last executing test programs: 57.730445232s ago: executing program 1 (id=73): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001003dbd700000000000fe880000000000000000000000000001fe8800000000ffffffffffffff80000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a0010004100"], 0xc4}}, 0x0) 57.729478258s ago: executing program 1 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f00000001c0)={[0x3]}) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(r0, 0x9, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) epoll_pwait(r2, &(0x7f0000000200)=[{}, {}, {}], 0x3, 0xfffffeff, &(0x7f0000000240)={[0xb4]}, 0x8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 57.640938882s ago: executing program 1 (id=75): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) setns(0xc9, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="aad9986e8fdaa415d99ae76aec976fd623f94acf05a2bbe2446ff112727a42a8721f914f5315900eef22a980d359fa59109900b13354cdfb84a9c5514f54714382b6ff89df80b6c3b79028d9c8e09b7cce70ff993593612943b780eb4d4b1fd5dcfec0406b59a44afad37feef76570418459c59f84b7ff9653a49043bfed4c2e4b9239496a94949eea003b42c82cbfe8e672dcc8898708dd3de4d4674b8d7501bb55c3bcf84b6bc912ce5333434326c4827795cf719c74dd1e0a8e6fab1a309b2e7824c827f31e35e94253728c52a21bbc67d3e959e1c6c0f7f328"}], 0x2, 0x0, 0x21}, 0x4000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x1ffd, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x4, [{0x80000001, 0xfffffff4}, {0x2, 0x20ba}, {0x0, 0x7}, {0x2, 0x7}]}}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r9, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r8, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x1000000000fe, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0xf, 0x7fff8001}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0x12e8, 0x5, 0x88fd, 0xffffffffffffffff, 0x2, 0x8000003fe, 0x4002004c4, 0x1000, 0xa, 0x97, 0xc, 0x4, 0x9, 0x2, 0x1, 0x2000000000008], 0xffff1000, 0x404}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') 57.521526828s ago: executing program 1 (id=76): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$binder(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010800000000000001000500000005000100070000000900020073797a30000000000c00078008001240fffffffe050004000000000012000300686173683a6e65742c706f7274000000050005000a"], 0x58}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'gretap0\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 56.500918292s ago: executing program 1 (id=81): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xf4, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xe0, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xf4}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d1}, 0x404c800) setsockopt$inet6_int(r3, 0x29, 0x49, &(0x7f0000000000)=0x1, 0x4) 56.221578887s ago: executing program 1 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) timer_settime(0x0, 0x1, 0x0, 0x0) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x4080c) (async) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r3, 0xc008744c, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000140)={"218ff100", 0x8, 0x6, 0x2, 0x4, 0x817b, "f700", "02000200", "0500000c", '\x00', ["50cb9404000100", "cdc060b0223749b45300", "010000003c97c443084000", "350000010000000000005800"]}) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 56.187288477s ago: executing program 32 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) timer_settime(0x0, 0x1, 0x0, 0x0) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x4080c) (async) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r3, 0xc008744c, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000140)={"218ff100", 0x8, 0x6, 0x2, 0x4, 0x817b, "f700", "02000200", "0500000c", '\x00', ["50cb9404000100", "cdc060b0223749b45300", "010000003c97c443084000", "350000010000000000005800"]}) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 53.629894856s ago: executing program 0 (id=123): prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file2\x00', 0x0, 0x8) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$getsig(0x4202, r1, 0x9, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x800008a, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x3}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000040)='/%\x00', 0x81, &(0x7f0000000080)={@_ha_fsid={[0x6, 0x80000001]}, {0x49, 0x4, 0x100, 0x3}}, 0x8, &(0x7f00000000c0), &(0x7f0000000140)=0xb4}) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000580)={{'\x00', 0x2}, {0x6}, 0x57, 0x0, 0x0, &(0x7f00000001c0)='./cgroup/pids.max\x00', &(0x7f0000000200)='./cgroup/pids.max\x00', &(0x7f0000000240)="1106b377f1edbc351986110903d505d35462bd5da847f6cd83c5e5308ecb42a2578ea0e738c0c2062251cd23d5f100053cf3ae1805c5915e29c16a5357953b6e9155dd6679cfd1e130595ebe7bf0b55ee3879f3a5f6e97229dd75eaf4fac909fc68981432e4af30ec7a6e32d29e1e2ef33b57af532350a53bea9f0bf06619df77186b6aadc5f79e4f80106097e5fc53b05cb954abd1f5bf87f2f03c465bf01656a62f0407cad59bd9441ab6a70599c1ecd7e811032c6205707dc50b62130428b5f193e1d5053858713ac2b57066165a337b5300d1cf0b8a774ee5fe1664d07ebaa3c8096d8ade287a6aa0136fe3bc72941c822e53d46d066e665683c902d3ee189ce9c32ae5fada4cf4cd9fdefb2d76b169807c2dbf43dc0caeb3847ca37980dee875d5a38dee91cfe92a5278eaf298ca46d24c20483391ce86dc090777c7173a08057dff824ae36005751db1a285aa72d6a0512f83926666f4288", 0x15b, 0x0, &(0x7f00000003c0)={0x2, 0x13f, {0x1, 0xc, 0xa4, "7ac5bebce872a33b69a7d573b396f56bf69728376afcc587915af63c6e4c5d21c1611ce114f77777bf9fe3e319ed21260999059ac9aeff1e35fdeecba77ccda84606aad54db5095dfbcafbfd3a22f5271e25a1dfb76733125b0de52b6532b9217d26ea32996aa0a7ecc256e03979e6abf4831afa66d15aa40a6d2aa1146a9a2bfae61b74ab05640939184e117e2a44c2fbe6371a6ebb00cb7e4ae36e740f5dbbf758c91d", 0x8e, "acc6342ee012fb9c75dea6bc5fbc6afcf98a55aa9c7609c169c07bc9f0afb895182462c3f76758072144c62da321eeb12c3ea2584648508e8a28e98cf1463eee40545145901804bb6615b809972d9fef9d6c49264c63d36caee0e1f600b46e40ec814b8c9048e0822de501220cb58a6c38896bf77218150a2496522e58eb3e8c4d92ab664cf742ab3f0c3ac626ad"}, 0x3e, "b8e2cb16351e52aa43fe8c8368d77bfa085dddb0eda42a8a036ce3a67441f8ea8d680c4b778c9d00ac776a4d7094ed7e0d164085eec81a99e73416b05cf4"}, 0x189}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x6) 52.701870156s ago: executing program 0 (id=136): r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000001600), 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x12, 0x4, 0x0, 0x0, {0x1a}}, 0x14}}, 0x1) 52.64068823s ago: executing program 0 (id=139): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x60000000000000, 0x30001) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000040)=0x3) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000100)='*%-/}%\x00', 0x8000, &(0x7f0000000140)={@_ha_fsid={[0xa1, 0x4]}, {0x60, 0x1000, 0x6, 0x3}}, 0xfffffff7, &(0x7f0000000180), &(0x7f00000001c0)=0x80}) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000240)=""/72, 0x48}, {&(0x7f00000002c0)=""/145, 0x91}], 0x2) readv(r1, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/236, 0xec}, {&(0x7f00000004c0)=""/125, 0x7d}, {&(0x7f0000000540)=""/82, 0x52}, {&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/192, 0xc0}], 0x5) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000780)=""/105) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000840)={0x0, &(0x7f0000000800)}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='cgroup.freeze\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000940)={0x0, @private, @broadcast}, &(0x7f0000000980)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40015}, 0x80) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f0000000a80)) recvmmsg(r3, &(0x7f0000003580)=[{{&(0x7f0000000ac0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/246, 0xf6}, {&(0x7f0000000c40)=""/85, 0x55}, {&(0x7f0000000cc0)=""/104, 0x68}], 0x3, &(0x7f0000000d80)=""/191, 0xbf}, 0x7}, {{&(0x7f0000000e40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ec0)=""/203, 0xcb}, {&(0x7f0000000fc0)=""/202, 0xca}], 0x2, &(0x7f0000001100)=""/107, 0x6b}}, {{&(0x7f0000001180)=@alg, 0x80, &(0x7f0000001280)=[{&(0x7f0000001200)=""/80, 0x50}], 0x1, &(0x7f00000012c0)=""/17, 0x11}}, {{&(0x7f0000001300)=@nfc_llcp, 0x80, &(0x7f0000001740)=[{&(0x7f0000001380)=""/73, 0x49}, {&(0x7f0000001400)=""/54, 0x36}, {&(0x7f0000001440)=""/3, 0x3}, {&(0x7f0000001480)=""/209, 0xd1}, {&(0x7f0000001580)=""/72, 0x48}, {&(0x7f0000001600)=""/77, 0x4d}, {&(0x7f0000001680)=""/32, 0x20}, {&(0x7f00000016c0)=""/72, 0x48}], 0x8, &(0x7f00000017c0)=""/201, 0xc9}}, {{&(0x7f00000018c0)=@l2, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001940)=""/131, 0x83}, {&(0x7f0000001a00)=""/34, 0x22}], 0x2, &(0x7f0000001a80)=""/83, 0x53}, 0x81}, {{&(0x7f0000001b00)=@generic, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b80)=""/56, 0x38}, {&(0x7f0000001bc0)=""/48, 0x30}, {&(0x7f0000001c00)=""/147, 0x93}], 0x3}, 0x6b4}, {{&(0x7f0000001d00)=@nl=@proc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001d80)=""/199, 0xc7}, {&(0x7f0000001e80)=""/2, 0x2}, {&(0x7f0000001ec0)=""/180, 0xb4}], 0x3, &(0x7f0000001fc0)=""/77, 0x4d}, 0x4}, {{&(0x7f0000002040)=@hci, 0x80, &(0x7f00000034c0)=[{&(0x7f00000020c0)=""/195, 0xc3}, {&(0x7f00000021c0)=""/68, 0x44}, {&(0x7f0000002240)=""/17, 0x11}, {&(0x7f0000002280)=""/198, 0xc6}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/12, 0xc}, {&(0x7f00000033c0)=""/206, 0xce}], 0x7, &(0x7f0000003540)}, 0x4}], 0x8, 0x40000100, &(0x7f0000003780)={0x0, 0x3938700}) clock_getres(0x4, &(0x7f00000037c0)) r8 = syz_genetlink_get_family_id$team(&(0x7f0000003840), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000003940)={'syztnl1\x00', &(0x7f0000003880)={'gre0\x00', r5, 0x1, 0x40, 0xb, 0x4, {{0x22, 0x4, 0x2, 0x7, 0x88, 0x66, 0x0, 0x2, 0x2f, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0x7, 0xa, [@multicast2]}, @noop, @rr={0x7, 0x1f, 0x7d, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x36}, @loopback, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x34}, @rand_addr=0x64010101]}, @lsrr={0x83, 0x17, 0xa3, [@remote, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @dev={0xac, 0x14, 0x14, 0x24}]}, @timestamp_prespec={0x44, 0x14, 0xda, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5d}, {@local, 0x4}]}, @noop, @ssrr={0x89, 0x13, 0x86, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2]}, @generic={0x0, 0xd, "fbab80471b31154299e451"}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000003b80)={&(0x7f0000003800), 0xc, &(0x7f0000003b40)={&(0x7f0000003980)={0x190, r8, 0x1, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x84}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4010}, 0x4) readv(r1, &(0x7f0000003d80)=[{&(0x7f0000003bc0)=""/158, 0x9e}, {&(0x7f0000003c80)=""/255, 0xff}], 0x2) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000003e00)={0x2, &(0x7f0000003dc0)=[{0x8, 0x7, 0x5, 0x80f6}, {0xd78, 0xc, 0x0, 0xfffffff8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000003e40)) clock_getres(0x7, &(0x7f0000003ec0)) ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0xd0009411, &(0x7f0000003f00)={{0x0, 0x6, 0xffffffffffffffb4, 0x8, 0x80, 0xc06, 0x4, 0x0, 0x9, 0x7, 0x579, 0x9, 0x5, 0x9, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000004f00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000005100)={{0x0, 0x5, 0x8, 0x200, 0x4, 0x9, 0x7, 0x1, 0x3, 0x2, 0x7ff, 0x0, 0x7, 0x100, 0x7}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000006100)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r10, 0xc0709411, &(0x7f0000007100)={{0x0, 0xf519, 0xff, 0x8, 0xd6a, 0x0, 0x80000000, 0xfff, 0x7fffffff, 0xbc, 0xc0f, 0xfffffffffffffffd, 0x0, 0x8, 0x4f4}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000071c0)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1b, "28e0e771fbb578"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000114580)={0x9, [{r11, r12}, {r13, r14}, {r15, r16}], 0xc, "a3806983cd1339"}) 52.640246345s ago: executing program 0 (id=140): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffff, @local, 0x5, 0x3}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00px\x00', @ANYRES16=r3, @ANYBLOB="000325bd7000fbdbdf257700000008000300", @ANYRES32=r4, @ANYBLOB="0c00990003000000380000000500ee00040000000800ef00040000000800ef00080000000500ee006c000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044000) recvmsg(r2, &(0x7f0000000400)={&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/128, 0x80}], 0x1, &(0x7f0000000340)=""/174, 0xae}, 0x40000002) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7d}, [@ldst={0x4, 0x0, 0x4, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 51.740886581s ago: executing program 0 (id=162): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@remote, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x1}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001d, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="180462471f678d90a920570924cef5af53e7b0f922000000000000000000005d4712e6f08941160071180c00000000009500000000000000e9fd9f0a4250aaffd502956bdcb93a580b6f2e72bf50bcabfc8d94c0282f1f4f45b7c8f08cac1b78fa8126bdbd3c6a8063719ba0d3cce69b64b577fc3831a8ad2c5751e702c0fc5821d6deb3f9ebce29df410f0000000000000007027a785e32be6563e39ef2cd5f0e50d082673a8a778a89eea9b8ee746acbc755d92b432fcf61dad116ba1b69118aaf3cabe542afaca5f61c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgid(0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = syz_pidfd_open(r3, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) pidfd_send_signal(r5, 0xd, 0x0, 0x4) sendfile(r2, r2, 0x0, 0xd) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001780)=ANY=[@ANYBLOB="e398ff8edb50802bcbfe6761aa2dd8671c063bec777636a6830acdb2e8b7b7e4eaf656c0246d217d22cab233e3154bae0d9595dc7f8e26c4a76b28d324a0fe8caa0f577113168a7d2d1b803d4a130e2382c388f75335d7fcf396b6b232c064633460f2f931e8b28a81148229f16b34d4d6bced21ab14cd898c4ec3556681a6955525ee5a60b5b344c76c295fa3563bd83335c8fe462d9e31fa85734e18531854cf45901987792bcaae4cb7b4b87d33f32775e6898ad6f24353258f344a89bac8422a7e9934260d5598a5039b9d069db0b74a5841e5818a3a", @ANYRES16=r10, @ANYBLOB="010025bd7000fbdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x70bd29, 0x2, {0x7, r8}}, 0x18}, 0x1, 0x0, 0x0, 0x22004014}, 0x40080c0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x6, 0x5, 0x11, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0xa482, 0x9}}) sendmsg$nl_route_sched(r2, &(0x7f0000001640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001600)={&(0x7f0000000480)=@newchain={0x1148, 0x64, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xf, 0x9}, {0x1, 0x3}, {0x3, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x1}}, @filter_kind_options=@f_route={{0xa}, {0x10cc, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x814, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x3, 0xbc, 0x101, 0x8, 0xb, 0x6, 0xbc98, 0x7, 0x40, 0x59b6, 0x5, 0x10001, 0xe, 0x5, 0x8, 0xfee, 0x8, 0x6, 0x8, 0x10000, 0x6, 0x5, 0x40, 0x2, 0x3, 0x2, 0x4, 0xfffffffb, 0xb, 0xe, 0xb7, 0x4, 0x1ff, 0x13a7, 0x7, 0x2, 0x400, 0xb, 0xb, 0x80, 0x1, 0xf6, 0xfff, 0x7fff, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x7, 0x0, 0x2e, 0x3, 0xf, 0x7, 0xffffffff, 0x8, 0x9, 0x4, 0x400, 0x2, 0x3, 0x4cbc0f00, 0x9, 0x401, 0x10000, 0x6, 0x9, 0x1, 0x6, 0x4, 0x9, 0x0, 0x1ff, 0x2, 0x3, 0xe, 0x7, 0xa, 0x3ff, 0x6, 0x4, 0x66f, 0x40000004, 0x0, 0xb, 0x7f, 0x8f, 0x0, 0x10000, 0xffffffff, 0x1, 0x4, 0x9, 0x2, 0x1, 0x7c, 0xfffffffe, 0xffffffff, 0xe, 0x4e, 0x6, 0x29b9, 0x4, 0x5, 0x6, 0x9, 0x1000, 0x2, 0x7, 0x80, 0x80000000, 0x5, 0x10, 0x5, 0x6, 0xf, 0xffff7fff, 0x5, 0x2, 0x22, 0x3, 0x5, 0x5, 0x1, 0x800, 0x301, 0x82, 0x0, 0x3, 0x8, 0x2, 0x0, 0x0, 0x5, 0x1, 0x1, 0x6, 0xd, 0xffc, 0x3, 0x1, 0x1, 0xff, 0x1, 0x3, 0x7, 0xe3, 0x100, 0x9, 0x2, 0x6, 0x2, 0xffffffff, 0x5, 0x4, 0x6, 0x1000, 0x4, 0x9, 0x3ff, 0x2, 0xfffffff9, 0x8000000, 0x4, 0x0, 0x6, 0x9, 0x9, 0x2, 0x5, 0x0, 0x1, 0x93, 0x1000, 0x1, 0x8, 0x9, 0x31b38d7a, 0x8, 0x10, 0x1ff, 0x4, 0x2, 0x9, 0x81, 0x8, 0x8, 0x0, 0x3, 0x2, 0xe1, 0x1, 0x64e47321, 0xfffffffe, 0x0, 0xfda, 0x1, 0x2, 0x0, 0x8, 0x47c8, 0x4, 0x6, 0x6, 0x4, 0x5, 0x8, 0x2, 0x6, 0x40, 0x8, 0x4995, 0x25d6, 0x0, 0x7, 0x88, 0x38000, 0xa, 0xfffffffb, 0x80, 0x5, 0x7, 0x4, 0x3ff, 0x7, 0x1, 0x4, 0xfffffff7, 0x63f, 0x400, 0x2, 0xc95c, 0x8, 0xffffbec0, 0xffff8001, 0x1, 0x0, 0x3, 0x3, 0x9, 0x2, 0x9, 0x7ff, 0x7, 0x4, 0xeaa5, 0x1, 0x12, 0x81, 0x5a7, 0x9, 0x7fffffff, 0x0, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x7, 0x83, 0x3, 0x7, 0x5, 0x4, 0x2, 0xa738, 0x7, 0x800, 0x9, 0x0, 0x0, 0x78, 0x582, 0xfff, 0x5, 0x4, 0x70, 0x4, 0x10000, 0x9, 0x4, 0x3, 0x4, 0x4, 0x4, 0xfffffff7, 0x2, 0x4, 0xffffff64, 0x8, 0x8, 0x5, 0x402, 0x6, 0x5, 0x4c3a, 0x1, 0x4, 0x8, 0x9, 0x1, 0x4, 0x1ff, 0x7, 0x9, 0x3, 0xff, 0x7, 0x2934, 0x7fffffff, 0x2, 0x181e, 0x2, 0xfffffffe, 0x7, 0x9, 0x9, 0xf, 0x6, 0x45e, 0x5, 0x1, 0x8, 0x7, 0x23, 0x200, 0x8, 0x9, 0x2, 0x994, 0xfff, 0x80000001, 0x1, 0x5, 0x7fffffff, 0x10, 0xde, 0x3ebb94d1, 0x6, 0x8, 0x7, 0x2, 0x6, 0xfe0b, 0x1, 0x3, 0x3, 0x334, 0x200, 0x921, 0x3, 0x0, 0x91, 0x7, 0x7, 0x5, 0x0, 0x4, 0x80000001, 0xd54d, 0x3, 0x4, 0x10, 0x5, 0x2, 0x4, 0x0, 0x6, 0x2, 0xd, 0x126, 0x7, 0x6, 0x10000, 0x9, 0xff, 0xa, 0x0, 0x3, 0x1, 0x0, 0x5, 0x3, 0x3, 0x5, 0xa, 0x389, 0x2, 0x9, 0x7, 0x2, 0x187, 0x1, 0x3, 0x2, 0x8958, 0x8, 0x0, 0x6, 0x50000002, 0x3, 0x7, 0x5, 0x1, 0x2, 0x7, 0x1, 0xc, 0xfff, 0x7, 0x7, 0x6, 0xb, 0x45471ed6, 0x95d, 0x6, 0x0, 0x4, 0x7f, 0x1, 0x2f, 0x800, 0x1000, 0xd9, 0x868, 0xc, 0x5, 0xffffffc0, 0xa0, 0x4, 0x7, 0x3, 0x52, 0x0, 0x1, 0xb26b, 0x3, 0x200000, 0x80, 0xb4c4, 0x17, 0xbba, 0x1, 0x8, 0x0, 0x3, 0x3, 0x5, 0x0, 0x1, 0x0, 0x3, 0x9, 0x3, 0xc, 0xffff0000, 0x2, 0x198, 0x1ff, 0x7fffffff, 0x8cf2dd3, 0x4a91, 0x101, 0x31e, 0x1ff, 0x10001, 0x4, 0x9, 0x81, 0x401, 0x4, 0x4, 0x1, 0x2, 0x100, 0x8, 0x400, 0x3, 0x2, 0x9, 0x1, 0x80000000, 0x8, 0x3ff, 0x3, 0x3, 0x1, 0x6, 0x6, 0x5, 0x8, 0x7, 0x1ff, 0xe36c, 0x9, 0x8, 0x4, 0x2, 0x3, 0xfffffff7, 0xffffffff, 0x6, 0x6, 0xbe, 0x101, 0xfff, 0xc, 0x6, 0x8, 0x7fff, 0x7fffffff, 0x10, 0x7]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x22}, @TCA_ROUTE4_IIF={0x8, 0x4, r11}, @TCA_ROUTE4_POLICE={0x89c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xe7, 0x4, 0x2, 0x9, 0x80, 0x4, 0x3c, 0x10001, 0x3, 0x30, 0x1, 0x5, 0x2, 0x7f, 0x4, 0x97, 0x0, 0x0, 0x5, 0x1000, 0xb, 0x10001, 0xe5, 0x5, 0xdcfc, 0x0, 0x9, 0x8, 0x7fffffff, 0xff, 0x7ff, 0xc, 0x8, 0x5, 0x3, 0xd, 0x9, 0x3, 0x9, 0xb, 0x8, 0x9, 0x7, 0x7fff, 0xc, 0x1ea, 0x1, 0x5, 0xfffffffa, 0xfff, 0x8, 0x2, 0x5, 0x4, 0x0, 0x80, 0x2, 0xffffffff, 0x10001, 0x56, 0xfffffff0, 0x6, 0xb, 0x81, 0x4, 0x6, 0x84, 0xff, 0x9, 0x9, 0x8, 0x1, 0xe371, 0x7, 0x3, 0x5, 0x5, 0xb479, 0x1, 0x9, 0x4, 0x8, 0x7, 0x4, 0x5, 0x6, 0x8, 0xa, 0x8, 0x2ab4, 0x4, 0x5, 0x6, 0x4, 0x8, 0x8b3, 0xfff, 0x407f0e92, 0x6, 0xa, 0x9, 0x6, 0x5, 0x12f, 0x2, 0x8, 0x401, 0xff, 0xaa, 0x2, 0xff, 0x3, 0x9, 0x3, 0x2, 0x80000000, 0x9, 0x0, 0x6, 0x9, 0x100, 0x6, 0x101, 0x200, 0x4, 0x16, 0xffffffff, 0xc39a, 0xffffffff, 0x7, 0x60000, 0x7, 0x0, 0x7f, 0xfffffffb, 0x1, 0x6, 0x0, 0x6, 0x334d, 0x9, 0x1, 0x0, 0x58, 0x9, 0x681aec95, 0xd0a9, 0x2, 0xc, 0x8, 0xd, 0x206e, 0x5, 0xffff, 0x3ff, 0x9, 0x3, 0x4, 0x2, 0x1, 0xc, 0x10, 0x7f, 0x9, 0x3, 0x9, 0x1, 0x3, 0x7, 0x3, 0x5d, 0x7, 0x9, 0x4f4, 0x7ff, 0x4, 0x6, 0x7fff, 0x1, 0x2, 0x9, 0xffff, 0x11b6, 0xfffffff7, 0xd, 0x9, 0x2, 0x7069, 0x8, 0x80000001, 0xdf1, 0x134, 0x3, 0xffff0001, 0x8, 0x1, 0x8, 0x8, 0x6, 0x4, 0x343db24, 0x3, 0x4, 0x8, 0x8, 0x0, 0x81, 0xd8cf, 0x5, 0x9, 0x3ff, 0xfffffacc, 0x9, 0xfffff001, 0xffff, 0x9, 0x0, 0x3, 0x5, 0xb19b, 0x8, 0x10, 0x3, 0x3, 0x9, 0x9, 0x2, 0xc0, 0x5, 0xffff, 0x6, 0x7ff, 0x6, 0x0, 0x974, 0x60, 0x30d, 0x2, 0xffffffff, 0x5, 0x4, 0x2, 0x100, 0x4, 0x0, 0x4, 0xfff, 0x8, 0x29cd5a17, 0x40, 0x9, 0xb74a, 0x9, 0x1, 0x95ba, 0x6d0d]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xb, 0x401, 0x8, 0x2, 0xfffffffd, 0x2381, 0x1000, 0x7, 0x7, 0x8, 0x9, 0x9, 0x4, 0x5, 0x6, 0x0, 0x7, 0x7ff, 0x6, 0xb76, 0x8001, 0x4, 0xffff, 0x2, 0x19, 0x11e, 0x9, 0x4, 0x22, 0x80000000, 0xfffffbff, 0x2, 0xfff, 0x7, 0x1, 0x7ff, 0x7, 0x8000, 0x5, 0x0, 0x2, 0x5, 0x1, 0x7, 0x45, 0x7ff, 0x3ae, 0x0, 0x163e, 0x4, 0x10001, 0xffffffff, 0x0, 0x9e93, 0x6, 0x2, 0x84c8, 0x3, 0x1, 0x3, 0x5, 0x9, 0x8, 0x10, 0x147, 0x80000001, 0x101, 0x8, 0x9b4, 0xaed, 0x81, 0x50, 0x8, 0x7, 0x0, 0x7, 0xeb9, 0x9, 0x0, 0x6, 0x6e, 0x5, 0x8, 0x5, 0x200, 0x9, 0x3, 0x3000000, 0x8, 0xae, 0x3, 0x5, 0x80, 0x163a, 0x5, 0x0, 0xffffffff, 0x4, 0x1ff, 0x8, 0x7, 0x0, 0xff, 0x6, 0xfffffff7, 0x3, 0x9, 0x7, 0x5, 0x5, 0xb, 0x2, 0x4, 