last executing test programs: 5m4.914951831s ago: executing program 2 (id=757): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) poll(&(0x7f0000001280)=[{r0, 0x8100}], 0x1, 0x4d8b7b7e) (async) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4, &(0x7f0000000180)={[{@volatile}, {@uuid_auto}, {@userxattr}, {@uuid_auto}, {@redirect_dir_off}, {@xino_on}, {@volatile}, {@userxattr}, {@metacopy_off}, {@xino_off}], [{@euid_eq={'euid', 0x3d, r2}}, {@appraise}]}) sendmmsg$inet6(r1, &(0x7f00000061c0)=[{{&(0x7f0000000ac0)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) 5m4.854001051s ago: executing program 2 (id=759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r5 = fanotify_init(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000000000000010010"], 0x10}}], 0x1, 0x4000001) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x13, 0x4, 0x8, 0xb, 0x40}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) r7 = fcntl$dupfd(r3, 0x0, r4) write$FUSE_NOTIFY_STORE(r7, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0x6}}, 0xc388) ioctl$SOUND_MIXER_READ_STEREODEVS(r7, 0x80044dfb, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x64, 0x4}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001060000000014000180080001000000000008000200ac14143e080007400000050000000000000000000800154000120000a929b0f223352acf6ac4168f3053a51c1ff4647f5d5582d36a75e0a7443d313e4c1a9109952f83b3dae2ac2f97c94a551ee27d74a6e9b36989fb79"], 0x74}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async) fanotify_init(0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000000000000010010"], 0x10}}], 0x1, 0x4000001) (async) write$binfmt_elf64(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x13, 0x4, 0x8, 0xb, 0x40}, 0x50) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) (async) fcntl$dupfd(r3, 0x0, r4) (async) write$FUSE_NOTIFY_STORE(r7, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0x0, 0x6}}, 0xc388) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r7, 0x80044dfb, &(0x7f0000000040)) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x64, 0x4}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001060000000014000180080001000000000008000200ac14143e080007400000050000000000000000000800154000120000a929b0f223352acf6ac4168f3053a51c1ff4647f5d5582d36a75e0a7443d313e4c1a9109952f83b3dae2ac2f97c94a551ee27d74a6e9b36989fb79"], 0x74}}, 0x0) (async) 5m4.804096389s ago: executing program 2 (id=762): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050029bd7000fedbdf253e00000008000300", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r5, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x38, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x188}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}]}, 0x38}}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x31) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) 5m4.663797926s ago: executing program 2 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffff, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x402c894}, 0x4048000) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002640), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000002680)={0xffffff7f, 0x2, 'client1\x00', 0x0, "2245941080736c1d", "db7895b88a8cfee74a15e0c3d0a55a5cb7f822ac34a3a29d6da58b5d00001000"}) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000240)=r3, 0x4) sendmsg$inet6(r2, &(0x7f0000003100)={&(0x7f0000000080)={0xa, 0x5e21, 0x74, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x5}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="8000e859667fbc13", 0x8}], 0x1}, 0x8050) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000b4, 0x0, 0x9}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x4ec5, &(0x7f0000000140)={0x0, 0xd210, 0x2, 0x3, 0x224}, &(0x7f0000000080), 0x0, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffff, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x402c894}, 0x4048000) (async) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) (async) umount2(&(0x7f0000000100)='./file0\x00', 0x4) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002640), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000002680)={0xffffff7f, 0x2, 'client1\x00', 0x0, "2245941080736c1d", "db7895b88a8cfee74a15e0c3d0a55a5cb7f822ac34a3a29d6da58b5d00001000"}) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000240)=r3, 0x4) (async) sendmsg$inet6(r2, &(0x7f0000003100)={&(0x7f0000000080)={0xa, 0x5e21, 0x74, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x5}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="8000e859667fbc13", 0x8}], 0x1}, 0x8050) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000b4, 0x0, 0x9}]}) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_io_uring_setup(0x4ec5, &(0x7f0000000140)={0x0, 0xd210, 0x2, 0x3, 0x224}, &(0x7f0000000080), 0x0, 0x0) (async) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 5m4.474893021s ago: executing program 2 (id=769): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101002) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000000000000feefffff"], 0xc8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}}, 0x0) close(r2) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500000001000000feefffff"], 0xc8) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r4, 0x104, 0x2, 0x0, &(0x7f0000000040)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@fwd={0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x8, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x46}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r6 = socket$kcm(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x11, &(0x7f0000000040)=0x1ff, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1002, 0x3a, 0x1000, 0x3a, 0xbb0, 0xf83, 0x6}, 0x1c) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, r5, 0x2, 0x5, 0x4}, 0x50) ioctl$OCFS2_IOC_GROUP_ADD64(r9, 0x40186f03, &(0x7f00000002c0)={0x12, 0x561, 0x7}) 5m4.254957991s ago: executing program 2 (id=773): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22004014}, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m4.147252008s ago: executing program 32 (id=773): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22004014}, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m52.804034255s ago: executing program 0 (id=890): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x4, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000000)='%\'\x00', 0x48c002, &(0x7f0000000040)={@_ha_fsid={[0x80, 0x7]}, {0x6, 0x81, 0x0, 0x22}}, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000200)=[0x0], &(0x7f0000000f80)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x8, 0xa, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0xe8, 0x111, 0x4b4, 0x0, 0x700, 0x2b8, 0x278, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @private1, [], [0x0, 0x0, 0x0, 0xff], 'macvlan0\x00', 'team_slave_0\x00', {}, {0x1fe}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x10, "f0b35f334454456b5a1bc219fb6b2168a1daee9330995069d01067dcc709"}}}, {{@ipv6={@private1, @private1, [0x0, 0xffffffff, 0xff000000, 0xff000000], [0xff, 0x0, 0xffffffff, 0xffffffff], 'ipvlan1\x00', 'wlan0\x00', {0x80f0adaf0a7b4ff8}, {0xff}, 0x1d, 0x81, 0x2, 0x30}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:dhcpd_state_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000006c0)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x6, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000840)={&(0x7f0000000700)=[0x0], &(0x7f0000000740)=[{}], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x6, 0x1}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff0000bb719b98fb73e53a0000000600"}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0xfffffffb, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000f40)={&(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x8, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={&(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[{}], &(0x7f0000000980), &(0x7f0000000e40)=[0x0, 0x0], 0x1, 0x3ffffdc0, 0x4000000000000229, 0x0, r5}) r6 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lseek(r6, 0x8000000000000000, 0x4) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=[r9], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r12, r10, r11], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000bc0)={&(0x7f0000000a80)=[0x0, 0x0], &(0x7f0000000ac0)=[{}], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0], 0x1, 0x4, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000cc0)={&(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xdededede}) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x1) r15 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r14, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xdddd0000, 0x0, r15}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r14, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x206000, 0x8}) 4m52.59498832s ago: executing program 0 (id=893): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4004}, 0xff29}, 0x2a) 4m52.594607s ago: executing program 0 (id=894): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9a7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x200, 0x1, 0xffffffffffffffff, 0xeeb, 0x949}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 4m52.483694159s ago: executing program 0 (id=895): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@t={0x85, 0x2, 0x9, 0x7, @generic=0x200083}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) close(r1) preadv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f0000000400)=""/197, 0xc5}, {&(0x7f0000000500)=""/207, 0xcf}], 0x3, 0x0, 0x87) syz_clone3(&(0x7f0000000240)={0x24000000, 0x0, 0x0, 0x0, {0x23}, &(0x7f00000000c0)=""/193, 0xc1, 0x0, 0x0}, 0x58) 4m52.481076399s ago: executing program 0 (id=896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x12}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m52.013494942s ago: executing program 0 (id=897): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x2c}}, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="5a7af70000000000000d00", 0xb) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$team(&(0x7f0000000300), r1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02"], 0x0, 0x37}, 0x28) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="f2", 0x1}], 0x1}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}}], 0x3, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r8, 0x4068aea3, &(0x7f0000000080)) (async) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004000e00080017"], 0x20}, 0x1, 0x0, 0x0, 0x42810}, 0x0) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000002840)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) 4m51.98449538s ago: executing program 33 (id=897): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x2c}}, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="5a7af70000000000000d00", 0xb) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$team(&(0x7f0000000300), r1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02"], 0x0, 0x37}, 0x28) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="f2", 0x1}], 0x1}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}}], 0x3, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r8, 0x4068aea3, &(0x7f0000000080)) (async) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004000e00080017"], 0x20}, 0x1, 0x0, 0x0, 0x42810}, 0x0) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000002840)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) 4m30.084018068s ago: executing program 3 (id=973): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x58, 0x300, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x454) 4m30.083227804s ago: executing program 3 (id=975): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000080)=0x8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x5, 0x0, 0xffff}) r2 = socket$inet6(0x10, 0x1, 0x101) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)}, 0x240080c0) 4m30.012195254s ago: executing program 3 (id=978): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0x7a09, 0x20000000000000b, 0xfffffffffffffffc, 0x204, 0x4a, 0xce6, 0x80040005, 0x5}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000003c0)='devices.list\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000080)) 4m29.114199963s ago: executing program 3 (id=1003): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x6, 0x4) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v1={0x1000000, [{0x40, 0x954}]}, 0xc, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000b00)="1667dbca63e151d2a42d020949b4d03863a664469252181d", 0x18}], 0x1}}], 0x1, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 4m29.113149739s ago: executing program 3 (id=1004): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4050) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[], 0x20}}, 0x4000) waitid(0x2, 0x0, 0x0, 0x2, 0x0) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) landlock_restrict_self(r0, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x2010, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003980)={0x2020}, 0x2020) 4m28.843086072s ago: executing program 3 (id=1010): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000000)={0x40, 0x11, 0x2, {0xfffffffffffffd7b, 0xa}}, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 4m28.73098517s ago: executing program 34 (id=1010): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000000)={0x40, 0x11, 0x2, {0xfffffffffffffd7b, 0xa}}, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 4m8.375371497s ago: executing program 1 (id=1262): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) 4m7.504100021s ago: executing program 1 (id=1277): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) munmap(&(0x7f0000bb3000/0x2000)=nil, 0x2000) (async) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) (async, rerun: 32) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) (rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16, @ANYBLOB="0500"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x23, 0x400200) (async) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 4m7.424458393s ago: executing program 1 (id=1279): gettid() r0 = io_uring_setup(0x18ec, &(0x7f0000000180)={0x0, 0x381c, 0x0, 0x50}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x51, 0x3}}], 0x18}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x1, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000485) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) close(r4) 4m7.423022475s ago: executing program 1 (id=1280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000002c0)={0x0, 0x1ffd, 0x7d, 0x5, 0x2, [0x2], [0xfffffffd, 0x2, 0x4ec], [0x0, 0x1, 0x800000, 0xfffffffc], [0xa1d6]}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000002c0)={0x0, 0x1ffd, 0x7d, 0x5, 0x2, [0x2], [0xfffffffd, 0x2, 0x4ec], [0x0, 0x1, 0x800000, 0xfffffffc], [0xa1d6]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) (async) r3 = dup(r2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) read$FUSE(r4, 0x0, 0xfffffff6) write$UHID_INPUT(r4, &(0x7f0000000a00)={0xf, {"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", 0xffffffffffffffdc}}, 0x12) (async) write$UHID_INPUT(r4, &(0x7f0000000a00)={0xf, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b32356d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d17c708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08cdc339081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9d6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f74a2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bcff00000000000000fec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420ae305fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42f48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c8274c212c20be72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de2030e0000002d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fadf9ffffff238e204a67737c3b42aae501b20f7694a04f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3b99caf6b00d84a604047497022d9c30e23ef4df5c89644f48bb536f7946b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f40200a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6020048cfd9c52c9711937f79abb1a124f1210465a0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffee738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c65a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c3329c8a6b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2d06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d2a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c43e9820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d009000000c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb7847c7148b6ce431bb90e29389f22fc5b59a70efaea2bd40195af4486220d70bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24622a4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744d9b6c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c908fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de99258842cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b9906009af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69fcffffffffffffffbb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800", 0xffffffffffffffdc}}, 0x12) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0xfa, 0x8, 0x4, 0x7, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x8000, 0xc951, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0xfa, 0x8, 0x4, 0x7, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x8000, 0xc951, 0x3}}) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380), 0x201, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$cgroup_subtree(r6, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000940)=ANY=[@ANYBLOB='-cruset +rlimit -cpuacct -io '], 0x1d) (async) write$cgroup_subtree(r8, &(0x7f0000000940)=ANY=[@ANYBLOB='-cruset +rlimit -cpuacct -io '], 0x1d) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000001ac0)) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x200001, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000740)={{r0, &(0x7f00000004c0)='syzkaller\x00', 0x145080, &(0x7f0000000500)={@_ha_fsid={[0xc, 0x7]}, {0x54, 0x7872, 0xdf, 0x1}}, 0x0, &(0x7f0000000540), &(0x7f0000000580)=0xffff84d7}, 0x1, &(0x7f0000000700)=[{0x3, 0x6, &(0x7f00000005c0)='%/./\x00', &(0x7f0000000600)="783cc77a02f8b904d1a4ce0722b47e0aadbbacfa7a699b8eac64c4c868138729f9619db3dce5138d79874790ce546a3754adbe77714a4d2479ed4181cb21eef08c40695ae56c2559dd0b92ef23b6ef59421e25fd2833da3c92d26e96ac05633f23930a371a9f413272b6c5c297ac862a445c56b27f7e7f370826b2f13799624403897198b5fa548448d9937fedb16bcf84b4d58f45d8a90df50a82f769f8d906aac76d43ea9ed643112f1323e02ba300cad5b9fe2726498065c84d0b3d0fa1c3ff8d234282acb3c74d85b620c55a89342e5089e3513d4223a5f69c89d7f3dc9dcdca1fe18656334d348b2d3a6f1001e937a3", 0xf2, 0x3a}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1b, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @map_idx_val={0x18, 0x77fc66c6dc2cd05b, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xb4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffeff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0x5, &(0x7f0000000280)=""/5, 0x0, 0x20, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000480)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000007c0)=[0xffffffffffffffff, r10, 0xffffffffffffffff, 0x1, r11], &(0x7f0000000800)=[{0x4, 0x4, 0x7}, {0x4, 0x1, 0x2, 0xa}, {0x5, 0x3, 0x0, 0x4}, {0x4, 0x1, 0xe, 0x2}, {0x3, 0x2, 0xe, 0x4}, {0x3, 0x4, 0x10, 0x2}, {0x0, 0x3, 0xe, 0x5}], 0x10, 0x8}, 0x94) 4m7.254911647s ago: executing program 1 (id=1282): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 4m6.933756232s ago: executing program 1 (id=1286): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) munmap(&(0x7f0000bb3000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x45, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000000206010300000000000000000000000005000100060000000d000200005f73683a6d6163008000000c7912bd882d764e0acea698bb3424d9524386c4b7ad5f10bb295acf"], 0x2c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02"], 0x0, 0x37}, 0x28) sendmmsg$sock(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="f2", 0x1}], 0x1}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000140)}], 0x3, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x60}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0xce}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18}}], 0x48}}], 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000006c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x9, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000880)=""/195, 0xc3}], 0x3}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x70000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000400)="0fc77ae0f30f090f01c2360f20840f849200f36dbad10466b81000000066ef66b9730b000066b80400000066ba000000000f300fc769f0b845018ec0", 0x3c}], 0x1, 0x13, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001ac0)={r7, 0x0, &(0x7f0000001a00)=""/156}, 0x20) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000040)=0x1c65a, 0x4) 4m6.906818694s ago: executing program 35 (id=1286): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) munmap(&(0x7f0000bb3000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x45, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000000206010300000000000000000000000005000100060000000d000200005f73683a6d6163008000000c7912bd882d764e0acea698bb3424d9524386c4b7ad5f10bb295acf"], 0x2c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02"], 0x0, 0x37}, 0x28) sendmmsg$sock(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="f2", 0x1}], 0x1}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000140)}], 0x3, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x60}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0xce}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18}}], 0x48}}], 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000006c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x9, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000880)=""/195, 0xc3}], 0x3}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x70000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000400)="0fc77ae0f30f090f01c2360f20840f849200f36dbad10466b81000000066ef66b9730b000066b80400000066ba000000000f300fc769f0b845018ec0", 0x3c}], 0x1, 0x13, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001ac0)={r7, 0x0, &(0x7f0000001a00)=""/156}, 0x20) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000040)=0x1c65a, 0x4) 3m35.343531728s ago: executing program 6 (id=1777): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xb, 0x80000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x2441, 0x83) unlink(&(0x7f0000000180)='./file0/file1\x00') sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140014001000010000000000000000000300000a48000000060a01040000000024c2a205142346000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f787900000000040002761400000011000100438aa7010ab4bf370100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0xfffffffffffffffd, 0xea080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2, 0x8000}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4a26, 0x3fc, @empty, 0x2800}}, 0x6b1, 0x8000, 0x20000, 0x0, 0x49, 0x0, 0x4}, 0x9c) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d79e7eac524491ad0509a293ed9f62297ef3313dbb66f1f36f84b5fc51ddc03db80950c649c9e00d7655a962f7841683c459af41e58f6c219e5ff29a562e184d6c2fa6c71", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00']) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0x0, 0x20000000000000b, 0xffffffffffff7004, 0x200, 0x2000004b, 0x28, 0x7, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socket$kcm(0xa, 0x922000000003, 0x11) socket$unix(0x1, 0x5, 0x0) 3m35.274426908s ago: executing program 6 (id=1779): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) socket$kcm(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) (fail_nth: 1) 3m35.153169972s ago: executing program 6 (id=1780): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x401) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x9, 0xa, 0x5e, 0x0, 0x80000001, 0x5, 0x2, 0x24, 0x9, 0x5, 0x9, 0x4, 0x0, 0xfffffff9, 0x4, 0x4, 0xb1, 0x1, 0xfe, '\x00', 0x9, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x401) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x9, 0xa, 0x5e, 0x0, 0x80000001, 0x5, 0x2, 0x24, 0x9, 0x5, 0x9, 0x4, 0x0, 0xfffffff9, 0x4, 0x4, 0xb1, 0x1, 0xfe, '\x00', 0x9, 0x6}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 3m34.944892451s ago: executing program 6 (id=1781): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0xac7c56fbddb4c575, 0x6) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3", 0x1}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000006c0), 