last executing test programs: 5m16.061983601s ago: executing program 32 (id=166): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x200, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r6, 0x4b34, 0x3bf) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x50}, 0x1, 0xba01}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_usbip_server_init(0xaa7f3cec63cbb9d) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000180)={0x0, 0x0, 0x7f}) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000000100)=0x9, 0x4) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) fanotify_mark(r4, 0x201, 0x4000003e, r3, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000540)={0x0, 0x0, 0x4, 0xe, 0x7, 0x1}, &(0x7f00000005c0)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000600)={r10, 0x1, 0x7}, 0x8) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r13, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r13, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x120, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_VENDOR_DATA={0xbd, 0xc5, "010757642d7ab8a45a521361e31ba6bc7cce4bfb1ea6b8dedb102ace9cb029bdac8ec3bd341cbcda42f546b237b87b46cf2878fc90b6ea1ac6b8cc58f9ce340195b6eba3afe4eb015438c2f568b990acd2b65fc31c1fed8de34b711973b2865d499e8665b5d97ecaecca163189eeb7e5613bad5fab3f7fa580c6c2f34bf2b1ed8a727d8279b32fe277c3d23dba7a3c29cd05b6211df42347d704f2f3cd3edc2cee6a2750ea25f8215d0999c51b79cbb8ee42d4dd3169a049da"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xe4}, @NL80211_ATTR_VENDOR_DATA={0xa, 0xc5, "2289cc9e860c"}, @NL80211_ATTR_VENDOR_DATA={0x24, 0xc5, "719341fa2684337ed81313926f782fc6157945ff8e6494a66ad029dcd79426f0"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfec12e24}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r11, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4, 0x4}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="e00000001300010026bd7000000000004015143f4529d72384a65b0f683ca0a21fdf11444d7bbf3bc8d961bdc2e3267150aaca5d87ea3a2d0572f6a7882ef366b38649334f9e14aa669004dbd601f7a573479bda64e1a21a8d8224968c420b2358508e8b0e65ea507a9d564c6e29ad53eb774cd5a8114674850d36744c882033716525c99530fc100d4a5998ba6bdfed725c35ced379c91e5d395b09e24054fac066b0d60932a7fb2f4423642b16de2b91a996c389e0cb74f8f1dbe67149fdad4cbe11380128a4d403799666fbe091ac999b1c7ec800cbbf61d13ab1b9000000062ccbc1021145d21f46b1c5cabc0875da85a30fe6c3dcbb3ff1ed20b12083e7122c6d8d26c407916287a847ca1e2f98d9bbcda77743656f16ecff971d41fb0e94e934b8390f6b1ea93e5ee83e5ac55ded6a35fb654b3ada4f7697ac1662c07f1acd6f0150d1677ae7"], 0xe0}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8a33}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x10) 4m37.426458691s ago: executing program 1 (id=808): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x10010, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x1010, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r5}}) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='pstore\x00', 0x221000d, 0x0) 4m37.362946995s ago: executing program 1 (id=810): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000000000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x57) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8], 0x3c}}, 0x10) 4m37.289858241s ago: executing program 1 (id=813): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000000000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x57) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r5], 0x3c}}, 0x10) 4m37.04336014s ago: executing program 1 (id=815): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) close$binfmt(r0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x44, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_req={{0x6, 0xe, 0x4}, {0x7d96, 0x9}}]}}, 0x11) sendmmsg$inet6(r1, &(0x7f0000001780)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x9, @private2, 0xab6}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000001080)="d77f380c4b20bbb13cd0c5898283c57ac13685c49cfff1ff7b7a59a14772ddd0b1a4111200c0899b1ebadabf7cee5efd7b0022a649186b58a9d54bf1f631fa9789b21073227c42a444b7357974688d", 0x4f}, {&(0x7f0000001100)="131fa0ea98c0f70e2b121dfde3aad7cdf59ab8d855b43a0959547ccb192b5329cd2eeb169f13dfb4f52243e07b5e208a762b56b34c0458023a3c0d910f3a1250d6b855bdca4370e61a3b7d8c5fcfaab13310b4178b49546979dd255ef5e977844b9e9235d387b87f64d24fb22833b98b7e90fb9280916bf7bbdd7541ae078499d0fd40e847f1a69ad70e3d56f4c1e2bb3724e88b", 0x94}, {&(0x7f00000011c0)="102bbace0373488e071c59a5e0852728e377eb42ccbaa0f5116842360a3ca1db607c5bb2d1266fb61eda34f3ca0c696d3c22352536f1cb5b6076bde880ea799f69821e77996b882c6536345a3ff086ee773d431931f7fd3a5551eadfbb978adbccdb660635b466ae6135dd746f2e036c838f3a2e9b07cb770f3fe874c37cbfe59974b4b63aca881c910e354c831d1338a1180661731debf9b73a9c175c3f7ff1373bebd7992430c00b71afd52479a281bf88fafacb3eab8a3965446f7e481b5976ef14e6f50e0dbc95a27ccfe24ff9253c6ddc9f5cb7d96697338c4907f901ebf69592e2858ecc92129d123290", 0xed}, {&(0x7f00000012c0)="a415225f1e4be62a128800d724b16633f6f2bfacc763f9a3d4a8b1bf411247bfe9726c8ce82ffdcd2a30605f478279ebab52f1dbed58f2fe19dffecbc90d7f9e39dc5f5bcc347ba323adf6cb53cd3752a5f1607b736396bafa334e4e47bce4afa4fccb98c8e51c5c798a91fcc955886a10cd72e3e6837e194a4f4b28b36a49e36c1e8d202f858ce5e66e81fe2f216ad4320d12bdf415c901fcd4dce765c2f8393e3abc26940a7b2c2ea30ff6d61e3bcd136094f4c0", 0xb5}, {&(0x7f0000001380)="1c5e84b482b5e8553d28311cd231aee3d07f942b17c9bd59b639fc6388cd9d409e59062e083e402985880d12caa0e5dbb1305a5524968a037e90eaa7b8880b0333c61fa2e91bd9b5e118d9735ee4af56093ef4c57e950452f0e122b36f585e3701cadebea167224d4e32704b0c970daad6e55cc84b8b66b038c697ca82d1a78118c9c39632cf3af9507da1a30421117e7daada914b5a7977591751a109d3b9157420eedf134473d229b42eb770344652f11f1cdabcfaa9f4db5ecbce0b10742378d3307281f07d6be1fc103e9d87798f818d8556645446a960c8d15f479f3baac01b614b0a998ea6f76732", 0xeb}, {&(0x7f0000001480)="712977b9bd5dd2df6161bc5db255911c36e16362fe4fe75c0cb20b5679c6ecbdaaee3d063e3f4c0d91b530a32f67d139e00f18aef303591b3640e9f068986a5344ad8086cdc9abc724d99d393f47dc52bc77e9e77ddd7238ce2c1b85f25dc5a381c23dcfdd7ce2680d10f0ccf073978ea4bac8b813193f2116c4dbeadbeef21be3989c453a5d06bcc1993c6218665a1953a34d53b43f1844b0a31e1565f4825b383fb5a412cb8f34ba308fe2602732d1b3231c8fdc6b3c9b0f1e8c7b7670ecf0", 0xc0}], 0x8, &(0x7f00000015c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @dontfrag={{0x14}}], 0x30}}, {{&(0x7f0000001600)={0xa, 0x4e23, 0x34, @remote, 0x335}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000001640)="d2d8fe979085936e80584f64e4f38086c0239d93c2425e58b7e6b41942eb349858e2a5ac457a6b5cc5080519b68e055e87f67a3aae78b06cf55ec7a46fc71d807d39604a6ad7f53d892ef1aa96f0fdd4bec45eec5d1ec77d9aac2225c3ef684dfbae5cae335440815c6e338ca3016314595fd451577fea1af9dd53fbae05e18cb079b2cd5d8f9d21c1846031cbbd4a3821e9c2a4457175395ce32ae2fc7acdfdd84d64bb8f5b81f1a274429c46e646224a74e30640f405d3a7a8d9d5a248", 0xbe}], 0x1, &(0x7f0000001880)=ANY=[@ANYBLOB="200000000000000029000000370000003300000000000000c204000000070000140000000000000029000000080000000500000000000000b5f259fe126d84a58bf7"], 0x38}}], 0x2, 0x2c048884) socket(0x10, 0x3, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000b80)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) lstat(&(0x7f0000005040)='./file0/../file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) sendmmsg$inet6(r1, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4m37.04268745s ago: executing program 1 (id=817): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="834f51d073a9df23990a0bc35ba03d2d383fce35b484f9e9ea28d13342e0260cda1a7af0d4e3c8fdbc5d7201a04a53e2603ad34e8c025a614f145fdf6add9be89f2b8a4f303c1b006c6dc7be041315dcd4692dede7682f6e7b056cf39318ad37bd33d3ba1cc09a7d80a7701cddd08e080b429a31969d59", 0x77}], 0x1}}], 0x1, 0x4004000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYRES8], 0x2) 4m35.631769333s ago: executing program 1 (id=822): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000000000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x57) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8], 0x3c}}, 0x10) 4m35.588224598s ago: executing program 33 (id=822): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000000000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x57) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8], 0x3c}}, 0x10) 4m32.092956217s ago: executing program 5 (id=887): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:scsi_generic_device_t:s0\x00', 0x2b, 0x0) 4m32.013350929s ago: executing program 5 (id=889): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) (async, rerun: 64) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)=""/139, 0x8b}, {&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000300)=""/100, 0x64}, {&(0x7f00000004c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/7, 0x7}], 0x5, &(0x7f00000003c0)=""/59, 0x3b}, 0x40000000) (rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="1846f800fb0a78eeff3c20f1670e169908f2b2de5c6b", 0x16}, {&(0x7f0000000380)="b0ed4a47db9c0530e308119f4c55d580759d624d585de9768f9b138d4a3a0bb0d66a63fceea8006c96d55d9e3a1f6932090893aaa7be5e291fd4d9554e", 0x3d}, {&(0x7f0000000480)="94ba6a7cac9845baac1ddbfe3b7064cad590fc7f8ee4919664f0840aab44c4f348981c9be0279325dbba779fe5", 0x2d}], 0x3, 0x0, 0x0, 0x1}], 0x1, 0x40c4850) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1) 4m31.471982126s ago: executing program 0 (id=901): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='qnx4\x00', 0x208004, 0x0) 4m31.333313842s ago: executing program 0 (id=907): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x57) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r4], 0x3c}}, 0x10) 4m31.213160615s ago: executing program 0 (id=910): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x80000d6e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0x8002}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRESDEC, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4m31.212461881s ago: executing program 0 (id=912): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x3181000, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x39, &(0x7f0000000340)=[{0x203, 0x4, 0x0, 0x7fff0000}, {0xc9, 0x3, 0x3, 0xd}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3c) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000180)={0x5, 0x0, [{0xc0000101, 0x0, 0x3}, {0x8a9, 0x0, 0x6}, {0x9e5, 0x0, 0x7}, {0x992, 0x0, 0x2}, {0x399, 0x0, 0x200}]}) close_range(r0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='bdev\x00', 0x394d048, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = io_uring_setup(0x3859, &(0x7f0000000400)={0x0, 0x6be5, 0x200, 0x1e, 0x43}) r7 = memfd_secret(0x0) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000280)='\x00', &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xec240, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) listen(r5, 0x4) listen(r5, 0x5) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 4m31.047455223s ago: executing program 5 (id=915): userfaultfd(0x801) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000008240), 0x1, 0x0) (async) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000008240), 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x27dfdbf9, {0x0, 0x0, 0x0, r4, 0x280d3, 0x20000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x1}}}}]}, 0x40}}, 0x8080) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$binfmt_register(r1, &(0x7f0000008280)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x38, 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, './file0'}, 0x79) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/552, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x234) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m31.045663175s ago: executing program 5 (id=919): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xda) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x400, 0x84) open_tree(r0, &(0x7f00000001c0)='./file0\x00', 0x1001) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') syz_clone3(&(0x7f00000002c0)={0x40280, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r4, 0x0, 0x2000fb) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0x15) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000080)) 4m31.045305221s ago: executing program 0 (id=920): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r1) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r1) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0xf, 0x29, 0x4, 0x4, 0xcc7, 0xc, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x8026, 0x7d, 0x6, 0x1a449, 0x9, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) (async) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0xf, 0x29, 0x4, 0x4, 0xcc7, 0xc, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x8026, 0x7d, 0x6, 0x1a449, 0x9, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='(`O', @ANYRES16=r2, @ANYBLOB="0b562cbd7000fbdbdf252700000005003100020000000a0001007770616e31000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40040c0) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='(`O', @ANYRES16=r2, @ANYBLOB="0b562cbd7000fbdbdf252700000005003100020000000a0001007770616e31000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40040c0) chmod(&(0x7f0000000040)='./file0\x00', 0x4) r4 = eventfd(0x4) write$eventfd(r4, &(0x7f0000000180), 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000240012800b0001006d6163736563000014000280050009000100000005000f000100000008000500", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) 4m30.872998571s ago: executing program 5 (id=922): socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x21, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0x2) 4m30.493223768s ago: executing program 0 (id=923): ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x73, @dev={0xac, 0x14, 0x14, 0xfd}, 0x0, 0x2, 'lblcr\x00', 0x10}, 0x2c) (async) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400c840", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000c008f000f090000000000000c0090000100000001000000"], 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 4m30.389972023s ago: executing program 34 (id=923): ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x73, @dev={0xac, 0x14, 0x14, 0xfd}, 0x0, 0x2, 'lblcr\x00', 0x10}, 0x2c) (async) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400c840", @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000c008f000f090000000000000c0090000100000001000000"], 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 4m29.353160441s ago: executing program 5 (id=929): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x57) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r4], 0x3c}}, 0x10) 4m29.31122927s ago: executing program 35 (id=929): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x57) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r4], 0x3c}}, 0x10) 2m41.808228471s ago: executing program 4 (id=2616): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="119b030e7deba3ec69da3c0cce0764c6baa1660000000000000000000000b8000000000000000000", 