0xffffffff, 0x2602, 0x6, 0xf2, 0x3ff, 0x4, 0xc8, 0x5, 0x2, 0x6, 0x2, 0x400, 0x9, 0x7, 0xd7d3, 0xff, 0x1, 0x5, 0xa028, 0x6, 0x2, 0x1, 0x5, 0xa4a, 0x7786, 0x6, 0x8001, 0x6, 0xff66, 0x80000000, 0x9, 0x4c, 0x7fffffff, 0x0, 0x6, 0xd3e, 0x6, 0x7, 0xffff8001, 0x6, 0x1, 0x9, 0xc03, 0x4, 0x80000000, 0x2, 0x5, 0x8, 0x6, 0x76, 0x1, 0x5, 0x5, 0xa, 0x8, 0x7ffffffc, 0x0, 0x9, 0x6, 0x1, 0xf4, 0x1, 0x1, 0x7fff, 0x10000, 0x5, 0x4147713c, 0x9, 0x2, 0x5, 0x4c38, 0xffffffff, 0x5, 0x9, 0x6f7, 0xc0000000, 0x0, 0x1, 0x100, 0x6, 0x86be, 0x3ff, 0x24, 0x8, 0xfffffffd, 0xa, 0x3, 0x0, 0x5, 0xf8f, 0xffff, 0x401, 0x8, 0x3, 0x2, 0x5, 0x4, 0xffffffff, 0xa, 0x9, 0x6, 0x1, 0x2, 0x8, 0xfffffffa, 0x6, 0x1, 0x8, 0x7fffffff, 0x1, 0x10000, 0x65c4, 0x2, 0x4, 0x5, 0x6, 0x4, 0x5, 0x7, 0xadb, 0x7, 0x1, 0x88, 0xfffffff8, 0x10001, 0x7, 0x8000, 0x1d2, 0x1, 0x2, 0x8, 0x7, 0x0, 0x9, 0x4, 0x4, 0xff, 0xc00, 0x4, 0x493e, 0x80000001, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8e8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x38, 0xffffffffcffffff1, 0xf8, 0x7, 0x0, {0x5, 0x1, 0x401, 0x9, 0x6, 0x4}, {0x0, 0x2, 0x6, 0x5, 0x5, 0x8}, 0xd, 0x0, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0x7, 0x200, 0x1e58, {0x8, 0x1, 0xfff8, 0x1, 0x862, 0x4}, {0x55, 0x2, 0x6, 0x9, 0x9, 0x200}, 0x3, 0x8}}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9b}}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x3}, @TCA_FLOW_MASK={0x8, 0x6, 0x9}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x1148}, 0x1, 0x0, 0x0, 0x4040881}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x4d2, 0x33}, @in=@rand_addr=0x64010102, {0x0, 0xec2, 0x0, 0x0, 0x6, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x4, 0x0, 0x0, 0x15, 0xe55286f1921f74be}, 0x0, 0x81}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 51.67123175s ago: executing program 0 (id=164): syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/radio#\x00'}, {0x20, '/dev/radio#\x00'}, {}], 0xa, "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"}, 0x124) 44.819771108s ago: executing program 4 (id=247): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], &(0x7f0000000240)=""/246, 0x52, 0xf6, 0x1}, 0x28) read(r0, &(0x7f0000000000)=""/155, 0x9b) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x1, 0x7, 0xd03, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xa053}, 0x20800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x14004040) r1 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) open_by_handle_at(r4, &(0x7f00000000c0)=@fuse={0xc, 0x81, {0x5, 0xfd3, 0x401}}, 0x44201) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000040)='./my_configfs/usb_gadget/g1/functions/tcm.usb0/../file0\x00', 0x18b) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x8000, 0xffffffff, 0xc, {{0x7, 0x4, 0x0, 0x10, 0x1c, 0x68, 0x0, 0xe, 0x29, 0x0, @broadcast, @rand_addr=0x64010101, {[@ssrr={0x89, 0x7, 0x3f, [@private=0xa010102]}]}}}}}) socket$packet(0x11, 0x3, 0x300) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000040)=0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 44.594383925s ago: executing program 4 (id=250): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x206031, 0xffffffffffffffff, 0x42795000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r2, &(0x7f00000002c0)=""/153, 0x99) 44.330267585s ago: executing program 4 (id=256): syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x202, 0x0) io_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x0, 0x0) read(r2, &(0x7f00000002c0)=""/153, 0x99) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route(r2, 0x0, 0x20000043) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000002e0001002abd70000000000008000000", @ANYRES32, @ANYBLOB="0b00e880976b6408686030000500018099"], 0x2c}], 0x1}, 0x0) 42.699007886s ago: executing program 4 (id=269): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0x10, 0x3, 0xfffffffd) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000200000000080000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f9", 0x55}], 0x1}, 0x0) r2 = signalfd(r0, &(0x7f0000000040)={[0x1]}, 0x8) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r2], 0x33fe0) 42.641787923s ago: executing program 4 (id=270): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000500)={{0xffffffffffffffff, &(0x7f0000000000)='proc\x00', 0x100002, &(0x7f0000000080)={@align=0x6, {0x3, 0x7566, 0xc2e4, 0x3}}, 0x8, &(0x7f0000000140), &(0x7f0000000200)=0x6c01}, 0x3, &(0x7f0000000480)=[{0x1, 0x2, &(0x7f0000000240)='proc\x00', &(0x7f0000000280)="7d9956856b093829eef1f75840e61bafb106b143bc49fa8b436243f639eebd9c6a6654bab5a940eeea5fe1e92442dd652bf9d28d137b57779a686a09d1e1baa02e12eabc324e2c3fc9b2a416ac2e", 0x4e, 0x2}, {0x2, 0x2, &(0x7f0000000300)='nfsd\x00', &(0x7f0000000340)="e8e56f8e97640c3b259a2219f38974f1bf94f9760e8d707708f4ce48838c2b9f11006cca38098cab858dcd808a49405d05fa8d5ecc111339276e6d0b0aee6bad5a48f0f4ab50e3bfdcbfeddda3efca5cdca3374974657c8cccaa06ac449520c88032b1aa9c62", 0x66, 0x1a}, {0x2, 0x7, &(0x7f00000003c0)='^*!\xd7:!\x00', &(0x7f0000000400)="0e2cc1e6cdcdcaffffc3f2d277ffe3fc0a8fd3f8bb1c9e56572d3a949beb47164e9f096c5162463224ebe54b899fad864075f3291ef0cf42ac601e223ced92474403b942869e03f8804249467892099330f46e8b557f5d5ee31668aae6a7e3bb7386fc57", 0x64, 0x12}]}) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000580)="aeeb29ec4f54fbb5f1ac1170951ede9a24b9283697a9cff985a5028dddff9cea6864076100e49970fa9519603ba4fdfeec2bbfec36b805ba056890f54d7b1e4e9ec5f575aeb5a0098487316e1b6d35892df2a00699910a2db43b03c9481ce61b95d680367e151889183113dbe7a54fa98ed41a4b6a754d3e6c928ead3a95c153dc852d299a6e2cecf91791b96811d5121259d312c032b856a2bcaf40e2e0277fc07b67a8b8c58b050c7ec15d4936476613ca4a2c8760f572fe2a9d4a6ca9ef04fdab72f8e6a8eae8039e9be9a61e2b783e340a39f60d0536205f21e4bd8726d992a8f19908") setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) 42.639919252s ago: executing program 4 (id=271): mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) r2 = openat(r1, &(0x7f0000000000)='./sec\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r2, &(0x7f0000000200)='measure', 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000002280)={0x10}, 0x10) close(0x3) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f0000001100)={0xa, 0x4a21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0x1c, 0x0}, 0xd158e5cd336140dd) 36.395769456s ago: executing program 33 (id=164): syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/radio#\x00'}, {0x20, '/dev/radio#\x00'}, {}], 0xa, "bcef1de58230fc81efbeb24926e126b3b68ea43a9094b29c3ec7cac3db10d28355c1ad77a744fdf7a94494e9662ef4e48ca8927de22470bbcf9a2bdb3e09db188f5f29dd8aec50db20fb89aae1f1028287707dfe2da8f6db8f42971d1880e30c0403cd74657f31b209d729a8890ef21df85e0b7615016433ea070b0d3ec64cf3c144155f84012ea7ab66b27bfb899957b83138687b2b1a2f90b30b9b36b58eedf44fcbce960490e59e6b4b47fa4f88fad361560bb88b58cb4aab36c51b48b708cd949203186e5e198afbe628180705037c5e2b2f92f9492826e7de51a4f401282268d9cfd9f3d8f826c805bdc5d91a13f40ba9494672d9403dad9cf01855"}, 0x124) 27.752568682s ago: executing program 34 (id=271): mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) r2 = openat(r1, &(0x7f0000000000)='./sec\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r2, &(0x7f0000000200)='measure', 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000002280)={0x10}, 0x10) close(0x3) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f0000001100)={0xa, 0x4a21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0x1c, 0x0}, 0xd158e5cd336140dd) 5.545450567s ago: executing program 3 (id=794): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008042}, 0x20000010) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffff"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 5.419311976s ago: executing program 3 (id=795): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001003dbd700000000000fe880000000000000000000000000001fe8800000000000000000000000000010080ffffff0000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a0010004100"], 0xc4}}, 0x0) 5.416065341s ago: executing program 3 (id=797): mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) (async) r0 = open(&(0x7f0000002e00)='./file0/../file0/../file0/../file0\x00', 0x0, 0x69) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x2) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ec7291fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31d7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440e06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad1aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a41fc93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2910659dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df7072dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a3167e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239330f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c5940900000000000000773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49656b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c00", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x2, 0x0, 0x7ffffffe, 0x1fffffffffffe, 0x2, 0xc, {0x1, 0x7ff, 0x4, 0x1, 0x7, 0x1000, 0x9, 0x523, 0x3, 0x6000, 0x1, 0x0, 0x0, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lsetxattr$system_posix_acl(&(0x7f0000002f00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000002e80)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES8=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="0400010000000000080002fa", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="10000700000000002000040000000000"], 0x5c, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000002e40)=ANY=[@ANYRES16], 0xb0}}, 0x20040800) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'ip6erspan0\x00', &(0x7f0000000340)=@ethtool_per_queue_op={0x4b, 0xf, [0x40, 0x3, 0x59e, 0x9, 0x5, 0x800003, 0x0, 0x10, 0x0, 0x0, 0x4, 0x8, 0xa6, 0x6, 0x5, 0xfffffffe, 0x6, 0x7fffffff, 0xffff, 0xdd, 0x2, 0x2, 0x4, 0xfffffffc, 0x9, 0xffffff26, 0x4, 0x2, 0x2, 0x100, 0x9, 0x3, 0x23, 0x5, 0xe96e, 0x7, 0xa, 0x6, 0x10, 0x1, 0x81, 0xe, 0x1, 0x8, 0xf62a, 0x1, 0xb, 0x75d, 0x7, 0x1ff, 0x81, 0xffff, 0x2b, 0x7, 0x0, 0x5, 0xffffa9f2, 0xc, 0x3, 0x80000000, 0x6d5, 0x1, 0x8, 0xffffffff, 0x7fffffff, 0x2, 0x0, 0xd1, 0x2008000, 0x695e0a56, 0x6, 0xba8, 0x8001, 0xd, 0x36, 0x0, 0x1c1b, 0x47ea, 0x5, 0xfe, 0xe5cd, 0xe00, 0x4, 0x1, 0x80000000, 0x7ff, 0x80000001, 0x1, 0x6, 0x2, 0x9, 0x9, 0x2, 0x8, 0x0, 0x400, 0x1e0d, 0x7, 0x504, 0x6, 0x487, 0x6, 0x7, 0x7, 0x9, 0x3, 0xff, 0x1001, 0x5, 0x4, 0x9, 0x5, 0x10000, 0x1000, 0xd2a, 0xaf09, 0x293, 0x9, 0xfff, 0x8001, 0x7, 0x3c31, 0xffffffff, 0x3ff, 0x2, 0x4, 0x380, 0x2], "a07d7f948949f7293611d6814165635990759406076d183da28d5a4ca246c0e0249b07f4912e00fc869f331b1021eb42922812babc"}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e28, 0x2007, @local, 0xd16}}, 0x402}, 0x90) (async) setns(0xc9, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000180)={0x0, 0x1}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003000)=ANY=[@ANYBLOB="4000000010000104000008000000000000000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000200012800b00010067656e6576650000100002800400060005000800000000002886ca763db067e76e4bcffa6bc61cdecd56b3f7d773599e1cbd8e1d79af0fa3f7038ae068a157f80ffb00af5b2e0a38c56d8cf30ad1f292b8cb3e0cb40dd023d5a0f6570a1afa59e9987b59ecfaf42de338be4fce"], 0x40}, 0x1, 0x0, 0x0, 0x2000c830}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002f80)='./file0/../file0\x00', 0x80) (async) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/afs/cells\x00', 0x2, 0x44) (async) socket$nl_crypto(0x10, 0x3, 0x15) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r7, 0x0) write$selinux_load(r6, 0x0, 0xe4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) (async) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x74, 0x3) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) (async) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 5.339323304s ago: executing program 3 (id=798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) prctl$PR_GET_KEEPCAPS(0x7) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x8c}}, 0x20000014) 5.339046299s ago: executing program 3 (id=799): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) (async, rerun: 32) setns(0xc9, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) (async, rerun: 64) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000300)={{0x0, 0x7f}, 0x2c}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffff689}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x32, 0x1}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) 5.21945364s ago: executing program 3 (id=800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x121003, 0x0) (async) r1 = memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) tee(r1, r0, 0x84, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000000)=@sr0, 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x400000f1, 0x0, 0x6}]}) 4.409168857s ago: executing program 5 (id=811): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) (async) r5 = timerfd_create(0x9, 0x80000) timerfd_settime(r5, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) syz_ublk_setup_queues(r6, r4, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce1b, 0x20, 0x0, 0x4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x70, 0x8, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0xf21e2be15e6cc6ef, 0x2, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0x228}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x2, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x10, 0x4, 0x4}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xee, 0x6, 0x5, 0x20, 0x2}, 0x7e, &(0x7f0000000140)={0x5, 0xf, 0x7e, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x7, 0xf000, 0x2, [0x3fff, 0xf, 0xf]}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x5, 0xf00, 0x800, [0xff3f00, 0xff3f3f, 0x0, 0xff0030, 0xff3fc0]}, @ssp_cap={0x1c, 0x10, 0xa, 0xef, 0x4, 0xb9b, 0xf000, 0x1, [0xff0030, 0xc000, 0x30, 0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "bb20f4aae71d2dc9d0d3333b011ce0d8"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x5, 0x4, 0x3}]}, 0x2, [{0x62, &(0x7f00000003c0)=@string={0x62, 0x3, "84aedcff494a20dbb55f33a911f94f3f30e3ed01b171d6ec5c06fd12db2b9146ca05a2c4a931840c0c67f737058c868bfd981fa09b43b4527dd96c6b76e171122b0a178d9833b50a718034955fd8fe87712e2fe54b706928238ac9c3ad609423"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_disconnect(r7) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x9000, 0x0, 0x43, 0x0, 0x0, 0x0) 3.479381547s ago: executing program 5 (id=821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x8000000a}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x0, 0x3, 0x6031}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x530d19e49dbee1a2, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1410, 0x200, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4008010) 2.608837929s ago: executing program 5 (id=835): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008042}, 0x20000010) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 2.499524192s ago: executing program 5 (id=836): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x280, 0x258, 0x258, 0x280, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0x0, 0x0, 0xff], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x4, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xff]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@rand_addr=0x64010102, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x12, "7014", 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xe, 0x8400}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000a80)=""/188, 0xba) write$char_usb(r3, &(0x7f0000000080)='B', 0x1) syz_usb_disconnect(r2) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x20, 0x80, 0x4, 0x0, 0x2, 0xff, 0x0, 0xa00}}, 0x1c}}, 0x0) 999.75341ms ago: executing program 5 (id=850): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20940, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000100)=0x1) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @local, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) sendmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="f1", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) 807.503176ms ago: executing program 2 (id=855): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x49, [0x9, 0x7, 0x2, 0x6, 0x7, 0x155f, 0xe79e, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x80, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0xc581, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x7, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x9b54, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000183, 0x2, 0x7, 0xf2, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x8000b, 0x7, 0xfffffffffffffff8, 0x9, 0x4], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) fallocate(r5, 0x20, 0x80000000, 0x836) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000200020bb4b016b36f2a692279f014164ce0000080a"], 0xa0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x10, 0xfffffffe}, 0x9b) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400f0bb5cd355426ef2652c015d95c3c7cbd9170300000000000000dbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) ioctl$KVM_RUN(r6, 0xae80, 0x0) 759.853734ms ago: executing program 6 (id=856): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20044801}, 0x8044) (async, rerun: 32) memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x5) (async, rerun: 32) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000004c0)={0x0, 'veth0_to_batadv\x00', {0x4}, 0xfffd}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x20004000) (async, rerun: 64) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@sr0, 0x0, 0x0) (rerun: 64) 755.791518ms ago: executing program 2 (id=857): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r1], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, @fallback=0x4c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000009a00)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f011df0825e00ff0fc72e500066b9e50a000066b80700000066ba000000000f300fc2ab4ca400f00fbb8cfe00f30f9f4afe66b9f10b00000f320f01c9baf80c66b878d0698266efbafc0ced", 0x4c}], 0x1, 0x6e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 679.847971ms ago: executing program 6 (id=858): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001480)={'#! ', './sys/module/kvm_intel/parameters/vmentry_l1d_flush/file0'}, 0x3d) 679.532246ms ago: executing program 2 (id=859): prctl$PR_GET_TIMERSLACK(0x1e) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x7d97, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="000000006078e846e5d4007d3a6efc59454fe970a316821f90d0ccde4fb2f0fd708f69a5182bd72fa09b187509daf51030e214b773f0f04ab202da951079bff386e7a14b547c3bcc8b69e9451102c7c235222acaa7b3fe4e156ebe5010e673126efab17c3d340e4f15b89669b210a565745924ada3cc4408fe08e2a4"], 0x4) iopl(0x3) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/raw6\x00') preadv(r4, &(0x7f0000000700)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1, 0x17c, 0x9) io_uring_setup(0x6b2e, &(0x7f0000000440)={0x0, 0xdc49, 0x4000, 0x2, 0x2ff, 0x0, r4}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000ff06000000000000002500000000c3de8f90a5a47eb672e183c4a7eb1709000000000000000cd0d9639f169d9fadcd6b0b611e10c1ffe286c05aeff4b90fab9e3a9ddd6967196e3acb8c28e8943adea3e830d86fbc86c131e9dcb6ac8a1c6899a9ca", @ANYRES32=0x0, @ANYBLOB="24020000002005002c0012800b00010065727370616e00001c000280050016000100000006001800050000000500160001000000"], 0x4c}}, 0x8000) 619.762355ms ago: executing program 6 (id=860): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008042}, 0x20000010) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000bc0)={0x2020}, 0x2020) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 561.999002ms ago: executing program 2 (id=861): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x10000) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mkdir(0x0, 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x10000) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) mkdir(0x0, 0x190) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) (async) 561.211363ms ago: executing program 6 (id=862): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0xe34, 0x400040) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xad, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xad, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xdd4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xdd4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x9, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @alu={0x0, 0x1, 0x1, 0x3, 0xa, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x6b}], &(0x7f00000000c0)='GPL\x00', 0x9, 0x2f, &(0x7f0000000100)=""/47, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x6, 0x1000, 0xf9bb}, 0x10, r3, 0xffffffffffffffff, 0x9, &(0x7f0000000540)=[r4], &(0x7f0000000580)=[{0x3, 0x1, 0x5, 0xb}, {0x2, 0x3, 0x9, 0x3}, {0x1, 0x3, 0x7, 0x2}, {0x0, 0x3, 0xd, 0x5}, {0x40, 0x5, 0x7, 0x4}, {0x1, 0x5, 0x9, 0x2}, {0x2, 0x2, 0xc}, {0x0, 0x2, 0x3, 0x8}, {0x5, 0x5, 0x9, 0x7}], 0x10, 0x4}, 0x94) r5 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) fadvise64(r5, 0x8000, 0x49, 0x5) (async) fadvise64(r5, 0x8000, 0x49, 0x5) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000700)=0xfa7e, 0x9) (async) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000700)=0xfa7e, 0x9) syz_open_dev$radio(&(0x7f0000000740), 0x2, 0x2) (async) r6 = syz_open_dev$radio(&(0x7f0000000740), 0x2, 0x2) ioctl$COMEDI_CANCEL(r1, 0x6407) (async) ioctl$COMEDI_CANCEL(r1, 0x6407) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000800)={r6}) mount(&(0x7f0000000840)=@sr0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='ufs\x00', 0x800000, &(0x7f0000000900)='!