0x4) socket$kcm(0xa, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xffa, 0x100, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(r6, r6) fchdir(r5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000180)={0x0, 0xe, 0x3, "13ea57ffffffdfff018000000000000000000000000000088b0500", 0x50313134}) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) r8 = syz_io_uring_setup(0x5807, &(0x7f0000000500)={0x0, 0x8866, 0x8, 0x2, 0x243}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_RING_FDS(r8, 0x15, &(0x7f00000046c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) 3m34.801641215s ago: executing program 6 (id=1782): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newsa={0x144, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0xa, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0xc084) socket$inet_tcp(0x2, 0x1, 0x0) 3m34.323618636s ago: executing program 6 (id=1787): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x4000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000161c0)={0x6000004, 0x0, 0x0, 0x2, 0x1}) 3m34.194700606s ago: executing program 36 (id=1787): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x4000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f00000161c0)={0x6000004, 0x0, 0x0, 0x2, 0x1}) 2m39.714405852s ago: executing program 5 (id=2489): r0 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000000080)) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="01046588883eea577bf7bb70c98519775f7ae2", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001300)={0x2, 0x4}, 0x4) r3 = getgid() r4 = geteuid() r5 = geteuid() mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000100)={'trans=virtio,', {[{@dfltgid={'dfltgid', 0x3d, r3}}, {@version_u}, {@access_uid={'access', 0x3d, r4}}], [{@appraise}, {@seclabel}, {@smackfsdef={'smackfsdef', 0x3d, '##)'}}, {@audit}, {@context={'context', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'tmpfs\x00'}}, {@uid_gt={'uid>', r5}}]}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='./file1\x00', 0x0, 0x0, 0x1}) syz_io_uring_setup(0x671f, &(0x7f0000000240)={0x0, 0x6937, 0x1000, 0x0, 0x25c}, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r9, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT={0xb, 0x57, 0x0, 0x0, 0x5, &(0x7f0000000380)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r10}}) 2m39.563942683s ago: executing program 5 (id=2490): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x200cc814) (async) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) (async, rerun: 64) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f00000000c0)={0x2}) (async, rerun: 64) write$P9_RSTATu(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="8f6d0000"], 0x18f) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) (async) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f0000000080)={0x39, 0x2}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) (async, rerun: 64) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af26, &(0x7f0000000000)={0x1}) (rerun: 64) 2m39.484533652s ago: executing program 5 (id=2492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0xe8}}, 0x1) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0800080006000600080014000b2f907864010101ffffffff3297e3bad85626ead0e88855c18f71043a9e59d0750a6e8dbda498ee01ee3d4febced2e580d44451b59fd2049374d029c7e42549ceb6a8d178238c9ba3488b3ed5fd92f07d723dd06f3ac059546488bf92a62459c15ba2e4ca09f7952494b01c4981dd17942a507d5eb5f086ed5af8333a9572ded728e4f6c7f265864505179478744bd8d794b15feb142b26233700"/176], 0x26) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x5, r2, 0x0, &(0x7f00000000c0), 0x0, 0x8}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000200000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRESOCT=r3, @ANYRESDEC, @ANYRESOCT=r3, @ANYRES64=r3], 0x144}}, 0x20000000) 2m39.314499333s ago: executing program 5 (id=2496): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0xfde2, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000100), &(0x7f0000000200)=0x4) 2m39.312348913s ago: executing program 5 (id=2498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x38, 0x0, &(0x7f0000000140)) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0xc0045401, &(0x7f0000001280)) r2 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) fchmod(r2, 0x184) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 2m38.963832226s ago: executing program 5 (id=2504): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001000/0x5000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000080)="8cd5c690180634a0652e0a1b470caa3cee21eec3dbd1439392f80d82c90bb5983595a4a3c65aeb340fbbd3cc15ef351a4cded55a52455481ea077dddc2e33005586c2b72db5a7cd8c60189bf3990961dbbe849b89e6e20cb94d5b1d45c4d884b9404ddcb3a8ad4c141adac824ad4487de84679677a2cb65dc119bfd2d6aa27523783a42ac20fb3853fa3b31316b83425f07a9ebf3aa2db372b65c6f57e4fd80cf52e84e4a18f3000042b582d60713074e239c534a035188e2323bc6c56990afa46f9e964cbb74ac53ca06f9759a28933b86e939203d6a7ffe5549dfdc30e3bfaf63a7bb52c9527ac494cb3", 0xeb, r0}, 0x68) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff033}]}, 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf056}, {0x0}], 0x2) 2m38.922076649s ago: executing program 37 (id=2504): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001000/0x5000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000000080)="8cd5c690180634a0652e0a1b470caa3cee21eec3dbd1439392f80d82c90bb5983595a4a3c65aeb340fbbd3cc15ef351a4cded55a52455481ea077dddc2e33005586c2b72db5a7cd8c60189bf3990961dbbe849b89e6e20cb94d5b1d45c4d884b9404ddcb3a8ad4c141adac824ad4487de84679677a2cb65dc119bfd2d6aa27523783a42ac20fb3853fa3b31316b83425f07a9ebf3aa2db372b65c6f57e4fd80cf52e84e4a18f3000042b582d60713074e239c534a035188e2323bc6c56990afa46f9e964cbb74ac53ca06f9759a28933b86e939203d6a7ffe5549dfdc30e3bfaf63a7bb52c9527ac494cb3", 0xeb, r0}, 0x68) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff033}]}, 0x10) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf056}, {0x0}], 0x2) 4.372997742s ago: executing program 4 (id=4446): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480"], 0xa4}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x1fffffffffffff48, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r4], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000008380)=[{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000002840)="f9fed79415c0ce13f22fa70f2955", 0xe}], 0x1, 0x0, 0x0, 0x811}], 0x1, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x3266fb7fe7f644fa, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x221}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000012f708f0000000000000000000000000000000000000000000008d9afe0dc71c23f919cec5eebb38a25f61481fffff000000002d7c1883d6f13a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0xf, &(0x7f0000000100)=ANY=[@ANYRES64=r9, @ANYRES32=r11, @ANYRES32=r7], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r12, 0xc05c6104, &(0x7f00000000c0)={"218ff100", 0x8, 0x21, 0x2, 0x1, 0x2, "f7000000000027a4d5847c84463b00", '\x00\x00G\x00', "fb6322a7", "fcffffff", ["62fa1414000100", "808e3d9d51fa6d46796f00", "4e6500003c97c443084000", '5\x00']}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r10, 0x0, 0x10001, 0x0, 0x2, 0x1ba242, 0x3cbc2a}) 3.991279004s ago: executing program 8 (id=4449): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) dup3(r1, r0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)={0x114, 0x25, 0x1, 0x70bd26, 0x25dfdbfb, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x104, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x8}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x0, 0x1a}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xc8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 1.413188009s ago: executing program 8 (id=4451): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xd4, 0x30, 0x871a15abc695fb3d, 0x70bd25, 0x0, {}, [{0xc0, 0x1, [@m_tunnel_key={0xbc, 0x1, 0x0, 0x0, {{0xf}, {0xfffffffffffffff4, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x200, 0x0, 0xf, 0x2}, 0x5}}]}, {0x6f, 0x6, "8888c532403a986c0a76a1ac652884b9ed0c2143f7045b8ac947ad45c854ea2bfdb45311923ff98386cc823cd81bce507ba4473d4b20a0c5085e7a502a74e3561c8985e7f712c6a479b7d92412b5c0ccc9e0af1dbe3ffe50f3f2d07d063fe52866944a0a64f163fb8fbb0c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4006040}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'caif0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xd4, 0x30, 0x871a15abc695fb3d, 0x70bd25, 0x0, {}, [{0xc0, 0x1, [@m_tunnel_key={0xbc, 0x1, 0x0, 0x0, {{0xf}, {0xfffffffffffffff4, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x200, 0x0, 0xf, 0x2}, 0x5}}]}, {0x6f, 0x6, "8888c532403a986c0a76a1ac652884b9ed0c2143f7045b8ac947ad45c854ea2bfdb45311923ff98386cc823cd81bce507ba4473d4b20a0c5085e7a502a74e3561c8985e7f712c6a479b7d92412b5c0ccc9e0af1dbe3ffe50f3f2d07d063fe52866944a0a64f163fb8fbb0c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4006040}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'caif0\x00'}) (async) 1.4129233s ago: executing program 7 (id=4452): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x7, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a0003000248035c3b610800000000000000cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad8cbc738a0dee2bd3f218a49ee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55c421ce6d4fe16707ebb5e141a70c", 0xd8}], 0x1}, 0x850) 1.352719034s ago: executing program 8 (id=4454): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) close_range(0xffffffffffffffff, r0, 0x2) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000f00000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a10f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f09935e6996c7096ffeeb0300982c888b9166870000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x8c100, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={r5, @in={{0x2, 0x4e21, @empty}}, 0xb, 0x555e, 0x80000003, 0x3, 0x140, 0x20000004, 0x6}, 0x9c) r6 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @local}, {}]}) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0) landlock_restrict_self(r10, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r8, &(0x7f0000000640)=@file={0x1}, 0x6e) r11 = syz_open_dev$sg(&(0x7f0000001600), 0xb, 0x40042) ioctl$SCSI_IOCTL_DOORUNLOCK(r11, 0x5381) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={r4, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}}, 0x4, 0x8, 0x2, 0x0, 0x20, 0x9, 0x6}, &(0x7f0000000000)=0x9c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc59}, 0xfffffffffffffe0c) 1.299087354s ago: executing program 4 (id=4456): r0 = socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000001900)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c884}, 0x4054) 1.22361534s ago: executing program 7 (id=4457): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75", @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRES8=r0]) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) 733.849611ms ago: executing program 9 (id=4461): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x382, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9f, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff6}, {}, {0xb, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x30}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) r4 = accept4$nfc_llcp(r1, &(0x7f0000000600), &(0x7f0000000680)=0x60, 0x80800) close_range(r2, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) r6 = syz_open_dev$MSR(&(0x7f0000000000), 0xd6d, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000480)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) ioctl$X86_IOC_RDMSR_REGS(r6, 0xc02063a0, &(0x7f0000000040)=[0x6, 0x6, 0x1, 0x1, 0x9, 0x7, 0x6, 0x4]) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@delchain={0x84, 0x65, 0x4, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10, 0xd}, {0xf, 0xe}, {0x4, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0x1}}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e21}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @remote}]}}, @TCA_CHAIN={0x8, 0xb, 0xb5f}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8084}, 0x10) write$binfmt_misc(r0, &(0x7f0000000540)="3d80254079d2949adbb4dabc0244c19a60b1963164d3ddd9f74c19ed74328b02436b6ff1c6a9b424a0847888f5f1d02e9ff0136f9749cac7c3bb7d4310b9146f2bc73b830fa2737a7f8b00cab58a42fe3e8402f98b894f732eb26a5ca595c0ce678f6048ed9e86377b3c50fdf47eec9ec668becff19359571f09943e04b45646be4071339a972a08", 0x88) 581.809861ms ago: executing program 9 (id=4462): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x20) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, 0x0, 0x100) (async, rerun: 32) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002240)={0x50, 0x0, r3, {0x7, 0x2d, 0x6f0, 0x54800006, 0x3, 0x5, 0x10001, 0x3, 0x0, 0x0, 0x100, 0x4}}, 0x50) (async) userfaultfd(0x80803) (async) write$FUSE_INIT(r2, &(0x7f00000022c0)={0x50, 0x0, r3, {0x7, 0x2d, 0x1, 0x101, 0x7f, 0x40, 0x9, 0x6, 0x0, 0x0, 0x10, 0xfffffff9}}, 0x50) (async, rerun: 32) mount(&(0x7f0000002340)=@rnullb, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)='openpromfs\x00', 0x2010, &(0x7f0000002400)='\\*\x00') (async, rerun: 32) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) (async, rerun: 32) read$FUSE(r2, &(0x7f0000002440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) r11 = geteuid() stat(&(0x7f0000004480)='./file0\x00', &(0x7f00000044c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000004540)={0xa0, 0x0, r7, {{0x6, 0x3, 0x2, 0xf, 0x40, 0x1, {0x3, 0x9, 0x80000001, 0x7, 0x5, 0x3, 0xc, 0x4, 0x3d, 0x8000, 0x62c, r11, r12, 0x5, 0x6}}, {0x0, 0x2}}}, 0xa0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000004600)) (async) statfs(&(0x7f0000004680)='./file0\x00', &(0x7f00000046c0)=""/4096) (async) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000007c00)={0xd, 0x88, {r6}, {r1}, 0xffff, 0x6}) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) lstat(&(0x7f00000080c0)='./file0/../file0\x00', &(0x7f0000008100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000056c0)="e57e40939db73d6bd65e3afa1b8863d5ed2f11a9456eca16a2b3960a8874f83173ed448444420fff3b23bceae71429e70d49343b4c97bde6b8389f650c65db573a12d3bc27236405cb7a31497792c06b2e81fd82db2318538d4f5e5e126bee1c71f7989e96a9b8f8f436ad82ebe04703eb3e5b86c81a1fcd2639b02c56b9addccd59c0114d7695cdd5c3b6ac6c1b5508e8eef1232666737040b57e1f5e432f793a85fad8f42ae620d7034f32c4494882803a37a71884da182bb5ea845670d2d328b67512cd52966aee794811f9ca3952af092a0de4df82be47727d13eb7f51553fc9ab60d3e8e8009811b437e0635d1081ca896de3da5ab8cf77e09ddaf0daf5d2e591222ee07198e06ab5e33eb04b3cec2e137e15d0b39a1cb910b4133fb16a3ef3a3ac8f65ed696331ea6e5a1bdc42579fdb41b72532a1aed1acc455322c6d23b63ddbfca2e22beb723defc56ec01b5f33c46b582ccbef82f13a15b6727e489e65871ff1666d5d6499bd01b3dd47d87a798745211a7fe10da1d454418308e807b8936a320a3dca2c110ed03e6dfeda36ab42014526dc4de64a60ef578560c4227156f7e82367d3786b795b159ac6b54cbf312ce38ee17ef0431b5a7e61dfaf56b2ae91c6420a564ef17047204693602e486ae6985a0b3bd4dfc25bd3a6991cccf0e3b4d493d58a5c702368aea0e2c9cb194a7c8b8d1841471ff9ac9ab9d794274c38eceedefdf0069c82e04ef6ddf9226051c92ca272a82d03624a020cb024dac8c819549acf3bbbb5c998fd009d40d43ed49e1a0ff43fda54f11f1d4bb4ca4d6015a51955e8c33a40069bb1ca0de0669ef2e26bdffca3b775ba798e0726a599a0c662229598a14dbceb569d19476c77b00ecd8dbc7c1010faa44575ac0ebbc5befecc87301abb04ca8cbc686a6a15323cf4e001f0f1f603cc771b361ac538ec09686925a92ba8c71794d78118f08e4620f4311a0177f523d6c98bc604b738ace45dc8d59b87d5b49ec5073bc564caeeb23976ace6103090ff1dc601ce2361b9ee59b75d2d27e1fe8b8b2e7728af820bbd14091b47041640db8f81abdd1a1d4ec6f23fa671adef459752bef5e23b57cf5ef35070c9f729a6f120d85121ca06af98721f1cc20c612175155c153c5e602d05d5acf9d65917ad38c9b5174e56dd0a809ea886030f8c518f8bd1837a5b3694d6cdf87f740eb73a1adde18c8bc0dfc5f7c121c3dc77dd0e6c58f82ada4413d3ac1edb32d630b45b5d71ff954f8486601a5c9d327a26e042fb69ff6052ee655aa000b6f1b9d2c88cb18fe2ee94d78ecb7017f083e31cdc6841bb3c89f635246cb074c096f098ad99022c4a4aff608ff3cd3fe697885edb8fe0d87d680edc31b234297fe3557c947789f2078a43ae6c83811c6b81eab13c429fd05c34ffa8590dfcf09edd397b0e2c5f7ae3b4d7edd2f362b4fc2d821b7c81b936a51c729366dc80f2d5ce87ef9e3361f2d120d492920a7df0ba937a20461a1639411fe581f84e1a7f0b7928fee140e3d1e802af592b5110b9a940ce61b687d0a17756fa1821f755fc2a359e4457ac4b3b268a5a0e8282ccc2bcd77d641453bdfb2cd86a85e34017c1edc33684a5e171b75b04dafe1fdb9cc572760211eb6a25f66eff339058c434b876ac26ba0034331a864a151d3bc56f45190bda7c0d08934d40acfc753e2cbe5382d08087d35122bb4944b09ccec5321296562e92e66a8559ca64926cd840019acda214996ed633254e2977caa1f0b000b0b0fd10815f03455b71f559e1a878621d5c72e0b508baba0676f93894637665164808e14326c037fbfba56534f2e793cffda4783e524b45fda9d4aa3f4b3949c870555da43cf8682d97859f804443f49ca1a3abb14538dd3a0f43473be6a7d1dc39a10afc6ccb114811b23164e8651ad4f044e5a19117524d55701766e8e995a39ce38e89eeff093008c6b2dde1751d3386cea60a0674954d4da270357bb236deb0d097a61af7cdcc97633b2b24b049be49cf1abe2333da0dbd55109bd963dd3f79bbb20c8fc0059d00a64bb1129367c58d1992b727e674d9cc6ddc3a35eedf165f485d9640aa1be52388c3707be30e456d86e3ee44db85ee1ae819ccf39c9fcc47c9f5db6a403286a018dd2441f066f26a82c69c32eee634f049832451c068e601784f48f6c4f644fdab1ea445d736fc06e1b67b46520a81fb5c35580131ce2b585c80071f2bc8ae0c86065d7374b82c1dedead42d2f00f27145f1230260af758652e0ee501594113ab89d5437d746af16b4b0365be7aec620ff8424c69d6247570cc0665bc8bc6fbfe8d7f4e7dbbe632b8b81c1eae0d029059b58bc5bd130b0aea615c1213fb5b532ce9abe4ffbbeb006afb1d789ecdfd07cf08e8c3cde5a898dab85a28fc4ab3008d57707f0d68d12debe135e57cbe68ff80f28cd7ed4503f43f22ee57423124d4351501c51f7dca34ce4ed3f07f80520c022a79e0c405684487e714d133a498422aa41dd01ab134bf302c92a0e84c67d9bbd53a294870a72cde790cf307f2f92306587b0e3a4433966884ca16bb10e3bf5997ae3d7576e8d2a99c820009f1d6e146834755a9cfe7140f1ca573a4579f125d627f60d742568292e6f49d8738a71e7ca279a9b657e0be86707e8a80b1c0b0b724c00cb9ded8fb7f8f7d6f792e3aa6b8533760c5a6d60ebcf4a13b1a0c566436a27222e31a32fb98830beba520e67aea51b9cff4f6ed1545a575af9ff7ac5f87a0a816620d8f75211ab1ea39b34f182ad5577f256b34ace724c17b9e11100a1203c60f1857929f66c47015d60fbef56aaed0a439c08d60de9fd345a0a7060efb486cccf88d58d73e48a0836d4c49c84fb4dcc4f55ffa054623d9581ee4806da32451a40dfeb8c07a50e59ea1422c723e76f6536fc4d978c5f9eb8b5a459fc000c9fbd9ec2bba281c41e8d4b869732c4b809f5c7e59ddb130e870cfb868e37562d352711f969463a35cc35976dcb1a0a02fb69e774668febf0cba138bea77bbb6bef785a044b7f8438affead9f4f19b62a1792d80299f4706e733d290114de06a1de35a8da86c5bc6bd66a3e7a4fd2ec49c79a97e75dc11da35d5eeeba457fada0c81dfdaec5f5233448a8708e11b47d95cf4158adcfeeab02470706516154f106d21c15549e0a578fd9a8df7650d1e87914233bafe9a5b5782e32e22e8a018aae6748dc734db67d23ab1f740fbfa32f8a72d5c78d38dc3c25bb14f416a5418d13878aaaa9df8d4bd904cd592c1f50dc523a36f0cef1c94b1a046524d1a41bd74cb5ee3a873b908abb4413dbc8f19d4e5028f1b47b6607876f03258550a757546c5715361e69e55a855c9a47450ab0e2970a36d324455c480360dbba5eeb66d85da58ff0f2e733777cbffb216851d7e0421bd21d9e3db108d0d91ab0bbda44b3310eeeea468fc48d398e74dd467028463a1639d2a74bc7b787c211afb86c74a91440d50fbd5087ef8ced36d1792c2c4ad43b64827bbaae5c2b1df1b38d991c27ca969adf463c87e6a3d83e99e9fbcdda247dde7683b589daa2a28b49a4dc943c109c4254dedfa22de536e985f09539a6a64b66984a45a110d47da41eeed5b81d390bd8f69f848aede7445eaf290727eee28b79e15ef4ae0098f0beae6b2cc07018b32bbc6af8e736931c61c620c1fac6c456f88a425d497987ef9f1d4c28e151d51cf77a8a08d9eb117739fa4aed2c53a238a66b35bebd48981add898f4ce5e328b24b15beb14d02575d4befdd250e4e47c3dc8b3d8a7393153474a07b6451e48000ba95d840bf75265e24a147ed9ffdbc26d5d38722a2d215458afa6b7ec7557c6128333cee85fd83bc5a7f7ad27677a47d2849764d3b77ba2d26f579f4e798394d9668cefb3ee60b29ca9002a750473f5c6e9c793aadf65ae00140adc7016eb95a26b9fd4871f5b10ce1059877c9dd03ab3429b29ffc458b4425a4ca6f42d96fc348155d4068d5597cee332fa3524eed7b6486c68e2f8d35ee4ab0117df92ec0ffa0ce7f694b3dd940d034ff3c153a853beedba50fae5f64c5fe9050214ca82d0d336cd7f9da6c24a664afddf0576bc3abe484b26744ffa7256b4fa08b7a3fdb2ce3504bc309974c65730aa8e028381e5ea31a0787fd6806bc811c93f8fc5b0335fe63c7ce142ed8290f3d9218b2a20c72b535fbe0c82f784ce375499f410b54d25cf33d6d7c272fb08cd0051b605f5fb2354d789836895d5f77b86ae1aad41d346e1a30aac4b836b54f8e4651d42ab40c6a34a67f030fbf26d9856b475a81552d46b42b3dc8e684cebd48b1d60e3c85f22dce05c4fff9b8c3bb9a720d20de1ed9baf179398e8833c1169ed0f7b91614d346c4d00c9c94f24a2f7bcc4ccb1de4875aaac34e74d265748833acde581eac9f7524830843ede065897411947825d6c790ccba473d94964e4aee2589c8f2f394a67db1790aafe9c9c55384950e90779ca184093d552c4306d59457c7795dca550d4244f9c3a1880a13df37695140eb491b0d12efbe90846882a1de8dbfc1b2fbc040c110479c1e77465c65736a87bf04ec403ed5cbdaa6b2462e6275f2e344fb3e92b2fbb515420c391c1cebff8912abc8f3ffc69a8de6a84e54dd792ff297f9c0aca5a43ddaecab56caf29835542b6ea1437566f52a6de4c821720a4416a72b01cdd7ce10dd2c0fc929c6792b8a9ead2569bc8bc183b61242356de885c55b4722303eb5b149b559b78f92b88ff363aa3c14c00ff2a8bebcdb32221d930a795223d3e47144ceb367b536fbae4d1178d359736cf5fdf5f9c26a22ecdb717cd00af1436cb68dc9d8bbf2145e686337b53caa03bd1a4f632cd8fdf4f7d7e3fb0bdc23681239ca8b1b8db6e61250f63a5c6b238cab8f369de1583f131c4da3d67cda25c01dc04f235683f8d3c32a36edcfe568983a9c7c6c438226234cbcdf2e32a3899ea782d473001201e6b9ddb4cd10284c8955bb93027ab617e1fc45241de8b5c5d07bfc2ea14a68c5e24cdad43228955c877abad21503fce8e8e3a53a42c7e0a49c233d956e76515a11c0b41699e9041f3e3b54f63f8db9dfcf4427d88b3dd3fb9e01f3151fe22dcaad1618bca2f9ca6253da026de8ff05e7fee067e343ffcedee294c31fb2ce984246797c9ee938bf074f11ad58c99d71af660c09ead203a5a15f376cefb5b8b45cdc2f0db990558afc6a7dfb3fc08bee5ac30c187e780bfc017b0f5aae42ae5c54ca41c2f4c8826687e6b7870b30ffa3c062c56a6ea3dad28fa795ee7d17026bcd51a795727a9d0da6e0085a54e671a0711d5d8b1c2a8275621912444b663608d5aab95b4d57cad42792dcfcaf1779d5a759ae333b7f231d6a9083195c1b0d8e954f4b4d860f6703c2d8c0398cb209cd09a36f0c9c862ee9d61e98c256f18c49584e5c4d2df946b320e371ee173c20bd7fbd86b3975a942796d13af069384cc7d5fcbb43b0ea3606c6fa649c81fbc73181a826460a549bba7607f717dd599455d0da9616bc0eb2a011544989ed8d9696b9b450bd934614398dde1d218a84d9679a76e037948880290e5deaf9f0a5c8fbeac9c5b4d214d778bb3a202e44f419427eec7c9b0be2234711c18a02026dff898e76e7d5cd6e1aa6396c57fc56bf98b5dabb11127ce7763346fc9d93e476d96d8db92c191143848e50139795232da264b5d085c0c3d2662c79203461a8783e33fccd829d565934ee3d3acba688caa430bcbaaaa56d98eb47aa1520bab73e744ca1b29cee2303ea8cc3e0990f5ce33501a0cdcda6f96b6c978110ba142f9974b26da50b3c7b609dcf51c7654661184e22a4399a3b81a783e0b1eb8ccef2e3ee64a8d142df6198a0fcd741f6923ecb638c14ce82fb7833eaf842f1c1ca2de0557c3eb380d15983ee573d3491def864def0a77a6967567c4a3478c9321361183db937df9db9c2d25b7bc71050ff18d3d292a800e18257ccdf39cc953d8d1743fa01405e535fdf0bb1022aa585aab4d00541cf08f386be062e21f54b19b0c6f431481ce6c5fbe5808d17927d698c499c2b354abcc6e5aa67ce80f9cd0ed656ae1bfc27c1e80438cece67a8897ae3a356d493fd3e8f7665d9bfbbd4f4c1d7d7876d659381251948486b7bee3f049dd1b9a9429d49470f68c110916dcb3beef6cd83a71ffd58ead07be1ceb09355067b65a14a5d270059944635c5622dc4145ddbedf67c536cd6baa4c5ee713405e9eaff7184b3f41fc9efc89b62d4977b834547986d2f84da1f82a71cc016dab418bcb92aaecb9a01adcb9f360f3aaf23a91a18215ead2e2d01c1eba4e105b3b99b4caddf13b5f2234ea3f9d822752cadd2fbe005533acf47ecd7f2865641c4ad1ae7ab99cadcd7750f6e91acc256732f73374a67bff620c687cdd33fbc00126ca3349f5bcbbefc1e598365a99b747d775931119815ff0f7199fa81e089bb19fc53cb70f199e9a35df4e75b15df29338b7c50a2e06309e5135de5807ff9272cf017966f3c4821a494a100be7bb1778cd3e814aa2737fcc9635952ed5061a404615e1b98313977a5bd1cbc36a85aefe5f4fd7eb9999e17dfc557b2c83472ff2dd44cdf020baab126f8da6fa6eb700492eebc285e4c13364fe243ccd9555f436ea7d7667b49393afd2ad38bee3e9dd1d1efe3b1306c9853d6d77c0e696f88d7a0f585c1693bc5974869afa945cc55cc9281ac7f3b1288e5f8d184e644f6af636bbeeb9d5f6c1922bdcbbf1fc1ebc947028fdafa3d28d77e5ca8ce935de9e9f7e75127d7163b0f395f871d031707b8853226cdbb725893ab5cb5e12bdfe071acc57d902d04a34116e192c865d9bbac1ff8a71397c57131f83c033c00985d4085aedd3f4d55e3b06bfd6bd26313a2744441dcb60cc8b7582ee69f79228dd60e2fe1181c8540e071f4c3af0dc1206e4a2fb3dab80d369459fb60a9f6ea8b9e50e46ac89854534c97dca6562a3172840966c104abd44d689e2bd63f4122da21daaf0830c076d2a0ea5d7e5e4b04dd6ac22b7e5c9da5ea23693693e7fa4f6cbdef3127d76a49537ac9bf542f6bc3432ed1b59bb55360af60b718031f24536e333e8ad27c6babf0bfc57c04c1c04c82a6ca47deef043336cd9c9dfcdd4d673b8202a3fb1a4b9425ebf3727f0a746ec96c23991b916c40f874e93e67604908a8f90d6c3ece727b9b860e85ceaa59db0401559d5a9779703257de105dcd69bbec2ffc70cd138fbe30904e086e4c72ceac5bb4b3b422148ab515d9d0318439a5a3cfa287b1e51156689375554d4023decb294a8ba63b4a2d1d55e081665ca98fa1a92a642b06a528fed07efd59559152006bc8836fe7193a35b6567df0043babb06cac3657d99b1b11958942bf7840ff9e8c996683f1446a9d099cb4c0d7b139553e0ec68ddd7736d7249b0ef4afa431f7c7acd426245623e3f291a984ace233f8b52eff8ae894556c5911de11de8ecb3fde37d0788ea4caf803f6155e478d99a1e1ea38efb6567f7d6f089ac7d0683ca5d954d392dfcc7b00bd3fca49fc18dddd5143c38ea052d67cbe0