, 0xffffff7f, 0x7, 0xe, 0xe8, 0x8, 0x5b, 0x6, 0x90, 0x1, 0x1, 0x731d, 0x9, 0x386c, 0x40, 0xf67, 0x1, 0x7, 0x0, 0x10001, 0x0, 0x81], [0x5, 0x2, 0x8, 0xf, 0x2000006, 0x69e, 0x0, 0xc, 0x8000, 0x1, 0x6, 0xf8, 0x2, 0x7ff, 0x3, 0x9, 0x401, 0x80000000, 0xfffffffb, 0xffff, 0xa, 0x1, 0x1, 0x0, 0x4, 0xeaf577e7, 0x6, 0x0, 0x0, 0x1, 0x9, 0x2, 0x7fffffff, 0xfffff4a1, 0x5, 0xb4, 0x6, 0x4, 0x8, 0x0, 0x6c1, 0x400000, 0x3, 0x54, 0x37f7, 0xb51, 0x3, 0x5, 0x5, 0xffffffff, 0x7, 0x2b, 0x2, 0x1, 0x1, 0x0, 0x9, 0x6, 0x5, 0x3, 0xc00, 0x7, 0x8, 0xc]}, 0x45c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$setstatus(r8, 0x4, 0x800) connect$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040f0400010504"], 0x7) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04030b00c800aaaaaaaaaa100100"], 0xe) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040b0b00c8000000000000000000"], 0xe) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="04060300c800"], 0x6) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="04080400c80000"], 0x7) nanosleep(&(0x7f0000000600)={0x0, 0x10000000}, 0x0) r9 = fanotify_init(0x202, 0x0) r10 = dup2(r9, r7) read$FUSE(r10, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000010300", @ANYRES32=r5, @ANYBLOB="c1a716ec"], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 1m28.568537697s ago: executing program 4 (id=273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000000)={0x18, r5, 0x1, 0x0, &(0x7f00000004c0)=[{0x412df, 0x2000000000000004}]}) close(0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x4c040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001000), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r6, &(0x7f0000000b00)='0', 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x20000000000000}) r8 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ioctl$SNDCTL_DSP_GETISPACE(r7, 0x8010500d, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000500)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x22, 0x301, 0x70bd28, 0x25dfdbfd, {0x15}, [@typed={0x11, 0x14e, 0x0, 0x0, @str=',/]{#+:[($\x88,\x00'}]}, 0x28}}, 0x4008002) fcntl$addseals(r8, 0x409, 0x3f) 1m25.501386462s ago: executing program 4 (id=275): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x178, 0x10, 0x1, 0x100000, 0x25dfdbff, {{@in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x32}, @in=@multicast2, {0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, {}, {0x2}, 0xffffffff, 0x0, 0xa}, [@sec_ctx={0x86, 0x8, {0x82, 0x8, 0x1, 0x40, 0x7a, "0bc47077076a2151af68162013e7e136267f092f980f8a513a3d70e934516383ae927c42fbcb3f7e49c064a41b6b6dd3d076241e01b3aa19a99e7af37713a1aacd8fa7a2526af6541913ded928feb8616dadb6a1c067a5b1b1659179d951df2a4c854e7978e459e1076f41db3a3f3722ad2e46a613b850e026c7"}}]}, 0x178}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x178, 0x10, 0x1, 0x100000, 0x25dfdbff, {{@in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x32}, @in=@multicast2, {0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, {}, {0x2}, 0xffffffff, 0x0, 0xa}, [@sec_ctx={0x86, 0x8, {0x82, 0x8, 0x1, 0x40, 0x7a, "0bc47077076a2151af68162013e7e136267f092f980f8a513a3d70e934516383ae927c42fbcb3f7e49c064a41b6b6dd3d076241e01b3aa19a99e7af37713a1aacd8fa7a2526af6541913ded928feb8616dadb6a1c067a5b1b1659179d951df2a4c854e7978e459e1076f41db3a3f3722ad2e46a613b850e026c7"}}]}, 0x178}}, 0x0) 1m25.120086291s ago: executing program 4 (id=284): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0x1, 0x3, 0x0, &(0x7f0000000640)) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x4, '\x00', @buffer={"010d1de90c16308a633fda925d1085c600", 0x20}, 0x400}, {0x27, '\x00', @data=0x6, 0x5}, {0x22, '\x00', @st={0x4, [{0x1, @uvalue=0xfffffffffffffff8}, {0x70fc8a754da600a0, @uvalue=0xfffffffffffffff5}, {0x3, @svalue=0xc2c}, {0x3, @uvalue=0x2}]}, 0x40007fe}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 1m25.053774491s ago: executing program 35 (id=284): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0x1, 0x3, 0x0, &(0x7f0000000640)) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x4, '\x00', @buffer={"010d1de90c16308a633fda925d1085c600", 0x20}, 0x400}, {0x27, '\x00', @data=0x6, 0x5}, {0x22, '\x00', @st={0x4, [{0x1, @uvalue=0xfffffffffffffff8}, {0x70fc8a754da600a0, @uvalue=0xfffffffffffffff5}, {0x3, @svalue=0xc2c}, {0x3, @uvalue=0x2}]}, 0x40007fe}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 59.776835352s ago: executing program 6 (id=393): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async, rerun: 64) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) (async, rerun: 64) r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000100), 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) (async) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) accept4(r3, 0x0, 0x0, 0x80800) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14080001"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4008010) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dev/sda1\x00', &(0x7f0000000180)='ubifs\x00', 0x3201020, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) fallocate(r0, 0x46, 0x9, 0xfff9) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000400)=@ethtool_sfeatures={0x3b, 0x2, [{0xc, 0x63}, {0x0, 0x73}]}}) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)="28217e5f73638f33952a8fbf3318c5f56f6df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627d906f474a6aed40310ef326e2d98a5d1ba7ac41ffd68ab3ad8dd0c808f64e3f4bc5be6513ef1ac66a6aaa17bd4918a20c7ed9fbf12b64c6d27", 0x62) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) 58.891653561s ago: executing program 6 (id=394): syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaa44aaaaaaaaaabb08004621002800680021907864010100ac1414aa000000004e204e2104b1"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000fffffff500000001"], 0xfdef) 58.770778398s ago: executing program 6 (id=395): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f00000000c0)=0x68) chroot(&(0x7f0000000180)='./file0\x00') sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c0001001790000002000000080001"], 0xb8}}, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6801e700", @ANYRES16=r5, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x4000}, 0x80c4) 57.260540787s ago: executing program 6 (id=397): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2a532d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2) 57.24518363s ago: executing program 6 (id=402): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000002980)={0x0, 0x2}) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002001000fc0000060000000006001500020000000c001680080006000400000094640ab852881f044195b7c945e02746368e9b4dd383cf354e21cdbbcf6f1b9be706a307d8e90518c6d13e5c7d5975e348649a5d1379b6a64b6e03483e49162d78ad4db95580e49a195ad0ded138253e2abbc7f97a96d7a7ecbe4099047993ce69e19608120d29287993ff498b51618e3ec2fca273ffceb57079f54e61a847fe26426bb7b2df8178e1d7e635ba8fb0b66eb30f8493bbbfca241f644799811384f3838c3a1cbd03ec3b47176ad5b75266d29d25bacc06e3581dd9798acb22a34406153f76d35d8cab16dfeca7da19f809d8e512d5ab2f6d148ed0"], 0x30}}, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000002980)={0x0, 0x2}) (async) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) (async) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) (async) 57.060453694s ago: executing program 6 (id=406): r0 = socket$kcm(0xa, 0x1, 0x106) syz_emit_ethernet(0x4c, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r1, 0x4b4b, &(0x7f0000000000)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="f5", 0x1}], 0x1}, 0x4008000) sendto$packet(r2, &(0x7f0000000400)="05031682d3fc142e00004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x21, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x2, 0x4017, 0xffff, 0x6, 0x3, 0x6, 0x7, {0x0, @in={{0x2, 0x4e22, @private=0xa110102}}, 0x3, 0xe, 0x0, 0x9ffa, 0xffffbffc}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYBLOB="06000000000001000000ff40e8002ca2f829448686c717369cf1d50b5708ec7827a786fac2a5562e5ecf32179613ec34e4b37156b97d8f302936964b95dc016fb8f25f9e83"], 0xe) mount(&(0x7f0000000100)=@rnullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='befs\x00', 0x12cc0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r2, @ANYRES64, @ANYBLOB='\a\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="04000000000000000400"/28], 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x20000000, 0x6}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004e8d4}, 0x8080) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$packet(0x11, 0x3, 0x300) 56.943588353s ago: executing program 36 (id=406): r0 = socket$kcm(0xa, 0x1, 0x106) syz_emit_ethernet(0x4c, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r1, 0x4b4b, &(0x7f0000000000)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="f5", 0x1}], 0x1}, 0x4008000) sendto$packet(r2, &(0x7f0000000400)="05031682d3fc142e00004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x21, &(0x7f0000000000)=0xff, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x2, 0x4017, 0xffff, 0x6, 0x3, 0x6, 0x7, {0x0, @in={{0x2, 0x4e22, @private=0xa110102}}, 0x3, 0xe, 0x0, 0x9ffa, 0xffffbffc}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYBLOB="06000000000001000000ff40e8002ca2f829448686c717369cf1d50b5708ec7827a786fac2a5562e5ecf32179613ec34e4b37156b97d8f302936964b95dc016fb8f25f9e83"], 0xe) mount(&(0x7f0000000100)=@rnullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='befs\x00', 0x12cc0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r2, @ANYRES64, @ANYBLOB='\a\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="04000000000000000400"/28], 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x20000000, 0x6}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004e8d4}, 0x8080) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$packet(0x11, 0x3, 0x300) 47.392041463s ago: executing program 5 (id=469): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) pipe2$watch_queue(&(0x7f0000000280), 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x11, 0x2, 0xfffffffe) bind$packet(r4, &(0x7f0000000500)={0x11, 0x0, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) close(0x3) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 47.299562562s ago: executing program 5 (id=470): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0xf3a, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x1ff, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000000)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r6, 0x0, 0xfffffee2) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000040)=0x1c) getpeername$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x590f, 0x4, 0x1, 0x58}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xab25, 0x1, 0x3, 0x1ef, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdab2, 0x4, 0x401, 0x1ca}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf267, 0x8, 0x1, 0x380, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a9b, 0x400, 0x0, 0x2e, 0x0, r4}}], 0x4, &(0x7f00000005c0)={0x2e, 0x35, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7f}, 0x0, 0x0, '\x00', {0x1, 0x711, 0x0, &(0x7f0000000ac0)=@buf_4k="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"}}, &(0x7f0000001b40)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002080)=ANY=[@ANYRES16=0x0, @ANYRES16=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 47.098696679s ago: executing program 5 (id=472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x2, 0x21000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x14}, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x56}, 0x20000800) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newae={0x48, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in=@private=0xa010100, 0x4d4, 0xa, 0x32}, @in=@multicast2, 0x3, 0x3503}, [@replay_thresh={0x8, 0xb, 0x10}]}, 0x48}}, 0x20000800) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x181}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0x39b, 0x0, 0x7fffffffffffffff}, {0xb77, 0x0, 0x7}]}) 46.789270972s ago: executing program 5 (id=473): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) 46.721664031s ago: executing program 5 (id=476): setns(0xc9, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./proc\x00', 0xaa901, 0x0) write(r0, &(0x7f00000002c0)='tcp 2', 0x5) 46.670069939s ago: executing program 5 (id=477): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7fff, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8432}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffc}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000200)={0x8, 'ip6gretap0\x00', {'syzkaller0\x00'}, 0x7f}) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000240)) timerfd_settime(r0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg/2:0:0:0\x00', 0x40000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x98, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x1101, 0x2}, @flat=@handle={0x73682a85, 0x10b, 0x2}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}, 0x1000}, @acquire_done={0x40106309, 0x3}, @exit_looper, @increfs_done, @enter_looper, @release={0x40046306, 0x3}, @dead_binder_done, @exit_looper, @register_looper], 0xa6, 0x0, &(0x7f0000000500)="4f0787d5b74711e5528c88262d819d82ebb75aca1384bd868f3125460c4c6e1ae80ce2aaa1f595948107ae95831cad7db32e27fb7210ead272eae20f4989108f4e4687e6702bd0eb5b3166dc1b055dc97a3eb0422db362fcfcb5bbc0682c12a962ca82b6b601d5acff735a4120bc20111ce3052d98742012afb2fec1678fde6578b2b24563f7ec3d3940645bba536b0d397d9fe2cfa979196908390a3a412ee218c814e78948"}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x230, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffe, 0x6b}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x181, 0x80, [@measure_req={0x26, 0x73, {0x7a, 0x16, 0x9, "65d59580bac9d05ec74075d9f498eecd9a0713c2663d5ee59c6529b2fee9707aaea7e62215fad5321980f0f46689bd0ec70e87d2ed4fc8e0855fcdc7241b3c1f888cf35dbe6e0cad25809eadd23ce0160687f6e492dab25fb69d1052f1333aab8e0ab7f7f849c7e4a38e94ecf9603671"}}, @fast_bss_trans={0x37, 0x6c, {0xff, 0x4, "fefc9bf6d3b87bed98136528e7f6b328", "223aaaefa08ffbc9a6908ff10a4c69fd02ffd59dab91c8b7db4c503dc0b0bbcc", "4b0ee6f52aa1ce6c9cff4bcc6cfb9bb9a1dc32fb62c710613e14f9fefb036d45", [{0xa, 0x2, "3aa8"}, {0x1, 0x6, "20a8c44117d9"}, {0x2, 0x3, "012f96"}, {0x2, 0x7, "bdb183eb635bdd"}]}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0xa, 0x4, @device_a, 0xd3, 0x6, 0x8}}, @fast_bss_trans={0x37, 0x81, {0x9a, 0x3, "eec39c61da80d0fbe9efdd73a4890f74", "eb9aadc6f5e2656d9183ff5ec50643882478d049357d733b5a96e2235880b8da", "042b71859923286d000ecbf4778a073d6f23fc2ff7ffd16e86d8e20104fe2862", [{0x3, 0x24, "17c6f4fe59750857d2bda46c4866b3bec03dc9be3b2a825e03073f955dba3f2fdc61072f"}, {0x2, 0x4, "fa5d2131"}, {0x4, 0x1, '7'}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x60, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x12, 0x3, "215343f43cc21958a418280e75ea"}, @NL80211_FTM_RESP_ATTR_LCI={0x39, 0x2, "bd841b3656943498ab1f508fef25f9ad57417dbe43cfacd24b02fbe9b49a9ed5856ee95952da62820d0227727879220631001b8ddd"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x21, 0x80, [@ssid={0x0, 0x1, @random="80"}, @mic={0x8c, 0x10, {0xa6, "2e9d744a80d9", @short="637d24bc22da4686"}}, @cf={0x4, 0x6, {0x1, 0x1, 0x100, 0x9}}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x40}, 0x40001) syz_genetlink_get_family_id$gtp(&(0x7f0000000900), r0) utimensat(r0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={{}, {0x77359400}}, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x6bc7) fsetxattr$security_capability(r3, &(0x7f00000009c0), &(0x7f0000000a00)=@v3={0x3000000, [{0x2}, {0x9, 0x9c}]}, 0x18, 0x2) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r0, 0x800c6f40, &(0x7f0000000a40)={""/4, 0x4}) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$cgroup_int(r0, &(0x7f0000000a80)=0x8, 0x12) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000b40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa22}}, './file0\x00'}) openat$cgroup_procs(r4, &(0x7f0000000b80)='cgroup.procs\x00', 0x2, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x10, 0x3f5, 0x800, 0x70bd25, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000cc0)={'gretap0\x00', {0x2, 0x4e20, @multicast1}}) socket$inet6(0xa, 0x5, 0x4) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000d00)={0x0, 0x2, 0x1}) syz_genetlink_get_family_id$gtp(&(0x7f0000000d40), r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000e40)={&(0x7f0000000d80), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, 0x0, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x51}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x180000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x25}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xad}]}]}, 0x38}}, 0x20040000) 34.228947758s ago: executing program 8 (id=547): r0 = syz_open_dev$media(&(0x7f0000000140), 0x3, 0x100) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000, 0x0}}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000240)={r2, &(0x7f0000000200)=[{0x80000000}], &(0x7f00000003c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000500)={r6, 0x0, &(0x7f0000000540)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f000000a300)={{r5, r8, 0x2, [0x80000001, 0x8]}, {r7, r3, 0x6, [0x2, 0x3]}, 0x0, [0x7d, 0x8]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=[{{}, {0x80000000, 0x0}}]}) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0xb, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000a00)={{0x80000000, r3, 0x6, [0x6, 0x6]}, {0x80000000, r9, 0x69edb310c7b022fe, [0x9, 0x202]}, 0x10000000, [0x22, 0x1]}) 34.227822258s ago: executing program 8 (id=548): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) 33.061405776s ago: executing program 8 (id=549): syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaa44aaaaaaaaaabb08004621002800680021907864010100ac1414aa000000004e204e2104b1"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000f5ff00000001"], 0xfdef) 32.881201236s ago: executing program 8 (id=550): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) utime(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/mycluster/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/mycluster/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='77', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000f00)='1\n', 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0xff02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dlmfs_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dlmfs_mnt\x00', &(0x7f0000000300)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./dlmfs_mnt/domain1\x00', 0x1ff) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 32.770067918s ago: executing program 8 (id=551): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0\x00') sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x48000) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc5) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000f00)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 32.559264823s ago: executing program 8 (id=553): r0 = socket(0xa, 0x3, 0x9) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x40000, @loopback}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x40000000, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 32.470025795s ago: executing program 37 (id=553): r0 = socket(0xa, 0x3, 0x9) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x40000, @loopback}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x40000000, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 31.250052978s ago: executing program 38 (id=477): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7fff, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8432}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffc}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000200)={0x8, 'ip6gretap0\x00', {'syzkaller0\x00'}, 0x7f}) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000240)) timerfd_settime(r0, 0x1, &(0x7f0000000280), &(0x7f00000002c0)) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg/2:0:0:0\x00', 0x40000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x98, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x1101, 0x2}, @flat=@handle={0x73682a85, 0x10b, 0x2}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}, 0x1000}, @acquire_done={0x40106309, 0x3}, @exit_looper, @increfs_done, @enter_looper, @release={0x40046306, 