}]./**\x00') (async) mount(&(0x7f0000000840)=@sr0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='ufs\x00', 0x800000, &(0x7f0000000900)='!}]./**\x00') r8 = syz_open_dev$loop(&(0x7f0000000940), 0x7fffffffffffffff, 0x2080) ioctl$BLKROTATIONAL(r8, 0x127e, &(0x7f0000000980)) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f00000009c0)=0xfd, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000a00), 0x90000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000a40)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000c40)={{r7}, r9, 0x4, @unused=[0x2eed, 0x6, 0x9, 0xefb6], @subvolid=0x4}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000c40)={{r7}, r9, 0x4, @unused=[0x2eed, 0x6, 0x9, 0xefb6], @subvolid=0x4}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x18, 0x5, &(0x7f0000001c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x200}]}, &(0x7f0000001c80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x2, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000001cc0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0x3, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001d40)=[r4, r4, r1, r4], &(0x7f0000001d80)=[{0x4, 0x1, 0x3, 0x8}]}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001e80)={r10, r4}, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001f00), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r11, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x64, r12, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r13 = openat$cgroup_int(r0, &(0x7f0000002040)='memory.swap.high\x00', 0x2, 0x0) fstat(r13, &(0x7f0000002080)) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002140), r11) sendmsg$IPVS_CMD_SET_CONFIG(r8, &(0x7f0000002240)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x4c, r14, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x30}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000002280)=@nullb, 0x0, &(0x7f00000022c0)) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000002300)={&(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000002300)={&(0x7f0000ffb000/0x2000)=nil}) 499.312965ms ago: executing program 2 (id=863): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000180)=@ethtool_eeprom={0x43, 0x7, 0x1000000}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000180)=@ethtool_eeprom={0x43, 0x7, 0x1000000}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) (async) 498.941724ms ago: executing program 6 (id=864): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e) (async, rerun: 32) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x29844713813bb7f3) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) (async, rerun: 64) r2 = userfaultfd(0x80001) (rerun: 64) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000140)=[{0x5, 0x3, 0xf8, 0x0, @time, {}, {0x0, 0x1}, @result={0x0, 0x125cbcea}}], 0x1c) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 64) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000840)=[{{&(0x7f0000000400)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x400c8c5) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000380)={r5, 0xfa}, 0x8) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x400400c) (async, rerun: 32) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010025bd70cabddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async, rerun: 32) read$FUSE(r6, &(0x7f00000009c0)={0x2020}, 0x2020) (async) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x21bc) (async, rerun: 32) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) (async, rerun: 32) syz_open_procfs(0x0, 0x0) 498.478842ms ago: executing program 2 (id=865): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b24, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r0, 0x1, 0xfffffffe, 0x25dfdbff, {{0x2}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x3b, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1520}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0xc804}, 0x4000011) 70.056584ms ago: executing program 6 (id=866): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) read$FUSE(r1, &(0x7f0000001000)={0x2020}, 0x2020) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f00000016c0)=ANY=[@ANYBLOB], 0x0) 0s ago: executing program 5 (id=867): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async, rerun: 32) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x1e1540, 0x3a512d250812dd54) (rerun: 32) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r8 = socket$inet(0xa, 0x801, 0x84) (rerun: 32) setsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x9, 0x7, 0x3}, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000005c0)={0x0, 0x2e, 0x0, [0xa4e, 0x8, 0x0, 0x7], [0x7, 0xa3, 0x6, 0x7fff, 0x1ff, 0x166e, 0xfff, 0x4, 0x5, 0x3, 0x44f, 0x401, 0xca2, 0x7, 0x4, 0x1, 0x4, 0x1ff, 0x80000000, 0x40, 0x80000000, 0x9, 0x7, 0x8, 0x6, 0xffff, 0xe3a5, 0x4, 0xc61, 0x425, 0x4, 0x5a, 0x7ff, 0x90, 0xd1, 0x771e4222, 0x5, 0x1, 0xe82f, 0x3ff, 0x6, 0x4, 0x5, 0xffffffff, 0x7fff, 0x4, 0x40000000000, 0x50, 0x9, 0x80000000, 0xffffffffffffffff, 0xeb4, 0x8, 0x4, 0x4, 0x7f, 0x1, 0x4, 0x2, 0x81, 0x0, 0xd32a, 0x4, 0x0, 0x1, 0xe, 0x5, 0x8, 0x80000000, 0x3, 0x1, 0x7, 0x1, 0xfcb, 0x6, 0x800, 0x2b84bc9d, 0x1, 0x4, 0x8, 0x4, 0x4, 0x2, 0xcb, 0x5, 0x7, 0x1000, 0x3, 0x217, 0x2, 0x8c42, 0x6, 0x2, 0xff, 0x8, 0x4, 0x81, 0xae, 0xf80f, 0x8, 0x4, 0xffffffffffffffe5, 0xffffffffffff0001, 0x6, 0x7, 0x665c, 0x1ff, 0xf58, 0x6, 0x2, 0x5, 0x7, 0x1, 0x2, 0x0, 0x7fff, 0x9, 0xff, 0x7, 0x4, 0x5]}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000a00)={{r8}, {@val={r9}, @actul_num={@val=0x2b, 0x2, 0x6d}}}) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r10, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r11, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000040)={0x28, 0x1, r12, r5, 0x0, 0x0, 0xdead, 0x4}) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000540)={0x28, 0x3, r6, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000001c0)}) (async) ioctl$IOMMU_DESTROY$hwpt(r4, 0x3b80, &(0x7f0000000340)={0x8, r7}) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r13) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0xfb, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r14, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRES16=r12], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) (async, rerun: 64) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) connect$unix(r3, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r15, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='Z\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf042bbd7000fcdbdf251200000008000300", @ANYRES32=r16, @ANYBLOB="0a00060008021100000100000600ab0003000000"], 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) kernel console output (not intermixed with test programs): lan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.753044][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.792436][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.792450][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.800924][ T5733] Bluetooth: hci1: command tx timeout [ 60.811728][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.821089][ T5806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.821114][ T5806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.904221][ T6336] team0: No ports can be present during mode change [ 60.977503][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 60.987240][ T6347] random: crng reseeded on system resumption [ 61.100787][ T6288] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 61.261920][ T6288] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 61.262709][ T6288] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.262731][ T6288] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 61.262743][ T6288] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 61.262754][ T6288] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 61.262772][ T6288] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.267015][ T6329] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 61.267066][ T6329] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 61.270277][ T6288] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 61.273330][ T6288] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 61.273365][ T6288] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 61.276393][ T6288] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 61.277797][ T6288] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 61.277832][ T6288] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 61.287337][ T6288] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 61.472060][ T6329] jffs2: notice: (6329) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 61.486752][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.127'. [ 61.512985][ T6329] bridge0: port 3(macsec1) entered blocking state [ 61.513080][ T6329] bridge0: port 3(macsec1) entered disabled state [ 61.513264][ T6329] macsec1: entered allmulticast mode [ 61.517934][ T6329] macsec1: entered promiscuous mode [ 61.524879][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.111'. [ 61.524911][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.111'. [ 61.534388][ T6329] bond0: entered promiscuous mode [ 61.534402][ T6329] bond_slave_0: entered promiscuous mode [ 61.534521][ T6329] bond_slave_1: entered promiscuous mode [ 61.540026][ T6329] gretap0: entered promiscuous mode [ 61.550260][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 61.554030][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.128'. [ 61.555194][ T5617] usb 7-1: USB disconnect, device number 7 [ 61.564176][ T5617] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 61.564350][ T6395] netlink: 60 bytes leftover after parsing attributes in process `syz.4.128'. [ 61.564829][ T6395] netlink: 'syz.4.128': attribute type 32 has an invalid length. [ 61.569695][ T5617] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 61.571962][ T5617] keyspan 7-1:1.0: device disconnected [ 61.815503][ T6408] Bluetooth: MGMT ver 1.23 [ 62.181760][ T6418] team1: entered promiscuous mode [ 62.181808][ T6418] team1: entered allmulticast mode [ 62.182257][ T6418] 8021q: adding VLAN 0 to HW filter on device team1 [ 62.253057][ T6431] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 62.277082][ T6440] team_slave_1: Caught tx_queue_len zero misconfig [ 62.305569][ T6444] netlink: 'syz.3.145': attribute type 3 has an invalid length. [ 62.430179][ T6451] bond0: Error: Cannot enslave bond to itself. [ 62.627126][ T6466] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6466 comm=syz.2.151 [ 62.631615][ T6468] gfs2: error -5 reading superblock [ 62.696640][ T6471] overlayfs: failed to resolve './bus': -2 [ 62.810013][ T6478] fuse: Bad value for 'user_id' [ 62.810031][ T6478] fuse: Bad value for 'user_id' [ 62.812719][ T6477] fuse: Bad value for 'user_id' [ 62.812734][ T6477] fuse: Bad value for 'user_id' [ 62.884804][ T5733] Bluetooth: hci1: command tx timeout [ 62.957233][ T5733] Bluetooth: hci0: ACL packet for unknown connection handle 222 [ 62.958869][ T6494] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 63.093640][ T6507] overlayfs: failed to resolve './bus': -2 [ 63.150965][ T5839] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 63.303483][ T5839] usb 7-1: not running at top speed; connect to a high speed hub [ 63.303515][ T5839] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.304405][ T5839] usb 7-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.304421][ T5839] usb 7-1: config 1 interface 0 has no altsetting 0 [ 63.306275][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.306288][ T5839] usb 7-1: Product: syz [ 63.306295][ T5839] usb 7-1: Manufacturer: syz [ 63.306302][ T5839] usb 7-1: SerialNumber: syz [ 63.518209][ T5839] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 63.531407][ T5839] usb 7-1: USB disconnect, device number 8 [ 63.863462][ T43] kauditd_printk_skb: 100 callbacks suppressed [ 63.863475][ T43] audit: type=1400 audit(1789108916.759:507): avc: denied { write } for pid=6516 comm="syz.3.166" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 63.996001][ T6521] jffs2: notice: (6521) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 64.001499][ T43] audit: type=1400 audit(1789108916.889:508): avc: denied { write } for pid=6520 comm="syz.4.167" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.125261][ T43] audit: type=1400 audit(1789108917.019:509): avc: denied { create } for pid=6528 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 64.127283][ T43] audit: type=1400 audit(1789108917.019:510): avc: denied { connect } for pid=6528 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 64.128566][ T6529] netlink: 'syz.2.170': attribute type 10 has an invalid length. [ 64.130064][ T6529] syz_tun: entered promiscuous mode [ 64.141210][ T6529] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 64.155850][ T43] audit: type=1400 audit(1789108917.049:511): avc: denied { create } for pid=6530 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.157180][ T43] audit: type=1400 audit(1789108917.049:512): avc: denied { write } for pid=6530 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.235519][ T43] audit: type=1400 audit(1789108917.129:513): avc: denied { create } for pid=6535 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.293914][ T6540] __nla_validate_parse: 11 callbacks suppressed [ 64.293927][ T6540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.173'. [ 64.358021][ T43] audit: type=1400 audit(1789108917.249:514): avc: denied { append } for pid=6542 comm="syz.4.174" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 64.374790][ T43] audit: type=1400 audit(1789108917.269:515): avc: denied { open } for pid=6547 comm="syz.2.175" path="/dev/ptyq8" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 64.378002][ T43] audit: type=1400 audit(1789108917.269:516): avc: denied { ioctl } for pid=6547 comm="syz.2.175" path="/dev/ptyq8" dev="devtmpfs" ino=135 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 64.970761][ T5733] Bluetooth: hci1: command tx timeout [ 65.301869][ T6578] hpfs: Bad magic ... probably not HPFS [ 65.486974][ T6585] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 65.665303][ T6589] ubi0: attaching mtd0 [ 65.668940][ T6589] ubi0: scanning is finished [ 65.668971][ T6589] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 66.017617][ T6589] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 66.075272][ T6593] openvswitch: netlink: Flow key attribute not present in set flow. [ 66.192137][ T6597] nbd2: detected capacity change from 0 to 8178 [ 66.243159][ T6599] block nbd2: shutting down sockets [ 66.250446][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.250733][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 66.252028][ T5098] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.252054][ T5098] Buffer I/O error on dev nbd2, logical block 0, async page read [ 66.252330][ T5098] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.252354][ T5098] Buffer I/O error on dev nbd2, logical block 0, async page read [ 66.252441][ T5098] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.252463][ T5098] Buffer I/O error on dev nbd2, logical block 0, async page read [ 66.253128][ T5098] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.253152][ T5098] Buffer I/O error on dev nbd2, logical block 0, async page read [ 66.253326][ T5098] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.253348][ T5098] Buffer I/O error on dev nbd2, logical block 0, async page read [ 66.253515][ T5098] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.253536][ T5098] Buffer I/O error on dev nbd2, logical block 0, async page read [ 66.253620][ T5098] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.253641][ T5098] Buffer I/O error on dev nbd2, logical block 0, async page read [ 66.253665][ T5729] ldm_validate_partition_table(): Disk read failed. [ 66.253733][ T5098] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.253755][ T5098] Buffer I/O error on dev nbd2, logical block 0, async page read [ 66.253835][ T5098] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 66.253856][ T5098] Buffer I/O error on dev nbd2, logical block 0, async page read [ 66.254029][ T5729] Dev nbd2: unable to read RDB block 0 [ 66.254410][ T5729] nbd2: unable to read partition table [ 66.266382][ T5729] ldm_validate_partition_table(): Disk read failed. [ 66.268558][ T6597] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 66.268616][ T5729] Dev nbd2: unable to read RDB block 0 [ 66.269100][ T5729] nbd2: unable to read partition table [ 66.627202][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 67.017351][ T6634] x_tables: duplicate underflow at hook 1 [ 67.022913][ T6635] IPVS: fo: FWM 3 0x00000003 - no destination available [ 67.024078][ T6634] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 67.029014][ T1160] IPVS: starting estimator thread 0... [ 67.041616][ T5733] Bluetooth: hci1: command tx timeout [ 67.110822][ T6638] IPVS: using max 28 ests per chain, 67200 per kthread [ 67.353154][ T6652] netlink: 48 bytes leftover after parsing attributes in process `syz.2.206'. [ 67.637679][ T5733] Bluetooth: hci3: unexpected subevent 0x37 length: 25 > 13 [ 67.677297][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.678639][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.682651][ T6666] netlink: 'syz.2.211': attribute type 10 has an invalid length. [ 67.691287][ T6668] netlink: 'syz.2.211': attribute type 10 has an invalid length. [ 67.733235][ T6661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.739540][ T6661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.834005][ T6666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.834841][ T6666] team0: Port device netdevsim1 added [ 67.837162][ T6682] netlink: 36 bytes leftover after parsing attributes in process `syz.4.212'. [ 67.841340][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.841403][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.841430][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.841456][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.898148][ T6688] netlink: 36 bytes leftover after parsing attributes in process `syz.4.212'. [ 68.003805][ T6699] bond2 (unregistering): Released all slaves [ 68.121331][ T6288] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 68.267443][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 68.271258][ T6288] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 68.273144][ T6288] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.273182][ T6288] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.283431][ T6288] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 68.283592][ T6288] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 68.283641][ T6288] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 68.289447][ T6288] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 68.289506][ T6288] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 