0x28) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, &(0x7f0000000940)={0xa}) sendmmsg$alg(r2, &(0x7f0000003f40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="2bae8f85eead9192276e436541fd5f645264041fc7b6ffa9c0356c9df62f53a69cdb2ce9d336a32b526ec6568d3ece3cb4b5a41b8fde556c7fd7549a5ef8e3407c1f80ee95984b9658b48b4bd54541157a32873cb5e13b10b0781bd698fd51b3cd15aa69102a45eb71c8931e955aca9006276f9ee0a4403e00a0b3d682dcc13351c1f7aab24cf6815839a5f9b216ebd21ffee92cc450f6fcaf343acbc0538f24cca8174b1ccdb350ceec210a906c1d561d31c572e8eb9223832510740661717deb58deaf26149666ccc4c190fba2372bba751b2e9a79453d98d6", 0xda}, {&(0x7f0000000280)="05ff9522763f2a72d6fa227054595a33430a0e40e0e0292a8b2eb14711414445284ae01432b22bdff170fc539cfc8ea65296f1ca614481ca4a3ad83f834482547041400dbf641e43a4e26526543f8f0846a548c4689b794be82c705a38451ce62f8893ea3cb5c46815ffdb18f19aff0e9c2f61e5024f20f665b102772fb075514f09ad6acfb04eb141c3edc7bc6c4801374ab196fe082146efe32975fbc9afef5b92f12a865ed6e408f556245c8d66c4ec238688c6494b2447f404a4f767cfec2b835a9cbb01c1e74c5debcbe0ae41d3e024fdd118ffe8fa7a237bc0ba8f3d93517c6d3eae5e22e5ca7fd06f30c926d7eac62b1d8b07", 0xf6}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000040}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000080)=@ethtool_dump={0x3f, 0x7ffd, 0x2b2}}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}]}}]}, 0x50}}, 0x4048000) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x4000}], 0x2, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000240)={[0x8]}, 0xffffffffffffff92) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r0, 0x18, 0x1, 0x10000, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0}, 0x40) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_buf(r8, 0x1, 0x3d, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB='\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=r7], 0x20) 2m40.807776215s ago: executing program 4 (id=2626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0xfeffffff, r1, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0xfb92c03ac8dba990) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000088a82f9c2203020086dd6002adf700303a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000000006000000000003a00ff01000000000000000000000000000100000000000000000000ffffac1414aa"], 0x0) 2m40.742188514s ago: executing program 4 (id=2627): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1], 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000004000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x2}, 0x80) 2m40.741768783s ago: executing program 4 (id=2628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x300000d, 0x3) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="e970d6ea8d00000000284b6819cd42d8cf4caa0000007a12c5cdb79f49f1aed79adc3252825a86a526a3501fb1dd0db33e90d6f5", 0x34}], 0x1) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000600)={@desc={0x1, 0x0, @auto="d0124bca9e3f097c"}}) writev(r1, &(0x7f0000001780)=[{&(0x7f0000000100)="07474f21fb64ce8e2d41b3a6a1dfc189d20638ad04ffa41b4c23f0779593385f8741560d9aefb6aea66a9a24c13aa35607c6d46bf817f7dec1c61e4a", 0x3c}, {&(0x7f0000001800)="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", 0x10f}, {&(0x7f0000000200)="e8171f7b62f8f309465a23dc2cb7d3b93cdd271827c0396fb7fc", 0x1a}, {&(0x7f0000000240)="f514fda5f6cefc72c455a251f8086cdd2f94fd4c6a0fc6b1f8ea323c106b08e613cb1350b73ed217fed0d4de84c404c0fa88929ba7873b6e765147c06595e664a76a0e2dd6c4cecd9c6452c7494f4c9380327f4cff84039db4352292530be0068e66cc863e01bece481c34f60c0de3f6825bc897896e17ef77d659", 0x7b}, {&(0x7f0000000400)="04e85521381817d8d3f4306554234116571ad23eeaa23b0cdea214e798a14586c504d555a7b03244bf2f1480c58799f8fadab524518e7667b9de56a78b7536194012e4123efb30af2ce7369b4ab605a1fafcfef050c9e1556483a98ce93d6d526047dfc6f296", 0x66}, {&(0x7f0000000680)="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", 0xfc}, {&(0x7f0000000500)="08b33f1cb131b89ecfa5f3e99e59712f0bdaffb660511d2cbf", 0x19}, {&(0x7f0000000780)="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", 0x1000}], 0x8) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x72) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) 2m40.604433085s ago: executing program 4 (id=2629): symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) r1 = dup(r0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) 2m39.657053941s ago: executing program 4 (id=2634): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002b40)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$set_timeout(0xf, r1, 0x2) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, r1, 0x4, 0x6, r3) 2m39.63847575s ago: executing program 36 (id=2634): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002b40)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$set_timeout(0xf, r1, 0x2) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, r1, 0x4, 0x6, r3) 1m47.372676188s ago: executing program 6 (id=3280): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r5, 0x8, 0x10001, &(0x7f00000001c0)="a282fc308d35137d97051b7742910dc1f8ac5a571361f60ff33089188abb650630759fc709cd037eeb894e67b7bf81eb5ae08bc9f638c832c03f16cad3c978854b8d3c70e2b321ef0a58103955f5d30a1ca6a5e60a9f8fa4118a1781ddeea84fbe13692f60493b5da6e7c96ce58daf03d06a288fd1521d4fa629c1e0be030e6901a3758668852fe1b4bb81d47a60029470b431c5a7afc732afda5b826637a138eb217e2735a1f803272e4738a6e72806019257f3eda2052df4958a88a9430a2e7f92a1", 0xc3) (async) dup3(r2, r1, 0x80000) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000193000/0x1000)=nil, &(0x7f00002da000/0x3000)=nil, 0x1000}) (async) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f000096c000/0x4000)=nil], 0x0, &(0x7f0000000040), 0x0) 1m47.203714839s ago: executing program 6 (id=3282): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000040)) pread64(r0, &(0x7f0000001040)=""/4096, 0x1000, 0x7ffffffffffff8) (async) r1 = openat(r0, &(0x7f00000002c0)='./file1\x00', 0x14b043, 0x2) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x14, 0x51b, 0x70bd28, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "d76f51d2877e3e1d6a"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async, rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) (async, rerun: 32) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file3', './file2'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x400c010) 1m47.077251037s ago: executing program 6 (id=3286): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000019c0)={0xffffffffffffffd1, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x3c}}, 0x40) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x40, 0xfffffffffffffff2, 0x3, 0x8, 0x7], 0x5, &(0x7f0000000000)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) 1m47.023954189s ago: executing program 6 (id=3287): r0 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1387400, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000080)=0x99c7, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x800, 0x0, 0xffffffffffffffff}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x2, {0x2, 0xff, 0x6}, 0xff}, 0x18) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x32df02cda841e5ba}, 0x1}, 0x18) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x1f, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x80008, 0xe, 0x6, 0x2, 0x1, 0x7, 0x1, 0x6, 0x10000105, 0x0, 0x1a44d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe69, 0x3c, 0x8, 0x6, 0xffffffff, 0xeffffff8]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000500)={'syztnl2\x00', r6, 0x20, 0x7800, 0x9, 0x5, {{0x24, 0x4, 0x3, 0x3, 0x90, 0x64, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1, {[@timestamp={0x44, 0x8, 0x52, 0x0, 0x0, [0xfffffeff]}, @lsrr={0x83, 0x1f, 0x35, [@private=0xa010102, @remote, @empty, @rand_addr=0x64010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @generic={0x94, 0xa, "bbe6de96bdc3e0bf"}, @ra={0x94, 0x4}, @noop, @cipso={0x86, 0x15, 0x0, [{0x2, 0x7, "cd6b6db235"}, {0x1, 0x8, "cca45669efc1"}]}, @lsrr={0x83, 0x1f, 0x18, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @generic={0x82, 0x12, "51910b67672322000000000000000000"}]}}}}}) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r8 = dup3(r0, r3, 0x0) sendmsg$key(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40400d5) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) socket$nl_route(0x10, 0x3, 0x0) 1m46.931768538s ago: executing program 6 (id=3290): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) r1 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000005000000a30c0395"]) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r2, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2, 0xe, 0x6, 0x8, 0x1a, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast1, 0x8000, 0x8, 0x7, 0x2}}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=@newtfilter={0x32a4, 0x2c, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x1, 0xfff1}, {0x10, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2940, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xff, 0x0, 0x3ff, 0x0, 0x3, 0x9, 0x43, 0x8, 0x87d, 0x4, 0x8, 0x35e4c57a, 0xd, 0x0, 0x1, 0x3, 0x9, 0x3, 0xc, 0x7, 0x9, 0x6, 0xf, 0x5, 0x1, 0x3, 0x5, 0x8, 0x87cd, 0xf, 0x0, 0x7, 0x1, 0x9, 0xfffffffd, 0x0, 0x3ff, 0x1, 0x7fff, 0xb, 0x7e, 0x7, 0x3, 0x6, 0xb9, 0x3, 0xd7, 0x0, 0x7fffffff, 0x3, 0x5, 0x4, 0xfffffffd, 0xb, 0x9, 0x1, 0x2, 0xfffffffc, 0x3, 0x4, 0xfffeffff, 0x7, 0x6, 0x0, 0x9, 0x2, 0x2, 0x7, 0x2, 0x96a, 0x1, 0x7fff, 0xd, 0x0, 0xff, 0x8, 0x6, 0x9, 0x3, 0x4, 0xa, 0x2, 0x800, 0x81, 0x8, 0xd8, 0x3, 0x8, 0xa5, 0xffffff80, 0x10ab, 0x4, 0x10000, 0x4, 0xffff8001, 0x7fffffff, 0x5, 0x7, 0x1, 0x7, 0x2, 0x5, 0x800, 0x2, 0x2, 0x1ccd, 0xc, 0x8, 0xc, 0x9, 0x233, 0x9, 0x5, 0x100, 0x401, 0x4, 0x7, 0xd46c, 0xc1, 0x2edf, 0x81, 0x81, 0x400, 0x9, 0x4a, 0x3, 0x4, 0x0, 0x0, 0x280000, 0x200, 0x40, 0x0, 0x0, 0x200, 0x3, 0x6, 0x3, 0x7ff, 0x8000, 0x8, 0x9, 0x1f, 0x7, 0xfffffffd, 0x9, 0x0, 0x3, 0x9, 0x7, 0x2, 0x7fffffff, 0x4, 0x8, 0x4, 0x42a, 0x8, 0x32, 0x8, 0xc, 0x0, 0xffffff80, 0xfffffff0, 0x8, 0x7, 0x240, 0x1, 0x1ff, 0xffff, 0x1, 0x8554, 0xb, 0x8, 0x6, 0x80000000, 0xfffffffe, 0xffff, 0x9, 0xfffffffa, 0x2, 0x2, 0x9, 0x9, 0x3ff, 0x7, 0x9, 0x2, 0x9, 0x3f3102c8, 0x9, 0x9, 0xfffffffa, 0x116e119f, 0x2, 0xf83, 0x1, 0x7, 0x8, 0x4, 0x7, 0x6, 0x8, 0x9a4d, 0xf6ab, 0x2, 0x8, 0x9, 0x20000000, 0x5, 0xffff9e14, 0x74b, 0x2, 0x6, 0x81, 0x7fffffff, 0x6363, 0x800, 0x489b, 0xfffffffc, 0xfffff06c, 0x10, 0x8, 0x4, 0xfd, 0x1, 0x5, 0x5, 0x4, 0x3, 0x2, 0x80000001, 0x1, 0x881c8351, 0x4000000, 0xe, 0x4, 0x0, 0x10001, 0xb524, 0x9, 0x8000, 0x0, 0xf, 0x1, 0x0, 0x3, 0x1000, 0x3, 0x81, 0x4, 0xfffffff8, 0x59, 0x7, 0x2, 0x7]}]}, @TCA_CGROUP_ACT={0x83c, 0x1, [@m_vlan={0x108, 0xc, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8d3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x401, 0x20000000, 0x3, 0x1000}, 0x3}}]}, {0xaf, 0x6, "cea9071913d96be74a144ca3bd3b8784e346afcc2dbc500eabf7d7c6e86fd96ecd72575f9fc06b6e8522abb58ea9a4684400b132c41e96c730e155c41fdf8789e69ef7e8d2e48144c329e6ddc20732accc462703650a0d83a17f20e84217512d1b4813745228439727ed87b5d0a3c00641aa53d0a772a266e48c3ae7bd3047e905852daf747e102ba23c56c5c2615aef9568a93a6e9a926643751c8c6587ae1f32d4e8ca7f205a914f1161"}, {0xc, 0x7, {0x926563058225309e}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0xfc, 0x5, 0x0, 0x0, {{0xf}, {0x4}, {0xcc, 0x6, "843eb5c07bb3d14f729108c9d51dee9470c19c6567d7474e8a47e49addb1ca58c3425bd1df793e4dd0ff03becf73d78881006b2d553ecec7c44779e8db7b4c2f425285471c655e83b201b61f1f082acfd960ed2d7b0c841fb755a02096d8a79b5e3be464835df43748163985a7062b9b8328bfef00edae5df3098464d20cc45726f41abd19f4122e6983705e02bffb5e127183da625c68b6e2ae6be86f5f6ae479cff47adf05163c665fae544a826246b9c88641f18b1eb1eee02a235094cbcd2a72056cc043910b"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x158, 0x1, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1866, 0xb9dc42c3b694eecb}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7fff, 0xb, 0x3, 0xc88, 0x1000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x1, 0x20000000, 0x9, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1938, 0x20000006}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x57cb70cd, 0xffffffffffffffff, 0xff, 0x7f}}]}, {0xcc, 0x6, "a76a38813ef632c1fc292151338e9325ee1388e213f42b11ca35d32d8f8faa0ea142ce42ae2539d95d033233a353092d56d200d63f4b94c3a89c187ffc1c3f602de440034a080c1fb050dd743e7c3a857f2430f93d9a1bb904b697cf0c1e8b1178b394242a2ac2cd11134c98d824e90bc7b6e2e1a459027d814936bf248d0c92ac2142b182ac458e543b24eb045facb38434937095ccc04922d2cb62f2208e7c8341a2b3c5d0f4526a52e8d30ae58d31d947c50618545964571e8dc97d533e803394c9b37e0966de"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0xc0, 0x1b, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80000001}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}]}, {0x50, 0x6, "0cb23795d5aa246a8e31ae12e737510cb7977660ce857dc71b94593fa7f2121f88defedb3abe3f56c4dead6474d593fe495caedca469f8f424741da032f56a16462456a0ee58317b1a651bb5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xf8, 0x9, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}]}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="25fad119b8f3"}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9b21}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7acf}]}]}, {0x75, 0x6, "d87afd0a0e009f852483560dfcc1ea4416cceaf3e6149996069e5261f728c7136fff2c605049ec29cd65289f7c013f6176728b4ef114c682a5f6c094ba106f619df7e432d8f0d3cab8f2db07199f2f6b67c997a5d5ce65413027742a3f9ff513e4b13298cbc6560f87d9c86933e3294630"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_bpf={0xac, 0x1f, 0x0, 0x0, {{0x8}, {0x4}, {0x82, 0x6, "9dda7060f54e5bb1999badfc1063d8ea513e702432c41547f95676674e55d033bdcd7eae044d654cab5ff4da33aee63d9dab98efd6e0eafeada0584ac754286a993132eb0a8802f2ffb89ce228da7b89989c9b177d6c6bceb8535749ea7ede183fe60df1211a45eb53458a7169963cc46c42f9e0730d5bce6750a131ab06"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x1a0, 0x16, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0x401, 0x7a, 0xbe, 0xa}, {0x40, 0x6, 0xa, 0x1}, {0x9, 0x5, 0x1, 0x5}, {0x6, 0x0, 0xff, 0x7}, {0x1, 0x6, 0x25, 0x1}, {0x7f, 0x6, 0x5c, 0x4}, {0x7, 0xf0, 0x8, 0x9}, {0x7ff, 0x4, 0x9, 0x6}, {0x7, 0xf, 0x4c, 0xe}, {0x7, 0xf6, 0x3, 0x7fff}]}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x6, 0x0, 0x91, 0x4}, {0x0, 0x3, 0xd, 0x9e6}, {0x80, 0x5, 0x1, 0xc880}, {0xfffa, 0x8, 0x9, 0x1}, {0x4, 0x0, 0x81, 0x5}, {0x90b4, 0xb2, 0x8, 0x40}, {0x7, 0x4, 0x9, 0xfffffff7}, {0xb, 0x9}]}]}, {0xd2, 0x6, "db35490182928b6ffb259f848b3807b80f9ea359abdeb37b91b281f8e697a605576b537f5f157a33c1aabc7419b05e3ed7090542bd5cfcbd552a978ffc09363c716372e026f6c200c99458cf2b38ec27facb3610562f17e7f41dd43cd45375ebf8b6c5355a4068b09a158be6dc47f940238d48ea61f98acc436ea5765ce05bdfac2c3dc026fc2b9ae2c3f399d4b26a2ca1b99ec1625e15b9e196e811f1abfb1be3ad67ab4bbd493f366d82e21d5a8d8a820bd080b42bac0a4736073a7c64c4516fce15f6fd3d09e5e4d387ea661f"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0xd8, 0x0, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_LABELS_MASK={0x14, 0x8, "86e74f80970e300ce3df0aa6eacc49c8"}, @TCA_CT_ACTION={0x6, 