0x3}, @dead_binder_done, @exit_looper, @register_looper], 0xa6, 0x0, &(0x7f0000000500)="4f0787d5b74711e5528c88262d819d82ebb75aca1384bd868f3125460c4c6e1ae80ce2aaa1f595948107ae95831cad7db32e27fb7210ead272eae20f4989108f4e4687e6702bd0eb5b3166dc1b055dc97a3eb0422db362fcfcb5bbc0682c12a962ca82b6b601d5acff735a4120bc20111ce3052d98742012afb2fec1678fde6578b2b24563f7ec3d3940645bba536b0d397d9fe2cfa979196908390a3a412ee218c814e78948"}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x230, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffe, 0x6b}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x181, 0x80, [@measure_req={0x26, 0x73, {0x7a, 0x16, 0x9, "65d59580bac9d05ec74075d9f498eecd9a0713c2663d5ee59c6529b2fee9707aaea7e62215fad5321980f0f46689bd0ec70e87d2ed4fc8e0855fcdc7241b3c1f888cf35dbe6e0cad25809eadd23ce0160687f6e492dab25fb69d1052f1333aab8e0ab7f7f849c7e4a38e94ecf9603671"}}, @fast_bss_trans={0x37, 0x6c, {0xff, 0x4, "fefc9bf6d3b87bed98136528e7f6b328", "223aaaefa08ffbc9a6908ff10a4c69fd02ffd59dab91c8b7db4c503dc0b0bbcc", "4b0ee6f52aa1ce6c9cff4bcc6cfb9bb9a1dc32fb62c710613e14f9fefb036d45", [{0xa, 0x2, "3aa8"}, {0x1, 0x6, "20a8c44117d9"}, {0x2, 0x3, "012f96"}, {0x2, 0x7, "bdb183eb635bdd"}]}}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0xa, 0x4, @device_a, 0xd3, 0x6, 0x8}}, @fast_bss_trans={0x37, 0x81, {0x9a, 0x3, "eec39c61da80d0fbe9efdd73a4890f74", "eb9aadc6f5e2656d9183ff5ec50643882478d049357d733b5a96e2235880b8da", "042b71859923286d000ecbf4778a073d6f23fc2ff7ffd16e86d8e20104fe2862", [{0x3, 0x24, "17c6f4fe59750857d2bda46c4866b3bec03dc9be3b2a825e03073f955dba3f2fdc61072f"}, {0x2, 0x4, "fa5d2131"}, {0x4, 0x1, '7'}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x60, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x12, 0x3, "215343f43cc21958a418280e75ea"}, @NL80211_FTM_RESP_ATTR_LCI={0x39, 0x2, "bd841b3656943498ab1f508fef25f9ad57417dbe43cfacd24b02fbe9b49a9ed5856ee95952da62820d0227727879220631001b8ddd"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x21, 0x80, [@ssid={0x0, 0x1, @random="80"}, @mic={0x8c, 0x10, {0xa6, "2e9d744a80d9", @short="637d24bc22da4686"}}, @cf={0x4, 0x6, {0x1, 0x1, 0x100, 0x9}}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x40}, 0x40001) syz_genetlink_get_family_id$gtp(&(0x7f0000000900), r0) utimensat(r0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={{}, {0x77359400}}, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x6bc7) fsetxattr$security_capability(r3, &(0x7f00000009c0), &(0x7f0000000a00)=@v3={0x3000000, [{0x2}, {0x9, 0x9c}]}, 0x18, 0x2) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r0, 0x800c6f40, &(0x7f0000000a40)={""/4, 0x4}) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$cgroup_int(r0, &(0x7f0000000a80)=0x8, 0x12) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000b40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa22}}, './file0\x00'}) openat$cgroup_procs(r4, &(0x7f0000000b80)='cgroup.procs\x00', 0x2, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x10, 0x3f5, 0x800, 0x70bd25, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000cc0)={'gretap0\x00', {0x2, 0x4e20, @multicast1}}) socket$inet6(0xa, 0x5, 0x4) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000d00)={0x0, 0x2, 0x1}) syz_genetlink_get_family_id$gtp(&(0x7f0000000d40), r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000e40)={&(0x7f0000000d80), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, 0x0, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x51}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x180000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x25}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xad}]}]}, 0x38}}, 0x20040000) 18.250498718s ago: executing program 7 (id=669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000000)={0x8000000, 0x3, 0x2}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c8"], 0xe) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x58}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c00040014000100020011277f000001000000000000000014000200020011277f0000010000004000000000"], 0x54}}, 0x0) 18.071344758s ago: executing program 7 (id=670): setrlimit(0x40000000000008, &(0x7f0000000000)) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000040)={0x0, 0x200000}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x6, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x0, 0x2, {{0x3, 0xfffffff7, 0x6, 0x4d27}, 0x3}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x80000001, 0xf5f6, 0x8, 0x5, 0x55de5cb1}, 0x2}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x6, 0x5, 0x0, 0x2, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x3, 0x8, 0x1, 0x8, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0x8}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1000008, 0x0, 0x2, 0x8, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r9, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000000000008}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) 17.589887011s ago: executing program 7 (id=674): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21400200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getnexthop={0x38, 0x6a, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c4}, 0x80) 17.589462185s ago: executing program 7 (id=675): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8800000000000000000000000000010ac1f11e0000000000000000000000000001078d07230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000940)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) write(r5, &(0x7f0000000000)='7', 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfffffee2) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r6, 0x2, 0x2010, r0, 0x0) 17.329531164s ago: executing program 7 (id=676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002040)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000140)={0x0, 0x4, 0x800, 0x9, 0x5}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r5 = socket$inet(0x2, 0x3, 0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000040)="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", 0x2000, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000900)={0x40000800, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0xae) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000002080)='./file0\x00', 0x1, 0x2) openat(r7, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="66b9c20200000f32baa100ec0f01c80f20d86635200000000f22d8660fe22e0000663ef4b8c6000f00d00f23ee0f01c3f020b59100", 0x35}], 0x1, 0x45, &(0x7f0000000180)=[@cr0], 0x1) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x6f631b4376e74f0e, {0x2, 0x0, @multicast2}, 'macsec0\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x1000, @broadcast}, {0x7, @local}, 0x42, {0x2, 0x0, @private=0xa010102}, 'syz_tun\x00'}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 16.898851216s ago: executing program 7 (id=681): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x48, 0x7a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 16.795723969s ago: executing program 39 (id=681): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x48, 0x7a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 11.129218236s ago: executing program 3 (id=719): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x709240, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5c00000030000504010000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000100000000000000000008000a0078563412", 0x5c}], 0x1}, 0x0) 10.971544676s ago: executing program 3 (id=720): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0xfffffffc, 0x100004, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x100004, 0x4, 0x4, 0x2000, 0xfd, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000002c0)='./file0/file0\x00', 0x100, 0xa4acaef0b0d20362) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) copy_file_range(r9, 0x0, r8, 0x0, 0x8, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r6, @ANYRES16=r9, @ANYRES32=r6, @ANYBLOB="2800038008000100010000000a00020000112233445500000800030000000000080004", @ANYRES8=r9, @ANYRESDEC=0x0, @ANYRES32, @ANYRESDEC=r1], 0x7c}}, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x7210e5a2b6f600b9) r11 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r12, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r12, 0x5b) epoll_ctl$EPOLL_CTL_DEL(r12, 0x2, r10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r12) sendmsg$TIPC_CMD_GET_MAX_PORTS(r8, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r13, 0x300, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40018}, 0x10) close_range(r12, r8, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r10, 0xc0bc5351, &(0x7f00000001c0)={0xf, 0x2, 'client0\x00', 0x6, "2f26199f7fdd6188", "a392f7896cf01b60a97b5696d6de30b14a9b127e400445ccf5e8ca146ccdccef", 0x2, 0x9}) 10.801683133s ago: executing program 3 (id=721): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f00000033c0)=ANY=[], 0x528}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000003980)={0x0, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, @l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, @ethernet={0x306, @remote}, 0x7, 0x0, 0x0, 0x0, 0xb, 0x0, 0x9, 0xfff, 0xff}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000003740)={0x80, 0xa, 0x5, 0x1, 0x0, 0x8, 0x0}) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f0000000140)='\xaa\xaa\xaa\xaa\xaa', 0x200800, &(0x7f00000001c0)={@align=0x694, {0x3210, 0x7, 0x7, 0x764}}, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x2}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f00000002c0)=r5) getpeername(r3, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0xd8, @mcast2}]}, &(0x7f0000000180)=0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x240, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r7, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) 10.658602021s ago: executing program 3 (id=722): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xff7f, 0x2}, 0xffffffd1) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000240001002dbd7000ffdbdf25050000c988ed7dc82c00"], 0x1c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x7, @remote, 0x8}}, 0xa, 0x6, 0xb318, 0x1, 0x6}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000280)={r4, 0x7}, 0x8) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x2f, @multicast1, 0x4e1f, 0x200000, 'ovf\x00', 0x0, 0x50, 0x4}, 0x2c) 9.751149986s ago: executing program 3 (id=727): r0 = socket(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0xc0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000300)="3c00000058001f000307f4f9002304000a04d65f08000100020100021700513500b0406700912deb5b859322340433b6156b5c11109c8c489786fcdc", 0x3c) 9.578948174s ago: executing program 3 (id=730): unshare(0xa040880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='omfs\x00', 0x1) r1 = socket(0x1e, 0x805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='udp 2', 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) recvfrom$inet(r1, &(0x7f0000000100)=""/18, 0x12, 0x2021, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 5.411089452s ago: executing program 2 (id=769): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x800}) socket$key(0xf, 0x3, 0x2) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r4, &(0x7f00000000c0)=""/70, 0x46, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 5.038992985s ago: executing program 2 (id=773): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) pipe(0x0) (async) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="774577022adfba13aeec5ee07a29e1e31278b1fac60475be7ff2c07c6714c23ba0148e4fcc7e4a420c88956dd8158e2312210a6527365d913e6c7b12620a41e6e9", 0x41}], 0x1, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf10, 0x0, 0xffff, 0x9dff, 0x15, "0500"}) (async) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) (async) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0xcd3) (async) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[], 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r3, 0x0, 0x0) (async) ioctl$KVM_TDX_GET_CPUID(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000340)={0x5, 0x0, &(0x7f00000001c0)={0x1, 0x0, [{0x7, 0x6, 0xc49716954cca264d, 0xff, 0x80, 0x7fff, 0xfffffffb}]}}) socket(0x10, 0x3, 0x0) (async) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r5) (async) r6 = socket$kcm(0x29, 0x2, 0x0) close(r6) (async) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) 3.968045609s ago: executing program 2 (id=779): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x13c, 0x10, 0x1, 0x100000, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, {}, {0x2}, 0xffffffff, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'crc32-generic\x00'}}}]}, 0x13c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063514800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = syz_usb_connect$uac3(0x1, 0xea, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102000000ff820529004000010203010902d8000301012007080b0002010130040904000000010130000a2401093100080000000a2410040b00000003b51024100308001f007b26ac450bb13c7d0d24090503000000000000000009040100000102300009040101010102300009240202000039f3020a2402021000400000030e2402010403d50b8d950e4598a50624020101060905010910004d07040a252537000000790d0009bb5e49d1bc95cd8609040201060000000000000001040400f70b240201df040b0924c97a09240201c60060408909e31f0940000701050a252505000000040700"], &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x0, 0x4, 0x5, 0x20, 0x6}, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x4, [@generic={0x6, 0x10, 0x2, "364580"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x9, 0x6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x9, 0x8, 0xd}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80a}}, {0xac, &(0x7f0000000200)=@string={0xac, 0x3, "a3f9c5785db750e1c258d8addbe75da1eb98712871b298e47d3c9f02b5605c4ec08d5df670f7bf215e63355c2aeaf496ea65085f3396fdb202383a0252f748656bbd4771db60a2484077ed8916163ddbfe805a323d569ee800d86dbe907871112f3305c9cec59e9ec7e93a434534ca9e2f92e0652f5e1aa01030bb28c46b298c039a61f42b5240c38f9e11781ee25cdcda54ce408a8521455e6b677cc5b8727c163e8375aa8bb13fc108"}}]}) syz_usb_control_io$uac3(r1, &(0x7f00000006c0)={0x14, &(0x7f0000000440)={0x40, 0xa, 0x102, {0x102, 0x0, "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"}}, &(0x7f0000000580)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "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"}}}, &(0x7f0000000900)={0x44, &(0x7f0000000700)={0x20, 0x7, 0x19, "456fbe0d88185b35267e05e041d527bd8dd7e53834b13fa7c1"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x61}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xbe}, &(0x7f00000007c0)={0x20, 0x81, 0x1, "ee"}, &(0x7f0000000800)={0x20, 0x82, 0x2, "8ecc"}, &(0x7f0000000840)={0x20, 0x83, 0x3, "985103"}, &(0x7f0000000880)={0x20, 0x84, 0x4, "0c566e19"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "725d90"}}) 2.530465789s ago: executing program 0 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008012}, 0x20000000) r2 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x400) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r2, 0x1e67e000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) 2.530207671s ago: executing program 0 (id=788): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000003400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32000000002c000000050a01020000000000000000020000000c00024000000000000000010900010073797a30"], 0xc0}}, 0x20000850) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) syz_emit_ethernet(0xfc6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x9, 0x0, 0x0, 0x9}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x101c02) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$MEMREADOOB(r4, 0xc0104d04, &(0x7f0000000080)={0x7fffffff, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, &(0x7f00000002c0)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) 2.397292872s ago: executing program 0 (id=790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0xfffa7000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000300)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2a, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x200, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x10001, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xaa, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000001c0)={0x28, 0x2, 0x0, {0x5, 0x40, 0x5}}, 0x28) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000005c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r4, 0x0, 0x0, 0x0, 0x40002022}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000480)={{0x2, 0x4e24, @rand_addr=0x64010104}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x4, {0x2, 0x4e24, @remote}, 'bridge0\x00'}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, &(0x7f00000000c0)={0x0, 'geneve0\x00', {0x4}, 0x67be}) recvmmsg$unix(r10, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x36102, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) write$FUSE_DIRENTPLUS(r3, &(0x7f00000000c0)={0x10, 0x0, 0x3}, 0x10) 2.149967326s ago: executing program 0 (id=792): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a163}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "1000"}}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x13, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7c1}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xffe00000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) 1.980518906s ago: executing program 9 (id=793): pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r2, r1, 0xff, 0x8) r4 = fanotify_init(0x2, 0x0) read$FUSE(r0, &(0x7f0000000a80)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000000a80)={0x2020}, 0x2020) fanotify_mark(r4, 0x1, 0x1009, r0, 0x0) vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) (async) vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000004000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000de00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe086736598c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe086736598c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) chmod(&(0x7f0000000140)='./tracing\x00', 0x21) (async) chmod(&(0x7f0000000140)='./tracing\x00', 0x21) 1.250740547s ago: executing program 0 (id=794): setreuid(0xee01, 0xee01) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2759], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async, rerun: 64) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="63a102000000000008000a00", @ANYRES32=r3, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="09000200", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) r4 = syz_open_procfs(r0, &(0x7f0000001080)='mountinfo\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$CEC_DQEVENT(r4, 0xc0506107, &(0x7f0000001e00)) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000001e80)=0x9, 0x4) (async) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\n', 0x1}], 0x1}, 0x5744935563dc1402) (async, rerun: 32) sendmsg$kcm(r6, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) (async, rerun: 32) sendmsg(r6, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x34000}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c000780080004000400000008000100070000000800020009000000080004000500000008000400009e"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000800000000000000000006001a004e230000050021000100000008001800ac1414bb06000300070000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000802000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008"], 0x3c}}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x3) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="1c0000002b0009002dbd7000fedbdf250500000008000100", @ANYRES32=r7, @ANYBLOB="379749dfea916760e0a478402b86f5c7f4684eebff1f58d8b49b9ddf54b916c0dea7c19ab03e3e81b4ddb161d54f2bcb84748e7121e4216139f105185d8725513f9b5c0684b5a59b206542a6b647048463070084fd3eb80ddffd2b8c4a3447f4d28fca"], 0x1c}}, 0x40070) ioctl$BLKCLOSEZONE(r4, 0x40101287, &(0x7f0000001d80)={0xf, 0x5}) (async) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x810) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001dc0)=0x8, 0x4) (async) getdents64(r4, &(0x7f0000000040)=""/4121, 0xffffffffffffff3f) 1.101216838s ago: executing program 0 (id=795): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.100879285s ago: executing program 9 (id=796): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4620000000000000000000000002003e00090000007c00000000000000400000000000000002000000000000007f000000060038000100feff030003000300000003000000610000000000000011000000000000000000000000000000e5"], 0x146) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000400)=[@register_looper], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000400)=[@register_looper], 0x0, 0x0, 0x0}) execveat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000340)={[&(0x7f0000000200)='}:\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='#\\{).