68.292722][ T6288] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 68.301923][ T6288] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 68.301980][ T6288] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 68.311313][ T6288] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 68.468625][ T6720] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 68.775450][ T5805] usb 7-1: USB disconnect, device number 9 [ 68.780995][ T5805] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 68.782827][ T5805] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 68.783094][ T5805] keyspan 7-1:1.0: device disconnected [ 68.804062][ T6735] netlink: 132 bytes leftover after parsing attributes in process `syz.4.225'. [ 69.006831][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 69.006843][ T43] audit: type=1400 audit(1789108921.899:546): avc: denied { getopt } for pid=6743 comm="syz.3.229" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.072138][ T6747] bond0: entered promiscuous mode [ 69.072158][ T6747] bond_slave_0: entered promiscuous mode [ 69.072303][ T6747] bond_slave_1: entered promiscuous mode [ 69.073531][ T6747] batadv0: entered promiscuous mode [ 69.074055][ T6747] debugfs: 'hsr1' already exists in 'hsr' [ 69.074071][ T6747] Cannot create hsr debugfs directory [ 69.074108][ T6747] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 69.074118][ T6747] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 69.074246][ T6747] hsr1: entered promiscuous mode [ 69.074530][ T6747] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 69.076644][ T6747] bond0: left promiscuous mode [ 69.076656][ T6747] bond_slave_0: left promiscuous mode [ 69.076758][ T6747] bond_slave_1: left promiscuous mode [ 69.077400][ T6747] batadv0: left promiscuous mode [ 69.079926][ T5733] Bluetooth: hci3: ACL packet too small [ 69.098896][ T6754] tipc: Enabling of bearer rejected, failed to enable media [ 69.179972][ T43] audit: type=1400 audit(1789108922.081:547): avc: denied { read } for pid=6760 comm="syz.3.233" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 69.180153][ T43] audit: type=1400 audit(1789108922.081:548): avc: denied { open } for pid=6760 comm="syz.3.233" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 69.347482][ T6766] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 69.347503][ T6766] bond2: entered allmulticast mode [ 69.349400][ T6766] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 69.352620][ T6766] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 69.354027][ T6769] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 69.463557][ T43] audit: type=1400 audit(1789108922.369:549): avc: denied { listen } for pid=6770 comm="syz.3.236" laddr=127.0.0.1 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.565535][ T6782] netlink: 'syz.3.238': attribute type 1 has an invalid length. [ 69.603014][ T6782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 69.618944][ T6782] bond3: (slave gretap1): making interface the new active one [ 69.622402][ T6782] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 69.622602][ T6785] syz_tun: entered allmulticast mode [ 69.665643][ T6782] kernel read not supported for file /file0 (pid: 6782 comm: syz.3.238) [ 69.666583][ T43] audit: type=1800 audit(1789108922.576:550): pid=6782 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.238" name="file0" dev="mqueue" ino=16448 res=0 errno=0 [ 69.809606][ T6784] syz_tun: left allmulticast mode [ 69.867208][ T43] audit: type=1400 audit(1789108922.782:551): avc: denied { unlink } for pid=6805 comm="syz.4.243" name="#7" dev="tmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.881273][ T43] audit: type=1400 audit(1789108922.803:552): avc: denied { mount } for pid=6799 comm="syz.3.242" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 69.884557][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 69.884579][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.242'. [ 69.942314][ T6811] binder: 6809:6811 ioctl c018620c 200000000040 returned -1 [ 69.990675][ T43] audit: type=1400 audit(1789108922.906:553): avc: denied { read } for pid=6814 comm="syz.4.247" path="socket:[15036]" dev="sockfs" ino=15036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.996968][ T43] audit: type=1400 audit(1789108922.916:554): avc: denied { read write } for pid=6813 comm="syz.2.246" name="usbmon4" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 69.997014][ T43] audit: type=1400 audit(1789108922.916:555): avc: denied { open } for pid=6813 comm="syz.2.246" path="/dev/usbmon4" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.096385][ T6817] Unable to locate . in FUNC.INSTANCE [ 70.405882][ T6840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.253'. [ 71.154466][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.154504][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.158200][ T42] cfg80211: failed to load regulatory.db [ 71.322799][ T6882] bridge0: port 4(ipvlan2) entered blocking state [ 71.322914][ T6882] bridge0: port 4(ipvlan2) entered disabled state [ 71.323006][ T6882] ipvlan2: entered allmulticast mode [ 71.323017][ T6882] bridge0: entered allmulticast mode [ 71.333973][ T6882] ipvlan2: left allmulticast mode [ 71.333994][ T6882] bridge0: left allmulticast mode [ 71.491483][ T6885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.602980][ T6885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.225981][ T6909] ptn5150 0-001d: probe with driver ptn5150 failed with error -22 [ 72.228236][ T6909] i2c i2c-0: new_device: Instantiated device ptn5150 at 0x1d [ 72.228342][ T6910] i2c i2c-0: Failed to register i2c client ptn5150 at 0x1d (-16) [ 73.267917][ T6942] FAULT_INJECTION: forcing a failure. [ 73.267917][ T6942] name failslab, interval 1, probability 0, space 0, times 0 [ 73.267939][ T6942] CPU: 0 UID: 0 PID: 6942 Comm: syz.2.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.267954][ T6942] Tainted: [L]=SOFTLOCKUP [ 73.267958][ T6942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.267965][ T6942] Call Trace: [ 73.267969][ T6942] [ 73.267973][ T6942] dump_stack_lvl+0x100/0x190 [ 73.267994][ T6942] should_fail_ex.cold+0x5/0xa [ 73.268011][ T6942] should_failslab+0xc2/0x120 [ 73.268035][ T6942] kmem_cache_alloc_noprof+0x92/0x6a0 [ 73.268048][ T6942] ? ceph_msg_new2+0x3e/0x4f0 [ 73.268066][ T6942] ceph_msg_new2+0x3e/0x4f0 [ 73.268080][ T6942] ceph_monc_init+0x686/0xcd0 [ 73.268100][ T6942] ceph_create_client+0x25e/0x370 [ 73.268112][ T6942] ceph_get_tree+0x1a4/0x1fd0 [ 73.268128][ T6942] ? bpf_lsm_capable+0x9/0x10 [ 73.268144][ T6942] ? security_capable+0x80/0x260 [ 73.268162][ T6942] vfs_get_tree+0x92/0x320 [ 73.268178][ T6942] vfs_cmd_create+0xd7/0x2a0 [ 73.268189][ T6942] __do_sys_fsconfig+0x55a/0xcb0 [ 73.268201][ T6942] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 73.268218][ T6942] do_syscall_64+0x123/0x790 [ 73.268233][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.268245][ T6942] RIP: 0033:0x7f8291b9e159 [ 73.268254][ T6942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.268264][ T6942] RSP: 002b:00007f82929ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 73.268275][ T6942] RAX: ffffffffffffffda RBX: 00007f8291e25fa0 RCX: 00007f8291b9e159 [ 73.268282][ T6942] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 73.268288][ T6942] RBP: 00007f8291c3503b R08: 0000000000000000 R09: 0000000000000000 [ 73.268294][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.268300][ T6942] R13: 00007f8291e26038 R14: 00007f8291e25fa0 R15: 00007ffd8d648c28 [ 73.268314][ T6942] [ 73.274877][ T6942] jffs2: notice: (6942) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 74.137167][ T6950] netlink: 'syz.2.280': attribute type 1 has an invalid length. [ 74.162574][ T6950] bond1: entered promiscuous mode [ 74.162914][ T6950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.214110][ T6949] veth5: entered allmulticast mode [ 74.224199][ T6949] bond1: (slave veth5): making interface the new active one [ 74.224219][ T6949] veth5: entered promiscuous mode [ 74.229573][ T6949] bond1: (slave veth5): Enslaving as an active interface with an up link [ 74.282847][ T6949] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 74.282871][ T6949] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 74.658303][ T6966] syzkaller0: entered promiscuous mode [ 74.658317][ T6966] syzkaller0: entered allmulticast mode [ 74.907138][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 74.907150][ T43] audit: type=1400 audit(1789108927.954:593): avc: denied { create } for pid=6967 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 74.907175][ T43] audit: type=1400 audit(1789108927.954:594): avc: denied { setopt } for pid=6967 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 75.551649][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.286'. [ 75.805417][ T1349] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 75.952420][ T1349] usb 7-1: Using ep0 maxpacket: 32 [ 75.953890][ T1349] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 75.954875][ T1349] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 75.954894][ T1349] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 75.954911][ T1349] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 75.954924][ T1349] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 75.954936][ T1349] usb 7-1: config 0 interface 0 has no altsetting 0 [ 75.956576][ T1349] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 75.956588][ T1349] usb 7-1: Product: syz [ 75.956595][ T1349] usb 7-1: Manufacturer: syz [ 75.956602][ T1349] usb 7-1: SerialNumber: syz [ 75.960207][ T1349] usb 7-1: config 0 descriptor?? [ 75.966388][ T1349] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 75.969699][ T1349] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 76.104379][ T43] audit: type=1326 audit(1789108929.180:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.3.288" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f39e159 code=0x7fc00000 [ 76.104804][ T43] audit: type=1326 audit(1789108929.180:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.3.288" exe="/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f556f39e159 code=0x7fc00000 [ 76.163321][ T43] audit: type=1400 audit(1789108929.241:597): avc: denied { connect } for pid=6974 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.164486][ T43] audit: type=1400 audit(1789108929.241:598): avc: denied { write } for pid=6974 comm="syz.2.287" path="socket:[16733]" dev="sockfs" ino=16733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.165391][ T43] audit: type=1400 audit(1789108929.241:599): avc: denied { getopt } for pid=6974 comm="syz.2.287" laddr=172.20.20.10 lport=44522 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.169932][ T43] audit: type=1400 audit(1789108929.251:600): avc: denied { read } for pid=6974 comm="syz.2.287" laddr=172.20.20.10 lport=44522 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.174950][ T5839] usb 7-1: USB disconnect, device number 10 [ 76.182872][ T5839] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 76.808923][ T43] audit: type=1326 audit(1789108929.894:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.3.288" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f39e159 code=0x7fc00000 [ 76.809038][ T43] audit: type=1326 audit(1789108929.894:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6977 comm="syz.3.288" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f556f39e159 code=0x7fc00000 [ 77.087765][ T6991] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 77.088918][ T6991] IPVS: set_ctl: invalid protocol: 8483 10.0.0.0:0 [ 77.326561][ T7004] FAULT_INJECTION: forcing a failure. [ 77.326561][ T7004] name failslab, interval 1, probability 0, space 0, times 0 [ 77.326584][ T7004] CPU: 1 UID: 0 PID: 7004 Comm: syz.3.296 Tainted: G L syzkaller #0 PREEMPT(full) [ 77.326599][ T7004] Tainted: [L]=SOFTLOCKUP [ 77.326603][ T7004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.326609][ T7004] Call Trace: [ 77.326613][ T7004] [ 77.326618][ T7004] dump_stack_lvl+0x100/0x190 [ 77.326638][ T7004] should_fail_ex.cold+0x5/0xa [ 77.326655][ T7004] should_failslab+0xc2/0x120 [ 77.326672][ T7004] __kmalloc_noprof+0xfc/0x840 [ 77.326685][ T7004] ? tomoyo_encode2+0xfb/0x3c0 [ 77.326701][ T7004] tomoyo_encode2+0xfb/0x3c0 [ 77.326715][ T7004] tomoyo_encode+0x29/0x50 [ 77.326727][ T7004] tomoyo_mount_acl+0x14c/0x8b0 [ 77.326738][ T7004] ? is_bpf_text_address+0x8a/0x1a0 [ 77.326757][ T7004] ? is_bpf_text_address+0x8a/0x1a0 [ 77.326772][ T7004] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 77.326791][ T7004] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 77.326802][ T7004] ? kernel_text_address+0x8d/0x100 [ 77.326822][ T7004] ? unwind_get_return_address+0x59/0xa0 [ 77.326838][ T7004] ? arch_stack_walk+0xa6/0xf0 [ 77.326854][ T7004] ? __lock_acquire+0x5c0/0x1f40 [ 77.326872][ T7004] ? tomoyo_mount_permission+0x1f6/0x460 [ 77.326885][ T7004] ? tomoyo_domain+0xb2/0x150 [ 77.326899][ T7004] ? tomoyo_profile+0x47/0x60 [ 77.326934][ T7004] tomoyo_mount_permission+0x214/0x460 [ 77.326950][ T7004] ? tomoyo_mount_permission+0x1f6/0x460 [ 77.326966][ T7004] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 77.326989][ T7004] security_sb_mount+0xdd/0x270 [ 77.327008][ T7004] path_mount+0x158/0x24c0 [ 77.327027][ T7004] ? __pfx_path_mount+0x10/0x10 [ 77.327042][ T7004] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.327058][ T7004] ? putname+0xb1/0x110 [ 77.327071][ T7004] ? kmem_cache_free+0x127/0x6c0 [ 77.327093][ T7004] ? __x64_sys_mount+0x293/0x310 [ 77.327108][ T7004] __x64_sys_mount+0x293/0x310 [ 77.327124][ T7004] ? __pfx___x64_sys_mount+0x10/0x10 [ 77.327145][ T7004] do_syscall_64+0x123/0x790 [ 77.327161][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.327174][ T7004] RIP: 0033:0x7f556f39e159 [ 77.327184][ T7004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.327194][ T7004] RSP: 002b:00007f55701a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 77.327205][ T7004] RAX: ffffffffffffffda RBX: 00007f556f625fa0 RCX: 00007f556f39e159 [ 77.327212][ T7004] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 77.327219][ T7004] RBP: 00007f556f43503b R08: 0000000000000000 R09: 0000000000000000 [ 77.327225][ T7004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.327232][ T7004] R13: 00007f556f626038 R14: 00007f556f625fa0 R15: 00007ffff9d187d8 [ 77.327246][ T7004] [ 77.328504][ T7004] tmpfs: Unknown parameter '0' [ 77.372601][ T7006] bond2: invalid ARP target 0.0.0.0 specified for addition [ 77.372618][ T7006] bond2: option arp_ip_target: invalid value (0) [ 77.385751][ T7006] bond2 (unregistering): Released all slaves [ 77.427373][ T7007] bond2: invalid ARP target 0.0.0.0 specified for addition [ 77.427391][ T7007] bond2: option arp_ip_target: invalid value (0) [ 77.435050][ T7007] bond2 (unregistering): Released all slaves [ 77.512737][ T7012] bond6: Removing last ns target with arp_interval on [ 77.514903][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 78.498280][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.500301][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.502850][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.509367][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.509923][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.607771][ T7037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.305'. [ 78.835159][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.926925][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.963173][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.966756][ T7059] FAULT_INJECTION: forcing a failure. [ 78.966756][ T7059] name failslab, interval 1, probability 0, space 0, times 0 [ 78.966777][ T7059] CPU: 2 UID: 0 PID: 7059 Comm: syz.3.309 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.966793][ T7059] Tainted: [L]=SOFTLOCKUP [ 78.966798][ T7059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.966805][ T7059] Call Trace: [ 78.966809][ T7059] [ 78.966814][ T7059] dump_stack_lvl+0x100/0x190 [ 78.966834][ T7059] should_fail_ex.cold+0x5/0xa [ 78.966851][ T7059] should_failslab+0xc2/0x120 [ 78.966867][ T7059] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 78.966881][ T7059] ? alloc_inode+0x183/0x250 [ 78.966897][ T7059] alloc_inode+0x183/0x250 [ 78.966907][ T7059] new_inode+0x22/0x1c0 [ 78.966918][ T7059] devpts_fill_super+0x3b3/0x610 [ 78.966932][ T7059] ? __pfx_devpts_fill_super+0x10/0x10 [ 78.966945][ T7059] get_tree_nodev+0xdd/0x190 [ 78.966956][ T7059] vfs_get_tree+0x92/0x320 [ 78.966972][ T7059] path_mount+0x7d0/0x24c0 [ 78.966990][ T7059] ? __pfx_path_mount+0x10/0x10 [ 78.967005][ T7059] ? lockdep_hardirqs_on+0x7d/0x110 [ 78.967021][ T7059] ? putname+0xb1/0x110 [ 78.967034][ T7059] ? kmem_cache_free+0x127/0x6c0 [ 78.967055][ T7059] ? __x64_sys_mount+0x293/0x310 [ 78.967070][ T7059] __x64_sys_mount+0x293/0x310 [ 78.967086][ T7059] ? __pfx___x64_sys_mount+0x10/0x10 [ 78.967105][ T7059] do_syscall_64+0x123/0x790 [ 78.967121][ T7059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.967133][ T7059] RIP: 0033:0x7f556f39e159 [ 78.967143][ T7059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.967152][ T7059] RSP: 002b:00007f5570186028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.967163][ T7059] RAX: ffffffffffffffda RBX: 00007f556f626090 RCX: 00007f556f39e159 [ 78.967169][ T7059] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000000 [ 78.967176][ T7059] RBP: 00007f556f43503b R08: 0000000000000000 R09: 0000000000000000 [ 78.967182][ T7059] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 78.967188][ T7059] R13: 00007f556f626128 R14: 00007f556f626090 R15: 00007ffff9d187d8 [ 78.967202][ T7059] [ 78.967337][ T7059] devpts: Unable to alloc inode for ptmx node [ 78.999312][ T7059] program syz.3.309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.042492][ T7030] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.042565][ T7030] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.042631][ T7030] bridge_slave_0: entered allmulticast mode [ 79.043380][ T7030] bridge_slave_0: entered promiscuous mode [ 79.044735][ T7030] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.044804][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.044874][ T7030] bridge_slave_1: entered allmulticast mode [ 79.045629][ T7030] bridge_slave_1: entered promiscuous mode [ 79.058256][ T7030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.059535][ T7030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.080551][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.096657][ T7030] team0: Port device team_slave_0 added [ 79.097958][ T7030] team0: Port device team_slave_1 added [ 79.111654][ T7030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.111664][ T7030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.111681][ T7030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.112610][ T7030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.112617][ T7030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.112630][ T7030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.139611][ T7030] hsr_slave_0: entered promiscuous mode [ 79.142573][ T7030] hsr_slave_1: entered promiscuous mode [ 79.143116][ T7030] debugfs: 'hsr0' already exists in 'hsr' [ 79.143127][ T7030] Cannot create hsr debugfs directory [ 79.224445][ T12] bridge_slave_1: left allmulticast mode [ 79.224463][ T12] bridge_slave_1: left promiscuous mode [ 79.225895][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.227392][ T12] bridge_slave_0: left allmulticast mode [ 79.227405][ T12] bridge_slave_0: left promiscuous mode [ 79.227496][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.231765][ T12] pimreg: left allmulticast mode [ 79.323586][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.325048][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.325928][ T12] bond0 (unregistering): Released all slaves [ 79.489957][ T7030] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.493016][ T7030] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.493555][ T7030] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.495263][ T7030] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.495769][ T7030] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.499112][ T7030] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.512986][ T7030] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.522001][ T7030] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.535441][ T12] hsr_slave_0: left promiscuous mode [ 79.537865][ T12] hsr_slave_1: left promiscuous mode [ 79.538299][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.538310][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.538899][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.538910][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.546617][ T12] veth1_macvtap: left promiscuous mode [ 79.546639][ T12] veth0_macvtap: left promiscuous mode [ 79.546682][ T12] veth1_vlan: left promiscuous mode [ 79.546712][ T12] veth0_vlan: left promiscuous mode [ 79.685404][ T12] team0 (unregistering): Port device team_slave_1 removed [ 79.698633][ T12] team0 (unregistering): Port device team_slave_0 removed [ 79.805592][ T5439] 8021q: adding VLAN 0 to HW filter on device eth6 [ 79.844887][ T7030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.855562][ T7030] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.855807][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 79.855824][ T43] audit: type=1400 audit(1789108932.999:611): avc: denied { search } for pid=7079 comm="syz.3.312" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 79.855860][ T43] audit: type=1400 audit(1789108932.999:612): avc: denied { append } for pid=7079 comm="syz.3.312" name="uprobe_events" dev="tracefs" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 79.855896][ T43] audit: type=1400 audit(1789108932.999:613): avc: denied { open } for pid=7079 comm="syz.3.312" path="/102/tracing/uprobe_events" dev="tracefs" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 79.869443][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.869491][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.874628][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.874746][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.960706][ T43] audit: type=1400 audit(1789108933.110:614): avc: denied { write } for pid=7084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.020191][ T43] audit: type=1400 audit(1789108933.171:615): avc: denied { write } for pid=7091 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.060507][ T5439] 8021q: adding VLAN 0 to HW filter on device eth7 [ 80.157812][ T43] audit: type=1400 audit(1789108933.313:616): avc: denied { write } for pid=7103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.241208][ T7030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.251900][ T43] audit: type=1400 audit(1789108933.395:617): avc: denied { write } for pid=7111 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.306653][ T5439] 8021q: adding VLAN 0 to HW filter on device eth8 [ 80.370131][ T43] audit: type=1400 audit(1789108933.517:618): avc: denied { write } for pid=7121 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.387196][ T7126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=7126 comm=syz.2.316 [ 80.415826][ T43] audit: type=1400 audit(1789108933.567:619): avc: denied { write } for pid=7128 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.451364][ T5439] 8021q: adding VLAN 0 to HW filter on device eth9 [ 80.451573][ T7030] veth0_vlan: entered promiscuous mode [ 80.462841][ T43] audit: type=1400 audit(1789108933.618:620): avc: denied { write } for pid=7130 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.478556][ T7030] veth1_vlan: entered promiscuous mode [ 80.511345][ T7030] veth0_macvtap: entered promiscuous mode [ 80.514033][ T7030] veth1_macvtap: entered promiscuous mode [ 80.522094][ T7030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.524595][ T7030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.551220][ T66] Bluetooth: hci4: command tx timeout [ 80.554935][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.581434][ T5806] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.581459][ T5806] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.599943][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.602649][ T6678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.602667][ T6678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.649167][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.649189][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.772507][ T7150] sit0: Caught tx_queue_len zero misconfig [ 80.802318][ T7158] xt_hashlimit: max too large, truncated to 1048576 [ 80.805331][ T7158] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 80.863626][ T7163] overlayfs: failed to resolve './bus': -2 [ 80.957163][ T7173] ip6tnl1: entered allmulticast mode [ 81.022055][ T7184] bond2: option downdelay: invalid value (18446744073709551615) [ 81.022071][ T7184] bond2: option downdelay: allowed values 0 - 2147483647 [ 81.023488][ T7184] bond2 (unregistering): Released all slaves [ 81.033599][ T7186] FAULT_INJECTION: forcing a failure. [ 81.033599][ T7186] name failslab, interval 1, probability 0, space 0, times 0 [ 81.033623][ T7186] CPU: 2 UID: 0 PID: 7186 Comm: syz.3.323 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.033639][ T7186] Tainted: [L]=SOFTLOCKUP [ 81.033643][ T7186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.033650][ T7186] Call Trace: [ 81.033654][ T7186] [ 81.033659][ T7186] dump_stack_lvl+0x100/0x190 [ 81.033680][ T7186] should_fail_ex.cold+0x5/0xa [ 81.033700][ T7186] should_failslab+0xc2/0x120 [ 81.033715][ T7186] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 81.033730][ T7186] ? xas_split_alloc+0x182/0x530 [ 81.033747][ T7186] xas_split_alloc+0x182/0x530 [ 81.033766][ T7186] __folio_split+0x95e/0x1bf0 [ 81.033781][ T7186] ? __pfx___folio_split+0x10/0x10 [ 81.033790][ T7186] ? folio_alloc_swap+0xbd8/0x1e70 [ 81.033808][ T7186] ? folio_alloc_swap+0x4c6/0x1e70 [ 81.033824][ T7186] shmem_writeout+0x786/0x1a00 [ 81.033843][ T7186] ? __pfx_shmem_writeout+0x10/0x10 [ 81.033857][ T7186] ? __pfx_try_to_unmap+0x10/0x10 [ 81.033872][ T7186] ? find_held_lock+0x2b/0x80 [ 81.033888][ T7186] ? inode_to_bdi+0x9e/0x160 [ 81.033899][ T7186] ? folio_clear_dirty_for_io+0x178/0x960 [ 81.033918][ T7186] shrink_folio_list+0x399a/0x5e40 [ 81.033937][ T7186] ? __pfx_shrink_folio_list+0x10/0x10 [ 81.033952][ T7186] ? lock_acquire+0x1d1/0x380 [ 81.033963][ T7186] ? unwind_next_frame+0xbd/0x2090 [ 81.033993][ T7186] ? lock_acquire+0x1d1/0x380 [ 81.034005][ T7186] ? is_bpf_text_address+0x25/0x1a0 [ 81.034021][ T7186] ? find_held_lock+0x2b/0x80 [ 81.034036][ T7186] ? is_bpf_text_address+0x8a/0x1a0 [ 81.034051][ T7186] ? is_bpf_text_address+0x8a/0x1a0 [ 81.034066][ T7186] ? bpf_ksym_find+0x128/0x1c0 [ 81.034097][ T7186] ? __lock_acquire+0x5c0/0x1f40 [ 81.034108][ T7186] ? __css_rstat_updated+0x1ce/0x590 [ 81.034120][ T7186] ? check_noncircular+0x97/0x160 [ 81.034131][ T7186] ? __pfx___css_rstat_updated+0x10/0x10 [ 81.034146][ T7186] reclaim_folio_list+0xe9/0x5e0 [ 81.034161][ T7186] ? __pfx_reclaim_folio_list+0x10/0x10 [ 81.034174][ T7186] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 81.034194][ T7186] ? lru_gen_update_size+0x431/0xe20 [ 81.034211][ T7186] ? lru_gen_del_folio+0x382/0x5f0 [ 81.034225][ T7186] reclaim_pages+0x428/0x5e0 [ 81.034242][ T7186] ? __pfx_reclaim_pages+0x10/0x10 [ 81.034256][ T7186] ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0 [ 81.034272][ T7186] ? folio_isolate_lru+0xd6/0xe90 [ 81.034288][ T7186] madvise_cold_or_pageout_pte_range+0x147e/0x27b0 [ 81.034308][ T7186] ? rcu_read_unlock+0x17/0x60 [ 81.034324][ T7186] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 81.034339][ T7186] ? __mod_zone_page_state+0xdb/0x190 [ 81.034357][ T7186] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 81.034373][ T7186] walk_pgd_range+0xbef/0x1e00 [ 81.034387][ T7186] ? find_held_lock+0x2b/0x80 [ 81.034407][ T7186] ? __pfx_walk_pgd_range+0x10/0x10 [ 81.034418][ T7186] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 81.034435][ T7186] __walk_page_range+0x171/0x850 [ 81.034451][ T7186] walk_page_range_vma_unsafe+0x209/0x8f0 [ 81.034464][ T7186] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 81.034478][ T7186] ? find_held_lock+0x2b/0x80 [ 81.034492][ T7186] ? mlock_drain_local+0x254/0x4e0 [ 81.034509][ T7186] ? mlock_drain_local+0x254/0x4e0 [ 81.034527][ T7186] walk_page_range_vma+0x63/0x90 [ 81.034539][ T7186] madvise_pageout+0x29e/0x5b0 [ 81.034554][ T7186] ? __pfx_madvise_pageout+0x10/0x10 [ 81.034578][ T7186] madvise_vma_behavior+0x48b/0x2350 [ 81.034593][ T7186] ? mas_prev+0xa4/0x100 [ 81.034610][ T7186] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 81.034648][ T7186] ? mas_walk+0x260/0x310 [ 81.034663][ T7186] ? find_vma_prev+0xd8/0x150 [ 81.034689][ T7186] ? __pfx_find_vma_prev+0x10/0x10 [ 81.034703][ T7186] ? lock_acquire+0x1d1/0x380 [ 81.034722][ T7186] madvise_walk_vmas+0x30e/0xc50 [ 81.034739][ T7186] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 81.034755][ T7186] ? __pfx_futex_wake_mark+0x10/0x10 [ 81.034775][ T7186] ? lock_acquire+0x1d1/0x380 [ 81.034788][ T7186] madvise_do_behavior+0x1ea/0x510 [ 81.034804][ T7186] ? __pfx_madvise_do_behavior+0x10/0x10 [ 81.034819][ T7186] ? down_read+0x13b/0x4c0 [ 81.034842][ T7186] do_madvise+0x238/0x290 [ 81.034856][ T7186] ? __pfx_do_madvise+0x10/0x10 [ 81.034870][ T7186] ? do_futex+0x190/0x440 [ 81.034886][ T7186] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 81.034911][ T7186] __x64_sys_madvise+0xa9/0x110 [ 81.034925][ T7186] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.034939][ T7186] do_syscall_64+0x123/0x790 [ 81.034955][ T7186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.034967][ T7186] RIP: 0033:0x7f556f39e159 [ 81.034985][ T7186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.034996][ T7186] RSP: 002b:00007f5570186028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 81.035009][ T7186] RAX: ffffffffffffffda RBX: 00007f556f626090 RCX: 00007f556f39e159 [ 81.035016][ T7186] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 81.035024][ T7186] RBP: 00007f556f43503b R08: 0000000000000000 R09: 0000000000000000 [ 81.035031][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.035038][ T7186] R13: 00007f556f626128 R14: 00007f556f626090 R15: 00007ffff9d187d8 [ 81.035053][ T7186] [ 81.428114][ T5806] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 81.428301][ T5806] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 81.456340][ T5839] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 81.692995][ T5839] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 81.840282][ T7248] SELinux: Context system_u:object_r:getty_var_run_t:s0 is not valid (left unmapped). [ 81.843154][ T7248] bridge0: port 4(team0) entered blocking state [ 81.843250][ T7248] bridge0: port 4(team0) entered disabled state [ 81.843468][ T7248] team0: entered allmulticast mode [ 81.843481][ T7248] team_slave_0: entered allmulticast mode [ 81.843504][ T7248] team_slave_1: entered allmulticast mode [ 81.843515][ T7248] vlan0: entered allmulticast mode [ 81.843524][ T7248] veth0_vlan: entered allmulticast mode [ 81.845064][ T7248] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 81.863986][ T7248] team0: entered promiscuous mode [ 81.864007][ T7248] team_slave_0: entered promiscuous mode [ 81.865951][ T7248] team_slave_1: entered promiscuous mode [ 81.866226][ T7248] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 81.867867][ T7248] bridge0: port 4(team0) entered blocking state [ 81.867970][ T7248] bridge0: port 4(team0) entered forwarding state [ 81.886947][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 81.899181][ T7248] team_slave_0 (unregistering): left promiscuous mode [ 81.899205][ T7248] team_slave_0 (unregistering): left allmulticast mode [ 81.907903][ T7248] team0: Port device team_slave_0 removed [ 81.939654][ T7251] fuse: fd is not a fuse device [ 81.944533][ T7252] fuse: fd is not a fuse device [ 81.945479][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 81.961850][ T851] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 82.024874][ T7261] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.036667][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.346'. [ 82.044746][ T7250] jffs2: notice: (7250) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 82.590420][ T66] Bluetooth: hci4: command tx timeout [ 82.846563][ T7279] netlink: 'syz.2.352': attribute type 2 has an invalid length. [ 82.966862][ T7289] netlink: 'syz.2.356': attribute type 2 has an invalid length. [ 82.970041][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 82.970062][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.356'. [ 83.034895][ T7294] FAULT_INJECTION: forcing a failure. [ 83.034895][ T7294] name failslab, interval 1, probability 0, space 0, times 0 [ 83.034924][ T7294] CPU: 2 UID: 0 PID: 7294 Comm: syz.5.357 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.034949][ T7294] Tainted: [L]=SOFTLOCKUP [ 83.034956][ T7294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.034968][ T7294] Call Trace: [ 83.034975][ T7294] [ 83.034982][ T7294] dump_stack_lvl+0x100/0x190 [ 83.035024][ T7294] should_fail_ex.cold+0x5/0xa [ 83.035050][ T7294] should_failslab+0xc2/0x120 [ 83.035079][ T7294] __kmalloc_cache_noprof+0x91/0x6d0 [ 83.035102][ T7294] ? shrinker_alloc+0xf5/0xc90 [ 83.035134][ T7294] shrinker_alloc+0xf5/0xc90 [ 83.035162][ T7294] ? mark_held_locks+0x40/0x70 [ 83.035181][ T7294] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 83.035202][ T7294] ? rcu_is_watching+0x13/0xc0 [ 83.035227][ T7294] ? __pfx_shrinker_alloc+0x10/0x10 [ 83.035258][ T7294] ? lockdep_init_map_type+0x5c/0x250 [ 83.035278][ T7294] ? lockdep_init_map_type+0x5c/0x250 [ 83.035295][ T7294] ? __raw_spin_lock_init+0x3a/0x110 [ 83.035313][ T7294] ? __init_rwsem+0x10e/0x180 [ 83.035336][ T7294] sget_fc+0x979/0x1f20 [ 83.035356][ T7294] ? __pfx_super_s_dev_test+0x10/0x10 [ 83.035387][ T7294] ? __pfx_super_s_dev_set+0x10/0x10 [ 83.035406][ T7294] ? __pfx_sget_fc+0x10/0x10 [ 83.035422][ T7294] ? __mutex_unlock_slowpath+0x35d/0x930 [ 83.035447][ T7294] ? _kstrtoull+0x144/0x200 [ 83.035470][ T7294] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.035501][ T7294] sget_dev+0x9b/0xe0 [ 83.035513][ T7294] ? __pfx_sget_dev+0x10/0x10 [ 83.035529][ T7294] ? get_mtd_device+0xde/0x1f0 [ 83.035554][ T7294] ? __pfx_get_mtd_device+0x10/0x10 [ 83.035580][ T7294] ? __pfx_jffs2_fill_super+0x10/0x10 [ 83.035600][ T7294] mtd_get_sb+0x53/0x4c0 [ 83.035617][ T7294] ? __pfx_jffs2_fill_super+0x10/0x10 [ 83.035638][ T7294] get_tree_mtd+0x6f9/0x8a0 [ 83.035660][ T7294] ? __pfx_get_tree_mtd+0x10/0x10 [ 83.035702][ T7294] ? cap_capable+0x107/0x430 [ 83.035727][ T7294] ? bpf_lsm_capable+0x9/0x10 [ 83.035752][ T7294] ? security_capable+0x80/0x260 [ 83.035780][ T7294] vfs_get_tree+0x92/0x320 [ 83.035803][ T7294] path_mount+0x7d0/0x24c0 [ 83.035829][ T7294] ? __pfx_path_mount+0x10/0x10 [ 83.035853][ T7294] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.035878][ T7294] ? putname+0xb1/0x110 [ 83.035899][ T7294] ? kmem_cache_free+0x127/0x6c0 [ 83.035927][ T7294] ? __x64_sys_mount+0x293/0x310 [ 83.035949][ T7294] __x64_sys_mount+0x293/0x310 [ 83.035974][ T7294] ? __pfx___x64_sys_mount+0x10/0x10 [ 83.036007][ T7294] do_syscall_64+0x123/0x790 [ 83.036026][ T7294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.036043][ T7294] RIP: 0033:0x7fe4e5b9e159 [ 83.036059][ T7294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.036077][ T7294] RSP: 002b:00007fe4e6a62028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 83.036097][ T7294] RAX: ffffffffffffffda RBX: 00007fe4e5e25fa0 RCX: 00007fe4e5b9e159 [ 83.036109][ T7294] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 83.036119][ T7294] RBP: 00007fe4e5c3503b R08: 0000000000000000 R09: 0000000000000000 [ 83.036126][ T7294] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 83.036137][ T7294] R13: 00007fe4e5e26038 R14: 00007fe4e5e25fa0 R15: 00007ffc07b27658 [ 83.036164][ T7294] [ 83.192222][ T7306] netlink: 'syz.5.360': attribute type 16 has an invalid length. [ 84.240116][ T7336] 9p: Bad value for 'rfdno' [ 84.393480][ T7341] overlayfs: failed to resolve './bus': -2 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 84.645634][ T66] Bluetooth: hci4: command tx timeout [ 84.689614][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 84.697916][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 84.701022][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 84.702097][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 84.713434][ T5806] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.713460][ T5806] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.713477][ T5806] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.713495][ T5806] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.858846][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 84.858858][ T43] audit: type=1400 audit(1789108938.068:642): avc: denied { setopt } for pid=7376 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.859137][ T43] audit: type=1400 audit(1789108938.068:643): avc: denied { getopt } for pid=7376 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.014445][ T43] audit: type=1400 audit(1789108938.229:644): avc: denied { ioctl } for pid=7384 comm="syz.3.380" path="socket:[18283]" dev="sockfs" ino=18283 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.110075][ T43] audit: type=1400 audit(1789108938.330:645): avc: denied { write } for pid=7387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.176497][ T43] audit: type=1400 audit(1789108938.391:646): avc: denied { write } for pid=7394 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.255506][ T43] audit: type=1400 audit(1789108938.472:647): avc: denied { write } for pid=7398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.256672][ T7402] 9pnet_fd: Insufficient options for proto=fd [ 85.306198][ T43] audit: type=1400 audit(1789108938.523:648): avc: denied { write } for pid=7404 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.476838][ T43] audit: type=1400 audit(1789108938.695:649): avc: denied { load_policy } for pid=7407 comm="syz.5.386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 85.477252][ T7408] SELinux: policydb version 1409139068 does not match my version range 15-35 [ 85.477413][ T7408] SELinux: failed to load policy [ 85.556188][ T7415] FAULT_INJECTION: forcing a failure. [ 85.556188][ T7415] name failslab, interval 1, probability 0, space 0, times 0 [ 85.556210][ T7415] CPU: 2 UID: 0 PID: 7415 Comm: syz.5.388 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.556225][ T7415] Tainted: [L]=SOFTLOCKUP [ 85.556229][ T7415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.556236][ T7415] Call Trace: [ 85.556240][ T7415] [ 85.556244][ T7415] dump_stack_lvl+0x100/0x190 [ 85.556264][ T7415] should_fail_ex.cold+0x5/0xa [ 85.556281][ T7415] should_failslab+0xc2/0x120 [ 85.556297][ T7415] __kmalloc_cache_noprof+0x91/0x6d0 [ 85.556315][ T7415] ? __do_sys_fanotify_init+0x5c6/0xe30 [ 85.556334][ T7415] __do_sys_fanotify_init+0x5c6/0xe30 [ 85.556350][ T7415] do_syscall_64+0x123/0x790 [ 85.556367][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.556378][ T7415] RIP: 0033:0x7fe4e5b9e159 [ 85.556388][ T7415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.556398][ T7415] RSP: 002b:00007fe4e6a62028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 85.556409][ T7415] RAX: ffffffffffffffda RBX: 00007fe4e5e25fa0 RCX: 00007fe4e5b9e159 [ 85.556416][ T7415] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000004 [ 85.556423][ T7415] RBP: 00007fe4e5c3503b R08: 0000000000000000 R09: 0000000000000000 [ 85.556429][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.556435][ T7415] R13: 00007fe4e5e26038 R14: 00007fe4e5e25fa0 R15: 00007ffc07b27658 [ 85.556449][ T7415] [ 85.607259][ T7418] cgroup: Need name or subsystem set [ 85.728559][ T43] audit: type=1400 audit(1789108938.947:650): avc: denied { listen } for pid=7425 comm="syz.2.391" path=2F3133392FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 85.761568][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 85.776586][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 85.909858][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 86.038775][ T9] usb 10-1: device descriptor read/64, error -71 [ 86.042794][ T7438] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 86.054276][ T7438] 8021q: adding VLAN 