0x3, 0x5}]}, {0x83, 0x6, "5561cdd74619a37791fa175491cc3eda1b8b98d2e064811eeba93ae16c644535e65908f7b41031400f334267b202c63dc3a248db6a26fd20c88cde18f5d4b3618135b5cf1c4860ecf1ca7859a44c44881a2604da0e41884e0bdd19e9bba56daf2100a213e33995ddeb15fef02d2b8a63bbc4b39fdd5e0da52bc38982edebf2"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_CGROUP_ACT={0x1610, 0x1, [@m_vlan={0xfc, 0x19, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3c}]}, {0xc5, 0x6, "fd166b89663dcff0ba66f0e03600d2e96475dbb4f491463f207f7646bdd4693c7012a17a7192027cad00546d6d8a3cf545456c2f6155135ec94916b138566b9c88d6fa48de3a1842f8b0770c8aef9ba7d745669e95e612174170844d055083d65c5f9f96e35bb230af1ed75f4d5e18529628632dea3acb420688e3bb5da9397a757506a94ff911d58496161d7750b88c0bc8e4cbc325886bf31455da3e86baa507e54e50d26d4ee57c0dcc7c6213d58305e87892598683d289c6be97eba46f91f1"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xf0, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x64, 0x0, 0x6, 0x24}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xaf, 0x3, 0x2, 0xaa1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x1, 0x1, 0x9}, 0x1, r5}}]}, {0x62, 0x6, "45bf8222797aa0ef33bb4c592b7cd289317fcb0be3c4c596d65bea5900459625308e40ba26861389927e8fed06867028bd4b87b77bc8f0ee224f5fd192b82f0669d956093c0068ad5f2385f80eeabfde3251ce9b258d2b78b3244bfcd40b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x158, 0x18, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xbf, 0x8, 0x3, 0x3}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x1, 0x8, 0x3}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x1a0a5d5b, 0x3, 0x3, 0x9}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x64, 0x8, 0xf8, 0x2}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x200, 0x2473, 0x10000000, 0x9, 0x3}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x3, 0xdc, 0xfffffffe}, 0x61}}]}, {0x84, 0x6, "ee608c2496d14c00a51d5925b9fc4ff119a2c81647050ac9d6c40d14ae748fc014aed95a6df97b4312016625dab38d7cef3774347351ffd8e5f2410d9061599392f8cc4089b7137a36199e69d4ac4a84c2536a3a64c125182e1f906a465872b7472fdf19573f9320ade16355e8a33bfa8e1f99e17b71a44239fa56d0c2f3e7e9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x10a4, 0x1, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x5e11, 0x20000000, 0x20b0, 0xfff}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc39e}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x6, 0x0, 0xfffffffe, 0x3}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x8, 0x3, 0x4, 0x5}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6004}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x70, 0x0, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x8, 0x0, 0xb0}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x5, 0x5, 0x1d, 0x99}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x7, 0x6, "fa28bf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0xceacc7211160d986}}}}, @m_nat={0x110, 0x13, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x341, 0x0, 0x6, 0x1}, @multicast1, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xffffffff, 0xffffffffffffffff, 0x4, 0xfffffffb}, @remote, @dev={0xac, 0x14, 0x14, 0x1b}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x9, 0xfffffffffffffffc, 0x2, 0x271aaea6}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffe01}}]}, {0x6d, 0x6, "dfb96d13ebf187ed4d572a3ffbc8f5a37f6f3267849bb0afb59a192d95a448d5a7fe7d44c2977e33e77a190a588103efb572e72603ad9410453719a60ba6d693a74595f7dd7097fdaf04f9e1694667e726655ee2a75371d42566aab8f1b45e125c25892b55fc12cd4f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0xa4, 0xb, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x4f2, 0x10000003}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x1, 0x4, 0x10000, 0x7}}]}, {0x51, 0x6, "087bf2b7f735429a66003313de67e8e48ba4ab14efac2661254b34c8c9eac286a42dcaa9b521189eba1689426b7d933459d769f629df716f2f0ef74b08f37a2fcabc6fbde13c8735c4e420ee6b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_EMATCHES={0x27c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x78, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xc3}, "8e119a2484284c75b1de9aaa797640039fedcd6070f820f733c6d457d1e49b3788b4c49490542d4684dfee674a9a95e78f298deaa8d9caa95cb51f4f8c55528c90975adbd47835edc880c052ae993a1149fc0db5165d0371881508593a2326b146033ded9a3bacb68863b8"}}]}, @TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x3, 0x0, 0x0, {{0x100, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf5}]}}, @TCF_EM_META={0x94, 0x1, 0x0, 0x0, {{0xc9, 0x4, 0xf97c}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_VAR="44b3b4a4b6fd933190", @TCF_META_TYPE_VAR='h', @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xfffffffb, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR="6198", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="174b91cb", @TCF_META_TYPE_VAR="c399fa4ae5", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="04", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="fc263646544693255e", @TCF_META_TYPE_VAR="a2"]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="98c633", @TCF_META_TYPE_VAR="20164b3e71f3"]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="04ebe9", @TCF_META_TYPE_VAR="bbf701", @TCF_META_TYPE_VAR="d20429", @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR="09e9890d"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0xfff2, 0x2, 0xfffd}, {0x3ff, 0xa, 0x2, "13d5baf3d35ec86b81b0"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x0, 0x7, 0x856a}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1462, 0x3, 0x4}, {0xc2e5, 0xf, 0x52840df0, 0x9}}}, @TCF_EM_IPT={0xb0, 0x1, 0x0, 0x0, {{0xfff9, 0x9, 0x7}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x8c, 0x5, "60e5d35982198387946bdd3fcebc243b76c9ad70185351dc15c37b199a85e992e1e50ef2f00c0937f20fe4d47dd74a1b1b2c103b5428d1e729476b8f893061854fcae5269e5d1bc959fa0ba10e1f7cd039151e473d1b136984aff4d34869ca91d0d285b535a97141cc5137b40249c075c4b44fc25f45d2158ec9dd7b397ded09506e96efab08b702"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7d}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9e}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x3}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x10, 0x7, 0x0, 0x0, {{0x0, 0x0, 0x6}, "1601"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa51}}]}, @TCA_CGROUP_ACT={0x45c, 0x1, [@m_mpls={0xa0, 0x1a, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x43}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9100}, @TCA_MPLS_LABEL={0x8, 0x5, 0x75cff}, @TCA_MPLS_TTL={0x5}]}, {0x42, 0x6, "5c5fafb081f9fc889b1665b07994b1b88523223047f9f7c42ac95f4ec2745658d4ddd466caab241224e9b648f1b2eea547f6639a036ebe27dc95473df7c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x150, 0x16, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x499d, 0x3, 0x1, 0x3, 0x2}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x6, 0xa1da12bcee334ee, 0x2, 0xfffffff7}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x115, 0x2, 0x8, 0x4, 0x10}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xa0af, 0x0, 0x3, 0x4}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x401, 0x20000000, 0x8}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0xeebe, 0x3, 0x7, 0x100}, 0x47}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x20000, 0x8, 0x8b, 0x7}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0xa12, 0x0, 0x8, 0xd}, 0x72}}]}, {0x43, 0x6, "5436591efe668d113572db685a12faa5db63824f4e80778a862d2e26cdcbc56008d87b9e449aff101843bc5fea5c1a5d398b9f72eb7c5b252279a757784c96"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0xfc, 0x15, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6c7e, 0xffffffff, 0x0, 0x4, 0x7d5}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x84, 0x6, "e10c962a2433473fc4733d1f89b6430da739a1569ed55f64b4d72ef381bb3dc9be5f462bb50b068c2d90731a662253ec89a7509e1936f5a15a73174dfdab10c856c2b57e3baa4dc4342074aaa23ab9adb87afba995cfc2e02ca5fef9ce6cb6d0076e09c53cf041b47d75d29bc86dabfd47d1271b84aa48956c5ca4c9e4536589"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0x16c, 0x6, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x5, 0x10000005, 0x4e6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x6, 0x20000000, 0xfffffd37, 0xec}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x101, 0x6, 0x10, 0x7}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x4, 0x7, 0xfffffff0, 0x5}}]}, {0xcf, 0x6, "2aa12f82a5f4f97b6bb6e469b3f8b3208f64d2e289fc048aef9d3450ec68c4c50954c77954b9078e2309d24128fb33141e73151665c4f5b4d53eebff627a52a789546e72f2469aadeeff1e0016cacad7cd60197874f5843237f0d55d0e2442fb29c9d46df270fcfe9f4eaf01b9af2f7c6537cc5eb28c3a57ada47cea4c97328751cc86edb127ffc92e467a42e1d242122c0d2ab8ce510eb938727143cbb5b8b033b3235cf6b0b213134470fa12284da536ee86e6a2fbbc434592f502207882e6e96e37b495a85f5ffb7cbb"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6, 0x2b, 0x6}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x4}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x63}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffff00}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x2c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xff}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_bpf={{0x8}, {0x8b8, 0x2, [@TCA_BPF_POLICE={0x8a8, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x80000000, 0x800, 0x8, {0x80, 0x1, 0x44bd, 0x1, 0x3, 0x61}, {0xff, 0x2, 0x3, 0xf, 0x8001, 0x3c}, 0xa26, 0x0, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3556}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0x6, 0x101, 0x0, 0xffffffff, 0x10000, 0x3, 0x4, 0x101, 0x3, 0x10, 0x6, 0x3, 0x8, 0x2, 0x5, 0x10001, 0x5c, 0x3, 0x0, 0x796, 0x9, 0x6, 0x3, 0x5, 0x5, 0x4d, 0x8, 0x5, 0xdcc, 0xfa6d, 0x4b, 0xfffffffd, 0x0, 0x2, 0x0, 0x55, 0xf5d0, 0x6, 0x8, 0xffff, 0x5, 0x5, 0xdd, 0xf, 0x4, 0xff, 0x0, 0x3ff, 0x0, 0x9, 0x4, 0x2, 0x10001, 0x7, 0x7fffffff, 0x57, 0xdaf, 0x4, 0x9, 0x8, 0x101, 0x7, 0x400, 0x3, 0x6, 0x8000, 0x0, 0xff800000, 0x5, 0x6, 0x1, 0xa, 0x5, 0x1000, 0x6, 0x4, 0xa, 0x81, 0x0, 0x3, 0x7, 0x6, 0x6, 0x7, 0xfffffff9, 0xd, 0xfff, 0x7, 0x2, 0x4, 0x90, 0x482e6f43, 0x101, 0x80000000, 0x7fffffff, 0x2, 0x3, 0x5, 0x9, 0x7, 0x5, 0x0, 0x40000, 0x2, 0x7, 0x1, 0x1, 0xd11, 0x9, 0x2, 0x80000001, 0x4, 0x100, 0x6, 0x6, 0x8, 0xfff, 0x3, 0x5, 0x0, 0x6, 0xfffffffe, 0xc, 0x7fff, 0x7fffffff, 0xe24, 0xfffffff8, 0x5c, 0x41, 0x1, 0x2, 0x3, 0x4, 0x2, 0x1000, 0x8, 0xb0, 0x3, 0xff, 0xc6b, 0x3, 0xfffffff8, 0x7fffffff, 0x4, 0x0, 0x2, 0x9, 0x8001, 0x2, 0x7, 0xfffffff7, 0x7, 0xb4, 0xe80a, 0x80000000, 0x7, 0x6, 0x1, 0x7ff, 0x0, 0x1, 0x9, 0x2, 0x2, 0x81, 0x9, 0x0, 0x3, 0x8001, 0x81, 0x7, 0x4000000, 0x7, 0xa6a3, 0xe55a, 0x8, 0xa6, 0x3ff, 0x10, 0x4, 0xe, 0xb, 0x1, 0x1ff, 0xe, 0x0, 0x0, 0x4, 0x6, 0x9, 0xa2, 0xb7, 0x100, 0x5, 0x4, 0x6, 0x9, 0x80000000, 0x1, 0x800, 0x6e0, 0x1, 0x3, 0x400, 0x9d, 0xfffffffe, 0x0, 0x10000, 0x36, 0x7fff, 0xff, 0x10, 0x6, 0x2, 0x8, 0x6, 0x400, 0x1ff, 0x2, 0x4, 0x800, 0x4, 0x2, 0x0, 0x800, 0xa6fb, 0x5, 0x1, 0x0, 0x4, 0x800, 0x7fff, 0x10000, 0x0, 0x76a, 0x10001, 0x9e, 0x2, 0x400, 0x17b, 0x956d, 0x0, 0xffffff07, 0x80, 0x7, 0x9, 0x1, 0x8, 0x9, 0x3f16f6f9, 0x8, 0xd019, 0x4, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x19, 0x4, 0xf, 0x6, 0x80, {0xdd, 0x0, 0x6, 0x1, 0x6074, 0x9}, {0x8, 0x2, 0xc, 0x43, 0x5, 0x4}, 0x9, 0xe03, 0x398}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x709, 0xce, 0x7, 0x7ff, 0x800, 0x2, 0x4, 0xd14, 0x0, 0x3, 0x0, 0x1, 0x0, 0x451, 0xfffffff9, 0x4, 0xef, 0x6, 0x1, 0x8, 0x100, 0xb60, 0xfffffff8, 0x2, 0x2a7, 0x5, 0x8, 0x8000, 0x8, 0x9b4, 0x7, 0x1, 0x7, 0x4, 0xfffffff8, 0x6, 0x3, 0x7ff, 0xffffffe0, 0xffffffff, 0x7, 0x9, 0x7fffffff, 0x5, 0x5, 0x1, 0x1, 0x5, 0xfff, 0x3, 0x0, 0x8, 0x6, 0x5, 0x1, 0xfcb6, 0x96, 0x5, 0x5, 0x101, 0x10000, 0x0, 0x3ff, 0x3, 0x8000, 0xe2c, 0x4cb, 0x3, 0x6, 0xffffffff, 0xd, 0x3, 0x1, 0x6, 0x0, 0x7, 0x1, 0x7, 0xe21, 0x5, 0x5, 0x2, 0x1f6, 0x80000000, 0x7, 0x40e, 0x3, 0x2, 0x49, 0x9, 0x4, 0x84ae, 0x6, 0x9, 0x4, 0x9, 0x9, 0xe1, 0x80000001, 0x7f, 0x0, 0x9, 0xd, 0x6, 0x7, 0x718, 0x81, 0x1, 0x5, 0x7fff, 0x6, 0xfffffc01, 0x3, 0x1, 0xb8c0, 0x5, 0xb, 0x9, 0x3, 0x4, 0x3, 0x5, 0x1ff, 0x50, 0xf, 0x0, 0x7dc6, 0x2, 0x9, 0x1, 0x1, 0x1, 0x200, 0x9, 0x7, 0x80000001, 0xbd5, 0x2, 0xc, 0x15d5, 0x6, 0x4, 0x81, 0x0, 0x0, 0x10000000, 0x1ff, 0x4, 0xffffffcd, 0x2, 0x6d0, 0x3, 0x2, 0x1, 0x97, 0x0, 0x4, 0xb1c, 0x401, 0x8, 0x9, 0x9, 0x3, 0x2, 0x5, 0x5, 0x800, 0x80, 0x9, 0x10001, 0x1b140fa0, 0x8, 0x8, 0x3b, 0x6, 0x8, 0x293b, 0x6, 0x2, 0xb3, 0x8, 0x3, 0x7ff, 0x0, 0x10001, 0x4f, 0xffffff00, 0x6, 0x3, 0x9, 0x2, 0x0, 0x400, 0x9, 0x7ff, 0x7fff, 0x6, 0xee59, 0xc2b, 0x6, 0x7fff, 0x1da00000, 0x20f, 0x7fff, 0xa1, 0xe73, 0x40, 0x1, 0x2, 0x4, 0x0, 0x8, 0x2, 0x9, 0x9, 0x938, 0x312cbe22, 0x5, 0x7, 0x8, 0x5, 0x1, 0x6, 0x80, 0x4, 0x6, 0x8, 0x3, 0x1000, 0x7f, 0x9, 0x6, 0x7, 0x0, 0x5, 0x7, 0x3, 0x2, 0x8, 0x40, 0x5, 0x5, 0xef61, 0xb, 0x5, 0x7, 0x7, 0x5, 0x7, 0xc4bd, 0x53, 0x3, 0x139, 0x8, 0x9, 0xfe8]}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xa}}]}, 0x32a4}, 0x1, 0x0, 0x0, 0x24044840}, 0x1) 1m37.94267943s ago: executing program 6 (id=3392): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="0000fc00", @void, {@ipv4={0x86dd, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) setns(r2, 0x20000) 1m37.834019003s ago: executing program 37 (id=3392): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="0000fc00", @void, {@ipv4={0x86dd, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) setns(r2, 0x20000) 23.789021403s ago: executing program 7 (id=4088): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f0000006800)="10", 0x1) (fail_nth: 1) 22.07604487s ago: executing program 7 (id=4098): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_create(r1, 0x0, 0x0) pwrite64(r1, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/3:0:0:0\x00', 0x20200, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f00000000c0)) 21.997222715s ago: executing program 7 (id=4099): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x9, 0x6, 0x0, 0x6, 0x19, "f419f4ba9c2d666c378d75463e665e00"}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000140)={0x26000, 0x112000}) r3 = socket$kcm(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x42, 0x0, &(0x7f00007d0000)) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88848b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 21.990523507s ago: executing program 7 (id=4101): unshare(0x2c010200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000004000000000000010000000500050001000000080004000000000005000600000000000800030001000000234fc8c20568f323fc2d94b8949c8875d65a4ea0996c866a8a01f1e3a9c70503853e6dccff4b48a87b16260898e802665682aaecada393871051f5b0e7175f59bc9765d1d583931388061ec8644fe217fce1e621bad1d8d804f4b611ffc091f7a6c28f1cd85badbc276707da28520bd40f76d8be603df0dec9ba3f7f"], 0x34}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000140)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010027bd70000000000001000000080007000a0101024e00010003dfe4dd9e6efa9e72e4065e1dd0ab4c3f17568492fa019225f4f55724dbd9d7264880ef7cef4da08a74e947a31ce6750f9a05e44bd95d7a6eda083bb40ea3d63e0c0000ddd4a0c6f5e4000008000c000100000008000800ffffffff0800020007000000"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2810000, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000500)='devtmpfs\x00', 0x201000, &(0x7f0000000540)='acl\xb15\r\x11\x92\xefB\xdf\xf4\xdc\xdb\x9c\xbe\x1a\x17\x17}\xfczu\xdb\xc9\xd2\xe2\xeb~9\x98\xd3\xd1 \xdc\x163\x98=\x9e\xc5\x89\x8a\xb7\x06L\x06\xc9\x0e\xb6\xa3\x94\xc68I)\v\xa5\\>\xba\x18]^\x00\xbc/\xdc\xd65\xbfpzn\xe5C\x05O/\x90%\x12,\xf5\xee\vF\xe4,\xc2\x95W\x04\xa8\xc5%\xff\x88\x1e\xa7\xef\xf0<\x87J.