last executing test programs: 52.248025288s ago: executing program 3 (id=478): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, 0xfffffffffffffffe, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0x71}]}}]}, 0x54}}, 0x24004014) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000096000a000200aaaaaaaaaa0c0000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x17904}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket(0x10, 0x3, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r9 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x141000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r9, 0xc0984124, &(0x7f0000000040)) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 52.241626027s ago: executing program 3 (id=480): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0xfffffffe, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_LABELS={0x14, 0x7, "e3ccd1c5b8fbe60833617f2f4a63b45b"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x8, 0xdc, 0x2, {{0x2f, 0x4, 0x1, 0x26, 0xbc, 0x67, 0x0, 0x6, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x44, 0xaf, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x7f}, {@multicast1, 0x1}, {@multicast2}, {@broadcast, 0x7fff}, {@empty, 0x6}, {@rand_addr=0x64010100, 0xd4}, {@private=0xa010101, 0x1eb4c4b3}, {@remote, 0x8}]}, @noop, @rr={0x7, 0x1f, 0x4f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2, @broadcast, @loopback, @rand_addr=0x64010100]}, @rr={0x7, 0xb, 0xf3, [@loopback, @dev={0xac, 0x14, 0x14, 0x14}]}, @end, @generic={0x0, 0xf, "dab606d495134162d8e05aa8f2"}, @lsrr={0x83, 0x27, 0xf0, [@private=0xa010101, @broadcast, @rand_addr=0x64010100, @multicast1, @remote, @local, @multicast2, @rand_addr=0x64010101, @broadcast]}]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="55275e7d7b5235650458799aae2646521de23ec3326bdc7074d047a3164708bf82b6205c6dfae864de65b44b9f23c06bef959c95e92ba2cfbd7c3bad77a62e6beb4188b280c62579a212b31a45613d46ae7c40b388efd8812e4464f5f125850bc35c238cd3aee7be298b1fb3e5c0f391b99a516dde437806ec56a321ab7dd267e9be180b5e0bcb907ee49b2c4d5a2080138e507331df721be13f7c7086f80697bb787f50011dad80c1bcf3ea27b41ff04a", 0xb1, 0x4, &(0x7f0000000300)={0x11, 0xf6, r1, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0xfffffffe, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_LABELS={0x14, 0x7, "e3ccd1c5b8fbe60833617f2f4a63b45b"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x8, 0xdc, 0x2, {{0x2f, 0x4, 0x1, 0x26, 0xbc, 0x67, 0x0, 0x6, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x44, 0xaf, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x7f}, {@multicast1, 0x1}, {@multicast2}, {@broadcast, 0x7fff}, {@empty, 0x6}, {@rand_addr=0x64010100, 0xd4}, {@private=0xa010101, 0x1eb4c4b3}, {@remote, 0x8}]}, @noop, @rr={0x7, 0x1f, 0x4f, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2, @broadcast, @loopback, @rand_addr=0x64010100]}, @rr={0x7, 0xb, 0xf3, [@loopback, @dev={0xac, 0x14, 0x14, 0x14}]}, @end, @generic={0x0, 0xf, "dab606d495134162d8e05aa8f2"}, @lsrr={0x83, 0x27, 0xf0, [@private=0xa010101, @broadcast, @rand_addr=0x64010100, @multicast1, @remote, @local, @multicast2, @rand_addr=0x64010101, @broadcast]}]}}}}}) (async) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="55275e7d7b5235650458799aae2646521de23ec3326bdc7074d047a3164708bf82b6205c6dfae864de65b44b9f23c06bef959c95e92ba2cfbd7c3bad77a62e6beb4188b280c62579a212b31a45613d46ae7c40b388efd8812e4464f5f125850bc35c238cd3aee7be298b1fb3e5c0f391b99a516dde437806ec56a321ab7dd267e9be180b5e0bcb907ee49b2c4d5a2080138e507331df721be13f7c7086f80697bb787f50011dad80c1bcf3ea27b41ff04a", 0xb1, 0x4, &(0x7f0000000300)={0x11, 0xf6, r1, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) 52.166500699s ago: executing program 3 (id=481): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2, 0x284500) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000280)) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newchain={0x80, 0x64, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {0xe, 0xb}, {0x3, 0x1d}}, [@TCA_RATE={0x6, 0x5, {0xa5, 0x81}}, @TCA_CHAIN={0x8, 0xb, 0x81}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @filter_kind_options=@f_bpf={{0x8}, {0x24, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x8, 0xf7, 0x7, 0x6}]}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket(0x2000000000000021, 0x2, 0x10000000000002) 52.16607436s ago: executing program 3 (id=482): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r4}, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000040)) (async) r9 = socket$netlink(0x10, 0x3, 0x9) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000000080)={0x8}) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r12, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000037c00000400fc80a72601"], 0x26c0}}, 0x4010) (async) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) 52.070111813s ago: executing program 3 (id=483): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x8, 0x80000001, 0xa, @empty, @ipv4={'\x00', '\xff\xff', @local}, 0x80, 0x7800, 0x2, 0x4}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000020c0)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x21, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0xc, 0x1, 0xa, 0xfffffffffffffff0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0xf4, &(0x7f0000000500)=""/244, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x2, 0x5, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000640)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x4, 0x10, 0x6}, {0x3, 0x3, 0xd, 0x8}, {0x1, 0x2, 0xe, 0xb}, {0x0, 0x2, 0xf, 0xa}, {0x0, 0x2, 0x5, 0x2}, {0x1, 0x5, 0xe, 0xd}, {0x1, 0x2, 0x6, 0x1}, {0x5, 0x4, 0xf, 0x6}, {0x1, 0x4, 0xc, 0x5}, {0x2, 0x4, 0xe, 0xb}], 0x10, 0x8000}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000002100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaa910000aabb86dd68d920df00083a01ff0200000000000000efff00000000010000002900000000000000000000000001810090787fff0005"], 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) r9 = syz_open_dev$mouse(&(0x7f00000009c0), 0x10001, 0x200200) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x45e2}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x32, &(0x7f0000000000)=""/50, 0x41000, 0x27, '\x00', r0, 0x7d9570676c6fa3a1, r3, 0x8, &(0x7f0000000200)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xd, 0x673b763d, 0xc}, 0x10, 0x16afc, r5, 0x2, &(0x7f0000000a00)=[r6, r7, r8, r9], &(0x7f0000000a40)=[{0x0, 0x4, 0x3, 0x4}, {0x5, 0x5}], 0x10, 0xa}, 0x94) 51.627522808s ago: executing program 3 (id=486): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60010700000c1100fc010000000097a10b00000000000000000000ff02000000000000000000000000000100000e22007801000000"], 0x0) ftruncate(r2, 0xffff) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000002200)={0xe25, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r5, &(0x7f0000000740)=[{&(0x7f0000000500)=""/88, 0x58}], 0x1, 0x7fff, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r10}, 0x10) r11 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wf\voo=', @ANYRESHEX=r11, @ANYBLOB=',k']) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) close_range(r0, 0xffffffffffffffff, 0x0) 51.513535273s ago: executing program 32 (id=486): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60010700000c1100fc010000000097a10b00000000000000000000ff02000000000000000000000000000100000e22007801000000"], 0x0) ftruncate(r2, 0xffff) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000002200)={0xe25, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r5, &(0x7f0000000740)=[{&(0x7f0000000500)=""/88, 0x58}], 0x1, 0x7fff, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r10}, 0x10) r11 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wf\voo=', @ANYRESHEX=r11, @ANYBLOB=',k']) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) close_range(r0, 0xffffffffffffffff, 0x0) 7.1940204s ago: executing program 0 (id=1223): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0xa0042, 0x0) write$tcp_mem(r3, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x2, r2, 0x0, &(0x7f0000000200)=' ', 0x1, 0x4}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r2, r2, 0xfeb, 0xfffffffffefffffc, 0x3fff}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000280)={0x30, r5, 0x0, 0x0, 0x803, 0x3, 0x2000000000000005, &(0x7f0000000100)=""/55}) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x8, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112240000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 7.191103601s ago: executing program 0 (id=1225): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x26, 0x1000000, 0x0}) 7.134146504s ago: executing program 0 (id=1226): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x6a, 0x2, 0x0, &(0x7f0000000300)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x6, 0x4e8d0, 0x107b9c}) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6673633d8f"]) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10", 0x1) (async) r4 = accept$alg(r0, 0x0, 0x0) readv(r4, &(0x7f0000000a00)=[{&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000000380)=""/246, 0xf6}], 0x2) sendmmsg$alg(r4, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="9c98d425afe56f214f063263de94", 0xe}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000b8"], 0x159c}}, 0x0) 6.911069521s ago: executing program 0 (id=1231): mkdir(&(0x7f0000000180)='./file0\x00', 0xc4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc31d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800040, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_elf64(r4, &(0x7f0000000d00)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x80, 0x8, 0x6, 0xfffffffffffffff9, 0x2, 0x3, 0xfffffffe, 0x171, 0x40, 0xe8, 0x800, 0x0, 0x38, 0x1, 0xf2, 0x3ff, 0x9}, [{0x4, 0x80, 0xd1, 0xb1a9, 0x800, 0x4, 0x8000000000000000, 0x400}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r5, 0x3, &(0x7f0000000300)={0x3, 0x2c6d}, 0x0) r6 = getpid() setpgid(r5, r6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c01000010000100000000000000200000000000000000030000200000000000000000000000000000000000000000000e00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}}, 0x20000000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r9, r10, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002", 0x17}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) syz_open_procfs(r11, &(0x7f00000002c0)='net/ip6_tables_names\x00') 6.798002319s ago: executing program 0 (id=1237): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0xe, 0x0, &(0x7f0000000240)="ae24a21f9a824666f9acf0e0163fa8d7ad3a0f8e52dfe78a4408100d6ccf068949dbe6ef096242a591f586f19e69e5761f2c2c367a9f3f8e73f487fc3af670b3d9d57112e4d63c230dd8b25837909c10b4864f30", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2003}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2c}}, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0xa600, 0x0) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe42}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xec6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) 6.288302978s ago: executing program 0 (id=1247): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x36, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x0, 0xa}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0xa000000}]}]}, {0x0, [0x540f8c1e011bcd59, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 6.231098744s ago: executing program 33 (id=1247): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x36, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x0, 0xa}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2, 0xa000000}]}]}, {0x0, [0x540f8c1e011bcd59, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 1.323382632s ago: executing program 5 (id=1248): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/2, 0x2, 0x2, 0x35}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/27, 0x1b, 0x1, 0x37}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tee(r3, r1, 0x9, 0xd) 1.26454467s ago: executing program 4 (id=1291): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x1ab083, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a00010000000000020000000200001f0000c808ffffffea080006000700000008000400", @ANYRES32=0x0, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000140)='GPL\x00', 0x1}, 0x90) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x1}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x28, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="7c80c06e48f9011fc415f40e0d3091062233a999d622007f02f099da3c6d8d231c71492a7c83c854b3adf3dae512bf8e2a6a6a29528879b070f852090af079fef3536da7e1b358e147bf038d78593a11824d958a550fc3ba3657374c34442fe8602df8b4c4c1c3d720ab5beab2bfa58e5e99952997cb2cc45c814a41e73874a2a2e12f77b5a8ac32e734de01faaedd6ebbe73017b0da30a0bf44cfcbb8bc82178022de14ce0ac936f09cccc6f52a12d6ca17cdf9566b6f317df8c39dc2c25635abd91bf6aed87ab3f627cd936f97bc11577e58", 0xd3) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000140)=""/54, &(0x7f00000001c0)=0x36) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/msg\x00', 0x0, 0x0) 1.264178483s ago: executing program 5 (id=1292): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) getsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000200), &(0x7f00000002c0)=0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_open_dev$admmidi(&(0x7f0000000100), 0x20, 0x0) r5 = fsopen(&(0x7f00000000c0)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0x40045731, &(0x7f0000000040)={0x1}) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="e0000000100001000000000000000000647262675f70725f686d61635f736861333834"], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_open_pts(r6, 0x20000) dup3(r8, r6, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r9, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x2}]) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x442b00, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x2b) ioctl$KDFONTOP_GET(r11, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x14, 0x0, 0xda, &(0x7f0000000480)}) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x6400, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="149cd1bd15ee37989deaae6cc6c954af6a49ef2aff3466da32fcfb17328098909c520ba3c65e57e439d81cb954e920c13cc2f8f4409788b02f53bd2e65c01cca09ad563e70cd76a0b69066040520028e8af30000000000000000", @ANYRES16=r3, @ANYBLOB="ad432bbd7000000000000d000000"], 0x14}}, 0x0) 1.134516084s ago: executing program 1 (id=1293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x19) 1.132704903s ago: executing program 4 (id=1294): sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6c7e00000000000000000c00056910232f8524d00eaa0000000000000000744200ddc2cbffd79d2443db5fbb52d8ae2c0b48d84f1f0070ed40ce7969"], 0x30}, 0x4, 0x700000000000000}, 0x40) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',rootmo']) (async) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',rootmo']) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_ethernet(0x256, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x256, &(0x7f0000000b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6021c9c902203afffe8000000000000000000000000000fcff020800ff001b00fdffffff000000000001000000000000001991319c00050aa78ce5400659808000000004000023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15085dbaf736b41e5af18020518fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129802600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000ae644af8214a9dfb3a70789635bece23241fb2d8348ca0dbd99d8ff7a4cbd6b22fb1d5ed5ac281042beab5e43b3cf0e11f89966c9dd60239d33d58c2b4d5cb7494054a21b2551541dde9c7eec95a9a84d5d165d42a2f1a26c22ac08a36234cbd71fd28f78d0a7384a03e90c45828d9af6df0cbea3b7dd1a3d4548b49bb935dcd0b6eb7e40e75ee6d9ce7183021e8bcdf2b008d33ebff77aefc338ebde59470cdc36fb83f3b3219629def5bcea6ca963fe9c390b827135bc79ec459778ef704eb8839adc18f34d86c5290f9f21f9932dd162b4737e6ff5fd9db12da70acb79056fd8ffac2a7130d3477771e7b024e6075c98308d84fb77686a7dce834260d04f93b7c49"], 0x0) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r3, 0x0, 0x0, 0x800) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000480)) (async) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000480)) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.131511559s ago: executing program 1 (id=1295): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x40000, 0x0, {0x2, 0x0, 0x0, 0x8, 0xfd, 0x1, 0xfe, 0x1, 0x3400}, [@RTA_NH_ID={0x8, 0x16, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c8}, 0x4010) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) (async, rerun: 32) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) write(r3, &(0x7f0000000080)="f0a934b51a05e0de046c45c0adb269e95d666d88a92a071b7fd85b65fa7ca296a2dfc8064271b2e790aa0622def812dba31cb8f4f00d4fdc7123cffcdf185d4dea3a149bed831f65d7f1bb041f5f2d1a3b1a37", 0x53) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x130, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x100, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_LOSS={0xb4, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0xffff, 0x0, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x4}}, @NETEM_LOSS_GE={0x11, 0x2, {0x1, 0x9, 0x1, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xcfbb, 0x2, 0x10001, 0x8, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x1003, 0xb}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x3, 0x5, 0x4, 0xea}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x8, 0x10000, 0x2, 0x7fff}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x1000}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xbba5, 0x2}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xff}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x130}}, 0x0) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000006) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000140)={0x4, 0x10000, 0x7f}) 1.063084767s ago: executing program 1 (id=1296): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/146, 0x92}, {&(0x7f0000000380)=""/203, 0xcb}], 0x2, 0x7, 0x7fff) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000140)={0x2, r0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x100007d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) pipe2$watch_queue(&(0x7f0000000100), 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) 1.062529073s ago: executing program 1 (id=1297): r0 = socket(0x23, 0x80002, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) (async) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) (async) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x140f, 0x60ceaae1ef55e4c3, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x800) getsockopt$inet_int(r3, 0x0, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 973.76239ms ago: executing program 1 (id=1298): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000200)={0x15}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff", 0x30}], 0x1}, 0x48000) 921.647696ms ago: executing program 4 (id=1299): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001a00)="381ae182b4f24854a91f6c29f81de8fb5f07ff2d67985f11bf163ab6cfa0da9c", 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x48004) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400308"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0xa840, 0x582) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f0000000180)=[{0x2, 0x10, 0x4f, &(0x7f0000001600)="b95d18caf0f5099dec6847bebb5b40a7a5161baad41a2cd16c0723cb9dd0b0691018e6267d2be114e40620d6cdfe0b13b544e300570778433b1698f31d43b79366b58b6d09e45b01ec5fda9f7caf23"}], 0x1}) 920.977733ms ago: executing program 5 (id=1300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x6, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r4, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x801, 0xadf, 0x804, 0xee01, 0x0, 0x2000, '\x00', 0x6, 0x81, 0x1, 0x3, {0x8, 0x8}, {0x4000000000006, 0x9}, {0x1, 0xd}, {0x1000000000, 0xa00}, 0x80008003, 0xa, 0xfffffffe, 0x6}}}}) write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) write$cgroup_pid(r3, &(0x7f00000002c0), 0x12) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x5}, {0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x43}, 0x20) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r8 = fcntl$dupfd(r6, 0x406, r6) sigaltstack(&(0x7f0000000000)={&(0x7f0000000080)=""/4096, 0x0, 0x1000}, 0x0) sigaltstack(0x0, &(0x7f0000001a00)={0x0}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r7, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x79c5}, {0x0, 0x30}], 0x2) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r9, 0x8917, &(0x7f0000000040)={'ip6tnl0\x00', {0x2, 0x0, @multicast1}}) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x121800, 0x50) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000000300)=ANY=[@ANYBLOB="000100000000000001010000000000000400000000000000", @ANYRES32=r10, @ANYBLOB="000000000100"/28, @ANYRES32=r0, @ANYBLOB="000000000400"/28, @ANYRES32=r11, @ANYBLOB="00000000040000000000000000000000000000000000000000000000f4234eb391695240ae1a86b5ff335b9e1515e264aa6bf5a79970d13777ff6735f44479de7bba4a56e78ab0464275934591247d425a79e09c7ee75957f7d92a0a1f251f727515315f5c1ea46774ec889499ed8cbf19318c1049d80999fa07634f5890750bf3af0487172f57b3cb4dd599070296", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00"/28]) 762.751865ms ago: executing program 1 (id=1301): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0x4, [0xf, 0xd, 0x101, 0x9, 0x0, 0x1, 0x1, 0xe, 0xe, 0xfff4, 0x9, 0x4, 0x1, 0x5, 0xd61, 0x2363, 0x3, 0x3, 0x4c, 0xff, 0x3, 0xb020, 0x8, 0x4, 0x4, 0xfff8, 0x7, 0x0, 0x14, 0x3, 0xff, 0xd, 0x5, 0x7f, 0x6, 0x4, 0x7, 0x9b, 0x1, 0x4, 0x5, 0x2, 0x3, 0x8001, 0x2, 0x9, 0x7f, 