c32a816098ed5fdc59fedea4dae8d236b065653909dd1b464c15c4535d8dc4b7a9bdc1ded2ba6b677ffffa70ecce6080eaab13ce0cfb796529b05dcf92bc6c54f39584e8851ad5c54d5ae7fa184aefb3fd20a2e6c02be3dd6100936684ed15e6cc1132ec2824b4dc8230b3f9d6b9a30c9bb01955529b040f07661af356f1ee52154e9c2674e4e25b1ed130ee563d26ac46fe1399acdd5acbb7a7e9f77854b0efd5f63ce98d1a79f6dc1a045eaaecb3020fbb8eb9a2fd048ab179dbe79a9707acf38ffafdd55b8021cf00436bde1bd0a84e81e520169ec198e40003805766ae2617474aa4c6a04630d68948d5b40a3e6a69c82c220d5f9940a7babfc2820f5c97c93f9b5bf5b0caf07df78e101013633d61052cc6a78c21388981b59963e6d539f6fc717a013449cfc43b160796ba679e976782a8428ada959731a4a3c33b7da7b8db425aba93cdb2f6d2c721df29fb003b699a157304abac892a421fb3c0abc800d7c630a700314da30a782a79aa6af6fc98f7deaafb247be95369afecdfbe83837087364018564f4a598763aea84f7b553d822670b1df0ad63d224644ef748bf11af041766f7203862b5c8cd95da2b9063bc0c5e3a7bd10399c8466de97f492e79504a3e9a9a98cc1bfeb6f9ae5fc7f8bf3c3a5b8ec1643874ca9f51ce76464c44605e519ff5867f113245a3a2800797214c25e3a1a9132a9a450cc332643ef59b4c26f3179ca66931a001200b128672013fdce9b7113baf91c80d376d5b4812e7eee098a957fae40027c0238f426468feb755b141f52ed5ebfa07e0f7dbaf14b047e1662902017cec52e6c63cf0f6a4c58acd0389fa809ebe0e7f4899b0abe3abcda3302d2e105ab67df2cf895f75c3d7610d00db2468d53676dd5b84e6204b4ce77ca891652a46be3d4467e5d60993ea74e8431b98d800f98292a101afd3300ea26173156772c65be273a81349361ac9401b07d6a3cd3142991e179ff447eca4927e8fa98844f40fd965b1081a48042f0fa674eedb8a0f2dcb33251793811be181a389a9b373514b82af0324383ab62e7dfb2c274cb000feb1aacaefb17e67faf0e5f68b4117d5cadf30ba8f638539ae86e655c36048bd06f019aa9186e2be72b01d31a1b92d2bb3c885eef578e0303039ef4984c2e53ae4392c378e72a3d9dda804c0b5a502966a78554783dd824b967267b660be0d7d27e97b06bb066d8a9e7a49291039015f17a010807fcd86bb3578381bf341b6a8760f14303ddcffe58bee0120447720ac8697ef4901fdcf96c4766ba5553abf9d60097a781ebf5197481020917ff6c7462d6c9f8440b1b38acab0fa92bdd030046b7ddeafb2d0c944962c4a8c0aea7efdd9c440b9bd4f64117b217d2e42f146da2baad733acf052800ca373a8f953cf30a8a4061da90f49d5f403e9afa79a61d62370e7fefa6cf84c6633956124488513b6c77f3fa51a42e224074e1f725d44b19d114d1a39d892fe8af8c581ef5b2d64bbbce9c809597ea1faad0babf305f2a1f5531a53653cc424918f8b8f3f0b42f76d2addcfb79509c525028ca56ac8cf9cdc763b88acc1d31d97bc667f5306273e1d290a871941796eca7a63013a4be8932824d87ddcc8df6eaa1510e172ed25b7cf3732a372a145fd9de19f4215724c0ca68d77e624b01180dea6dc95a757b7acf047cfb668156416211514a98c00958654acb43834ec945e576de028c1cd2be6825d4c670f2893a0a5a42d25b172c0b474b61fc4a0dd9bb0f8f8c90e936c3705177011bc09b6833df4f4e68f40d153c9b23a4508cd7c4057785676ff161960bdb99718fa473187c18c823a6b04f179c7acd5de1e34ec07e674a397f8a7b651538a03c2553482ddc10e306cb35c7a6b5a30eee2015b8b755f239e36b55e66573e24a5563e8c9ff2f3a28cbbb3dcef0c40a917f4cc8135fd03b50af917e6819e9a7c0c31caec31fa82a47d1129e09bc42e2f36d39c0efb00ec1fe7ac05bb68779b5cad13cdf6bcf910a89a5f95a458280af1fc6ec015157a22a6a1a155e81809b684fbd5fac4a7fca7f2455c3c53b4d4df956b4e8abdd6a002916b3e24e28e5fad26652d3405bba8cad68f88d4697876a2f5968d89440e0e1f8fa6c4719cd21f474c64ff21c26f745f26639d1f49520a980e92e8307b5a4ecb4d158666860817803552be86b980060a0772e834cf461ecb3a9747cbcb10751eeed60e445582ef528cec8e9b6d98fd8207f1d1d9e9ee907dfd61366f458702e96582d865072cab13fe360c8b10a56069630d4ddd4fc03c7aae0ca351ab84ec592637eedffc6102c307285799e7c317210a042a6b742b333bacc9276aa37e30857a69fe01850d0080eb18ffddf58c9dfb992b929f0aae0a6cee7601780abbe08a9f34299ea0e6509635cfcb26561edaa02532470b1eb8b5e52dc08481bb98c5936459c5af437bf3f108a0f368cc37446a7df46d786fca2288d2fee309fce52952dfe771fbc18f3046d9283aff2b8a0cab002ee9dae4e9dec5d5c34b24d2d3ef520603f9457700fefbe0dd495145df7170e161be12661c8e6c2dea8af3724edf5e77e89aa902fb2da02886fe56f45fb11bc21bfcbfb715376309acb02e790848f57bd100644621f3a8ed0f1d3f26c9c4f7de4b1219375bf65e4d443eda0850fdd8c0da0c64f6af7df512c707ea83324678db60a3f3d17628af98e5478b86eea98cc4a2fdd121c67fbd3e6e1f5bec80403fb5e71d5b7cf067306fcd1a5b686becc09acfe0f10561ec2e1245b48e18fdae83175be7058eac26faad299c4c5c532290aa1e492e8dbc5331f25e8b70b3b61a6a117583a54b08a92328db3d0163cd23645129f928e0e7667e35e6ccd9c5f5f6d2ec3f7c1554ea9a224248e94f15a6acb24ca183d2f3eea062c1aabe0fcbcf7be298623f4cfa4bdf94672e680627e6e202db1f85a1a0c6cab5d15a1f90ae1b19b6ee00bd0422799d2337b6104365027e40c1878d9992d65d83c708cd729eed686f5919f049b751ba013ad63f999a7595110c65b299214edc2cb00ccaf85b0f5a054ba80edcab157bb88c5993d2fbf850354fe9a5f976c1c9b59b2681b5248371b07e957ce6c0b2437d1f75de65e2ef6aa5c18e4d2588270366677c592a00c9d450cee7ad2fb141dc9a3ab6975f120456d5bb053be467916f2e2305c3830f74752d95d58abd59c0f8fffb19c82eeee43c95d3107708b24b88943b27b9328e00c8bd8fe4c804d6ea5355f4365ed694a680950616dd1dfba480cff10e6e3f6ef046d1e593ada28aa8d4cd23452c79a89062df3c5d1283c8ee3de8355a96343e6c505ff74898f56bc24e9cb4b4631b76d86df89d5ffc7f9452bf764b72b63bcd71ad7e6fab627282709c3247122ca0468e406e72535e674ab64d9adf832785790ce57673ca7818b5b0bb09173bff3d473a6ed2eee65211d7d8b5a43e8bb08731ad1412504ba95d0ead24d2614c55fabe6c79ec817efac308b35a318c3db5052ea7e649f1d3a784807e8551aaa556627afea2942adb4ca4df2f37ee6142a11a91597d31365ef80d5a8f4008136a904972b80139cf92a6ac84d97e376e1a75b5af2e23f27cf16bf3f91a7cf7625582229e7ac1628c6fd5ce66c219669ba8c477d3432997f1ed1b6cca229e2ef98e5bcb939081f1f02ec13b5ededac62baeb6e030c3fa7455bf035e8b711166c4725bfa0162d0a289f17179dcd2418382808e29116caa5a381a7550692e7402bf35c1cbe17a24fa20f37d556122d35edc0522f86fc271d8d1b19f58b32a4bb4c9478a4e6b5c0ec095f86b18de7f658c6436cbae5860f15cd3abea748a74fced5b4fce1589afeed59adee53b346b31ecda2fbff4e727dcd30572c8b115c2b59407ccd64f7ac3b8f2aea36dc9d35cab355d759eb172d503ed3d39b7f8b95be7c348f4149c13e28ecc1bdb576ece2345dc2f941fb5cde3697fcf4b78665ec7569dac4c7f58a519d4e581c916f41afd81e373bb8083eb72ca904a3a9f8710425d541c3208d77c2918e59d2cd282fd3a50c133", 0x2000, &(0x7f00000082c0)={&(0x7f00000076c0)={0x50, 0x0, 0xf8d8, {0x7, 0x2d, 0x10001, 0x10, 0x8, 0xfff, 0x2, 0xc000000, 0x0, 0x0, 0x43, 0x1}}, &(0x7f0000007740)={0x18, 0x0, 0x7, {0x860cda4}}, &(0x7f0000007780)={0x18, 0xfffffffffffffff5, 0x9, {0x8}}, &(0x7f00000077c0)={0x18, 0xffffffffffffffda, 0x5, {0x8}}, &(0x7f0000007800)={0x18, 0x0, 0x101, {0x90000000}}, &(0x7f0000007840)={0x28, 0x0, 0xd5, {{0x6, 0x400, 0x2, r10}}}, &(0x7f0000007880)={0x60, 0x0, 0xe7, {{0x2, 0x3, 0x9, 0x4, 0xffff, 0x98, 0x7, 0x4}}}, &(0x7f0000007900)={0x18, 0x0, 0xfffffffffffffff9, {0x3}}, &(0x7f0000007940)={0x11, 0x0, 0x8001, {'\x00'}}, &(0x7f0000007980)={0x20, 0x0, 0x771d, {0x0, 0x2}}, &(0x7f00000079c0)={0x78, 0x0, 0x1, {0x4, 0x3368d228, 0x0, {0x4, 0x7, 0x100, 0x3, 0x11, 0x6, 0x8, 0x5e5, 0x0, 0xc000, 0x6, r8, r5, 0x5, 0x101}}}, &(0x7f0000007a40)={0x90, 0x0, 0x400, {0x4, 0x1, 0x101, 0x8000000000000001, 0x9, 0x6, {0x3, 0x2, 0x4, 0x2, 0x1, 0x9, 0x3, 0x3, 0x48bd12ad, 0x8000, 0x0, r4, r5, 0x7, 0x4}}}, &(0x7f0000007b00)={0xf0, 0x0, 0xc19, [{0x9, 0xb, 0x0, 0x10001}, {0x5, 0x8, 0x3, 0x7ff, '}.-'}, {0x1, 0x9e, 0xb, 0xd, 'openpromfs\x00'}, {0x2, 0x4, 0xb, 0x2, 'openpromfs\x00'}, {0x3, 0x7, 0xb, 0x74445936, 'openpromfs\x00'}, {0x1, 0x7b, 0x13, 0x7, '/dev/btrfs-control\x00'}]}, &(0x7f0000007c40)={0x2a0, 0xfffffffffffffff5, 0xfffffffffffffffa, [{{0x4, 0x3, 0x9f98, 0xfffffffffffffffc, 0xfffffff8, 0x0, {0x6, 0xfffffffffffffffc, 0x739a, 0x3, 0x8, 0x7ff, 0x4, 0x80000000, 0x8, 0x6000, 0x20, r11, r9, 0xf05, 0x81}}, {0x1, 0xd0, 0xd, 0x4, '/dev/rnullb0\x00'}}, {{0x3, 0x0, 0xba85, 0x2, 0x4066, 0xffff, {0x2, 0x8000000000000001, 0xb248, 0xfffffffffffffff9, 0x1000000000000, 0x7, 0x8, 0x8, 0x76, 0x4000, 0x9, r13, r5, 0xefa7, 0x2}}, {0x3, 0x8, 0xb, 0x80, 'openpromfs\x00'}}, {{0x2, 0x1, 0x35, 0x9, 0x2, 0x5, {0x0, 0x80000001, 0x586, 0x6, 0x7fffffff, 0xd18, 0x4, 0x6, 0x1ff, 0x0, 0x7, r4, r9, 0x7ae, 0xb8}}, {0x6, 0x401, 0x1, 0xdc7, '\x00'}}, {{0x5, 0x1, 0x7, 0x5, 0x5, 0x5, {0x2, 0x4b0, 0x8000000000000001, 0xdc6, 0x25, 0x6, 0x7fff, 0x3ff, 0x8001, 0x8000, 0x10001, r11, r12, 0xfffffffc, 0xfffffffe}}, {0x6, 0x8000000000000000, 0x1, 0x1, '\x00'}}]}, &(0x7f0000007fc0)={0xa0, 0x0, 0x7533a836, {{0x0, 0x2, 0x3, 0x1, 0x27, 0x9ad, {0x6, 0x2, 0x9, 0x80000001, 0x6, 0x3ff, 0x5, 0x1, 0xffff, 0x6000, 0xfff, r11, r14, 0x2c, 0xe}}, {0x0, 0x10}}}, &(0x7f0000008080)={0x20, 0x0, 0x8000, {0x0, 0x0, 0xfffffff8, 0x8}}, &(0x7f0000008180)={0x130, 0x0, 0x5, {0x1, 0x4, 0x0, '\x00', {0x800, 0x3, 0x2, 0x9, r11, r15, 0x4000, '\x00', 0x6, 0x5, 0x401, 0xe312, {0x0, 0x81}, {0x1, 0x9}, {0x1, 0x73b8a017}, {0x6, 0xb8a7}, 0x4, 0x8d21, 0x0, 0x1}}}}) (async) ioctl$CDROMSEEK(r2, 0x5316, &(0x7f0000008380)={0xd5, 0x3, 0x7, 0x3, 0x7, 0x6}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000083c0)={{0x0, 0x8, 0x9, 0x7c, 0x9, 0x547, 0x4, 0xe212, 0x2f, 0xeb, 0x2, 0xe7f8, 0x7fffffffffffffff, 0x8, 0x5}, 0x8, [0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000008440)={r16, 0x1}) (async, rerun: 32) r17 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000009440), 0x2, 0x0) (rerun: 32) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r17, 0x6612) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r2, 0xc0186445, &(0x7f0000009480)={0x8000, 0x1, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r2, 0xc0186445, &(0x7f00000094c0)={0x3, 0x3, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r2, 0xc0186445, &(0x7f0000009500)={0x2449, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r2, 0xc0186445, &(0x7f0000009540)={0x1, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(r2, 0xc010644f, &(0x7f0000009640)={{0x18, 0x6, &(0x7f0000009580)=[{r18, 0x0, 0x895, 0x8}, {0x0, 0x1, 0x2, 0x6}, {r19, 0x0, 0xffffffffffffffae, 0xa4}, {0x0, 0x0, 0x9, 0x2}, {r20, 0x1, 0x7, 0x4}, {r21, 0x1, 0x0, 0x1}]}}) 581.426706ms ago: executing program 9 (id=4463): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$CDROMMULTISESSION(r1, 0x5310, &(0x7f0000000440)={@lba=0x5, 0x1, 0x6}) 491.361369ms ago: executing program 9 (id=4464): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r1 = io_uring_setup(0x27, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x20) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r3, r3, 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000100)) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r0, 0x1) 489.230747ms ago: executing program 8 (id=4465): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r1, 0x0, &(0x7f00000000c0)) ioctl$VT_RELDISP(r0, 0x5605) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockname(r1, 0x0, &(0x7f00000000c0)) (async) ioctl$VT_RELDISP(r0, 0x5605) (async) 488.527712ms ago: executing program 8 (id=4466): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000000)={0x0, 0x10, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000240)={r4}) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 403.284346ms ago: executing program 8 (id=4467): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x400000, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r3, 0x40, 0x64b, 0x2}, 0x10) sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) shutdown(r4, 0x1) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ocfs2\x00', 0x204001, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) dup3(r1, r0, 0x0) 403.014461ms ago: executing program 7 (id=4468): r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='attr/current\x00') read$eventfd(r0, 0x0, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hostfs\x00', 0x204001, 0x0) 336.639035ms ago: executing program 4 (id=4469): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x2e0, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xfc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xef46}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xeb4a0000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe9fc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x83d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8d47}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x494}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x377}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa499}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xab5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x52e0}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1800000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x91}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ca}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf2e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x1}, 0x34526da4628b98cb) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) open_by_handle_at(0xffffffffffffffff, 0x0, 0x2d0000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02030609100000000017bb9dd94c8f255eeb11b0edd3739e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070020001f00001a000000030000a95a6e870200010000e9ff07004000020000cc58150b4d59a38328328626f2a881007bb952c00060016d9eecc48e5df3ce11c3dbc946c34d7740946b339aece3d209c3f26bfb4a410a0c7f3b0a558eaed0b9e87bdc66f80be56bd10c5eb2c2eddfd11afb3fe2f102eeb4932dd6ac03a9b360899a1fe67f82d29ff2b75ce466f9ed725b0eed0000"], 0x80}}, 0x20000000) r5 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xa, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x10}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0xf9, 0xdd, 0x1ff, 0xffffffff, 0x0, 0x7, 0x8, 0x3}}, {0xa, 0x2, [0xc5, 0x1096, 0x4]}}]}]}, 0x7c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x10}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0xf9, 0xdd, 0x1ff, 0xffffffff, 0x0, 0x7, 0x8, 0x3}}, {0xa, 0x2, [0xc5, 0x1096, 0x4]}}]}]}, 0x7c}}, 0x0) 263.401927ms ago: executing program 7 (id=4470): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0x0, 0xfffffffd, 0x0, 'queue0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, &(0x7f0000000d00)=""/198, 0x32, 0xc6, 0x1}, 0x20) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) 263.093639ms ago: executing program 9 (id=4471): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x280) ioctl$I2C_PEC(r1, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x9, 0x5, &(0x7f00000000c0)={0x21, "58a24aa4a9d76f125988101e860a4caab36c7fd3a0ae61f834e6dec9618a060c33"}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x42, 0x4, 0x2b8, 0xffffffff, 0x150, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @local, 0x1000000, 0xff, 'wg1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x28}, 'veth0_virt_wifi\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x2, 0x5, 0x1, 0x3], 0x4, 0x5}, {0x0, [0x1, 0x6, 0x6, 0x2, 0x0, 0x2], 0x1, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x280) (async) ioctl$I2C_PEC(r1, 0x708, 0xb8f7) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x9, 0x5, &(0x7f00000000c0)={0x21, "58a24aa4a9d76f125988101e860a4caab36c7fd3a0ae61f834e6dec9618a060c33"}}) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x42, 0x4, 0x2b8, 0xffffffff, 0x150, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @local, 0x1000000, 0xff, 'wg1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x28}, 'veth0_virt_wifi\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x2, 0x5, 0x1, 0x3], 0x4, 0x5}, {0x0, [0x1, 0x6, 0x6, 0x2, 0x0, 0x2], 0x1, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) (async) 183.406725ms ago: executing program 9 (id=4472): syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xff}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001780)=@newchain={0xa70, 0x64, 0x8, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0x8, 0x3}, {0x9, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x94d}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000]}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}]}}, @TCA_RATE={0x6, 0x5, {0x25, 0x6}}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x1}, @TCA_FLOWER_KEY_MPLS_OPTS={0x30, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5}]}}]}}, @filter_kind_options=@f_route={{0xa}, {0x16c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_ACT={0x160, 0x6, [@m_ct={0xb4, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xb, 0x8, 0x3, 0x5}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_MARK={0x8, 0x5, 0x3}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x4e, 0x6, "251093162a2dd2870d5ad9f37dd9bc6b1eb5f7ba5a732d77a2f4deb0bcf7f5c1a7285bbabb955006c1e5917b5ad5a12949e1a0057d50c72c13965652693046b220989e68c6cd9c0e322d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0xa8, 0x1, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x8, 0x5, 0x8, 0x3}, {0x2, 0x6, 0xbe, 0xfffffffd}, {0x9, 0x1, 0x2, 0x4}, {0xfffa, 0x3, 0x4, 0x3}, {0x0, 0x1, 0x40, 0x6}, {0xe8d, 0xaa, 0x3, 0x4}, {0xff98, 0x3, 0x4}, {0xc, 0x8, 0x8, 0x3ff}, {0x10, 0x7, 0x5}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x101, 0x9, 0x20000000, 0xf2f, 0x2}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0xb, 0x6, "82480c759eb8f0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_basic={{0xa}, {0x824, 0x2, [@TCA_BASIC_POLICE={0x80c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfffffff8, 0x8b, 0x5, 0x4, 0x33, 0x1, 0x8, 0x9, 0x1, 0xddf6, 0x3, 0x8, 0x0, 0xffffffff, 0x2, 0x3fb, 0x2, 0xfd36, 0x8d, 0xb, 0x9, 0x7, 0x3, 0x80000001, 0xd, 0x7fff, 0x5, 0x5, 0xc6, 0x0, 0x7, 0xd1b, 0x2, 0x2, 0x2fa, 0x3a7b, 0x4, 0x2, 0x1, 0x3, 0x5, 0x1, 0x6, 0x9, 0xfffffffd, 0x4d82e900, 0x6, 0x4, 0x9, 0x0, 0x2cae, 0x4, 0x5, 0x8f7, 0x6, 0x7fffffff, 0xd, 0x4, 0x8, 0x0, 0x7, 0x8, 0x8, 0x2, 0xd75, 0x80000001, 0x7, 0x8a98, 0xc3, 0x9, 0x8, 0x7, 0x7f, 0x5, 0x7, 0x5, 0x8c20, 0xc, 0x3, 0xffff92cc, 0x1, 0x2, 0x7, 0x0, 0x5, 0x3, 0x3, 0x6, 0x400, 0x81, 0x14a, 0x200, 0x0, 0x1, 0x80, 0x7, 0x2, 0xfffffff9, 0xa06, 0x0, 0x7f, 0xfffffffc, 0x9, 0xfff, 0x7, 0x4, 0x0, 0x7, 0xc, 0x6, 0x40, 0x7, 0x600, 0x9, 0x7f, 0x8, 0x4, 0x0, 0x7, 0x8, 0x0, 0x400, 0x10001, 0xe37, 0xffffff7f, 0x1, 0x3, 0x1, 0x6, 0x8001, 0x14d, 0x101, 0xffffffff, 0x9, 0x4a20, 0x3, 0x3, 0x4, 0x7, 0x0, 0x8, 0x101, 0x6, 0x1000, 0x2, 0xffffff81, 0x7, 0x3, 0x8, 0x0, 0x7, 0xb, 0x3ff, 0x5, 0x0, 0x4, 0x2, 0x4f4, 0x2, 0x5, 0x7, 0x2, 0x9, 0x7, 0xb6, 0x0, 0xb1d8, 0xb, 0x5d30, 0x5, 0x401, 0x1, 0x1, 0x6, 0x4, 0x0, 0x2800000, 0x0, 0x5, 0xff, 0xe, 0x8, 0x2, 0x400, 0xc307, 0x8b, 0x5d27, 0x7, 0x0, 0x3e8d, 0x7ff, 0x400, 0x29, 0xb12, 0x1, 0x9, 0x2, 0x4a, 0x5, 0x800, 0x4, 0x5, 0x40, 0x400, 0x1, 0x4d3, 0xe, 0x3, 0xfffffff8, 0x1, 0x1800, 0x3, 0xa1, 0x1, 0xb0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x3, 0x1, 0xf, 0x1, 0x7f, 0x6, 0x0, 0x574370bf, 0x200, 0x6c, 0x5, 0x6, 0x3, 0x82, 0x2, 0xc, 0x2, 0x9, 0x4, 0x58, 0x1, 0x3, 0x2, 0x4, 0xb, 0xa8, 0x8, 0x80000000, 0x4, 0xfffffff7, 0x0, 0x3, 0x6, 0xffff0001, 0x401]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x2f20494f, 0xf, 0x5, 0x4, 0x4, 0x10, 0x401, 0x653, 0x8, 0x2, 0x4, 0x6, 0xb, 0x6, 0x5, 0x5, 0xfffffbff, 0x82b5, 0x6, 0x9996, 0xc, 0x1, 0x8, 0x10000, 0xc39, 0x8, 0xd, 0x100, 0x9, 0xfffffffa, 0x5, 0x7f, 0x4, 0x2, 0x8, 0xfffffffb, 0x6, 0x8, 0x0, 0x7fff, 0x0, 0x516, 0x0, 0x800, 0x99a, 0x5, 0xa, 0x3, 0x400, 0x1, 0x0, 0x9, 0x101, 0x7, 0x1, 0x3, 0x629ae68, 0xce, 0x6, 0x6c, 0x0, 0x9, 0x2, 0x7fffffff, 0x1, 0x5, 0x572, 0xffffabab, 0x3ff, 0x9, 0x5, 0x4, 0x5, 0x5511, 0x87, 0xfffffff9, 0x7, 0xa, 0x2, 0x9, 0x631e3d22, 0x1a, 0x2, 0xc97, 0x3, 0x1, 0x6, 0x626, 0x6, 0x10, 0x7, 0x6, 0x87f0, 0x64bb, 0x1, 0x6, 0xb, 0xdc, 0x8001, 0x9, 0x7, 0x2, 0x9, 0x5, 0x7, 0x80, 0x6, 0x6, 0x3fff800, 0x0, 0x8, 0xfffffff8, 0x8, 0xffffffdc, 0xc, 0x401, 0x32, 0x41d8, 0x2, 0xbf, 0x3, 0xd, 0x2b0, 0x10, 0x2, 0x9, 0x2f, 0x6, 0x6867, 0x1, 0x401, 0x355, 0x7, 0x0, 0x400, 0x2, 0x96c, 0x4, 0xd, 0x1000, 0xd, 0x4, 0x10, 0x5, 0xa02, 0x2, 0x3, 0x9, 0x8, 0x6, 0x8, 0x3, 0x1, 0x10, 0x7370, 0x8, 0x1, 0x9, 0x6, 0xeed, 0xff, 0x80000000, 0x7fffffff, 0x0, 0x0, 0x3c10, 0x76, 0xfd, 0x0, 0x0, 0x400, 0x4, 0x9, 0x57077d7e, 0x82, 0x1, 0x7, 0x2, 0x2, 0x10000, 0x7, 0x30, 0x4c0e477a, 0x5354, 0x7fff, 0x2895, 0x4, 0x1, 0x8, 0x3096ba9c, 0x3, 0x0, 0x4, 0x9, 0x74fe, 0x1000, 0x10001, 0x678e, 0xd, 0x3, 0xbf, 0x253c, 0x0, 0x9, 0x9, 0x0, 0xc4, 0x3, 0x7fff, 0x1000, 0x3, 0x40, 0x6, 0xffffffff, 0x8, 0x6, 0x4, 0x100, 0xcdb, 0x8, 0x10001, 0x8, 0x9, 0x6, 0x80000000, 0x5, 0x0, 0x1, 0x1000, 0xa3, 0x3, 0x19, 0x0, 0x78, 0x7ff, 0x9, 0x29, 0xfd, 0x0, 0xf00a, 0x4, 0x8, 0x9, 0x2, 0x8001, 0x7, 0x4, 0xfffffffc, 0x8, 0x787b, 0x7, 0x1, 0x6, 0x400, 0x3d]}]}, @TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa788}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffff800}, @TCA_CHAIN={0x8, 0xb, 0xe4}]}, 0xa70}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) r7 = openat$pmem0(0xffffff9c, &(0x7f00000000c0), 0x165101, 0x0) r8 = dup(r7) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000240)={0x2, 0x2, 0x8002, 0x80000000, 0x8, 0xb, 0x101, 0x2, 0x0}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000014c0)={r9, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x6, 0xffff, 0x9, 0x7fff, 0xa, 0x0, 0x8}, &(0x7f0000001580)=0x9c) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r10 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r10, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x2}, 0xfffe}], 0x1, 0x2, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r10, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r11, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r12 = socket(0xa, 0x5, 0x0) getsockopt$inet_int(r12, 0x0, 0x22, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') modify_ldt$write2(0x11, &(0x7f0000000180)={0x8, 0x20000800}, 0x10) 181.688622ms ago: executing program 4 (id=4473): setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) setresgid(0xee00, 0xee01, 0x0) (async) getresgid(0x0, &(0x7f0000000000)=0x0, 0x0) setregid(0x0, r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x19, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) (async, rerun: 32) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001500), 0xc03, 0x0) (rerun: 32) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty, 0xfffffffd}, 0x57) (async) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) (async) sendto$inet6(r5, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) close_range(0xffffffffffffffff, r1, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = socket(0xa, 0x2400000001, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e24, 0xffffffc0, @mcast2, 0x22}}}, 0x88) (async) r8 = socket(0x6, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x100, {0x0, 0x0, 0x0, r9, {0x0, 0x1f}, {0xffff, 0xffff}, {0x6}}}, 0x24}}, 0x2000400c) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000200)={0x2, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r7, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000000000)=0x90) (async, rerun: 32) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, &(0x7f0000000200)) (async, rerun: 32) timer_create(0xefe5b9899fda1222, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0x280000, 0x43e902a2, 0xe, 0x5, 0x6, 0xd9ec}) 83.645502ms ago: executing program 7 (id=4474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x44, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008080}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00+'], 0x34}}, 0xc088) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000020000800000008000300", @ANYRES32=r7], 0x24}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4010) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="000000000400001c0012800b0001006272000000d39a875d8c61b4eff0dfddb3e9982db039968447ccb4d396dfe32881317d48f4918e8dcbc237a61d7e77fab7b9fdbcaf72efcb3731acdffe5fdfd93e0af73189179ea5d43294fe66d47c9b9e094ab0c2883c17d2d03e5d45b49e86"], 0x3c}}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x44, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008080}, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00+'], 0x34}}, 0xc088) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000020000800000008000300", @ANYRES32=r7], 0x24}}, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4010) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="000000000400001c0012800b0001006272000000d39a875d8c61b4eff0dfddb3e9982db039968447ccb4d396dfe32881317d48f4918e8dcbc237a61d7e77fab7b9fdbcaf72efcb3731acdffe5fdfd93e0af73189179ea5d43294fe66d47c9b9e094ab0c2883c17d2d03e5d45b49e86"], 0x3c}}, 0x880) (async) 83.419718ms ago: executing program 4 (id=4475): setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 953.985µs ago: executing program 4 (id=4476): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1}) 0s ago: executing program 7 (id=4477): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000000080)) fcntl$lock(r1, 0x24, &(0x7f0000000180)={0x0, 0x0, 0xc, 0x200002}) listen(r0, 0x8) listen(r0, 0x7fffffff) kernel console output (not intermixed with test programs): 25] openvswitch: netlink: Flow key attr not present in new flow. [ 355.252811][ C2] sr 2:0:0:0: [sr0] tag#16 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 355.257424][ C2] sr 2:0:0:0: [sr0] tag#16 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 355.258589][T18442] validate_nla: 2 callbacks suppressed [ 355.258602][T18442] netlink: 'syz.7.3490': attribute type 1 has an invalid length. [ 355.289102][T18439] hfsplus: unable to find HFS+ superblock [ 355.298728][T18442] bond7: entered promiscuous mode [ 355.300722][T18442] 8021q: adding VLAN 0 to HW filter on device bond7 [ 355.309614][T18442] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3490'. [ 355.313434][T18442] bond7: entered allmulticast mode [ 355.328518][T18442] bond7: (slave bridge4): making interface the new active one [ 355.331404][T18442] bridge4: entered promiscuous mode [ 355.334282][T18442] bridge4: entered allmulticast mode [ 355.343115][T18442] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 355.377300][T18439] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 355.379972][T18442] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3490'. [ 355.386498][T18442] netlink: 'syz.7.3490': attribute type 3 has an invalid length. [ 355.978559][T18483] loop4: detected capacity change from 0 to 7 [ 355.981985][T18483] buffer_io_error: 12 callbacks suppressed [ 355.981997][T18483] Buffer I/O error on dev loop4, logical block 0, async page read [ 355.987111][T18483] Buffer I/O error on dev loop4, logical block 0, async page read [ 355.989846][T18483] Buffer I/O error on dev loop4, logical block 0, async page read [ 355.992685][T18483] Buffer I/O error on dev loop4, logical block 0, async page read [ 355.995444][T18483] Buffer I/O error on dev loop4, logical block 0, async page read [ 356.002472][T18483] Buffer I/O error on dev loop4, logical block 0, async page read [ 356.007060][T18483] Buffer I/O error on dev loop4, logical block 0, async page read [ 356.009693][T18483] ldm_validate_partition_table(): Disk read failed. [ 356.011805][T18483] Buffer I/O error on dev loop4, logical block 0, async page read [ 356.014349][T18483] Buffer I/O error on dev loop4, logical block 0, async page read [ 356.017277][T18483] Buffer I/O error on dev loop4, logical block 0, async page read [ 356.019872][T18483] Dev loop4: unable to read RDB block 0 [ 356.021844][T18483] loop4: unable to read partition table [ 356.023838][T18483] loop4: partition table beyond EOD, truncated [ 356.027863][T18483] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 356.041494][T18487] ldm_validate_partition_table(): Disk read failed. [ 356.044919][T18487] Dev loop4: unable to read RDB block 0 [ 356.047641][T18487] loop4: unable to read partition table [ 356.050253][T18487] loop4: partition table beyond EOD, truncated [ 356.366893][T18516] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 356.478344][T18515] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 356.516757][T18533] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3519'. [ 356.567909][T18533] bond0 (unregistering): Released all slaves [ 356.597121][T18538] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3521'. [ 356.749964][T18552] comedi comedi3: comedi_config --init_data is deprecated [ 356.761294][T18552] IPVS: ip_vs_add_dest(): server weight less than zero [ 356.805490][T18554] binder: BINDER_SET_CONTEXT_MGR already set [ 356.817254][T18554] binder: 18553:18554 ioctl 4018620d 200000000100 returned -16 [ 357.014497][T18568] could not allocate digest TFM handle cryptd(blake2b-160) [ 357.088754][T18588] overlay: Bad value for 'workdir' [ 357.195024][ T40] kauditd_printk_skb: 374 callbacks suppressed [ 357.195047][ T40] audit: type=1400 audit(869.107:5177): avc: denied { recv } for pid=5916 comm="syz-executor" saddr=127.0.0.1 src=47616 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 357.216339][ T40] audit: type=1400 audit(869.127:5178): avc: denied { create } for pid=18600 comm="syz.4.