\x06\x04]\xa5\xd6:X*\x1a\xa7G\xa4\\\xd9i\x8a\xff\xa6>\xf4\xe3L\xb5Xb5\xfcr\xd6\xa4o\x93\xf5%\xeb\x91\xc4\x9c$\x01\xb5$\x9d\xd91\xd2\xaf\nWF\x02x\xb4-\xe6\xfb\xe1\xfd?\xa7\xb6\x8a\xd8\x06\x9d\x95\xc7\x9f\xbflW\xfc$\x1c\r0l\xa9\xa9\x99\xf0bW\xc4\xed\x7fh\x92\xe6\xb6l\xc7\xc8,\xce\xf76\x91Kp\vM~\xd9(\xb2\xda\x95CO\xb3\xfb$\xe7Y\xa3:I\xc1\xfc\x1b\xbf\xe8\x17\xeb`\xb6\xba8\xa62\xd6r\xae\xb4^i\x16\x12') futex(&(0x7f000000cffc)=0x1, 0x4, 0x1, 0x0, &(0x7f0000000200), 0x1) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) unshare(0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@delchain={0x24, 0x65, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x10}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xf, 0xffe0}, {0xe, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40408c1}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) clock_getres(0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) 21.667877261s ago: executing program 7 (id=4108): prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async) socket$inet(0x2, 0x2, 0x0) (async) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) (async) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) 21.434576219s ago: executing program 7 (id=4109): r0 = socket(0x1, 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000140)={r2, &(0x7f0000000000)='&\x00', 0x20001, &(0x7f0000000080)={@align=0x80000001, {0x100, 0x4, 0x1, 0x5}}, 0xe00, &(0x7f00000000c0), &(0x7f0000000100)=0x5}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getsig(0x4202, r5, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000002c0)={0x5, 0xffffffff, {r5}, {r6}, 0x5, 0x1}) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea5", 0x29) socket(0x1, 0x2, 0x0) (async) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000140)={r2, &(0x7f0000000000)='&\x00', 0x20001, &(0x7f0000000080)={@align=0x80000001, {0x100, 0x4, 0x1, 0x5}}, 0xe00, &(0x7f00000000c0), &(0x7f0000000100)=0x5}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r5) (async) ptrace$getsig(0x4202, r5, 0x3, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@initdev, @in=@dev}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) (async) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000002c0)={0x5, 0xffffffff, {r5}, {r6}, 0x5, 0x1}) (async) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) listen(r3, 0x0) (async) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) (async) socket$netlink(0x10, 0x3, 0x4) (async) write(r7, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea5", 0x29) (async) 21.394339452s ago: executing program 38 (id=4109): r0 = socket(0x1, 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000140)={r2, &(0x7f0000000000)='&\x00', 0x20001, &(0x7f0000000080)={@align=0x80000001, {0x100, 0x4, 0x1, 0x5}}, 0xe00, &(0x7f00000000c0), &(0x7f0000000100)=0x5}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getsig(0x4202, r5, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000002c0)={0x5, 0xffffffff, {r5}, {r6}, 0x5, 0x1}) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea5", 0x29) socket(0x1, 0x2, 0x0) (async) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000140)={r2, &(0x7f0000000000)='&\x00', 0x20001, &(0x7f0000000080)={@align=0x80000001, {0x100, 0x4, 0x1, 0x5}}, 0xe00, &(0x7f00000000c0), &(0x7f0000000100)=0x5}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r5) (async) ptrace$getsig(0x4202, r5, 0x3, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@initdev, @in=@dev}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) (async) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000002c0)={0x5, 0xffffffff, {r5}, {r6}, 0x5, 0x1}) (async) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) listen(r3, 0x0) (async) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) (async) socket$netlink(0x10, 0x3, 0x4) (async) write(r7, &(0x7f0000000040)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea5", 0x29) (async) 4.589232711s ago: executing program 9 (id=4295): syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) (async) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000000c0)={0x400, 0x400, 0x10, 0x80, 0x0, 0x0, 0x20, 0x1, {0xc, 0x2}, {0x1, 0x2, 0x1}, {0xfff, 0x10000}, {0x1, 0x2, 0x1}, 0x1, 0x180, 0x1, 0x3, 0x1, 0x0, 0x0, 0x7fff, 0x5, 0xdb, 0x0, 0x6, 0x8, 0x100, 0x1, 0x7}) (async) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_access(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_elf64(r2, 0x0, 0x831) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000db0e59d1738f991356de58025e09eb02cb203cec4392e66cc4288e9d7165a2c44a50610e9b1528bda14c8976029798647c4bdf5b6e441992d4d4e28920cfb7", @ANYRESHEX=r0, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0d07002e00000005000000080009002700feff060002001100000008000b0073697000080008000900000006000488343a85b9de743abaa279a64531c8c7df545241c1bcef553ff22b2767cd83e39a8295f00c7fb464ce93145636f616191d78153749183ac2519a2b9b4354d6ea924230086bfe7531b4a2622f1af0ac0b2f2211262d0c1a749c2e5f190485302ca2cba677617ceb37cca0c0ca4891905fc1834900"], 0x70}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000804) 4.505493845s ago: executing program 9 (id=4298): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000040)='veth0_to_bridge\x00'}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getsockname$netlink(r2, &(0x7f0000000200), &(0x7f0000000240)=0xc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdf000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='\x00') r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x960eb500, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 3.578510484s ago: executing program 9 (id=4304): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1], 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000500009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x2}, 0x80) 3.512612699s ago: executing program 9 (id=4305): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x100) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000200)={0x2f, &(0x7f0000000080)=[{0x4, '\x00', @st={0x4, [{0x2, @svalue=0xffffffffffff3b3e}, {0x2, @svalue=0xa}, {0x3, @uvalue=0x7ff}, {0x2, @svalue=0x77f75780}]}, 0xffffffff}]}) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2044) 3.406772657s ago: executing program 9 (id=4306): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) read(r1, 0x0, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000030000000000000008d1ee00000085000000410d000008950000000000000016ced5c272468700dac2287d6676e3175c9dff965cacd22e7b1659eb975d5d70705bc07a5d85d76baea69619565df73b8b7ed2fc17cc2570693d2f4a9ab1d51847bfce0692c48bd9b64c1ca7cb2cf22454f2b063a69fc7fa1289de80a9e1274df59dc5e8b9112865bf6b251a32336d8f06fd3ed596f72952c6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x8, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1, 0x7, 0x4db6, 0x8, 0x401], 0x2000, 0x88f00}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000180)=@arm64={0x4, 0x7, 0xd6, '\x00', 0xf4}) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) 3.16061627s ago: executing program 9 (id=4308): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000100001002abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02200100ca340300140003006e657464657673696d30000000000000300016802c00018028000100"], 0x64}}, 0x0) r3 = dup3(r1, r0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_emit_ethernet(0x7d, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x6f, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}, {"3ccc21262509fe147bcd7b82e44aee0f534eee07aa105b3c691954fd0dfb3848a2d8f2a074590f2379398643af639b091b2e64c39c3ff9c9fb257a17f3a647"}}}}}}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xff8, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0x1e}}}], 0x0, 0x0, 0x0}) 1.347841701s ago: executing program 8 (id=4321): ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}) (async) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x20000) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000080)) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='\x00', 0x302, &(0x7f0000000100)={@align=0xe4, {0x8, 0x8ceb, 0x5, 0x69d}}, 0xfffffff7, &(0x7f0000000140), &(0x7f0000000180)=0x9}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x105201, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) (async) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000280)={0x8, 0x3, 0x1, 0xfb, 0x4, 0x5, 0xa0, 0x5}) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001300)={&(0x7f0000000300)=""/4096, 0x1000, 0x5, 0xfff}) splice(r1, &(0x7f0000001340)=0x246e, r1, &(0x7f0000001380)=0x8, 0x0, 0x4) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000013c0)={'wlan1\x00', @multicast}) write$P9_RLERRORu(r1, &(0x7f0000001400)={0x1f, 0x7, 0x1, {{0x12, '/dev/input/event#\x00'}, 0x8}}, 0x1f) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000001480)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000001540)={0x20, r3, &(0x7f0000001500)=[{0x0, 0x2}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x3}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x5}) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000001600)={0x3, 0x8001, 0x4d, &(0x7f0000001580)=""/77}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x20, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x600, 0x2e}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x2004c0d0) (async) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000001780)={{r2}, "e1cc05c5293e232c71dd8ca8b6b2c850da11aaff02dbf3ac1f67be8a05ff4d896a0f0dfc54c68d13b1d1fd0e8a455193cac990ab6b3c7368b088624e140e9d08fad07bfad0c8f07b6b2c96d8759aa526a2fb616856aaf46ef4a38a8b63dbc724c8982ceb5828fd051e0cb1735eaf37f917fa6af8a961b483230e47136e41f52dd6c8a6b9ffdd4bc71131aa7ca2461f4191d39e114a12956f3f3b620829f72e2d23f83bae22ea278bfa717eede65f0cdd66bcfaaa2bde729957e27fc4de6a12f8e35764f47ea3e75ebd63c6ed1a82610f17572d6bfb00ecb0e171a8aa20ffd2cfc5c6e0716bffecd6d64da5bdad54c55b913cec41129a29d2b0877d97fb845c09bfa1a4faea28b15f8f8f18a526e6fa0ed25396fa43b9a50788c910a5b8d1122a62a4c47251f7b3a0fc31148c2cf659f82b58e5345b0b2a1ad5b2af3aa145a5a5a02be9bca13f1f41a1005768cdee9d7698e19fc7ea5f5dff16b95e288d7d67f6385564bcf489c54293cfce9478c081fae4e8644612a401e03d3561e094a878340c7d1d4fcc81c8793f147fba537173f06fee62d328b8f505363a3d774e2cf9007eb815df9ee82e25705e09025092382bb0816f70a05ed85f3bb8bd032cce729aa7a757034cd29c3de9d4b4ff1c11b709d6026eaa03c5196e18354f74e4bbab2388d7abed9849ab147755473a4148eb3a94b87deb8f157ce31f3fc96c2e0f53bd1236cb450ec064d45bd91dc648b66a68fc2ee49545879f054174064d77e2c40bb16ed005fd6f8201e0544401f3e24c521c349c81a45c4917336bb1ecf7667740d10d2469370c6ccd2d1782593e45fe7dfb15fa8558b4086b62a53b8e8385257f429da6c8050d8ccfdda26115db55ce4108e2546698e736e4aa515ad394c54aec0af2e5b90da0b8b2b23a43eb25e63b43fe9d28898c40e97801a26293c8f0796dc1ebe9329b18346031cd13b212f3539bfcdf206b89925622c9fae96cdd17b700c4dd6dc8989e63f76ced2b1cb364c7899411a001650056c04c31e72340113f8dd17cbb6e874f8d2aa0c3b1f1ba04fc3df726e9f5ff2eb8eb50d95d70326f760f33d0669fd6b6a076559e2db0cb3aecba790ce0f7238159bbb7db9dfb305aae4ec0602363392de55d68076220d0d8f1dc62dedacb06ea20637389fe6400c5b11119fda5078191322065d9285e40bcc2087cbe4e360360df1c54abae7dde9a4ebe1e9f0fe4ad0a1498fb7b4b62757d94f8d2d998ea82aa141498ee471ae7ed8031e5cd54a55e4c883216bfde86caedbe7545ef2740c437ba8d656174e431cb8bdb6fe759cac8ac818a79590b30826667114f60b2d392f9184a1990f5a13079ea8bf1609c14f54ed5e9f2978f612d5e129be928247f6c997fa02dcdcdc0c42b98d407b1606c822d7996d4cbeb3a94b402ae7c334fe4277c55c365de3b001eb4047af50c0687dd2e54284959dbae036a9b2691a24007feaf16db2f12a1597e3dd49462d0102ccac0bf428f6bdaba0de76385502f0a2628529cfe93b87c46db7bfc79b30ecb7314b2ff97b8bac33fadec0046c996e9351dfe75525f2e45576e947ad43e47035df668353bf57272f73348034aed0235556b4d10560c01c8c2443a884567a3df955a04acf568dcef3afd33409d66824ff902a863bb9dc7abd5ed412d8f8269595e4d3105e8a4e7bbb22a304887f1696db27fd017e430b4e78eb5a8e5aaaff629b8e01ec8f6ed7ba5d0f7ffbbf36d45c734fb2b337f3b4c6b2327774a1d8ecee13120244c31db70b9f3a6006f9671303bedad6ba67b38375fb42b0e22c4996566ebfc5bdd869179914ef47250015a16788f1a34511d2232c6b8c6ba6b6004fe6bd9a561a783c95a2f54be46c769a502d2762d20800b73778e1bcb4c7534010c9d9276b67d3cc244a9374ad8b9f39f9c03cba1cc9d4f71162bf6af24fc33163036c0ebbd75caf08cde10925a4ef3e11f3e26df4f23ec16936ea251e297c3ab10666e8251ab785e6f22989a3516eb24416ee6807a681f7e6741f000af455a9b0b8ad08a34c8c994c626ec91af49a94dd19f5dbf2d4d59945364994d79ee6627014d1bbd9468135f7b165d0c4aa0b88448e0ac62f53261e434968cbe7730a1c0c2eb2681845e493e19d33610e5ec8f0cb50ea669dbb2b1934f55eabe32dcde7ecbfa03992ef61fd44467e11a921f71244c38f9e415a6f616861ac2c8dffd4162f72a6ddeef1e43b5b193f317d8565489287ed7732402d451961bf480561ace1b066e54a3a6b654d65fb223cfcefbf16850f0c40ecc7ae31bfd45c8ec4f52aeffa524e1f9f6f5e6a84dc42e604b4b8dd65737346f0299a4dd92e65d4e67efb0c4f24c09e79e92b358f04d7c8ab567e8f2b5378ec11f4f3e30dab5fe1496afcaf9efb483987f1221da42a6efdc00f50ef08441a7cfff8627f7da1e94800b8388f1502f95c5f46843cc064a98e250c4db695d56b868cdea7514283d5b97958f075b63de3ab10fea9b3dd36f93bffe15962310bbedcee53ffc11eaefc0773e756ff966135cd76fc457984f027f1a06bace47eb7d79d3b11326d4bcd21d8a003ccf674e041917ac0b9372bc5711c183d26b86292c2699126f5a9021d5ba6a62f5e4226b5a9efcbf55dd450a89c2f5efed8bfe56f41bc04a22ef8b3613dd31f1929556ce3bed20ec520b5cac4c393a3c50adc577353f154a1317196e068be9cbac4f8b4130dd96178562ff0ce7a4a315d094b29668792967a9062be70c19c8ffe969f49047ad453f5b1183da12ffd6cd8a4f67fdbb564f36ce833705385613d9340c3f27442c6544ca76b3d6ebb0efceff65a830770fe5e9e17ed73aa99c7b7a136febcfcbd90a144648e437c0d891ad81b349ca4a5eb51a2f68027ec36f420458b0a2aee1452196aed4c238d6806fc1e7c24198c3d38925c959abfde94ff9096ce1cf94063b0d3bc472a2ea19df672ab8c01847fa670e4a0defc709481588f224932e7250adabf75cae746357e5a057f202993111c47aaf71e92d9af547f4d2ce6b56f9598d4ab669f633f3172e6f5162b7e18ec82003c6e36991766f1418387eb2a4efe5142f348ec9c9ac621d643f2035780a19a30199ebd6f91a0167fbbde4ec9b21eb0c20e0bc8066dd0adbe8c4f052b9e555567abf22770fc8a2ff4f297b89f58bdeb54c451d77d0fc3498a15e660a63775bb42effe8a7099a333917de7fc457f4395ead779c396f25b63351e3620624225e8df8595277239935d46e40777ba3fd4de3ddc73b09aaa86ea07038134934e355b045a8bea5afe1cc568cf349d913712e88c7f169955ff596cba0bde4d53e264d6f09f7b1d99bdf46b075f7321424f682ab76f8e54bc3379c08149d8848a3e95f1e92eaf36e986324ce2315c7eb69ad8de9333f060a38301a104eaea01557d4732d3e5edd3db30610a22eac21ca05e6a8dfcc0e595526e9873097eba405dcd0167e279e8e1fea9e67cc7f5a2343a1d3a81663577730e182dcf657e849e3428f3dab5642cf48b679bb3bcd7a594721f5d37