\'\xd4\x00', &(0x7f00000002c0)='\\\x00', &(0x7f0000000300)='/dev/ptmx\x00']}, &(0x7f00000003c0)={[&(0x7f0000000380)='./binderfs/binder0\x00']}, 0x1000) dup3(r2, r1, 0x0) (async) r3 = dup3(r2, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x802, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1100, 0x2}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) close(r0) (async) close(r0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000900)=0x15) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x34, r8, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x34, r8, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) ioctl(r6, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) 859.288347ms ago: executing program 2 (id=797): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000c00)='adfs\x00', 0x4418, 0x0) 717.613177ms ago: executing program 2 (id=798): openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) 634.684976ms ago: executing program 2 (id=799): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x180) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x10d, 0x0, 0x0, 0x0, 0x0) 71.562718ms ago: executing program 9 (id=800): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x9355, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000140)=0x1, 0x4) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000f14010026bd7000feccdf4f16260001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040040}, 0x2000a004) write(r2, &(0x7f0000000800)='0', 0x1) 71.251095ms ago: executing program 9 (id=801): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4000000000097ffffff00850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) 176.297µs ago: executing program 9 (id=802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) syz_open_procfs(r1, &(0x7f00000000c0)='projid_map\x00') (async) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='projid_map\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000001400), 0x0, 0x6, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x604c805}, 0x4000000) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) (async) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000180)={0xfffffffa, 0x4, [0x813a]}) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000080)={0x8b, 0x4, 0x5}) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f0000000140)={0x7, 0x4485}) (async) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f0000000140)={0x7, 0x4485}) 0s ago: executing program 9 (id=803): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x15be) mmap$xdp(&(0x7f0000a98000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r0, 0x0) 0s ago: executing program 9 (id=804): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000006a22070200000000000000000009000023a2a8d5935c00000000d570b52b611696aea2656669afbcca1403142e2d"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {0x7fffffffffffffff}}, 0x0) getitimer(0x2, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000001c0)={'veth1\x00'}) write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r1, &(0x7f00000004c0)='\n', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000fe8000/0x2000)=nil, 0x2000, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x14, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) kernel console output (not intermixed with test programs): pe=1400 audit(119.466:990): avc: denied { create } for pid=8103 comm="syz.0.480" name="cluster" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 118.547657][ T43] audit: type=1400 audit(119.466:991): avc: denied { search } for pid=8103 comm="syz.0.480" name="/" dev="configfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.547776][ T43] audit: type=1400 audit(119.466:992): avc: denied { search } for pid=8103 comm="syz.0.480" name="dlm" dev="configfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.547881][ T43] audit: type=1400 audit(119.466:993): avc: denied { search } for pid=8103 comm="syz.0.480" name="cluster" dev="configfs" ino=29737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.547985][ T43] audit: type=1400 audit(119.466:994): avc: denied { search } for pid=8103 comm="syz.0.480" name="comms" dev="configfs" ino=29739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 118.781582][ T5615] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 118.932377][ T5615] usb 13-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 118.933253][ T5615] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.933268][ T5615] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 118.934836][ T5615] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.934849][ T5615] usb 13-1: Product: syz [ 118.934857][ T5615] usb 13-1: Manufacturer: syz [ 118.934865][ T5615] usb 13-1: SerialNumber: syz [ 119.164545][ T5615] usblp 13-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 119.476904][ T7089] usb 13-1: USB disconnect, device number 7 [ 119.486365][ T7089] usblp0: removed [ 119.521659][ T5816] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 119.682537][ T5816] usb 12-1: Using ep0 maxpacket: 8 [ 119.683426][ T5816] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 119.686930][ T5816] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 119.686950][ T5816] usb 12-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 119.686967][ T5816] usb 12-1: config 179 has no interface number 0 [ 119.687003][ T5816] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 119.687022][ T5816] usb 12-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 119.687055][ T5816] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.809979][ T8127] netlink: 56 bytes leftover after parsing attributes in process `syz.0.487'. [ 119.810204][ T8127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32768 sclass=netlink_route_socket pid=8127 comm=syz.0.487 [ 119.810251][ T8127] netlink: 56 bytes leftover after parsing attributes in process `syz.0.487'. [ 119.900520][ T5816] usb 12-1: USB disconnect, device number 9 [ 120.055515][ T8138] ip_tables: iptables: counters copy to user failed while replacing table [ 120.061676][ T8138] tmpfs: Unknown parameter 'mp' [ 120.069374][ T8136] CIFS: VFS: UNC: missing share name [ 120.069528][ T8136] CIFS: VFS: Malformed UNC in devname [ 120.322128][ T8156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8156 comm=syz.8.495 [ 120.334304][ T8155] bridge1: entered promiscuous mode [ 120.338063][ T8155] bridge1: entered allmulticast mode [ 120.414324][ T5816] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 120.442209][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.7.497'. [ 120.442795][ T8163] 9pnet_fd: Insufficient options for proto=fd [ 120.561684][ T5816] usb 5-1: device descriptor read/64, error -71 [ 120.621656][ T7365] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 120.781723][ T7365] usb 13-1: Using ep0 maxpacket: 8 [ 120.784540][ T7365] usb 13-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 120.790037][ T7365] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.790090][ T7365] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.790153][ T7365] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 120.790198][ T7365] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 120.790245][ T7365] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.801707][ T7365] hub 13-1:1.0: bad descriptor, ignoring hub [ 120.801730][ T7365] hub 13-1:1.0: probe with driver hub failed with error -5 [ 120.802112][ T7365] cdc_wdm 13-1:1.0: skipping garbage [ 120.802124][ T7365] cdc_wdm 13-1:1.0: skipping garbage [ 120.818300][ T7365] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 120.818317][ T7365] cdc_wdm 13-1:1.0: Unknown control protocol [ 120.821522][ T5816] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 120.961627][ T5816] usb 5-1: device descriptor read/64, error -71 [ 121.072128][ T5816] usb usb5-port1: attempt power cycle [ 121.284802][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.8.496'. [ 121.285172][ T5830] usb 13-1: USB disconnect, device number 8 [ 121.421608][ T5816] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 121.443927][ T5816] usb 5-1: device descriptor read/8, error -71 [ 121.645654][ T8182] dlm: no locking on control device [ 121.682044][ T5816] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 121.703156][ T5816] usb 5-1: device descriptor read/8, error -71 [ 121.813217][ T5816] usb usb5-port1: unable to enumerate USB device [ 122.921552][ T7883] usb 12-1: new low-speed USB device number 10 using dummy_hcd [ 123.072354][ T7883] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 123.073285][ T7883] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.073303][ T7883] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 123.073328][ T7883] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 123.073352][ T7883] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.076839][ T8209] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 123.080232][ T7883] hub 12-1:1.0: bad descriptor, ignoring hub [ 123.080257][ T7883] hub 12-1:1.0: probe with driver hub failed with error -5 [ 123.080779][ T7883] cdc_wdm 12-1:1.0: skipping garbage [ 123.080792][ T7883] cdc_wdm 12-1:1.0: skipping garbage [ 123.089770][ T7883] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 123.089792][ T7883] cdc_wdm 12-1:1.0: Unknown control protocol [ 123.205459][ T8211] pimreg: entered allmulticast mode [ 123.207634][ T8211] pimreg: left allmulticast mode [ 123.334345][ T8213] No control pipe specified [ 124.199518][ T8209] cdc_wdm 12-1:1.0: Error autopm - -16 [ 124.202104][ T2178] usb 12-1: USB disconnect, device number 10 [ 124.283820][ T8220] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.285641][ T8220] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.285830][ T8220] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.286044][ T8220] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.286117][ T8220] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.296343][ T8220] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.386514][ T8243] netlink: 'syz.8.507': attribute type 10 has an invalid length. [ 124.389308][ T8243] syz_tun: entered promiscuous mode [ 124.398801][ T8243] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 124.404769][ T8244] netlink: 'syz.8.507': attribute type 10 has an invalid length. [ 124.563120][ T5809] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 124.567121][ T43] kauditd_printk_skb: 34 callbacks suppressed [ 124.567140][ T43] audit: type=1400 audit(125.486:1029): avc: denied { map } for pid=8261 comm="syz.8.509" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 124.643168][ T2178] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 124.732708][ T5809] usb 5-1: Using ep0 maxpacket: 8 [ 124.733523][ T5809] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.734498][ T5809] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 124.734543][ T5809] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 124.734567][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 124.734587][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.734607][ T5809] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.734640][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.811741][ T2178] usb 12-1: Using ep0 maxpacket: 8 [ 124.815840][ T2178] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 124.816759][ T2178] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.816771][ T2178] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.816791][ T2178] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 124.816805][ T2178] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 124.816824][ T2178] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.826134][ T2178] hub 12-1:1.0: bad descriptor, ignoring hub [ 124.826149][ T2178] hub 12-1:1.0: probe with driver hub failed with error -5 [ 124.826393][ T2178] cdc_wdm 12-1:1.0: skipping garbage [ 124.826401][ T2178] cdc_wdm 12-1:1.0: skipping garbage [ 124.833035][ T2178] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 124.833049][ T2178] cdc_wdm 12-1:1.0: Unknown control protocol [ 124.936218][ T43] audit: type=1400 audit(125.856:1030): avc: denied { lock } for pid=8290 comm="syz.8.515" path="socket:[29001]" dev="sockfs" ino=29001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 124.949444][ T5809] usb 5-1: GET_CAPABILITIES returned 0 [ 124.949527][ T5809] usbtmc 5-1:16.0: can't read capabilities [ 125.187495][ T5809] usb 12-1: USB disconnect, device number 11 [ 125.188731][ T8222] cdc_wdm 12-1:1.0: Error submitting int urb - -19 [ 125.192671][ T42] usb 5-1: USB disconnect, device number 18 [ 125.631710][ T5085] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.751111][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.7.516'. [ 125.753267][ T8296] netlink: 'syz.0.517': attribute type 3 has an invalid length. [ 125.753286][ T8296] netlink: 'syz.0.517': attribute type 6 has an invalid length. [ 125.753298][ T8296] netlink: 52 bytes leftover after parsing attributes in process `syz.0.517'. [ 125.829846][ T8300] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 125.835063][ T8300] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 125.846270][ T8303] xt_l2tp: missing protocol rule (udp|l2tpip) [ 126.081335][ T43] audit: type=1400 audit(126.996:1031): avc: denied { mount } for pid=8317 comm="syz.0.525" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 126.171940][ T7365] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 126.231560][ T5816] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 126.331623][ T7365] usb 13-1: Using ep0 maxpacket: 8 [ 126.332173][ T7365] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 126.333280][ T7365] usb 13-1: config 179 has an invalid interface number: 65 but max is 0 [ 126.333296][ T7365] usb 13-1: config 179 has no interface number 0 [ 126.333320][ T7365] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 126.333335][ T7365] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 126.333350][ T7365] usb 13-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 126.333386][ T7365] usb 13-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 126.333409][ T7365] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.337002][ T8312] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 126.351884][ T5085] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.351932][ T5085] Bluetooth: hci0: command 0x0419 tx timeout [ 126.351957][ T5085] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.395016][ T5816] usb 12-1: unable to get BOS descriptor or descriptor too short [ 126.395086][ T5816] usb 12-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 126.395952][ T5816] usb 12-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.398592][ T5816] usb 12-1: string descriptor 0 read error: -22 [ 126.398674][ T5816] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.421637][ T42] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 126.543756][ T7365] usb 13-1: USB disconnect, device number 9 [ 126.582336][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 126.583170][ T42] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.584167][ T42] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 126.584211][ T42] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 126.584234][ T42] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 126.584253][ T42] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.584271][ T42] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.584303][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.796461][ T42] usb 5-1: GET_CAPABILITIES returned 0 [ 126.796544][ T42] usbtmc 5-1:16.0: can't read capabilities [ 126.998892][ T8320] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 127.000863][ T5809] usb 5-1: USB disconnect, device number 19 [ 127.222224][ T8314] syz.7.524 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 127.549430][ T43] audit: type=1400 audit(128.466:1032): avc: denied { mount } for pid=8340 comm="syz.0.528" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 127.555572][ T8341] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 127.559344][ T43] audit: type=1400 audit(128.476:1033): avc: denied { write } for pid=8340 comm="syz.0.528" name="kvm_hv_stimer_cleanup" dev="tracefs" ino=27525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 127.561703][ T43] audit: type=1400 audit(128.476:1034): avc: denied { add_name } for pid=8340 comm="syz.0.528" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 127.561761][ T43] audit: type=1400 audit(128.476:1035): avc: denied { create } for pid=8340 comm="syz.0.528" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 128.231588][ T5615] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 128.392459][ T5615] usb 13-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 128.393654][ T5615] usb 13-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 128.393679][ T5615] usb 13-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 128.394741][ T5615] usb 13-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 128.394771][ T5615] usb 13-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 128.404294][ T5615] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.404321][ T5615] usb 13-1: Product: syz [ 128.404380][ T5615] usb 13-1: Manufacturer: syz [ 128.404395][ T5615] usb 13-1: SerialNumber: syz [ 128.409233][ T5615] ti_usb_3410_5052 13-1:2.0: required endpoints missing [ 128.434406][ T5734] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.468151][ T8363] netlink: 'syz.0.536': attribute type 10 has an invalid length. [ 128.468337][ T8363] netlink: 40 bytes leftover after parsing attributes in process `syz.0.536'. [ 128.468527][ T8363] dummy0: entered promiscuous mode [ 128.612340][ T6804] usb 13-1: USB disconnect, device number 10 [ 128.661057][ T8372] CIFS: Attempting to mount //127.0.0.1/share [ 129.208802][ T8377] Bluetooth: ISO socket layer initialized [ 129.263856][ T5734] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 129.414496][ T43] audit: type=1400 audit(130.336:1036): avc: denied { create } for pid=8384 comm="syz.8.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 129.437618][ T43] audit: type=1400 audit(130.356:1037): avc: denied { sys_admin } for pid=8384 comm="syz.8.542" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 129.493866][ T8372] CIFS: VFS: Error connecting to socket. Aborting operation. [ 129.497570][ T8372] CIFS: VFS: cifs_mount failed w/return code = -4 [ 129.941574][ T6804] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 130.091620][ T6804] usb 5-1: device descriptor read/64, error -71 [ 130.243172][ T43] audit: type=1326 audit(131.166:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.8.542" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83019e159 code=0x7fc00000 [ 130.243313][ T43] audit: type=1326 audit(131.166:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8384 comm="syz.8.542" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa83019e159 code=0x7fc00000 [ 130.286296][ T43] audit: type=1400 audit(131.206:1040): avc: denied { create } for pid=8391 comm="syz.8.