0x4], 0x1}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000100)={0x9, 0x4, 0x9}) r2 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000140)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000, 0x10000}, {0xffffffffffffffff, 0x0, 0x1000000, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffff000}]}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000240)='\x00') ppoll(&(0x7f0000000280)=[{r1}], 0x1, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={[0x7fffffff]}, 0x8) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0xfffffffffffff000, 0xfffffffff0000000}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000380)='/dev/dma_heap/system\x00') r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r5 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0xffffffffffffffff, 0x10002) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000440)={0x1, 0x3, 0xfff, 0x4000000000, 0xe18, 0x1, 0x10001, 0x6, 0xb, 0x3, 0x5, 0x5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={r4}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000a00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)={0x39c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x21f, 0x2a, [@mesh_id={0x72, 0x6}, @mic={0x8c, 0x18, {0x3c4, "52fb1f309e53", @long="fc442d21370b894b1ac1daee1fae8b21"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @random_vendor={0xdd, 0xe7, "f2cc13fd53ac85e8e3dc9ae7f2e3c1e9e62f503e6757ed9c07cb2c81a3e6862f01bf4451d2f44ef565cf23467c427bcfef4c214ef5af3a237c73d9e4b587ea7e9c2c1c532659840419e62f20b71cbfabacb0c3512049b91e9bf88b6db31e67a5827b20d20127b99ac9c5fa9139965e0ff4d09658d7f66d180317ef63433cf37cbf07c251dfdc1516c162c7c7c2043975fc2674fcc82524d960a3e36dbd236bca8300618348f2cc8c65deaafe71065d3313e1719bec5b926224bf0d9c7d8505b41b92e7f384bb80107baf20840979cbb72fbbcde3c501fe19066909e17361cb8fe19e0cd0b3096f"}, @perr={0x84, 0xcf, {0x1, 0xd, [{{0x0, 0x1}, @device_b, 0xee87, @value=@broadcast, 0x40}, {{}, @broadcast, 0x3, @void, 0x1c}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0x39}, {{0x0, 0x1}, @device_a, 0x7fff, @value, 0x40}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0x5}, {{}, @broadcast, 0x8, @void, 0xc}, {{}, @device_a, 0x4, @void, 0xc}, {{}, @device_b, 0x5, @void, 0x19}, {{}, @device_b, 0x1, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x30}, {{}, @device_a, 0x80, @void, 0x3b}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x2}, {{}, @broadcast, 0x8000, @void, 0x2f}]}}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x2, 0x9, @broadcast, 0x6, @value=@broadcast, 0x60, 0xfffffff1, @device_a, 0x3}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x6, 0xfd}}, @supported_rates={0x1, 0x5, [{0x24}, {0x12}, {0x3, 0x1}, {0x1b, 0x1}, {0x9, 0x1}]}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xe, 0xf}}, @dsss={0x3, 0x1, 0x38}]}, @NL80211_ATTR_IE={0x4e, 0x2a, [@mesh_chsw={0x76, 0x6, {0x8e, 0x40, 0x8, 0xfff3}}, @link_id={0x65, 0x12, {@from_mac, @broadcast}}, @mic={0x8c, 0x10, {0x79, "5f334a9365ae", @short="783afb04f1d57e3a"}}, @ht={0x2d, 0x1a, {0x4000, 0x3, 0x4, 0x0, {0xe, 0x13f6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x400, 0xa, 0x7}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_IE={0xcf, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @preq={0x82, 0x6d, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x4, @device_a, 0x4, @value=@broadcast, 0x80000000, 0x8ece, 0x7, [{{0x0, 0x0, 0x1}, @device_b, 0x40}, {{0x1}, @device_b, 0x100}, {{}, @device_b, 0x7fffffff}, {{}, @device_b}, {{0x1, 0x0, 0x1}, @broadcast, 0xf2}, {{0x0, 0x0, 0x1}, @device_a, 0x6}, {{0x1, 0x0, 0x1}, @device_b, 0x1}]}}, @measure_req={0x26, 0x57, {0xd, 0x7, 0xf7, "c2412a35330726080e7113af52f50e2421f463002ded58c434fc88c7e1bd768630c52521b8dad0925e825e26445c5023b631c603b9960c4e7e3d9f255144de176aefc4c52b8cbdf68c6a989504e470597f914e5c"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0x13, 0x2a, [@cf={0x4, 0x6, {0x1, 0x0, 0x0, 0x5}}, @supported_rates={0x1, 0x5, [{0x18}, {0x16}, {0x4}, {0x36, 0x1}, {0x36, 0x1}]}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xdfa0}]}, 0x39c}, 0x1, 0x0, 0x0, 0x44009}, 0x240400cd) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000a80), r6) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x58dafce75223fe2c}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r8, 0x201, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x880) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, 0x0, 0x128, 0x9, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4015}, 0x4000) r10 = syz_open_dev$dri(&(0x7f0000000c80), 0x3, 0x40c0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000cc0)={0x0, 0x0, r4}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r9) sendmsg$NL80211_CMD_GET_KEY(r9, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x88, r11, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "daef956e22c12e3b884a94af5e"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc5}, 0x10) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x1e, &(0x7f0000000ec0)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa, 0x1, 0xb, 0xffffffffffffffc0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x4, 0x9, 0x0, 0x214, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000fc0)='syzkaller\x00', 0xd322, 0xcf, &(0x7f0000001000)=""/207, 0x41000, 0x22, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000001100)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001140)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001180)=[{0x0, 0x5, 0x8, 0xc}, {0x3, 0x1, 0xc, 0x2}, {0x2, 0x1, 0x10, 0x8}, {0x4, 0x5, 0x4}, {0x2, 0x2, 0xd, 0x7}, {0x3, 0x2, 0x1, 0x1}, {0x2, 0x5, 0x1, 0x2}, {0x0, 0x1, 0x1, 0x4}, {0x0, 0x2, 0xd, 0x8}], 0x10, 0xf91}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000001380)={'syztnl0\x00', &(0x7f0000001300)={'ip6tnl0\x00', 0x0, 0x4, 0x10, 0x57, 0x8, 0x10, @dev={0xfe, 0x80, '\x00', 0x2f}, @private1, 0x40, 0x80, 0xa9, 0xfd}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000013c0)={r12, r13, 0x25, 0xc, @val=@perf_event={0xfff}}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001480)={'syztnl1\x00', &(0x7f0000001400)={'syztnl2\x00', r13, 0x2f, 0x6, 0x1, 0x8, 0x61, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7800, 0x9, 0x3}}) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000001580)={&(0x7f00000014c0), 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x20, r11, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) close_range(r12, r6, 0x0) 762.284137ms ago: executing program 2 (id=1302): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8009, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x6, 0x1, 0x3, "600efe3287fda55aab2500007d7cc400", 0x50313459}) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x153, &(0x7f0000000800)={@link_local, @broadcast, @val={@val={0x88a8, 0x3, 0x0, 0x4}}, {@ipv6={0x86dd, @tipc_packet={0x3, 0x6, "721c6e", 0x115, 0x6, 0x0, @mcast1, @mcast2, {[@dstopts={0x1, 0x9, '\x00', [@hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x4}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0xc3}, @calipso={0x7, 0x20, {0x1, 0x6, 0x0, 0x8, [0x4, 0x7, 0xffffffffffffffff]}}]}, @fragment={0x3c, 0x0, 0xff, 0x1, 0x0, 0x0, 0x64}, @routing={0x32, 0xa, 0x1, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @remote, @remote, @mcast2, @mcast1]}, @routing={0x0, 0x6, 0x0, 0x81, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], @payload_direct={{{{0x25, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x2, 0x5, 0x0, 0x3, 0x3, 0x2, 0x3, 0x7a0, 0x0, 0x3, 0x4e22, 0x4e21}, 0x0, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0x8) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2b, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xf}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0x354a0ebf, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'gcm(aes)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 602.377134ms ago: executing program 2 (id=1303): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/139) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xb) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x0, 0x1000, 0x6, &(0x7f0000000140)="f5427aa51f46", 0xb5, 0x0, &(0x7f0000000180)="c06f64d43b0332b64727856b73985d5953cf217ed914da3f292dcef14125f78646feecfa69d65da9754fc1b36c390180e637ceb68945b21cdc8c1316f37598fc85366e4e281ebdd961f25f3087378a08b5ce2f48452df2cbac9e6cb222bf2fe3478649c3348aeaa59e91b12304a4e98dc5184405b6da77a729d1ceeff52d92d743652b894813cb74ce69e28108199c2addf79ceb7a16e1a1eeb91ac9329c8d802c59254acd00780c9fd570afc100bc61f0327f75aa"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000002c0)={0xeeee0000, 0x10000, 0x3, 0x1, 0x4}) utimes(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={{0x0, 0x2710}, {0x77359400}}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x11c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x64}}}}, [@NL80211_ATTR_MESH_SETUP={0xd8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x40}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_IE={0x9e, 0x3, "3f733e64caedaa48a0a3d3e31a72ad15150f2fbb914bef60a94bf0f32a52f3b0e6c91f1a67b007116af0085e3789e92d361e12030985a8d3f20694622a106c01454331693a1b7738d6615270e99b47292f12e6ed315547f0a0107190ad19fa10f63ee40a245d423f0f9cac52832f3bbf5467a40d4f32c6b003a7680866de33162467f530112a60e0511c3e5c4b2bb4d3bdd6e7bbf1c53f386f4e"}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x327}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40881) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x5627478f, 0x2e}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x37}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x4a}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4b1, 0x64}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040081}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000780), 0x240000, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f00000007c0)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000840)={[0x4, 0x8001, 0x4, 0x53, 0x5, 0x1, 0x1, 0x3, 0x0, 0xdd, 0x6, 0x1, 0x1, 0x4, 0x3, 0x3], 0x0, 0x4000}) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000900)={0x3, 0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000980)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0/../file0\x00'}) r6 = accept4(r2, &(0x7f00000009c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000a40)=0x80, 0x800) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000a80)={0x5, "939be42cc7c1d1e63123eeeecd9f4b857e7b7542bd89dbf35faf92ed3f82cd49", 0x20, 0x1, 0x3c3, 0x5, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000b40)={0x3, &(0x7f0000000b00)=[{0x8000, 0x3, 0x1, 0x81}, {0x8000, 0x4, 0x4, 0x9}, {0xf, 0x0, 0x4, 0x6}]}) recvmsg$can_bcm(r6, &(0x7f0000002c40)={&(0x7f0000000b80)=@tipc=@name, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x1, &(0x7f0000001c40)=""/4096, 0x1000}, 0x2) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000002cc0)={0x3, &(0x7f0000002c80)=[{0x8, 0x3, 0xc, 0x5}, {0x0, 0x2, 0x2, 0x7}, {0x1ff, 0x5, 0x1, 0x8}]}) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000002d00)) sendmsg$ETHTOOL_MSG_EEE_SET(r1, 0xfffffffffffffffc, 0x4000000) connect(r2, &(0x7f0000002d80)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x80) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xb) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r7, 0x4068aea3, &(0x7f0000002e00)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000002e80)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000002ec0)={r8}) 601.43216ms ago: executing program 2 (id=1304): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) (async) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) (async, rerun: 64) write$vhost_msg_v2(r1, &(0x7f0000000740)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x6, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x1c0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5"}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008"], 0x178}}, 0x0) 521.310355ms ago: executing program 2 (id=1305): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/100, &(0x7f0000000080)=0x64) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x424, 0x3f3, 0x0, 0x70bd29, 0x25dfdbfd, {0x2, 0x2, 0x8, [0xe1a, 0x7, 0x7f, 0x7, 0x7, 0x6, 0x0, 0xe, 0x2, 0x6, 0x9, 0xb8, 0x4, 0x4, 0x9, 0x3, 0x9, 0x9, 0xfffffff8, 0x2, 0x8, 0xdc53, 0x0, 0x7fffffff, 0x7, 0x25, 0xfffffff8, 0xfffffffb, 0x7, 0x8000, 0xffffffff, 0x7, 0x6, 0x623d, 0xd, 0x0, 0x8, 0x1, 0x10, 0x153, 0xd137, 0x7, 0x1000, 0x10, 0x7, 0x5b94, 0x8001, 0x1, 0x1c7, 0xa, 0x10, 0x5, 0x7, 0x2e69, 0x3, 0x9, 0xff, 0x9, 0x3, 0x4c3f0ec7, 0x69ca, 0x1, 0x9, 0x200], [0x4, 0x7, 0x6, 0x2, 0xff, 0x9, 0x0, 0x1, 0x10, 0x6, 0x2, 0x8001, 0x265, 0x8, 0x6, 0x800, 0x5, 0xfffffffd, 0x8, 0x70da, 0x5, 0xb2, 0x8, 0x7, 0x10000, 0x742, 0x3, 0xff, 0x401, 0x6, 0x6b1, 0xd, 0x7fffffff, 0xc, 0x243b, 0xc3, 0x5, 0xffff, 0x8, 0xe79f, 0x8001, 0xdd, 0x8, 0x0, 0x4, 0x8, 0x80000000, 0x80000000, 0x2de4304c, 0x0, 0xee, 0x0, 0xffffffff, 0xc565, 0x0, 0x1000, 0x4, 0x94, 0x5, 0x5, 0x7, 0x4, 0x7fffffff, 0x2], [0x7, 0x2f2, 0x8, 0x0, 0x5, 0x5, 0x2, 0x1, 0x8, 0x1e2d, 0x401, 0x0, 0x7, 0x7, 0x107e, 0x9, 0x2, 0x1ff, 0x400, 0x9, 0x7, 0x7, 0x8, 0x9, 0x6, 0x7, 0x1ff, 0xfffffffd, 0x6, 0x9000000, 0x1, 0xd4c, 0x4, 0x5, 0xfffff001, 0x0, 0x33d, 0x4, 0x4, 0x6, 0xfffffff8, 0x9, 0x0, 0x0, 0x81, 0x6a, 0x4, 0x5, 0x2, 0x400, 0xb, 0xfffff2a3, 0xd2, 0xc, 0x5, 0x81, 0x2, 0x7, 0x8, 0x9, 0x7, 0x2, 0x6, 0xff], [0x80000000, 0x2f4e, 0x101, 0x3, 0x7f, 0xc, 0xffff, 0x38, 0x1, 0x80000001, 0xffffffff, 0x4, 0x4, 0x2, 0x8, 0xd2, 0x6, 0xc, 0xffffffff, 0xff7, 0x1, 0x3, 0x7fff, 0xd, 0x10000, 0x65e, 0x8, 0x7, 0x5d4a, 0x8, 0xe, 0x5, 0x9, 0x7fffffff, 0x2000000, 0x200, 0x7, 0x93, 0x9, 0xe44d, 0x8, 0x8, 0x9d, 0x266, 0x7, 0x9, 0x3, 0x7, 0x7, 0x7, 0x10000, 0xfffffff8, 0xfb, 0xb, 0x45d8, 0x8ad, 0x1, 0x5, 0x54c2, 0x1, 0x3, 0xffffffff, 0xffffffff], 0x2, [']\x00']}, ["", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x880}, 0x8040) r1 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x2, 0xa0000) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x10, 0x3f2, 0x400, 0x70bd2c, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x840) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000740)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, '/dev/vcs#\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, ']\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '*\x01'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000841) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000900)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r1, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x48, 0x5, 0x5c, @empty, @mcast2, 0x8, 0x80, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b80)={'syztnl2\x00', 0x0, 0x700, 0x7, 0x56b, 0x80, {{0x18, 0x4, 0x0, 0x14, 0x60, 0x66, 0x0, 0x5, 0x2f, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0xc, 0xba, 0x3, 0x1, [{@multicast2, 0x7}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0xb8, [@private=0xa010102, @rand_addr=0x64010102, @private=0xa010100, @private=0xa010102, @local, @multicast2]}, @lsrr={0x83, 0x1b, 0x2d, [@multicast1, @loopback, @broadcast, @private=0xa010101, @multicast2, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000cc0)={'ip_vti0\x00', &(0x7f0000000c40)={'gre0\x00', 0x0, 0x10, 0x10, 0x3ff, 0x40, {{0x18, 0x4, 0x0, 0x1, 0x60, 0x65, 0x0, 0xb, 0x29, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0x24, 0xfa, 0x1, 0x2, [{@local, 0x1}, {@loopback, 0x1}, {@private=0xa010100, 0x4}, {@multicast1, 0x9}]}, @ssrr={0x89, 0xf, 0xf5, [@private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x1c}]}, @rr={0x7, 0x17, 0x90, [@broadcast, @remote, @loopback, @multicast1, @local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000dc0)={r1, 0x58, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000e00)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000f00)={'erspan0\x00', &(0x7f0000000e40)={'sit0\x00', 0x0, 0x8000, 0x18, 0xfffffff7, 0x7, {{0x25, 0x4, 0x1, 0x4, 0x94, 0x68, 0x0, 0x3, 0x4, 0x0, @empty, @loopback, {[@cipso={0x86, 0xb, 0xffffffffffffffff, [{0x7, 0x5, "1b8030"}]}, @end, @noop, @cipso={0x86, 0x70, 0x2, [{0x1, 0x9, "7a5cbb36b672ce"}, {0x7, 0x7, "e8c61ce9ce"}, {0x2, 0x12, "ac08a2ae0e51b5f9b86f51911a33fe55"}, {0x2, 0x5, "165733"}, {0x0, 0x12, "21ca3985db4cbf9337c634c70480cb83"}, {0x6, 0xf, "31ef9ea40a2ec944592fa61cf2"}, {0x0, 0x3, '}'}, {0x6, 0xb, "8ee747a4d39c295cc0"}, {0x6, 0xb, "454a3565ead5a1cbb8"}, {0x5, 0x9, "310ae7b3d15112"}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001740)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001700)={&(0x7f0000000f40)={0x7a4, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x204, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xed}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7022}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6afb}}}]}}, {{0x8, 0x1, r7}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1c, 0x7, 0x8, 0x7fff}, {0xd, 0xf, 0x8, 0x101}, {0xa0, 0x55, 0xb}, {0x40, 0x7, 0xa, 0xfff}, {0x40, 0x4, 0x10, 0x8ab}]}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x36}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x310}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4d}}, {0x8, 0x6, r11}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9b70, 0xe9, 0x30, 0x7}, {0x9, 0x8, 0xb, 0x7}, {0x2, 0x2, 0x26, 0xffff}, {0x0, 0xb3, 0xf, 0xe}, {0x4, 0xc, 0xb, 0x10001}, {0xbb3d, 0x15, 0xfa, 0xf4000000}, {0xb, 0x9, 0xa5, 0x211f}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x78085876}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x44}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x7a4}, 0x1, 0x0, 0x0, 0x808}, 0x4000000) io_uring_enter(r1, 0x7eb7, 0x871e, 0x2, &(0x7f0000001780)={[0x1]}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000017c0)={r14, 0x1, 0x18}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001840)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001880)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001940)={'syztnl1\x00', &(0x7f00000018c0)={'syztnl2\x00', r11, 0x40, 0x1, 0x7, 0x3ff, {{0xc, 0x4, 0x3, 0x2f, 0x30, 0x68, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x83, 0xf, "27d765704c42340f0805c6a022"}, @ssrr={0x89, 0xb, 0x8b, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001980)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000019c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002680)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002640)={&(0x7f0000001bc0)={0xa48, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd12}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r18}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r11}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x318}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r19}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5a11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r17}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc18}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff27c5}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3, 0x8, 0x5, 0x3}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x0, 0x90, 0x3}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5a72e2f7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8, 0x1, r22}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1756}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r16}}}]}}]}, 0xa48}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 441.855457ms ago: executing program 2 (id=1306): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003f000900000000000000000001000000040000000c000180080010803081cb2b08000200", @ANYRES32, @ANYBLOB="bdced74c5ef0c225deec3e309d6a03c90b6be18f0e5f1c9897617e0178c346e646d8c11ef8be76e57a72092c016ccebd0c2780820e89f12a2991e688b9ab92484f32ab460386617991f177cc0a0d64a96c3829f263aeca29132ac7cb541ae34fb688dc9cacff9e927b378521d99b5e0c824e10da7acbb6339b57c0ee51f55cb4b9dd82b5178a"], 0x2c}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x1800001, 0x20100) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket(0x10, 0x3, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0x2) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x52, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x10010, r5, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ptrace$getregset(0x4204, r2, 0x204, &(0x7f0000000040)={0x0}) (async) ioctl$SG_BLKSECTGET(r1, 0x1267, &(0x7f0000000180)) 386.535532ms ago: executing program 2 (id=1307): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) r1 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) gettid() (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_submit(0x0, 0x0, &(0x7f0000000e40)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100033060000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000aa00000000000000000200000062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000232000000fe880000000000000000000000000001000000000000009aaf0a3f012d94f600000000000000000000000000000000000000000000000000fdffffffdfffff070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a000000000000004c001400726d643136300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04000418"], 0x7) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$6lowpan_control(r5, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) write$6lowpan_control(r5, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 0', 0x1b) (async) write$6lowpan_control(r5, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 386.283745ms ago: executing program 4 (id=1308): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x30d, 0xc, 0x0, 0x81, 0x42, @local}, 0x10) connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r2 