542ccca7e235b02dd3b9fd640012bcbf4ff605c36e6d6881e644eaef24c9454f2cbb461e8b3f03ed74fe873325bc06e63c6567ec7217b3e7f323b4c57966cd0a3cc546bd55135990ba1f88fdf785f539d19ac4b730fe3ff817aa44453707910bbf40f1f727c9a91bb258c59f1098b801371a97040d009921146b32dd0a50a0057834f4095105bb7d75ef6aa7bde6e5538c5a561e7ca87a7df0d6c4e2bf6842f81b540bfb6a66fe4938f0bd808842c80170efd98b10721801319ba906faa5e10816902d17f28cce678cce76c3911004db62adafe215e6efe1022bc7ed2772c7ec175834d028341840724725cbd74b39823c5d440a5cbd6cad1c82654a0dc9c1d8862c039033bcea82b8c30323bd6e915d63b25365cf5926f1a16ba527b30e73ffa298e2926e248f4ec5d848426fc6638558bb68a5a03b558399533d40e5346cc8f4382d7e4a52b572644238d063debc24a62efcb7b9ef434e8341d82846b57149fe236241b70437ba1e0e1afa8cacc2e3fbaddb6280cafd4a899a451b0e642ea2d8b0ee3df65863ce3f4a8ba52f30397f8b1d5c6632e45302618d6724e782c5133ff01af0c903828171721b6830e4b35752973e66e9772c57187d9e4eb7ab2b448087792f8a79ded20d1fe90cf96f8cd19791adb6c5f6e7d5b6ffffc903094acc4af0f26c159fb7712aeab0422bcd64b10ac69f1e665a70fa81deb5dc56a029ccc62cbde79d5e5e71880683bab754fc95be63ffeec094c70d7d7adfa38217ec9e2e4957a5c457dc30706bac02f4c47656699b7ad13c44a15744681c725faa57c9cad03e76bdde0abb022de16169e91f223d113ca8d5e606725a19d6aaefb106105172c6defd6a0d270880b5e84af364b14003f6d0af2f861e0ef8ed4fc3d1ebff9f31bc56a194a8723900cd6ac7155a5b08409d6045ba4066f1f41ff51bec4a7644d1dab1898c850d11fa7b5ebadccc96be04b74beef90baa2bc5c7426fc1f07298449e56209282debfde0cbee76fac625f179b8620139af34d4fecf36d996505169b9afecc71646dc521a7adafe85cd726a10f7f04900db857ffdd6faa7eb5801516c1f97554a3b9fb3f5f4e2f2eb1aabc9fa7de69b56f801d310d8e60a85d1325eb7be27b9efc43cbe43e70c386e34f3bde3b7d9cb448ee6c3858d375cca09dbeae6ba3154495239e6a33f3cd992c94270eda8b242a7b173d6767ff3b2bb1954e30b16065b068cf455d4d9409811e69d2a4d89638246bbe82bdb868f6bef3074a229655053e6e4bf6573b5d06275744bb07e76c91f71841c57651b2af23de4e9335cee7b2fb2ca4a93ac473c3c810f09531998490dcdb184efa22c2042c16caca20466e5026b319b836b053ff32b5ec1073b72f112ddd1c78f4e91b23161285234d4581de93d1da4dc8e50c239718e01272f1cde31f73d5eb2c468f30750b8cc73191d88297117f3a63580e546dc60817437dbb6091bbbc27998e16e95a63322235bf324848976ca0064e06eded79f4a4c3a231d96374a343bbad417a1e533e303e3a410d442573d91c8a8490ea7dab644dbcc20d864f16f244469a93f765e2c0d4f677e9729c032db1122f5437c17ff93e1f72052cbdd63a2500cfabe61f4cb32a5aacee0454ec1a3eb0ad2d7d156ca2c503c2a9a685a2b412c99af76df11224e98e954a9cb21a6fb6d7bbabbe460b5fcfde94cdc97d76ce8fd5b434d9d862636c1086fe9df3e39904e26dc578dd56ceb0f0f58dd644b202a5768425eb22452ddcda68b3c990162d466fa0207d711ad5c0ad8b4c1f0ad3ce5dcdf0f87e0d6dc1fd248b5a681c95d0668af16c0d1bb9817e8d80c18e414d34f1b5c7d044d06e5cb5a99e5df3706b8a3458657695bcc249cdcbef45d33bd4bc8cf9ab9042e290803fc26eb34dc139d4fb695d39c6e579df4fbd4ee10afc8d73a67c24f3566a92b236472226a1304a56519265b95592127278b3602d4902b9342b4f72c7a14ae76b75109b10f17089ca7895c4569f354b1aee97e75136e2b12463122669ce1ac40b0e7819173eda140ce806972424021820ff74a2cfb5b3ef71c7b612e75d53844c113044453688b2d40c13ef355333ab074bf248ab6a4c8691416dd91cc88027895505f623fc223b094df28cbb7d2fdd5d05496c6fcc1b558c7ef91ed40ebc044094a8508668c3a40e92d191c9096ea2af5b71c55835806b8ff3389f1d72c7d5d9d7ecdda78497f973f545a4fa8630f0d203d4cac"}) (async) faccessat(r1, &(0x7f0000002780)='./file0\x00', 0x40) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000003280)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003240)={&(0x7f0000002800)={0x9fc, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xcc, 0xfc, "7c45831aafba8c4a5b2bf82222d604195efbb0da6f9fe85a4c44577ba1fd2b9cd6589553fa53b86aabbddaee7b310e7797f11c7d075af5655cc684372aa9e8a06c2fd27775e255bc8d1a083f70a4aa8dd5cc25b933561031cc2d7d4dbcfd5549fe6d561e8e05d004666c551ee9b56223522ec9d27bfacb99ed65dd2d8f9faac9f44c6db9a840911d67b1c642a94dd2a1a1bd42f39762a03ef9233e447066ba17bd20ebfd270635c1919606250fe07fad99696dacd7aa3ec36aa9efa896b802cdb5ecdac7c88945c4"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xd}, @NL80211_ATTR_FILS_ERP_RRK={0xe3, 0xfc, "b7be76b92919b4026f4f2380d581d9accf412f10ce696edfee53b48f1e9be273fbf28969375156337bb378fde3f9b444de7ac3c49df017ceed1821410e0dee499524fb92dc26042d2261f8d7c5a47bfcf79bfaed4f3d6c823acb5369410a038041e6259d3eb097b7a3ba568f9f726df90ac1dfab93bf020ac893ba087a49738150d0ce006beab859038c1e2e6a436e18cd73b6da9225f0a9faad57d494a174fc17ac9e788586960f6302154a63efe76cdabbe547a0d1dfcc4c0443b8e5a49bcf14842c27711f220be562d04638eacb2b6c3ae57d38c69af5c831e01088ddab"}, @NL80211_ATTR_FILS_ERP_REALM={0xba, 0xfa, "dc6881262ebacc0e166d6274ff8918734e8bffa28540718dc44afb1cdac28eef79eb4f0f495590da1048d320a0eb90d6baaf9e2c640640d558dae064ce74b802a696eb3d8bd1816a96e5610b3b47e3b9e0b565419cf0c4a9a6aab3dae5afbb7c5783c5cfe60d1be94088c7e36f3d8d6608b9357e5a81d32fa816b6c25953a48a7393a74ef2dcd667a132a6ee4ea072a66b4680d506b9700bdc9844784707676695887f504cad6ac30694ceac48f3f0d66f041754b467"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x100}, @NL80211_ATTR_FILS_ERP_REALM={0x9f, 0xfa, "19a993fe2d017f801da4595443335ff310f089724cfb1e7cb89b3b6029ea1dc39ccb1bacf7d70b1b039d481b9758ea87a17a8d0f99621e506e1659e2116a80c5979919ffbbafef0135c6d9b05ac8522d18b71e17804c103fe8b11ee2b1ace21d6cdbc21a8d0c523cedf27a4f42f65ee55cf690d16cbf18622d460a1a6b776bf3849981542f55aa37a92ca859500bfbe3dd9cbbad6a521b63b94eee"}, @NL80211_ATTR_FILS_ERP_RRK={0xec, 0xfc, "bb0b21c2d0d9b8b6d7822040855a2967a61a0b2984a1da57540854e5f8f26a220ef85382fa0281fa7249152e9878b7d7c4fd9ec1334d039d6ac02177be3b0ba5587e647597718ebc77b24f2af2a8dad017db9d26794c8b2d31494f965657123f954441fd9255f9415c2bcc4d06df8ed9c9414ba1e8570e1f9012535e05130a87d0f3933adfb627f6020ebcb0f9b81e2f878475b084f53a86460c61e90b0fc41ac76a370a46baf2e5108b55f9be08f84a1e2f2963bdc5396424ad468a16ad99cde997ea63858fc9248d4ceef736d8098e8bfecdfff0dc9974d7bea6bb7cdbdc1d229186999e9f29ea"}, @NL80211_ATTR_FILS_ERP_REALM={0x28, 0xfa, "50aa6002037a5e0f7746bf990bce4f9413562c27bb50ef938cf07e98e987974866d761a6"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x24, 0xfc, "5540e070ea002156b9378d8be2b0af2ee8b9b36cab6cc9a5e4900dcc84eb9058"}, @NL80211_ATTR_FILS_ERP_RRK={0x75, 0xfc, "b87962df5d2412ac431473fb5d6df787fcdb44335ca58d78fc0079339a303540d8d1101b80fa1fbad6480012efaafc9cb229eb8fef6e2b60e28fd1bb9ca652354410c120a8a2c81afc2956cba50d7a711c5872e4868d20ebfc96dd69f9eca9f59e8b9bc964ec8308d9e5c7be0efb679cd8"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7fff}, @NL80211_ATTR_FILS_ERP_REALM={0xe2, 0xfa, "1c5d2be23de3debd78f17ae90abe8a565ce3e68201476460ed75d815f975d5aa38f6a50a0be036bdf356fea5037d56ab322ae8b7ef0e3f44ed0372c6d8bceac460bdb3695f443e206ff4d3207caccb7444a807612e7c3d0e6049966ab5b4429a7b34678349135d0e15624b9fc6cce191f3c3784ff0b828bbca9a6025a7f044ee1dd5393b4575b194eaa8b61b4cbdf82c65e4b5fbc1de609baed2f9d34555b2931e9e150d155b64fa1d40fe8dc397dc5be3fa94bd5b5274c32b2df80459cd0b9505abe69271699eaaf7bd6a34547e1632e3d2f56eab3f32db1da01406b1b3"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xeac}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "3cb21416ef1ab451"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, 'j'}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_REALM={0xf5, 0xfa, "10d7f78df3918e7dea96c39daaf749731d9e6f913328fc591fe87b9a449227431edc610e691e44c1e33c70a3aad41fca99e6c17bbf23da1aedc37b78a3c469eb67fa0a81ba4a96635fa82d962a53098afd58806f73434041677a24441cbdeb1bb5d1de277be4ef72178d621878dbc41ac310ad8576525147f2973348b28b354ba0b9f84a2fa3ea20e8b5d44888b15cf8853569423a1db759ed4faa3b77a922844f5e216f78c3b933141b88209f0b01a3ace4e164b0c696b17995b9b2175dfaf65518264a90c5369095c3301a805882474e19fd82fd39b0ad34b42aaee38c4698177f5a0147149592e158330e36aaf0fd52"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "7733baf46bf718ba075941"}, @NL80211_ATTR_FILS_ERP_REALM={0x6a, 0xfa, "e84b0c599d47dc7c040765ade6efcf1d51bd95f4e05187985b3b29c788f4e94c671d4d6c0c0adceb5d7506f6cef31cd7b6afc5063b76a9d11b9c6201f77819a5b95c8281e1dde1e3143f44a1f246462a2ede8fb4f600d56d79e449ee78370c853024537ade71"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "9d00455227b81fb1"}, @NL80211_ATTR_FILS_ERP_REALM={0x64, 0xfa, "16b105a501938df0aca53f74d975f7fb182ec8ef1603c4c6c0bd421b9f1ef77cb7328d55d3f34fd5b837e79bfee73c5954acf78d6b78d8c8c6cb3e0c0a8955f5b5b386b3d1fe28c8f1e49f0b34730889f19c754abef1f8e1f3311a48ec43d8b0"}], @NL80211_ATTR_IE={0x216, 0x2a, [@perr={0x84, 0x103, {0x5, 0x11, [{{}, @broadcast, 0xfffffeff, @void, 0x16}, {{}, @broadcast, 0x2, @void, 0x10}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x30}, {{0x0, 0x1}, @device_b, 0x5f7a, @value=@broadcast, 0x6}, {{}, @broadcast, 0x40, @void, 0x34}, {{}, @device_a, 0xfce, @void, 0x11}, {{}, @device_b, 0x1, @void, 0xc}, {{}, @device_a, 0x4, @void, 0x28}, {{0x0, 0x1}, @device_b, 0x2, @value=@broadcast, 0x3e}, {{0x0, 0x1}, @device_b, 0x9a31, @value=@broadcast, 0x30}, {{}, @device_b, 0xa6, @void, 0x1c}, {{0x0, 0x1}, @device_b, 0x81, @value, 0xa}, {{}, @broadcast, 0x9, @void, 0x42}, {{}, @device_a, 0x1, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0x10001, @value=@broadcast, 0x32}, {{}, @broadcast, 0x6, @void, 0xc}, {{}, @device_a, 0x8, @void, 0x21}]}}, @measure_req={0x26, 0xf4, {0x3f, 0x8, 0x4, "d2f2f105c88499b2b9cdeb6560a90f24c0ad81dafac583eb751ba7e7a46f6dba6e35d9773c53b4b05ba75ca16a1a0854592dcba2cb6a6996f7ad1ac5172e58a075a63038e6f6b7878f35c452b52d82f96269fb4ef8aa14f21d1a397a26d9d8baf4825f35d86180a5be012465d00bc45192833c6f5d50b0f52c32e2be422c1962217fa8674c5a4c696c7fabcc9c724e01c1b271d2e1f158414c4c4c897536035306770d4d5f2f2172c9694c570d63111d9406a282a318c19710f1e9d40ea164b372c0e2c1df37ff4e12008d6f7e5f2e8e260b9505e641df557f598a8c1b377bef00b04fd50912ab5ec1dceeae1a5ddbe07e"}}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x1, 0x4, @device_b, 0x5, 0x10001, 0x7}}]}]}, 0x9fc}, 0x1, 0x0, 0x0, 0x810}, 0x14) mount_setattr(r2, &(0x7f00000032c0)='./file0\x00', 0x8100, &(0x7f0000003300)={0x88, 0xa, 0x140000, {r1}}, 0x20) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000003340)) (async) r5 = accept4$x25(r2, 0x0, &(0x7f0000003400), 0x800) recvmmsg(r5, &(0x7f0000006200)=[{{&(0x7f0000003440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000034c0)=""/172, 0xac}, {&(0x7f0000003580)=""/42, 0x2a}, {&(0x7f00000035c0)=""/222, 0xde}], 0x3}, 0x4}, {{&(0x7f0000003700)=@generic, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003780)=""/35, 0x23}, {&(0x7f00000037c0)=""/245, 0xf5}, {&(0x7f00000038c0)=""/100, 0x64}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/240, 0xf0}, {&(0x7f0000004a40)=""/87, 0x57}, {&(0x7f0000004ac0)=""/222, 0xde}, {&(0x7f0000004bc0)=""/9, 0x9}, {&(0x7f0000004c00)=""/84, 0x54}], 0x9}, 0x7}, {{&(0x7f0000004d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000006140)=[{&(0x7f0000004dc0)=""/235, 0xeb}, {&(0x7f0000004ec0)=""/180, 0xb4}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/72, 0x48}, {&(0x7f0000006000)=""/15, 0xf}, {&(0x7f0000006040)=""/159, 0x9f}, {&(0x7f0000006100)=""/41, 0x29}], 0x7, &(0x7f00000061c0)=""/62, 0x3e}, 0x400}], 0x3, 0x2020, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000006300)=@o_path={&(0x7f00000062c0)='./file0\x00', 0x0, 0x18, r0}, 0x18) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000006680)={r5, &(0x7f0000006580)='/selinux/avc/hash_stats\x00', 0x802, &(0x7f00000065c0)={@align=0x7, {0x3, 0x2, 0x3, 0x4}}, 0x52, &(0x7f0000006600)={@_ha_fsid}, &(0x7f0000006640)=0xd2}) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000066c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, r2, 0x4}, 0x50) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000006740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, r2, 0x5, 0x3, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000006800)=@bpf_tracing={0x1a, 0xd, &(0x7f0000006340)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0x7, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xd51a}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x56}], &(0x7f00000063c0)='syzkaller\x00', 0x8a, 0xe0, &(0x7f0000006400)=""/224, 0x40f00, 0x21, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000006500)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000006540)={0x2, 0x2, 0x6, 0xbace}, 0x10, 0x25456, r7, 0x0, &(0x7f00000067c0)=[r8, r9, r2, r2, r2, r1], 0x0, 0x10, 0xfffffffb}, 0x94) 1.295953244s ago: executing program 8 (id=4323): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)=0x28) (async) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x10) (async, rerun: 64) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chroot(&(0x7f0000000000)='./bus\x00') (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1008004, &(0x7f00000002c0)={[{@redirect_dir_nofollow}, {@metacopy_on}]}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0xfff3, 0x9}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) (async) r7 = socket$caif_stream(0x25, 0x1, 0x4) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="7569643db2ac7e6013f8b0a0ed9074831356db87fd717af484ce4b317091c6552e51b4c353c2af10640e8735a8f0575408834d9fadb9996644480f31e0773517879cf8667af2d0058340b3bea3215195df3bc30ce1a11cd8a540051e540b096d4868df08585d977cc2dedc46eec63b2adaa873f4e3373a52eea1c02ece903109b9e28591e11a047f67137f9415b590d4be98b87f9ea4b2addc5d7f36652e44cdabf7040047c14ea88114ead710d12417ea20bfafffd73452fc1d67aab5439c90f16471fdf736c9632793beb386ab8e14be699e4d50f1e5b969e7a8af63557a548409fdaff48acde1794a49", @ANYRESHEX=r8, @ANYBLOB="2cc6b7780cbe104500"]) getgroups(0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0xee01, 0x0]) 1.272987693s ago: executing program 8 (id=4324): ioctl$KDSETMODE(0xffffffffffffffff, 0x4b63, 0x3) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc9}}}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/psched\x00') preadv(r1, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet6(r1, &(0x7f0000000000)="448df48c16be1f3ff41ed8cfd52cd3d0b82ae8ebe95824319e58f1780388917b97e36007", 0x24, 0x4, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @empty, 0x6}, 0x1c) fcntl$notify(r2, 0x402, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f00000000c0), 0x0) syz_open_procfs$userns(0xffffffffffffffff, 0x0) 1.265532185s ago: executing program 3 (id=4325): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x5}, 0xa) shutdown(r1, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_ENABLE={{0x5}, 0xd}}}, 0x7) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) futex_waitv(&(0x7f0000000280)=[{0x0, &(0x7f0000000000), 0x2}, {0x0, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4048aec9, &(0x7f0000000080)={0x5, 0xffffffffffffffff, 0x3}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r10, 0x4b64, &(0x7f0000000400)) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x7fff, 0x8}}}}]}, 0x44}}, 0xc000) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000100)=@newlinkprop={0x74, 0x6c, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, 0x0, 0x8200}, [@IFLA_CARRIER={0x5, 0x21, 0xa}, @IFLA_IFALIASn={0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x3}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x2}}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x74}}, 0x11) 752.378574ms ago: executing program 