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.331579][ T6804] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 130.437580][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.8.545'. [ 130.462141][ T6804] usb 5-1: device descriptor read/64, error -71 [ 130.500510][ T43] audit: type=1400 audit(131.416:1041): avc: denied { write } for pid=8397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.500981][ T8400] netlink: 16 bytes leftover after parsing attributes in process `syz.8.546'. [ 130.555391][ T43] audit: type=1400 audit(131.476:1042): avc: denied { write } for pid=8402 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.573845][ T6804] usb usb5-port1: attempt power cycle [ 130.603047][ T5439] veth1_vlan: left promiscuous mode [ 130.670214][ T8406] futex_wake_op: syz.8.547 tries to shift op by 144; fix this program [ 130.670959][ T8406] futex_wake_op: syz.8.547 tries to shift op by 144; fix this program [ 130.761701][ T43] audit: type=1400 audit(131.676:1043): avc: denied { write } for pid=8410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.825864][ T43] audit: type=1400 audit(131.746:1044): avc: denied { write } for pid=8413 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.912352][ T6804] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 130.931518][ T65] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 130.932448][ T6804] usb 5-1: device descriptor read/8, error -71 [ 131.082223][ T65] usb 13-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 131.083166][ T65] usb 13-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 131.083193][ T65] usb 13-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.083203][ T65] usb 13-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 131.083983][ T65] usb 13-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 131.084004][ T65] usb 13-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.084015][ T65] usb 13-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 131.085700][ T65] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.085752][ T65] usb 13-1: Product: syz [ 131.085761][ T65] usb 13-1: Manufacturer: syz [ 131.085768][ T65] usb 13-1: SerialNumber: syz [ 131.094590][ T65] ti_usb_3410_5052 13-1:2.0: TI USB 5052 2 port adapter converter detected [ 131.094858][ T65] ti_usb_3410_5052 13-1:2.0: missing endpoints [ 131.171681][ T6804] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 131.192572][ T6804] usb 5-1: device descriptor read/8, error -71 [ 131.293174][ T65] usb 13-1: USB disconnect, device number 11 [ 131.301789][ T6804] usb usb5-port1: unable to enumerate USB device [ 132.015605][ T43] audit: type=1400 audit(132.936:1045): avc: denied { write } for pid=8418 comm="syz.8.550" name="node" dev="configfs" ino=9080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.080891][ T8419] o2cb: Local heartbeat has not been started. [ 132.080982][ T8419] o2cb: Cluster check failed. Fix errors before retrying. [ 132.081602][ T43] audit: type=1400 audit(132.996:1046): avc: denied { write } for pid=8418 comm="syz.8.550" name="/" dev="ocfs2_dlmfs" ino=30866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.081636][ T43] audit: type=1400 audit(132.996:1047): avc: denied { create } for pid=8418 comm="syz.8.550" name="domain1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 132.081680][ T8419] (syz.8.550,8419,0):user_dlm_register:674 ERROR: status = -22 [ 132.081700][ T8419] (syz.8.550,8419,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 132.260730][ T8421] bond0: (slave syz_tun): Releasing backup interface [ 132.274232][ T8313] usb 12-1: 1:1: usb_set_interface failed (-110) [ 132.288261][ T7883] usb 12-1: USB disconnect, device number 12 [ 132.554867][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.559731][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.560365][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.563999][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.564668][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.882752][ T7883] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 132.997238][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.997555][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.997669][ T8433] bridge_slave_0: entered allmulticast mode [ 132.999254][ T8433] bridge_slave_0: entered promiscuous mode [ 133.003741][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.003860][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.003970][ T8433] bridge_slave_1: entered allmulticast mode [ 133.005307][ T8433] bridge_slave_1: entered promiscuous mode [ 133.030097][ T8433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.036938][ T8433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.051596][ T7883] usb 12-1: Using ep0 maxpacket: 8 [ 133.056065][ T7883] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.057266][ T8433] team0: Port device team_slave_0 added [ 133.057636][ T7883] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 133.057672][ T7883] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.057684][ T7883] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.057698][ T7883] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.057711][ T7883] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.057733][ T7883] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.058774][ T8433] team0: Port device team_slave_1 added [ 133.087263][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.088269][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.088585][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.088598][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.088617][ T8433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.090742][ T8433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.090755][ T8433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.090775][ T8433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.117615][ T8433] hsr_slave_0: entered promiscuous mode [ 133.118094][ T8433] hsr_slave_1: entered promiscuous mode [ 133.118401][ T8433] debugfs: 'hsr0' already exists in 'hsr' [ 133.118414][ T8433] Cannot create hsr debugfs directory [ 133.264261][ T8432] netlink: 84 bytes leftover after parsing attributes in process `syz.7.556'. [ 133.268703][ T7883] usb 12-1: GET_CAPABILITIES returned 0 [ 133.268750][ T7883] usbtmc 12-1:16.0: can't read capabilities [ 133.291068][ T8433] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 133.294416][ T8433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.295183][ T8433] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 133.302228][ T8433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.303351][ T8433] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 133.308810][ T8433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.309685][ T8433] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 133.315131][ T8433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.334331][ T8433] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.334408][ T8433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.334702][ T8433] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.334749][ T8433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.371086][ T8433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.380067][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.383963][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.392608][ T8433] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.396585][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.396662][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.400414][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.400460][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.470735][ T8432] overlay: Unknown parameter ' ' [ 133.599725][ T7365] usb 12-1: USB disconnect, device number 13 [ 133.745796][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.750277][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.755213][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.765795][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.766524][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.783925][ T8433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.867618][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 133.982771][ T8433] veth0_vlan: entered promiscuous mode [ 133.987302][ T8433] veth1_vlan: entered promiscuous mode [ 134.005831][ T8433] veth0_macvtap: entered promiscuous mode [ 134.010697][ T8433] veth1_macvtap: entered promiscuous mode [ 134.025171][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.045586][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.142642][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.184428][ T5801] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.222925][ T5801] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.225530][ T5801] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.225795][ T5801] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.327440][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.340471][ T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.340527][ T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.439071][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.456641][ T7969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.456677][ T7969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.500083][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.592276][ T5085] Bluetooth: hci2: command tx timeout [ 134.597761][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.600235][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.603098][ T8477] bridge_slave_0: entered allmulticast mode [ 134.611791][ T8477] bridge_slave_0: entered promiscuous mode [ 134.619264][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.619339][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.619520][ T8477] bridge_slave_1: entered allmulticast mode [ 134.620252][ T8477] bridge_slave_1: entered promiscuous mode [ 134.677395][ T8477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.699085][ T8477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.786493][ T8477] team0: Port device team_slave_0 added [ 134.846223][ T8477] team0: Port device team_slave_1 added [ 134.879261][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.879293][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.879542][ T8477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.927693][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.927737][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.930189][ T8477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 135.052024][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.578'. [ 135.063735][ T8562] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 135.081384][ T13] team0: Port device xfrm0 removed [ 135.146079][ T13] bond0 (unregistering): Released all slaves [ 135.150485][ T13] bond1 (unregistering): Released all slaves [ 135.161246][ T13] bond2 (unregistering): Released all slaves [ 135.238943][ T201] tipc: Resetting bearer [ 135.284795][ T13] tipc: Disabling bearer [ 135.292239][ T13] tipc: Left network mode [ 135.306946][ T8477] hsr_slave_0: entered promiscuous mode [ 135.310419][ T8477] hsr_slave_1: entered promiscuous mode [ 135.311054][ T8477] debugfs: 'hsr0' already exists in 'hsr' [ 135.311072][ T8477] Cannot create hsr debugfs directory [ 135.311791][ T12] netdevsim netdevsim5 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.311868][ T12] netdevsim netdevsim5 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.311898][ T12] netdevsim netdevsim5 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.311927][ T12] netdevsim netdevsim5 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.430413][ T43] kauditd_printk_skb: 216 callbacks suppressed [ 135.430500][ T43] audit: type=1400 audit(136.346:1264): avc: denied { read write } for pid=8570 comm="syz.7.581" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 135.430711][ T43] audit: type=1400 audit(136.346:1265): avc: denied { open } for pid=8570 comm="syz.7.581" path="/47/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 135.431961][ T8572] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(524288.5.4294967290), cmd(12) [ 135.432012][ T43] audit: type=1400 audit(136.346:1266): avc: denied { ioctl } for pid=8570 comm="syz.7.581" path="/47/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 135.578840][ T8580] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 135.598329][ T13] hsr_slave_0: left promiscuous mode [ 135.600983][ T13] hsr_slave_1: left promiscuous mode [ 135.609046][ T13] veth1_macvtap: left promiscuous mode [ 135.609117][ T13] veth0_macvtap: left promiscuous mode [ 135.609400][ T13] veth1_vlan: left promiscuous mode [ 135.609432][ T13] veth0_vlan: left promiscuous mode [ 135.705481][ T43] audit: type=1400 audit(2000000000.159:1267): avc: denied { write } for pid=8583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.786709][ T43] audit: type=1400 audit(2000000000.239:1268): avc: denied { write } for pid=8588 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.794943][ T5085] Bluetooth: hci4: command tx timeout [ 135.896669][ T8590] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 135.953932][ T5439] 8021q: adding VLAN 0 to HW filter on device eth22 [ 136.049925][ T8477] netdevsim netdevsim3 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.064897][ T8590] md/raid10:md0: not clean -- starting background reconstruction [ 136.074083][ T8590] md/raid10:md0: active with 1 out of 2 devices [ 136.086369][ T8590] md0: detected capacity change from 0 to 2048 [ 136.089191][ T8596] md_update_sb: can't update sb for read-only array md0 [ 136.217652][ T43] audit: type=1400 audit(2000000000.669:1269): avc: denied { write } for pid=8603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.306139][ T43] audit: type=1400 audit(2000000000.759:1270): avc: denied { write } for pid=8617 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.364968][ T43] audit: type=1400 audit(2000000000.809:1271): avc: denied { create } for pid=8623 comm="syz.9.589" name="#14" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 136.365886][ T43] audit: type=1400 audit(2000000000.819:1272): avc: denied { link } for pid=8623 comm="syz.9.589" name="#14" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 136.370843][ T43] audit: type=1400 audit(2000000000.819:1273): avc: denied { rename } for pid=8623 comm="syz.9.589" name="#15" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 136.395146][ T8477] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.420290][ T5439] 8021q: adding VLAN 0 to HW filter on device eth23 [ 136.444513][ T8631] overlay: Unknown parameter 'smackfsfloor' [ 136.505198][ T8477] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.558844][ T8646] 9p: Bad value for 'wfdno' [ 136.595764][ T8477] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.607913][ T5439] 8021q: adding VLAN 0 to HW filter on device eth24 [ 136.647708][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.9.592'. [ 136.647760][ T8651] netlink: 32 bytes leftover after parsing attributes in process `syz.9.592'. [ 136.647800][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.9.592'. [ 136.648114][ T8652] netlink: 28 bytes leftover after parsing attributes in process `syz.9.592'. [ 136.648129][ T8652] netlink: 32 bytes leftover after parsing attributes in process `syz.9.592'. [ 136.648138][ T8652] netlink: 28 bytes leftover after parsing attributes in process `syz.9.592'. [ 136.671680][ T5085] Bluetooth: hci2: command tx timeout [ 136.781699][ T8477] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.787752][ T8477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.788651][ T8477] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.793236][ T8477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.796164][ T8477] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.800314][ T8477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.801114][ T8477] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.808813][ T8477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.847288][ T5439] 8021q: adding VLAN 0 to HW filter on device eth25 [ 136.867037][ T8477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.888967][ T8477] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.895500][ T1264] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.895792][ T1264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.906714][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.906891][ T1264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.303107][ T8477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.319830][ T8716] netlink: 32 bytes leftover after parsing attributes in process `syz.7.594'. [ 137.336088][ T8477] veth0_vlan: entered promiscuous mode [ 137.345377][ T8477] veth1_vlan: entered promiscuous mode [ 137.353148][ T8716] capability: warning: `syz.7.594' uses 32-bit capabilities (legacy support in use) [ 137.369209][ T8477] veth0_macvtap: entered promiscuous mode [ 137.371600][ T7523] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 137.375993][ T8477] veth1_macvtap: entered promiscuous mode [ 137.385808][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.397200][ T8477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.423369][ T5801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.423576][ T5801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.423716][ T5801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.424000][ T5801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.522069][ T7523] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 137.527301][ T7523] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 137.527357][ T7523] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 137.527374][ T7523] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 137.527390][ T7523] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 137.530438][ T7523] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 137.530469][ T7523] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 137.530481][ T7523] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 137.530494][ T7523] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 137.533644][ T7523] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.533660][ T7523] usb 5-1: Product: syz [ 137.533668][ T7523] usb 5-1: Manufacturer: syz [ 137.533675][ T7523] usb 5-1: SerialNumber: syz [ 137.539863][ T7523] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 137.550599][ T7523] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 137.561842][ T7523] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 137.618336][ T7967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.618381][ T7967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.642781][ T8707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.642831][ T8707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.738160][ T8692] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 137.742258][ T7523] usb 5-1: USB disconnect, device number 24 [ 137.750732][ T7523] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 137.761959][ T7523] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 137.764618][ T7523] ti_usb_3410_5052 5-1:2.0: device disconnected [ 137.813860][ T8748] binder: BINDER_SET_CONTEXT_MGR already set [ 137.813919][ T8748] binder: 8739:8748 ioctl 4018620d 200000000240 returned -16 [ 137.822944][ T8749] binder: BINDER_SET_CONTEXT_MGR already set [ 137.822988][ T8749] binder: 8739:8749 ioctl 4018620d 200000000040 returned -16 [ 137.827116][ T8751] binder: 8739:8751 ioctl c0306201 2000000000c0 returned -14 [ 137.872681][ T5085] Bluetooth: hci4: command tx timeout [ 137.947734][ T8762] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 137.970094][ T8762] kvm: pic: level sensitive irq not supported [ 137.971254][ T8762] kvm: pic: non byte read [ 137.973980][ T8762] kvm: pic: level sensitive irq not supported [ 137.974741][ T8762] kvm: pic: non byte read [ 137.976915][ T8762] kvm: pic: level sensitive irq not supported [ 137.977399][ T8762] kvm: pic: non byte read [ 137.979878][ T8762] kvm: pic: level sensitive irq not supported [ 137.980325][ T8762] kvm: pic: non byte read [ 138.217866][ T8786] autofs: Unknown parameter '' [ 138.310755][ T8799] __nla_validate_parse: 3 callbacks suppressed [ 138.310843][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.9.606'. [ 138.318831][ T8799] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 138.401954][ T8802] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 138.410313][ T8811] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 138.752467][ T5085] Bluetooth: hci2: command tx timeout [ 139.136485][ T8850] netlink: 'syz.3.616': attribute type 10 has an invalid length. [ 139.136836][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.137372][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.162827][ T8847] smpboot: CPU 1 is now offline [ 139.165552][ T8850] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.165682][ T8850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.165919][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.166011][ T8850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.179857][ T8850] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 139.291694][ T5816] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 139.338538][ T8847] smpboot: CPU 3 is now offline [ 139.446280][ T5816] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 139.447131][ T5816] usb 14-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 139.447155][ T5816] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.447274][ T5816] usb 14-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.447327][ T5816] usb 14-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 139.448198][ T5816] usb 14-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 139.448219][ T5816] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.448230][ T5816] usb 14-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.448241][ T5816] usb 14-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 139.459453][ T5816] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.459468][ T5816] usb 14-1: Product: syz [ 139.459477][ T5816] usb 14-1: Manufacturer: syz [ 139.459484][ T5816] usb 14-1: SerialNumber: syz [ 139.506605][ T5816] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 139.549935][ T5816] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 139.600678][ T5816] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 139.714734][ T8845] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 139.723581][ T851] usb 14-1: USB disconnect, device number 2 [ 139.748610][ T851] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 139.770379][ T851] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 139.778595][ T851] ti_usb_3410_5052 14-1:2.0: device disconnected [ 139.954030][ T5085] Bluetooth: hci4: command tx timeout [ 140.833086][ T5085] Bluetooth: hci2: command tx timeout [ 141.002320][ T8877] SELinux: policydb version -1855855853 does not match my version range 15-35 [ 141.002448][ T8877] SELinux: failed to load policy [ 141.026067][ T8881] bond0: entered allmulticast mode [ 141.026123][ T8881] bond_slave_0: entered allmulticast mode [ 141.030810][ T8881] bond_slave_1: entered allmulticast mode [ 141.036544][ T43] kauditd_printk_skb: 39 callbacks suppressed [ 141.036615][ T43] audit: type=1400 audit(2000000005.489:1313): avc: denied { read write } for pid=8880 comm="syz.7.621" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 141.037202][ T43] audit: type=1400 audit(2000000005.489:1314): avc: denied { open } for pid=8880 comm="syz.7.621" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 141.341601][ T6804] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 141.503926][ T6804] usb 12-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 141.509148][ T6804] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 141.509215][ T6804] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 141.509256][ T6804] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 141.509324][ T6804] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.534638][ T8881] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 141.540842][ T6804] cyberjack 12-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 141.551659][ T5830] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 141.580497][ T6804] usb 12-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 141.701588][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 141.702589][ T5830] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 141.703999][ T5830] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 141.704017][ T5830] usb 5-1: config 179 has no interface number 0 [ 141.704052][ T5830] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 141.704074][ T5830] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 141.704094][ T5830] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 141.704113][ T5830] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 141.704133][ T5830] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 141.704162][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.707528][ T8888] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 141.763394][ T8881] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 141.824345][ T43] audit: type=1400 audit(2000000006.279:1315): avc: denied { mounton } for pid=8880 comm="syz.7.621" path="/60/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 141.920870][ T1685] usb 5-1: USB disconnect, device number 25 [ 141.920960][ C2] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 141.921018][ C2] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 142.031954][ T5085] Bluetooth: hci4: command tx timeout [ 142.385602][ T8906] syzkaller0: entered promiscuous mode [ 142.385654][ T8906] syzkaller0: entered allmulticast mode [ 142.609182][ T8916] netlink: 'syz.0.632': attribute type 5 has an invalid length. [ 142.616168][ T8919] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 142.780043][ T43] audit: type=1400 audit(2000000007.229:1316): avc: denied { read } for pid=8929 comm="syz.9.635" path="socket:[33432]" dev="sockfs" ino=33432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.803303][ T43] audit: type=1400 audit(2000000007.259:1317): avc: denied { mounton } for pid=8929 comm="syz.9.635" path="/32/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 142.942710][ T8943] hub 9-0:1.0: USB hub found [ 142.948897][ T8943] hub 9-0:1.0: 1 port detected [ 142.966386][ T43] audit: type=1400 audit(2000000007.419:1318): avc: denied { bind } for pid=8942 comm="syz.9.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.978986][ T43] audit: type=1400 audit(2000000007.429:1319): avc: denied { name_bind } for pid=8942 comm="syz.9.638" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 142.986847][ T43] audit: type=1400 audit(2000000007.439:1320): avc: denied { node_bind } for pid=8942 comm="syz.9.638" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 142.994324][ T43] audit: type=1400 audit(2000000007.449:1321): avc: denied { setopt } for pid=8942 comm="syz.9.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.009403][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.9.638'. [ 143.009425][ T8943] netlink: 'syz.9.638': attribute type 5 has an invalid length. [ 143.009432][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.9.638'. [ 143.024959][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.9.638'. [ 143.024982][ T8943] netlink: 'syz.9.638': attribute type 5 has an invalid length. [ 143.024989][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.9.638'. [ 143.031552][ T5801] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.031578][ T5801] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.031596][ T5801] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.031613][ T5801] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.087531][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 143.093687][ T8947] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 143.097405][ T8947] netlink: 44 bytes leftover after parsing attributes in process `syz.0.640'. [ 143.111830][ T65] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 143.164340][ T8951] netlink: 'syz.0.642': attribute type 2 has an invalid length. [ 143.282349][ T65] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 143.287665][ T65] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 143.296271][ T65] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 143.301677][ T1685] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 143.307337][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.312629][ T65] usb 8-1: Product: syz [ 143.314153][ T65] usb 8-1: Manufacturer: syz [ 143.315887][ T65] usb 8-1: SerialNumber: syz [ 143.324410][ T65] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 143.332609][ T65] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 143.343050][ T65] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 143.451840][ T1685] usb 14-1: Using ep0 maxpacket: 8 [ 143.453047][ T1685] usb 14-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 143.454503][ T1685] usb 14-1: config 179 has an invalid interface number: 65 but max is 0 [ 143.454528][ T1685] usb 14-1: config 179 has no interface number 0 [ 143.454560][ T1685] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 143.454579][ T1685] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 143.454598][ T1685] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 143.454616][ T1685] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 143.454634][ T1685] usb 14-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 143.454663][ T1685] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.459501][ T8949] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 143.536590][ T42] usb 8-1: USB disconnect, device number 2 [ 143.579731][ T42] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 143.589839][ T42] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 143.592518][ T42] ti_usb_3410_5052 8-1:2.0: device disconnected [ 143.624966][ T43] audit: type=1400 audit(2000000008.079:1322): avc: denied { getopt } for pid=8959 comm="syz.0.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.689060][ T5830] usb 14-1: USB disconnect, device number 3 [ 143.689179][ C2] xpad 14-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 143.689225][ C2] xpad 14-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 143.780284][ T8965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.047330][ T5830] usb 12-1: USB disconnect, device number 14 [ 144.064415][ T5830] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 144.065195][ T5830] cyberjack 12-1:1.0: device disconnected [ 144.208108][ T8982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8982 comm=syz.3.649 [ 144.294692][ T8977] nvme_fabrics: missing parameter 'traddr=%s' [ 144.348768][ T8990] program syz.3.652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.373461][ T8990] kernel profiling enabled (shift: 63) [ 144.377132][ T8990] profiling shift: 63 too large [ 144.469809][ T8994] loop0: detected capacity change from 0 to 4096 [ 144.506544][ T5830] usb 12-1: new full-speed USB device number 15 using dummy_hcd [ 144.656294][ T5830] usb 12-1: not running at top speed; connect to a high speed hub [ 144.656364][ T5830] usb 12-1: New USB device found, idVendor=0408, idProduct=ea06, bcdDevice=fe.7f [ 144.658264][ T5830] usb 12-1: config 2 has an invalid interface number: 203 but max is 1 [ 144.658283][ T5830] usb 12-1: config 2 has an invalid interface number: 46 but max is 1 [ 144.658297][ T5830] usb 12-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 144.658307][ T5830] usb 12-1: config 2 has no interface number 0 [ 144.658315][ T5830] usb 12-1: config 2 has no interface number 1 [ 144.658337][ T5830] usb 12-1: config 2 interface 203 altsetting 6 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 144.658352][ T5830] usb 12-1: config 2 interface 203 altsetting 6 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 144.658365][ T5830] usb 12-1: config 2 interface 203 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 144.658376][ T5830] usb 12-1: config 2 interface 203 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 144.658391][ T5830] usb 12-1: config 2 interface 46 altsetting 149 has a duplicate endpoint with address 0x5, skipping [ 144.658404][ T5830] usb 12-1: config 2 interface 46 altsetting 149 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 144.658418][ T5830] usb 12-1: config 2 interface 46 altsetting 149 has a duplicate endpoint with address 0x3, skipping [ 144.658428][ T5830] usb 12-1: config 2 interface 46 altsetting 149 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 144.658441][ T5830] usb 12-1: config 2 interface 46 altsetting 149 endpoint 0x8E has invalid maxpacket 35875, setting to 64 [ 144.658455][ T5830] usb 12-1: config 2 interface 46 altsetting 149 has a duplicate endpoint with address 0xF, skipping [ 144.658466][ T5830] usb 12-1: config 2 interface 46 altsetting 149 has an invalid descriptor for endpoint zero, skipping [ 144.658477][ T5830] usb 12-1: config 2 interface 46 altsetting 149 endpoint 0x6 has invalid maxpacket 2047, setting to 1023 [ 144.658490][ T5830] usb 12-1: config 2 interface 46 altsetting 149 has a duplicate endpoint with address 0x6, skipping [ 144.658501][ T5830] usb 12-1: config 2 interface 46 altsetting 149 has a duplicate endpoint with address 0x1, skipping [ 144.658512][ T5830] usb 12-1: config 2 interface 46 altsetting 149 has a duplicate endpoint with address 0xE, skipping [ 144.658523][ T5830] usb 12-1: config 2 interface 46 altsetting 149 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 144.658535][ T5830] usb 12-1: config 2 interface 46 altsetting 149 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 144.658548][ T5830] usb 12-1: config 2 interface 203 has no altsetting 0 [ 144.658557][ T5830] usb 12-1: config 2 interface 46 has no altsetting 0 [ 144.663767][ T5830] usb 12-1: Dual-Role OTG device on HNP port [ 144.664116][ T5830] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.664135][ T5830] usb 12-1: Product: 됣㊧뙇䁔悈┵觀⹑綻ȡホ褘⳥䔾8픢ᑧﵒ煱᪉䨲篻ࡴ悏髷抝ヷ㿝罾聭䜼鶳띿㥆᭤떳㡎됺僤໖瀥▴뷧⚤ឧ㱶觿⽑㼠椖駀몥咰멱럃묺踂掤鮯㞁锊蒧깄빤囋뱆굟ᡢ䂄崒賉 [ 144.664160][ T5830] usb 12-1: Manufacturer: ࠓ [ 144.664171][ T5830] usb 12-1: SerialNumber: 콳妽䘀ꇌ꨹퉜ڿ᧱餐䇥퍕뫧䮆郩"ӽ䲶艃⼸媼㐑㼢ꉋ贊鳀붧⨠䴭䥥牛똝ᚅ笵츖⠍ℼ姞밽ﮅ䔃ᢟ솯땋뢩뫲뛜읁ᑯ䓎剬鯫핅睃㒇쩲蹕䥅ᶰ酨㯓ڽ줚츌퉏⮻h诰㠧鴢᷃ᆅⰚ퐺⣻瑹빥膯廻셵솣乒ࡍ䖢ꦸ鶒⺜ꊬ漾ꙶ➆특躭醽柲굜䶙䜂蓙 [ 144.672066][ T8980] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 144.713588][ T1685] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 144.833645][ C2] Illegal XDP return value 16128 on prog (id 55) dev lo, expect packet loss! [ 144.844239][ T9019] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 144.861578][ T1685] usb 5-1: Using ep0 maxpacket: 8 [ 144.862287][ T1685] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.863120][ T1685] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 144.863213][ T1685] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 144.863228][ T1685] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 144.863239][ T1685] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.863251][ T1685] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.863270][ T1685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.904364][ T8974] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 144.909039][ T9019] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 144.917663][ T8974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.918003][ T8974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.934120][ T5830] option 12-1:2.203: GSM modem (1-port) converter detected [ 144.939175][ T5830] option 12-1:2.46: GSM modem (1-port) converter detected [ 144.943443][ T5830] usb 12-1: GSM modem (1-port) converter now attached to ttyUSB1 [ 144.950259][ T5830] usb 12-1: USB disconnect, device number 15 [ 144.957068][ T5830] option 12-1:2.203: device disconnected [ 145.003510][ T5830] option1 ttyUSB1: GSM modem (1-port) converter now disconnected from ttyUSB1 [ 145.004087][ T5830] option 12-1:2.46: device disconnected [ 145.077230][ T1685] usb 5-1: GET_CAPABILITIES returned 0 [ 145.077298][ T1685] usbtmc 5-1:16.0: can't read capabilities [ 145.243682][ T7881] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 145.281307][ T8996] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 145.282899][ T5830] usb 5-1: USB disconnect, device number 26 [ 145.371512][ T25] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 145.403699][ T7881] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 145.411780][ T7881] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 145.419048][ T7881] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 145.430149][ T7881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.434461][ T7881] usb 8-1: Product: syz [ 145.436578][ T7881] usb 8-1: Manufacturer: syz [ 145.438695][ T7881] usb 8-1: SerialNumber: syz [ 145.457973][ T7881] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 145.468109][ T7881] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 145.482276][ T7881] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 145.521584][ T25] usb 14-1: Using ep0 maxpacket: 8 [ 145.523363][ T25] usb 14-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 145.525063][ T25] usb 14-1: config 179 has an invalid interface number: 65 but max is 0 [ 145.525087][ T25] usb 14-1: config 179 has no interface number 0 [ 145.525118][ T25] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 145.525139][ T25] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 145.525160][ T25] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 145.525179][ T25] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 145.525200][ T25] usb 14-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 145.525231][ T25] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.528447][ T9025] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 145.654644][ T9023] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 145.658569][ T65] usb 8-1: USB disconnect, device number 3 [ 145.666638][ T65] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 145.674137][ T65] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 145.677951][ T65] ti_usb_3410_5052 8-1:2.0: device disconnected [ 145.936246][ T65] usb 14-1: USB disconnect, device number 4 [ 145.936247][ C2] xpad 14-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 145.936392][ C2] xpad 14-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 146.503370][ T7881] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 146.524118][ T9059] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 146.524532][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 146.524546][ T43] audit: type=1400 audit(2000000010.979:1332): avc: denied { getopt } for pid=9058 comm="syz.7.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.659248][ T7881] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 146.667201][ T7881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 146.672619][ T7881] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 146.672691][ T7881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 146.684053][ T7881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.684087][ T7881] usb 5-1: Product: syz [ 146.684115][ T7881] usb 5-1: Manufacturer: syz [ 146.684137][ T7881] usb 5-1: SerialNumber: syz [ 146.697524][ T9052] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.697659][ T9052] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.705316][ T7881] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 146.709837][ T7881] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 146.715470][ T7881] usbserial_generic 5-1:1.0: generic converter detected [ 146.720118][ T9064] tipc: Started in network mode [ 146.720165][ T9064] tipc: Node identity 1000001, cluster identity 4369 [ 146.720191][ T9064] tipc: Node number set to 16777217 [ 146.726598][ T9064] tipc: Cannot configure node identity twice [ 146.732394][ T7881] usb 5-1: generic converter now attached to ttyUSB0 [ 146.753855][ T9064] tipc: New replicast peer: 127.0.0.1 [ 146.766710][ T9064] tipc: Enabled bearer , priority 10 [ 146.900398][ T9070] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 146.919118][ T9061] kvm_intel: kvm [9060]: vcpu5, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x212082 [ 147.126792][ T7881] usb 5-1: USB disconnect, device number 27 [ 147.139784][ T7881] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 147.144086][ T7881] usbserial_generic 5-1:1.0: device disconnected [ 147.350098][ T43] audit: type=1400 audit(2000000011.799:1333): avc: denied { write } for pid=9085 comm="syz.7.675" name="/" dev="9p" ino=72377417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.389879][ T43] audit: type=1400 audit(2000000011.839:1334): avc: denied { write } for pid=9085 comm="syz.7.675" name="/" dev="9p" ino=72377417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.400620][ T43] audit: type=1400 audit(2000000011.849:1335): avc: denied { mounton } for pid=9085 comm="syz.7.675" path="/68/file0/proc" dev="9p" ino=72377477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.403939][ T9086] FAULT_INJECTION: forcing a failure. [ 147.403939][ T9086] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.403960][ T9086] CPU: 2 UID: 0 PID: 9086 Comm: syz.7.