0 to HW filter on device bond7 [ 86.064457][ T7438] bond7: (slave geneve2): making interface the new active one [ 86.065265][ T7438] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 86.097920][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.098557][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.100254][ T5806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.100277][ T5806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.136590][ T43] audit: type=1400 audit(1789108939.362:651): avc: denied { unlink } for pid=7441 comm="syz.3.394" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.286873][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 86.388374][ T7450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.388731][ T7450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.414505][ T9] usb 10-1: device descriptor read/64, error -71 [ 86.533650][ T9] usb usb10-port1: attempt power cycle [ 86.879600][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 86.900557][ T9] usb 10-1: device descriptor read/8, error -71 [ 87.100804][ T7463] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.138301][ T5733] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.141662][ T5733] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.143511][ T5733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.144563][ T5733] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.145474][ T5733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.147151][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 87.170649][ T9] usb 10-1: device descriptor read/8, error -71 [ 87.275852][ T9] usb usb10-port1: unable to enumerate USB device [ 87.474414][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.579122][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.601703][ T7500] overlayfs: failed to resolve './bus': -2 [ 87.613495][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.613564][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.613659][ T7467] bridge_slave_0: entered allmulticast mode [ 87.614975][ T7467] bridge_slave_0: entered promiscuous mode [ 87.627504][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.627569][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.627643][ T7467] bridge_slave_1: entered allmulticast mode [ 87.628424][ T7467] bridge_slave_1: entered promiscuous mode [ 87.685182][ T7467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.706170][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.718530][ T7467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.751594][ T7467] team0: Port device team_slave_0 added [ 87.753126][ T7467] team0: Port device team_slave_1 added [ 87.766582][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.766592][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.766605][ T7467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.767828][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.767837][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.767852][ T7467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.819753][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.833024][ T7467] hsr_slave_0: entered promiscuous mode [ 87.833718][ T7467] hsr_slave_1: entered promiscuous mode [ 88.026222][ T12] bridge_slave_1: left allmulticast mode [ 88.026240][ T12] bridge_slave_1: left promiscuous mode [ 88.026355][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.028081][ T12] bridge_slave_0: left allmulticast mode [ 88.028096][ T12] bridge_slave_0: left promiscuous mode [ 88.028874][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.135403][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.137112][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.145506][ T12] bond0 (unregistering): Released all slaves [ 88.304224][ T7467] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 88.312275][ T7467] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.312781][ T7467] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 88.323445][ T7467] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.323931][ T7467] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 88.334965][ T7467] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.378097][ T7467] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 88.379748][ T7467] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.410432][ T5439] 8021q: adding VLAN 0 to HW filter on device eth10 [ 88.418630][ T12] hsr_slave_0: left promiscuous mode [ 88.419421][ T12] hsr_slave_1: left promiscuous mode [ 88.419800][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.419811][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.420347][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.420357][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.430225][ T12] veth1_macvtap: left promiscuous mode [ 88.430258][ T12] veth0_macvtap: left promiscuous mode [ 88.430348][ T12] veth1_vlan: left promiscuous mode [ 88.430401][ T12] veth0_vlan: left promiscuous mode [ 88.645115][ T12] team0 (unregistering): Port device team_slave_1 removed [ 88.651456][ T12] team0 (unregistering): Port device team_slave_0 removed [ 88.793904][ T7467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.815358][ T7467] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.820815][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.820872][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.823947][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.823992][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.887301][ T7467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.966360][ T5439] 8021q: adding VLAN 0 to HW filter on device eth11 [ 88.989373][ T6288] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 89.138381][ T7467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.139967][ T6288] usb 10-1: Using ep0 maxpacket: 8 [ 89.140408][ T6288] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 89.141273][ T6288] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 89.141287][ T6288] usb 10-1: config 0 has no interface number 0 [ 89.141304][ T6288] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 89.141316][ T6288] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 89.141328][ T6288] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 89.141340][ T6288] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 89.141360][ T6288] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.142787][ T5439] 8021q: adding VLAN 0 to HW filter on device eth12 [ 89.142924][ T6288] usb 10-1: config 0 descriptor?? [ 89.158749][ T6288] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 89.169075][ T5733] Bluetooth: hci2: command tx timeout [ 89.253146][ T7671] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 89.261956][ T7671] bond8: (slave lo): Enslaving as an active interface with an up link [ 89.262059][ T7671] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 89.352957][ T7600] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.353555][ T7467] veth0_vlan: entered promiscuous mode [ 89.355567][ T5439] 8021q: adding VLAN 0 to HW filter on device eth13 [ 89.359660][ T7467] veth1_vlan: entered promiscuous mode [ 89.384969][ T7467] veth0_macvtap: entered promiscuous mode [ 89.393280][ T7467] veth1_macvtap: entered promiscuous mode [ 89.410344][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.414871][ T9] usb 10-1: USB disconnect, device number 6 [ 89.414875][ C2] ldusb 10-1:0.55: usb_submit_urb failed (-19) [ 89.426657][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.500270][ T6675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.500285][ T6675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.506067][ T5807] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.506160][ T5807] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.506195][ T5807] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.506227][ T5807] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.540970][ T6679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.540993][ T6679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.431767][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 90.431788][ T43] audit: type=1400 audit(1789108943.702:666): avc: denied { write } for pid=7755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.491113][ T43] audit: type=1400 audit(1789108943.763:667): avc: denied { write } for pid=7761 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.964453][ T7805] netlink: 'syz.2.435': attribute type 21 has an invalid length. [ 90.994654][ T43] audit: type=1400 audit(1789109200.262:668): avc: denied { write } for pid=7803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.063341][ T43] audit: type=1400 audit(1789109200.332:669): avc: denied { write } for pid=7811 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.102836][ T43] audit: type=1400 audit(1789109200.372:670): avc: denied { setopt } for pid=7812 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.188890][ T43] audit: type=1400 audit(1789109200.462:671): avc: denied { write } for pid=7823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.225599][ T5733] Bluetooth: hci2: command tx timeout [ 91.256066][ T43] audit: type=1400 audit(1789109200.532:672): avc: denied { write } for pid=7828 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.264041][ T43] audit: type=1400 audit(1789109200.532:673): avc: denied { read } for pid=7829 comm="syz.2.439" path="socket:[21761]" dev="sockfs" ino=21761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.315659][ T43] audit: type=1400 audit(1789109200.592:674): avc: denied { write } for pid=7829 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.621839][ T9] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 91.716652][ T7838] bond0: no command found in arp_ip_targets file - use + or - [ 91.740934][ T43] audit: type=1400 audit(1789109201.012:675): avc: denied { write } for pid=7839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.903834][ T7849] ip6gretap0: entered promiscuous mode [ 92.127652][ T7862] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 92.127688][ T7862] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 92.259057][ T7870] __nla_validate_parse: 1 callbacks suppressed [ 92.259074][ T7870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.449'. [ 92.512359][ T7890] ip6t_srh: unknown srh match flags 45F8 [ 92.785333][ T7897] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 92.796532][ T7897] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 92.796554][ T7897] UDF-fs: Scanning with blocksize 2048 failed [ 92.800825][ T7897] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 92.800838][ T7897] UDF-fs: Scanning with blocksize 4096 failed [ 93.069986][ T7908] netlink: 'syz.5.462': attribute type 1 has an invalid length. [ 93.070007][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.462'. [ 93.143543][ T7911] netlink: 9152 bytes leftover after parsing attributes in process `syz.3.463'. [ 93.144545][ T7911] netlink: 36 bytes leftover after parsing attributes in process `syz.3.463'. [ 93.243745][ T7916] netlink: 276 bytes leftover after parsing attributes in process `syz.5.465'. [ 93.256346][ T7918] hfs: can't find a HFS filesystem on dev sr0 [ 93.305308][ T5733] Bluetooth: hci2: command tx timeout [ 93.423895][ T7928] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 93.576592][ T7938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=7938 comm=syz.2.472 [ 93.686327][ T7938] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 93.931119][ T7965] netlink: 168 bytes leftover after parsing attributes in process `syz.2.481'. [ 93.931727][ T7965] 9p: Bad value for 'port' [ 93.968336][ T7959] netlink: 'syz.6.479': attribute type 4 has an invalid length. [ 94.063269][ T7976] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 94.064124][ T7976] ip6tnl0: Caught tx_queue_len zero misconfig [ 94.096941][ T7981] tipc: Started in network mode [ 94.096962][ T7981] tipc: Node identity 1000001, cluster identity 4369 [ 94.096973][ T7981] tipc: Node number set to 16777217 [ 94.098729][ T7981] tipc: Cannot configure node identity twice [ 94.147613][ T7981] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 94.156908][ T7986] devpts: Unknown parameter '€' [ 94.157397][ T5733] Bluetooth: hci4: Invalid connection link type handle 0x00c8 [ 94.178606][ T7991] tipc: New replicast peer: 127.0.0.1 [ 94.179401][ T7991] tipc: Enabled bearer , priority 10 [ 94.197693][ T7995] batadv_slave_0: Caught tx_queue_len zero misconfig [ 94.256645][ T8000] lo: Caught tx_queue_len zero misconfig [ 94.271675][ T8000] overlay: filesystem on ./file1 not supported as upperdir [ 94.350282][ T8002] netlink: 28 bytes leftover after parsing attributes in process `syz.6.491'. [ 94.455252][ T8017] mtrr: base(0x573be70b8fa6cd88000) is not aligned on a size(0xb1f7e145000) boundary [ 94.490736][ T8026] overlayfs: failed to resolve './work': -2 [ 94.722810][ T8052] netlink: 40 bytes leftover after parsing attributes in process `syz.5.505'. [ 94.724302][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.506'. [ 94.783188][ T8059] netlink: 232 bytes leftover after parsing attributes in process `syz.6.508'. [ 94.784052][ T8059] openvswitch: netlink: IP tunnel dst address not specified [ 94.784066][ T8059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.800782][ T8063] fuse: Bad value for 'fd' [ 94.993463][ T8082] bridge0: port 3(veth0) entered blocking state [ 94.993551][ T8082] bridge0: port 3(veth0) entered disabled state [ 94.993637][ T8082] veth0: entered allmulticast mode [ 94.994533][ T8082] veth0: entered promiscuous mode [ 94.996609][ T8082] bridge0: port 3(veth0) entered blocking state [ 94.996656][ T8082] bridge0: port 3(veth0) entered forwarding state [ 95.046990][ T8093] netlink: 'syz.6.517': attribute type 29 has an invalid length. [ 95.047012][ T8093] netlink: 'syz.6.517': attribute type 3 has an invalid length. [ 95.048542][ T8096] netlink: 'syz.6.517': attribute type 29 has an invalid length. [ 95.048555][ T8096] netlink: 'syz.6.517': attribute type 3 has an invalid length. [ 95.064982][ T8094] ipvlan2: entered allmulticast mode [ 95.065009][ T8094] virt_wifi0: entered allmulticast mode [ 95.066126][ T8094] batman_adv: batadv0: Adding interface: ipvlan2 [ 95.066140][ T8094] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.066167][ T8094] batman_adv: batadv0: Interface activated: ipvlan2 [ 95.145558][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 95.384893][ T5733] Bluetooth: hci2: command tx timeout [ 95.707844][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 95.707857][ T43] audit: type=1400 audit(1789109204.982:708): avc: denied { getopt } for pid=8105 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.766138][ T8108] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 95.824323][ T8082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.914341][ T43] audit: type=1400 audit(1789109205.182:709): avc: denied { map } for pid=8109 comm="syz.5.520" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 96.110142][ T8128] netlink: 'syz.5.526': attribute type 4 has an invalid length. [ 96.113472][ T8126] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 96.113500][ T8126] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 96.117298][ T8126] vhci_hcd vhci_hcd.0: Device attached [ 96.154414][ T8137] random: crng reseeded on system resumption [ 96.162746][ T43] audit: type=1400 audit(1789109205.422:710): avc: denied { append } for pid=8135 comm="syz.6.525" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 96.178734][ T43] audit: type=1400 audit(1789109205.452:711): avc: denied { ioctl } for pid=8135 comm="syz.6.525" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 96.305011][ T5815] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 96.365623][ T5815] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 96.375804][ T8165] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 96.380940][ T8165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3511 sclass=netlink_route_socket pid=8165 comm=syz.6.531 [ 96.609601][ T43] audit: type=1400 audit(1789109205.883:712): avc: denied { name_bind } for pid=8184 comm="syz.6.536" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 96.662046][ T8188] netlink: 'syz.6.537': attribute type 2 has an invalid length. [ 96.792796][ T43] audit: type=1404 audit(1789109206.063:713): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 96.814050][ T43] audit: type=1404 audit(1789109206.083:714): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 96.829269][ T43] audit: type=1400 audit(1789109206.103:715): avc: denied { write } for pid=8189 comm="syz.6.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.041404][ T43] audit: type=1400 audit(1789109206.313:716): avc: denied { read write } for pid=7030 comm="syz-executor" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.041453][ T43] audit: type=1400 audit(1789109206.313:717): avc: denied { open } for pid=7030 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 97.607909][ T8225] netlink: 'syz.2.548': attribute type 12 has an invalid length. [ 97.607923][ T8225] __nla_validate_parse: 4 callbacks suppressed [ 97.607929][ T8225] netlink: 132 bytes leftover after parsing attributes in process `syz.2.548'. [ 97.608651][ T8227] /dev/nullb0: Can't lookup blockdev [ 97.611205][ T8210] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.698680][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 97.700728][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 97.735965][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.553'. [ 97.784220][ T8247] overlayfs: failed to clone upperpath [ 97.801133][ T8245] overlayfs: failed to clone upperpath [ 97.801833][ T8247] overlayfs: failed to clone upperpath [ 97.803576][ T8247] overlayfs: failed to clone upperpath [ 97.816753][ T8247] overlayfs: failed to clone upperpath [ 97.819909][ T8247] overlayfs: failed to clone upperpath [ 97.821076][ T8247] overlayfs: failed to clone upperpath [ 97.822302][ T8247] overlayfs: failed to clone upperpath [ 97.823317][ T8247] overlayfs: failed to clone upperpath [ 97.824304][ T8247] overlayfs: failed to clone upperpath [ 97.839663][ T8247] overlayfs: failed to clone upperpath [ 97.840823][ T8247] overlayfs: failed to clone upperpath [ 97.846881][ T8247] overlayfs: failed to clone upperpath [ 97.848133][ T8247] overlayfs: failed to clone upperpath [ 97.850465][ T8247] overlayfs: failed to clone upperpath [ 97.852994][ T8247] overlayfs: failed to clone upperpath [ 97.856239][ T8247] overlayfs: failed to clone upperpath [ 97.861060][ T8247] overlayfs: failed to clone upperpath [ 97.863110][ T8247] overlayfs: failed to clone upperpath [ 97.867930][ T8247] overlayfs: failed to clone upperpath [ 97.869649][ T8247] overlayfs: failed to clone upperpath [ 97.870641][ T8247] overlayfs: failed to clone upperpath [ 97.872178][ T8247] overlayfs: failed to clone upperpath [ 97.873291][ T8247] overlayfs: failed to clone upperpath [ 97.874256][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.559'. [ 97.875959][ T8247] overlayfs: failed to clone upperpath [ 97.878248][ T8247] overlayfs: failed to clone upperpath [ 97.881393][ T8254] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 97.882627][ T8247] overlayfs: failed to clone upperpath [ 97.886191][ T8247] overlayfs: failed to clone upperpath [ 97.889187][ T8247] overlayfs: failed to clone upperpath [ 97.890849][ T8257] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 97.895267][ T8247] overlayfs: failed to clone upperpath [ 97.896640][ T8247] overlayfs: failed to clone upperpath [ 97.901408][ T8247] overlayfs: failed to clone upperpath [ 97.910718][ T8247] overlayfs: failed to clone upperpath [ 97.917271][ T8247] overlayfs: failed to clone upperpath [ 97.921852][ T8262] netlink: 'syz.5.560': attribute type 10 has an invalid length. [ 97.930348][ T8264] netlink: 14 bytes leftover after parsing attributes in process `syz.5.560'. [ 97.938170][ T8262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.942300][ T8262] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 97.978633][ T8264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.030172][ T8264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.038238][ T8264] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 98.041414][ T8264] bond0 (unregistering): Released all slaves [ 98.911340][ T8315] tipc: Enabled bearer , priority 10 [ 98.917503][ T8318] tipc: Enabling of bearer rejected, already enabled [ 98.990953][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 98.996407][ T8323] bridge0: port 4(team0) entered disabled state [ 98.996938][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.997070][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.065548][ T8130] vhci_hcd: connection reset by peer [ 99.068379][ T5807] vhci_hcd vhci_hcd.3: stop threads [ 99.068708][ T5807] vhci_hcd vhci_hcd.3: release socket [ 99.071363][ T5807] vhci_hcd vhci_hcd.3: disconnect device [ 99.123075][ T8328] fuse: fd is not a fuse device [ 99.123752][ T8330] bpf: Bad value for 'gid' [ 99.126699][ T8330] xt_IDLETIMER: timeout value is too big [ 99.294023][ T1349] nci: nci_stop_poll: unable to stop poll, since poll is not active [ 99.514413][ T5877] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 99.664686][ T5877] usb 11-1: Using ep0 maxpacket: 8 [ 99.665147][ T5877] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.665929][ T5877] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 99.665952][ T5877] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.665963][ T5877] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.665975][ T5877] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.665986][ T5877] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.666006][ T5877] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.871043][ T5877] usb 11-1: usb_control_msg returned -32 [ 99.871067][ T5877] usbtmc 11-1:16.0: can't read capabilities [ 100.287039][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 100.287061][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 100.428714][ T1349] usb 11-1: USB disconnect, device number 2 [ 100.955649][ T8446] cramfs: checking physical address 0x0000000101b00000 for linear cramfs image [ 100.955771][ T8446] cramfs: wrong magic [ 100.958518][ T8446] cramfs: wrong magic [ 100.959645][ T43] kauditd_printk_skb: 128 callbacks suppressed [ 100.959660][ T43] audit: type=1400 audit(1789109210.233:846): avc: denied { read } for pid=8445 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.012800][ T43] audit: type=1400 audit(1789109210.283:847): avc: denied { getopt } for pid=8445 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.035586][ T43] audit: type=1400 audit(1789109210.313:848): avc: denied { create } for pid=8451 comm="syz.6.