3 (id=4327): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe7c, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x81, 0x20899}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_IFNAME={0x0, 0x3, 'veth0_to_hsr\x00'}]}, 0x40}}, 0x0) 686.79854ms ago: executing program 3 (id=4329): r0 = socket(0x1a, 0x2, 0x24) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8) (async) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) (async) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x204001, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c000200010100d43f00000700030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0xa8, r3, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x80080) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x14, r1, 0x1, 0x0, 0x25dfdc01}, 0x14}, 0x1, 0x400000000000000, 0x0, 0x400c040}, 0x40000) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@remote, @multicast1}, &(0x7f00000000c0)=0xc) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) (async) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4400028040030000000000200072696f72697479000000010000000000000002000000000000000000000000db0301000000000406d77d406c96f7e38b5265fd19260f9eeea885a4", @ANYRES32=r9, @ANYRES16], 0x60}, 0x1, 0x400000000000000}, 0x40000) (async) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 680.818663ms ago: executing program 3 (id=4331): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r4, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x2}}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 454.726955ms ago: executing program 3 (id=4334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4f, 0xa017, 0x8009, 0x3, 0x4, 0x3, 0x7f, 0x24, 0xb, 0x7b, 0x6, 0x7, 0x3, 0x1, 0x1, 0x306ececc, [0x9]}}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000004e80)={0x0, 0x0, &(0x7f0000004e40)={&(0x7f0000000280)={0x30, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x828}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048084}, 0x20048000) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') (async) chroot(&(0x7f0000000080)='./file0/../file0\x00') pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2d, 'cpuacct'}, {0x2b, 'net_cls'}, {0x2b, 'devices'}]}, 0x1b) (async) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2d, 'cpuacct'}, {0x2b, 'net_cls'}, {0x2b, 'devices'}]}, 0x1b) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 454.47968ms ago: executing program 2 (id=4335): socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) userfaultfd(0x1000) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008eb000000000000080002bc876a00010c00028005000100000000000800074000000001000000"], 0x64}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) 454.195325ms ago: executing program 3 (id=4336): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x1}, 0x20) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) (async) sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) sendmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[], 0xc}}], 0x1, 0x4000000) (async) getsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000000000)=""/87, &(0x7f0000000100)=0x57) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x13, {0x7}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) 327.044741ms ago: executing program 2 (id=4337): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1], 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000004400009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x2}, 0x80) 326.63856ms ago: executing program 2 (id=4338): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x6000001d}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="00002cbd7000fedbdf25140000000c009900ffffffff48000000186e071a981659f700118004000100040005000400010004000700040006000500130102000000050029000a0000000600ed00c20600005300ac00a6b177f4cbe59dae85433ee86cb132142ca28e460b04de610cf3bb0a4891e13f1feaa323a40d40ae8a56756d6bd069cf985b434173a7d4443c73e346141afd84f20d6a3b814dc18c70b5d74a468a53000500c200060000002b00be00d680ed6b2832ed45e8a9165daa4f8a81367f9041b12317cf529359b8757f4ef3d9817dcbf901d90006001401000400000a0006000802110000010000"], 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x40) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) recvmmsg(r2, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f00000007c0)=""/72, 0x48}, {&(0x7f0000000840)=""/226, 0xe2}, {&(0x7f0000000640)=""/25, 0x19}, {&(0x7f0000000940)=""/70, 0x46}], 0x5, &(0x7f0000000a40)=""/29, 0x1d}, 0x7}, {{&(0x7f0000000a80)=@nfc_llcp, 0x80, &(0x7f0000001240)=[{&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/155, 0x9b}, {&(0x7f0000000c00)=""/166, 0xa6}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000000e00)=""/207, 0xcf}, {&(0x7f0000000f00)=""/222, 0xde}, {&(0x7f0000001000)=""/45, 0x2d}, {&(0x7f0000001040)=""/200, 0xc8}, {&(0x7f0000001140)=""/230, 0xe6}], 0x9}, 0x1}, {{&(0x7f0000001300)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000004600)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/163, 0xa3}, {&(0x7f0000002440)=""/163, 0xa3}, {&(0x7f0000002500)=""/75, 0x4b}, {&(0x7f0000002580)=""/69, 0x45}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/4096, 0x1000}], 0x7}, 0x9}], 0x3, 0x2020, &(0x7f0000004740)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) (async) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x4c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004810}, 0x4008020) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) (async) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r10, 0x0, 0x0, 0x0, 0x80800}) 186.704161ms ago: executing program 8 (id=4339): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0xa8b}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x1000)=nil) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {0x4, 0x4}, [], {}, {0x20, 0x5}}, 0x24, 0x2) rmdir(&(0x7f0000000000)='./file0\x00') setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x2, 0xbc15, 0x6, 0xca, 0x44e1, 0x3}) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000940)={0x1060, 0x1, 0x5, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x3, 0x3}, 0xa, 0x0, 0x0, 0x6, 0x23, 'syz0\x00', "4d53ddcda0eab75325c808325ee265fa14d89da86fbc150172c49aff9077b9f6", "408b72f2e1eae79b9f14144e62a03232771c1ea45e49c07481db1596955427e7", [{0x1, 0x3, {0x1, 0x5}}, {0x1, 0x7ff, {0x1, 0xffffffff}}, {0x302b, 0x8, {0x1, 0x9}}, {0x0, 0x125, {0x1, 0x2}}, {0x9ab9, 0x3, {0x3, 0x9}}, {0x0, 0x1, {0x901d5df5b7537d72, 0x9}}, {0x8, 0x7, {0x1}}, {0x4e, 0xce, {0x0, 0x5}}, {0x3e, 0x8001, {0x1029bf0b7a1cd3ab, 0x1}}, {0x1, 0x8000, {0x1, 0x6}}, {0x4, 0x1, {0x1, 0x200}}, {0x0, 0xe, {0x2, 0x7}}, {0x7, 0xc00, {0x2, 0x1000}}, {0x7, 0x5, {0x2, 0x2}}, {0x1, 0xf, {0x1, 0x7fffffff}}, {0x682b, 0x101, {0x1, 0x7f}}, {0x9, 0x8001, {0x0, 0x3}}, {0x7, 0x707b, {0x2, 0x2}}, {0x1, 0xac, {0x3, 0x4}}, {0x9, 0x2, {0x1, 0x9}}, {0xef4, 0x9, {0x2}}, {0x401, 0x8, {0x3, 0x3}}, {0x7, 0x8}, {0xb19, 0xc, {0x2}}, {0x5, 0x3ff, {0x1, 0x3ee}}, {0xfffd, 0x5, {0x1, 0xffffffb1}}, {0x7, 0x0, {0x0, 0x7fff}}, {0x8, 0x1, {0x3, 0x8}}, {0x7, 0x9, {0x3, 0x9}}, {0x8, 0xf, {0x1, 0xfffffffa}}, {0x8, 0x5}, {0x0, 0x5, {0x3, 0x8001}}, {0x5e3b, 0x4, {0x1, 0x3}}, {0x3ff, 0x2dc, {0x1, 0x7}}, {0x8, 0x8000, {0x2, 0xffff}}, {0x1, 0x8000, {0x1, 0x39e181d3}}, {0x8000, 0x3ff, {0x3, 0x4}}, {0x1, 0x858c, {0x3, 0x1}}, {0x4, 0x9, {0x0, 0x8}}, {0x4, 0x3ff, {0x2, 0x7fff}}]}}}, {{0x254, 0x1, {{0x3, 0xc3}, 0x2, 0x6, 0x8000, 0xfff0, 0x0, 'syz0\x00', "b3ef6e75b9668b9322a61b72e2fdf62fa5a14f51a8cd9a29392317fc2beef41b", "f4e988ce4c98039e2fa4b3af90eadf5d4dcab0c54a3a6e9fbbad0f7ffc056a21", [{0x1, 0x6, {0x0, 0x8}}, {0x5, 0x8, {0x3, 0x7}}, {0x7, 0x403, {0x2, 0x1}}, {0xda8, 0x3a3, {0x1, 0x3}}, {0xfff9, 0x6, {0x1}}, {0xfff, 0x9, {0x3, 0x56}}, {0xd, 0x400, {0x3, 0x3}}, {0x1ff, 0x8, {0x0, 0xc}}, {0x1000, 0x0, {0x1, 0x5}}, {0x7, 0x0, {0x0, 0x59a98cab}}, {0x6, 0x6, {0x1, 0x2380}}, {0x7fff, 0x2, {0x3, 0x916d}}, {0x1000, 0x40, {0x3, 0x8}}, {0xfffd, 0x7020, {0x1, 0x4}}, {0x1, 0xc, {0x0, 0x120}}, {0x2d, 0x3ff, {0x2, 0x2e}}, {0x611, 0x2, {0x3, 0xffffffff}}, {0x6, 0x84, {0x2, 0x80db}}, {0x5, 0x1, {0x3, 0x6}}, {0x6, 0xbb, {0x0, 0x4}}, {0x24, 0x4, {0xf94343339f5fddcf, 0x5}}, {0x81, 0xe3a, {0x0, 0xfff}}, {0xf6, 0x4, {0x2, 0xec7b}}, {0x1, 0x4, {0x3, 0x6}}, {0xffff, 0x1, {0x0, 0x4}}, {0x1, 0x3, {0x3, 0x5}}, {0x7, 0x3, {0x1, 0x7}}, {0x401, 0xb, {0x814c144b0756bbb2, 0x3}}, {0xc8, 0x3ff}, {0x26, 0xff, {0x0, 0xa1f3}}, {0x0, 0x7, {0x3, 0x6}}, {0xfffe, 0x7, {0x2, 0x6}}, {0x3, 0x0, {0x1, 0x3}}, {0x6, 0xd500, {0x0, 0x9}}, {0x3, 0x62, {0x0, 0x4}}, {0xa, 0x401, {0x0, 0x60dd4632}}, {0x3, 0x200, {0x3, 0x2}}, {0x7fff, 0x3f4f, {0x2, 0x7}}, {0xe120, 0x9, {0x3, 0x6}}, {0xea, 0x8, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x6, 0xff, 0x8, 0x6, 0x20, 'syz1\x00', "5ce59e15d0b373356b84f943f16a499d884a097c095b5290d51c65c425573abb", "7056fd30aeb5be45a4dde3fc600c5e75f0531503abbf299422f0bfbca75983b4", [{0x3, 0xdd8b, {0x1, 0x7}}, {0x6, 0x572, {0xa1ab46fe5b7778af, 0x8000}}, {0x81, 0x1000, {0x0, 0xffffffff}}, {0x2, 0x200}, {0x4, 0x1000, {0x2, 0x5}}, {0x2, 0x6}, {0x4, 0xfff7, {0x2, 0x2}}, {0x401, 0x81, {0x3, 0x101}}, {0x0, 0x6, {0x2, 0xa9}}, {0x4, 0x5, {0x0, 0x10000}}, {0xb86f, 0x3, {0x3, 0xa0}}, {0x5, 0x21, {0x2, 0xd}}, {0x5, 0x5, {0x2, 0x2}}, {0x9, 0x200, {0x1, 0x2}}, {0xffff, 0xfff, {0x3, 0x8}}, {0x1b9e, 0x9, {0x3, 0x200}}, {0x8, 0x249, {0x3, 0xbc53}}, {0x4, 0x9, {0x3, 0xffff68aa}}, {0x5, 0x3, {0x1, 0x6}}, {0x0, 0x3, {0x2, 0xfd}}, {0x7, 0xd, {0x1, 0x8}}, {0x2, 0x2, {0x2, 0x5}}, {0x401, 0x1, {0x0, 0x7}}, {0x2, 0x3ee, {0x0, 0x198}}, {0x1, 0x3, {0x0, 0x1}}, {0x5, 0x2, {0x3, 0x3}}, {0x0, 0x3, {0x3, 0x2}}, {0x8, 0x8, {0x2, 0x1}}, {0xe3c4, 0x0, {0x1, 0xcc8a}}, {0x0, 0x5, {0x2, 0xb}}, {0x6, 0x7, {0x1, 0x5}}, {0x7f, 0x8000, {0x1, 0x4}}, {0x9, 0x0, {0x3, 0x9}}, {0x0, 0x7, {0x0, 0x9}}, {0x3, 0xff, {0x1}}, {0x7609, 0xfff8, {0x4, 0x6}}, {0xa, 0x88f, {0x8995d21b2534b066, 0x680b}}, {0x1ff, 0x8000, {0xc89b3260507108d4, 0xe99}}, {0xd8, 0x1, {0x3, 0x6}}, {0x9, 0x400, {0x3, 0xed}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x7, 0xb, 0x4, 0x0, 0x10, 'syz1\x00', "a3645084ba4ce7517d2bd47431b4dbcad5f4a08393c4d74fa67edf47ec3684c7", "89043fdebdcf789665cc807f24233e7454d1456fb8cad3cb15c86d214039b6b6", [{0x8, 0x7, {0x3, 0xd}}, {0x1, 0x1ff, {0x3, 0xbfda3934}}, {0xff, 0x1, {0x2, 0x1000}}, {0x1000, 0x401, {0x2, 0x8}}, {0x0, 0x3, {0x0, 0x6}}, {0x3, 0x0, {0x3, 0x1}}, {0x800, 0x8f8, {0x1}}, {0x8, 0xfffd, {0x3, 0x927}}, {0xa45, 0x9}, {0xd, 0xab88, {0x3, 0xd2c}}, {0xfff9, 0x9, {0x3, 0x8}}, {0x9, 0xd, {0x3, 0x2}}, {0x3, 0x1, {0x3, 0xffffff69}}, {0x0, 0xc1, {0x3, 0x2}}, {0x9, 0x1}, {0xc12, 0x5, {0x2, 0x9}}, {0x80, 0x2, {0x3, 0x9}}, {0x5b32, 0x9, {0x1, 0x5}}, {0x4d, 0x1000, {0x0, 0x6}}, {0x9, 0x1, {0x2, 0xc}}, {0x8, 0x4, {0x3, 0x2}}, {0x8, 0x7, {0x3, 0xfffffac1}}, {0xccf1, 0x7, {0x1, 0x200}}, {0x7, 0x39c2, {0x2, 0x8}}, {0x7, 0x9, {0x2, 0x80000001}}, {0x3, 0x800, {0x0, 0x8f}}, {0x2, 0x3, {0x3, 0xf}}, {0x8, 0x2, {0x0, 0x5}}, {0x401, 0x5, {0x2, 0x8}}, {0x7, 0x8f8a, {0x0, 0x2}}, {0xf801, 0xffff, {0x2, 0x3}}, {0xc1, 0x100, {0x3, 0x7ff}}, {0x0, 0xf, {0x1, 0x1000}}, {0x2, 0x3, {0x2, 0x5}}, {0x8, 0x6, {0x1, 0x77}}, {0x8, 0x1, {0x0, 0x1}}, {0x3, 0x0, {0x3, 0x4}}, {0xd, 0x840f, {0x1, 0x5}}, {0xb28d, 0x401, {0x1, 0x3}}, {0x40, 0xfb, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x3, 0xb6, 0x40, 0x3, 0x15, 'syz1\x00', "23838badb45af243edfa9a5800ec1a1b4435ded145930e3810c854929bd3511e", "3cc5255dc2c8a27f3943343835796fc3ca4eb71edead4318040f97b4b27e31af", [{0x3, 0x7fff, {0x1, 0x8}}, {0x0, 0x0, {0x0, 0x6}}, {0x1, 0x8000, {0x2}}, {0xb, 0x6, {0x0, 0x11ca}}, {0x3, 0x3, {0x2, 0x90ba}}, {0x3e3, 0x2, {0x2, 0x5e9}}, {0x1, 0x401, {0x2, 0x1}}, {0x100, 0x9, {0x1, 0x4}}, {0xc, 0x8, {0x1, 0x2db5}}, {0x7ff, 0x3, {0x1, 0x2}}, {0x6, 0x586, {0x1, 0x2d9}}, {0x1, 0xc, {0x2, 0xb3}}, {0x1, 0x3, {0x0, 0x8}}, {0x9, 0x4, {0x2, 0x200}}, {0x1, 0x8, {0x3, 0x4}}, {0x2, 0x5, {0x1, 0x4}}, {0x0, 0x9}, {0xd, 0x1, {0x2, 0x1}}, {0x1, 0x5, {0x0, 0x15e3}}, {0x1000, 0x1996, {0x2, 0x7}}, {0xa, 0x8000, {0x0, 0x237}}, {0x3, 0xfffe, {0x0, 0xca}}, {0x7, 0x8, {0x1, 0xa}}, {0xf4c, 0x3, {0x1, 0x9}}, {0xe, 0x8001, {0x0, 0x3}}, {0x5, 0x5, {0x3, 0x2}}, {0x392, 0xff, {0x0, 0x7ff}}, {0x7, 0x3, {0x2, 0x1}}, {0x9, 0x6, {0x3}}, {0x9f, 0x7, {0x3, 0x4}}, {0x40, 0x5, {0x1, 0x7}}, {0x0, 0x9, {0x0, 0x1ff}}, {0x7f, 0x0, {0x0, 0x33e5c7b8}}, {0x1, 0x8, {0x2, 0x1}}, {0x7, 0xb4e1, {0x1, 0x2}}, {0x401, 0x8241, {0x1, 0x20000000}}, {0x8, 0x1, {0x1, 0x8}}, {0x6, 0x0, {0x1, 0x7}}, {0xa33, 0x4, {0x3, 0x9}}, {0x2, 0xc65f, {0x3, 0xc5}}]}}}, {{0x254, 0x1, {{0x3, 0x7fffffff}, 0x9, 0x3, 0x4, 0xffff, 0xa, 'syz1\x00', "9dfc5c51548fc3457b2519cfecc22ee63c43ad87a4b0195a3f6256b004bf4f7e", "5b6d73ae561ea0abe84e91dbd969b32f697d67dcd833f76e9c971e6dfe0834dc", [{0xf, 0x5, {0x0, 0x6}}, {0xe, 0x4, {0x2, 0x12}}, {0x2, 0x7, {0x0, 0xaa4}}, {0x6, 0x2, {0x2, 0x5}}, {0x0, 0x400, {0x2, 0xb}}, {0x5, 0x0, {0x2, 0x5}}, {0x8, 0x2, {0x2, 0xd}}, {0x9, 0xfff, {0x0, 0x8000}}, {0x7, 0xffff, {0x3, 0x3}}, {0x8001, 0xf, {0x2, 0x40}}, {0x5, 0xffff, {0x2, 0x1}}, {0x1, 0x3ff, {0x0, 0x400}}, {0x0, 0x73fb, {0x0, 0x1}}, {0x7, 0x5, {0x3, 0x7}}, {0x1, 0x7, {0x3, 0x2}}, {0x8, 0x78c2, {0x1, 0x7}}, {0x64, 0x3, {0x1, 0x8}}, {0x8001, 0xff, {0x3, 0x9}}, {0x3, 0x6e68, {0x1, 0x5}}, {0x9, 0x1000, {0x3, 0xfb}}, {0x4, 0x80, {0x2}}, {0x6, 0x3, {0x0, 0x8}}, {0x200, 0xff38, {0x0, 0x3}}, {0x48, 0x0, {0x1}}, {0xc9, 0x81, {0x1, 0x10000}}, {0x9, 0x4, {0x0, 0x5}}, {0x0, 0x4, {0x3, 0x2bf4}}, {0x8c, 0x5, {0x1, 0x7fffffff}}, {0x2, 0x7fff, {0x1, 0x6}}, {0x8, 0x6, {0x1, 0x7}}, {0xf, 0x7, {0x2, 0x6}}, {0x1000, 0x6, {0x1, 0xf439}}, {0x9, 0x40, {0x1, 0x2}}, {0x5, 0x4, {0x1, 0x4}}, {0x400, 0x2, {0x2, 0x559c7ba5}}, {0x7, 0x7, {0x2, 0x6}}, {0x101, 0xff, {0x3, 0x3}}, {0x0, 0x3, {0x2, 0xa}}, {0xb, 0x8f, {0x2, 0x1}}, {0x2, 0x81, {0x3, 0x80000001}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x3, 0x8c, 0xf, 0xfffe, 0x15, 'syz1\x00', "db63404c1f84b7a0525770e5656e60300dd2a2a2a1f127a27e06dd9c60911cc6", "9f0c74aa4e1096231b4d957c05e16d3e76dd6e15406a7e664089f9b7da9811b4", [{0x5, 0x1, {0x1, 0x2}}, {0x0, 0xce97, {0x1, 0x8}}, {0xfffa, 0xfff5, {0x3, 0x7fffffff}}, {0x15bf, 0x9c18, {0x3, 0x233}}, {0x6, 0x6, {0x0, 0x7fffffff}}, {0xfff, 0x3, {0x3, 0x8}}, {0x5, 0xfffa, {0x2, 0x200}}, {0xff65, 0x5, {0x0, 0x73}}, {0x1, 0x6, {0x3, 0x8}}, {0x200, 0x0, {0x0, 0x1}}, {0x4fe, 0xe000, {0x3, 0x2}}, {0x13, 0x4, {0x2, 0x8001}}, {0x8, 0x5, {0x1, 0x4}}, {0x7, 0xd0, {0x1, 0x7ff}}, {0xa, 0x4, {0x0, 0x5}}, {0xf, 0xff01, {0x3, 0x57}}, {0x401, 0x6, {0x0, 0x6}}, {0x6925, 0x400, {0x2, 0x9}}, {0xebb, 0x8000, {0x2, 0x3}}, {0x0, 0x8000, {0x2, 0x2}}, {0xb, 0x0, {0x3, 0x9}}, {0x101, 0x6a, {0x2, 0xfffffff9}}, {0xaf62, 0x9, {0x0, 0x7ff}}, {0xbe9c, 0x60, {0x2, 0xa}}, {0x7, 0x3ff, {0x2, 0x6}}, {0x7f1, 0xfff5, {0x2, 0x9}}, {0x5ec, 0x0, {0x2, 0x1}}, {0x0, 0x6, {0x1}}, {0x0, 0x9, {0x3, 0x40}}, {0xe024, 0x6, {0x1, 0xfffffffb}}, {0xffff, 0x2, {0x1, 0x2}}, {0xff, 0x8, {0x1, 0x6}}, {0xd, 0x1dd7, {0x3, 0x9}}, {0x1000, 0x800, {0x2, 0x8}}, {0x2, 0x1f, {0x2, 0x2}}, {0x3, 0x5, {0x2, 0x401}}, {0x4, 0x4000, {0x1, 0x5}}, {0xe5ca, 