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x135}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_register$IORING_REGISTER_FILES(r2, 0x24, &(0x7f0000000280), 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) 321.321795ms ago: executing program 4 (id=1309): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r4, 0x25, 0x0, @val=@tracing={0x0, 0xfffffffffffffff7}}, 0x20) syz_emit_ethernet(0x6a, &(0x7f0000003540)={@local, @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x5}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x2, 0x58, 0x66, 0x0, 0xe, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0xe0}, 0x1, {0x3ff}}}, {0x8, 0x22eb, 0x4000003, {{0x9, 0x2, 0xfd, 0x3, 0x0, 0x2, 0x6, 0x1}, 0x2, {0x2, 0x101, 0x2, 0x4, 0x1, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 250.309094ms ago: executing program 4 (id=1310): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f00000001c0)=0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=1311): r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x82209500, &(0x7f0000000000)="84a21d345ce708597f5ba5aaf4f449a12d02fdac8c0bef5f90e956199d7a50d21826ae480bf15e9ad0a20943414d30b0e7217de9e7bbf818c4aa31383e4a24d9b4eb95", 0x43, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="db773a9176daeede9de39b06cbb08b30ed0895a532a0b12d6c853d4de7a2eb178a5fecce6221a275c4d2a8a39e924ccab596a68c0feef031ef690ee17dd0846e70d02d2966a0b328bd9437b93c2ed98046b42808fef41afb2d5c52c86f670382de9b23cee69709a5083affab96107f35fd916a8e") (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (rerun: 32) timer_create(0x6, &(0x7f00000011c0)={0x0, 0x35, 0x3, @thr={&(0x7f0000000180)="a795165821f0f5ad9889de0c", &(0x7f00000001c0)="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"}}, &(0x7f0000001200)) kernel console output (not intermixed with test programs): T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 79.501237][ T40] audit: type=1326 audit(1761124262.714:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.1.342" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ac98eec9 code=0x7fc00000 [ 79.515984][ T40] audit: type=1326 audit(1761124262.714:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.1.342" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ac98eec9 code=0x7fc00000 [ 79.525876][ T40] audit: type=1326 audit(1761124262.714:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.1.342" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ac98eec9 code=0x7fc00000 [ 79.533389][ T40] audit: type=1326 audit(1761124262.714:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.1.342" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ac98eec9 code=0x7fc00000 [ 79.541384][ T40] audit: type=1326 audit(1761124262.714:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7712 comm="syz.1.342" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ac98eec9 code=0x7fc00000 [ 79.710823][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.349'. [ 79.801843][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 79.860586][ T7776] bond1: Invalid ad_actor_system MAC address. [ 79.865000][ T7776] bond1: option ad_actor_system: invalid value (255) [ 79.886306][ T7778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7778 comm=syz.2.350 [ 79.887877][ T7776] bond1 (unregistering): Released all slaves [ 80.107618][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'. [ 80.110526][ T7852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.197809][ T7852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.278498][ T7856] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 80.343669][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 80.549160][ T7880] 9pnet: Could not find request transport: xen [ 80.710204][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 80.713914][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 80.718042][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 80.805337][ T7897] kAFS: unparsable volume name [ 81.884292][ T7946] ip6erspan0: entered promiscuous mode [ 82.076862][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.280416][ T7968] 9pnet_virtio: no channels available for device syz [ 82.286116][ T7967] 9pnet_virtio: no channels available for device syz [ 83.015113][ T7959] comedi comedi3: reset error (fatal) [ 86.592161][ T841] cfg80211: failed to load regulatory.db [ 89.009928][ T7993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.374'. [ 89.307121][ C1] sched: DL replenish lagged too much [ 89.499886][ T8003] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.503982][ T8003] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.767624][ T8003] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.771654][ T8003] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.057734][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 90.057751][ T40] audit: type=1400 audit(1761124273.334:494): avc: denied { accept } for pid=8029 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 90.316973][ T8044] netlink: 'syz.2.381': attribute type 1 has an invalid length. [ 90.319622][ T8044] netlink: 224 bytes leftover after parsing attributes in process `syz.2.381'. [ 90.586018][ T8003] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.595141][ T8003] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.659326][ T8072] netlink: 604 bytes leftover after parsing attributes in process `syz.1.388'. [ 94.529352][ T8068] netlink: 'syz.1.388': attribute type 29 has an invalid length. [ 94.542252][ T8072] macsec1: entered promiscuous mode [ 94.543921][ T8072] macsec1: entered allmulticast mode [ 94.656648][ T40] audit: type=1400 audit(1761124277.914:495): avc: denied { read } for pid=5643 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 94.683217][ T40] audit: type=1400 audit(1761124277.944:496): avc: denied { search } for pid=5643 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.692346][ T40] audit: type=1400 audit(1761124277.944:497): avc: denied { search } for pid=5643 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.705085][ T40] audit: type=1400 audit(1761124277.944:498): avc: denied { search } for pid=5643 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.717609][ T40] audit: type=1400 audit(1761124277.944:499): avc: denied { read } for pid=5643 comm="dhcpcd" name="n103" dev="tmpfs" ino=3317 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.735014][ T40] audit: type=1400 audit(1761124277.944:500): avc: denied { open } for pid=5643 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=3317 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.761280][ T40] audit: type=1400 audit(1761124277.944:501): avc: denied { getattr } for pid=5643 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=3317 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.057278][ T8003] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.070243][ T8003] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.131758][ T40] audit: type=1400 audit(1761124278.404:502): avc: denied { read write } for pid=8096 comm="syz.2.391" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 95.146297][ T40] audit: type=1400 audit(1761124278.414:503): avc: denied { open } for pid=8096 comm="syz.2.391" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 95.436742][ T5931] Bluetooth: hci1: command 0x0406 tx timeout [ 95.836919][ T7942] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.839590][ T7942] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.871417][ T7942] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.873904][ T7942] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.887545][ T7942] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.895703][ T7942] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.928461][ T7942] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.931045][ T7942] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.100208][ T40] audit: type=1400 audit(1761124279.374:504): avc: denied { kexec_image_load } for pid=8139 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 97.161741][ T8164] capability: warning: `syz.0.402' uses 32-bit capabilities (legacy support in use) [ 97.242849][ T8164] bond1: peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 97.271422][ T8164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.526060][ T8205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.404'. [ 97.645103][ T40] audit: type=1400 audit(1761124280.914:505): avc: denied { ioctl } for pid=8201 comm="syz.1.403" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.818320][ T40] audit: type=1400 audit(1761124281.094:506): avc: denied { read write } for pid=8217 comm="syz.1.407" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.833333][ T40] audit: type=1400 audit(1761124281.104:507): avc: denied { open } for pid=8217 comm="syz.1.407" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.844450][ T40] audit: type=1400 audit(1761124281.104:508): avc: denied { ioctl } for pid=8217 comm="syz.1.407" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.954304][ T8220] fuse: Bad value for 'group_id' [ 97.957966][ T8220] fuse: Bad value for 'group_id' [ 98.035074][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.065115][ T841] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 98.072558][ T7950] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.088871][ T7950] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.105171][ T5997] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.206065][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 98.210270][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.213708][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.225000][ T841] usb 6-1: Using ep0 maxpacket: 32 [ 98.228225][ T841] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 98.230841][ T841] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 98.234219][ T841] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 98.240535][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.245057][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 98.252825][ T841] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 98.260084][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.273795][ T841] usb 6-1: config 0 interface 0 has no altsetting 0 [ 98.279715][ T24] usb 5-1: config 0 descriptor?? [ 98.286345][ T841] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 98.289248][ T841] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 98.313764][ T841] usb 6-1: Product: syz [ 98.323674][ T841] usb 6-1: Manufacturer: syz [ 98.354210][ T841] usb 6-1: SerialNumber: syz [ 98.366555][ T841] usb 6-1: config 0 descriptor?? [ 98.380507][ T40] audit: type=1400 audit(1761124281.644:509): avc: denied { mount } for pid=8243 comm="syz.3.411" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 98.397963][ T841] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 98.425239][ T841] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 98.475189][ T5942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.525411][ T5942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.686190][ T24] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 98.688429][ T24] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 98.693361][ T24] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 98.696354][ T24] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 98.698564][ T24] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 98.701178][ T24] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 98.920268][ T24] usb 5-1: USB disconnect, device number 4 [ 99.936091][ T841] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 100.279750][ T841] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 100.283425][ T841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.295417][ T841] usb 7-1: Product: syz [ 100.297244][ T841] usb 7-1: Manufacturer: syz [ 100.299133][ T841] usb 7-1: SerialNumber: syz [ 100.328512][ T841] usb 7-1: config 0 descriptor?? [ 100.390257][ T40] audit: type=1400 audit(1761124283.664:510): avc: denied { bind } for pid=8334 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 100.621053][ T8353] /dev/nullb0: Can't open blockdev [ 100.781738][ T8355] syz.1.424: vmalloc error: size 3429728256, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 100.797781][ T8355] CPU: 0 UID: 0 PID: 8355 Comm: syz.1.424 Not tainted syzkaller #0 PREEMPT(full) [ 100.797803][ T8355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.797810][ T8355] Call Trace: [ 100.797814][ T8355] [ 100.797820][ T8355] dump_stack_lvl+0x16c/0x1f0 [ 100.797845][ T8355] warn_alloc+0x248/0x3a0 [ 100.797866][ T8355] ? __pfx_warn_alloc+0x10/0x10 [ 100.797881][ T8355] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.797909][ T8355] ? kasan_save_stack+0x42/0x60 [ 100.797928][ T8355] ? kasan_save_stack+0x33/0x60 [ 100.797943][ T8355] ? kasan_save_track+0x14/0x30 [ 100.797962][ T8355] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 100.797979][ T8355] ? __vb2_queue_alloc+0x8c9/0x1280 [ 100.797994][ T8355] ? vb2_core_create_bufs+0x559/0xab0 [ 100.798012][ T8355] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 100.798030][ T8355] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 100.798060][ T8355] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 100.798084][ T8355] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 100.798115][ T8355] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 100.798130][ T8355] vmalloc_user_noprof+0x9e/0xe0 [ 100.798154][ T8355] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 100.798180][ T8355] vb2_vmalloc_alloc+0x135/0x3f0 [ 100.798199][ T8355] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 100.798214][ T8355] __vb2_queue_alloc+0x8c9/0x1280 [ 100.798241][ T8355] vb2_core_create_bufs+0x559/0xab0 [ 100.798263][ T8355] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 100.798287][ T8355] ? __mutex_trylock_common+0xe9/0x250 [ 100.798309][ T8355] vb2_create_bufs+0x5e8/0x840 [ 100.798326][ T8355] ? __pfx_vb2_create_bufs+0x10/0x10 [ 100.798349][ T8355] ? __mutex_lock+0x1c5/0x1060 [ 100.798370][ T8355] ? v4l_sanitize_colorspace+0x213/0x400 [ 100.798395][ T8355] vb2_ioctl_create_bufs+0x244/0x3e0 [ 100.798409][ T8355] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 100.798437][ T8355] vidioc_create_bufs+0x7d/0xf0 [ 100.798462][ T8355] v4l_create_bufs+0x151/0x260 [ 100.798481][ T8355] __video_do_ioctl+0xb77/0xf00 [ 100.798505][ T8355] ? __might_fault+0xe3/0x190 [ 100.798522][ T8355] ? __pfx___video_do_ioctl+0x10/0x10 [ 100.798554][ T8355] video_usercopy+0x4d0/0x1720 [ 100.798573][ T8355] ? __pfx___video_do_ioctl+0x10/0x10 [ 100.798594][ T8355] ? selinux_kernel_read_file+0xf0/0x130 [ 100.798616][ T8355] ? __pfx_video_usercopy+0x10/0x10 [ 100.798651][ T8355] v4l2_ioctl+0x1bd/0x250 [ 100.798670][ T8355] ? __pfx_v4l2_ioctl+0x10/0x10 [ 100.798693][ T8355] __x64_sys_ioctl+0x18e/0x210 [ 100.798712][ T8355] do_syscall_64+0xcd/0xfa0 [ 100.798732][ T8355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.798748][ T8355] RIP: 0033:0x7f63ac98eec9 [ 100.798760][ T8355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.798775][ T8355] RSP: 002b:00007f63ad743038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.798788][ T8355] RAX: ffffffffffffffda RBX: 00007f63acbe5fa0 RCX: 00007f63ac98eec9 [ 100.798796][ T8355] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000005 [ 100.798806][ T8355] RBP: 00007f63aca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 100.798815][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.798824][ T8355] R13: 00007f63acbe6038 R14: 00007f63acbe5fa0 R15: 00007ffceac77ab8 [ 100.798847][ T8355] [ 100.798853][ T8355] Mem-Info: [ 101.125101][ T8355] active_anon:32687 inactive_anon:32916 isolated_anon:0 [ 101.125101][ T8355] active_file:2738 inactive_file:56147 isolated_file:0 [ 101.125101][ T8355] unevictable:1768 dirty:28 writeback:0 [ 101.125101][ T8355] slab_reclaimable:12094 slab_unreclaimable:69868 [ 101.125101][ T8355] mapped:37719 shmem:55179 pagetables:1288 [ 101.125101][ T8355] sec_pagetables:304 bounce:0 [ 101.125101][ T8355] kernel_misc_reclaimable:0 [ 101.125101][ T8355] free:403287 free_pcp:8152 free_cma:0 [ 101.246190][ T8355] Node 0 active_anon:89856kB inactive_anon:131664kB active_file:7384kB inactive_file:224384kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:149116kB dirty:112kB writeback:0kB shmem:178340kB shmem_thp:4096kB shmem_pmdmapped:4096kB anon_thp:0kB kernel_stack:13744kB pagetables:4720kB sec_pagetables:1216kB all_unreclaimable? yes Balloon:0kB [ 101.293579][ T8355] Node 1 active_anon:45108kB inactive_anon:0kB active_file:3568kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3620kB dirty:0kB writeback:0kB shmem:46468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:336kB pagetables:432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 101.333585][ T8355] Node 0 DMA free:6564kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4100kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 101.369661][ T8355] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 101.373707][ T8355] Node 0 DMA32 free:80668kB boost:49152kB min:76700kB low:83584kB high:90468kB reserved_highatomic:0KB free_highatomic:0KB active_anon:85756kB inactive_anon:131664kB active_file:7384kB inactive_file:224384kB unevictable:3536kB writepending:112kB zspages:0kB present:2080628kB managed:1265704kB mlocked:0kB bounce:0kB free_pcp:12360kB local_pcp:4800kB free_cma:0kB [ 101.402364][ T8355] lowmem_reserve[]: 0 0 0 0 0 [ 101.405009][ T8355] Node 1 Normal free:1509264kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55400kB inactive_anon:0kB active_file:3568kB inactive_file:204kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:22176kB local_pcp:7200kB free_cma:0kB [ 101.426705][ T8355] lowmem_reserve[]: 0 0 0 0 0 [ 101.431016][ T8355] Node 0 DMA: 19*4kB (UM) 40*8kB (UM) 39*16kB (UM) 24*32kB (UM) 21*64kB (UM) 13*128kB (UM) 3*256kB (U) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 6588kB [ 101.440186][ T8355] Node 0 DMA32: 687*4kB (UM) 1481*8kB (U) 1020*16kB (UME) 857*32kB (UME) 237*64kB (UME) 35*128kB (UM) 10*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 80548kB [ 101.451008][ T8355] Node 1 Normal: 2*4kB (UE) 5*8kB (E) 1*16kB (E) 0*32kB 8*64kB (UME) 5*128kB (UE) 1*256kB (M) 1*512kB (U) 1*1024kB (E) 1*2048kB (M) 366*4096kB (M) = 1504192kB [ 101.461916][ T8355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.468185][ T8355] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.474474][ T8355] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.480769][ T8355] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.485791][ T8355] 119268 total pagecache pages [ 101.489665][ T8355] 0 pages in swap cache [ 101.492128][ T8355] Free swap = 124996kB [ 101.494586][ T8355] Total swap = 124996kB [ 101.498179][ T8355] 1048443 pages RAM [ 101.500528][ T8355] 0 pages HighMem/MovableOnly [ 101.503138][ T8355] 282704 pages reserved [ 101.505914][ T8355] 0 pages cma reserved [ 101.583392][ T1029] usb 7-1: USB disconnect, device number 8 [ 101.947122][ T5980] usb 6-1: USB disconnect, device number 2 [ 101.953358][ T5980] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 102.065149][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 102.255412][ T40] audit: type=1400 audit(1761124285.514:511): avc: denied { bind } for pid=8389 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.273239][ T40] audit: type=1400 audit(1761124285.514:512): avc: denied { node_bind } for pid=8389 comm="syz.2.430" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 102.291825][ T40] audit: type=1400 audit(1761124285.514:513): avc: denied { name_bind } for pid=8389 comm="syz.2.430" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 102.301424][ T40] audit: type=1400 audit(1761124285.564:514): avc: denied { map } for pid=8406 comm="syz.2.431" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.310046][ T40] audit: type=1400 audit(1761124285.564:515): avc: denied { execute } for pid=8406 comm="syz.2.431" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.641067][ T40] audit: type=1400 audit(1761124285.914:516): avc: denied { create } for pid=8433 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 102.669968][ T8434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65295 sclass=netlink_route_socket pid=8434 comm=syz.3.436 [ 102.716439][ T3562] IPVS: starting estimator thread 0... [ 102.733148][ T40] audit: type=1400 audit(1761124286.004:517): avc: denied { setcheckreqprot } for pid=8437 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 102.733252][ T8438] SELinux: syz.2.437 (8438) set checkreqprot to 1. This is no longer supported. [ 102.789379][ T40] audit: type=1400 audit(1761124286.064:518): avc: denied { execute } for pid=8444 comm="syz.1.438" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.795634][ T8451] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 102.815492][ T8439] IPVS: using max 45 ests per chain, 108000 per kthread [ 102.936147][ T8471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.443'. [ 102.983838][ T8474] overlay: ./file0 is not a directory [ 102.989810][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 103.068415][ T40] audit: type=1400 audit(1761124286.344:519): avc: denied { connect } for pid=8483 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.516691][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 103.558534][ T8506] ufs: You didn't specify the type of your ufs filesystem [ 103.558534][ T8506] [ 103.558534][ T8506] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 103.558534][ T8506] [ 103.558534][ T8506] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 