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.403975][ T9086] Tainted: [L]=SOFTLOCKUP [ 147.403979][ T9086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.403985][ T9086] Call Trace: [ 147.403989][ T9086] [ 147.403994][ T9086] dump_stack_lvl+0x100/0x190 [ 147.404026][ T9086] should_fail_ex.cold+0x5/0xa [ 147.404040][ T9086] ? prepare_alloc_pages+0x16d/0x5b0 [ 147.404059][ T9086] should_fail_alloc_page+0xeb/0x140 [ 147.404073][ T9086] prepare_alloc_pages+0x1f0/0x5b0 [ 147.404089][ T9086] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 147.404107][ T9086] ? __pfx_get_page_from_freelist+0x10/0x10 [ 147.404124][ T9086] ? prepare_alloc_pages+0x1f0/0x5b0 [ 147.404137][ T9086] ? is_bpf_text_address+0x94/0x1a0 [ 147.404153][ T9086] ? rcu_is_watching+0x13/0xc0 [ 147.404168][ T9086] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 147.404187][ T9086] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 147.404206][ T9086] ? stack_trace_save+0x8e/0xc0 [ 147.404223][ T9086] ? __pfx_stack_trace_save+0x10/0x10 [ 147.404238][ T9086] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 147.404255][ T9086] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 147.404270][ T9086] ? is_bpf_text_address+0x94/0x1a0 [ 147.404287][ T9086] ? kasan_save_track+0x14/0x30 [ 147.404300][ T9086] ? __kasan_slab_alloc+0x89/0x90 [ 147.404311][ T9086] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 147.404321][ T9086] ? alloc_vmap_area+0x640/0x2bb0 [ 147.404332][ T9086] ? __get_vm_area_node+0x1ed/0x350 [ 147.404343][ T9086] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 147.404356][ T9086] ? __vmalloc_node_noprof+0xad/0xf0 [ 147.404368][ T9086] ? copy_process+0x803/0x8370 [ 147.404379][ T9086] ? kernel_clone+0x176/0x9d0 [ 147.404389][ T9086] ? __do_sys_clone+0xd9/0x120 [ 147.404400][ T9086] ? do_syscall_64+0x123/0x790 [ 147.404416][ T9086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.404431][ T9086] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 147.404451][ T9086] ? policy_nodemask+0xed/0x4f0 [ 147.404467][ T9086] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 147.404492][ T9086] __kasan_populate_vmalloc+0xf0/0x210 [ 147.404508][ T9086] alloc_vmap_area+0x95d/0x2bb0 [ 147.404524][ T9086] ? kasan_save_track+0x14/0x30 [ 147.404536][ T9086] ? __kasan_kmalloc+0xaa/0xb0 [ 147.404549][ T9086] ? __pfx_alloc_vmap_area+0x10/0x10 [ 147.404562][ T9086] ? __get_vm_area_node+0x124/0x350 [ 147.404578][ T9086] __get_vm_area_node+0x1ed/0x350 [ 147.404593][ T9086] __vmalloc_node_range_noprof+0x268/0x1420 [ 147.404607][ T9086] ? kernel_clone+0x176/0x9d0 [ 147.404617][ T9086] ? lock_acquire+0x1d1/0x380 [ 147.404628][ T9086] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 147.404645][ T9086] ? find_held_lock+0x2b/0x80 [ 147.404659][ T9086] ? rcu_read_unlock+0x17/0x60 [ 147.404676][ T9086] ? kernel_clone+0x176/0x9d0 [ 147.404690][ T9086] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.404705][ T9086] ? rcu_is_watching+0x13/0xc0 [ 147.404720][ T9086] ? trace_kmem_cache_alloc+0xdd/0x100 [ 147.404734][ T9086] ? kernel_clone+0x176/0x9d0 [ 147.404745][ T9086] __vmalloc_node_noprof+0xad/0xf0 [ 147.404758][ T9086] ? kernel_clone+0x176/0x9d0 [ 147.404771][ T9086] copy_process+0x803/0x8370 [ 147.404784][ T9086] ? __pfx___futex_wait+0x10/0x10 [ 147.404807][ T9086] ? __pfx_try_to_wake_up+0x10/0x10 [ 147.404819][ T9086] ? futex_hash+0x311/0x400 [ 147.404837][ T9086] ? __pfx_copy_process+0x10/0x10 [ 147.404849][ T9086] ? futex_wake+0x4ea/0x5e0 [ 147.404871][ T9086] kernel_clone+0x176/0x9d0 [ 147.404885][ T9086] ? __pfx_kernel_clone+0x10/0x10 [ 147.404901][ T9086] ? ksys_write+0x190/0x250 [ 147.404916][ T9086] __do_sys_clone+0xd9/0x120 [ 147.404929][ T9086] ? __pfx___do_sys_clone+0x10/0x10 [ 147.404940][ T9086] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 147.404964][ T9086] do_syscall_64+0x123/0x790 [ 147.404978][ T9086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.404989][ T9086] RIP: 0033:0x7f413d79e159 [ 147.404999][ T9086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.405009][ T9086] RSP: 002b:00007f413e749fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 147.405020][ T9086] RAX: ffffffffffffffda RBX: 00007f413da25fa0 RCX: 00007f413d79e159 [ 147.405027][ T9086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 147.405034][ T9086] RBP: 00007f413d835024 R08: 0000000000000000 R09: 0000000000000000 [ 147.405041][ T9086] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 147.405048][ T9086] R13: 00007f413da26038 R14: 00007f413da25fa0 R15: 00007ffe34489bf8 [ 147.405063][ T9086] [ 147.405103][ T9086] syz.7.675: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 147.405182][ T9086] CPU: 2 UID: 0 PID: 9086 Comm: syz.7.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.405198][ T9086] Tainted: [L]=SOFTLOCKUP [ 147.405202][ T9086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.405208][ T9086] Call Trace: [ 147.405212][ T9086] [ 147.405217][ T9086] dump_stack_lvl+0x100/0x190 [ 147.405235][ T9086] warn_alloc.cold+0x9e/0xb2 [ 147.405248][ T9086] ? __pfx_warn_alloc+0x10/0x10 [ 147.405286][ T9086] ? lockdep_hardirqs_on+0x7d/0x110 [ 147.405302][ T9086] ? __get_vm_area_node+0x2f0/0x350 [ 147.405318][ T9086] ? __get_vm_area_node+0x22b/0x350 [ 147.405333][ T9086] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 147.405346][ T9086] ? lock_acquire+0x1d1/0x380 [ 147.405356][ T9086] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 147.405374][ T9086] ? find_held_lock+0x2b/0x80 [ 147.405401][ T9086] ? rcu_read_unlock+0x17/0x60 [ 147.405419][ T9086] ? kernel_clone+0x176/0x9d0 [ 147.405433][ T9086] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.405449][ T9086] ? rcu_is_watching+0x13/0xc0 [ 147.405462][ T9086] ? trace_kmem_cache_alloc+0xdd/0x100 [ 147.405477][ T9086] ? kernel_clone+0x176/0x9d0 [ 147.405488][ T9086] __vmalloc_node_noprof+0xad/0xf0 [ 147.405501][ T9086] ? kernel_clone+0x176/0x9d0 [ 147.405514][ T9086] copy_process+0x803/0x8370 [ 147.405527][ T9086] ? __pfx___futex_wait+0x10/0x10 [ 147.405542][ T9086] ? __pfx_try_to_wake_up+0x10/0x10 [ 147.405553][ T9086] ? futex_hash+0x311/0x400 [ 147.405570][ T9086] ? __pfx_copy_process+0x10/0x10 [ 147.405582][ T9086] ? futex_wake+0x4ea/0x5e0 [ 147.405603][ T9086] kernel_clone+0x176/0x9d0 [ 147.405615][ T9086] ? __pfx_kernel_clone+0x10/0x10 [ 147.405630][ T9086] ? ksys_write+0x190/0x250 [ 147.405643][ T9086] __do_sys_clone+0xd9/0x120 [ 147.405655][ T9086] ? __pfx___do_sys_clone+0x10/0x10 [ 147.405666][ T9086] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 147.405690][ T9086] do_syscall_64+0x123/0x790 [ 147.405703][ T9086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.405714][ T9086] RIP: 0033:0x7f413d79e159 [ 147.405723][ T9086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.405733][ T9086] RSP: 002b:00007f413e749fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 147.405743][ T9086] RAX: ffffffffffffffda RBX: 00007f413da25fa0 RCX: 00007f413d79e159 [ 147.405749][ T9086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 147.405755][ T9086] RBP: 00007f413d835024 R08: 0000000000000000 R09: 0000000000000000 [ 147.405762][ T9086] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 147.405768][ T9086] R13: 00007f413da26038 R14: 00007f413da25fa0 R15: 00007ffe34489bf8 [ 147.405782][ T9086] [ 147.405822][ T9086] Mem-Info: [ 147.405829][ T9086] active_anon:12110 inactive_anon:0 isolated_anon:0 [ 147.405829][ T9086] active_file:284 inactive_file:52593 isolated_file:0 [ 147.405829][ T9086] unevictable:1000 dirty:158 writeback:0 [ 147.405829][ T9086] slab_reclaimable:9451 slab_unreclaimable:73176 [ 147.405829][ T9086] mapped:25530 shmem:1586 pagetables:4138 [ 147.405829][ T9086] sec_pagetables:299 bounce:0 [ 147.405829][ T9086] kernel_misc_reclaimable:0 [ 147.405829][ T9086] free:450497 free_pcp:12911 free_cma:0 [ 147.405857][ T9086] Node 0 active_anon:48236kB inactive_anon:0kB active_file:1136kB inactive_file:210168kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:77544kB dirty:620kB writeback:0kB shmem:4332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16040kB pagetables:15808kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 147.405887][ T9086] Node 1 active_anon:204kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24576kB dirty:12kB writeback:0kB shmem:2012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 147.405916][ T9086] Node 0 DMA free:7156kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 147.406238][ T9086] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 147.406262][ T9086] Node 0 DMA32 free:232264kB boost:0kB min:27360kB low:34200kB high:41040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:48236kB inactive_anon:0kB active_file:1136kB inactive_file:210168kB unevictable:2000kB writepending:620kB zspages:0kB present:2080628kB managed:1252996kB mlocked:0kB bounce:0kB free_pcp:33040kB local_pcp:2432kB free_cma:0kB [ 147.406299][ T9086] lowmem_reserve[]: 0 0 0 0 0 [ 147.406316][ T9086] Node 1 Normal free:1562568kB boost:0kB min:39876kB low:49844kB high:59812kB reserved_highatomic:0kB free_highatomic:0kB active_anon:204kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB writepending:12kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:18596kB local_pcp:9960kB free_cma:0kB [ 147.406346][ T9086] lowmem_reserve[]: 0 0 0 0 0 [ 147.406363][ T9086] Node 0 DMA: 3*4kB (U) 3*8kB (U) 3*16kB (U) 3*32kB (U) 3*64kB (U) 3*128kB (U) 3*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 0*4096kB = 7156kB [ 147.406444][ T9086] Node 0 DMA32: 679*4kB (UME) 965*8kB (UME) 618*16kB (UME) 381*32kB (UME) 176*64kB (UME) 213*128kB (UME) 144*256kB (UME) 109*512kB (UME) 59*1024kB (UM) 4*2048kB (UM) 0*4096kB = 232324kB [ 147.406527][ T9086] Node 1 Normal: 130*4kB (UM) 162*8kB (UM) 205*16kB (UM) 209*32kB (UM) 197*64kB (UME) 189*128kB (UME) 172*256kB (UE) 155*512kB (UME) 140*1024kB (UME) 3*2048kB (UME) 303*4096kB (UM) = 1562568kB [ 147.406611][ T9086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.406620][ T9086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 147.406628][ T9086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.406637][ T9086] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 147.406645][ T9086] 54459 total pagecache pages [ 147.406649][ T9086] 0 pages in swap cache [ 147.406652][ T9086] Free swap = 124996kB [ 147.406657][ T9086] Total swap = 124996kB [ 147.406661][ T9086] 1048443 pages RAM [ 147.406665][ T9086] 0 pages HighMem/MovableOnly [ 147.406668][ T9086] 285884 pages reserved [ 147.406672][ T9086] 0 pages cma reserved [ 147.409291][ T43] audit: type=1400 audit(2000000011.859:1336): avc: denied { ioctl } for pid=9085 comm="syz.7.675" path="/68/file0/file0" dev="9p" ino=72377421 ioctlcmd=0xae04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.409516][ T43] audit: type=1400 audit(2000000011.859:1337): avc: denied { map } for pid=9085 comm="syz.7.675" path="/68/file0/file0" dev="9p" ino=72377421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.488182][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.9.673'. [ 147.488215][ T9088] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 147.651613][ T6804] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 147.863569][ T6804] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 147.874654][ T6804] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 147.893339][ T6804] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 147.899098][ T6804] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.901872][ T6804] usb 8-1: Product: syz [ 147.906744][ T6804] usb 8-1: Manufacturer: syz [ 147.908618][ T6804] usb 8-1: SerialNumber: syz [ 147.930151][ T6804] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 147.938719][ T6804] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 147.952552][ T6804] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 148.016323][ T9098] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 148.035273][ T9098] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 148.083192][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.125950][ T9082] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 148.129084][ T1685] usb 8-1: USB disconnect, device number 4 [ 148.145548][ T1685] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 148.153849][ T1685] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 148.154368][ T1685] ti_usb_3410_5052 8-1:2.0: device disconnected [ 148.182625][ T43] audit: type=1400 audit(2000000012.639:1338): avc: denied { read } for pid=9102 comm="syz.0.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.230789][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.236827][ T9106] netlink: 36 bytes leftover after parsing attributes in process `syz.0.683'. [ 148.241012][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.247688][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.253228][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.257510][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.262073][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.374969][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.395492][ T9112] tipc: Started in network mode [ 148.398663][ T9112] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 148.401607][ T9112] tipc: Enabling of bearer rejected, failed to enable media [ 148.420049][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.692279][ T5801] netdevsim netdevsim7 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.693867][ T5801] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.693894][ T5801] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.693916][ T5801] netdevsim netdevsim7 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.746993][ T13] bridge_slave_1: left allmulticast mode [ 148.749116][ T13] bridge_slave_1: left promiscuous mode [ 148.752367][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.757650][ T13] bridge_slave_0: left allmulticast mode [ 148.759730][ T13] bridge_slave_0: left promiscuous mode [ 148.763490][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.772127][ T1685] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 148.863452][ T43] audit: type=1400 audit(2000000013.319:1339): avc: denied { write } for pid=9132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.942283][ T1685] usb 5-1: Using ep0 maxpacket: 8 [ 148.943064][ T1685] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.944604][ T1685] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 148.944662][ T1685] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 148.944703][ T1685] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 148.944741][ T1685] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.944777][ T1685] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.944829][ T1685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.085481][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.091994][ T13] bond_slave_0: left allmulticast mode [ 149.098746][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.104436][ T13] bond_slave_1: left allmulticast mode [ 149.106802][ T13] bond0 (unregistering): Released all slaves [ 149.180100][ T43] audit: type=1400 audit(2000000013.629:1340): avc: denied { write } for pid=9148 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.187251][ T1685] usb 5-1: GET_CAPABILITIES returned 0 [ 149.187294][ T1685] usbtmc 5-1:16.0: can't read capabilities [ 149.246739][ T9139] bond0: Error: Cannot enslave bond to itself. [ 149.257556][ T13] tipc: Disabling bearer [ 149.264046][ T13] tipc: Left network mode [ 149.357410][ T5439] 8021q: adding VLAN 0 to HW filter on device eth2 [ 149.393566][ T9156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9156 comm=syz.3.690 [ 149.398623][ T9117] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 149.399248][ T5830] usb 5-1: USB disconnect, device number 28 [ 149.475569][ T9158] No source specified [ 149.575456][ T9161] WARNING! power/level is deprecated; use power/control instead [ 149.696857][ T13] hsr_slave_0: left promiscuous mode [ 149.698259][ T43] audit: type=1400 audit(2000000014.149:1341): avc: denied { setattr } for pid=9166 comm="syz.9.693" name="video7" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 149.698820][ T9167] netlink: 36 bytes leftover after parsing attributes in process `syz.9.693'. [ 149.699278][ T9167] sctp: [Deprecated]: syz.9.693 (pid 9167) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.699278][ T9167] Use struct sctp_sack_info instead [ 149.708875][ T13] hsr_slave_1: left promiscuous mode [ 149.709735][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.709755][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.770498][ T13] veth1_macvtap: left promiscuous mode [ 149.774480][ T13] veth0_macvtap: left promiscuous mode [ 149.778185][ T13] veth1_vlan: left promiscuous mode [ 149.783161][ T13] veth0_vlan: left promiscuous mode [ 149.931579][ T42] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 150.067006][ T13] team0 (unregistering): Port device team_slave_1 removed [ 150.080166][ T13] team0 (unregistering): Port device team_slave_0 removed [ 150.086296][ T9181] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=83886081 (1342177296 ns) > initial count (4416 ns). Using initial count to start timer. [ 150.102557][ T42] usb 8-1: New USB device found, idVendor=7044, idProduct=efcf, bcdDevice=fa.46 [ 150.102638][ T42] usb 8-1: no configurations [ 150.102865][ T42] usb 8-1: can't read configurations, error -22 [ 150.221579][ T6804] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 150.226756][ T9179] bridge_slave_1: Device is already in use. [ 150.231285][ T5439] 8021q: adding VLAN 0 to HW filter on device eth3 [ 150.241626][ T42] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 150.354279][ T5734] Bluetooth: hci0: command tx timeout [ 150.391631][ T6804] usb 5-1: Using ep0 maxpacket: 8 [ 150.392291][ T9190] netlink: 7 bytes leftover after parsing attributes in process `syz.9.698'. [ 150.397659][ T6804] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 150.403292][ T42] usb 8-1: New USB device found, idVendor=7044, idProduct=efcf, bcdDevice=fa.46 [ 150.403358][ T42] usb 8-1: no configurations [ 150.403393][ T42] usb 8-1: can't read configurations, error -22 [ 150.403617][ T42] usb usb8-port1: attempt power cycle [ 150.414588][ T6804] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 150.414627][ T6804] usb 5-1: config 179 has no interface number 0 [ 150.414687][ T6804] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 150.414718][ T6804] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 150.414749][ T6804] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.414779][ T6804] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 150.414809][ T6804] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 150.414847][ T6804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.477094][ T9183] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 150.564578][ T9194] netlink: 40 bytes leftover after parsing attributes in process `syz.9.699'. [ 150.669491][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.669564][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.669646][ T9104] bridge_slave_0: entered allmulticast mode [ 150.683585][ T9104] bridge_slave_0: entered promiscuous mode [ 150.692255][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.694156][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.694676][ T9104] bridge_slave_1: entered allmulticast mode [ 150.707363][ T9104] bridge_slave_1: entered promiscuous mode [ 150.741534][ T42] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 150.762958][ T9104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.768900][ T42] usb 8-1: New USB device found, idVendor=7044, idProduct=efcf, bcdDevice=fa.46 [ 150.768972][ T42] usb 8-1: no configurations [ 150.769045][ T42] usb 8-1: can't read configurations, error -22 [ 150.828265][ T9104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.867821][ T9203] netlink: 'syz.9.700': attribute type 2 has an invalid length. [ 150.899606][ T9] usb 5-1: USB disconnect, device number 29 [ 150.899752][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 