0x3, {0x3, 0x5170}}, {0x6da4, 0xb, {0x3}}, {0x7, 0xd, {0x2, 0x5}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x8000}, 0x14804) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) write(r6, &(0x7f0000000180)="c77e2bc21cadb3282872b096119fbddff7badf91721817bfa6ab957122db0fa2637e396dbedcb57f8aeca5676084385ba4b402f54ac8fcbfd9c4c5b53121b4465032fc4bdafea49a79b1fc1322449a52e7efcbede3043c6daa5dce252d7a68ccda6b78a0a777d65c67260dbd9f580539d99e71e9c6d50d10cef5112d76f0fcc704346b40c9722ba82ced131146abcc59325983a8c995379d716662cdffab1dadcaa0499418690b8527c2148e35beca226496ce3b6711b7b49362539ee89163d00c", 0xc1) 184.661268ms ago: executing program 2 (id=4340): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000880)={@empty, @broadcast, 0x1e, 0x12}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000001c0)={0x40f0f022}) r2 = socket(0x11, 0x2, 0x1) setsockopt(r2, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) setsockopt(r2, 0x107, 0x2, &(0x7f00000001c0)="fcff00000100060000071a80010061cc", 0x10) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x9, 0x5, 0x88, 0x3, 0x10000, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f0000000040)={0x2, 0x200, 0x6a5, 0x7, 0x1, 0xf2, 0x5, 0x80, 0xfffffff9, 0x3, 0xc10d, 0x3, 0x5, 0x800}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r4, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000180)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000100000001000000000000008f00"/28], 0x50) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x30008000) mmap(&(0x7f0000eee000/0x2000)=nil, 0x2000, 0x4, 0x80010, r4, 0x26ee3000) copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0x6068, 0xffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x43033, 0xffffffffffffffff, 0x0) 71.098913ms ago: executing program 2 (id=4341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x2, 0x259}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, 0x0, 0x2) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000240)=[0x10000, 0x7], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000020900010073797a30000000000900030073797a30000000003c000000060a010400000000000000000500400008000b4000000000200004801c0001800b00010074756e6e656c00000c1402800800034000000000140000001100010000000000000000000000000a"], 0xb0}}, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101201, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={r5, 0x44}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r5, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x2, 0x31}, &(0x7f0000000100)=0x90) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 6.478066ms ago: executing program 8 (id=4342): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x2, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0x8d, ""/141}) 307.179µs ago: executing program 2 (id=4343): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x2, 0x1}}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 0s ago: executing program 8 (id=4344): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x119000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x0, 0x80, 0x2, 0x800, 0x4, 0x3e7, 0x2, 0x300, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r4}) sendmmsg$unix(r2, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x20040001) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0}) kernel console output (not intermixed with test programs): int 0x81 has invalid wMaxPacketSize 0 [ 319.248736][ T6010] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 319.254137][ T6010] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.257423][ T6010] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.271888][ T6010] usb 13-1: config 0 descriptor?? [ 319.601310][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.709817][ T6010] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 319.713487][ T6010] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 319.716903][ T6010] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 319.720660][ T6010] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 319.724301][ T6010] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 319.727906][ T6010] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 319.731652][ T6010] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 319.735384][ T6010] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 319.738766][ T6010] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 319.741932][ T6010] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 319.750753][ T6010] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 319.987377][T18728] vlan0: entered promiscuous mode [ 320.072198][T15971] usb 13-1: USB disconnect, device number 18 [ 320.153864][T18766] tmpfs: Bad value for 'mpol' [ 320.157667][T18766] tmpfs: Bad value for 'mpol' [ 320.274639][T18774] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(13) [ 320.274666][T18774] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 320.280622][T18774] vhci_hcd vhci_hcd.0: Device attached [ 320.285155][T18776] vhci_hcd: connection closed [ 320.292447][T10271] vhci_hcd vhci_hcd.8: stop threads [ 320.293918][T10271] vhci_hcd vhci_hcd.8: release socket [ 320.294064][T10271] vhci_hcd vhci_hcd.8: disconnect device [ 320.579099][T18789] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 320.583294][T18789] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 320.699113][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 320.971990][ T6002] usb 8-1: USB disconnect, device number 31 [ 321.022120][T18806] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 321.026327][T18806] bond0: (slave sit0): Error -95 calling set_mac_address [ 321.031372][T18806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.049446][T18806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.083448][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3640'. [ 321.088579][T18773] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 321.215365][T18827] atomic_op ffff88804015e998 conn xmit_atomic 0000000000000000 [ 321.319314][T18842] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 321.349809][T18844] binder: 18840:18844 ioctl c0306201 0 returned -14 [ 321.468412][ T63] Bluetooth: hci0: unexpected event for opcode 0x6681 [ 321.477157][T15971] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 321.478857][T18851] input: syz0 as /devices/virtual/input/input62 [ 321.637421][T15971] usb 14-1: Using ep0 maxpacket: 32 [ 321.641895][T15971] usb 14-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 321.646383][T15971] usb 14-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 321.652500][T15971] usb 14-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 321.657267][T15971] usb 14-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 321.666440][T15971] usb 14-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 321.670955][T15971] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.674636][T15971] usb 14-1: Product: syz [ 321.676539][T15971] usb 14-1: Manufacturer: syz [ 321.678768][T15971] usb 14-1: SerialNumber: syz [ 321.697480][T15971] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 321.701503][T15971] imon 14-1:155.0: unable to initialize intf0, err -19 [ 321.704827][T15971] imon:imon_probe: failed to initialize context! [ 321.707667][T15971] imon 14-1:155.0: unable to register, err -19 [ 321.807579][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 322.164179][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3657'. [ 322.321044][T18878] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 322.414752][T18885] 8021q: VLANs not supported on wg1 [ 322.453684][T18887] SELinux: syz.3.3662 (18887) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 322.508792][T18888] netlink: 'syz.3.3662': attribute type 1 has an invalid length. [ 322.512574][T18888] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 322.517385][T18888] Error validating options; rc = [-22] [ 322.916095][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 323.254076][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 323.254092][ T40] audit: type=1400 audit(2000000057.730:981): avc: denied { node_bind } for pid=18890 comm="syz.8.3663" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 323.333318][T18894] netlink: 'syz.7.3664': attribute type 1 has an invalid length. [ 323.347782][T18894] bond1: entered promiscuous mode [ 323.350135][T18894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.395802][T18894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 323.399786][T18894] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 323.404810][T18894] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 323.413119][T18894] bond1: (slave vxcan3): making interface the new active one [ 323.417791][T18894] vxcan3: entered promiscuous mode [ 323.422163][T18894] vxcan3: left promiscuous mode [ 323.605751][T18899] wg1 speed is unknown, defaulting to 1000 [ 323.694217][T15519] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 323.697683][T15519] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 323.804032][ T40] audit: type=1400 audit(2000000058.246:982): avc: denied { ioctl } for pid=18902 comm="syz.7.3666" path="/dev/ptyr2" dev="devtmpfs" ino=145 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 324.024497][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 324.190451][T18905] binder: 18904:18905 ioctl c0306201 0 returned -14 [ 324.426424][T15971] usb 14-1: USB disconnect, device number 2 [ 324.988047][T18929] bond2 (unregistering): Released all slaves [ 325.142977][T18936] netlink: 240 bytes leftover after parsing attributes in process `syz.7.3676'. [ 325.146543][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 325.156518][T18936] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3676'. [ 325.311672][T18942] x_tables: duplicate underflow at hook 3 [ 325.315318][T18942] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3678'. [ 325.360888][T18946] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 325.869082][T18970] binder: 18969:18970 ioctl c0306201 0 returned -14 [ 325.900227][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 325.902602][T15519] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 325.904716][T15519] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 326.084886][ T40] audit: type=1326 audit(2000000060.395:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.9.3688" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9589f9c799 code=0x0 [ 326.219897][ T40] audit: type=1800 audit(2000000060.508:984): pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.3692" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 326.252017][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 326.306222][T18995] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3696'. [ 326.829619][T19013] netem: incorrect gi model size [ 326.831978][T19013] netem: change failed [ 326.902930][T19015] wg1 speed is unknown, defaulting to 1000 [ 327.357419][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 327.398463][T19022] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 327.410863][ T40] audit: type=1400 audit(2000000061.634:985): avc: denied { execute } for pid=19023 comm="syz.9.3704" path="/108/file0/cpu.stat" dev="overlay" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 327.443000][T19022] bond4 (unregistering): Released all slaves [ 327.605944][T19027] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 327.608670][T19027] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 327.611322][T19027] vhci_hcd vhci_hcd.0: Device attached [ 327.614852][T19027] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(6) [ 327.617840][T19027] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 327.623306][T19027] vhci_hcd vhci_hcd.0: Device attached [ 327.629376][T19032] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(9) [ 327.631596][T19032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 327.634157][T19027] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(11) [ 327.636972][T19027] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 327.641524][T19027] vhci_hcd vhci_hcd.0: Device attached [ 327.641536][T19032] vhci_hcd vhci_hcd.0: Device attached [ 327.650020][T19034] vhci_hcd: connection closed [ 327.650294][T10282] vhci_hcd vhci_hcd.7: stop threads [ 327.650395][T19033] vhci_hcd: connection closed [ 327.652237][T10282] vhci_hcd vhci_hcd.7: release socket [ 327.655092][T19028] vhci_hcd: connection closed [ 327.656163][T19030] vhci_hcd: connection closed [ 327.659039][T10282] vhci_hcd vhci_hcd.7: disconnect device [ 327.665414][T10282] vhci_hcd vhci_hcd.7: stop threads [ 327.667384][T10282] vhci_hcd vhci_hcd.7: release socket [ 327.669227][T10282] vhci_hcd vhci_hcd.7: disconnect device [ 327.674770][T10282] vhci_hcd vhci_hcd.7: stop threads [ 327.677150][T10282] vhci_hcd vhci_hcd.7: release socket [ 327.679603][T10282] vhci_hcd vhci_hcd.7: disconnect device [ 327.682405][T10282] vhci_hcd vhci_hcd.7: stop threads [ 327.684372][T10282] vhci_hcd vhci_hcd.7: release socket [ 327.686440][T10282] vhci_hcd vhci_hcd.7: disconnect device [ 327.695688][T19041] virtio-fs: tag not found [ 327.850113][ T40] audit: type=1400 audit(2000000062.037:986): avc: denied { create } for pid=19047 comm="syz.9.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 327.882710][ T40] audit: type=1400 audit(2000000062.065:987): avc: denied { write } for pid=19047 comm="syz.9.