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 357.223707][T18601] ip6t_srh: unknown srh match flags 4015 [ 357.226065][ T40] audit: type=1400 audit(869.137:5179): avc: denied { setopt } for pid=18600 comm="syz.4.3539" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 357.284386][ T40] audit: type=1400 audit(869.197:5180): avc: denied { open } for pid=18602 comm="syz.4.3540" path="/dev/ptyqc" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 357.315048][ T40] audit: type=1400 audit(869.227:5181): avc: denied { ioctl } for pid=18602 comm="syz.4.3540" path="socket:[91529]" dev="sockfs" ino=91529 ioctlcmd=0x6e8a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 357.364033][ T40] audit: type=1400 audit(869.277:5182): avc: denied { read write } for pid=18611 comm="syz.4.3543" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 357.371812][ T40] audit: type=1400 audit(869.277:5183): avc: denied { open } for pid=18611 comm="syz.4.3543" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 357.386292][ T40] audit: type=1400 audit(869.287:5184): avc: denied { create } for pid=18611 comm="syz.4.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 357.396389][ T24] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 357.405263][ T40] audit: type=1400 audit(869.317:5185): avc: denied { prog_load } for pid=18618 comm="syz.7.3545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.412044][ T40] audit: type=1400 audit(869.317:5186): avc: denied { bpf } for pid=18618 comm="syz.7.3545" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.428372][T18620] fuse: Unknown parameter 'fgžÂ' [ 357.540835][T18627] overlayfs: failed to resolve 'verity=on': -2 [ 357.547850][ T24] usb 14-1: Using ep0 maxpacket: 8 [ 357.551659][ T24] usb 14-1: config 179 has an invalid interface number: 65 but max is 0 [ 357.562939][ T24] usb 14-1: config 179 has no interface number 0 [ 357.565611][ T24] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 357.570300][ T24] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 357.574779][ T24] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 357.579746][ T24] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 357.585433][ T24] usb 14-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 357.590979][ T24] usb 14-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 357.594794][ T24] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.607886][T18596] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 357.880757][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:179.65/input/input38 [ 358.135475][T18641] netlink: 'syz.7.3552': attribute type 13 has an invalid length. [ 358.197536][ T5978] usb 14-1: USB disconnect, device number 12 [ 358.197699][ C2] xpad 14-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 358.202215][ C2] xpad 14-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 358.468090][T18657] openvswitch: netlink: IP tunnel dst address not specified [ 358.475344][T18657] nbd: socks must be embedded in a SOCK_ITEM attr [ 358.833929][T18672] netlink: 'syz.7.3557': attribute type 7 has an invalid length. [ 358.836597][T18672] netlink: 'syz.7.3557': attribute type 8 has an invalid length. [ 359.195158][T18688] __nla_validate_parse: 4 callbacks suppressed [ 359.195376][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3563'. [ 359.407271][T18683] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3564'. [ 359.657430][T18566] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 359.665435][T18703] netlink: 'syz.7.3567': attribute type 1 has an invalid length. [ 359.676532][T18703] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3567'. [ 359.764353][T18707] hfsplus: unable to find HFS+ superblock [ 359.836388][T18712] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3570'. [ 359.845984][T18712] erspan0: entered promiscuous mode [ 359.852083][T18712] gretap0: entered promiscuous mode [ 359.853300][T18707] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 359.855075][T18712] debugfs: 'hsr1' already exists in 'hsr' [ 359.860381][T18712] Cannot create hsr debugfs directory [ 359.863080][T18712] hsr1: entered promiscuous mode [ 360.025104][T18725] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 360.077745][T18731] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3578'. [ 360.123144][T18731] binder: BINDER_SET_CONTEXT_MGR already set [ 360.136080][T18731] binder: 18730:18731 ioctl 4018620d 200000004a80 returned -16 [ 360.206713][T18741] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3580'. [ 360.337485][T18752] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3583'. [ 360.362554][ T6028] hid-generic 6200:7FF03:FFFFFF00.000C: unknown main item tag 0x0 [ 360.367440][ T6028] hid-generic 6200:7FF03:FFFFFF00.000C: unknown main item tag 0x3 [ 360.376846][ T6028] hid-generic 6200:7FF03:FFFFFF00.000C: unknown main item tag 0x0 [ 360.383188][ T6028] hid-generic 6200:7FF03:FFFFFF00.000C: unknown main item tag 0x0 [ 360.392481][ T6028] hid-generic 6200:7FF03:FFFFFF00.000C: unknown main item tag 0x0 [ 360.393292][T18765] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3587'. [ 360.397264][ T6028] hid-generic 6200:7FF03:FFFFFF00.000C: unknown main item tag 0x0 [ 360.404563][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3587'. [ 360.406535][ T6028] hid-generic 6200:7FF03:FFFFFF00.000C: unknown main item tag 0x0 [ 360.408798][T18765] netlink: 'syz.8.3587': attribute type 7 has an invalid length. [ 360.414444][T18765] netlink: 'syz.8.3587': attribute type 13 has an invalid length. [ 360.416385][ T6028] hid-generic 6200:7FF03:FFFFFF00.000C: unknown main item tag 0x0 [ 360.426451][ T6028] hid-generic 6200:7FF03:FFFFFF00.000C: unknown main item tag 0x0 [ 360.429098][ T6028] hid-generic 6200:7FF03:FFFFFF00.000C: unknown main item tag 0x0 [ 360.465699][ T6028] hid-generic 6200:7FF03:FFFFFF00.000C: hidraw1: HID v1.7f Device [syz1] on [ 360.514219][T18771] fido_id[18771]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 360.818624][T18789] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18789 comm=syz.9.3595 [ 360.829937][T18789] tipc: Trying to set illegal importance in message [ 360.966396][T18800] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3599'. [ 361.280477][T18809] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 361.289686][T18809] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 361.329800][T18814] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 361.674418][T18820] mkiss: ax0: crc mode is auto. [ 361.848247][T18825] sit0: left promiscuous mode [ 361.892438][T18825] macsec1: left promiscuous mode [ 361.894140][T18825] gretap1: left promiscuous mode [ 361.895876][T18825] hsr1: left promiscuous mode [ 361.902028][T18714] vivid-000: kernel_thread() failed [ 361.999618][T18831] xt_connbytes: Forcing CT accounting to be enabled [ 362.002144][T18831] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.219105][ T40] kauditd_printk_skb: 317 callbacks suppressed [ 362.219119][ T40] audit: type=1400 audit(874.137:5504): avc: denied { read } for pid=18839 comm="syz.7.3610" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 362.236161][ T40] audit: type=1400 audit(874.137:5505): avc: denied { open } for pid=18839 comm="syz.7.3610" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 362.252331][ T40] audit: type=1400 audit(874.147:5506): avc: denied { ioctl } for pid=18839 comm="syz.7.3610" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 362.262621][ T40] audit: type=1400 audit(874.157:5507): avc: denied { ioctl } for pid=18832 comm="syz.9.3608" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=92005 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 362.279970][ T40] audit: type=1400 audit(874.197:5508): avc: denied { read } for pid=18839 comm="syz.7.3610" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 362.299933][ T40] audit: type=1400 audit(874.197:5509): avc: denied { open } for pid=18839 comm="syz.7.3610" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 362.310748][ T40] audit: type=1400 audit(874.207:5510): avc: denied { read } for pid=18832 comm="syz.9.3608" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=92005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 362.323683][ T40] audit: type=1400 audit(874.217:5511): avc: denied { create } for pid=18832 comm="syz.9.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 362.336604][ T40] audit: type=1400 audit(874.217:5512): avc: denied { write } for pid=18832 comm="syz.9.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 362.345633][ T40] audit: type=1400 audit(874.217:5513): avc: denied { read } for pid=18832 comm="syz.9.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 362.444540][T18847] overlayfs: overlapping lowerdir path [ 362.671288][T18860] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 362.671288][T18860] program syz.9.3617 not setting count and/or reply_len properly [ 362.830543][T18865] syzkaller0: entered promiscuous mode [ 362.832758][T18865] syzkaller0: entered allmulticast mode [ 363.078732][T18878] lo speed is unknown, defaulting to 1000 [ 363.205407][T18881] syz.7.3623 uses old SIOCAX25GETINFO [ 363.352088][T18893] wireguard0: entered allmulticast mode [ 363.496660][T18902] nbd: must specify an index to disconnect [ 363.643090][T18906] team0: Port device team_slave_0 removed [ 363.781411][T18914] veth0_vlan: left promiscuous mode [ 364.358010][T18928] fuse: Unknown parameter ' [ 364.358010][T18928] Çþr' [ 364.410031][T18932] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 364.446834][T18935] __nla_validate_parse: 4 callbacks suppressed [ 364.446850][T18935] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3638'. [ 364.457589][T18935] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 364.460292][T18942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18942 comm=syz.8.3640 [ 364.520703][T18948] CUSE: unknown device info "" [ 364.522662][T18948] CUSE: zero length info key specified [ 364.568727][T18950] bond5: Removing last arp target with arp_interval on [ 365.492455][T18983] F2FS-fs (nbd9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 365.495198][T18983] F2FS-fs (nbd9): Can't find valid F2FS filesystem in 1th superblock [ 365.498234][T18983] F2FS-fs (nbd9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 365.500727][T18983] F2FS-fs (nbd9): Can't find valid F2FS filesystem in 2th superblock [ 365.516893][T18983] input: syz0 as /devices/virtual/input/input39 [ 365.919025][T18997] netlink: 'syz.9.3653': attribute type 21 has an invalid length. [ 365.936354][T18997] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3653'. [ 365.946511][T18997] netlink: 'syz.9.3653': attribute type 4 has an invalid length. [ 365.948994][T18997] netlink: 'syz.9.3653': attribute type 5 has an invalid length. [ 365.951716][T18997] netlink: 3 bytes leftover after parsing attributes in process `syz.9.3653'. [ 365.992967][T19003] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000af0 undefined [ 366.221632][T19015] bond0: entered promiscuous mode [ 366.236479][T19018] xt_hashlimit: size too large, truncated to 1048576 [ 366.306433][ T1026] usb 12-1: new high-speed USB device number 38 using dummy_hcd [ 366.466410][ T1026] usb 12-1: Using ep0 maxpacket: 32 [ 366.469143][T19022] netlink: 'syz.8.3659': attribute type 2 has an invalid length. [ 366.470608][ T1026] usb 12-1: config index 0 descriptor too short (expected 156, got 27) [ 366.475766][ T1026] usb 12-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 366.480565][ T1026] usb 12-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 366.485242][ T1026] usb 12-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 366.490477][ T1026] usb 12-1: config 0 interface 0 has no altsetting 0 [ 366.497010][ T1026] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 366.500375][ T1026] usb 12-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 366.506677][ T1026] usb 12-1: Product: syz [ 366.508161][ T1026] usb 12-1: Manufacturer: syz [ 366.513387][ T1026] usb 12-1: SerialNumber: syz [ 366.519224][ T1026] usb 12-1: config 0 descriptor?? [ 366.524868][ T1026] ldusb 12-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 366.529330][ T1026] ldusb 12-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 366.819124][ T1026] usb 12-1: USB disconnect, device number 38 [ 366.819298][ C1] ldusb 12-1:0.0: usb_submit_urb failed (-19) [ 366.836337][T19009] ldusb 12-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 366.846096][ T1026] ldusb 12-1:0.0: LD USB Device #0 now disconnected [ 367.092106][T19042] syzkaller0: entered promiscuous mode [ 367.098364][T19042] syzkaller0: entered allmulticast mode [ 367.312128][ T40] kauditd_printk_skb: 257 callbacks suppressed [ 367.312142][ T40] audit: type=1400 audit(879.227:5771): avc: denied { write } for pid=19054 comm="syz.4.3669" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 367.566160][ T40] audit: type=1400 audit(879.477:5772): avc: denied { mount } for pid=19059 comm="syz.7.3670" name="/" dev="9p" ino=81264693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 367.573497][ T40] audit: type=1400 audit(879.477:5773): avc: denied { add_name } for pid=19059 comm="syz.7.3670" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 367.581741][ T40] audit: type=1400 audit(879.477:5774): avc: denied { create } for pid=19059 comm="syz.7.3670" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 367.589412][ T40] audit: type=1400 audit(879.477:5775): avc: denied { associate } for pid=19059 comm="syz.7.3670" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 367.597183][ T40] audit: type=1400 audit(879.507:5776): avc: denied { read } for pid=19059 comm="syz.7.3670" name="file0" dev="9p" ino=81264777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 367.633345][ T40] audit: type=1400 audit(879.547:5777): avc: denied { create } for pid=19059 comm="syz.7.3670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 367.634957][T19060] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3670'. [ 367.639612][ T40] audit: type=1400 audit(879.547:5778): avc: denied { write } for pid=19059 comm="syz.7.3670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 367.649431][ T40] audit: type=1400 audit(879.547:5779): avc: denied { nlmsg_write } for pid=19059 comm="syz.7.3670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 367.679564][ T40] audit: type=1400 audit(879.597:5780): avc: denied { unmount } for pid=10965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 367.954996][T19063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19063 comm=syz.7.3671 [ 368.122560][T19066] team_slave_1: Caught tx_queue_len zero misconfig [ 368.128303][T19066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19066 comm=syz.7.3672 [ 368.134293][T19066] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3672'. [ 368.886925][ T5937] Bluetooth: hci4: command 0x0c1a tx timeout [ 369.529836][T19024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.533744][T19057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3669'. [ 369.598074][T19084] netlink: 'syz.8.3680': attribute type 1 has an invalid length. [ 369.613668][T19084] loop5: detected capacity change from 0 to 7 [ 369.777665][T19084] Dev loop5: unable to read RDB block 7 [ 369.780246][T19084] loop5: unable to read partition table [ 369.784029][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 369.787251][ C0] buffer_io_error: 28 callbacks suppressed [ 369.787262][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 369.788232][T19084] loop5: partition table beyond EOD, truncated [ 369.799365][T19084] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 369.888789][T19117] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 369.896915][ T9249] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 369.960788][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3690'. [ 370.019380][T19137] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 370.019380][T19137] Please contact the netfilter-devel mailing list or update your nftables rules. [ 370.066519][ T9249] usb 9-1: Using ep0 maxpacket: 8 [ 370.071237][ T9249] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 370.077194][ T9249] usb 9-1: config 0 has no interface number 0 [ 370.081432][ T9249] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 370.094926][ T9249] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 370.099056][ T9249] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 370.102583][ T9249] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 370.107014][ T9249] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 370.110090][ T9249] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.117720][ T9249] usb 9-1: config 0 descriptor?? [ 370.127108][ T9249] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 370.241436][T19158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19158 comm=syz.9.3698 [ 370.547861][T19188] kernel read not supported for file /file1 (pid: 19188 comm: syz.9.3702) [ 370.600034][T19193] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.3703'. [ 370.606459][T19193] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.3703'. [ 370.709666][T19193] lo speed is unknown, defaulting to 1000 [ 370.837779][T19205] tmpfs: Bad value for 'mpol' [ 371.034767][T19217] xt_TPROXY: Can be used only with -p tcp or -p udp [ 371.039351][T19209] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 371.124504][T19224] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3712'. [ 371.130463][T19224] openvswitch: netlink: Flow actions attr not present in new flow. [ 371.136572][T19225] netlink: 184 bytes leftover after parsing attributes in process `syz.9.3712'. [ 371.240623][T19236] pim6reg1: tun_chr_ioctl cmd 1074025675 [ 371.242475][T19236] pim6reg1: persist enabled [ 371.268502][T19236] pim6reg1: tun_chr_ioctl cmd 1074025675 [ 371.270434][T19236] pim6reg1: persist disabled [ 371.270642][T19240] netlink: 'syz.7.3716': attribute type 20 has an invalid length. [ 371.412456][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3717'. [ 371.504107][T19250] cgroup: release_agent respecified [ 371.691159][T19252] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.711226][T19252] team0: Mode changed to "loadbalance" [ 371.714196][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3719'. [ 372.020609][T19271] xt_hashlimit: size too large, truncated to 1048576 [ 372.394982][ T40] kauditd_printk_skb: 207 callbacks suppressed [ 372.394996][ T40] audit: type=1400 audit(884.307:5987): avc: denied { create } for pid=19284 comm="syz.9.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 372.403442][ T40] audit: type=1400 audit(884.317:5988): avc: denied { bind } for pid=19284 comm="syz.9.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 372.409042][ T8896] usb 9-1: USB disconnect, device number 43 [ 372.419871][ T8896] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 372.438172][ T40] audit: type=1400 audit(884.357:5989): avc: denied { accept } for pid=19284 comm="syz.9.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 372.453260][ T40] audit: type=1400 audit(884.367:5990): avc: denied { prog_load } for pid=19284 comm="syz.9.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 372.464943][ T40] audit: type=1400 audit(884.367:5991): avc: denied { prog_run } for pid=19284 comm="syz.9.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 372.471736][ T40] audit: type=1400 audit(884.367:5992): avc: denied { write } for pid=19284 comm="syz.9.