103.568944][ T8506] ufs: failed to set blocksize [ 103.573943][ T8506] netlink: 'syz.1.451': attribute type 21 has an invalid length. [ 103.576956][ T8506] netlink: 156 bytes leftover after parsing attributes in process `syz.1.451'. [ 103.623240][ T8512] XFS (nbd1): no-recovery mounts must be read-only. [ 103.657585][ T8515] team0: No ports can be present during mode change [ 103.763191][ T8530] tmpfs: Cannot disable swap on remount [ 103.809708][ T8536] EXT4-fs (nbd0): unable to read superblock [ 104.060319][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'. [ 104.062912][ T8559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'. [ 104.206938][ T8572] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 104.216855][ T8572] pim6reg: entered allmulticast mode [ 104.321918][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 104.616775][ T8594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.468'. [ 104.660681][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'. [ 104.916031][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'. [ 105.017631][ T8629] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8629 comm=syz.3.478 [ 105.126810][ T8648] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 105.188736][ T3562] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 105.345183][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 105.352638][ T3562] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.358839][ T3562] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.362763][ T3562] usb 6-1: config 0 interface 0 has no altsetting 0 [ 105.365492][ T3562] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 105.369143][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.385029][ T3562] usb 6-1: config 0 descriptor?? [ 105.427576][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 105.427591][ T40] audit: type=1400 audit(1761124288.704:534): avc: denied { setopt } for pid=8660 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.499495][ T40] audit: type=1400 audit(1761124288.774:535): avc: denied { mount } for pid=8664 comm="syz.2.485" name="/" dev="autofs" ino=14133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 105.769844][ T40] audit: type=1400 audit(1761124289.044:536): avc: denied { execute } for pid=8673 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 105.776870][ T40] audit: type=1400 audit(1761124289.044:537): avc: denied { execute_no_trans } for pid=8673 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 105.797048][ T3562] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 105.799238][ T3562] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 105.801401][ T3562] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 105.803585][ T3562] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 105.806740][ T3562] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 105.810029][ T3562] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 105.925044][ T1029] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 105.935483][ T5931] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.939645][ T5931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.944386][ T5931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.948876][ T5931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.952051][ T5931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.959079][ T40] audit: type=1400 audit(1761124289.234:538): avc: denied { mounton } for pid=8682 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 105.993148][ T40] audit: type=1400 audit(1761124289.264:539): avc: denied { read write } for pid=8618 comm="syz.1.475" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 105.999240][ T53] usb 6-1: USB disconnect, device number 3 [ 106.002656][ T40] audit: type=1400 audit(1761124289.264:540): avc: denied { open } for pid=8618 comm="syz.1.475" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 106.065244][ T1029] usb 7-1: device descriptor read/64, error -71 [ 106.111763][ T8682] chnl_net:caif_netlink_parms(): no params data found [ 106.247600][ T8682] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.250549][ T8682] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.254266][ T8682] bridge_slave_0: entered allmulticast mode [ 106.258891][ T8682] bridge_slave_0: entered promiscuous mode [ 106.263304][ T8682] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.267581][ T8682] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.270405][ T8682] bridge_slave_1: entered allmulticast mode [ 106.274004][ T8682] bridge_slave_1: entered promiscuous mode [ 106.315018][ T1029] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 106.338757][ T8682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.348791][ T8682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.408856][ T8682] team0: Port device team_slave_0 added [ 106.413582][ T8682] team0: Port device team_slave_1 added [ 106.458692][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.460923][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.467952][ T1029] usb 7-1: device descriptor read/64, error -71 [ 106.470686][ T8682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.476680][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.478854][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.486560][ T8682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.538262][ T8682] hsr_slave_0: entered promiscuous mode [ 106.542341][ T8682] hsr_slave_1: entered promiscuous mode [ 106.544495][ T8682] debugfs: 'hsr0' already exists in 'hsr' [ 106.549374][ T8682] Cannot create hsr debugfs directory [ 106.579057][ T1029] usb usb7-port1: attempt power cycle [ 106.700881][ T8682] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.705435][ T8682] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.709385][ T8682] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.713384][ T8682] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.729125][ T8682] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.731719][ T8682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.761946][ T8682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.769732][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.783518][ T8682] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.791182][ T7942] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.793847][ T7942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.801505][ T7949] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.803702][ T7949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.925087][ T1029] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 106.941460][ T8682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.947877][ T1029] usb 7-1: device descriptor read/8, error -71 [ 107.071827][ T8682] veth0_vlan: entered promiscuous mode [ 107.079753][ T8682] veth1_vlan: entered promiscuous mode [ 107.103506][ T8682] veth0_macvtap: entered promiscuous mode [ 107.108935][ T8682] veth1_macvtap: entered promiscuous mode [ 107.120110][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.128641][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.136960][ T7940] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.140622][ T7940] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.143555][ T7940] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.149372][ T7940] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.183840][ T1194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.187274][ T1194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.196039][ T1029] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 107.203854][ T1194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.206704][ T1194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.212439][ T40] audit: type=1400 audit(1761124290.484:541): avc: denied { mounton } for pid=8682 comm="syz-executor" path="/syzkaller.whLOlw/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 107.220652][ T40] audit: type=1400 audit(1761124290.484:542): avc: denied { mount } for pid=8682 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 107.226624][ T1029] usb 7-1: device descriptor read/8, error -71 [ 107.228168][ T40] audit: type=1400 audit(1761124290.484:543): avc: denied { mounton } for pid=8682 comm="syz-executor" path="/syzkaller.whLOlw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 107.261933][ T9728] bpf: Bad value for 'uid' [ 107.323871][ T9731] @: renamed from vlan0 (while UP) [ 107.335487][ T1029] usb usb7-port1: unable to enumerate USB device [ 107.625080][ T5980] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 107.672418][ T9759] geneve2: entered promiscuous mode [ 107.674474][ T9759] geneve2: entered allmulticast mode [ 107.795083][ T5980] usb 9-1: Using ep0 maxpacket: 16 [ 107.798599][ T5980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.802427][ T5980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.808617][ T5980] usb 9-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 107.812368][ T5980] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.818460][ T5980] usb 9-1: config 0 descriptor?? [ 107.872491][ T9776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.985241][ T64] Bluetooth: hci1: command tx timeout [ 108.073888][ T9791] __nla_validate_parse: 3 callbacks suppressed [ 108.073904][ T9791] netlink: 32 bytes leftover after parsing attributes in process `syz.1.502'. [ 108.112689][ T9797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.503'. [ 108.115943][ T9797] netlink: 3 bytes leftover after parsing attributes in process `syz.1.503'. [ 108.240259][ T5980] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5012.0006/input/input6 [ 108.248751][ T9808] netlink: 52 bytes leftover after parsing attributes in process `syz.1.506'. [ 108.311038][ T5980] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5012.0006/input/input7 [ 108.392471][ T5980] kye 0003:0458:5012.0006: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0 [ 108.615544][ T9839] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 108.734079][ T9850] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 108.889613][ T9880] netlink: 'syz.0.514': attribute type 4 has an invalid length. [ 108.905416][ T7950] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 108.919662][ T9887] fuse: Unknown parameter '' [ 108.928391][ T9880] fuse: Unknown parameter 'rootmodeÁ'__"îxÍ00000„-²â00000100000' [ 108.945557][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 109.107788][ T9897] Bluetooth: MGMT ver 1.23 [ 109.117249][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'. [ 109.246192][ T9909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.517'. [ 109.249341][ T9909] netlink: 60 bytes leftover after parsing attributes in process `syz.0.517'. [ 109.253708][ T9909] ip6t_srh: unknown srh match flags 4000 [ 109.300434][ T9914] binder: BINDER_SET_CONTEXT_MGR already set [ 109.303018][ T9914] binder: 9912:9914 ioctl 4018620d 200000000100 returned -16 [ 109.415992][ T9716] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 109.545063][ T9716] usb 9-1: device descriptor read/64, error -32 [ 109.658869][ T9945] bond2 (unregistering): Released all slaves [ 109.689745][ T9936] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.784313][T10016] 8021q: VLANs not supported on wg2 [ 109.805104][ T9716] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 109.945059][ T9716] usb 9-1: device descriptor read/64, error -32 [ 110.075083][ T64] Bluetooth: hci1: command tx timeout [ 110.205085][ T9716] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 110.225129][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.226223][ T9716] usb 9-1: device descriptor read/8, error -32 [ 110.475038][ T9716] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 110.496197][ T9716] usb 9-1: device descriptor read/8, error -32 [ 110.616419][ T9716] raw-gadget.0 gadget.4: failed to queue suspend event [ 110.621966][ T7142] usb 9-1: USB disconnect, device number 2 [ 110.666789][ T7142] raw-gadget.0 gadget.4: failed to queue reset event [ 110.690023][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 110.690033][ T40] audit: type=1400 audit(1761124293.964:566): avc: denied { getopt } for pid=10088 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.746274][ T7142] raw-gadget.0 gadget.4: failed to queue resume event [ 110.805334][ T7142] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 110.808510][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 110.810882][ T7142] raw-gadget.0 gadget.4: failed to queue reset event [ 110.875548][ T7142] raw-gadget.0 gadget.4: failed to queue resume event [ 110.945352][ T7142] usb 9-1: device descriptor read/64, error -32 [ 110.992290][T10055] kvm_intel: kvm [10054]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x98b7 [ 111.012379][T10055] kvm: kvm [10054]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x7a2 [ 111.017137][T10055] kvm: kvm [10054]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x768e [ 111.044271][T10055] kvm: kvm [10054]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xa128 [ 111.065267][ T7142] raw-gadget.0 gadget.4: failed to queue suspend event [ 111.068189][ T7142] raw-gadget.0 gadget.4: failed to queue reset event [ 111.069127][T10055] kvm: kvm [10054]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1014 [ 111.075344][T10055] kvm: kvm [10054]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7f00 [ 111.145187][ T7142] raw-gadget.0 gadget.4: failed to queue resume event [ 111.215955][ T7142] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 111.218674][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 111.221025][ T7142] raw-gadget.0 gadget.4: failed to queue reset event [ 111.295061][ T7142] raw-gadget.0 gadget.4: failed to queue resume event [ 111.301971][ T40] audit: type=1400 audit(1761124294.574:567): avc: denied { read } for pid=10116 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.355191][ T7142] usb 9-1: device descriptor read/64, error -32 [ 111.417978][ T40] audit: type=1400 audit(1761124294.694:568): avc: denied { append } for pid=10125 comm="syz.2.546" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.428479][ T40] audit: type=1400 audit(1761124294.694:569): avc: denied { map } for pid=10125 comm="syz.2.546" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.429935][T10130] can0: slcan on ttyS3. [ 111.439751][ T40] audit: type=1400 audit(1761124294.694:570): avc: denied { execute } for pid=10125 comm="syz.2.546" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.465035][ T7142] raw-gadget.0 gadget.4: failed to queue suspend event [ 111.475147][ T7142] usb usb9-port1: attempt power cycle [ 111.477062][ T7142] raw-gadget.0 gadget.4: failed to queue disconnect event [ 111.488087][ T7142] raw-gadget.0 gadget.4: failed to queue reset event [ 111.548276][T10128] can0 (unregistered): slcan off ttyS3. [ 111.555565][ T7142] raw-gadget.0 gadget.4: failed to queue resume event [ 111.558105][ T7142] raw-gadget.0 gadget.4: failed to queue reset event [ 111.580237][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.551'. [ 111.642350][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'. [ 111.649453][ T40] audit: type=1400 audit(1761124294.924:571): avc: denied { append } for pid=10154 comm="syz.4.552" name="pfkey" dev="proc" ino=4026533914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 111.658402][ T40] audit: type=1400 audit(1761124294.924:572): avc: denied { map } for pid=10154 comm="syz.4.552" path="/proc/37/net/pfkey" dev="proc" ino=4026533914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 111.765044][ T7142] raw-gadget.0 gadget.4: failed to queue resume event [ 111.767013][T10172] netlink: 'syz.4.557': attribute type 1 has an invalid length. [ 111.772847][T10172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10172 comm=syz.4.557 [ 111.828622][T10178] netlink: 20 bytes leftover after parsing attributes in process `syz.4.559'. [ 111.836615][ T7142] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 111.855294][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 111.858290][ T7142] usb 9-1: device descriptor read/8, error -32 [ 111.921615][T10176] netlink: 'syz.2.555': attribute type 7 has an invalid length. [ 111.924366][T10176] netlink: 'syz.2.555': attribute type 8 has an invalid length. [ 111.978979][ T7142] raw-gadget.0 gadget.4: failed to queue suspend event [ 111.982832][ T7142] raw-gadget.0 gadget.4: failed to queue reset event [ 112.034075][ T40] audit: type=1400 audit(1761124295.304:573): avc: denied { read } for pid=10188 comm="syz.1.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.055196][ T7142] raw-gadget.0 gadget.4: failed to queue resume event [ 112.089841][T10197] block nbd0: Unsupported socket: should be TCP or UNIX. [ 112.130539][ T7142] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 112.147419][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 112.150150][ T7142] usb 9-1: device descriptor read/8, error -32 [ 112.155770][ T64] Bluetooth: hci1: command tx timeout [ 112.169529][T10204] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 112.218283][T10207] 9p: Unknown access argument 18446744073709551615: -34 [ 112.255116][ T7142] raw-gadget.0 gadget.4: failed to queue suspend event [ 112.258277][ T7142] usb usb9-port1: unable to enumerate USB device [ 112.654089][ T40] audit: type=1400 audit(1761124295.924:574): avc: denied { load_policy } for pid=10248 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 112.654369][T10249] SELinux: failed to load policy [ 112.668595][ T40] audit: type=1400 audit(1761124295.944:575): avc: denied { map } for pid=10248 comm="syz.2.571" path="socket:[19912]" dev="sockfs" ino=19912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.907569][T10267] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 112.910606][T10267] UDF-fs: Scanning with blocksize 2048 failed [ 112.914575][T10267] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 112.918000][T10267] UDF-fs: Scanning with blocksize 4096 failed [ 113.265196][ C2] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 113.837375][ T1029] raw-gadget.0 gadget.4: failed to queue reset event [ 113.905155][ T1029] raw-gadget.0 gadget.4: failed to queue resume event [ 113.975270][ T1029] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 113.978595][ C3] raw-gadget.0 gadget.4: ignoring, device is not running [ 113.981242][ T1029] raw-gadget.0 gadget.4: failed to queue reset event [ 114.013644][T10299] __nla_validate_parse: 7 callbacks suppressed [ 114.013662][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 114.045180][ T1029] raw-gadget.0 gadget.4: failed to queue resume event [ 114.105201][ T1029] usb 9-1: device descriptor read/64, error -32 [ 114.215066][ T1029] raw-gadget.0 gadget.4: failed to queue suspend event [ 114.217702][ T1029] raw-gadget.0 gadget.4: failed to queue reset event [ 114.225075][ T64] Bluetooth: hci1: command tx timeout [ 114.251214][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 114.254359][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'. [ 114.285076][ T1029] raw-gadget.0 gadget.4: failed to queue resume event [ 114.345627][ T1029] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 114.348323][ C3] raw-gadget.0 gadget.4: ignoring, device is not running [ 114.350694][ T1029] raw-gadget.0 gadget.4: failed to queue reset event [ 114.415047][ T1029] raw-gadget.0 gadget.4: failed to queue resume event [ 114.475807][ T1029] usb 9-1: device descriptor read/64, error -32 [ 114.586253][ T1029] raw-gadget.0 gadget.4: failed to queue suspend event [ 114.589145][ T1029] usb usb9-port1: attempt power cycle [ 114.591192][ T1029] raw-gadget.0 gadget.4: failed to queue disconnect event [ 114.593641][ T1029] raw-gadget.0 gadget.4: failed to queue reset event [ 114.665104][ T1029] raw-gadget.0 gadget.4: failed to queue resume event [ 114.668570][ T1029] raw-gadget.0 gadget.4: failed to queue reset event [ 114.806155][T10323] netlink: 52 bytes leftover after parsing attributes in process `syz.1.592'. [ 114.875088][ T1029] raw-gadget.0 gadget.4: failed to queue resume event [ 114.902927][T10328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.594'. [ 114.935128][ T1029] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 114.955782][ C3] raw-gadget.0 gadget.4: ignoring, device is not running [ 114.958830][ T1029] usb 9-1: device descriptor read/8, error -32 [ 114.977931][T10333] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 115.075084][ T1029] raw-gadget.0 gadget.4: failed to queue suspend event [ 115.078149][ T1029] raw-gadget.0 gadget.4: failed to queue reset event [ 115.145316][ T1029] raw-gadget.0 gadget.4: failed to queue resume event [ 115.205061][ T1029] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 115.236105][ C3] raw-gadget.0 gadget.4: ignoring, device is not running [ 115.238493][ T1029] usb 9-1: device descriptor read/8, error -32 [ 115.330976][ T5980] IPVS: starting estimator thread 0... [ 115.345764][ T1029] raw-gadget.0 gadget.4: failed to queue suspend event [ 115.349523][ T1029] usb usb9-port1: unable to enumerate USB device [ 115.352171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 115.415284][T10358] IPVS: using max 26 ests per chain, 62400 per kthread [ 115.650903][T10394] fuseblk: Bad value for 'blksize' [ 115.697713][T10398] usb usb4: usbfs: interface 0 claimed by hub while 'syz.4.611' sets config #0 [ 115.702685][T10401] usb usb4: usbfs: interface 0 claimed by hub while 'syz.4.611' sets config #0 [ 115.746465][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 115.746481][ T40] audit: type=1400 audit(115.614:583): avc: denied { listen } for pid=10403 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.756242][ T40] audit: type=1400 audit(115.614:584): avc: denied { accept } for pid=10403 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.933876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.938886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.941522][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.616'. [ 116.071774][T10427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.618'. [ 116.143341][T10427] binder: 10426:10427 ioctl 402c5342 200000000080 returned -22 [ 116.147597][ T40] audit: type=1400 audit(116.014:585): avc: denied { setattr } for pid=10426 comm="syz.0.618" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.319798][ T40] audit: type=1400 audit(116.184:586): avc: denied { connect } for pid=10438 comm="syz.1.