150.899791][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 150.913174][ T42] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 150.927945][ T9203] : entered promiscuous mode [ 150.940146][ T42] usb 8-1: New USB device found, idVendor=7044, idProduct=efcf, bcdDevice=fa.46 [ 150.940204][ T42] usb 8-1: no configurations [ 150.940250][ T42] usb 8-1: can't read configurations, error -22 [ 150.940825][ T5439] 8021q: adding VLAN 0 to HW filter on device eth4 [ 150.944482][ T42] usb usb8-port1: unable to enumerate USB device [ 150.948492][ T9104] team0: Port device team_slave_0 added [ 150.952959][ T9104] team0: Port device team_slave_1 added [ 151.021551][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.021579][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.021612][ T9104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.022442][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.022467][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.022493][ T9104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.068135][ T9209] x_tables: duplicate underflow at hook 1 [ 151.108235][ T9104] hsr_slave_0: entered promiscuous mode [ 151.110871][ T9104] hsr_slave_1: entered promiscuous mode [ 151.111320][ T9104] debugfs: 'hsr0' already exists in 'hsr' [ 151.111335][ T9104] Cannot create hsr debugfs directory [ 151.138793][ T9213] netlink: 28 bytes leftover after parsing attributes in process `syz.9.702'. [ 151.180640][ T9212] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 151.187416][ T9212] bond1 (unregistering): Released all slaves [ 151.414762][ T9104] netdevsim netdevsim2 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.490773][ T5439] 8021q: adding VLAN 0 to HW filter on device eth5 [ 151.567432][ T9104] netdevsim netdevsim2 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.620489][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 151.620695][ T43] audit: type=1400 audit(2000000016.069:1352): avc: denied { write } for pid=9232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.682012][ T9104] netdevsim netdevsim2 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.691821][ T6804] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 151.695340][ T43] audit: type=1400 audit(2000000016.149:1353): avc: denied { bind } for pid=9234 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 151.730415][ T43] audit: type=1400 audit(2000000016.179:1354): avc: denied { write } for pid=9238 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.801150][ T9104] netdevsim netdevsim2 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.842409][ T6804] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 151.843289][ T6804] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 151.844157][ T6804] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 151.845814][ T6804] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.845828][ T6804] usb 14-1: Product: syz [ 151.845836][ T6804] usb 14-1: Manufacturer: syz [ 151.845844][ T6804] usb 14-1: SerialNumber: syz [ 151.863612][ T6804] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 151.877461][ T6804] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 151.885005][ T6804] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 151.926622][ T43] audit: type=1400 audit(2000000016.379:1355): avc: denied { write } for pid=9244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.017937][ T43] audit: type=1400 audit(2000000016.469:1356): avc: denied { write } for pid=9250 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.065653][ T9228] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 152.068025][ T6803] usb 14-1: USB disconnect, device number 5 [ 152.077212][ T6803] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 152.102984][ T6803] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 152.103464][ T6803] ti_usb_3410_5052 14-1:2.0: device disconnected [ 152.210259][ T9104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.229507][ T9104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.232686][ T9104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.239250][ T9104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.242864][ T9104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.248570][ T9104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.255193][ T9104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.266425][ T9104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.370920][ T43] audit: type=1400 audit(2000000016.819:1357): avc: denied { write } for pid=9268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.381613][ T9104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.419316][ T9104] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.433941][ T5734] Bluetooth: hci0: command tx timeout [ 152.447480][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.447633][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.476907][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.477085][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.493612][ T43] audit: type=1400 audit(2000000016.949:1358): avc: denied { write } for pid=9271 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.700229][ T43] audit: type=1400 audit(2000000017.149:1359): avc: denied { write } for pid=9276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.989198][ T9293] netlink: 20 bytes leftover after parsing attributes in process `syz.9.713'. [ 153.000474][ T43] audit: type=1400 audit(2000000017.449:1360): avc: denied { write } for pid=9290 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.059034][ T9300] netlink: 20 bytes leftover after parsing attributes in process `syz.9.713'. [ 153.195611][ T9309] random: crng reseeded on system resumption [ 153.195695][ T43] audit: type=1400 audit(2000000017.649:1361): avc: denied { write } for pid=9308 comm="syz.9.715" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 153.282720][ T9104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.298444][ T9313] netlink: 56 bytes leftover after parsing attributes in process `syz.3.714'. [ 153.388764][ T9104] veth0_vlan: entered promiscuous mode [ 153.398273][ T9104] veth1_vlan: entered promiscuous mode [ 153.447351][ T9104] veth0_macvtap: entered promiscuous mode [ 153.458961][ T9104] veth1_macvtap: entered promiscuous mode [ 153.483808][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.504213][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.542645][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.542769][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.542843][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.552011][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.615344][ T9328] SELinux: ebitmap start bit (8390656) is beyond the end of the bitmap (1088) [ 153.618411][ T9328] SELinux: invalid class [ 153.622616][ T9328] SELinux: failed to load policy [ 153.752635][ T6803] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 153.786648][ T8710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.786715][ T8710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.827673][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.827739][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.891565][ T5809] usb 14-1: new full-speed USB device number 6 using dummy_hcd [ 153.901985][ T6803] usb 5-1: Invalid ep0 maxpacket: 64 [ 154.005132][ T9345] orangefs_devreq_open: device cannot be opened in blocking mode [ 154.032715][ T6803] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 154.043426][ T5809] usb 14-1: not running at top speed; connect to a high speed hub [ 154.045979][ T5809] usb 14-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 154.049701][ T5809] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.053280][ T5809] usb 14-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 154.056153][ T5809] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.145319][ T9353] syzkaller0: entered promiscuous mode [ 154.145375][ T9353] syzkaller0: entered allmulticast mode [ 154.181971][ T6803] usb 5-1: Invalid ep0 maxpacket: 64 [ 154.182283][ T6803] usb usb5-port1: attempt power cycle [ 154.279304][ T9328] syzkaller0: entered promiscuous mode [ 154.281771][ T9328] syzkaller0: entered allmulticast mode [ 154.292585][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'. [ 154.305558][ T9362] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:19999 [ 154.348412][ T6804] usb 14-1: USB disconnect, device number 6 [ 154.511641][ T5734] Bluetooth: hci0: command tx timeout [ 154.521555][ T6803] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 154.542757][ T6803] usb 5-1: Invalid ep0 maxpacket: 64 [ 154.671649][ T6803] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 154.691972][ T6803] usb 5-1: Invalid ep0 maxpacket: 64 [ 154.694155][ T6803] usb usb5-port1: unable to enumerate USB device [ 156.106291][ T9434] netlink: 'syz.9.732': attribute type 1 has an invalid length. [ 156.222806][ T9436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.733'. [ 156.233534][ T9436] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9436 comm=syz.2.733 [ 156.243004][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 156.370287][ T9448] ecryptfs: Unknown parameter 'ecryptfs_cipher}aesecŒ|}«' [ 156.531164][ T9454] netlink: 96 bytes leftover after parsing attributes in process `syz.0.739'. [ 156.577916][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.9.740'. [ 156.580110][ T9459] xt_TPROXY: Can be used only with -p tcp or -p udp [ 156.591817][ T5734] Bluetooth: hci0: command tx timeout [ 156.731159][ T43] kauditd_printk_skb: 41 callbacks suppressed [ 156.731249][ T43] audit: type=1400 audit(2000000021.179:1403): avc: denied { connect } for pid=9467 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.043705][ T9479] netlink: 'syz.9.748': attribute type 10 has an invalid length. [ 157.045276][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.045694][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.049889][ T9479] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.049938][ T9479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.050093][ T9479] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.050171][ T9479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.053867][ T9479] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 157.064873][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.9.748'. [ 157.064948][ T9479] bridge_slave_1: left allmulticast mode [ 157.064966][ T9479] bridge_slave_1: left promiscuous mode [ 157.065310][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.069938][ T9479] bridge_slave_0: left allmulticast mode [ 157.069956][ T9479] bridge_slave_0: left promiscuous mode [ 157.070117][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.085372][ T9479] bond0: (slave bridge0): Releasing backup interface [ 157.117085][ T9474] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input20 [ 157.464411][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 157.516631][ T43] audit: type=1400 audit(2000000021.969:1404): avc: denied { name_bind } for pid=9502 comm="syz.0.752" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 157.552592][ T6803] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 157.602927][ T9245] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 157.664782][ T9511] syzkaller0: entered promiscuous mode [ 157.664858][ T9511] syzkaller0: entered allmulticast mode [ 157.701589][ T6803] usb 14-1: Using ep0 maxpacket: 8 [ 157.704580][ T6803] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.710209][ T6803] usb 14-1: config index 0 descriptor too short (expected 74, got 45) [ 157.714615][ T6803] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 157.718612][ T6803] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 157.718639][ T6803] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.718656][ T6803] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.718689][ T6803] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.761984][ T9245] usb 7-1: Using ep0 maxpacket: 8 [ 157.764698][ T9245] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.769378][ T9245] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 157.772645][ T9245] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 157.772666][ T9245] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 157.772679][ T9245] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.772692][ T9245] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.772763][ T9245] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.942504][ T6803] usb 14-1: GET_CAPABILITIES returned 0 [ 157.944509][ T6803] usbtmc 14-1:16.0: can't read capabilities [ 158.000247][ T9245] usb 7-1: GET_CAPABILITIES returned 0 [ 158.000300][ T9245] usbtmc 7-1:16.0: can't read capabilities [ 158.091560][ T6804] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 158.144188][ T9482] usbtmc 14-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 158.145370][ T65] usb 14-1: USB disconnect, device number 7 [ 158.204209][ T6803] usb 7-1: USB disconnect, device number 4 [ 158.576323][ T9521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1918135660 (3836271320 ns) > initial count (2194409472 ns). Using initial count to start timer. [ 158.587075][ T9521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1918135660 (3836271320 ns) > initial count (2194409472 ns). Using initial count to start timer. [ 158.587188][ T9521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1918135660 (3836271320 ns) > initial count (2194409472 ns). Using initial count to start timer. [ 158.587255][ T9521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1918135660 (3836271320 ns) > initial count (2194409472 ns). Using initial count to start timer. [ 158.587321][ T9521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1918135660 (3836271320 ns) > initial count (2194409472 ns). Using initial count to start timer. [ 158.587391][ T9521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1918135660 (3836271320 ns) > initial count (2194409472 ns). Using initial count to start timer. [ 158.587475][ T9521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1918135660 (3836271320 ns) > initial count (2194409472 ns). Using initial count to start timer. [ 158.587539][ T9521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1918135660 (3836271320 ns) > initial count (2194409472 ns). Using initial count to start timer. [ 158.587600][ T9521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1918135660 (3836271320 ns) > initial count (2194409472 ns). Using initial count to start timer. [ 158.587667][ T9521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1918135660 (3836271320 ns) > initial count (2194409472 ns). Using initial count to start timer. [ 158.609746][ T9526] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 158.791757][ T43] audit: type=1400 audit(2000000023.249:1405): avc: granted { setsecparam } for pid=9532 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 158.855679][ T43] audit: type=1400 audit(2000000023.309:1406): avc: granted { setsecparam } for pid=9532 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 158.965183][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.9.760'. [ 159.024815][ T9551] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 159.067087][ T9551] tc action pedit 'at' offset -2147483645 out of bounds [ 159.067141][ T9551] tc action pedit 'at' offset -2147483645 out of bounds [ 159.067201][ T9551] tc action pedit 'at' offset -2147483645 out of bounds [ 159.067228][ T9551] tc action pedit 'at' offset -2147483645 out of bounds [ 159.067255][ T9551] tc action pedit 'at' offset -2147483645 out of bounds [ 159.067283][ T9551] tc action pedit 'at' offset -2147483645 out of bounds [ 159.067308][ T9551] tc action pedit 'at' offset -2147483645 out of bounds [ 159.067333][ T9551] tc action pedit 'at' offset -2147483645 out of bounds [ 159.067358][ T9551] tc action pedit 'at' offset -2147483645 out of bounds [ 159.067387][ T9551] tc action pedit 'at' offset -2147483645 out of bounds [ 159.067425][ T9551] 0: reclassify loop, rule prio 0, protocol 800 [ 159.282091][ T25] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 159.372928][ T9567] netlink: 8644 bytes leftover after parsing attributes in process `syz.0.766'. [ 159.435151][ T9573] tipc: Enabling of bearer rejected, failed to enable media [ 159.442310][ T25] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 159.448554][ T25] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.448599][ T25] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 159.457963][ T25] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.462060][ T25] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 159.467858][ T25] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.471016][ T25] usb 14-1: Product: syz [ 159.472756][ T25] usb 14-1: Manufacturer: syz [ 159.474652][ T25] usb 14-1: SerialNumber: syz [ 159.483339][ T25] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 159.491887][ T25] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 159.497087][ T25] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 159.630636][ T9575] FAULT_INJECTION: forcing a failure. [ 159.630636][ T9575] name fail_futex, interval 1, probability 0, space 0, times 1 [ 159.630690][ T9575] CPU: 2 UID: 0 PID: 9575 Comm: syz.2.769 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.630722][ T9575] Tainted: [L]=SOFTLOCKUP [ 159.630728][ T9575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.630736][ T9575] Call Trace: [ 159.630741][ T9575] [ 159.630747][ T9575] dump_stack_lvl+0x100/0x190 [ 159.630781][ T9575] should_fail_ex.cold+0x5/0xa [ 159.630799][ T9575] get_futex_key+0x1d0/0x14f0 [ 159.630819][ T9575] ? __pfx_get_futex_key+0x10/0x10 [ 159.630835][ T9575] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 159.630873][ T9575] futex_wait_setup+0x91/0x540 [ 159.630898][ T9575] __futex_wait+0x19f/0x300 [ 159.630919][ T9575] ? __pfx___futex_wait+0x10/0x10 [ 159.630941][ T9575] ? __pfx_futex_wake_mark+0x10/0x10 [ 159.630961][ T9575] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 159.630981][ T9575] ? trace_event_buffer_commit+0x20a/0xa80 [ 159.630999][ T9575] futex_wait+0xe6/0x370 [ 159.631019][ T9575] ? __pfx_futex_wait+0x10/0x10 [ 159.631043][ T9575] ? __pfx_eprobe_trigger_func+0x10/0x10 [ 159.631065][ T9575] do_futex+0x265/0x440 [ 159.631082][ T9575] ? __pfx_do_futex+0x10/0x10 [ 159.631098][ T9575] ? event_triggers_call+0x337/0x4d0 [ 159.631116][ T9575] __x64_sys_futex+0x34f/0x4d0 [ 159.631134][ T9575] ? __pfx___x64_sys_futex+0x10/0x10 [ 159.631149][ T9575] ? find_held_lock+0x2b/0x80 [ 159.631166][ T9575] ? trace_syscall_enter+0xcc/0x120 [ 159.631182][ T9575] ? trace_syscall_enter+0xcc/0x120 [ 159.631201][ T9575] do_syscall_64+0x123/0x790 [ 159.631222][ T9575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.631236][ T9575] RIP: 0033:0x7fea7819e159 [ 159.631247][ T9575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.631260][ T9575] RSP: 002b:00007fea78fae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 159.631275][ T9575] RAX: ffffffffffffffda RBX: 00007fea78425fa8 RCX: 00007fea7819e159 [ 159.631283][ T9575] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fea78425fa8 [ 159.631292][ T9575] RBP: 00007fea78425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 159.631300][ T9575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.631307][ T9575] R13: 00007fea78426038 R14: 00007ffd90a6f010 R15: 00007ffd90a6f0f8 [ 159.631330][ T9575] [ 159.723880][ T9553] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 159.725453][ T9245] usb 14-1: USB disconnect, device number 8 [ 159.739089][ T9245] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 159.743804][ T9245] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 159.744376][ T9245] ti_usb_3410_5052 14-1:2.0: device disconnected [ 159.862771][ T9585] tmpfs: Bad value for 'mpol' [ 160.755880][ T43] audit: type=1326 audit(2000000025.209:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9588 comm="syz.0.775" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d319e159 code=0x7fc00000 [ 160.946644][ T9608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.778'. [ 161.108531][ T43] audit: type=1326 audit(2000000025.559:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9598 comm="syz.9.776" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226699e159 code=0x7fc00000 [ 161.243523][ T5830] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 161.249582][ T43] audit: type=1400 audit(2000000025.699:1409): avc: denied { create } for pid=9621 comm="syz.9.