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 372.479837][ T40] audit: type=1400 audit(884.397:5993): avc: denied { read write } for pid=15019 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.488331][ T40] audit: type=1400 audit(884.397:5994): avc: denied { open } for pid=15019 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.495764][ T40] audit: type=1400 audit(884.397:5995): avc: denied { ioctl } for pid=15019 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.568247][ T40] audit: type=1400 audit(884.487:5996): avc: denied { load_policy } for pid=19292 comm="syz.9.3731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 372.571113][T19293] SELinux: failed to load policy [ 372.879006][T19316] fuse: Bad value for 'group_id' [ 372.881153][T19316] fuse: Bad value for 'group_id' [ 372.918891][T19321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=19321 comm=syz.9.3739 [ 372.924897][T19321] netlink: 'syz.9.3739': attribute type 23 has an invalid length. [ 373.019961][T19335] bond7: Unable to set up delay as MII monitoring is disabled [ 373.027639][T19335] bond7 (unregistering): Released all slaves [ 373.063575][T19324] netlink: 188 bytes leftover after parsing attributes in process `syz.9.3741'. [ 373.136495][T19315] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 373.182647][T19348] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3747'. [ 373.301431][T19355] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 373.799869][T19380] fuse: Bad value for 'rootmode' [ 374.041378][T19393] tmpfs: Bad value for 'mpol' [ 374.446538][T19418] xt_hashlimit: size too large, truncated to 1048576 [ 374.461831][T19420] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 374.463968][T19420] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 374.467850][T19420] vhci_hcd vhci_hcd.0: Device attached [ 374.480872][T19421] vhci_hcd: connection closed [ 374.484550][T11529] vhci_hcd vhci_hcd.4: stop threads [ 374.492214][T11529] vhci_hcd vhci_hcd.4: release socket [ 374.495035][T11529] vhci_hcd vhci_hcd.4: disconnect device [ 374.770983][T19442] xt_hashlimit: size too large, truncated to 1048576 [ 374.797350][T19445] __nla_validate_parse: 2 callbacks suppressed [ 374.797364][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3775'. [ 374.804024][T19445] netlink: 'syz.8.3775': attribute type 26 has an invalid length. [ 374.930071][T19457] geneve4: entered promiscuous mode [ 374.932369][T19457] geneve4: entered allmulticast mode [ 374.969563][T19463] ipt_REJECT: TCP_RESET invalid for non-tcp [ 375.017210][T19451] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 375.037578][T19468] FAT-fs (loop8): unable to read boot sector [ 375.042762][T19465] sp0: Synchronizing with TNC [ 375.084589][T19474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=19474 comm=syz.8.3784 [ 375.090693][T19470] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=19470 comm=syz.8.3784 [ 375.097228][T19474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=19474 comm=syz.8.3784 [ 375.170629][T19464] [U] è [ 375.201471][T19485] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3787'. [ 375.222811][T19481] netlink: 'syz.8.3786': attribute type 1 has an invalid length. [ 375.247063][T19481] 8021q: adding VLAN 0 to HW filter on device bond6 [ 375.275762][T19481] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 375.287647][T19481] bond7 (unregistering): Released all slaves [ 375.457253][T19505] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 375.466117][T19503] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 375.594556][T19513] netlink: 'syz.9.3797': attribute type 16 has an invalid length. [ 375.601162][T19513] netlink: 'syz.9.3797': attribute type 17 has an invalid length. [ 375.615560][T19513] sit0: left promiscuous mode [ 375.709963][T19513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.736384][T19518] tipc: Started in network mode [ 375.738793][T19518] tipc: Node identity 16c7962598f2, cluster identity 4711 [ 375.742642][T19518] tipc: Enabled bearer , priority 0 [ 375.745862][T19518] syzkaller0: entered promiscuous mode [ 375.747765][T19518] syzkaller0: entered allmulticast mode [ 375.752123][T19518] program syz.8.3796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.771953][T19518] tipc: Resetting bearer [ 375.778993][T19516] tipc: Resetting bearer [ 375.837410][T19516] tipc: Disabling bearer [ 376.161414][T19550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=19550 comm=syz.9.3808 [ 376.219723][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3813'. [ 376.222597][T19575] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3813'. [ 376.272573][T19582] xt_hashlimit: size too large, truncated to 1048576 [ 376.304753][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3817'. [ 376.462607][T19590] netlink: 100 bytes leftover after parsing attributes in process `syz.9.3818'. [ 376.464941][T19591] netlink: 100 bytes leftover after parsing attributes in process `syz.9.3818'. [ 376.470396][T19590] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 376.470417][T19591] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 376.561678][T19598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3821'. [ 376.857716][T19624] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3827'. [ 376.861931][T19624] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3827'. [ 376.951027][T19617] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 376.981922][ T5947] libceph: connect (1)[b::]:6789 error -101 [ 376.998345][ T5947] libceph: mon0 (1)[b::]:6789 connect error [ 377.011624][ T5947] libceph: connect (1)[b::]:6789 error -101 [ 377.014205][ T5947] libceph: mon0 (1)[b::]:6789 connect error [ 377.035634][T19631] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 377.042618][T19631] overlayfs: failed to set xattr on upper [ 377.047580][T19631] overlayfs: ...falling back to redirect_dir=nofollow. [ 377.049957][T19631] overlayfs: ...falling back to index=off. [ 377.052481][T19631] overlayfs: ...falling back to uuid=null. [ 377.054895][T19631] overlayfs: maximum fs stacking depth exceeded [ 377.260178][T19648] netlink: 'syz.8.3834': attribute type 4 has an invalid length. [ 377.285337][ T5947] libceph: connect (1)[b::]:6789 error -101 [ 377.288474][ T5947] libceph: mon0 (1)[b::]:6789 connect error [ 377.444639][T19662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=19662 comm=syz.4.3838 [ 377.485259][ T40] kauditd_printk_skb: 406 callbacks suppressed [ 377.485277][ T40] audit: type=1400 audit(889.397:6403): avc: denied { append } for pid=19664 comm="syz.7.3839" name="v4l-subdev2" dev="devtmpfs" ino=967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 377.493087][T19665] fuse: Unknown parameter 'f' [ 377.499575][ T40] audit: type=1400 audit(889.407:6404): avc: denied { create } for pid=19664 comm="syz.7.3839" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 377.508257][ T40] audit: type=1400 audit(889.407:6405): avc: denied { mounton } for pid=19664 comm="syz.7.3839" path="/583/file0" dev="tmpfs" ino=3129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 377.520104][ T40] audit: type=1400 audit(889.417:6406): avc: denied { prog_load } for pid=19666 comm="syz.4.3840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 377.528080][ T40] audit: type=1400 audit(889.417:6407): avc: denied { allowed } for pid=19666 comm="syz.4.3840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 377.536487][ T40] audit: type=1400 audit(889.437:6408): avc: denied { map_create } for pid=19666 comm="syz.4.3840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 377.548492][ T40] audit: type=1400 audit(889.467:6409): avc: denied { mounton } for pid=19666 comm="syz.4.3840" path="/161/file0" dev="tmpfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 377.556938][ T40] audit: type=1400 audit(889.467:6410): avc: denied { read write } for pid=19664 comm="syz.7.3839" name="file0" dev="tmpfs" ino=3129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 377.565841][ T40] audit: type=1400 audit(889.467:6411): avc: denied { open } for pid=19664 comm="syz.7.3839" path="/583/file0" dev="tmpfs" ino=3129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 377.576729][ T40] audit: type=1400 audit(889.467:6412): avc: denied { unlink } for pid=19666 comm="syz.4.3840" name="#81" dev="tmpfs" ino=885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 377.591693][T19671] QAT: failed to copy from user cfg_data. [ 377.603088][T19673] QAT: failed to copy from user cfg_data. [ 377.688378][T19622] ceph: No mds server is up or the cluster is laggy [ 378.163435][T19710] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 378.171025][T19712] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 378.323442][T19727] bond7 (unregistering): Released all slaves [ 378.356323][T19729] bond7 (unregistering): Released all slaves [ 379.622170][T19785] pimreg: tun_chr_ioctl cmd 1074025676 [ 379.625070][T19785] pimreg: owner set to 0 [ 379.626963][T19785] netlink: 'syz.9.3873': attribute type 10 has an invalid length. [ 379.628847][T19784] input: syz0 as /devices/virtual/input/input41 [ 379.771051][T19792] fuse: Unknown parameter 'fp' [ 379.811211][T19792] 9p: Bad value for 'rfdno' [ 380.108339][ T5941] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 380.209686][T19819] __nla_validate_parse: 5 callbacks suppressed [ 380.209706][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3886'. [ 380.211893][T19820] netlink: 336 bytes leftover after parsing attributes in process `syz.9.3886'. [ 380.212444][T19819] netlink: 'syz.9.3886': attribute type 30 has an invalid length. [ 380.441916][T19826] vivid-004: ================= START STATUS ================= [ 380.445259][T19826] vivid-004: Radio HW Seek Mode: Bounded [ 380.455315][T19826] vivid-004: Radio Programmable HW Seek: false [ 380.460446][T19826] vivid-004: RDS Rx I/O Mode: Block I/O [ 380.464470][T19826] vivid-004: Generate RBDS Instead of RDS: false [ 380.467159][T19826] vivid-004: RDS Reception: true [ 380.468838][T19826] vivid-004: RDS Program Type: 0 inactive [ 380.470726][T19826] vivid-004: RDS PS Name: inactive [ 380.472959][T19826] vivid-004: RDS Radio Text: inactive [ 380.474900][T19826] vivid-004: RDS Traffic Announcement: false inactive [ 380.479532][T19826] vivid-004: RDS Traffic Program: false inactive [ 380.483056][T19826] vivid-004: RDS Music: false inactive [ 380.486038][T19826] vivid-004: ================== END STATUS ================== [ 380.492512][T19826] netlink: 4096 bytes leftover after parsing attributes in process `syz.9.3888'. [ 380.496726][T19826] openvswitch: netlink: Flow actions attr not present in new flow. [ 380.543701][T19831] hpfs: Bad magic ... probably not HPFS [ 380.917237][T19808] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 381.028545][T19849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=19849 comm=syz.8.3895 [ 381.036542][T19849] netlink: 'syz.8.3895': attribute type 18 has an invalid length. [ 381.040149][T19849] netlink: 'syz.8.3895': attribute type 18 has an invalid length. [ 381.054162][T19855] x_tables: duplicate underflow at hook 2 [ 381.121914][ T5941] Bluetooth: hci4: unexpected event for opcode 0x0406 [ 383.196475][ T5941] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 383.224054][ T40] kauditd_printk_skb: 292 callbacks suppressed [ 383.224075][ T40] audit: type=1400 audit(895.137:6705): avc: denied { name_bind } for pid=19872 comm="syz.7.3903" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 383.272180][ T40] audit: type=1400 audit(895.187:6706): avc: denied { create } for pid=19875 comm="syz.7.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 383.417620][ T40] audit: type=1400 audit(895.337:6707): avc: denied { create } for pid=19877 comm="syz.7.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 383.426454][ T40] audit: type=1400 audit(895.337:6708): avc: denied { getopt } for pid=19877 comm="syz.7.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 383.434540][ T40] audit: type=1400 audit(895.337:6709): avc: denied { read write } for pid=19877 comm="syz.7.3905" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 383.445311][ T40] audit: type=1400 audit(895.337:6710): avc: denied { open } for pid=19877 comm="syz.7.3905" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 383.456081][ T40] audit: type=1400 audit(895.337:6711): avc: denied { ioctl } for pid=19877 comm="syz.7.3905" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 383.633715][T19838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.679322][ T53] usb 12-1: new high-speed USB device number 39 using dummy_hcd [ 383.680670][ T40] audit: type=1400 audit(895.597:6712): avc: denied { unmount } for pid=12633 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 383.729097][ T40] audit: type=1400 audit(895.647:6713): avc: denied { read write } for pid=19879 comm="syz.4.3907" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 383.739641][ T40] audit: type=1400 audit(895.647:6714): avc: denied { open } for pid=19879 comm="syz.4.3907" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 383.872014][ T53] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 383.875570][ T53] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 383.879524][ T53] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 383.888193][ T53] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 383.894129][ T53] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 383.899593][ T53] usb 12-1: Product: syz [ 383.901153][ T53] usb 12-1: Manufacturer: syz [ 383.905355][ T53] usb 12-1: SerialNumber: syz [ 383.994357][T19901] netlink: 'syz.9.3912': attribute type 10 has an invalid length. [ 383.998103][T19901] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3912'. [ 383.998480][T19900] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 384.137995][ T53] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 384.453718][T19937] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.3922'. [ 384.463192][T19937] netlink: ct family unspecified [ 384.571744][T19949] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3927'. [ 385.057804][T19966] IPVS: set_ctl: invalid protocol: 29 172.20.20.16:20004 [ 385.063005][T19965] IPVS: set_ctl: invalid protocol: 29 172.20.20.16:20004 [ 385.313977][T19971] netlink: 'syz.4.3933': attribute type 10 has an invalid length. [ 385.339515][T19971] team0 (unregistering): Port device team_slave_0 removed [ 385.345330][T19971] team0 (unregistering): Port device team_slave_1 removed [ 385.444426][T19974] afs: Unknown parameter 'dSy>èfªOfÒN' [ 385.458818][T19943] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 385.514857][T19984] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3936'. [ 385.556576][T19988] 9p: Bad value for 'rfdno' [ 385.562766][T19986] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3939'. [ 385.671110][T19998] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3944'. [ 385.812512][T20016] 9p: Unknown Cache mode or invalid value fYcac(e [ 385.850221][T20019] syz_tun: entered allmulticast mode [ 385.853962][T20019] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 385.860412][T20019] mroute: pending queue full, dropping entries [ 385.955031][T20025] netlink: 'syz.9.3953': attribute type 1 has an invalid length. [ 386.092016][T20031] netlink: 4452 bytes leftover after parsing attributes in process `syz.9.3954'. [ 386.219130][T20034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 386.229641][T20034] can0: slcan on ttyS3. [ 386.436001][ T6017] usb 12-1: USB disconnect, device number 39 [ 386.451177][ T6017] usblp0: removed [ 386.486828][ T5839] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 386.626458][ T5839] usb 14-1: device descriptor read/64, error -71 [ 386.866354][ T5839] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 386.996906][ T5839] usb 14-1: device descriptor read/64, error -71 [ 387.091285][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3962'. [ 387.095087][T20066] syz_tun: entered promiscuous mode [ 387.101149][T20066] syz_tun: refused to change device tx_queue_len [ 387.106812][ T5839] usb usb14-port1: attempt power cycle [ 387.426642][T20070] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 387.446369][ T5839] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 387.451903][T20080] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 387.467915][ T5839] usb 14-1: device descriptor read/8, error -71 [ 387.707735][ T5839] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 387.712962][T20096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.716684][T20096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.722281][T20096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3971'. [ 387.727131][ T5839] usb 14-1: device descriptor read/8, error -71 [ 387.775516][T20099] binder: 20097:20099 ioctl 8138ae83 7f04461f4a90 returned -22 [ 387.839093][ T5839] usb usb14-port1: unable to enumerate USB device [ 387.919050][T20107] bad cache= option: nonw [ 387.919050][T20107] [ 387.921721][T20107] CIFS: VFS: bad cache= option: nonw [ 387.933705][ T6017] hid-generic 0003:0004:0004.000D: item fetching failed at offset 0/4 [ 387.936790][ T6017] hid-generic 0003:0004:0004.000D: probe with driver hid-generic failed with error -22 [ 387.956515][ T1026] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 388.035644][T20110] fuseblk: Bad value for 'group_id' [ 388.037625][T20110] fuseblk: Bad value for 'group_id' [ 388.086625][ T1026] usb 9-1: device descriptor read/64, error -71 [ 388.227334][ T40] kauditd_printk_skb: 308 callbacks suppressed [ 388.227349][ T40] audit: type=1400 audit(900.147:7023): avc: denied { open } for pid=20115 comm="syz.7.3977" path="/dev/ptyr2" dev="devtmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 388.239101][ T40] audit: type=1400 audit(900.157:7024): avc: denied { ioctl } for pid=20115 comm="syz.7.3977" path="/dev/ptyr2" dev="devtmpfs" ino=145 ioctlcmd=0x4b32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 388.248675][ T40] audit: type=1400 audit(900.157:7025): avc: denied { read } for pid=20117 comm="syz.8.3978" dev="nsfs" ino=4026533659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 388.255342][ T40] audit: type=1400 audit(900.157:7026): avc: denied { open } for pid=20117 comm="syz.8.3978" path="net:[4026533659]" dev="nsfs" ino=4026533659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 388.263106][ T40] audit: type=1400 audit(900.167:7027): avc: denied { create } for pid=20115 comm="syz.7.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 388.270375][ T40] audit: type=1400 audit(900.167:7028): avc: denied { shutdown } for pid=20117 comm="syz.8.3978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 388.277300][ T40] audit: type=1400 audit(900.197:7029): avc: denied { ioctl } for pid=20117 comm="syz.8.3978" path="socket:[99046]" dev="sockfs" ino=99046 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 388.315340][ T40] audit: type=1400 audit(900.227:7030): avc: denied { create } for pid=20117 comm="syz.8.3978" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 388.337163][ T1026] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 388.390386][ T40] audit: type=1400 audit(900.307:7031): avc: denied { read write } for pid=20126 comm="syz.8.3979" name="radio2" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 388.400825][ T40] audit: type=1400 audit(900.307:7032): avc: denied { open } for pid=20126 comm="syz.8.3979" path="/dev/radio2" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 388.476629][ T1026] usb 9-1: device descriptor read/64, error -71 [ 388.596924][ T1026] usb usb9-port1: attempt power cycle [ 388.638986][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 388.644337][ T5937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 388.656700][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 388.661196][ T5937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 388.664634][ T5937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.677660][T20148] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3984'. [ 388.686639][T20148] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3984'. [ 388.883366][T20146] lo speed is unknown, defaulting to 1000 [ 388.956570][ T1026] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 388.977033][ T1026] usb 9-1: device descriptor read/8, error -71 [ 389.096054][T20146] chnl_net:caif_netlink_parms(): no params data found [ 389.147377][T20146] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.150357][T20146] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.153374][T20146] bridge_slave_0: entered allmulticast mode [ 389.156310][T20146] bridge_slave_0: entered promiscuous mode [ 389.159638][T20146] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.162003][T20146] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.164399][T20146] bridge_slave_1: entered allmulticast mode [ 389.167600][T20146] bridge_slave_1: entered promiscuous mode [ 389.184157][T20146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.189119][T20146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.206941][T20146] team0: Port device team_slave_0 added [ 389.210247][T20146] team0: Port device team_slave_1 added [ 389.243138][ T1026] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 389.273678][ T1026] usb 9-1: device descriptor read/8, error -71 [ 389.273774][T20146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.282378][T20146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.290744][T20146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.296084][T20146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.298745][T20146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.307065][T20146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.318663][T20034] can0 (unregistered): slcan off ttyS3. [ 389.349463][T20146] hsr_slave_0: entered promiscuous mode [ 389.352545][T20146] hsr_slave_1: entered promiscuous mode [ 389.354833][T20146] debugfs: 'hsr0' already exists in 'hsr' [ 389.357587][T20146] Cannot create hsr debugfs directory [ 389.378832][ T1026] usb usb9-port1: unable to enumerate USB device [ 389.446365][ T5941] Bluetooth: hci4: command 0x0c1a tx timeout [ 389.531097][T20146] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.538303][T20146] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.642282][T20146] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.645647][T20146] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.677319][ T5947] usb 14-1: new full-speed USB device number 17 using dummy_hcd [ 389.739822][T20146] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.743674][T20146] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.826375][ T5947] usb 14-1: device descriptor read/64, error -71 [ 390.077122][ T5947] usb 14-1: new full-speed USB device number 18 using dummy_hcd [ 390.132150][T20146] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 390.139460][T20146] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.143268][T20146] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 390.148383][T20146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.152042][T20146] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 390.158653][T20146] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.161746][T20146] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 390.167430][T20146] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.216474][ T5947] usb 14-1: device descriptor read/64, error -71 [ 390.230079][T20146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.248832][T20146] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.256079][T11529] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.258587][T11529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.271562][T11531] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.274164][T11531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.337951][ T5947] usb usb14-port1: attempt power cycle [ 390.419611][T20146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.559455][ T6028] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 390.574150][T20146] veth0_vlan: entered promiscuous mode [ 390.579918][T20146] veth1_vlan: entered promiscuous mode [ 390.595802][T20146] veth0_macvtap: entered promiscuous mode [ 390.600574][T20146] veth1_macvtap: entered promiscuous mode [ 390.616020][T20146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.624505][T20146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.633003][T11529] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.635978][T11529] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.639916][T11529] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.643210][T11529] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.693273][ T5947] usb 14-1: new full-speed USB device number 19 using dummy_hcd [ 390.739847][ T5941] Bluetooth: hci2: command tx timeout [ 390.749916][ T5947] usb 14-1: device descriptor read/8, error -71 [ 390.761743][T11531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.775259][T11531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.775792][ T6028] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.785670][T11519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.788231][T11519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.790789][ T6028] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 390.805463][ T6028] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.822140][ T6028] usb 13-1: config 0 descriptor?? [ 390.871708][T20224] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 390.891665][T20224] cramfs: wrong magic [ 390.939262][T20226] ip6t_srh: unknown srh match flags 4000 [ 391.021437][T20224] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 391.021708][ T5947] usb 14-1: new full-speed USB device number 20 using dummy_hcd [ 391.059524][ T5947] usb 14-1: device descriptor read/8, error -71 [ 391.108021][T20234] tipc: Started in network mode [ 391.109854][T20234] tipc: Node identity , cluster identity 4711 [ 391.111928][T20234] tipc: Failed to set node id, please configure manually [ 391.114484][T20234] tipc: Enabling of bearer rejected, failed to enable media [ 391.166626][ T5947] usb usb14-port1: unable to enumerate USB device [ 391.254172][ T6028] usbhid 13-1:0.0: can't add hid device: -71 [ 391.259837][ T6028] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 391.264933][ T6028] usb 13-1: USB disconnect, device number 20 [ 391.331334][T20250] tmpfs: Bad value for 'mpol' [ 391.506524][ T5947] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 391.658058][ T5947] usb 9-1: device descriptor read/64, error -71 [ 391.891466][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 391.895925][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 391.896435][ T5947] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 391.900676][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 391.906378][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 391.917050][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 392.036353][ T5947] usb 9-1: device descriptor read/64, error -71 [ 392.065487][T20257] lo speed is unknown, defaulting to 1000 [ 392.156754][ T5947] usb usb9-port1: attempt power cycle [ 392.274219][T19458] syz_tun (unregistering): left allmulticast mode [ 392.292848][T20257] chnl_net:caif_netlink_parms(): no params data found [ 392.345866][T20257] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.348396][T20257] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.350917][T20257] bridge_slave_0: entered allmulticast mode [ 392.353869][T20257] bridge_slave_0: entered promiscuous mode [ 392.361003][T20257] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.363598][T20257] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.366288][T20257] bridge_slave_1: entered allmulticast mode [ 392.370114][T20257] bridge_slave_1: entered promiscuous mode [ 392.395355][T20257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.404495][T20257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.428579][T20257] team0: Port device team_slave_0 added [ 392.441116][T20257] team0: Port device team_slave_1 added [ 392.463842][T20257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.466764][T20257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.479253][T20257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.484650][T20257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.487621][T20257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.496499][ T5947] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 392.496797][T20257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.516821][ T5947] usb 9-1: device descriptor read/8, error -71 [ 392.531768][T20257] hsr_slave_0: entered promiscuous mode [ 392.534384][T20257] hsr_slave_1: entered promiscuous mode [ 392.537446][T20257] debugfs: 'hsr0' already exists in 'hsr' [ 392.539549][T20257] Cannot create hsr debugfs directory [ 392.655200][T20257] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.658968][T20257] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.735483][T20285] netlink: 'syz.9.4012': attribute type 1 has an invalid length. [ 392.748503][T20285] bond7: entered promiscuous mode [ 392.750863][T20285] 8021q: adding VLAN 0 to HW filter on device bond7 [ 392.758789][T20257] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.763230][T20257] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.776566][ T5947] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 392.786804][T20285] 8021q: adding VLAN 0 to HW filter on device bond7 [ 392.789206][T20285] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 392.792365][T20285] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 392.796577][ T5937] Bluetooth: hci2: command tx timeout [ 392.797367][ T5947] usb 9-1: device descriptor read/8, error -71 [ 392.803494][T20285] bond7: (slave xfrm1): making interface the new active one [ 392.808065][T20285] xfrm1: entered promiscuous mode [ 392.810809][T20285] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 392.815604][T20287] netlink: 'syz.9.4012': attribute type 1 has an invalid length. [ 392.854442][T20257] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.857836][T20257] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.860212][T20291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4013'. [ 392.864175][T20291] openvswitch: netlink: Missing key (keys=40, expected=80) [ 392.900573][T20257] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.903724][T20257] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.916763][ T5947] usb usb9-port1: unable to enumerate USB device [ 393.025616][T20299] netlink: 'syz.9.4015': attribute type 10 has an invalid length. [ 393.028247][T20299] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4015'. [ 393.031386][T20299] batadv0: entered promiscuous mode [ 393.033327][T20299] batadv0: entered allmulticast mode [ 393.035798][T20299] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 393.155660][T20257] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 393.162027][T20257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 393.184591][T20257] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 393.189980][T20257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 393.192857][T20257] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 393.196823][T20257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 393.199540][T20257] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 393.203654][T20257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 393.249621][T20257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.264028][T20257] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.270690][T11531] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.273004][T11531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.283309][T11529] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.285648][T11529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.290731][ T40] kauditd_printk_skb: 300 callbacks suppressed [ 393.290744][ T40] audit: type=1400 audit(905.207:7333): avc: denied { recv } for pid=5916 comm="syz-executor" saddr=127.0.0.1 src=47616 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 393.357253][T20300] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 393.363914][ T40] audit: type=1400 audit(905.277:7334): avc: denied { create } for pid=20318 comm="syz.7.4018" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 393.371554][ T40] audit: type=1400 audit(905.287:7335): avc: denied { watch watch_reads } for pid=20318 comm="syz.7.4018" path="/8" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 393.379905][ T40] audit: type=1400 audit(905.287:7336): avc: denied { ioctl } for pid=20318 comm="syz.7.4018" path="socket:[100885]" dev="sockfs" ino=100885 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 393.389578][ T40] audit: type=1400 audit(905.287:7337): avc: denied { ioctl } for pid=20318 comm="syz.7.4018" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=101621 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 393.405045][ T40] audit: type=1400 audit(905.317:7338): avc: denied { create } for pid=20324 comm="syz.9.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 393.421805][ T40] audit: type=1400 audit(905.317:7339): avc: denied { bind } for pid=20324 comm="syz.9.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 393.428473][ T40] audit: type=1400 audit(905.337:7340): avc: denied { name_bind } for pid=20324 comm="syz.9.4019" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 393.432612][T20257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.435488][ T40] audit: type=1400 audit(905.337:7341): avc: denied { bind } for pid=20324 comm="syz.9.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 393.442196][T20326] openvswitch: netlink: Invalid VLAN frame [ 393.446074][ T40] audit: type=1400 audit(905.337:7342): avc: denied { node_bind } for pid=20324 comm="syz.9.4019" saddr=172.20.20.51 src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 393.584700][T20257] veth0_vlan: entered promiscuous mode [ 393.591323][T20257] veth1_vlan: entered promiscuous mode [ 393.592456][T20346] netlink: 'syz.9.4023': attribute type 1 has an invalid length. [ 393.598655][T20346] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4023'. [ 393.602523][T20344] kvm: apic: phys broadcast and lowest prio [ 393.611809][T20257] veth0_macvtap: entered promiscuous mode [ 393.619875][T20257] veth1_macvtap: entered promiscuous mode [ 393.631435][T20257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.639124][T20257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.653022][T20348] tipc: Started in network mode [ 393.654815][T20348] tipc: Node identity ac14140f, cluster identity 4711 [ 393.659456][T20348] tipc: New replicast peer: 255.255.255.255 [ 393.662099][T20348] tipc: Enabled bearer , priority 7 [ 393.672951][T11531] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.679801][T11531] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.698717][T11531] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.706147][T11531] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.843501][T20355] netlink: 'syz.9.4027': attribute type 10 has an invalid length. [ 393.925039][T20352] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.953586][T20355] veth1_macvtap: left promiscuous mode [ 394.013848][ T5937] Bluetooth: hci1: command tx timeout [ 394.258986][T20352] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.325746][T11531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.348230][T11531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.442305][T11519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.445913][T11519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.474669][T20363] binder: Bad value for 'max' [ 394.545421][T20368] tmpfs: Bad value for 'mpol' [ 394.550023][T20352] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.698805][T20352] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.784735][ T5978] tipc: Node number set to 2886997007 [ 394.877323][ T5937] Bluetooth: hci2: command tx timeout [ 394.941646][T11520] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.958561][T11520] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.984625][T11531] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.006873][T11531] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.048264][ T8896] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 395.107339][T20399] ipvlan2: entered allmulticast mode [ 395.109478][T20399] batadv_slave_1: entered allmulticast mode [ 395.113205][T20399] batman_adv: batadv0: Adding interface: ipvlan2 [ 395.115409][T20399] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.124962][T20399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.128998][T20399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.132256][T20399] batman_adv: batadv0: Interface activated: ipvlan2 [ 395.200140][ T8896] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 395.203407][ T8896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.206084][ T8896] usb 9-1: Product: syz [ 395.207701][ T8896] usb 9-1: Manufacturer: syz [ 395.211416][ T8896] usb 9-1: SerialNumber: syz [ 395.258769][T20409] netlink: 'syz.8.4044': attribute type 10 has an invalid length. [ 395.263972][T20409] team0: Device ipvlan1 failed to register rx_handler [ 395.466693][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4045'. [ 395.469683][T20414] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4045'. [ 395.626825][T20376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.631388][T20376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.769358][T20428] fuse: Bad value for 'fd' [ 395.877878][ T8896] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 395.895756][ T8896] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 395.900073][ T8896] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 395.910677][ T8896] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 395.946105][ T8896] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 395.984667][T20432] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4052'. [ 395.990555][T20432] new mount options do not match the existing superblock, will be ignored [ 395.993483][ T8896] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 396.014943][ T8896] usb 9-1: USB disconnect, device number 52 [ 396.047811][T20432] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 396.086652][ T5937] Bluetooth: hci1: command tx timeout [ 396.138333][T20434] netlink: 'syz.7.4053': attribute type 10 has an invalid length. [ 396.245016][T20434] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 396.249661][T20448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.252788][T20448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.256771][T20448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.259516][T20448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.283521][T20444] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4057'. [ 396.283949][T20445] delete_channel: no stack [ 396.332595][T20450] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 3 out of range (51000000..2150000000) [ 396.339000][T20452] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 3 out of range (51000000..2150000000) [ 396.393132][T20455] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 396.523244][T20457] lo speed is unknown, defaulting to 1000 [ 396.957319][ T5937] Bluetooth: hci2: command tx timeout [ 397.101891][T20476] netlink: 'syz.7.4065': attribute type 9 has an invalid length. [ 397.105130][T20476] netlink: 211852 bytes leftover after parsing attributes in process `syz.7.4065'. [ 397.496385][ T6057] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 397.667960][ T6057] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 397.670832][ T6057] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.674810][ T6057] usb 13-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 397.681016][ T6057] usb 13-1: config 0 interface 0 has no altsetting 0 [ 397.686534][ T6057] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 397.690447][ T6057] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 397.694381][ T6057] usb 13-1: Product: syz [ 397.696510][ T6057] usb 13-1: Manufacturer: syz [ 397.698713][ T6057] usb 13-1: SerialNumber: syz [ 397.703448][ T6057] usb 13-1: config 0 descriptor?? [ 397.712063][ T6057] hub 13-1:0.0: bad descriptor, ignoring hub [ 397.714660][ T6057] hub 13-1:0.0: probe with driver hub failed with error -5 [ 397.775392][ T6057] snd-usb-audio 13-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 397.801680][ T9832] udevd[9832]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.815991][T20497] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 397.819662][T20497] ALSA: mixer_oss: invalid index 1374389 [ 397.930348][ T831] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 397.966720][T20503] netlink: 'syz.9.4073': attribute type 10 has an invalid length. [ 398.047109][ T5978] usb 13-1: USB disconnect, device number 21 [ 398.096387][ T831] usb 9-1: Using ep0 maxpacket: 8 [ 398.099383][ T831] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.102578][ T831] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.106316][ T831] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.109699][ T831] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.114290][ T831] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 398.118046][ T831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.156625][ T5937] Bluetooth: hci1: command tx timeout [ 398.191202][T20509] lo speed is unknown, defaulting to 1000 [ 398.339288][ T40] kauditd_printk_skb: 271 callbacks suppressed [ 398.339303][ T40] audit: type=1400 audit(910.257:7614): avc: denied { append } for pid=20492 comm="syz.4.4071" name="v4l-subdev2" dev="devtmpfs" ino=967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 398.341210][ T831] usb 9-1: GET_CAPABILITIES returned 0 [ 398.355772][ T831] usbtmc 9-1:16.0: can't read capabilities [ 398.389720][ T40] audit: type=1400 audit(910.307:7615): avc: denied { read write } for pid=20257 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 398.399488][ T40] audit: type=1400 audit(910.307:7616): avc: denied { open } for pid=20257 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 398.408662][ T40] audit: type=1400 audit(910.307:7617): avc: denied { ioctl } for pid=20257 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 398.418089][ T40] audit: type=1400 audit(910.317:7618): avc: denied { egress } for pid=20257 comm="syz-executor" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 398.428321][ T40] audit: type=1400 audit(910.317:7619): avc: denied { sendto } for pid=20257 comm="syz-executor" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 398.436145][ T40] audit: type=1400 audit(910.327:7620): avc: denied { prog_load } for pid=20517 comm="syz.8.4077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 398.442967][ T40] audit: type=1400 audit(910.327:7621): avc: denied { bpf } for pid=20517 comm="syz.8.4077" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 398.452065][ T40] audit: type=1400 audit(910.327:7622): avc: denied { perfmon } for pid=20517 comm="syz.8.4077" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 398.458830][ T40] audit: type=1400 audit(910.327:7623): avc: denied { prog_run } for pid=20517 comm="syz.8.4077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 398.479712][T20518] erspan1: entered promiscuous mode [ 398.510345][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4078'. [ 398.557611][T20493] xt_l2tp: unknown flags: 51 [ 398.667685][ T5978] usb 9-1: USB disconnect, device number 53 [ 398.728331][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4082'. [ 398.781400][T20533] : entered promiscuous mode [ 398.798519][T20537] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4083'. [ 398.802731][T20537] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4083'. [ 399.194177][T20556] lo speed is unknown, defaulting to 1000 [ 399.249342][T20576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4092'. [ 399.294362][T20576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4092'. [ 399.297491][T20576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4092'. [ 399.396438][T20581] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 399.456788][T20586] syzkaller0: entered promiscuous mode [ 399.459975][T20586] syzkaller0: entered allmulticast mode [ 399.541385][T20596] binder: 20585:20596 ioctl c0306201 200000000080 returned -14 [ 399.593917][T20598] team_slave_0: entered promiscuous mode [ 399.601054][T20598] team_slave_1: entered promiscuous mode [ 399.605983][T20598] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 399.771309][T20617] netlink: 'syz.7.4104': attribute type 4 has an invalid length. [ 399.792868][T20622] netlink: 'syz.9.4105': attribute type 27 has an invalid length. [ 399.826400][ T6028] usb 9-1: new low-speed USB device number 54 using dummy_hcd [ 399.909892][T20622] batadv0: left promiscuous mode [ 399.911516][T20622] batadv0: left allmulticast mode [ 399.979820][ T6028] usb 9-1: No LPM exit latency info found, disabling LPM. [ 399.986463][ T6028] usb 9-1: config 1 has an invalid descriptor of length 147, skipping remainder of the config [ 399.991207][ T6028] usb 9-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 400.004655][ T6028] usb 9-1: config 1 interface 0 has no altsetting 0 [ 400.223082][T20622] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 400.236450][ T5937] Bluetooth: hci1: command tx timeout [ 400.324154][T20622] veth0_macvtap: left allmulticast mode [ 400.356595][T20622] macvtap0: left allmulticast mode [ 400.460961][T20622] netdevsim netdevsim9 netdevsim0: left allmulticast mode [ 400.566325][T20622] bond1: left allmulticast mode [ 400.599282][T20622] bond3: left promiscuous mode [ 400.608427][T20622] sit1: left promiscuous mode [ 400.627171][T20622] sit2: left allmulticast mode [ 400.655367][T20622] bond0: left promiscuous mode [ 400.659104][T20622] bond7: left promiscuous mode [ 400.660825][T20622] xfrm1: left promiscuous mode [ 400.675370][T20623] ip6gretap0: left promiscuous mode [ 400.716985][T20623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.766402][T20628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.798334][T11528] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.801561][T11528] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.804743][T11528] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.807913][T11528] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.817619][T11528] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.820600][T11528] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.824091][T11528] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.829293][T11528] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.927116][T20640] netlink: 'syz.9.4108': attribute type 1 has an invalid length. [ 401.158696][T20667] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4115'. [ 401.164200][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4115'. [ 401.786480][ T5978] usb 14-1: new high-speed USB device number 21 using dummy_hcd [ 401.939138][ T5978] usb 14-1: config 10 has an invalid interface number: 142 but max is 1 [ 401.945031][ T5978] usb 14-1: config 10 has an invalid interface number: 157 but max is 1 [ 401.947853][ T5978] usb 14-1: config 10 has an invalid interface number: 96 but max is 1 [ 401.952915][ T5978] usb 14-1: config 10 contains an unexpected descriptor of type 0x2, skipping [ 401.955798][ T5978] usb 14-1: config 10 has 3 interfaces, different from the descriptor's value: 2 [ 401.961216][ T5978] usb 14-1: config 10 has no interface number 0 [ 401.963333][ T5978] usb 14-1: config 10 has no interface number 1 [ 401.967836][ T5978] usb 14-1: config 10 has no interface number 2 [ 401.970061][ T5978] usb 14-1: config 10 interface 142 altsetting 54 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 401.974014][ T5978] usb 14-1: config 10 interface 142 altsetting 54 bulk endpoint 0x7 has invalid maxpacket 64 [ 401.982421][ T5978] usb 14-1: config 10 interface 142 altsetting 54 bulk endpoint 0x1 has invalid maxpacket 8 [ 401.990162][ T5978] usb 14-1: config 10 interface 142 altsetting 54 has a duplicate endpoint with address 0x7, skipping [ 401.993251][ T5978] usb 14-1: config 10 interface 142 altsetting 54 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 401.999363][ T5978] usb 14-1: config 10 interface 142 altsetting 54 has a duplicate endpoint with address 0x7, skipping [ 402.002676][ T5978] usb 14-1: config 10 interface 142 altsetting 54 has a duplicate endpoint with address 0x9, skipping [ 402.016338][ T5978] usb 14-1: config 10 interface 157 altsetting 2 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 402.019864][ T5978] usb 14-1: config 10 interface 157 altsetting 2 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 402.023566][ T5978] usb 14-1: config 10 interface 157 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 402.027436][ T5978] usb 14-1: config 10 interface 157 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 402.031658][ T5978] usb 14-1: config 10 interface 157 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 402.035949][ T5978] usb 14-1: config 10 interface 157 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 402.046291][ T5978] usb 14-1: config 10 interface 157 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 8 [ 402.049642][ T5978] usb 14-1: config 10 interface 157 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 402.053079][ T5978] usb 14-1: config 10 interface 157 altsetting 2 has 9 endpoint descriptors, different from the interface descriptor's value: 15 [ 402.066321][ T5978] usb 14-1: too many endpoints for config 10 interface 96 altsetting 75: 92, using maximum allowed: 30 [ 402.069811][ T5978] usb 14-1: config 10 interface 96 altsetting 75 has a duplicate endpoint with address 0xA, skipping [ 402.073255][ T5978] usb 14-1: config 10 interface 96 altsetting 75 has a duplicate endpoint with address 0x9, skipping [ 402.079161][ T5978] usb 14-1: config 10 interface 96 altsetting 75 has a duplicate endpoint with address 0xD, skipping [ 402.082813][ T5978] usb 14-1: config 10 interface 96 altsetting 75 has a duplicate endpoint with address 0x3, skipping [ 402.096327][ T5978] usb 14-1: config 10 interface 96 altsetting 75 has a duplicate endpoint with address 0xD, skipping [ 402.099817][ T5978] usb 14-1: config 10 interface 96 altsetting 75 has 6 endpoint descriptors, different from the interface descriptor's value: 92 [ 402.104120][ T5978] usb 14-1: config 10 interface 142 has no altsetting 0 [ 402.106773][ T5978] usb 14-1: config 10 interface 157 has no altsetting 0 [ 402.109406][ T5978] usb 14-1: config 10 interface 96 has no altsetting 0 [ 402.115926][ T5978] usb 14-1: New USB device found, idVendor=3275, idProduct=0080, bcdDevice=c5.7a [ 402.118838][ T5978] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.121513][ T5978] usb 14-1: Product: syz [ 402.122963][ T5978] usb 14-1: Manufacturer: Е [ 402.124503][ T5978] usb 14-1: SerialNumber: syz [ 402.150690][ T5978] usb 14-1: rejected 1 configuration due to insufficient available bus power [ 402.155922][ T5978] usb 14-1: no configuration chosen from 1 choice [ 402.610135][ T6028] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.614008][ T6028] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.616835][ T6028] usb 9-1: Product: ⚱箚㬾회磖枞äšÝ ë€K勠䕈䠙â€ë›¦â•ºá®»îŽî–¯ [ 402.647004][ T6028] usb 9-1: can't set config #1, error -71 [ 402.652654][ T6028] usb 9-1: USB disconnect, device number 54 [ 402.691952][T20686] SET target dimension over the limit! [ 402.802400][T20690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4124'. [ 403.247174][T20708] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 403.347691][ T40] kauditd_printk_skb: 229 callbacks suppressed [ 403.347707][ T40] audit: type=1400 audit(915.257:7853): avc: denied { append } for pid=20706 comm="syz.4.4129" name="dvr0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 403.360027][ T40] audit: type=1400 audit(915.267:7854): avc: denied { read write } for pid=20731 comm="syz.7.4135" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 403.371593][ T40] audit: type=1400 audit(915.267:7855): avc: denied { open } for pid=20731 comm="syz.7.4135" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 403.379246][ T40] audit: type=1400 audit(915.267:7856): avc: denied { mount } for pid=20729 comm="syz.8.4134" name="/" dev="9p" ino=81264693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 403.387058][ T40] audit: type=1400 audit(915.267:7857): avc: denied { ioctl } for pid=20731 comm="syz.7.4135" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x561a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 403.394609][ T40] audit: type=1400 audit(915.267:7858): avc: denied { ioctl } for pid=20731 comm="syz.7.4135" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 403.402322][ T40] audit: type=1400 audit(915.277:7859): avc: denied { add_name } for pid=20729 comm="syz.8.4134" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.409491][ T40] audit: type=1400 audit(915.277:7860): avc: denied { create } for pid=20729 comm="syz.8.4134" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 403.414514][T20736] syzkaller0: entered promiscuous mode [ 403.417325][ T40] audit: type=1400 audit(915.277:7861): avc: denied { associate } for pid=20729 comm="syz.8.4134" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 403.419142][T20736] syzkaller0: entered allmulticast mode [ 403.425681][ T40] audit: type=1400 audit(915.277:7862): avc: denied { read append } for pid=20729 comm="syz.8.4134" name="cpuset.effective_cpus" dev="9p" ino=81264845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 404.023856][T20752] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.360097][T20775] pim6reg1: entered promiscuous mode [ 404.364843][T20775] pim6reg1: entered allmulticast mode [ 404.382628][ T5978] usb 14-1: USB disconnect, device number 21 [ 404.488089][T20777] __nla_validate_parse: 5 callbacks suppressed [ 404.488112][T20777] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4148'. [ 404.496183][T20777] hsr_slave_0: left promiscuous mode [ 404.516361][T20777] hsr_slave_1: left promiscuous mode [ 404.672612][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4150'. [ 404.761573][T20790] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4152'. [ 404.811872][T20790] 9pnet_virtio: no channels available for device syz [ 405.055988][T20810] input: syz0 as /devices/virtual/input/input43 [ 405.088288][T20808] netlink: 'syz.7.4155': attribute type 2 has an invalid length. [ 405.090923][T20810] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4157'. [ 405.091763][T20808] netlink: 'syz.7.4155': attribute type 2 has an invalid length. [ 405.155800][T20814] kAFS: Can only specify source 'none' with -o dyn [ 405.224023][T20821] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4160'. [ 405.485819][T20823] netlink: 'syz.8.4159': attribute type 1 has an invalid length. [ 405.574021][T20823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.574389][T20832] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 405.643307][T20827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 405.648371][T20827] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4161'. [ 405.655687][T20827] unsupported nlmsg_type 40 [ 405.711787][T20846] overlay: Unknown parameter 'fsname' [ 405.732975][T20852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4169'. [ 406.271718][T20880] netlink: 84 bytes leftover after parsing attributes in process `syz.9.4178'. [ 406.289604][T20885] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 406.354024][T20888] CIFS mount error: No usable UNC path provided in device string! [ 406.354024][T20888] [ 406.368542][T20888] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 406.523304][T20895] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 406.668525][T20927] bond2 (unregistering): Released all slaves [ 406.683055][T20931] netlink: zone id is out of range [ 406.726692][T20930] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 406.933089][T20951] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4198'. [ 407.066101][T20943] lo speed is unknown, defaulting to 1000 [ 407.250272][T20974] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4206'. [ 407.334542][T20974] sit1: entered allmulticast mode [ 407.513923][T20997] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20997 comm=syz.9.4211 [ 408.076880][T21019] netlink: 'syz.4.4219': attribute type 17 has an invalid length. [ 408.079854][T21019] macvtap0: entered allmulticast mode [ 408.082165][T21019] veth0_macvtap: entered allmulticast mode [ 408.092097][T21019] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 408.172369][T21022] syzkaller0: entered promiscuous mode [ 408.361682][ T40] kauditd_printk_skb: 351 callbacks suppressed [ 408.361704][ T40] audit: type=1400 audit(920.277:8214): avc: denied { create } for pid=21027 comm="syz.9.4223" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 408.375121][ T40] audit: type=1400 audit(920.277:8215): avc: denied { read write } for pid=21027 comm="syz.9.4223" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 408.386534][ T40] audit: type=1400 audit(920.277:8216): avc: denied { open } for pid=21027 comm="syz.9.4223" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 408.394035][ T40] audit: type=1400 audit(920.277:8217): avc: denied { mounton } for pid=21027 comm="syz.9.4223" path="/471/file0" dev="tmpfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 408.403104][ T40] audit: type=1400 audit(920.287:8218): avc: denied { mount } for pid=21027 comm="syz.9.4223" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 408.410510][ T40] audit: type=1400 audit(920.297:8219): avc: denied { create } for pid=21025 comm="syz.7.4222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 408.419030][ T40] audit: type=1400 audit(920.297:8220): avc: denied { getopt } for pid=21025 comm="syz.7.4222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 408.427565][ T40] audit: type=1400 audit(920.297:8221): avc: denied { create } for pid=21025 comm="syz.7.4222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 408.435928][ T40] audit: type=1400 audit(920.307:8222): avc: denied { ioctl } for pid=21025 comm="syz.7.4222" path="socket:[106882]" dev="sockfs" ino=106882 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 408.458551][ T40] audit: type=1400 audit(920.377:8223): avc: denied { prog_load } for pid=21030 comm="syz.4.4224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 410.664464][T21056] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 410.703791][T21068] input: syz1 as /devices/virtual/input/input44 [ 410.740324][T21068] netlink: 'syz.4.4233': attribute type 7 has an invalid length. [ 410.743554][T21068] __nla_validate_parse: 5 callbacks suppressed [ 410.743569][T21068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 410.755968][T21068] netlink: 'syz.4.4233': attribute type 7 has an invalid length. [ 410.760032][T21068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 410.764959][T21068] jfs: Unknown parameter 'grpquota' [ 410.769506][T21075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.778611][T21074] 9p: Bad value for 'rfdno' [ 410.908960][T21088] tmpfs: Cannot change global quota limit on remount [ 410.970245][T21092] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4241'. [ 410.973283][T21092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4241'. [ 410.991600][T21094] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4241'. [ 410.996094][T21094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4241'. [ 411.135776][T21099] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 411.139648][T21099] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 411.149654][T21099] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 411.156013][T21099] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 413.812897][T21085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.902587][ T40] kauditd_printk_skb: 133 callbacks suppressed [ 413.902602][ T40] audit: type=1400 audit(925.797:8357): avc: denied { create } for pid=21122 comm="syz.9.4250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 413.909837][T21126] netlink: 'syz.4.4249': attribute type 3 has an invalid length. [ 413.915404][T21126] netlink: 'syz.4.4249': attribute type 1 has an invalid length. [ 413.917791][ T40] audit: type=1400 audit(925.807:8358): avc: denied { bpf } for pid=21122 comm="syz.9.4250" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 413.918465][T21126] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4249'. [ 413.924354][ T40] audit: type=1400 audit(925.807:8359): avc: denied { shutdown } for pid=21122 comm="syz.9.4250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 413.924384][ T40] audit: type=1400 audit(925.807:8360): avc: denied { getopt } for pid=21122 comm="syz.9.4250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 413.943952][ T40] audit: type=1400 audit(925.807:8361): avc: denied { connect } for pid=21122 comm="syz.9.4250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 413.950306][ T40] audit: type=1400 audit(925.807:8362): avc: denied { name_connect } for pid=21122 comm="syz.9.4250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 413.956610][ T40] audit: type=1400 audit(925.807:8363): avc: denied { create } for pid=21122 comm="syz.9.4250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 413.962952][ T40] audit: type=1400 audit(925.827:8364): avc: denied { create } for pid=21125 comm="syz.4.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 413.969609][ T40] audit: type=1400 audit(925.827:8365): avc: denied { write } for pid=21125 comm="syz.4.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 413.981108][ T40] audit: type=1400 audit(925.837:8366): avc: denied { ioctl } for pid=21122 comm="syz.9.4250" path="socket:[108842]" dev="sockfs" ino=108842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.088050][T21135] sctp: [Deprecated]: syz.9.4250 (pid 21135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.088050][T21135] Use struct sctp_sack_info instead [ 414.135345][T21146] FAT-fs (loop7): unable to read boot sector [ 414.303105][T21155] gfs2: path_lookup on c::: returned error -2 [ 414.568472][T21175] trusted_key: encrypted_key: insufficient parameters specified [ 414.812404][T21182] netlink: 199968 bytes leftover after parsing attributes in process `syz.7.4262'. [ 415.755208][T21197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.988148][T21234] hfsplus: unable to find HFS+ superblock [ 416.029936][T21240] tipc: Started in network mode [ 416.033969][T21240] tipc: Node identity 5eceb78ea925, cluster identity 4711 [ 416.038963][T21240] tipc: Enabled bearer , priority 0 [ 416.046880][T21241] syzkaller0: entered promiscuous mode [ 416.049092][T21241] syzkaller0: entered allmulticast mode [ 416.062200][T21241] tipc: Resetting bearer [ 416.097021][T21234] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 416.212984][T21242] lo speed is unknown, defaulting to 1000 [ 416.259587][T21249] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4282'. [ 416.336957][T21252] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 417.036772][ T6057] tipc: Node number set to 4159420302 [ 417.371622][T21242] tipc: Resetting bearer [ 417.392424][T21242] tipc: Disabling bearer [ 417.464194][T21296] binder: 21295:21296 ioctl c0c0586d 200000000340 returned -22 [ 417.506538][ T5985] usb 12-1: new high-speed USB device number 40 using dummy_hcd [ 417.548930][T21296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4296'. [ 417.560452][T21296] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4296'. [ 417.646343][ T5985] usb 12-1: device descriptor read/64, error -71 [ 417.809802][T21319] netlink: 124 bytes leftover after parsing attributes in process `syz.9.4302'. [ 417.813677][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4302'. [ 417.862755][T21321] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4303'. [ 417.892349][T21323] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4304'. [ 417.906585][ T5985] usb 12-1: new high-speed USB device number 41 using dummy_hcd [ 417.925961][T21323] bond8 (unregistering): Released all slaves [ 418.046421][ T5985] usb 12-1: device descriptor read/64, error -71 [ 418.155458][T21339] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.4309'. [ 418.156776][ T5985] usb usb12-port1: attempt power cycle [ 418.311057][T21354] dlm: plock device version mismatch: kernel (1.2.0), user (808482864.808464432.808464432) [ 418.370834][T21356] pimreg: tun_chr_ioctl cmd 1074025676 [ 418.372947][T21356] pimreg: owner set to 0 [ 418.376184][T21356] overlay: filesystem on ./file1 not supported [ 418.397526][ T6028] usb 13-1: new low-speed USB device number 22 using dummy_hcd [ 418.507685][ T5985] usb 12-1: new high-speed USB device number 42 using dummy_hcd [ 418.527235][ T5985] usb 12-1: device descriptor read/8, error -71 [ 418.547895][ T6028] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.552389][ T6028] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 418.556811][ T6028] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 418.561412][ T6028] usb 13-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 418.564628][T21358] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 418.565425][ T6028] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.584289][T21334] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 418.590008][ T6028] hub 13-1:1.0: bad descriptor, ignoring hub [ 418.592514][ T6028] hub 13-1:1.0: probe with driver hub failed with error -5 [ 418.596057][ T6028] cdc_wdm 13-1:1.0: skipping garbage [ 418.601297][ T6028] cdc_wdm 13-1:1.0: skipping garbage [ 418.610642][ T6028] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 418.613540][ T6028] cdc_wdm 13-1:1.0: Unknown control protocol [ 418.656862][T21362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4317'. [ 418.776448][ T5985] usb 12-1: new high-speed USB device number 43 using dummy_hcd [ 418.806824][ T5985] usb 12-1: device descriptor read/8, error -71 [ 418.853213][T21375] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4321'. [ 418.916687][ T5985] usb usb12-port1: unable to enumerate USB device [ 419.188078][ T40] kauditd_printk_skb: 275 callbacks suppressed [ 419.188101][ T40] audit: type=1400 audit(931.107:8642): avc: denied { create } for pid=21383 comm="syz.4.4323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 419.200746][ T40] audit: type=1400 audit(931.107:8643): avc: denied { ioctl } for pid=21383 comm="syz.4.4323" path="socket:[110060]" dev="sockfs" ino=110060 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 419.211311][ T40] audit: type=1400 audit(931.107:8644): avc: denied { read write } for pid=21383 comm="syz.4.4323" name="swradio8" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.218947][ T40] audit: type=1400 audit(931.107:8645): avc: denied { open } for pid=21383 comm="syz.4.4323" path="/dev/swradio8" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.226361][ T40] audit: type=1400 audit(931.107:8646): avc: denied { lock } for pid=21383 comm="syz.4.4323" path="socket:[110062]" dev="sockfs" ino=110062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 419.254768][ T40] audit: type=1400 audit(931.167:8647): avc: denied { create } for pid=21383 comm="syz.4.4323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 419.262469][ T40] audit: type=1400 audit(931.167:8648): avc: denied { create } for pid=21383 comm="syz.4.4323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 419.269936][ T40] audit: type=1400 audit(931.167:8649): avc: denied { setopt } for pid=21383 comm="syz.4.4323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 419.276844][ T40] audit: type=1400 audit(931.167:8650): avc: denied { create } for pid=21383 comm="syz.4.4323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 419.597112][ T40] audit: type=1400 audit(931.517:8651): avc: denied { read write } for pid=15019 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 419.851022][T21406] kernel read not supported for file /! (pid: 21406 comm: syz.9.4327) [ 420.383708][T21424] fuse: Bad value for 'user_id' [ 420.386204][T21424] fuse: Bad value for 'user_id' [ 420.796334][ T5985] usb 12-1: new high-speed USB device number 44 using dummy_hcd [ 420.933404][T21411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.976078][ T5985] usb 12-1: too many configurations: 36, using maximum allowed: 8 [ 420.976677][ T6057] usb 14-1: new high-speed USB device number 22 using dummy_hcd [ 421.003991][ T5985] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 421.008534][ T5985] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.012631][ T5985] usb 12-1: Product: syz [ 421.014571][ T5985] usb 12-1: Manufacturer: syz [ 421.017088][ T5985] usb 12-1: SerialNumber: syz [ 421.025991][ T5985] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 421.088530][ T6017] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 421.160527][ T6057] usb 14-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 421.164304][ T6057] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.167840][ T6057] usb 14-1: Product: syz [ 421.169302][ T6057] usb 14-1: Manufacturer: syz [ 421.171051][ T6057] usb 14-1: SerialNumber: syz [ 421.182665][ T6057] usb 14-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 421.201576][ T6057] usb 14-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 421.296879][T21431] random: crng reseeded on system resumption [ 421.325241][T12838] usb 12-1: USB disconnect, device number 44 [ 421.761456][T21442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.765509][T21442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.937141][T21444] __nla_validate_parse: 1 callbacks suppressed [ 421.937242][T21444] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4337'. [ 422.082045][T21334] cdc_wdm 13-1:1.0: Error autopm - -16 [ 422.082379][ T6028] usb 13-1: USB disconnect, device number 22 [ 422.166364][ T6017] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive [ 422.168792][T21460] binder: 21459:21460 ioctl c0306201 200000000080 returned -14 [ 422.168934][ T6017] ath9k_htc: Failed to initialize the device [ 422.174029][T12838] usb 12-1: ath9k_htc: USB layer deinitialized [ 422.186304][T21460] binder: 21459:21460 ioctl c0306201 2000000003c0 returned -14 [ 422.237924][ T6057] ath9k_htc 14-1:1.0: ath9k_htc: Target is unresponsive [ 422.241016][ T6057] ath9k_htc: Failed to initialize the device [ 422.281704][ T6057] usb 14-1: ath9k_htc: USB layer deinitialized [ 422.319992][T21468] 9pnet_virtio: no channels available for device syz [ 422.325600][ T8896] usb 14-1: USB disconnect, device number 22 [ 422.326307][T21468] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 422.458495][T21476] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4347'. [ 422.483081][T21474] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4346'. [ 422.498493][T21476] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 422.503392][T21476] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21476 comm=syz.7.4347 [ 422.584290][T21481] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 422.862486][T21496] netlink: 17780 bytes leftover after parsing attributes in process `syz.9.4353'. [ 423.189783][T21511] overlayfs: empty lowerdir [ 423.194921][ T5937] Bluetooth: hci4: unexpected event for opcode 0x0c20 [ 423.579274][T21488] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 423.661100][ T5978] usb 12-1: new high-speed USB device number 45 using dummy_hcd [ 423.846980][ T5978] usb 12-1: Using ep0 maxpacket: 32 [ 423.851609][ T5978] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 423.854952][ T5978] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 423.860151][ T5978] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 423.865423][ T5978] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 423.871966][ T5978] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 423.878069][ T5978] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.883805][ T5978] usb 12-1: Product: syz [ 423.885554][ T5978] usb 12-1: Manufacturer: syz [ 423.887715][ T5978] usb 12-1: SerialNumber: syz [ 423.894341][ C1] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 423.901213][ T5978] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input45 [ 424.106408][ T5978] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 424.109987][ T5978] (id 0x00) [ 424.156510][ T5978] rc_core: IR keymap rc-imon-pad not found [ 424.162820][ T5978] Registered IR keymap rc-empty [ 424.166084][ T5978] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 424.179015][ T5978] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 424.188182][ T5978] imon:send_packet: packet tx failed (-71) [ 424.206849][ T5978] imon 12-1:155.0: remote input dev register failed [ 424.211263][ T5978] imon 12-1:155.0: imon_init_intf0: rc device setup failed [ 424.411805][ T5978] imon 12-1:155.0: unable to initialize intf0, err 0 [ 424.414765][ T5978] imon:imon_probe: failed to initialize context! [ 424.416946][ T5978] imon 12-1:155.0: unable to register, err -19 [ 424.427516][ T5978] usb 12-1: USB disconnect, device number 45 [ 424.471006][T21534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 424.477605][ T40] kauditd_printk_skb: 278 callbacks suppressed [ 424.477622][ T40] audit: type=1400 audit(936.387:8930): avc: denied { read } for pid=21563 comm="syz.4.