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.340994][T10448] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 116.974260][T10469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10469 comm=syz.2.629 [ 117.091439][T10481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=10481 comm=syz.0.630 [ 117.152202][ T40] audit: type=1800 audit(117.014:587): pid=10487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.634" name="nullb0" dev="tmpfs" ino=843 res=0 errno=0 [ 117.156584][T10481] xt_CT: No such helper "pptp" [ 117.162107][ T40] audit: type=1400 audit(117.024:588): avc: denied { setopt } for pid=10486 comm="syz.1.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 117.213982][T10502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.635'. [ 117.263375][ T40] audit: type=1326 audit(117.124:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10517 comm="syz.1.637" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63ac98eec9 code=0x0 [ 117.627501][T10546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.642'. [ 117.663167][T10546] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10546 comm=syz.0.642 [ 117.701294][ T40] audit: type=1400 audit(117.564:590): avc: denied { shutdown } for pid=10610 comm="syz.0.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.709508][ T40] audit: type=1400 audit(117.574:591): avc: denied { read } for pid=10610 comm="syz.0.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.898810][ T40] audit: type=1400 audit(117.764:592): avc: denied { wake_alarm } for pid=10627 comm="syz.2.648" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.952671][T10641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.959028][T10641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.976162][T10646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.651'. [ 118.165866][T10667] netlink: 'syz.2.655': attribute type 15 has an invalid length. [ 118.177876][ T1194] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 118.177912][T10667] netlink: 'syz.2.655': attribute type 15 has an invalid length. [ 118.182177][ T1194] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 118.189518][ T1194] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 118.192470][ T1194] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 118.233278][T10674] geneve2: entered promiscuous mode [ 118.237303][T10674] geneve2: entered allmulticast mode [ 118.290636][T10677] lo: entered promiscuous mode [ 118.311715][T10756] misc userio: Begin command sent, but we're already running [ 118.886539][T10783] /dev/nullb0: Can't open blockdev [ 119.039487][T10790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65225 sclass=netlink_route_socket pid=10790 comm=syz.0.667 [ 119.221206][T10812] __nla_validate_parse: 8 callbacks suppressed [ 119.221222][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 119.257946][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 119.319303][T10823] openvswitch: netlink: IP tunnel dst address not specified [ 119.386865][T10832] syz_tun: refused to change device tx_queue_len [ 119.479746][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 119.526291][T10846] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 119.562654][T10849] netlink: 'syz.0.682': attribute type 1 has an invalid length. [ 119.588518][T10849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.594404][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 119.618631][T10849] bond2: entered allmulticast mode [ 119.776599][ T7948] tipc: Subscription rejected, illegal request [ 119.782063][T10898] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 119.785545][T10898] SELinux: failed to load policy [ 120.165043][ T7142] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.295126][ T7142] usb 5-1: device descriptor read/64, error -71 [ 120.427660][T10907] ptrace attach of "/syz-executor exec"[5936] was attempted by " '  þÿÿÿ Ù)„½¤L\x22jõ– w`”u·„è…\x09Þ òeãõ'ä\x22   ? "[10907] [ 120.535143][ T7142] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.665060][ T7142] usb 5-1: device descriptor read/64, error -71 [ 120.776241][ T7142] usb usb5-port1: attempt power cycle [ 121.068781][T10920] netlink: 'syz.4.690': attribute type 4 has an invalid length. [ 121.095192][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 121.095207][ T40] audit: type=1400 audit(120.964:599): avc: denied { append } for pid=10921 comm="syz.4.691" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 121.098553][ T1194] Bluetooth: (null): Invalid header checksum [ 121.110379][ T1194] Bluetooth: (null): Invalid header checksum [ 121.115034][ T7142] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.135546][ T7142] usb 5-1: device descriptor read/8, error -71 [ 121.251233][ T40] audit: type=1400 audit(121.114:600): avc: denied { lock } for pid=10927 comm="syz.2.692" path="/164/file0/cpuset.effective_cpus" dev="9p" ino=71827927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.385077][ T7142] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 121.405441][ T7142] usb 5-1: device descriptor read/8, error -71 [ 121.478581][T10944] gfs2: error -5 reading superblock [ 121.525213][ T7142] usb usb5-port1: unable to enumerate USB device [ 121.546236][ T40] audit: type=1400 audit(121.414:601): avc: denied { write } for pid=10955 comm="syz.4.698" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 121.645620][T10969] virtio-fs: tag not found [ 121.652125][ T40] audit: type=1400 audit(121.514:602): avc: denied { mount } for pid=10968 comm="syz.4.700" name="/" dev="hugetlbfs" ino=22836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 121.670314][ T40] audit: type=1400 audit(121.534:603): avc: denied { unmount } for pid=8682 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 121.741969][T10979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.703'. [ 121.758085][T10979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.762817][T10979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.387184][ C2] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 122.420165][ T40] audit: type=1400 audit(122.284:604): avc: denied { mount } for pid=11139 comm="syz.4.712" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 122.425918][T11140] devpts: Bad value for 'max' [ 122.428800][ T40] audit: type=1400 audit(122.294:605): avc: denied { remount } for pid=11139 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 122.436547][T11140] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.712'. [ 122.462552][ T40] audit: type=1400 audit(122.324:606): avc: denied { unmount } for pid=8682 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 122.482587][T11147] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 122.503137][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.716'. [ 122.519340][T11154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.523164][T11154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.613085][T11152] netlink: 36 bytes leftover after parsing attributes in process `syz.1.717'. [ 122.881740][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 123.045860][T11175] binder: 11174:11175 ioctl c00c620f 2000000001c0 returned -22 [ 123.050269][T11175] ntfs3: Unknown parameter 'aclinderfs/binder0' [ 123.138429][T11183] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.178526][T11188] netlink: 32 bytes leftover after parsing attributes in process `syz.0.727'. [ 123.500994][T11214] trusted_key: syz.2.736 sent an empty control message without MSG_MORE. [ 123.508811][T11214] team0: Device gtp0 is of different type [ 123.599051][T11229] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 123.645023][ T9716] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 123.674797][ T40] audit: type=1400 audit(123.534:607): avc: denied { accept } for pid=11237 comm="syz.2.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.696849][ T40] audit: type=1400 audit(123.564:608): avc: denied { execheap } for pid=11237 comm="syz.2.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 123.815143][ T9716] usb 5-1: Using ep0 maxpacket: 8 [ 123.817090][T11251] IPVS: set_ctl: invalid protocol: 103 172.30.0.3:20002 [ 123.819234][ T9716] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.824631][ T9716] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.828912][ T9716] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.831374][ T9716] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 123.834368][ T9716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.843244][ T9716] usb 5-1: config 0 descriptor?? [ 123.866030][T11258] tap0: tun_chr_ioctl cmd 1074025675 [ 123.868076][T11258] tap0: persist enabled [ 123.869657][T11258] tap0: tun_chr_ioctl cmd 1074025675 [ 123.871326][T11258] tap0: persist disabled [ 124.008449][T11273] overlayfs: failed to resolve './file0/file1': -2 [ 124.085906][T11278] macsec0: entered promiscuous mode [ 124.088485][T11278] macsec0: entered allmulticast mode [ 124.090767][T11278] veth1_macvtap: entered allmulticast mode [ 124.095865][T11278] netlink: 'syz.2.753': attribute type 5 has an invalid length. [ 124.253101][ T9716] usbhid 5-1:0.0: can't add hid device: -71 [ 124.255207][ T9716] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 124.260473][ T9716] usb 5-1: USB disconnect, device number 9 [ 124.287112][T11307] __nla_validate_parse: 5 callbacks suppressed [ 124.287128][T11307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'. [ 124.533284][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'. [ 124.737592][T11360] MINIX-fs: unable to read superblock [ 124.756657][T11351] binder: BINDER_SET_CONTEXT_MGR already set [ 124.759341][T11351] binder: 11350:11351 ioctl 4018620d 200000004a80 returned -16 [ 124.762370][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 124.809789][T11374] netlink: 'syz.4.774': attribute type 1 has an invalid length. [ 124.830468][T11374] bond1: entered promiscuous mode [ 124.832705][T11374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.864398][T11374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.868926][T11374] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 124.872184][T11374] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 124.878953][T11374] bond1: (slave wireguard0): making interface the new active one [ 124.881711][T11374] wireguard0: entered promiscuous mode [ 124.884276][T11374] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 124.910029][T11429] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 124.984334][T11374] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 124.990736][T11374] wireguard0: left promiscuous mode [ 124.999142][T11374] bond1 (unregistering): Released all slaves [ 125.005837][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.782'. [ 125.138068][T11477] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 125.564562][T11495] pim6reg: entered allmulticast mode [ 125.577231][T11496] overlay: ./file1 is not a directory [ 125.580120][T11496] overlay: ./file1 is not a directory [ 125.582969][T11496] overlay: ./file1 is not a directory [ 125.586043][T11496] overlay: ./file1 is not a directory [ 125.589023][T11496] overlay: ./file1 is not a directory [ 125.594210][T11496] overlay: ./file1 is not a directory [ 125.597216][T11496] overlay: ./file1 is not a directory [ 125.601556][T11496] overlay: ./file1 is not a directory [ 125.603907][T11496] overlay: ./file1 is not a directory [ 125.606158][T11496] overlay: ./file1 is not a directory [ 125.608424][T11496] overlay: ./file1 is not a directory [ 125.611509][T11496] overlay: ./file1 is not a directory [ 125.613903][T11496] overlay: ./file1 is not a directory [ 125.616261][T11496] overlay: ./file1 is not a directory [ 125.618542][T11496] overlay: ./file1 is not a directory [ 125.622116][T11496] overlay: ./file1 is not a directory [ 125.624486][T11496] overlay: ./file1 is not a directory [ 125.626790][T11496] overlay: ./file1 is not a directory [ 125.629090][T11496] overlay: ./file1 is not a directory [ 125.631542][T11496] overlay: ./file1 is not a directory [ 125.633710][T11496] overlay: ./file1 is not a directory [ 125.635977][T11496] overlay: ./file1 is not a directory [ 125.638237][T11496] overlay: ./file1 is not a directory [ 125.640738][T11496] overlay: ./file1 is not a directory [ 125.642888][T11496] overlay: ./file1 is not a directory [ 125.645124][T11496] overlay: ./file1 is not a directory [ 125.647534][T11496] overlay: ./file1 is not a directory [ 125.650752][T11496] overlay: ./file1 is not a directory [ 125.653291][T11496] overlay: ./file1 is not a directory [ 125.655987][T11496] overlay: ./file1 is not a directory [ 125.658503][T11496] overlay: ./file1 is not a directory [ 125.660740][T11496] overlay: ./file1 is not a directory [ 125.663461][T11496] overlay: ./file1 is not a directory [ 125.666615][T11496] overlay: ./file1 is not a directory [ 125.669221][T11496] overlay: ./file1 is not a directory [ 125.672392][T11496] overlay: ./file1 is not a directory [ 125.675232][T11496] overlay: ./file1 is not a directory [ 125.677841][T11496] overlay: ./file1 is not a directory [ 125.680363][T11496] overlay: ./file1 is not a directory [ 125.683997][T11496] overlay: ./file1 is not a directory [ 125.686387][T11496] overlay: ./file1 is not a directory [ 125.690522][T11496] overlay: ./file1 is not a directory [ 125.694187][T11496] overlay: ./file1 is not a directory [ 125.697435][T11496] overlay: ./file1 is not a directory [ 125.700720][T11496] overlay: ./file1 is not a directory [ 125.705148][T11496] overlay: ./file1 is not a directory [ 125.707752][T11496] overlay: ./file1 is not a directory [ 125.711546][T11496] overlay: ./file1 is not a directory [ 125.714593][T11496] overlay: ./file1 is not a directory [ 125.718684][T11496] overlay: ./file1 is not a directory [ 125.721661][T11496] overlay: ./file1 is not a directory [ 125.725071][T11496] overlay: ./file1 is not a directory [ 125.728054][T11496] overlay: ./file1 is not a directory [ 125.731166][T11496] overlay: ./file1 is not a directory [ 125.733383][T11496] overlay: ./file1 is not a directory [ 125.739009][T11496] overlay: ./file1 is not a directory [ 125.742882][T11496] overlay: ./file1 is not a directory [ 125.747841][T11496] overlay: ./file1 is not a directory [ 125.750857][T11496] overlay: ./file1 is not a directory [ 125.753678][T11496] overlay: ./file1 is not a directory [ 125.756813][T11496] overlay: ./file1 is not a directory [ 125.759402][T11496] overlay: ./file1 is not a directory [ 125.792115][T11507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.792'. [ 125.808936][T11516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.793'. [ 125.818323][T11520] netlink: 'syz.1.794': attribute type 1 has an invalid length. [ 125.827947][T11507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5136 sclass=netlink_route_socket pid=11507 comm=syz.2.792 [ 125.842284][T11516] vlan0: entered promiscuous mode [ 125.844485][T11516] erspan0: entered promiscuous mode [ 125.882410][T11520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.891947][T11520] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11520 comm=syz.1.794 [ 125.947239][ T64] Bluetooth: to_multiplier 54284 > 3200 [ 125.949560][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.800'. [ 125.956604][T11662] qnx6: unable to read the first superblock [ 125.959627][T11662] qnx6: unable to read the first superblock [ 125.963155][T11662] qnx6: unable to read the first superblock [ 126.000789][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 126.004020][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 126.007871][T11671] netlink: 'syz.0.801': attribute type 20 has an invalid length. [ 126.008574][T11675] vivid-003: disconnect [ 126.011930][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 126.015428][T11675] vivid-003: reconnect [ 126.017808][T11671] netlink: 'syz.0.801': attribute type 20 has an invalid length. [ 126.023580][T11675] Cannot find del_set index 4 as target [ 126.093224][T11680] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 126.098194][T11680] overlayfs: overlapping lowerdir path [ 126.269906][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.284237][T11737] veth1_to_bond: entered allmulticast mode [ 126.290135][T11736] veth1_to_bond: left allmulticast mode [ 126.347379][T11745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.351002][T11745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.537273][T11755] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 126.538149][T11756] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 1 [ 126.538772][T11757] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 2 [ 126.539026][T11758] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 3 [ 126.539436][T11753] IPVS: stopping backup sync thread 11758 ... [ 126.540231][T11753] IPVS: stopping backup sync thread 11757 ... [ 126.540312][T11753] IPVS: stopping backup sync thread 11756 ... [ 126.557359][T11753] IPVS: stopping backup sync thread 11755 ... [ 126.560895][ T64] Bluetooth: hci2: unexpected event 0x0f length: 6 > 4 [ 126.563847][T11753] netlink: 'syz.1.819': attribute type 11 has an invalid length. [ 126.902204][T11783] netlink: 'syz.1.824': attribute type 10 has an invalid length. [ 126.904766][T11783] dummy0: entered promiscuous mode [ 126.908891][T11783] bridge0: port 3(dummy0) entered blocking state [ 126.911267][T11783] bridge0: port 3(dummy0) entered disabled state [ 126.913681][T11783] dummy0: entered allmulticast mode [ 126.916603][T11783] bridge0: port 3(dummy0) entered blocking state [ 126.918797][T11783] bridge0: port 3(dummy0) entered forwarding state [ 126.924027][T11786] MINIX-fs: unable to read superblock [ 126.927349][T11787] MINIX-fs: unable to read superblock [ 126.965078][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 126.965089][ T40] audit: type=1800 audit(524414.775:615): pid=11789 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.826" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 127.006909][ T40] audit: type=1400 audit(524414.814:616): avc: denied { watch } for pid=11796 comm="syz.4.829" path="/80/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 127.023396][ T40] audit: type=1400 audit(524414.834:617): avc: denied { bind } for pid=11803 comm="syz.0.