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 101.039552][ T43] audit: type=1400 audit(1789109210.313:849): avc: denied { create } for pid=8451 comm="syz.6.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.040498][ T43] audit: type=1400 audit(1789109210.313:850): avc: denied { ioctl } for pid=8451 comm="syz.6.602" path="socket:[23466]" dev="sockfs" ino=23466 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.042148][ T43] audit: type=1400 audit(1789109210.313:851): avc: denied { read } for pid=8451 comm="syz.6.602" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 101.042422][ T43] audit: type=1400 audit(1789109210.313:852): avc: denied { open } for pid=8451 comm="syz.6.602" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 101.274141][ T1349] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 101.424576][ T1349] usb 11-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 101.429250][ T1349] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.429265][ T1349] usb 11-1: Product: syz [ 101.429273][ T1349] usb 11-1: Manufacturer: syz [ 101.429280][ T1349] usb 11-1: SerialNumber: syz [ 101.454168][ T5815] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 101.527718][ T43] audit: type=1400 audit(1789109210.803:853): avc: denied { watch watch_reads } for pid=8458 comm="syz.2.605" path="/216" dev="tmpfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 101.592837][ T8463] netlink: 32 bytes leftover after parsing attributes in process `syz.2.607'. [ 101.595558][ T43] audit: type=1400 audit(1789109210.873:854): avc: denied { mount } for pid=8462 comm="syz.2.607" name="/" dev="configfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 101.742971][ T43] audit: type=1400 audit(1789109211.013:855): avc: denied { checkpoint_restore } for pid=8469 comm="syz.2.610" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.882122][ T1349] rtl8150 11-1:1.0: couldn't reset the device [ 101.882348][ T1349] rtl8150 11-1:1.0: probe with driver rtl8150 failed with error -5 [ 101.888831][ T1349] usb 11-1: USB disconnect, device number 3 [ 102.158609][ T8336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.318310][ T8531] netlink: 'syz.2.628': attribute type 1 has an invalid length. [ 102.348397][ T8531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.384973][ T8531] bond2: (slave veth0_to_bond): making interface the new active one [ 102.386215][ T8531] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 102.389037][ T8535] FAULT_INJECTION: forcing a failure. [ 102.389037][ T8535] name fail_futex, interval 1, probability 0, space 0, times 1 [ 102.389058][ T8535] CPU: 3 UID: 0 PID: 8535 Comm: syz.6.629 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.389073][ T8535] Tainted: [L]=SOFTLOCKUP [ 102.389077][ T8535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.389084][ T8535] Call Trace: [ 102.389088][ T8535] [ 102.389093][ T8535] dump_stack_lvl+0x100/0x190 [ 102.389126][ T8535] should_fail_ex.cold+0x5/0xa [ 102.389142][ T8535] get_futex_key+0x1d0/0x14f0 [ 102.389161][ T8535] ? __pfx_get_futex_key+0x10/0x10 [ 102.389183][ T8535] futex_wait_setup+0x91/0x540 [ 102.389256][ T8535] __futex_wait+0x19f/0x300 [ 102.389282][ T8535] ? __pfx___futex_wait+0x10/0x10 [ 102.389303][ T8535] ? __pfx_try_to_wake_up+0x10/0x10 [ 102.389321][ T8535] ? futex_hash+0x311/0x400 [ 102.389342][ T8535] ? __pfx_futex_wake_mark+0x10/0x10 [ 102.389368][ T8535] ? find_held_lock+0x2b/0x80 [ 102.389389][ T8535] ? futex_wake+0x4ea/0x5e0 [ 102.389432][ T8535] futex_wait+0xe6/0x370 [ 102.389451][ T8535] ? __pfx_futex_wait+0x10/0x10 [ 102.389472][ T8535] ? find_held_lock+0x2b/0x80 [ 102.389488][ T8535] ? __fget_files+0x215/0x3d0 [ 102.389507][ T8535] ? __fget_files+0x215/0x3d0 [ 102.389522][ T8535] do_futex+0x265/0x440 [ 102.389537][ T8535] ? __pfx_do_futex+0x10/0x10 [ 102.389554][ T8535] ? fdget+0x18b/0x210 [ 102.389569][ T8535] __x64_sys_futex+0x34f/0x4d0 [ 102.389586][ T8535] ? __pfx___x64_sys_futex+0x10/0x10 [ 102.389608][ T8535] do_syscall_64+0x123/0x790 [ 102.389627][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.389639][ T8535] RIP: 0033:0x7fa64df9e159 [ 102.389650][ T8535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.389661][ T8535] RSP: 002b:00007fa64ef480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.389673][ T8535] RAX: ffffffffffffffda RBX: 00007fa64e225fa8 RCX: 00007fa64df9e159 [ 102.389680][ T8535] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa64e225fa8 [ 102.389687][ T8535] RBP: 00007fa64e225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 102.389693][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.389700][ T8535] R13: 00007fa64e226038 R14: 00007ffc4d25e710 R15: 00007ffc4d25e7f8 [ 102.389714][ T8535] [ 102.401254][ T8531] macvlan2: entered promiscuous mode [ 102.401273][ T8531] macvlan2: entered allmulticast mode [ 102.401666][ T8531] bond2: entered promiscuous mode [ 102.401678][ T8531] veth0_to_bond: entered promiscuous mode [ 102.403820][ T8531] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.404931][ T8531] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 102.405548][ T8531] bond2: left promiscuous mode [ 102.405559][ T8531] veth0_to_bond: left promiscuous mode [ 102.417025][ T8535] netlink: 'syz.6.629': attribute type 26 has an invalid length. [ 102.421492][ T8535] netlink: 'syz.6.629': attribute type 26 has an invalid length. [ 102.557932][ T8544] tipc: Started in network mode [ 102.557952][ T8544] tipc: Node identity 1000001, cluster identity 4369 [ 102.557963][ T8544] tipc: Node number set to 16777217 [ 102.558826][ T8553] tipc: New replicast peer: 127.0.0.1 [ 102.558991][ T8553] tipc: Enabled bearer , priority 10 [ 102.608223][ T8557] Invalid ELF header type: 2 != 1 [ 102.735867][ T8562] __nla_validate_parse: 6 callbacks suppressed [ 102.735881][ T8562] netlink: 24 bytes leftover after parsing attributes in process `syz.6.637'. [ 102.740889][ T8560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.746675][ T8560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.758842][ T8562] XFS (loop6): SB validate failed with error -5. [ 102.835935][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 102.885376][ T8560] team1: left promiscuous mode [ 102.885391][ T8560] team1: left allmulticast mode [ 102.886122][ T8560] bond1: left promiscuous mode [ 102.886131][ T8560] veth5: left promiscuous mode [ 102.887451][ T8560] veth5: left allmulticast mode [ 102.933976][ T5806] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.933999][ T5806] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.934026][ T5806] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.934039][ T5806] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.934056][ T5806] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.934070][ T5806] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.934086][ T5806] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.934100][ T5806] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.044931][ T8582] xt_IDLETIMER: timeout value is zero [ 103.061993][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 103.285375][ T8612] tipc: Enabling of bearer rejected, failed to enable media [ 103.359708][ T8543] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 103.567738][ T8647] netlink: 104 bytes leftover after parsing attributes in process `syz.5.658'. [ 103.619106][ T8656] overlayfs: upper fs does not support file handles, falling back to index=off. [ 103.635218][ T8655] [U] Y [ 103.642447][ T8659] fuse: fd is not a fuse device [ 103.799807][ T8675] fuse: fd is not a fuse device [ 103.847394][ T8679] netlink: 'syz.5.667': attribute type 21 has an invalid length. [ 103.888273][ T8671] fuse: fd is not a fuse device [ 104.029810][ T8699] netlink: 36 bytes leftover after parsing attributes in process `syz.6.671'. [ 104.122188][ T8705] netlink: 'syz.2.670': attribute type 138 has an invalid length. [ 104.169817][ T8710] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 104.169829][ T8710] overlayfs: missing 'lowerdir' [ 104.372186][ T8718] netlink: 28 bytes leftover after parsing attributes in process `syz.6.676'. [ 104.372201][ T8718] netlink: 32 bytes leftover after parsing attributes in process `syz.6.676'. [ 104.372209][ T8718] netlink: 28 bytes leftover after parsing attributes in process `syz.6.676'. [ 104.529990][ T8742] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 104.530010][ T8742] CIFS: Attempting to mount //127.0.0.1/test [ 104.756798][ T8751] Unable to locate . in FUNC.INSTANCE [ 104.905599][ T8767] netlink: 16 bytes leftover after parsing attributes in process `syz.6.691'. [ 104.906040][ T8768] netlink: 16 bytes leftover after parsing attributes in process `syz.6.691'. [ 105.040439][ T8775] futex_wake_op: syz.5.693 tries to shift op by -1; fix this program [ 105.189925][ T8786] netlink: 24 bytes leftover after parsing attributes in process `syz.5.698'. [ 105.218932][ T8786] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8786 comm=syz.5.698 [ 105.249847][ T8788] tmpfs: Bad value for 'mpol' [ 105.250853][ T8788] cgroup: Need name or subsystem set [ 105.361863][ T8742] CIFS: VFS: Error connecting to socket. Aborting operation. [ 105.361891][ T8742] CIFS: VFS: cifs_mount failed w/return code = -4 [ 105.425648][ T8794] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 105.429348][ T8794] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 105.514913][ T8811] openvswitch: netlink: Duplicate key (type 0). [ 105.556308][ T8819] fuse: Bad value for 'fd' [ 105.647116][ T6678] IPVS: starting estimator thread 0... [ 105.685422][ T8835] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20004 [ 105.686398][ T8825] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 105.686811][ T8825] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 105.687000][ T8825] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 105.687240][ T8825] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 105.687475][ T8825] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 105.687635][ T8825] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 105.687800][ T8825] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 105.687958][ T8825] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 105.743736][ T8837] IPVS: using max 42 ests per chain, 100800 per kthread [ 106.347027][ T8852] jffs2: notice: (8852) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 106.382914][ T43] kauditd_printk_skb: 107 callbacks suppressed [ 106.382927][ T43] audit: type=1804 audit(1789109215.654:963): pid=8856 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.718" name="file0" dev="tmpfs" ino=1483 res=1 errno=0 [ 106.394693][ T8856] uprobe: syz.2.718:8856 failed to unregister, leaking uprobe [ 106.517265][ T43] audit: type=1400 audit(1789109215.794:964): avc: denied { write } for pid=8869 comm="syz.3.724" path="socket:[26052]" dev="sockfs" ino=26052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.574744][ T43] audit: type=1400 audit(1789109215.854:965): avc: denied { watch_mount } for pid=8875 comm="syz.6.727" path="/79" dev="tmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 106.575349][ T43] audit: type=1400 audit(1789109215.854:966): avc: denied { read } for pid=8875 comm="syz.6.727" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 106.575381][ T43] audit: type=1400 audit(1789109215.854:967): avc: denied { open } for pid=8875 comm="syz.6.727" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 106.577962][ T43] audit: type=1400 audit(1789109215.854:968): avc: denied { ioctl } for pid=8875 comm="syz.6.727" path="/dev/usbmon0" dev="devtmpfs" ino=736 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 106.674014][ T43] audit: type=1400 audit(1789109215.954:969): avc: denied { mounton } for pid=8880 comm="syz.6.729" path="/81/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 106.741205][ T8892] netlink: 'syz.6.733': attribute type 21 has an invalid length. [ 106.741222][ T8892] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.741261][ T8892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.741266][ T8892] IPv6: NLM_F_CREATE should be set when creating new route [ 106.741283][ T8892] IPv6: NLM_F_CREATE should be set when creating new route [ 106.741292][ T8892] IPv6: NLM_F_CREATE should be set when creating new route [ 106.741468][ T8894] random: crng reseeded on system resumption [ 106.741481][ T43] audit: type=1400 audit(1789109216.014:970): avc: denied { read write } for pid=8889 comm="syz.3.732" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.741512][ T43] audit: type=1400 audit(1789109216.014:971): avc: denied { ioctl open } for pid=8889 comm="syz.3.732" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.743656][ T8892] netlink: 'syz.6.733': attribute type 21 has an invalid length. [ 106.743713][ T8892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.777672][ T8898] sctp: [Deprecated]:  (pid 8898) Use of int in max_burst socket option. [ 106.777672][ T8898] Use struct sctp_assoc_value instead [ 106.787470][ T8898] syzkaller0: entered promiscuous mode [ 106.787490][ T8898] syzkaller0: entered allmulticast mode [ 106.889638][ T43] audit: type=1400 audit(1789109216.164:972): avc: denied { cmd } for pid=8903 comm="iou-wrk-8904" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 106.914224][ T8907] gadgetfs: bound to dummy_udc driver [ 107.280323][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802b54d800: rx timeout, send abort [ 107.310461][ T8953] jffs2: notice: (8953) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 107.313960][ T8953] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 107.781951][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802b54d800: abort rx timeout. Force session deactivation [ 107.971949][ T9013] netlink: 'syz.5.759': attribute type 4 has an invalid length. [ 108.157631][ T9031] __nla_validate_parse: 9 callbacks suppressed [ 108.157644][ T9031] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.763'. [ 108.515782][ T9067] xt_MASQUERADE: bad MAP_IPS. [ 108.519159][ T8973] Bluetooth: hci1: Frame reassembly failed (-84) [ 108.521972][ T9062] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 108.531649][ T8973] Bluetooth: hci1: Frame reassembly failed (-84) [ 108.577252][ T9072] ip6erspan0: entered allmulticast mode [ 108.586002][ T9076] wg2: Caught tx_queue_len zero misconfig [ 108.809774][ T9091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.782'. [ 109.047406][ T9120] netlink: 'syz.3.790': attribute type 1 has an invalid length. [ 109.056150][ T9120] bond9: entered promiscuous mode [ 109.056335][ T9120] 8021q: adding VLAN 0 to HW filter on device bond9 [ 109.077633][ T9120] veth3: entered allmulticast mode [ 109.128997][ T9126] bond4 (unregistering): Released all slaves [ 110.140919][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 110.207903][ T9181] netlink: 'syz.5.806': attribute type 2 has an invalid length. [ 110.207918][ T9181] netlink: 'syz.5.806': attribute type 2 has an invalid length. [ 110.287945][ T9193] overlayfs: failed to clone upperpath [ 110.305668][ T9193] overlayfs: failed to clone upperpath [ 110.443781][ T9204] fuse: fd is not a fuse device [ 110.446938][ T9204] fuse: fd is not a fuse device [ 110.584582][ T5733] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 110.696951][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.6.817'. [ 110.696980][ T9217] netlink: 'syz.6.817': attribute type 13 has an invalid length. [ 110.696992][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.817'. [ 110.706314][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.6.817'. [ 110.706343][ T9217] netlink: 'syz.6.817': attribute type 13 has an invalid length. [ 110.706355][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.817'. [ 110.722974][ T5806] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.723001][ T5806] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.723019][ T5806] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.723036][ T5806] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.415422][ T43] kauditd_printk_skb: 56 callbacks suppressed [ 111.415435][ T43] audit: type=1400 audit(1789109220.684:1018): avc: denied { create } for pid=9249 comm="syz.5.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 111.415459][ T43] audit: type=1400 audit(1789109220.684:1019): avc: denied { write } for pid=9249 comm="syz.5.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 111.641863][ T9278] netlink: 60 bytes leftover after parsing attributes in process `syz.6.830'. [ 111.682272][ T43] audit: type=1400 audit(1789109220.944:1020): avc: denied { listen } for pid=9281 comm="syz.6.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.683541][ T43] audit: type=1400 audit(1789109220.954:1021): avc: denied { accept } for pid=9281 comm="syz.6.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.741848][ T9283] tipc: Started in network mode [ 111.741862][ T9283] tipc: Node identity 2000004, cluster identity 4711 [ 111.741869][ T9283] tipc: Node number set to 33554436 [ 111.746165][ T9283] i8042 kbd 00:00: in use; can't configure [ 112.290441][ T9294] xt_l2tp: wrong L2TP version: 4 [ 112.344468][ T9289] fuse: fd is not a fuse device [ 112.345194][ T9289] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 112.345201][ T9290] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 112.525261][ T9301] mmap: syz.2.839 (9301) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.544773][ T5877] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 112.565944][ T43] audit: type=1400 audit(1789109221.835:1022): avc: denied { connect } for pid=9302 comm="syz.6.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.695954][ T43] audit: type=1400 audit(1789109221.965:1023): avc: denied { create } for pid=9304 comm="syz.2.