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.277553][ T43] audit: type=1400 audit(2000000025.729:1410): avc: denied { read } for pid=9621 comm="syz.9.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 161.283586][ T43] audit: type=1400 audit(2000000025.739:1411): avc: denied { setopt } for pid=9621 comm="syz.9.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.284105][ T43] audit: type=1400 audit(2000000025.739:1412): avc: denied { write } for pid=9621 comm="syz.9.782" path="socket:[37885]" dev="sockfs" ino=37885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.348778][ T9627] bond1 (unregistering): Released all slaves [ 161.372417][ T5830] usb 7-1: device descriptor read/64, error -71 [ 161.375267][ T851] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 161.528733][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.9.785'. [ 161.534669][ T851] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 161.545143][ T851] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 161.553506][ T851] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 161.563958][ T851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.564010][ T851] usb 5-1: Product: syz [ 161.564065][ T851] usb 5-1: Manufacturer: syz [ 161.564095][ T851] usb 5-1: SerialNumber: syz [ 161.586783][ T851] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 161.594928][ T851] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 161.602532][ T851] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 161.612028][ T5830] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 161.752420][ T5830] usb 7-1: device descriptor read/64, error -71 [ 161.786924][ T851] usb 5-1: USB disconnect, device number 35 [ 161.793546][ T851] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 161.803046][ T851] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 161.808210][ T851] ti_usb_3410_5052 5-1:2.0: device disconnected [ 161.872531][ T5830] usb usb7-port1: attempt power cycle [ 162.231639][ T5830] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 162.262319][ T5830] usb 7-1: device descriptor read/8, error -71 [ 162.359173][ T43] audit: type=1400 audit(2000000026.809:1413): avc: denied { append } for pid=9646 comm="syz.0.787" name="usbmon8" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.360620][ T43] audit: type=1400 audit(2000000026.809:1414): avc: denied { execute } for pid=9646 comm="syz.0.787" path="/dev/usbmon8" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.394026][ T43] audit: type=1326 audit(2000000026.849:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9641 comm="syz.9.786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226699e159 code=0x7fc00000 [ 162.427393][ T9649] Bluetooth: MGMT ver 1.23 [ 162.430697][ T9649] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 162.461389][ T9651] xt_l2tp: v2 doesn't support IP mode [ 162.522187][ T5830] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 162.541975][ T5830] usb 7-1: device descriptor read/8, error -71 [ 162.577059][ T8707] nvmet: connect request for invalid subsystem testnqn! [ 162.582805][ T9660] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 162.654817][ T5830] usb usb7-port1: unable to enumerate USB device [ 162.782153][ T9666] bond0: entered promiscuous mode [ 162.782255][ T9666] bond_slave_0: entered promiscuous mode [ 162.782540][ T9666] bond_slave_1: entered promiscuous mode [ 162.783880][ T9666] batadv0: entered promiscuous mode [ 162.787078][ T9666] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 162.787101][ T9666] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 162.788398][ T9666] hsr1: entered promiscuous mode [ 162.788876][ T9666] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 162.793387][ T9666] bond0: left promiscuous mode [ 162.793408][ T9666] bond_slave_0: left promiscuous mode [ 162.793579][ T9666] bond_slave_1: left promiscuous mode [ 162.797008][ T9666] batadv0: left promiscuous mode [ 163.051035][ T43] audit: type=1400 audit(2000000027.499:1416): avc: denied { setattr } for pid=9668 comm="syz.9.793" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 163.975806][ T43] audit: type=1400 audit(2000000028.429:1417): avc: denied { write } for pid=9691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.048426][ T43] audit: type=1400 audit(2000000028.499:1418): avc: denied { append } for pid=9695 comm="syz.2.797" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.065893][ T43] audit: type=1400 audit(2000000028.519:1419): avc: denied { ioctl } for pid=9695 comm="syz.2.797" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.077785][ T25] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 164.084995][ T9696] adfs: block size(16384) > page size(4096) not supported by filesystem [ 164.101018][ T9696] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 164.184890][ T43] audit: type=1400 audit(2000000028.639:1420): avc: denied { write } for pid=9697 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.246482][ T25] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 164.250283][ T25] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 164.254614][ T25] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 164.259695][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.264612][ T25] usb 5-1: Product: syz [ 164.264667][ T25] usb 5-1: Manufacturer: syz [ 164.264689][ T25] usb 5-1: SerialNumber: syz [ 164.306176][ T25] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 164.318357][ T25] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 164.326293][ T25] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 164.506161][ T9245] usb 5-1: USB disconnect, device number 36 [ 164.524706][ T9245] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 164.529292][ T9245] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 164.539503][ T9245] ti_usb_3410_5052 5-1:2.0: device disconnected [ 164.922360][ T43] audit: type=1400 audit(2000000029.379:1421): avc: denied { view } for pid=9717 comm="syz.9.803" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 164.931233][ T43] audit: type=1400 audit(2000000029.379:1422): avc: denied { execute } for pid=9717 comm="syz.9.803" path="/proc/keys" dev="proc" ino=4026532187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 164.984940][ T9720] ================================================================== [ 164.984972][ T9720] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 164.985005][ T9720] Read of size 64 at addr ffffffff9bcb0be0 by task syz.9.804/9720 [ 164.985015][ T9720] [ 164.985023][ T9720] CPU: 0 UID: 0 PID: 9720 Comm: syz.9.804 Tainted: G ** replaying previous printk message ** [ 164.985023][ T9720] CPU: 0 UID: 0 PID: 9720 Comm: syz.9.804 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.985041][ T9720] Tainted: [L]=SOFTLOCKUP [ 164.985045][ T9720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.985054][ T9720] Call Trace: [ 164.985058][ T9720] [ 164.985063][ T9720] dump_stack_lvl+0x100/0x190 [ 164.985081][ T9720] print_report+0x13d/0x4b0 [ 164.985101][ T9720] ? __virt_addr_valid+0x239/0x430 [ 164.985115][ T9720] ? usb_copy_descriptors+0x18d/0x320 [ 164.985129][ T9720] kasan_report+0xdf/0x1c0 [ 164.985148][ T9720] ? usb_copy_descriptors+0x18d/0x320 [ 164.985163][ T9720] kasan_check_range+0x10f/0x1e0 [ 164.985204][ T9720] __asan_memcpy+0x23/0x60 [ 164.985222][ T9720] usb_copy_descriptors+0x18d/0x320 [ 164.985241][ T9720] usb_assign_descriptors+0xd2/0x470 [ 164.985263][ T9720] f_audio_bind+0x243a/0x3950 [ 164.985291][ T9720] ? __pfx_f_audio_bind+0x10/0x10 [ 164.985312][ T9720] usb_add_function+0x219/0x890 [ 164.985333][ T9720] configfs_composite_bind+0xd83/0x1960 [ 164.985361][ T9720] gadget_bind_driver+0x28c/0xbf0 [ 164.985387][ T9720] ? __pfx_gadget_bind_driver+0x10/0x10 [ 164.985440][ T9720] really_probe+0x241/0xa60 [ 164.985463][ T9720] __driver_probe_device+0x210/0x460 [ 164.985485][ T9720] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 164.985516][ T9720] driver_probe_device+0x4a/0x140 [ 164.985535][ T9720] __driver_attach+0x21f/0x5b0 [ 164.985556][ T9720] ? __pfx___driver_attach+0x10/0x10 [ 164.985576][ T9720] bus_for_each_dev+0x13e/0x1d0 [ 164.985605][ T9720] ? __pfx_bus_for_each_dev+0x10/0x10 [ 164.985632][ T9720] ? bus_add_driver+0x2b5/0x5b0 [ 164.985666][ T9720] bus_add_driver+0x305/0x5b0 [ 164.985693][ T9720] driver_register+0x1e2/0x360 [ 164.985714][ T9720] usb_gadget_register_driver_owner+0x132/0x210 [ 164.985740][ T9720] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 164.985763][ T9720] configfs_write_iter+0x302/0x4e0 [ 164.985789][ T9720] vfs_write+0x6af/0x1050 [ 164.985809][ T9720] ? __pfx_configfs_write_iter+0x10/0x10 [ 164.985845][ T9720] ? __pfx_vfs_write+0x10/0x10 [ 164.985861][ T9720] ? find_held_lock+0x2b/0x80 [ 164.985882][ T9720] ksys_write+0x12a/0x250 [ 164.985893][ T9720] ? __pfx_ksys_write+0x10/0x10 [ 164.985903][ T9720] ? trace_syscall_enter+0xcc/0x120 [ 164.985920][ T9720] do_syscall_64+0x123/0x790 [ 164.985934][ T9720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.985947][ T9720] RIP: 0033:0x7f226699e159 [ 164.985958][ T9720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.985972][ T9720] RSP: 002b:00007f2264bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.985987][ T9720] RAX: ffffffffffffffda RBX: 00007f2266c25fa0 RCX: 00007f226699e159 [ 164.985995][ T9720] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000003 [ 164.986002][ T9720] RBP: 00007f2266a35024 R08: 0000000000000000 R09: 0000000000000000 [ 164.986009][ T9720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.986016][ T9720] R13: 00007f2266c26038 R14: 00007f2266c25fa0 R15: 00007ffef1c8d028 [ 164.986028][ T9720] [ 164.986032][ T9720] [ 164.986035][ T9720] The buggy address belongs to the variable: [ 164.986038][ T9720] ac_header_desc+0x0/0x40 [ 164.986051][ T9720] [ 164.986054][ T9720] The buggy address belongs to the physical page: [ 164.986059][ T9720] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bcb0 [ 164.986069][ T9720] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 164.986087][ T9720] raw: 00fff00000002000 ffffea00006f2c08 ffffea00006f2c08 0000000000000000 [ 164.986098][ T9720] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 164.986105][ T9720] page dumped because: kasan: bad access detected [ 164.986112][ T9720] page_owner info is not present (never set?) [ 164.986116][ T9720] [ 164.986118][ T9720] Memory state around the buggy address: [ 164.986125][ T9720] ffffffff9bcb0a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.986133][ T9720] ffffffff9bcb0b00: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 f9 f9 f9 [ 164.986141][ T9720] >ffffffff9bcb0b80: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 164.986146][ T9720] ^ [ 164.986153][ T9720] ffffffff9bcb0c00: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 164.986160][ T9720] ffffffff9bcb0c80: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 164.986166][ T9720] ================================================================== [ 165.005079][ T9720] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 165.176491][ T9720] CPU: 2 UID: 0 PID: 9720 Comm: syz.9.804 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.180092][ T9720] Tainted: [L]=SOFTLOCKUP [ 165.181647][ T9720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.185327][ T9720] Call Trace: [ 165.186584][ T9720] [ 165.187572][ T9720] dump_stack_lvl+0x100/0x190 [ 165.189067][ T9720] vpanic+0x553/0x970 [ 165.190341][ T9720] ? __pfx_vpanic+0x10/0x10 [ 165.191764][ T9720] ? mark_held_locks+0x40/0x70 [ 165.193306][ T9720] ? usb_copy_descriptors+0x18d/0x320 [ 165.195111][ T9720] panic+0xd1/0xe0 [ 165.196362][ T9720] ? __pfx_panic+0x10/0x10 [ 165.197823][ T9720] ? usb_copy_descriptors+0x18d/0x320 [ 165.199883][ T9720] ? preempt_schedule_common+0x3c/0xb0 [ 165.201855][ T9720] check_panic_on_warn.cold+0x19/0x34 [ 165.203618][ T9720] end_report.part.0+0x3a/0x90 [ 165.205227][ T9720] kasan_report.cold+0xe/0x18 [ 165.206767][ T9720] ? usb_copy_descriptors+0x18d/0x320 [ 165.208454][ T9720] kasan_check_range+0x10f/0x1e0 [ 165.210086][ T9720] __asan_memcpy+0x23/0x60 [ 165.211591][ T9720] usb_copy_descriptors+0x18d/0x320 [ 165.213480][ T9720] usb_assign_descriptors+0xd2/0x470 [ 165.215297][ T9720] f_audio_bind+0x243a/0x3950 [ 165.216876][ T9720] ? __pfx_f_audio_bind+0x10/0x10 [ 165.218702][ T9720] usb_add_function+0x219/0x890 [ 165.220420][ T9720] configfs_composite_bind+0xd83/0x1960 [ 165.222221][ T9720] gadget_bind_driver+0x28c/0xbf0 [ 165.224023][ T9720] ? __pfx_gadget_bind_driver+0x10/0x10 [ 165.226323][ T9720] really_probe+0x241/0xa60 [ 165.228280][ T9720] __driver_probe_device+0x210/0x460 [ 165.230222][ T9720] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 165.232243][ T9720] driver_probe_device+0x4a/0x140 [ 165.234011][ T9720] __driver_attach+0x21f/0x5b0 [ 165.235990][ T9720] ? __pfx___driver_attach+0x10/0x10 [ 165.238178][ T9720] bus_for_each_dev+0x13e/0x1d0 [ 165.240255][ T9720] ? __pfx_bus_for_each_dev+0x10/0x10 [ 165.242856][ T9720] ? bus_add_driver+0x2b5/0x5b0 [ 165.245025][ T9720] bus_add_driver+0x305/0x5b0 [ 165.247081][ T9720] driver_register+0x1e2/0x360 [ 165.249359][ T9720] usb_gadget_register_driver_owner+0x132/0x210 [ 165.252412][ T9720] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 165.255117][ T9720] configfs_write_iter+0x302/0x4e0 [ 165.257347][ T9720] vfs_write+0x6af/0x1050 [ 165.259292][ T9720] ? __pfx_configfs_write_iter+0x10/0x10 [ 165.261851][ T9720] ? __pfx_vfs_write+0x10/0x10 [ 165.264030][ T9720] ? find_held_lock+0x2b/0x80 [ 165.266127][ T9720] ksys_write+0x12a/0x250 [ 165.268025][ T9720] ? __pfx_ksys_write+0x10/0x10 [ 165.270196][ T9720] ? trace_syscall_enter+0xcc/0x120 [ 165.272644][ T9720] do_syscall_64+0x123/0x790 [ 165.275194][ T9720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.278325][ T9720] RIP: 0033:0x7f226699e159 [ 165.280438][ T9720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.288615][ T9720] RSP: 002b:00007f2264bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.292268][ T9720] RAX: ffffffffffffffda RBX: 00007f2266c25fa0 RCX: 00007f226699e159 [ 165.295788][ T9720] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000003 [ 165.299374][ T9720] RBP: 00007f2266a35024 R08: 0000000000000000 R09: 0000000000000000 [ 165.302708][ T9720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.306021][ T9720] R13: 00007f2266c26038 R14: 00007f2266c25fa0 R15: 00007ffef1c8d028 [ 165.309644][ T9720] [ 165.311518][ T9720] Kernel Offset: disabled [ 165.313045][ T9720] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:07:01 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85affce0 RDI=ffffffff9bc64ca0 RBP=ffffffff9bc64c60 RSP=ffffc90000137a48 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=1ffff92000026f53 R14=0000000000000057 R15=0000000000000000 RIP=ffffffff85affd07 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33c10ff8 CR3=000000003d98e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000009000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 327a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd90a6f5e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd90a6f5e6 00007ffd90a6f5ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea78235607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea78235647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea782357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea78235639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f2f4b00 RSI=ffffffff81b6ae9e RDI=ffff88801f2f4b00 RBP=0000000000000001 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=0000000000000000 RIP=ffffffff81b6ae9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe3d2311368 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fff800 Opmask01=000000000000001c Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3d2241b20 00007fe3d2241b20 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000075676f008685 898884828183873a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0f0e0d0c0b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000843d7365 6361667265746e69 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe3d2108d48 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005643708a2560 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65722f6574617473 2d6b6f6f682f6463 706368642f6e7572 2f7261762f3d6663 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00706368642e3268 74652e666e6f632e 766c6f7365722f65 746174732d6b6f6f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 524e584f01828700 00000084004e585e 5c5b4f5849535400 870058505c535b54 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005643708ae0b8 0000000000000000 000000000000000f 000056437000873d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005643708a8918 0000000000000000 000000000000000f 0000000000875d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc900066a0000 RBX=0000000000000000 RCX=ffff88802b3fd1b0 RDX=000000000000009d RSI=ffffffff8705bdf1 RDI=ffff88802b3fd420 RBP=0000000000000001 RSP=ffffc90000658ba8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=0000000000000fa0 R14=ffff88802b3fd1b0 R15=0000000000000001 RIP=ffffffff8705be2e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f50b2260300 ffffffff 00c00000 GS =0000 ffff8880d5d60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2266bed158 CR3=0000000025acf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=bbe2830bd705a8f2 d0d41bc0a2309674 bbe2830bd705a8f2 d0d41bc0a2309674 bbe2830bd705a8f2 d0d41bc0a2309674 bbe2830bd705a8f2 d0d41bc0a2309674 ZMM18=036e96aa80c1341b 84e280cca8285d48 036e96aa80c1341b 84e280cca8285d48 036e96aa80c1341b 84e280cca8285d48 036e96aa80c1341b 84e280cca8285d48 ZMM19=d308000000000000 0000000000000005 d308000000000000 0000000000000004 d308000000000000 0000000000000003 d308000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff040fc0 030008000fb80300 08000fb003004c50 4701ffffffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffff70803800303 80040fa003950000 003e0000008500ff ffff9c0000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c400000002183208 0e80030e80040f90 030808000f880320 08000f80030a1000 ZMM24=a8285d48a8285d48 a8285d48a8285d48 a8285d48a8285d48 a8285d48a8285d48 a8285d48a8285d48 a8285d48a8285d48 a8285d48a8285d48 a8285d48a8285d48 ZMM25=84e280cc84e280cc 84e280cc84e280cc 84e280cc84e280cc 84e280cc84e280cc 84e280cc84e280cc 84e280cc84e280cc 84e280cc84e280cc 84e280cc84e280cc ZMM26=80c1341b80c1341b 80c1341b80c1341b 80c1341b80c1341b 80c1341b80c1341b 80c1341b80c1341b 80c1341b80c1341b 80c1341b80c1341b 80c1341b80c1341b ZMM27=036e96aa036e96aa 036e96aa036e96aa 036e96aa036e96aa 036e96aa036e96aa 036e96aa036e96aa 036e96aa036e96aa 036e96aa036e96aa 036e96aa036e96aa ZMM28=000000b0000000af 000000ae000000ad 000000ac000000ab 000000aa000000a9 000000a8000000a7 000000a6000000a5 000000a4000000a3 000000a2000000a1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=d2080000d2080000 d2080000d2080000 d2080000d2080000 d2080000d2080000 d2080000d2080000 d2080000d2080000 d2080000d2080000 d2080000d2080000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801f2f0000 RSI=ffffffff81b6ae9e RDI=ffff88801f2f0000 RBP=0000000000000003 RSP=ffffc900001a7df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=0000000000000000 RIP=ffffffff81b6ae9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff952473000 CR3=000000000eb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 337a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf76e38f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf76e38f6 00007ffdf76e38fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b56a35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b56a35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b56a357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0b56a35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000001b 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000008a4 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000001b 0000000000000000 0000000000000000 00000000000008a4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000