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.067584][ T40] audit: type=1400 audit(524414.872:618): avc: denied { accept } for pid=11810 comm="syz.0.832" lport=33725 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.075436][ T40] audit: type=1400 audit(524414.872:619): avc: denied { getopt } for pid=11810 comm="syz.0.832" lport=33725 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 127.086741][ T40] audit: type=1400 audit(524414.892:620): avc: denied { map } for pid=11810 comm="syz.0.832" path="socket:[24804]" dev="sockfs" ino=24804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.132010][T11822] netlink: 'syz.4.833': attribute type 11 has an invalid length. [ 127.136055][ T34] raw-gadget.0 gadget.4: failed to queue reset event [ 127.208051][ T34] raw-gadget.0 gadget.4: failed to queue resume event [ 127.236170][T11822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.240579][T11822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.246026][T11822] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 127.248262][T11822] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 127.254771][T11822] vhci_hcd vhci_hcd.0: Device attached [ 127.257044][T11842] usbip_core: unknown command [ 127.259231][T11842] vhci_hcd: unknown pdu 1610612736 [ 127.266285][T11842] usbip_core: unknown command [ 127.277288][ T34] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 127.277703][ T7942] vhci_hcd: stop threads [ 127.282916][ T7942] vhci_hcd: release socket [ 127.284689][ T7942] vhci_hcd: disconnect device [ 127.292439][ C3] raw-gadget.0 gadget.4: ignoring, device is not running [ 127.295922][ T34] raw-gadget.0 gadget.4: failed to queue reset event [ 127.392252][ T34] raw-gadget.0 gadget.4: failed to queue resume event [ 127.400013][T11854] xt_nat: multiple ranges no longer supported [ 127.463846][ T34] usb 9-1: device descriptor read/64, error -32 [ 127.587122][ T34] raw-gadget.0 gadget.4: failed to queue suspend event [ 127.590129][ T34] raw-gadget.0 gadget.4: failed to queue reset event [ 127.593024][ T40] audit: type=1326 audit(524415.388:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.2.840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35838eec9 code=0x7ff00000 [ 127.602435][ T40] audit: type=1326 audit(524415.388:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.2.840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35838eec9 code=0x7ff00000 [ 127.612590][ T40] audit: type=1326 audit(524415.388:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.2.840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35838eec9 code=0x7ff00000 [ 127.622068][ T40] audit: type=1326 audit(524415.388:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.2.840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa35838eec9 code=0x7ff00000 [ 127.659110][ T34] raw-gadget.0 gadget.4: failed to queue resume event [ 127.731055][ T34] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 127.734551][ C3] raw-gadget.0 gadget.4: ignoring, device is not running [ 127.736924][ T34] raw-gadget.0 gadget.4: failed to queue reset event [ 127.802939][ T34] raw-gadget.0 gadget.4: failed to queue resume event [ 127.864606][ T34] usb 9-1: device descriptor read/64, error -32 [ 127.988421][ T34] raw-gadget.0 gadget.4: failed to queue suspend event [ 127.990705][ T34] usb usb9-port1: attempt power cycle [ 127.992485][ T34] raw-gadget.0 gadget.4: failed to queue disconnect event [ 127.995190][ T34] raw-gadget.0 gadget.4: failed to queue reset event [ 128.070371][ T34] raw-gadget.0 gadget.4: failed to queue resume event [ 128.072997][ T34] raw-gadget.0 gadget.4: failed to queue reset event [ 128.285856][ T34] raw-gadget.0 gadget.4: failed to queue resume event [ 128.324304][T11875] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 128.347392][ T34] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 128.368056][ C3] raw-gadget.0 gadget.4: ignoring, device is not running [ 128.370854][ T34] usb 9-1: device descriptor read/8, error -32 [ 128.468660][T11880] delete_channel: no stack [ 128.480875][ T34] raw-gadget.0 gadget.4: failed to queue suspend event [ 128.483196][ T34] raw-gadget.0 gadget.4: failed to queue reset event [ 128.505413][T11887] netlink: 'syz.1.849': attribute type 10 has an invalid length. [ 128.507730][T11887] team0: entered promiscuous mode [ 128.509205][T11887] team_slave_0: entered promiscuous mode [ 128.510917][T11887] team_slave_1: entered promiscuous mode [ 128.513630][T11887] bridge0: port 4(team0) entered blocking state [ 128.515633][T11887] bridge0: port 4(team0) entered disabled state [ 128.517575][T11887] team0: entered allmulticast mode [ 128.519087][T11887] team_slave_0: entered allmulticast mode [ 128.521120][T11887] team_slave_1: entered allmulticast mode [ 128.525680][T11887] bridge0: port 4(team0) entered blocking state [ 128.527638][T11887] bridge0: port 4(team0) entered forwarding state [ 128.562842][ T34] raw-gadget.0 gadget.4: failed to queue resume event [ 128.583036][T11892] tmpfs: Bad value for 'mpol' [ 128.624357][ T34] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 128.647481][ C3] raw-gadget.0 gadget.4: ignoring, device is not running [ 128.650153][ T34] usb 9-1: device descriptor read/8, error -32 [ 128.757804][ T34] raw-gadget.0 gadget.4: failed to queue suspend event [ 128.761143][ T34] usb usb9-port1: unable to enumerate USB device [ 129.450099][T11921] netlink: 'syz.4.861': attribute type 4 has an invalid length. [ 129.452228][T11921] __nla_validate_parse: 64 callbacks suppressed [ 129.452236][T11921] netlink: 152 bytes leftover after parsing attributes in process `syz.4.861'. [ 129.461690][T11921] .`: renamed from bond0 (while UP) [ 129.626077][T11927] netlink: 'syz.4.862': attribute type 4 has an invalid length. [ 130.632871][T11960] qnx4: no qnx4 filesystem (no root dir). [ 130.748989][T11967] netlink: 'syz.4.872': attribute type 1 has an invalid length. [ 130.768770][T11967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.782026][T11967] vlan0: entered promiscuous mode [ 130.784213][T11967] bond0: entered promiscuous mode [ 130.799026][T11967] gretap1: entered promiscuous mode [ 130.805362][T11967] bond0: (slave gretap1): making interface the new active one [ 130.809862][T11967] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 130.851557][T12010] overlayfs: missing 'lowerdir' [ 130.857177][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.874'. [ 130.936785][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 131.320724][T12031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.880'. [ 131.396168][ T64] Bluetooth: hci2: hcon ffff8880343d0000 sent 1 < count 10 [ 131.400230][ T64] Bluetooth: hci2: hcon ffff8880343d0000 sent 0 < count 1025 [ 131.404567][ T64] Bluetooth: hci2: hcon ffff8880343d0000 sent 0 < count 8 [ 131.421594][T12036] ip6erspan0: entered promiscuous mode [ 131.555393][T12063] pim6reg1: entered promiscuous mode [ 131.557769][T12063] pim6reg1: entered allmulticast mode [ 131.573064][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 132.019826][T12113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.023858][T12113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.174778][T12125] bond0: entered allmulticast mode [ 132.177606][T12125] bond_slave_0: entered allmulticast mode [ 132.180155][T12125] bond_slave_1: entered allmulticast mode [ 132.210861][T12125] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 132.257387][T12132] overlayfs: failed to resolve './file1': -2 [ 132.367874][T12144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.381307][T12146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.668878][ T40] kauditd_printk_skb: 39397 callbacks suppressed [ 132.668893][ T40] audit: type=1400 audit(524420.350:40022): avc: denied { map } for pid=12163 comm="syz.2.912" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 132.682445][ T40] audit: type=1400 audit(524420.360:40023): avc: denied { execute } for pid=12163 comm="syz.2.912" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 132.684942][T12171] netlink: 'syz.2.912': attribute type 1 has an invalid length. [ 132.693206][ T40] audit: type=1400 audit(524420.360:40024): avc: denied { ioctl } for pid=12163 comm="syz.2.912" path="socket:[26310]" dev="sockfs" ino=26310 ioctlcmd=0x8992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 132.722832][T12171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.744337][T12171] bond1: (slave geneve2): making interface the new active one [ 132.749537][T12171] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 132.826919][T12219] netlink: 'syz.1.916': attribute type 9 has an invalid length. [ 132.930353][ T40] audit: type=1400 audit(524420.605:40025): avc: denied { ioctl } for pid=12228 comm="syz.1.917" path="socket:[25069]" dev="sockfs" ino=25069 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 132.982399][T12239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.918'. [ 133.148467][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 133.153264][T12252] tmpfs: Bad value for 'mpol' [ 133.447436][T12264] netlink: 55 bytes leftover after parsing attributes in process `syz.4.926'. [ 133.447501][T12265] netlink: 55 bytes leftover after parsing attributes in process `syz.4.926'. [ 133.478222][T12267] xt_TCPMSS: Only works on TCP SYN packets [ 133.486488][T12267] netlink: 116 bytes leftover after parsing attributes in process `syz.2.927'. [ 133.940116][T12288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12288 comm=syz.1.933 [ 134.027278][T12292] 9pnet_fd: Insufficient options for proto=fd [ 134.122254][ T5930] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.124652][ T64] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 134.161584][T12295] x_tables: duplicate underflow at hook 1 [ 134.164509][ T40] audit: type=1400 audit(524421.812:40026): avc: denied { validate_trans } for pid=12294 comm="syz.0.936" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 134.167185][T12297] x_tables: duplicate underflow at hook 1 [ 134.296790][ T40] audit: type=1400 audit(524421.950:40027): avc: denied { shutdown } for pid=12306 comm="syz.2.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.303198][ T40] audit: type=1400 audit(524421.950:40028): avc: denied { setopt } for pid=12306 comm="syz.2.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 134.532340][T12322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.537329][T12322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.541185][ T40] audit: type=1400 audit(524422.185:40029): avc: denied { write } for pid=12321 comm="syz.4.941" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 134.548438][ T40] audit: type=1400 audit(524422.185:40030): avc: denied { open } for pid=12321 comm="syz.4.941" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 135.149075][T12338] __nla_validate_parse: 2 callbacks suppressed [ 135.149086][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.946'. [ 135.154410][T12340] Cannot find del_set index 4 as target [ 135.213343][T12344] netlink: 'syz.2.948': attribute type 29 has an invalid length. [ 135.258320][T12348] netlink: zone id is out of range [ 135.260880][T12348] netlink: zone id is out of range [ 135.263667][T12348] netlink: zone id is out of range [ 135.265780][T12348] netlink: zone id is out of range [ 135.269213][T12348] netlink: zone id is out of range [ 135.420466][T12362] futex_wake_op: syz.0.950 tries to shift op by 32; fix this program [ 135.749857][ T64] Bluetooth: hci1: command 0x0405 tx timeout [ 135.821872][T12373] netlink: 'syz.2.955': attribute type 8 has an invalid length. [ 136.022487][ T40] audit: type=1400 audit(524423.631:40031): avc: denied { remount } for pid=12398 comm="syz.4.961" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 136.194456][T12411] tipc: Started in network mode [ 136.196171][T12411] tipc: Node identity b2023e5b2ee, cluster identity 3865 [ 136.199230][T12411] tipc: Enabled bearer , priority 0 [ 136.203460][T12411] syzkaller0: MTU too low for tipc bearer [ 136.205665][T12411] tipc: Disabling bearer [ 136.626835][T12433] tipc: New replicast peer: 255.255.255.255 [ 136.628969][T12433] tipc: Enabled bearer , priority 10 [ 136.660544][T12435] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 136.663318][T12435] /dev/nullb0: Can't open blockdev [ 136.804054][T12446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1808 sclass=netlink_route_socket pid=12446 comm=syz.1.973 [ 136.930848][T12456] netlink: 136 bytes leftover after parsing attributes in process `syz.2.977'. [ 136.934050][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 137.112148][ T10] raw-gadget.0 gadget.4: failed to queue reset event [ 137.150873][T12485] netlink: 'syz.2.985': attribute type 11 has an invalid length. [ 137.167133][T12485] netlink: 'syz.2.985': attribute type 7 has an invalid length. [ 137.181732][ T10] raw-gadget.0 gadget.4: failed to queue resume event [ 137.242664][ T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 137.246186][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 137.249450][ T10] raw-gadget.0 gadget.4: failed to queue reset event [ 137.314133][ T10] raw-gadget.0 gadget.4: failed to queue resume event [ 137.374695][ T10] usb 9-1: device descriptor read/64, error -32 [ 137.441504][T12504] syz.0.989: attempt to access beyond end of device [ 137.441504][T12504] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 137.448297][T12504] gfs2: error -5 reading superblock [ 137.486117][ T10] raw-gadget.0 gadget.4: failed to queue suspend event [ 137.489382][ T10] raw-gadget.0 gadget.4: failed to queue reset event [ 137.502324][T12510] sp0: Synchronizing with TNC [ 137.557406][ T10] raw-gadget.0 gadget.4: failed to queue resume event [ 137.618217][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 137.621805][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 137.624984][ T10] raw-gadget.0 gadget.4: failed to queue reset event [ 137.655399][T12527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 137.658248][T12527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 137.661420][T12527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 137.664589][T12527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.995'. [ 137.688936][ T10] raw-gadget.0 gadget.4: failed to queue resume event [ 137.749952][ T10] usb 9-1: device descriptor read/64, error -32 [ 137.761219][ T7142] tipc: Node number set to 2632072795 [ 137.808182][T12547] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 137.861304][ T10] raw-gadget.0 gadget.4: failed to queue suspend event [ 137.864296][ T10] usb usb9-port1: attempt power cycle [ 137.866113][ T10] raw-gadget.0 gadget.4: failed to queue disconnect event [ 137.868660][ T10] raw-gadget.0 gadget.4: failed to queue reset event [ 137.896268][T12549] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 137.899072][T12549] PKCS7: Only support pkcs7_signedData type [ 137.932289][ T10] raw-gadget.0 gadget.4: failed to queue resume event [ 137.934850][ T10] raw-gadget.0 gadget.4: failed to queue reset event [ 137.943975][T12554] netlink: 'syz.1.1003': attribute type 5 has an invalid length. [ 137.985268][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 137.985283][ T40] audit: type=1400 audit(524425.572:40038): avc: denied { setopt } for pid=12557 comm="syz.1.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.029612][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.033008][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.035315][T12568] trusted_key: encrypted_key: keylen parameter is missing [ 138.145267][ T10] raw-gadget.0 gadget.4: failed to queue resume event [ 138.206134][ T10] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 138.226558][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 138.229220][ T10] usb 9-1: device descriptor read/8, error -32 [ 138.325612][T12589] ip6t_REJECT: ECHOREPLY is not supported [ 138.344299][ T10] raw-gadget.0 gadget.4: failed to queue suspend event [ 138.347543][ T10] raw-gadget.0 gadget.4: failed to queue reset event [ 138.428553][ T10] raw-gadget.0 gadget.4: failed to queue resume event [ 138.445249][ T40] audit: type=1400 audit(524426.026:40039): avc: denied { accept } for pid=12606 comm="syz.2.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.445708][T12609] sctp: [Deprecated]: syz.2.1015 (pid 12609) Use of int in max_burst socket option deprecated. [ 138.445708][T12609] Use struct sctp_assoc_value instead [ 138.490227][ T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 138.510807][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 138.514195][ T10] usb 9-1: device descriptor read/8, error -32 [ 138.621712][ T10] raw-gadget.0 gadget.4: failed to queue suspend event [ 138.624736][ T10] usb usb9-port1: unable to enumerate USB device [ 139.221938][ T40] audit: type=1400 audit(524426.796:40040): avc: denied { write } for pid=12624 comm="syz.2.1020" path="socket:[27883]" dev="sockfs" ino=27883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.323498][T12628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1021'. [ 139.421770][T12633] qnx4: no qnx4 filesystem (no root dir). [ 139.493684][ T40] audit: type=1400 audit(524427.062:40041): avc: denied { read write } for pid=12626 comm="syz.2.1021" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 139.504184][ T40] audit: type=1400 audit(524427.062:40042): avc: denied { open } for pid=12626 comm="syz.2.1021" path="/250/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 139.513333][ T40] audit: type=1400 audit(524427.062:40043): avc: denied { ioctl } for pid=12626 comm="syz.2.1021" path="/250/file0/file0" dev="fuse" ino=3 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 139.642614][T12580] kexec: Could not allocate control_code_buffer [ 139.648703][T12646] overlayfs: missing 'lowerdir' [ 139.652516][ T40] audit: type=1800 audit(524427.220:40044): pid=12646 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1025" name="file0" dev="tmpfs" ino=635 res=0 errno=0 [ 139.663017][ T40] audit: type=1400 audit(524427.230:40045): avc: denied { accept } for pid=12648 comm="syz.2.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.691341][T12652] ip6t_rpfilter: unknown options [ 139.706549][ T5980] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 139.736097][ T40] audit: type=1400 audit(524427.309:40046): avc: denied { create } for pid=12659 comm="syz.1.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 139.743772][ T40] audit: type=1400 audit(524427.309:40047): avc: denied { connect } for pid=12659 comm="syz.1.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 139.857357][ T5980] usb 5-1: Using ep0 maxpacket: 32 [ 139.862703][ T5980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.867311][ T5980] usb 5-1: config 0 has no interfaces? [ 139.873114][ T5980] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 139.877194][ T5980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.880928][ T5980] usb 5-1: Product: syz [ 139.882848][ T5980] usb 5-1: Manufacturer: syz [ 139.884946][ T5980] usb 5-1: SerialNumber: syz [ 139.894546][ T5980] usb 5-1: config 0 descriptor?? [ 139.964046][T12683] netlink: 'syz.2.1036': attribute type 10 has an invalid length. [ 139.967660][T12683] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1036'. [ 139.975693][T12683] batman_adv: batadv0: Adding interface: virt_wifi0 [ 139.978671][T12683] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.991874][T12683] batman_adv: batadv0: Interface activated: virt_wifi0 [ 140.119298][ T5931] Bluetooth: hci1: unexpected event for opcode 0x080d [ 140.128382][T12705] bridge2: entered allmulticast mode [ 140.164035][T12712] program syz.2.1044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.206983][T12718] kAFS: No cell specified [ 140.304534][ T5980] usb 5-1: USB disconnect, device number 10 [ 140.326512][T12734] team_slave_1: entered allmulticast mode [ 140.616644][ C2] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 140.719521][T12789] veth0: entered promiscuous mode [ 140.724219][T12789] veth0: left promiscuous mode [ 140.868705][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1059'. [ 140.976318][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'. [ 141.275822][T12844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1070'. [ 141.342770][T12850] 9pnet_fd: p9_fd_create_tcp (12850): problem connecting socket to 127.0.0.1 [ 141.347833][T12850] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1071'. [ 141.422572][T12856] overlayfs: conflicting lowerdir path [ 141.445086][T12861] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1074'. [ 141.515060][T12861] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.116018][T12879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.119437][T12880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.120435][T12879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.122753][T12880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.129241][T12880] UHID_CREATE from different security context by process 387 (syz.4.1079), this is not allowed. [ 142.217039][T12898] trusted_key: encrypted_key: insufficient parameters specified [ 142.220587][T12899] trusted_key: encrypted_key: insufficient parameters specified [ 142.307404][T12907] program syz.2.1082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.363753][T12919] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1083'. [ 142.363787][T12920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1083'. [ 142.367226][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1083'. [ 142.380214][T12920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1083'. [ 142.384019][T12920] fuseblk: Unknown parameter '+ŽœdF:Q[!}5' [ 142.386444][T12920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1083'. [ 142.618304][ T10] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 142.769745][ T10] usb 7-1: device descriptor read/64, error -71 [ 142.896382][T12980] x_tables: duplicate underflow at hook 2 [ 142.896440][T12981] x_tables: duplicate underflow at hook 2 [ 142.986382][T12992] binder: 12991:12992 ioctl c020f509 200000000400 returned -22 [ 143.032904][ T10] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 143.163806][ T10] usb 7-1: device descriptor read/64, error -71 [ 143.285039][ T10] usb usb7-port1: attempt power cycle [ 143.366000][ T29] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.430165][T13091] overlayfs: missing 'workdir' [ 143.464429][T13093] pim6reg: entered allmulticast mode [ 143.467641][T13093] pim6reg: left allmulticast mode [ 143.527609][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 143.531778][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 143.536532][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 143.541740][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.545990][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.551792][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.554639][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.638340][ T10] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 143.659121][ T10] usb 7-1: device descriptor read/8, error -71 [ 143.769527][ T29] usb 5-1: GET_CAPABILITIES returned 0 [ 143.771896][ T29] usbtmc 5-1:16.0: can't read capabilities [ 143.931056][ T10] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 143.952070][ T10] usb 7-1: device descriptor read/8, error -71 [ 143.967863][ T7142] usb 5-1: USB disconnect, device number 11 [ 144.002650][T13142] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 144.064343][ T10] usb usb7-port1: unable to enumerate USB device [ 144.176404][ T5931] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 144.179853][ T5931] Bluetooth: hci1: Injecting HCI hardware error event [ 144.185159][ T5931] Bluetooth: hci1: hardware error 0x00 [ 144.421066][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 144.421082][ T40] audit: type=1400 audit(524431.939:40098): avc: denied { write } for pid=13166 comm="syz.4.1130" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 144.510645][T13179] vxcan1: tx address claim with dest, not broadcast [ 144.514279][T13179] xt_ecn: cannot match TCP bits for non-tcp packets [ 144.538430][T13181] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 144.596027][T13181] kvm: kvm [13180]: vcpu2, guest rIP: 0x913c Unhandled WRMSR(0x11e) = 0x0 [ 144.795457][ T40] audit: type=1400 audit(524432.306:40099): avc: denied { listen } for pid=13204 comm="syz.0.