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 424.505376][ T40] audit: type=1400 audit(936.407:8931): avc: denied { recv } for pid=5916 comm="syz-executor" saddr=127.0.0.1 src=47616 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 424.519818][ T40] audit: type=1400 audit(936.407:8932): avc: denied { create } for pid=21561 comm="syz.7.4367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 424.530163][ T40] audit: type=1400 audit(936.407:8933): avc: denied { bind } for pid=21561 comm="syz.7.4367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 424.539927][ T40] audit: type=1400 audit(936.407:8934): avc: denied { setopt } for pid=21561 comm="syz.7.4367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 424.559417][ T40] audit: type=1400 audit(936.407:8935): avc: denied { accept } for pid=21561 comm="syz.7.4367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 424.566720][ T40] audit: type=1400 audit(936.417:8936): avc: denied { write } for pid=21561 comm="syz.7.4367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 424.589003][ T40] audit: type=1400 audit(936.497:8937): avc: denied { read } for pid=21569 comm="syz.8.4369" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 424.603150][ T40] audit: type=1400 audit(936.507:8939): avc: denied { create } for pid=21570 comm="syz.9.4371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 424.613120][ T40] audit: type=1400 audit(936.507:8940): avc: denied { ioctl } for pid=21570 comm="syz.9.4371" path="socket:[110254]" dev="sockfs" ino=110254 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 425.257855][T21589] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 425.435483][T21603] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4376'. [ 425.440801][T21603] netlink: 'syz.9.4376': attribute type 7 has an invalid length. [ 425.444376][T21603] netlink: 'syz.9.4376': attribute type 8 has an invalid length. [ 425.448279][T21603] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4376'. [ 425.733274][T21619] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 425.934232][T21644] mkiss: ax0: crc mode is auto. [ 426.236820][T21674] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4398'. [ 426.241324][T21671] program syz.4.4397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.281325][T21680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.319235][ T5937] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 426.561550][T21716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21716 comm=syz.7.4407 [ 427.176492][ T6017] usb 12-1: new high-speed USB device number 46 using dummy_hcd [ 427.327443][ T6017] usb 12-1: too many configurations: 22, using maximum allowed: 8 [ 427.336613][ T6017] usb 12-1: config index 0 descriptor too short (expected 135, got 72) [ 427.351464][ T6017] usb 12-1: config index 1 descriptor too short (expected 135, got 72) [ 427.360161][ T6017] usb 12-1: config index 2 descriptor too short (expected 135, got 72) [ 427.368858][ T6017] usb 12-1: config index 3 descriptor too short (expected 135, got 72) [ 427.374072][ T6017] usb 12-1: config index 4 descriptor too short (expected 135, got 72) [ 427.380533][ T6017] usb 12-1: config index 5 descriptor too short (expected 135, got 72) [ 427.385381][ T6017] usb 12-1: config index 6 descriptor too short (expected 135, got 72) [ 427.390721][ T6017] usb 12-1: config index 7 descriptor too short (expected 135, got 72) [ 427.397037][ T6017] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 427.401040][ T6017] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.404466][ T6017] usb 12-1: Product: syz [ 427.407400][ T6017] usb 12-1: Manufacturer: syz [ 427.409696][ T6017] usb 12-1: SerialNumber: syz [ 427.429911][T21750] netlink: 'syz.9.4417': attribute type 7 has an invalid length. [ 427.435306][T21750] netlink: 'syz.9.4417': attribute type 7 has an invalid length. [ 427.436630][ T6017] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 427.449096][T21751] pim6reg: entered allmulticast mode [ 427.454376][T21750] netlink: 'syz.9.4417': attribute type 7 has an invalid length. [ 427.459355][T21746] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 427.459646][ T5985] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 427.559933][T21748] fuse: Bad value for 'fd' [ 427.849641][ T831] kernel write not supported for file /audio1 (pid: 831 comm: kworker/2:2) [ 427.914776][T21776] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 428.079152][T21780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4411'. [ 428.082179][T21780] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4411'. [ 428.085108][T21780] netlink: 'syz.7.4411': attribute type 20 has an invalid length. [ 428.101598][T11525] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.101734][T21780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4411'. [ 428.105467][T11525] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.108373][T21780] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4411'. [ 428.112052][T11525] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.114746][T21780] netlink: 'syz.7.4411': attribute type 20 has an invalid length. [ 428.120600][T11525] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.132420][T21780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.141538][T21780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.352323][T21791] loop5: detected capacity change from 0 to 7 [ 428.355540][T21791] Dev loop5: unable to read RDB block 7 [ 428.361172][T21791] loop5: unable to read partition table [ 428.363694][T21791] loop5: partition table beyond EOD, truncated [ 428.370083][T21791] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 428.380287][T21797] /dev/nullb0: Can't open blockdev [ 428.476818][ T5985] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive [ 428.485540][ T5985] ath9k_htc: Failed to initialize the device [ 428.497740][T21801] netlink: 207952 bytes leftover after parsing attributes in process `syz.9.4431'. [ 428.521893][ T5985] usb 12-1: ath9k_htc: USB layer deinitialized [ 428.539178][ T6017] usb 12-1: USB disconnect, device number 46 [ 428.756028][T21810] ip6t_srh: unknown srh invflags 51E8 [ 429.570517][ T40] kauditd_printk_skb: 325 callbacks suppressed [ 429.570533][ T40] audit: type=1400 audit(429.484:9265): avc: denied { read write } for pid=21825 comm="syz.4.4442" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 429.582691][ T40] audit: type=1400 audit(429.484:9266): avc: denied { open } for pid=21825 comm="syz.4.4442" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 429.589825][ T40] audit: type=1400 audit(429.494:9267): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=47616 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 429.619367][ T40] audit: type=1400 audit(429.544:9268): avc: denied { shutdown } for pid=21825 comm="syz.4.4442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 429.665620][ T40] audit: type=1400 audit(429.584:9269): avc: denied { create } for pid=21830 comm="syz.4.4443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 429.679148][ T40] audit: type=1400 audit(429.584:9270): avc: denied { write } for pid=21830 comm="syz.4.4443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 429.771596][T21831] xt_hashlimit: max too large, truncated to 1048576 [ 429.982272][ T40] audit: type=1400 audit(429.904:9271): avc: denied { read } for pid=21834 comm="syz.4.4446" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.982667][T21835] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4446'. [ 430.006787][ T40] audit: type=1400 audit(429.904:9272): avc: denied { open } for pid=21834 comm="syz.4.4446" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 430.010795][T21837] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4445'. [ 430.037663][ T40] audit: type=1400 audit(429.964:9273): avc: denied { ioctl } for pid=21834 comm="syz.4.4446" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 430.095534][ T40] audit: type=1400 audit(430.014:9274): avc: denied { ioctl } for pid=21834 comm="syz.4.4446" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 430.396180][T21853] netlink: 'syz.8.4449': attribute type 1 has an invalid length. [ 430.400404][T21853] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4449'. [ 432.951199][T21859] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4451'. [ 432.954933][T21859] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4451'. [ 433.227716][T21884] 9p: Bad value for 'version' [ 433.312905][T21889] __nla_validate_parse: 2 callbacks suppressed [ 433.312927][T21889] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4459'. [ 433.340098][T21889] bond8 (unregistering): Released all slaves [ 433.812614][T21906] ipt_REJECT: TCP_RESET invalid for non-tcp [ 433.813176][T21907] ipt_REJECT: TCP_RESET invalid for non-tcp [ 433.912012][T21909] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input47 [ 434.093980][T21921] netlink: 'syz.4.4469': attribute type 13 has an invalid length. [ 434.093980][T21925] netlink: 'syz.4.4469': attribute type 13 has an invalid length. [ 434.102952][T21927] SET target dimension over the limit! [ 434.108065][T21929] SET target dimension over the limit! [ 434.221622][T21933] netlink: 'syz.9.4472': attribute type 13 has an invalid length. [ 434.297419][T21941] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4474'. [ 434.384073][T21923] ================================================================== [ 434.387594][T21923] BUG: KASAN: slab-use-after-free in __mutex_lock+0x1887/0x1b10 [ 434.391554][T21923] Read of size 8 at addr ffff8880661c52e8 by task khidpd_10cf0005/21923 [ 434.397320][T21923] [ 434.399083][T21923] CPU: 2 UID: 0 PID: 21923 Comm: khidpd_10cf0005 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.399117][T21923] Tainted: [L]=SOFTLOCKUP [ 434.399126][T21923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.399140][T21923] Call Trace: [ 434.399150][T21923] [ 434.399160][T21923] dump_stack_lvl+0x100/0x190 [ 434.399817][T21923] print_report+0x13d/0x4b0 [ 434.399945][T21923] ? __virt_addr_valid+0x239/0x430 [ 434.400109][T21923] ? __mutex_lock+0x1887/0x1b10 [ 434.400130][T21923] kasan_report+0xdf/0x1d0 [ 434.400278][T21923] ? __mutex_lock+0x1887/0x1b10 [ 434.400301][T21923] __mutex_lock+0x1887/0x1b10 [ 434.400321][T21923] ? l2cap_unregister_user+0x2a/0x1e0 [ 434.400395][T21923] ? _raw_spin_lock_irqsave+0x52/0x60 [ 434.400432][T21923] ? __pfx___mutex_lock+0x10/0x10 [ 434.400453][T21923] ? __try_to_del_timer_sync+0x107/0x160 [ 434.400569][T21923] ? rcu_is_watching+0x12/0xc0 [ 434.400598][T21923] ? lockdep_hardirqs_on+0x78/0x100 [ 434.400621][T21923] ? __try_to_del_timer_sync+0x107/0x160 [ 434.400665][T21923] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 434.400698][T21923] ? l2cap_unregister_user+0x2a/0x1e0 [ 434.400722][T21923] l2cap_unregister_user+0x2a/0x1e0 [ 434.400748][T21923] hidp_session_thread+0x461/0x680 [ 434.400770][T21923] ? __pfx_hidp_session_thread+0x10/0x10 [ 434.400789][T21923] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 434.400807][T21923] ? rcu_is_watching+0x12/0xc0 [ 434.400828][T21923] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 434.400847][T21923] ? __kthread_parkme+0x18c/0x230 [ 434.400874][T21923] ? kthread+0x13a/0x450 [ 434.400890][T21923] ? __pfx_hidp_session_thread+0x10/0x10 [ 434.400907][T21923] kthread+0x370/0x450 [ 434.400924][T21923] ? __pfx_kthread+0x10/0x10 [ 434.400942][T21923] ret_from_fork+0x72b/0xd50 [ 434.401012][T21923] ? __pfx_ret_from_fork+0x10/0x10 [ 434.401033][T21923] ? __switch_to+0x800/0x1100 [ 434.401059][T21923] ? __pfx_kthread+0x10/0x10 [ 434.401078][T21923] ret_from_fork_asm+0x1a/0x30 [ 434.401107][T21923] [ 434.401114][T21923] [ 434.488317][T21923] Allocated by task 5937: [ 434.490125][T21923] kasan_save_stack+0x30/0x50 [ 434.492143][T21923] kasan_save_track+0x14/0x30 [ 434.494212][T21923] __kasan_kmalloc+0xaa/0xb0 [ 434.496313][T21923] l2cap_conn_add.part.0+0x60/0xb00 [ 434.498959][T21923] l2cap_connect_cfm+0x43e/0xf80 [ 434.501476][T21923] hci_remote_features_evt+0x4f4/0x9b0 [ 434.503866][T21923] hci_event_packet+0x8e9/0xcd0 [ 434.505658][T21923] hci_rx_work+0x451/0xfc0 [ 434.507102][T21923] process_one_work+0xa0e/0x1980 [ 434.508704][T21923] worker_thread+0x5ef/0xe50 [ 434.510177][T21923] kthread+0x370/0x450 [ 434.511486][T21923] ret_from_fork+0x72b/0xd50 [ 434.513005][T21923] ret_from_fork_asm+0x1a/0x30 [ 434.514579][T21923] [ 434.515388][T21923] Freed by task 20257: [ 434.516962][T21923] kasan_save_stack+0x30/0x50 [ 434.518927][T21923] kasan_save_track+0x14/0x30 [ 434.520718][T21923] kasan_save_free_info+0x3b/0x70 [ 434.522328][T21923] __kasan_slab_free+0x5f/0x80 [ 434.523864][T21923] kfree+0x223/0x6c0 [ 434.525141][T21923] l2cap_conn_del+0x57f/0x710 [ 434.526683][T21923] l2cap_disconn_cfm+0x9f/0x100 [ 434.528243][T21923] hci_conn_hash_flush+0x10e/0x280 [ 434.529886][T21923] hci_dev_close_sync+0x5a7/0x1240 [ 434.531548][T21923] hci_dev_do_close+0x2e/0xb0 [ 434.533269][T21923] hci_unregister_dev+0x227/0x670 [ 434.535098][T21923] vhci_release+0x17d/0x230 [ 434.537121][T21923] __fput+0x3ff/0xb50 [ 434.538607][T21923] task_work_run+0x150/0x240 [ 434.540107][T21923] do_exit+0x8d2/0x2a60 [ 434.541463][T21923] do_group_exit+0xd5/0x2a0 [ 434.542925][T21923] __x64_sys_exit_group+0x3e/0x50 [ 434.544551][T21923] x64_sys_call+0x102c/0x1530 [ 434.546065][T21923] do_syscall_64+0x10b/0xf80 [ 434.547512][T21923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.549373][T21923] [ 434.550136][T21923] Last potentially related work creation: [ 434.552073][T21923] kasan_save_stack+0x30/0x50 [ 434.553712][T21923] kasan_record_aux_stack+0xa7/0xc0 [ 434.555554][T21923] insert_work+0x36/0x230 [ 434.557135][T21923] __queue_work+0x9a2/0x1130 [ 434.558611][T21923] call_timer_fn+0x19a/0x640 [ 434.560046][T21923] __run_timers+0x583/0xaf0 [ 434.561473][T21923] run_timer_base+0x114/0x190 [ 434.562948][T21923] run_timer_softirq+0x1a/0x50 [ 434.564409][T21923] handle_softirqs+0x1ea/0xa00 [ 434.565937][T21923] __irq_exit_rcu+0x162/0x210 [ 434.567384][T21923] irq_exit_rcu+0x9/0x30 [ 434.568896][T21923] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 434.570888][T21923] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 434.573015][T21923] [ 434.573858][T21923] Second to last potentially related work creation: [ 434.575877][T21923] kasan_save_stack+0x30/0x50 [ 434.577320][T21923] kasan_record_aux_stack+0xa7/0xc0 [ 434.578908][T21923] insert_work+0x36/0x230 [ 434.580272][T21923] __queue_work+0x3fd/0x1130 [ 434.581724][T21923] queue_work_on+0x180/0x1e0 [ 434.583205][T21923] l2cap_connect_cfm+0x99e/0xf80 [ 434.585018][T21923] hci_remote_features_evt+0x4f4/0x9b0 [ 434.586977][T21923] hci_event_packet+0x8e9/0xcd0 [ 434.588605][T21923] hci_rx_work+0x451/0xfc0 [ 434.590041][T21923] process_one_work+0xa0e/0x1980 [ 434.591593][T21923] worker_thread+0x5ef/0xe50 [ 434.593072][T21923] kthread+0x370/0x450 [ 434.594348][T21923] ret_from_fork+0x72b/0xd50 [ 434.595842][T21923] ret_from_fork_asm+0x1a/0x30 [ 434.597335][T21923] [ 434.598128][T21923] The buggy address belongs to the object at ffff8880661c5000 [ 434.598128][T21923] which belongs to the cache kmalloc-1k of size 1024 [ 434.602820][T21923] The buggy address is located 744 bytes inside of [ 434.602820][T21923] freed 1024-byte region [ffff8880661c5000, ffff8880661c5400) [ 434.607105][T21923] [ 434.607862][T21923] The buggy address belongs to the physical page: [ 434.609803][T21923] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880661c6000 pfn:0x661c0 [ 434.612958][T21923] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 434.616005][T21923] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 434.618961][T21923] page_type: f5(slab) [ 434.620279][T21923] raw: 00fff00000000240 ffff88801b842dc0 ffffea0000ea4410 ffffea000166ac10 [ 434.623003][T21923] raw: ffff8880661c6000 0000000800100006 00000000f5000000 0000000000000000 [ 434.625770][T21923] head: 00fff00000000240 ffff88801b842dc0 ffffea0000ea4410 ffffea000166ac10 [ 434.628544][T21923] head: ffff8880661c6000 0000000800100006 00000000f5000000 0000000000000000 [ 434.631255][T21923] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 434.634675][T21923] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 434.637965][T21923] page dumped because: kasan: bad access detected [ 434.640007][T21923] page_owner tracks the page as allocated [ 434.640904][ T40] kauditd_printk_skb: 114 callbacks suppressed [ 434.640916][ T40] audit: type=1400 audit(434.564:9389): avc: denied { connect } for pid=21932 comm="syz.9.4472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 434.641816][T21923] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11519, tgid 11519 (kworker/u32:18), ts 391519935585, free_ts 391441163454 [ 434.641844][T21923] post_alloc_hook+0x153/0x170 [ 434.644325][ T40] audit: type=1400 audit(434.564:9390): avc: denied { bind } for pid=21932 comm="syz.9.4472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 434.649725][T21923] get_page_from_freelist+0x11a6/0x33b0 [ 434.649753][T21923] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 434.649766][T21923] new_slab+0xa6/0x6c0 [ 434.649777][T21923] refill_objects+0x277/0x420 [ 434.649788][T21923] __pcs_replace_empty_main+0x375/0x650 [ 434.649801][T21923] __kmalloc_noprof+0x688/0x850 [ 434.649814][T21923] ___neigh_create+0x1545/0x2950 [ 434.650143][T21923] ip6_finish_output2+0xffa/0x1ce0 [ 434.650162][T21923] __ip6_finish_output+0x357/0xdf0 [ 434.650171][T21923] ip6_output+0x2aa/0xa60 [ 434.650192][T21923] ndisc_send_skb+0xa85/0x1bf0 [ 434.650202][T21923] ndisc_send_rs+0x129/0x680 [ 434.650212][T21923] addrconf_dad_completed+0x47f/0xff0 [ 434.650229][T21923] addrconf_dad_work+0x83c/0x1360 [ 434.650245][T21923] process_one_work+0xa0e/0x1980 [ 434.650259][T21923] page last free pid 20250 tgid 20242 stack trace: [ 434.650267][T21923] __free_frozen_pages+0x747/0x1040 [ 434.650278][T21923] __folio_put+0x3b4/0x540 [ 434.650293][T21923] do_exit+0x1f59/0x2a60 [ 434.697632][T21923] do_group_exit+0xd5/0x2a0 [ 434.699095][T21923] get_signal+0x1ec7/0x21e0 [ 434.700627][T21923] arch_do_signal_or_restart+0x91/0x7a0 [ 434.702500][T21923] exit_to_user_mode_loop+0x86/0x4a0 [ 434.704365][T21923] do_syscall_64+0x706/0xf80 [ 434.706182][T21923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.707708][ T40] audit: type=1400 audit(434.614:9391): avc: denied { write } for pid=21932 comm="syz.9.4472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 434.708231][T21923] [ 434.708236][T21923] Memory state around the buggy address: [ 434.708243][T21923] ffff8880661c5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.721865][T21923] ffff8880661c5200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.724604][T21923] >ffff8880661c5280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.727129][T21923] ^ [ 434.729473][T21923] ffff8880661c5300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.731927][T21923] ffff8880661c5380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 434.734408][T21923] ================================================================== [ 434.737436][T21923] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 434.739906][T21923] CPU: 2 UID: 0 PID: 21923 Comm: khidpd_10cf0005 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.743519][T21923] Tainted: [L]=SOFTLOCKUP [ 434.745017][T21923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.748271][T21923] Call Trace: [ 434.749428][T21923] [ 434.750415][T21923] dump_stack_lvl+0x100/0x190 [ 434.751977][T21923] vpanic+0x552/0x970 [ 434.753282][T21923] ? __pfx_vpanic+0x10/0x10 [ 434.754739][T21923] ? mark_held_locks+0x40/0x70 [ 434.756270][T21923] ? __mutex_lock+0x1887/0x1b10 [ 434.757813][T21923] panic+0xd1/0xe0 [ 434.758989][T21923] ? __pfx_panic+0x10/0x10 [ 434.760391][T21923] ? check_panic_on_warn+0x1f/0x90 [ 434.762066][T21923] check_panic_on_warn.cold+0x19/0x34 [ 434.763854][T21923] end_report.part.0+0x3a/0x90 [ 434.765429][T21923] kasan_report.cold+0xe/0x18 [ 434.767064][T21923] ? __mutex_lock+0x1887/0x1b10 [ 434.768681][T21923] __mutex_lock+0x1887/0x1b10 [ 434.770249][T21923] ? l2cap_unregister_user+0x2a/0x1e0 [ 434.772016][T21923] ? _raw_spin_lock_irqsave+0x52/0x60 [ 434.773832][T21923] ? __pfx___mutex_lock+0x10/0x10 [ 434.775574][T21923] ? __try_to_del_timer_sync+0x107/0x160 [ 434.777449][T21923] ? rcu_is_watching+0x12/0xc0 [ 434.779050][T21923] ? lockdep_hardirqs_on+0x78/0x100 [ 434.780743][T21923] ? __try_to_del_timer_sync+0x107/0x160 [ 434.782660][T21923] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 434.784772][T21923] ? l2cap_unregister_user+0x2a/0x1e0 [ 434.786751][T21923] l2cap_unregister_user+0x2a/0x1e0 [ 434.788591][T21923] hidp_session_thread+0x461/0x680 [ 434.790243][T21923] ? __pfx_hidp_session_thread+0x10/0x10 [ 434.792042][T21923] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 434.794081][T21923] ? rcu_is_watching+0x12/0xc0 [ 434.795789][T21923] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 434.798100][T21923] ? __kthread_parkme+0x18c/0x230 [ 434.799951][T21923] ? kthread+0x13a/0x450 [ 434.801429][T21923] ? __pfx_hidp_session_thread+0x10/0x10 [ 434.803292][T21923] kthread+0x370/0x450 [ 434.804639][T21923] ? __pfx_kthread+0x10/0x10 [ 434.806154][T21923] ret_from_fork+0x72b/0xd50 [ 434.807663][T21923] ? __pfx_ret_from_fork+0x10/0x10 [ 434.809423][T21923] ? __switch_to+0x800/0x1100 [ 434.811201][T21923] ? __pfx_kthread+0x10/0x10 [ 434.813050][T21923] ret_from_fork_asm+0x1a/0x30 [ 434.814860][T21923] [ 434.816903][T21923] Kernel Offset: disabled [ 434.818307][T21923] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:00:50 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff81fcad7d RDX=ffff88801cf20000 RSI=ffffffff81fcad57 RDI=ffff88801cf20000 RBP=ffff88806a640f00 RSP=ffffc900007cf1d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4c81e1 R14=0000000000000001 R15=ffff88806a43c580 RIP=ffffffff81fcad59 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6309000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556c8484e8 CR3=0000000064281000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 37656c69662f3465 6c69662f31656c69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdde254d66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdde254d66 00007ffdde254d6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389f033274 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389f0332b4 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389f033418 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f389f0332a6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff888100ab0180 RCX=0000000000000000 RDX=ffff88803796ca00 RSI=ffffffff86835e4a RDI=ffff88803796ca00 RBP=0000000000000000 RSP=ffffc9000271f088 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000000 R11=000000000000009c R12=ffffc9000013d138 R13=ffff888100ab01dc R14=ffff888100ab0188 R15=0000000000000000 RIP=ffffffff86835e57 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f9bc6a0d300 ffffffff 00c00000 GS =0000 ffff8880d6409000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000562b8e64ef40 CR3=00000000320be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=c7446ce09733a311 69a61c631c886688 c7446ce09733a311 69a61c631c886688 c7446ce09733a311 69a61c631c886688 c7446ce09733a311 69a61c631c886688 ZMM18=408ab343637a7966 69f132631668a781 408ab343637a7966 69f132631668a781 408ab343637a7966 69f132631668a781 408ab343637a7966 69f132631668a781 ZMM19=9c13000000000000 0000000000000004 9c13000000000000 0000000000000003 9c13000000000000 0000000000000002 9c13000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff f5080290030c0400 028c030204000288 0300000002080602 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80030806a0020506 800404a4e6080001 000000080606013d d20000315f657661 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c735f7664617461 6201ffffffffffff ffffdf080680030c 8008000410002210 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffd080180 03001000000401c7 0800060143be0030 656c69662f2e01ff ZMM25=69f1326369f13263 69f1326369f13263 69f1326369f13263 69f1326369f13263 69f1326369f13263 69f1326369f13263 69f1326369f13263 69f1326369f13263 ZMM26=637a7966637a7966 637a7966637a7966 637a7966637a7966 637a7966637a7966 637a7966637a7966 637a7966637a7966 637a7966637a7966 637a7966637a7966 ZMM27=408ab343408ab343 408ab343408ab343 408ab343408ab343 408ab343408ab343 408ab343408ab343 408ab343408ab343 408ab343408ab343 408ab343408ab343 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9a1300009a130000 9a1300009a130000 9a1300009a130000 9a1300009a130000 9a1300009a130000 9a1300009a130000 9a1300009a130000 9a1300009a130000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff857993a0 RDI=ffffffff9b4ddd00 RBP=ffffffff9b4ddcc0 RSP=ffffc90022da7500 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000064616552 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff369bbf2 R15=dffffc0000000000 RIP=ffffffff857993c7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6509000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f378a6fa230 CR3=000000000e598000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378b34d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5fbecfa6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5fbecfa6 00007ffe5fbecfac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378a633274 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378a6332b4 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378a633418 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378a6332a6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378a7ec600 00007f378a7ec5e0 00007f378a7ec5e8 00007f378a7ec618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378a7ec5f8 00007f378a7ec5c8 00007f378a7ec600 00007f378a7ec5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff81fcad7d RDX=ffff88804376a500 RSI=ffffffff81fcad57 RDI=ffff88804376a500 RBP=ffff88806a643180 RSP=ffffc90004d8f870 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4c8631 R14=0000000000000001 R15=ffff88806a73c580 RIP=ffffffff81fcad5e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6609000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f378a64edd5 CR3=000000000e598000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000fefc8000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5fbecfa6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5fbecfa6 00007ffe5fbecfac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378a633274 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378a6332b4 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378a633418 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378a6332a6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f378a7ec5f8 00007f378a7ec5c8 00007f378a7ec600 00007f378a7ec5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000