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 112.732769][ T5877] usb 10-1: Using ep0 maxpacket: 8 [ 112.733499][ T5877] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 112.734389][ T5877] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 112.734415][ T5877] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 112.734443][ T5877] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.734466][ T5877] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.734485][ T5877] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.734506][ T5877] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.734527][ T5877] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 112.734548][ T5877] usb 10-1: config 168 interface 0 has no altsetting 0 [ 112.735375][ T5877] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 112.735399][ T5877] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 112.735427][ T5877] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.735448][ T5877] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.735467][ T5877] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.735487][ T5877] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.735506][ T5877] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 112.735527][ T5877] usb 10-1: config 168 interface 0 has no altsetting 0 [ 112.736410][ T5877] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 112.736433][ T5877] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 112.736463][ T5877] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 112.736483][ T5877] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.736503][ T5877] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.736521][ T5877] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.736543][ T5877] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 112.736564][ T5877] usb 10-1: config 168 interface 0 has no altsetting 0 [ 112.739098][ T5877] usb 10-1: string descriptor 0 read error: -22 [ 112.739191][ T5877] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.748882][ T5877] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 113.065255][ T5877] usb 10-1: USB disconnect, device number 7 [ 113.067885][ T9314] usb 10-1: Couldn't submit interrupt_out_urb -19 [ 113.300424][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.300743][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.301094][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.301404][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.301705][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.301996][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.302358][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.310235][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.310556][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.310943][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.311239][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.311579][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.311949][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.312254][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.312641][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.313056][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.314150][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.314463][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.314773][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.315061][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.315438][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.315737][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.316042][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.316434][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.316734][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.317027][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.317344][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.317751][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.318044][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.318331][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.318755][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.319049][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.319364][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.319760][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.320077][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.320606][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.321005][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.321319][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.321610][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.321977][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.322272][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.324998][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.325371][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.325707][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.328386][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.329111][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.329530][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.329841][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.330135][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.330581][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.330881][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.331168][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.331461][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.331833][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.332124][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.332411][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.332909][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.333220][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.333535][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.333914][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.334232][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.334540][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.334849][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.335218][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.335523][ T9319] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.454423][ T43] audit: type=1400 audit(1789109222.725:1024): avc: denied { mount } for pid=9323 comm="syz.6.845" name="/" dev="ramfs" ino=28083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 113.478047][ T9326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.527960][ T9330] netlink: 'syz.6.848': attribute type 1 has an invalid length. [ 113.537635][ T9330] bond1: entered promiscuous mode [ 113.537665][ T9330] bond1: entered allmulticast mode [ 113.537827][ T9330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.547357][ T9330] erspan1: entered allmulticast mode [ 113.553199][ T9330] bond1: (slave erspan1): making interface the new active one [ 113.553212][ T9330] erspan1: entered promiscuous mode [ 113.558545][ T9330] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 113.712759][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 113.718069][ T43] audit: type=1400 audit(1789109222.985:1025): avc: denied { create } for pid=9332 comm="syz.6.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 113.719844][ T43] audit: type=1400 audit(1789109222.985:1026): avc: denied { sys_admin } for pid=9332 comm="syz.6.849" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 114.168338][ T43] audit: type=1400 audit(1789109223.435:1027): avc: denied { bind } for pid=9367 comm="syz.2.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.185745][ T9368] netlink: 44 bytes leftover after parsing attributes in process `syz.2.859'. [ 114.619135][ T9388] cgroup: fork rejected by pids controller in /syz6 [ 114.808792][ T9526] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 114.820498][ T9526] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 114.982164][ T6673] Bluetooth: hci1: Frame reassembly failed (-84) [ 114.982207][ T6673] Bluetooth: hci1: Frame reassembly failed (-84) [ 114.982236][ T6673] Bluetooth: hci1: Frame reassembly failed (-84) [ 114.982274][ T6673] Bluetooth: hci1: Frame reassembly failed (-84) [ 114.982303][ T6673] Bluetooth: hci1: Frame reassembly failed (-84) [ 114.983119][ T9542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.871'. [ 114.998751][ T9542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.003549][ T9542] bond2: (slave hsr0): The slave device specified does not support setting the MAC address [ 115.003855][ T9542] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 115.003867][ T9542] bond2: (slave hsr0): Error -22 calling dev_set_mtu [ 115.062172][ T9547] comedi comedi1: pc212e: a I/O base address must be specified [ 115.064729][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.872'. [ 115.066289][ T9547] SELinux: Context system_u:object_r:hald_var_lib_t:s0 is not valid (left unmapped). ** replaying previous printk message ** [ 115.069933][ T5877] skbuff: __skb_pull(len=234) [ 115.069943][ T5877] skb len=6968 data_len=6968 headroom=0 headlen=0 tailroom=0 [ 115.069943][ T5877] end-tail=384 mac=(234,14) mac_len=14 net=(248,40) trans=288 [ 115.069943][ T5877] shinfo(txflags=0 nr_frags=1 gso(size=1428 type=16 segs=5)) [ 115.069943][ T5877] csum(0x100120 start=288 offset=16 ip_summed=3 complete_sw=0 valid=1 level=0) [ 115.069943][ T5877] hash(0x7b446c6c sw=0 l4=1) proto=0x86dd pkttype=0 iif=60 [ 115.069943][ T5877] priority=0x0 mark=0x0 alloc_cpu=3 vlan_all=0x0 [ 115.069943][ T5877] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 115.069988][ T5877] skb frag: 00000000: c6 27 38 4b a1 a7 2c 90 f2 6a 17 fc 61 26 06 6d [ 115.069996][ T5877] skb frag: 00000010: b9 8e 7c aa 62 09 bc 28 5d b8 bd a6 9a 55 f5 6d [ 115.070003][ T5877] skb frag: 00000020: 2f 15 81 fb fc 6e 5a 0c d5 53 01 51 0f 47 0a fa [ 115.070010][ T5877] skb frag: 00000030: b1 a1 94 ab db 07 b0 72 6f 13 5e 57 51 7f 08 49 [ 115.070017][ T5877] skb frag: 00000040: 42 75 16 e6 e8 2f 0e d0 86 b2 4b 0f f4 28 65 14 [ 115.070024][ T5877] skb frag: 00000050: da 59 98 58 5a 4d 08 9b 81 60 7b 91 9d a4 33 17 [ 115.070032][ T5877] skb frag: 00000060: 4f 5e b8 b9 44 fc d7 86 23 05 af 08 96 1e 63 7f [ 115.070039][ T5877] skb frag: 00000070: 34 76 25 9e 62 21 fe 69 23 fd b4 b6 3e df e1 c0 [ 115.070046][ T5877] skb frag: 00000080: 85 87 44 ed a2 90 b6 5b fc 86 ec 04 ef ec ca 7b [ 115.070053][ T5877] skb frag: 00000090: ea 83 26 5c ec 26 2f 49 f8 2e b2 e6 73 6a af ae [ 115.070060][ T5877] skb frag: 000000a0: dc 44 e9 71 e9 8a 38 8d b6 c5 8e 2f 39 38 a4 4b [ 115.070066][ T5877] skb frag: 000000b0: 66 67 5e 5a 47 6a e7 5a bc f9 c9 6c a6 08 26 08 [ 115.070073][ T5877] skb frag: 000000c0: 76 f6 46 f0 87 c1 7a 81 85 78 62 7f 78 15 d4 51 [ 115.070080][ T5877] skb frag: 000000d0: 0a fd 97 b2 a6 bf c4 8f 40 5d 6a c0 75 5f 7c 7b [ 115.070087][ T5877] skb frag: 000000e0: 30 fb 6a 64 4e 4f c0 3f 5f eb d9 47 3a 14 22 66 [ 115.070094][ T5877] skb frag: 000000f0: 55 48 57 ef 12 02 dd a5 c6 aa a3 e1 2b b0 f9 f0 [ 115.070101][ T5877] skb frag: 00000100: 44 d2 0a a2 e2 47 a7 df 6f 97 84 d1 f7 fb c3 2a [ 115.070108][ T5877] skb frag: 00000110: 21 54 9f 61 2b aa b4 19 63 72 89 80 f0 62 f3 61 [ 115.070115][ T5877] skb frag: 00000120: 9f 89 a0 49 03 f5 e7 66 b6 4b 34 44 cd b9 03 b5 [ 115.070493][ T5877] ------------[ cut here ]------------ [ 115.070500][ T5877] kernel BUG at ./include/linux/skbuff.h:2847! [ 115.070513][ T5877] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 115.155341][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.161249][ T5877] Tainted: [L]=SOFTLOCKUP [ 115.162661][ T5877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.166832][ T5877] Workqueue: events net_dm_packet_work [ 115.169337][ T5877] RIP: 0010:skb_pull.cold+0x29/0x2b [ 115.171608][ T5877] Code: 0b e8 6b b3 9c 00 44 89 65 70 89 de 48 c7 c7 60 cc 38 8d e8 b9 e6 b2 ff 31 d2 48 89 ee 48 c7 c7 a0 cc 38 8d e8 e8 30 26 08 90 <0f> 0b e8 40 b3 9c 00 4c 89 e2 be 01 00 00 00 48 c7 c7 00 ff ca 90 [ 115.178985][ T5877] RSP: 0018:ffffc900044df9f0 EFLAGS: 00010286 [ 115.181527][ T5877] RAX: 0000000000000000 RBX: 00000000000000ea RCX: 0000000000000000 [ 115.184766][ T5877] RDX: ffff88802461a580 RSI: ffffffff816f5ede RDI: ffff88802461a580 [ 115.187925][ T5877] RBP: ffff88802c76ca00 R08: 0000000000000001 R09: 0000000000000000 [ 115.191304][ T5877] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001b38 [ 115.194857][ T5877] R13: 0000000000001a4e R14: 0000000000001b38 R15: ffff88802c76ca00 [ 115.198163][ T5877] FS: 0000000000000000(0000) GS:ffff8880d5c5c000(0000) knlGS:0000000000000000 [ 115.201908][ T5877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.204659][ T5877] CR2: 00007fa64e227dac CR3: 00000000647d3000 CR4: 0000000000352ef0 [ 115.208028][ T5877] Call Trace: [ 115.209508][ T5877] [ 115.210761][ T5877] net_dm_packet_work+0xafd/0x1290 [ 115.212868][ T5877] ? register_lock_class+0x3f/0x7b0 [ 115.215065][ T5877] ? __pfx_net_dm_packet_work+0x10/0x10 [ 115.217380][ T5877] ? __lock_acquire+0x5c0/0x1f40 [ 115.219422][ T5877] ? lock_acquire+0x1d1/0x380 [ 115.221397][ T5877] ? process_one_work+0xa2c/0x1b10 [ 115.223514][ T5877] ? process_one_work+0x906/0x1b10 [ 115.225611][ T5877] ? process_one_work+0x906/0x1b10 [ 115.227625][ T5877] ? process_one_work+0xac7/0x1b10 [ 115.229749][ T5877] process_one_work+0xac7/0x1b10 [ 115.231783][ T5877] ? __pfx_process_one_work+0x10/0x10 [ 115.233914][ T5877] ? lock_acquire+0x1d1/0x380 [ 115.235828][ T5877] ? __pfx_net_dm_packet_work+0x10/0x10 [ 115.237975][ T5877] worker_thread+0x5ef/0xe50 [ 115.239918][ T5877] ? __pfx_worker_thread+0x10/0x10 [ 115.242070][ T5877] ? kthread+0x13a/0x450 [ 115.243861][ T5877] ? __pfx_worker_thread+0x10/0x10 [ 115.246047][ T5877] kthread+0x373/0x450 [ 115.247798][ T5877] ? __pfx_kthread+0x10/0x10 [ 115.249481][ T5877] ret_from_fork+0x730/0xd60 [ 115.250964][ T5877] ? __pfx_ret_from_fork+0x10/0x10 [ 115.253079][ T5877] ? __switch_to+0x800/0x10f0 [ 115.255119][ T5877] ? __pfx_kthread+0x10/0x10 [ 115.257088][ T5877] ret_from_fork_asm+0x1a/0x30 [ 115.259114][ T5877] [ 115.260422][ T5877] Modules linked in: [ 115.262959][ T5877] ---[ end trace 0000000000000000 ]--- [ 115.268416][ T5877] RIP: 0010:skb_pull.cold+0x29/0x2b [ 115.268446][ T5877] Code: 0b e8 6b b3 9c 00 44 89 65 70 89 de 48 c7 c7 60 cc 38 8d e8 b9 e6 b2 ff 31 d2 48 89 ee 48 c7 c7 a0 cc 38 8d e8 e8 30 26 08 90 <0f> 0b e8 40 b3 9c 00 4c 89 e2 be 01 00 00 00 48 c7 c7 00 ff ca 90 [ 115.268462][ T5877] RSP: 0018:ffffc900044df9f0 EFLAGS: 00010286 [ 115.268477][ T5877] RAX: 0000000000000000 RBX: 00000000000000ea RCX: 0000000000000000 [ 115.268488][ T5877] RDX: ffff88802461a580 RSI: ffffffff816f5ede RDI: ffff88802461a580 [ 115.268499][ T5877] RBP: ffff88802c76ca00 R08: 0000000000000001 R09: 0000000000000000 [ 115.268509][ T5877] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001b38 [ 115.268519][ T5877] R13: 0000000000001a4e R14: 0000000000001b38 R15: ffff88802c76ca00 [ 115.268531][ T5877] FS: 0000000000000000(0000) GS:ffff8880d5c5c000(0000) knlGS:0000000000000000 [ 115.268569][ T5877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.268582][ T5877] CR2: 00007fa64e227dac CR3: 000000000eb96000 CR4: 0000000000352ef0 [ 115.268596][ T5877] Kernel panic - not syncing: Fatal exception [ 115.309668][ T5877] Kernel Offset: disabled [ 115.310993][ T5877] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:42:48 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81ea4a86 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffc90000137da8 RSP=ffffc90000137a40 R8 =0000000000000005 R9 =0000000000000000 R10=00000000ffffffff R11=203a666675626b73 R12=0000000000000000 R13=1ffff92000026f53 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff820c0eb0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b5c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa64df59270 CR3=000000004ee3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff9d16960 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73746e6576652e70 6177732e79726f6d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff9d18cc6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff9d18cc6 00007ffff9d18ccc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f556f43561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f556f43565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f556f4357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f556f435650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000055 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b08405 RDI=ffffffff9bc68ca0 RBP=ffffffff9bc68c60 RSP=ffffc900044df198 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6b726f776b205043 R12=0000000000000000 R13=0000000000000055 R14=0000000000000009 R15=ffffc900044df4b0 RIP=ffffffff85b0842f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c5c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa64e227dac CR3=00000000647d3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f829295d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8d649116 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8d649116 00007ffd8d64911c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8291c3561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8291c3565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8291c357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8291c35650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05009400645f9492 e75734f228dcaa1e 384bccbeca244880 00010000000022e4 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e75734f228dcaa1e 384bccbeca244880 00010000000022e4 f1cd1bf6324e7fff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffffff8e6d6b00 RCX=0000000000000000 RDX=ffff8880301aa580 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000005 RSP=ffffc90003b37560 R8 =0000000000000005 R9 =0000000000000006 R10=0000000000000006 R11=0000000000000001 R12=0000000000000000 R13=0000000000000003 R14=ffffffff8e6d6b00 R15=dffffc0000000000 RIP=ffffffff820c1020 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055556fe87500 ffffffff 00c00000 GS =0000 ffff8880d5d5c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa64dfeb840 CR3=000000004ee3e000 CR4=00352ef0 DR0=0000000000000000 DR1=000000001c7800b2 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff9d16960 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73746e6576652e70 6177732e79726f6d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff9d18cc6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff9d18cc6 00007ffff9d18ccc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f556f43561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f556f43565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f556f4357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f556f435650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff81ff5693 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88806a443cc0 RSP=ffffc90023397500 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100660d2b3 R13=0000000000000003 R14=ffffed100d488799 R15=0000000000000001 RIP=ffffffff820c0eb0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e5c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3c8968 CR3=000000000eb96000 CR4=00352ef0 DR0=0000000000000000 DR1=000000001c7800b2 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0078756e696c6573 2e79746972756365 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc07b27b46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc07b27b46 00007ffc07b27b4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4e5c3561e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4e5c3565e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4e5c357c2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe4e5c35650 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f52bea42362c7024 93ed9884df144d71 9b7c6a63021c4730 672be753216218b5 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000022f7ed ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8626a26097f565ed a6ba67b0401c58fd c1f52bea42362c70 2493ed9884df144d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 719b7c6a63021c47 30672be753216218 b58b831918b01cf2 1d0459b93858539c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a5fe210db72be836 8bf3362b0acbf544 03a8ab2e1c4ce37f 235e9692ff800300 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a6a9b42fd809931 d4d6190072f9d768 1e5a865e3f161176 339b2fee9eb0b54b ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000