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.853395][T13207] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 144.888589][T13207] bond4: (slave geneve3): making interface the new active one [ 144.892412][T13207] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 144.896113][ T7949] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.899584][ T7949] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.905230][ T7949] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 144.908622][ T7949] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 145.239638][T13254] loop7: detected capacity change from 0 to 7 [ 145.291489][T13257] cgroup: Invalid name [ 145.330456][T13264] netlink: 'syz.1.1151': attribute type 5 has an invalid length. [ 145.421549][T13272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=13272 comm=syz.1.1152 [ 145.436507][T13272] bridge0: port 3(dummy0) entered disabled state [ 145.449016][T13272] dummy0 (unregistering): left allmulticast mode [ 145.451083][T13272] bridge0: port 3(dummy0) entered disabled state [ 145.518643][ T8254] Dev loop7: unable to read RDB block 7 [ 145.520625][ T8254] loop7: unable to read partition table [ 145.522757][ T8254] loop7: partition table beyond EOD, truncated [ 145.563905][ T40] audit: type=1400 audit(524433.070:40100): avc: denied { read } for pid=13285 comm="syz.0.1156" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 145.577547][ T40] audit: type=1400 audit(524433.070:40101): avc: denied { open } for pid=13285 comm="syz.0.1156" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 145.609662][ T40] audit: type=1400 audit(524433.119:40102): avc: denied { mounton } for pid=13289 comm="syz.0.1158" path="/proc/848/cgroup" dev="proc" ino=29273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 145.692147][ T40] audit: type=1400 audit(524433.199:40103): avc: denied { map } for pid=13303 comm="syz.2.1163" path="/275" dev="tmpfs" ino=1458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 145.824647][T13254] Dev loop7: unable to read RDB block 7 [ 145.827043][T13254] loop7: unable to read partition table [ 145.829314][T13254] loop7: partition table beyond EOD, truncated [ 145.831698][T13254] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 145.898276][ T841] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 146.075741][ T841] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.079669][ T841] usb 5-1: config 0 has no interface number 0 [ 146.082390][ T841] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 146.086875][ T841] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 146.091297][ T841] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.095072][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.101897][ T841] usb 5-1: config 0 descriptor?? [ 146.104883][T13297] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 146.117523][ T841] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 146.125575][T13339] __nla_validate_parse: 59 callbacks suppressed [ 146.125588][T13339] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1166'. [ 146.132234][T13339] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 146.271576][ T5931] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 146.376306][ T7142] usb 5-1: USB disconnect, device number 12 [ 146.488648][T13365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1167'. [ 146.526974][T13365] netlink: 'syz.4.1167': attribute type 2 has an invalid length. [ 146.529875][T13365] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1167'. [ 146.942815][T13432] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 146.945764][T13432] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 146.951404][T13432] vhci_hcd vhci_hcd.0: Device attached [ 146.955993][T13434] vhci_hcd: connection closed [ 146.956236][ T7948] vhci_hcd: stop threads [ 146.963066][ T7948] vhci_hcd: release socket [ 146.965002][ T7948] vhci_hcd: disconnect device [ 147.200207][T13442] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1171'. [ 147.338474][T13484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.448224][ T40] audit: type=1400 audit(524434.935:40104): avc: denied { lock } for pid=13519 comm="syz.2.1176" path="socket:[30033]" dev="sockfs" ino=30033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 147.492872][ T40] audit: type=1326 audit(524434.984:40105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.2.1177" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa35838eec9 code=0x0 [ 147.776475][T13562] bond2: entered allmulticast mode [ 147.899795][T13602] kvm: pic: non byte write [ 148.014497][T13609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1183'. [ 148.036941][T13611] netlink: 'syz.1.1186': attribute type 11 has an invalid length. [ 148.240315][ T7948] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.244486][ T7948] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.249081][ T7948] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.252468][ T7948] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.470462][T13644] QAT: failed to copy from user. [ 148.480865][T13644] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 148.603673][T13650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.610397][T13650] overlayfs: missing 'lowerdir' [ 148.650646][T13652] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1199'. [ 148.655814][ T40] audit: type=1400 audit(524436.136:40106): avc: denied { getopt } for pid=13651 comm="syz.2.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.692787][ T40] audit: type=1400 audit(524436.176:40107): avc: denied { bind } for pid=13654 comm="syz.2.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.831948][T13663] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 148.834677][T13663] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 148.838209][T13659] infiniband syz0: set active [ 148.839101][T13663] vhci_hcd vhci_hcd.0: Device attached [ 148.841782][T13659] infiniband syz0: added batadv_slave_0 [ 148.844966][T13664] vhci_hcd: connection closed [ 148.845197][ T7949] vhci_hcd: stop threads [ 148.849023][ T7949] vhci_hcd: release socket [ 148.851202][ T7949] vhci_hcd: disconnect device [ 148.867460][T13659] RDS/IB: syz0: added [ 148.869291][T13659] smc: adding ib device syz0 with port count 1 [ 148.871598][T13659] smc: ib device syz0 port 1 has no pnetid [ 149.577790][T13705] EXT4-fs (nbd0): unable to read superblock [ 149.613944][ T40] audit: type=1400 audit(524437.090:40108): avc: denied { ioctl } for pid=13707 comm="syz.1.1212" path="socket:[29469]" dev="sockfs" ino=29469 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 149.640938][ T40] audit: type=1400 audit(524437.110:40109): avc: denied { write } for pid=13707 comm="syz.1.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 149.648267][ T40] audit: type=1400 audit(524437.110:40110): avc: denied { listen } for pid=13707 comm="syz.1.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 149.839939][T13726] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 149.885034][T13732] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 149.891308][T13732] bond5 (unregistering): Released all slaves [ 150.020874][ T40] audit: type=1400 audit(524437.498:40111): avc: denied { mounton } for pid=13805 comm="syz.1.1220" path="/file0" dev="ramfs" ino=30121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 150.093808][T13818] binder: 13816:13818 ioctl c0306201 200000000540 returned -22 [ 150.161940][T13820] "syz.0.1226" (13820) uses obsolete ecb(arc4) skcipher [ 150.166706][ T40] audit: type=1400 audit(524437.637:40112): avc: denied { mounton } for pid=13819 comm="syz.0.1226" path="/307/file0" dev="tmpfs" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 150.220212][T13826] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1226'. [ 150.223086][T13826] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1226'. [ 150.402645][T13853] netlink: 'syz.1.1235': attribute type 1 has an invalid length. [ 150.424892][T13853] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.437592][T13853] bond3: (slave geneve3): making interface the new active one [ 150.441690][T13853] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 150.469956][T13853] can: request_module (can-proto-0) failed. [ 150.474812][T13853] overlayfs: failed to clone upperpath [ 150.645437][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1242'. [ 150.764877][T13916] netlink: 'syz.1.1244': attribute type 6 has an invalid length. [ 150.767433][T13916] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1244'. [ 150.772754][T13914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.777477][T13914] batadv_slave_0: entered promiscuous mode [ 150.780026][T13914] batadv_slave_0: entered allmulticast mode [ 150.966182][ T7949] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.969485][ T7949] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.972567][ T7949] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 151.032713][ T7949] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.037531][ T7949] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.041600][ T7949] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 151.118604][ T7949] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.122517][ T7949] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.126554][ T7949] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 151.200549][ T7949] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.201622][T13933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.204588][ T7949] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.208248][T13933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.212386][ T7949] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 151.248718][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.252708][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.256667][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.261994][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.265790][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.346033][ T7949] bridge_slave_1: left allmulticast mode [ 151.348606][ T7949] bridge_slave_1: left promiscuous mode [ 151.353253][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.361176][ T7949] bridge_slave_0: left allmulticast mode [ 151.363563][ T7949] bridge_slave_0: left promiscuous mode [ 151.367154][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.572911][ T7949] bond4 (unregistering): (slave geneve3): Releasing active interface [ 151.781247][T13960] netlink: 'syz.4.1251': attribute type 2 has an invalid length. [ 151.891755][T13963] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 152.066840][ T7949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.073724][ T7949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.077360][ T7949] bond0 (unregistering): Released all slaves [ 152.151620][ T7949] bond1 (unregistering): Released all slaves [ 152.224540][ T7949] bond2 (unregistering): Released all slaves [ 152.235327][ T7949] bond3 (unregistering): Released all slaves [ 152.246521][ T7949] bond4 (unregistering): Released all slaves [ 152.345979][ T7949] tipc: Left network mode [ 152.379220][T13936] chnl_net:caif_netlink_parms(): no params data found [ 152.540626][T13936] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.545301][T13936] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.548753][T13936] bridge_slave_0: entered allmulticast mode [ 152.553423][T13936] bridge_slave_0: entered promiscuous mode [ 152.567165][T13936] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.570173][T13936] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.574432][T13936] bridge_slave_1: entered allmulticast mode [ 152.577351][T13936] bridge_slave_1: entered promiscuous mode [ 152.638258][T13936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.654542][T13936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.697874][T13936] team0: Port device team_slave_0 added [ 152.706989][T13936] team0: Port device team_slave_1 added [ 152.776352][T13936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.779699][T13936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.791159][T13936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.794507][T14652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1256'. [ 152.813353][T13936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.816059][T13936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.826940][T13936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.832066][T14656] netlink: 'syz.1.1257': attribute type 27 has an invalid length. [ 152.889641][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 152.891321][T14656] bridge0: port 4(team0) entered disabled state [ 152.895877][T14656] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.899956][T14656] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.991090][T14656] batadv_slave_0: left promiscuous mode [ 152.992904][T14656] batadv_slave_0: left allmulticast mode [ 152.999070][T14656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.112130][T14656] macsec1: left promiscuous mode [ 153.114344][T14656] macsec1: left allmulticast mode [ 153.117598][T14656] geneve2: left promiscuous mode [ 153.119276][T14656] geneve2: left allmulticast mode [ 153.128166][T14656] bond2: left allmulticast mode [ 153.179423][ T64] Bluetooth: hci2: hardware error 0x01 [ 153.192777][ T7950] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.197883][ T7950] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.201422][ T7950] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.204674][ T7950] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.236372][T13936] hsr_slave_0: entered promiscuous mode [ 153.238718][T13936] hsr_slave_1: entered promiscuous mode [ 153.240860][T13936] debugfs: 'hsr0' already exists in 'hsr' [ 153.242674][T13936] Cannot create hsr debugfs directory [ 153.244594][T14728] netlink: 'syz.1.1258': attribute type 5 has an invalid length. [ 153.249426][ T7950] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.252383][ T7950] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.255530][ T7940] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.259268][ T7940] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.329153][ T7949] hsr_slave_0: left promiscuous mode [ 153.331830][ T7949] hsr_slave_1: left promiscuous mode [ 153.333884][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.337867][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.341907][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.345107][ T7949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.355885][ T5931] Bluetooth: hci0: command tx timeout [ 153.369150][ T7949] veth1_macvtap: left promiscuous mode [ 153.371097][ T7949] veth0_macvtap: left promiscuous mode [ 153.372909][ T7949] veth1_vlan: left promiscuous mode [ 153.374597][ T7949] veth0_vlan: left promiscuous mode [ 153.505499][ T40] audit: type=1326 audit(524440.959:40113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14400 comm="syz.4.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb2b8eec9 code=0x7fc00000 [ 153.515234][ T40] audit: type=1326 audit(524440.959:40114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14400 comm="syz.4.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bb2b8eec9 code=0x7fc00000 [ 153.524981][ T40] audit: type=1326 audit(524440.959:40115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14400 comm="syz.4.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb2b8eec9 code=0x7fc00000 [ 153.536090][ T40] audit: type=1326 audit(524440.959:40116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14400 comm="syz.4.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb2b8eec9 code=0x7fc00000 [ 153.545435][ T40] audit: type=1326 audit(524440.959:40117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14400 comm="syz.4.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb2b8eec9 code=0x7fc00000 [ 154.011070][ T12] smc: removing ib device syz0 [ 154.073940][ T7949] team0 (unregistering): Port device team_slave_1 removed [ 154.160307][ T7949] team0 (unregistering): Port device team_slave_0 removed [ 154.723730][T14891] overlayfs: missing 'lowerdir' [ 154.741204][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1267'. [ 154.802015][ T6012] syz0: Port: 1 Link DOWN [ 155.181167][T15061] netlink: 'syz.1.1276': attribute type 1 has an invalid length. [ 155.181714][T15063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1276'. [ 155.204170][ T64] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 155.245001][T15061] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.325274][T15063] bond4 (unregistering): Released all slaves [ 155.356753][T13936] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.361715][T13936] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.363481][ T7949] IPVS: stop unused estimator thread 0... [ 155.370335][T13936] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.379134][T13936] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.422397][T13936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.431770][T13936] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.437821][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.440932][ T7950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.445856][ T64] Bluetooth: hci0: command tx timeout [ 155.450209][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.453334][ T7948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.495022][T15162] openvswitch: netlink: Key type 78 is out of range max 32 [ 155.499405][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 155.530573][T15162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1281'. [ 155.533708][T15162] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1281'. [ 155.534440][T15160] binder: 15159:15160 ioctl c0306201 200000000040 returned -14 [ 155.541120][ T5980] IPVS: starting estimator thread 0... [ 155.614050][T13936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.621922][T15176] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 155.637083][T15168] IPVS: using max 45 ests per chain, 108000 per kthread [ 155.689988][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 155.690004][ T40] audit: type=1400 audit(524443.139:40120): avc: denied { firmware_load } for pid=15185 comm="syz.4.1285" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 155.734045][T15187] IPVS: rr: FWM 3 0x00000003 - no destination available [ 155.752817][T15187] syz.4.1285 (15187) used greatest stack depth: 19544 bytes left [ 155.789921][T13936] veth0_vlan: entered promiscuous mode [ 155.795103][T13936] veth1_vlan: entered promiscuous mode [ 155.809116][T13936] veth0_macvtap: entered promiscuous mode [ 155.814798][T13936] veth1_macvtap: entered promiscuous mode [ 155.823204][T15202] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 155.828835][T13936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.835908][T13936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.848039][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.853625][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.858906][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.862335][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.901282][ T7939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.904146][ T7939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.913359][T15213] binder: 15210:15213 ioctl c0306201 2000000001c0 returned -14 [ 155.921757][ T7939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.924496][ T7939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.998808][T15223] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1291'. [ 156.145668][T15239] netem: incorrect ge model size [ 156.147576][T15239] netem: change failed [ 156.211483][ T40] audit: type=1400 audit(524443.657:40121): avc: denied { read } for pid=15246 comm="syz.1.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 156.286553][T15252] netlink: 'syz.1.1298': attribute type 39 has an invalid length. [ 156.329492][T15256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1299'. [ 156.816059][T15283] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 156.881754][ T40] audit: type=1400 audit(524444.324:40122): avc: denied { bind } for pid=15291 comm="syz.4.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.888938][ T40] audit: type=1400 audit(524444.324:40123): avc: denied { connect } for pid=15291 comm="syz.4.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.904898][T15290] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 156.909425][T15290] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.950373][T15298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1309'. [ 156.957712][T15298] xfrm1: entered promiscuous mode [ 156.959505][T15298] xfrm1: entered allmulticast mode [ 156.995269][T15290] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 156.995679][T15302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.998531][T15290] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.002426][T15302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.063936][T15290] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 157.067157][T15290] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.142409][T15290] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 157.145851][T15290] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 157.149083][T15290] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.214278][ T7939] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 157.217449][ T7939] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.225824][ T7949] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 157.228542][ T7949] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.242757][ T7948] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 157.245628][ T7948] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.254430][ T40] audit: type=1800 audit(524444.693:40124): pid=15320 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1311" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 157.258522][ T7948] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 157.264409][ T7948] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.269644][T15289] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 157.274505][T15289] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.280687][ T7948] ================================================================== [ 157.283354][ T7948] BUG: KASAN: slab-use-after-free in __mutex_lock+0xc6d/0x1060 SYZFAIL: failed to recv rpc [ 157.286423][ T7948] Read of size 8 at addr ffff888032da58b0 by task kworker/u32:42/7948 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 157.288162][ T40] audit: type=1400 audit(524444.723:40125): avc: denied { write } for pid=5873 comm="syz-executor" path="pipe:[3835]" dev="pipefs" ino=3835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 157.291483][ T7948] [ 157.291495][ T7948] CPU: 3 UID: 0 PID: 7948 Comm: kworker/u32:42 Not tainted syzkaller #0 PREEMPT(full) [ 157.291510][ T7948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.291518][ T7948] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 157.291549][ T7948] Call Trace: [ 157.291554][ T7948] [ 157.291558][ T7948] dump_stack_lvl+0x116/0x1f0 [ 157.291573][ T7948] print_report+0xcd/0x630 [ 157.291591][ T7948] ? __virt_addr_valid+0x81/0x610 [ 157.291603][ T7948] ? __phys_addr+0xe8/0x180 [ 157.291614][ T7948] ? __mutex_lock+0xc6d/0x1060 [ 157.291627][ T7948] kasan_report+0xe0/0x110 [ 157.291642][ T7948] ? __mutex_lock+0xc6d/0x1060 [ 157.291656][ T7948] ? udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 157.291673][ T7948] __mutex_lock+0xc6d/0x1060 [ 157.291686][ T7948] ? udp_tunnel_nic_device_sync_work+0x27/0xa10 [ 157.291704][ T7948] ? __pfx___mutex_lock+0x10/0x10 [ 157.291719][ T7948] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 157.291731][ T7948] ? debug_object_deactivate+0x1ec/0x3a0 [ 157.291755][ T7948] ? udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 157.291772][ T7948] ? rtnl_lock+0x9/0x20 [ 157.291788][ T7948] udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 157.291806][ T7948] ? rcu_is_watching+0x12/0xc0 [ 157.291817][ T7948] process_one_work+0x9cf/0x1b70 [ 157.291834][ T7948] ? __pfx_udp_tunnel_nic_device_sync_work+0x10/0x10 [ 157.291851][ T7948] ? __pfx_process_one_work+0x10/0x10 [ 157.291868][ T7948] ? assign_work+0x1a0/0x250 [ 157.291882][ T7948] worker_thread+0x6c8/0xf10 [ 157.291899][ T7948] ? __pfx_worker_thread+0x10/0x10 [ 157.291914][ T7948] kthread+0x3c5/0x780 [ 157.291928][ T7948] ? __pfx_kthread+0x10/0x10 [ 157.291942][ T7948] ? rcu_is_watching+0x12/0xc0 [ 157.291951][ T7948] ? __pfx_kthread+0x10/0x10 [ 157.291965][ T7948] ret_from_fork+0x675/0x7d0 [ 157.291978][ T7948] ? __pfx_kthread+0x10/0x10 [ 157.291991][ T7948] ret_from_fork_asm+0x1a/0x30 [ 157.292006][ T7948] [ 157.292009][ T7948] [ 157.362364][ T7948] Allocated by task 15290: [ 157.363897][ T7948] kasan_save_stack+0x33/0x60 [ 157.365633][ T7948] kasan_save_track+0x14/0x30 [ 157.367528][ T7948] __kasan_kmalloc+0xaa/0xb0 [ 157.369373][ T7948] __kmalloc_noprof+0x32f/0x880 [ 157.371284][ T7948] udp_tunnel_nic_netdevice_event+0x1298/0x1e30 [ 157.373778][ T7948] notifier_call_chain+0xbc/0x410 [ 157.375769][ T7948] call_netdevice_notifiers_info+0xbe/0x140 [ 157.378159][ T7948] register_netdevice+0x182e/0x2270 [ 157.380316][ T7948] nsim_create+0xdd5/0x1260 [ 157.381890][ T7948] __nsim_dev_port_add+0x435/0x7d0 [ 157.383523][ T7948] nsim_dev_reload_up+0x5b8/0x860 [ 157.385122][ T7948] devlink_reload+0x325/0x7c0 [ 157.386627][ T7948] devlink_nl_reload_doit+0xe31/0x1410 [ 157.388366][ T7948] genl_family_rcv_msg_doit+0x209/0x2f0 [ 157.390114][ T7948] genl_rcv_msg+0x55c/0x800 [ 157.391578][ T7948] netlink_rcv_skb+0x158/0x420 [ 157.393104][ T7948] genl_rcv+0x28/0x40 [ 157.394378][ T7948] netlink_unicast+0x5aa/0x870 [ 157.395911][ T7948] netlink_sendmsg+0x8c8/0xdd0 [ 157.397433][ T7948] ____sys_sendmsg+0xa98/0xc70 [ 157.399067][ T7948] ___sys_sendmsg+0x134/0x1d0 [ 157.400596][ T7948] __sys_sendmsg+0x16d/0x220 [ 157.402202][ T7948] do_syscall_64+0xcd/0xfa0 [ 157.403665][ T7948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.405582][ T7948] [ 157.406446][ T7948] Freed by task 15289: [ 157.407837][ T7948] kasan_save_stack+0x33/0x60 [ 157.409406][ T7948] kasan_save_track+0x14/0x30 [ 157.410935][ T7948] __kasan_save_free_info+0x3b/0x60 [ 157.412591][ T7948] __kasan_slab_free+0x5f/0x80 [ 157.414096][ T7948] kfree+0x2b8/0x6d0 [ 157.415328][ T7948] udp_tunnel_nic_netdevice_event+0xc3f/0x1e30 [ 157.417289][ T7948] notifier_call_chain+0xbc/0x410 [ 157.418878][ T7948] call_netdevice_notifiers_info+0xbe/0x140 [ 157.420769][ T7948] unregister_netdevice_many_notify+0xf76/0x24c0 [ 157.422738][ T7948] unregister_netdevice_queue+0x305/0x3f0 [ 157.424530][ T7948] nsim_destroy+0x198/0x800 [ 157.425954][ T7948] __nsim_dev_port_del+0x189/0x240 [ 157.427568][ T7948] nsim_dev_reload_destroy+0x10a/0x4d0 [ 157.429281][ T7948] nsim_dev_reload_down+0x6e/0xd0 [ 157.430856][ T7948] devlink_reload+0x1a1/0x7c0 [ 157.432317][ T7948] devlink_nl_reload_doit+0xe31/0x1410 [ 157.433972][ T7948] genl_family_rcv_msg_doit+0x209/0x2f0 [ 157.436049][ T7948] genl_rcv_msg+0x55c/0x800 [ 157.437651][ T7948] netlink_rcv_skb+0x158/0x420 [ 157.439177][ T7948] genl_rcv+0x28/0x40 [ 157.440431][ T7948] netlink_unicast+0x5aa/0x870 [ 157.441909][ T7948] netlink_sendmsg+0x8c8/0xdd0 [ 157.443353][ T7948] ____sys_sendmsg+0xa98/0xc70 [ 157.444849][ T7948] ___sys_sendmsg+0x134/0x1d0 [ 157.446270][ T7948] __sys_sendmsg+0x16d/0x220 [ 157.447781][ T7948] do_syscall_64+0xcd/0xfa0 [ 157.449219][ T7948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.451012][ T7948] [ 157.451767][ T7948] Last potentially related work creation: [ 157.453465][ T7948] kasan_save_stack+0x33/0x60 [ 157.454891][ T7948] kasan_record_aux_stack+0xa7/0xc0 [ 157.456494][ T7948] insert_work+0x36/0x230 [ 157.457926][ T7948] __queue_work+0x3f8/0x1160 [ 157.459530][ T7948] queue_work_on+0x1a4/0x1f0 [ 157.460949][ T7948] __udp_tunnel_nic_add_port+0x6f8/0xde0 [ 157.462639][ T7948] udp_tunnel_push_rx_port+0x1af/0x230 [ 157.464357][ T7948] geneve_offload_rx_ports+0xbf/0x1c0 [ 157.466091][ T7948] geneve_netdevice_event+0x77/0xb0 [ 157.467862][ T7948] notifier_call_chain+0xbc/0x410 [ 157.469547][ T7948] call_netdevice_notifiers_info+0xbe/0x140 [ 157.471624][ T7948] call_netdevice_notifiers+0x7c/0xb0 [ 157.473331][ T7948] udp_tunnel_nic_netdevice_event+0x1212/0x1e30 [ 157.475259][ T7948] notifier_call_chain+0xbc/0x410 [ 157.476897][ T7948] call_netdevice_notifiers_info+0xbe/0x140 [ 157.478771][ T7948] register_netdevice+0x182e/0x2270 [ 157.480799][ T7948] nsim_create+0xdd5/0x1260 [ 157.482519][ T7948] __nsim_dev_port_add+0x435/0x7d0 [ 157.484472][ T7948] nsim_dev_reload_up+0x5b8/0x860 [ 157.486443][ T7948] devlink_reload+0x325/0x7c0 [ 157.488133][ T7948] devlink_nl_reload_doit+0xe31/0x1410 [ 157.489695][ T7948] genl_family_rcv_msg_doit+0x209/0x2f0 [ 157.491322][ T7948] genl_rcv_msg+0x55c/0x800 [ 157.493176][ T7948] netlink_rcv_skb+0x158/0x420 [ 157.495100][ T7948] genl_rcv+0x28/0x40 [ 157.496693][ T7948] netlink_unicast+0x5aa/0x870 [ 157.498570][ T7948] netlink_sendmsg+0x8c8/0xdd0 [ 157.500461][ T7948] ____sys_sendmsg+0xa98/0xc70 [ 157.502341][ T7948] ___sys_sendmsg+0x134/0x1d0 [ 157.504206][ T7948] __sys_sendmsg+0x16d/0x220 [ 157.506029][ T7948] do_syscall_64+0xcd/0xfa0 [ 157.507866][ T7948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.510182][ T7948] [ 157.511138][ T7948] Second to last potentially related work creation: [ 157.513774][ T7948] kasan_save_stack+0x33/0x60 [ 157.515747][ T7948] kasan_record_aux_stack+0xa7/0xc0 [ 157.517452][ T7948] insert_work+0x36/0x230 [ 157.518799][ T7948] __queue_work+0x97e/0x1160 [ 157.520282][ T7948] queue_work_on+0x1a4/0x1f0 [ 157.521749][ T7948] __udp_tunnel_nic_add_port+0x6f8/0xde0 [ 157.523527][ T7948] udp_tunnel_push_rx_port+0x1af/0x230 [ 157.525241][ T7948] vxlan_offload_rx_ports+0xd5/0x270 [ 157.526931][ T7948] vxlan_netdevice_event+0x2de/0x370 [ 157.528599][ T7948] notifier_call_chain+0xbc/0x410 [ 157.530189][ T7948] call_netdevice_notifiers_info+0xbe/0x140 [ 157.532069][ T7948] call_netdevice_notifiers+0x7c/0xb0 [ 157.533771][ T7948] udp_tunnel_nic_netdevice_event+0x1212/0x1e30 [ 157.535755][ T7948] notifier_call_chain+0xbc/0x410 [ 157.537371][ T7948] call_netdevice_notifiers_info+0xbe/0x140 [ 157.539361][ T7948] register_netdevice+0x182e/0x2270 [ 157.541033][ T7948] nsim_create+0xdd5/0x1260 [ 157.542483][ T7948] __nsim_dev_port_add+0x435/0x7d0 [ 157.544111][ T7948] nsim_dev_reload_up+0x5b8/0x860 [ 157.545710][ T7948] devlink_reload+0x325/0x7c0 [ 157.547213][ T7948] devlink_nl_reload_doit+0xe31/0x1410 [ 157.548952][ T7948] genl_family_rcv_msg_doit+0x209/0x2f0 [ 157.550686][ T7948] genl_rcv_msg+0x55c/0x800 [ 157.552138][ T7948] netlink_rcv_skb+0x158/0x420 [ 157.553669][ T7948] genl_rcv+0x28/0x40 [ 157.554918][ T7948] netlink_unicast+0x5aa/0x870 [ 157.556548][ T7948] netlink_sendmsg+0x8c8/0xdd0 [ 157.558256][ T7948] ____sys_sendmsg+0xa98/0xc70 [ 157.559892][ T7948] ___sys_sendmsg+0x134/0x1d0 [ 157.561476][ T7948] __sys_sendmsg+0x16d/0x220 [ 157.563008][ T7948] do_syscall_64+0xcd/0xfa0 [ 157.564488][ T7948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.566350][ T7948] [ 157.567156][ T7948] The buggy address belongs to the object at ffff888032da5800 [ 157.567156][ T7948] which belongs to the cache kmalloc-256 of size 256 [ 157.571454][ T7948] The buggy address is located 176 bytes inside of [ 157.571454][ T7948] freed 256-byte region [ffff888032da5800, ffff888032da5900) [ 157.575801][ T7948] [ 157.576588][ T7948] The buggy address belongs to the physical page: [ 157.578552][ T7948] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32da4 [ 157.581309][ T7948] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 157.583982][ T7948] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 157.586517][ T7948] page_type: f5(slab) [ 157.587905][ T7948] raw: 00fff00000000040 ffff88801b442b40 dead000000000100 dead000000000122 [ 157.590835][ T7948] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 157.593820][ T7948] head: 00fff00000000040 ffff88801b442b40 dead000000000100 dead000000000122 [ 157.596542][ T7948] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 157.599187][ T7948] head: 00fff00000000001 ffffea0000cb6901 00000000ffffffff 00000000ffffffff [ 157.601867][ T7948] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 157.604581][ T7948] page dumped because: kasan: bad access detected [ 157.606586][ T7948] page_owner tracks the page as allocated [ 157.608401][ T7948] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5929, tgid 5929 (syz-executor), ts 55168975558, free_ts 54912958249 [ 157.614899][ T7948] post_alloc_hook+0x1c0/0x230 [ 157.616468][ T7948] get_page_from_freelist+0x10a3/0x3a30 [ 157.618281][ T7948] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 157.620209][ T7948] alloc_pages_mpol+0x1fb/0x550 [ 157.621764][ T7948] new_slab+0x24a/0x360 [ 157.623093][ T7948] ___slab_alloc+0xdc4/0x1ae0 [ 157.624607][ T7948] __slab_alloc.constprop.0+0x63/0x110 [ 157.626322][ T7948] __kmalloc_noprof+0x501/0x880 [ 157.627902][ T7948] fib_create_info+0x53f/0x46b0 [ 157.629563][ T7948] fib_table_insert+0x177/0x1c40 [ 157.631138][ T7948] fib_magic+0x4d4/0x5c0 [ 157.632518][ T7948] fib_add_ifaddr+0x4d2/0x580 [ 157.633999][ T7948] fib_netdev_event+0x38a/0x710 [ 157.635755][ T7948] notifier_call_chain+0xbc/0x410 [ 157.637356][ T7948] call_netdevice_notifiers_info+0xbe/0x140 [ 157.639693][ T7948] __dev_notify_flags+0x12c/0x2e0 [ 157.641517][ T7948] page last free pid 5927 tgid 5927 stack trace: [ 157.643528][ T7948] __free_frozen_pages+0x7df/0x1160 [ 157.645253][ T7948] __put_partials+0x130/0x170 [ 157.646884][ T7948] qlist_free_all+0x4d/0x120 [ 157.648554][ T7948] kasan_quarantine_reduce+0x195/0x1e0 [ 157.650470][ T7948] __kasan_slab_alloc+0x69/0x90 [ 157.652017][ T7948] kmem_cache_alloc_noprof+0x250/0x6e0 [ 157.653737][ T7948] getname_flags.part.0+0x4c/0x550 [ 157.655350][ T7948] getname_flags+0x93/0xf0 [ 157.656811][ T7948] do_sys_openat2+0xb8/0x1d0 [ 157.658285][ T7948] __x64_sys_openat+0x174/0x210 [ 157.659867][ T7948] do_syscall_64+0xcd/0xfa0 [ 157.661756][ T7948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.663788][ T7948] [ 157.664620][ T7948] Memory state around the buggy address: [ 157.666699][ T7948] ffff888032da5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.669327][ T7948] ffff888032da5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.672045][ T7948] >ffff888032da5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.674660][ T7948] ^ [ 157.676481][ T7948] ffff888032da5900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.678985][ T7948] ffff888032da5980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.681470][ T7948] ================================================================== [ 157.685946][ T64] Bluetooth: hci0: command tx timeout [ 157.687774][ T7948] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.690533][ T7948] CPU: 3 UID: 0 PID: 7948 Comm: kworker/u32:42 Not tainted syzkaller #0 PREEMPT(full) [ 157.694460][ T7948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.698921][ T7948] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 157.702711][ T7948] Call Trace: [ 157.704006][ T7948] [ 157.705221][ T7948] dump_stack_lvl+0x3d/0x1f0 [ 157.707172][ T7948] vpanic+0x640/0x6f0 [ 157.708796][ T7948] panic+0xca/0xd0 [ 157.710317][ T7948] ? __pfx_panic+0x10/0x10 [ 157.712240][ T7948] ? __mutex_lock+0xc6d/0x1060 [ 157.714156][ T7948] ? preempt_schedule_common+0x44/0xc0 [ 157.716294][ T7948] ? preempt_schedule_thunk+0x16/0x30 [ 157.718414][ T7948] ? check_panic_on_warn+0x1f/0xb0 [ 157.720435][ T7948] check_panic_on_warn+0xab/0xb0 [ 157.722415][ T7948] end_report+0x107/0x170 [ 157.724132][ T7948] kasan_report+0xee/0x110 [ 157.725895][ T7948] ? __mutex_lock+0xc6d/0x1060 [ 157.727808][ T7948] ? udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 157.730246][ T7948] __mutex_lock+0xc6d/0x1060 [ 157.732092][ T7948] ? udp_tunnel_nic_device_sync_work+0x27/0xa10 [ 157.734608][ T7948] ? __pfx___mutex_lock+0x10/0x10 [ 157.736612][ T7948] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 157.738922][ T7948] ? debug_object_deactivate+0x1ec/0x3a0 [ 157.741154][ T7948] ? udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 157.743639][ T7948] ? rtnl_lock+0x9/0x20 [ 157.745273][ T7948] udp_tunnel_nic_device_sync_work+0x3b/0xa10 [ 157.747669][ T7948] ? rcu_is_watching+0x12/0xc0 [ 157.749545][ T7948] process_one_work+0x9cf/0x1b70 [ 157.751507][ T7948] ? __pfx_udp_tunnel_nic_device_sync_work+0x10/0x10 [ 157.754241][ T7948] ? __pfx_process_one_work+0x10/0x10 [ 157.756514][ T7948] ? assign_work+0x1a0/0x250 [ 157.758421][ T7948] worker_thread+0x6c8/0xf10 [ 157.760243][ T7948] ? __pfx_worker_thread+0x10/0x10 [ 157.762232][ T7948] kthread+0x3c5/0x780 [ 157.763854][ T7948] ? __pfx_kthread+0x10/0x10 [ 157.765677][ T7948] ? rcu_is_watching+0x12/0xc0 [ 157.767585][ T7948] ? __pfx_kthread+0x10/0x10 [ 157.769404][ T7948] ret_from_fork+0x675/0x7d0 [ 157.771215][ T7948] ? __pfx_kthread+0x10/0x10 [ 157.773060][ T7948] ret_from_fork_asm+0x1a/0x30 [ 157.774970][ T7948] [ 157.776916][ T7948] Kernel Offset: disabled [ 157.778588][ T7948] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:29:56 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000016 RCX=ffffffff846199cf RDX=ffff888056cf4900 RSI=ffffffff846199d9 RDI=0000000000000001 RBP=dffffc0000000000 RSP=ffffc9002110f698 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffc9002110f788 R13=ffff888024e4d830 R14=0000000000000016 R15=0000000000000000 RIP=ffffffff846199d9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ffb9ef896c0 ffffffff 00c00000 GS =0000 ffff8880d69d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffb9ef88ff8 CR3=0000000054958000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb9e212fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb9e212fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb9e212fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb9e212fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb9e21305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb9e21313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb9e3b74a8 00007ffb9e3b74a0 00007ffb9e3b7498 00007ffb9e3b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb9ef1d100 00007ffb9e3b7460 00007ffb9e3b7478 00007ffb9e3b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffb9e3b74b8 00007ffb9e3b74b0 00007ffb9e3b74a8 00007ffb9e3b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000028 RBX=00007ffc9484fe10 RCX=0000000000000001 RDX=000000000000000f RSI=00007fbfaf43a8c0 RDI=00007ffc9484ff25 RBP=0000000000000015 RSP=00007ffc9484f8a0 R8 =0000000000000012 R9 =00007ffc9484fda7 R10=00000000ffffffff R11=0000000000000000 R12=0000000000000064 R13=00007ffc94851f58 R14=0000000000000000 R15=0000000000000000 RIP=00007fbfaf33b9f9 RFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555935da500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc9484fd50 CR3=000000003289c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000048 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc9484ff10 00007ffc9484ff10 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc94852040 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555935fecaf 00005555935fe210 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555935f24b6 00005555935f22a0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4361727478450063 7072207663657220 6f742064656c6961 6600647a253d6e20 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434457515d450046 5557055346405705 4a51054140494c44 4300415f00184b05 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffffff5 080bf8030404000b f4031204000bf003 0002000be8030804 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100001080001 0000040806060103 f60010000d800401 000006080606015b ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a60683a208000de0 030010000dd00300 10000dc003021000 0db00301b0100010 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030070692c74726f 702c70693a687361 6801ffffffffffff ffffdf080c900306 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04000c8c03280400 0c880300317a7973 01ffffffffffffff fff5080bf8030404 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=00000000000000ec RCX=ffffffff819c1d21 RDX=ffff88801f2d8000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc9000078fb80 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000f1f73 R13=0000000000000200 R14=ffff8880300ec900 R15=ffffc9000078fc50 RIP=ffffffff81bd3398 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bd9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00001ffffffff740 CR3=0000000053b40000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe7a3993c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bb2c12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bb2c12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bb2c12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bb2c12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bb2c1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5bb2c1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff853088d5 RDI=ffffffff9ae077e0 RBP=ffffffff9ae077a0 RSP=ffffc9000d7274c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6164323330386552 R12=0000000000000000 R13=0000000000000005 R14=ffffffff9ae077a0 R15=ffffffff85308870 RIP=ffffffff853088ff RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cd9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33663fff CR3=000000002a455000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000000000 0000000000000120 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63aca12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63aca12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63aca12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63aca12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63aca1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63aca1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 17de4451259f3d7e 4e0c96b903c631b6 23505c44265e825e 92d0dab82125c530 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c4e917f5970e404 95986a8cf6bd8c2b c5c4ef6a17de0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03c631b623505c44 265e825e92d0dab8 2125c5308676bde1 c788fc34c458ed2d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f09b3d00c9ee18f cb6173e109690619 fe01c5e3cdbb2fb7 cb79098420af7b10 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80bb84f3e7921bb4 05857d9c0dbf2462 925bec9b71e11333 5d0671feaade658c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ccf24883610083ca 6b23bd6de3a360d9 2425c8fc7426fc75 3904c2c7c762c116 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 15dcdf51c207bf7c f33c4363ef170318 6df6d75896d0f40f 5e963991fac5c99a ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000