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 328.253358][T19063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=19063 comm=syz.9.3713 [ 328.318603][T19072] cgroup2: Unknown parameter 'euid' [ 328.332801][T19072] syzkaller0: entered promiscuous mode [ 328.335337][T19072] syzkaller0: entered allmulticast mode [ 328.394270][ T40] audit: type=1400 audit(2000000062.553:988): avc: denied { ioctl } for pid=19081 comm="syz.8.3719" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 328.458173][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 328.462900][T19088] fuse: Bad value for 'fd' [ 328.481550][T15519] hid_parser_main: 5 callbacks suppressed [ 328.481571][T15519] hid-generic 0005:000B:0009.0010: unknown main item tag 0x0 [ 328.488689][T15519] hid-generic 0005:000B:0009.0010: unknown main item tag 0x0 [ 328.492505][T15519] hid-generic 0005:000B:0009.0010: unknown main item tag 0x0 [ 328.495964][T15519] hid-generic 0005:000B:0009.0010: unknown main item tag 0x0 [ 328.497297][T19093] IPVS: length: 120 != 24 [ 328.499341][T15519] hid-generic 0005:000B:0009.0010: unknown main item tag 0x0 [ 328.505740][T15519] hid-generic 0005:000B:0009.0010: unknown main item tag 0x0 [ 328.509076][T15519] hid-generic 0005:000B:0009.0010: unknown main item tag 0x0 [ 328.512502][T15519] hid-generic 0005:000B:0009.0010: unknown main item tag 0x0 [ 328.515914][T15519] hid-generic 0005:000B:0009.0010: unknown main item tag 0x0 [ 328.519302][T15519] hid-generic 0005:000B:0009.0010: unknown main item tag 0x0 [ 328.553167][T15519] hid-generic 0005:000B:0009.0010: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on syz1 [ 328.567967][T19095] efs: cannot read volume header [ 328.593011][T19098] fido_id[19098]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 328.607574][T19101] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 328.716955][T19112] netlink: 'syz.8.3729': attribute type 2 has an invalid length. [ 328.720736][T19113] netlink: 'syz.8.3729': attribute type 2 has an invalid length. [ 328.953701][T19127] ISOFS: Unable to identify CD-ROM format. [ 329.046173][T19133] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3736'. [ 329.075872][T19139] ip6t_rpfilter: unknown options [ 329.119698][T19146] ipt_REJECT: TCP_RESET invalid for non-tcp [ 329.172762][T15971] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 329.312743][T15971] usb 12-1: device descriptor read/64, error -71 [ 329.418507][T19169] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.3749'. [ 329.543398][T19175] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3750'. [ 329.566620][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 329.585736][T19175] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 329.588157][T15971] usb 12-1: new high-speed USB device number 31 using dummy_hcd [ 329.593598][T19175] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3750'. [ 329.691068][T19180] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19180 comm=syz.8.3752 [ 329.698031][T19180] netlink: 'syz.8.3752': attribute type 2 has an invalid length. [ 329.708994][T19181] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19181 comm=syz.8.3752 [ 329.726496][T15971] usb 12-1: device descriptor read/64, error -71 [ 329.801441][T19185] loop5: detected capacity change from 0 to 7 [ 329.855125][T15971] usb usb12-port1: attempt power cycle [ 329.962498][T18693] Dev loop5: unable to read RDB block 7 [ 329.964425][T18693] loop5: unable to read partition table [ 329.966424][T18693] loop5: partition table beyond EOD, truncated [ 329.972418][T19185] Dev loop5: unable to read RDB block 7 [ 329.974674][T19185] loop5: unable to read partition table [ 329.976699][T19185] loop5: partition table beyond EOD, truncated [ 329.978882][T19185] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 330.016999][T19189] vlan0: entered allmulticast mode [ 330.116020][T19192] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3755'. [ 330.121364][T19192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32088 sclass=netlink_route_socket pid=19192 comm=syz.8.3755 [ 330.216810][T15971] usb 12-1: new high-speed USB device number 32 using dummy_hcd [ 330.241315][T15971] usb 12-1: device descriptor read/8, error -71 [ 330.247873][T19199] afs: Unknown parameter 'dyndӈ J [ 330.247873][T19199] [ 330.247873][T19199] /1c~[8a' [ 330.252087][T19199] afs: Unknown parameter 'dyndӈ J [ 330.252087][T19199] [ 330.252087][T19199] /1c~[8a' [ 330.255951][T19199] afs: Unknown parameter 'dyndӈ J [ 330.255951][T19199] [ 330.255951][T19199] /1c~[8a' [ 330.260333][T19199] afs: Unknown parameter 'dyndӈ J [ 330.260333][T19199] [ 330.260333][T19199] /1c~[8a' [ 330.264250][T19199] afs: Unknown parameter 'dyndӈ J [ 330.264250][T19199] [ 330.264250][T19199] /1c~[8a' [ 330.268274][T19199] afs: Unknown parameter 'dyndӈ J [ 330.268274][T19199] [ 330.268274][T19199] /1c~[8a' [ 330.273450][T19199] afs: Unknown parameter 'dyndӈ J [ 330.273450][T19199] [ 330.273450][T19199] /1c~[8a' [ 330.277363][T19199] afs: Unknown parameter 'dyndӈ J [ 330.277363][T19199] [ 330.277363][T19199] /1c~[8a' [ 330.282350][T19199] afs: Unknown parameter 'dyndӈ J [ 330.282350][T19199] [ 330.282350][T19199] /1c~[8a' [ 330.286413][T19199] afs: Unknown parameter 'dyndӈ J [ 330.286413][T19199] [ 330.286413][T19199] /1c~[8a' [ 330.290296][T19199] afs: Unknown parameter 'dyndӈ J [ 330.290296][T19199] [ 330.290296][T19199] /1c~[8a' [ 330.293489][T19205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3759'. [ 330.294857][T19199] afs: Unknown parameter 'dyndӈ J [ 330.294857][T19199] [ 330.294857][T19199] /1c~[8a' [ 330.300607][T19199] afs: Unknown parameter 'dyndӈ J [ 330.300607][T19199] [ 330.300607][T19199] /1c~[8a' [ 330.305508][T19199] afs: Unknown parameter 'dyndӈ J [ 330.305508][T19199] [ 330.305508][T19199] /1c~[8a' [ 330.309558][T19199] afs: Unknown parameter 'dyndӈ J [ 330.309558][T19199] [ 330.309558][T19199] /1c~[8a' [ 330.313830][T19199] afs: Unknown parameter 'dyndӈ J [ 330.313830][T19199] [ 330.313830][T19199] /1c~[8a' [ 330.317815][T19199] afs: Unknown parameter 'dyndӈ J [ 330.317815][T19199] [ 330.317815][T19199] /1c~[8a' [ 330.321852][T19199] afs: Unknown parameter 'dyndӈ J [ 330.321852][T19199] [ 330.321852][T19199] /1c~[8a' [ 330.327006][T19199] afs: Unknown parameter 'dyndӈ J [ 330.327006][T19199] [ 330.327006][T19199] /1c~[8a' [ 330.330669][T19208] syzkaller0: entered promiscuous mode [ 330.331027][T19199] afs: Unknown parameter 'dyndӈ J [ 330.331027][T19199] [ 330.331027][T19199] /1c~[8a' [ 330.333042][T19208] syzkaller0: entered allmulticast mode [ 330.337961][T19199] afs: Unknown parameter 'dyndӈ J [ 330.337961][T19199] [ 330.337961][T19199] /1c~[8a' [ 330.338109][T19204] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 330.342808][T19204] fuse: Bad value for 'user_id' [ 330.343476][T19199] afs: Unknown parameter 'dyndӈ J [ 330.343476][T19199] [ 330.343476][T19199] /1c~[8a' [ 330.353163][T19204] fuse: Bad value for 'user_id' [ 330.354319][T19199] afs: Unknown parameter 'dyndӈ J [ 330.354319][T19199] [ 330.354319][T19199] /1c~[8a' [ 330.359169][T19199] afs: Unknown parameter 'dyndӈ J [ 330.359169][T19199] [ 330.359169][T19199] /1c~[8a' [ 330.363073][T19199] afs: Unknown parameter 'dyndӈ J [ 330.363073][T19199] [ 330.363073][T19199] /1c~[8a' [ 330.367270][T19199] afs: Unknown parameter 'dyndӈ J [ 330.367270][T19199] [ 330.367270][T19199] /1c~[8a' [ 330.371265][T19199] afs: Unknown parameter 'dyndӈ J [ 330.371265][T19199] [ 330.371265][T19199] /1c~[8a' [ 330.375558][T19199] afs: Unknown parameter 'dyndӈ J [ 330.375558][T19199] [ 330.375558][T19199] /1c~[8a' [ 330.379424][T19199] afs: Unknown parameter 'dyndӈ J [ 330.379424][T19199] [ 330.379424][T19199] /1c~[8a' [ 330.383514][T19199] afs: Unknown parameter 'dyndӈ J [ 330.383514][T19199] [ 330.383514][T19199] /1c~[8a' [ 330.387552][T19199] afs: Unknown parameter 'dyndӈ J [ 330.387552][T19199] [ 330.387552][T19199] /1c~[8a' [ 330.392109][T19199] afs: Unknown parameter 'dyndӈ J [ 330.392109][T19199] [ 330.392109][T19199] /1c~[8a' [ 330.396311][T19199] afs: Unknown parameter 'dyndӈ J [ 330.396311][T19199] [ 330.396311][T19199] /1c~[8a' [ 330.400590][T19199] afs: Unknown parameter 'dyndӈ J [ 330.400590][T19199] [ 330.400590][T19199] /1c~[8a' [ 330.404573][T19199] afs: Unknown parameter 'dyndӈ J [ 330.404573][T19199] [ 330.404573][T19199] /1c~[8a' [ 330.410017][T19199] afs: Unknown parameter 'dyndӈ J [ 330.410017][T19199] [ 330.410017][T19199] /1c~[8a' [ 330.415116][T19199] afs: Unknown parameter 'dyndӈ J [ 330.415116][T19199] [ 330.415116][T19199] /1c~[8a' [ 330.420133][T19199] afs: Unknown parameter 'dyndӈ J [ 330.420133][T19199] [ 330.420133][T19199] /1c~[8a' [ 330.425090][T19199] afs: Unknown parameter 'dyndӈ J [ 330.425090][T19199] [ 330.425090][T19199] /1c~[8a' [ 330.430059][T19199] afs: Unknown parameter 'dyndӈ J [ 330.430059][T19199] [ 330.430059][T19199] /1c~[8a' [ 330.434513][T19199] afs: Unknown parameter 'dyndӈ J [ 330.434513][T19199] [ 330.434513][T19199] /1c~[8a' [ 330.438757][T19199] afs: Unknown parameter 'dyndӈ J [ 330.438757][T19199] [ 330.438757][T19199] /1c~[8a' [ 330.443245][T19199] afs: Unknown parameter 'dyndӈ J [ 330.443245][T19199] [ 330.443245][T19199] /1c~[8a' [ 330.448243][T19199] afs: Unknown parameter 'dyndӈ J [ 330.448243][T19199] [ 330.448243][T19199] /1c~[8a' [ 330.452755][T19199] afs: Unknown parameter 'dyndӈ J [ 330.452755][T19199] [ 330.452755][T19199] /1c~[8a' [ 330.457055][T19199] afs: Unknown parameter 'dyndӈ J [ 330.457055][T19199] [ 330.457055][T19199] /1c~[8a' [ 330.461076][T19199] afs: Unknown parameter 'dyndӈ J [ 330.461076][T19199] [ 330.461076][T19199] /1c~[8a' [ 330.465376][T19199] afs: Unknown parameter 'dyndӈ J [ 330.465376][T19199] [ 330.465376][T19199] /1c~[8a' [ 330.469135][T19199] afs: Unknown parameter 'dyndӈ J [ 330.469135][T19199] [ 330.469135][T19199] /1c~[8a' [ 330.473226][T19199] afs: Unknown parameter 'dyndӈ J [ 330.473226][T19199] [ 330.473226][T19199] /1c~[8a' [ 330.477330][T19199] afs: Unknown parameter 'dyndӈ J [ 330.477330][T19199] [ 330.477330][T19199] /1c~[8a' [ 330.481374][T19199] afs: Unknown parameter 'dyndӈ J [ 330.481374][T19199] [ 330.481374][T19199] /1c~[8a' [ 330.485393][T19199] afs: Unknown parameter 'dyndӈ J [ 330.485393][T19199] [ 330.485393][T19199] /1c~[8a' [ 330.489400][T19199] afs: Unknown parameter 'dyndӈ J [ 330.489400][T19199] [ 330.489400][T19199] /1c~[8a' [ 330.493422][T19199] afs: Unknown parameter 'dyndӈ J [ 330.493422][T19199] [ 330.493422][T19199] /1c~[8a' [ 330.498345][T19199] afs: Unknown parameter 'dyndӈ J [ 330.498345][T19199] [ 330.498345][T19199] /1c~[8a' [ 330.503593][T19199] afs: Unknown parameter 'dyndӈ J [ 330.503593][T19199] [ 330.503593][T19199] /1c~[8a' [ 330.504581][T15971] usb 12-1: new high-speed USB device number 33 using dummy_hcd [ 330.509618][T19199] afs: Unknown parameter 'dyndӈ J [ 330.509618][T19199] [ 330.509618][T19199] /1c~[8a' [ 330.518193][T19199] afs: Unknown parameter 'dyndӈ J [ 330.518193][T19199] [ 330.518193][T19199] /1c~[8a' [ 330.523805][T19199] afs: Unknown parameter 'dyndӈ J [ 330.523805][T19199] [ 330.523805][T19199] /1c~[8a' [ 330.529447][T19199] afs: Unknown parameter 'dyndӈ J [ 330.529447][T19199] [ 330.529447][T19199] /1c~[8a' [ 330.534757][T19199] afs: Unknown parameter 'dyndӈ J [ 330.534757][T19199] [ 330.534757][T19199] /1c~[8a' [ 330.537116][T15971] usb 12-1: device descriptor read/8, error -71 [ 330.540412][T19199] afs: Unknown parameter 'dyndӈ J [ 330.540412][T19199] [ 330.540412][T19199] /1c~[8a' [ 330.548340][T19199] afs: Unknown parameter 'dyndӈ J [ 330.548340][T19199] [ 330.548340][T19199] /1c~[8a' [ 330.553449][T19199] afs: Unknown parameter 'dyndӈ J [ 330.553449][T19199] [ 330.553449][T19199] /1c~[8a' [ 330.664673][T15971] usb usb12-port1: unable to enumerate USB device [ 330.685725][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 331.786143][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 332.763287][T19256] fuse: Unknown parameter '000000000000000000000070x0000000000000007' [ 332.782235][T19260] SELinux: policydb string length 65544 does not match expected length 8 [ 332.786110][T19260] SELinux: failed to load policy [ 332.860321][ T40] audit: type=1400 audit(2000000066.747:989): avc: denied { accept } for pid=19262 comm="syz.8.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 332.877020][T19267] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 332.892009][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 333.370211][T19293] orangefs_devreq_open: device cannot be opened in blocking mode [ 333.377488][T19300] netlink: 'syz.8.3786': attribute type 21 has an invalid length. [ 333.380913][T19300] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3786'. [ 333.386608][T19300] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3786'. [ 333.390837][T19300] netlink: 'syz.8.3786': attribute type 21 has an invalid length. [ 333.395302][T19300] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3786'. [ 333.399357][T19300] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3786'. [ 333.468831][ T40] audit: type=1326 audit(2000000067.319:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19298 comm="syz.8.3786" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff361d9c799 code=0x7ffb0000 [ 333.911163][T19320] binder: BINDER_SET_CONTEXT_MGR already set [ 333.913410][T19320] binder: 19318:19320 ioctl 4018620d 2000000002c0 returned -16 [ 334.000430][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 334.031956][T19330] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 334.034413][T19326] IPVS: stopping master sync thread 19330 ... [ 334.261726][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 334.270636][ T1113] ata1: failed to read log page 10h (errno=-5) [ 334.395511][ T40] audit: type=1400 audit(2000524356.187:991): avc: denied { setopt } for pid=19355 comm="syz.3.3802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 334.465237][T19363] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 334.471962][T19363] overlayfs: overlapping lowerdir path [ 334.497613][T19368] fuseblk: Unknown parameter ''roup_i' [ 334.643962][T19377] __nla_validate_parse: 1 callbacks suppressed [ 334.643980][T19377] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3811'. [ 334.702753][T19377] bond4: entered promiscuous mode [ 334.708180][T19377] 8021q: adding VLAN 0 to HW filter on device bond4 [ 334.742698][T19378] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3810'. [ 334.753753][ T40] audit: type=1400 audit(2000524356.524:992): avc: denied { shutdown } for pid=19376 comm="syz.9.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 334.761595][ T40] audit: type=1400 audit(2000524356.534:993): avc: denied { read } for pid=19376 comm="syz.9.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 334.774195][T19387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19387 comm=syz.8.3811 [ 334.842117][T19394] 8021q: adding VLAN 0 to HW filter on device bond4 [ 334.847038][T19394] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 334.852501][T19394] bond4: (slave sit1): Error -95 calling set_mac_address [ 334.921626][T19397] loop2: detected capacity change from 0 to 7 [ 334.925747][T18693] Dev loop2: unable to read RDB block 7 [ 334.929132][T18693] loop2: unable to read partition table [ 334.931884][T18693] loop2: partition table beyond EOD, truncated [ 334.939475][T19397] Dev loop2: unable to read RDB block 7 [ 334.944575][T19397] loop2: unable to read partition table [ 334.948473][T19397] loop2: partition table beyond EOD, truncated [ 334.951757][T19397] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 335.108852][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 335.160014][T19407] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3818'. [ 335.617972][T19421] SET target dimension over the limit! [ 335.622290][T19421] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 335.626307][T19421] VFS: Can't find a romfs filesystem on dev nullb0. [ 335.626307][T19421] [ 335.633312][T19422] SET target dimension over the limit! [ 335.699745][T19428] openvswitch: netlink: IP tunnel dst address not specified [ 336.030400][T19435] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3829'. [ 336.217517][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 336.646842][T19472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19472 comm=syz.3.3844 [ 336.857582][T19483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3848'. [ 336.860667][T19483] hsr_slave_0: left promiscuous mode [ 336.863027][T19483] hsr_slave_1: left promiscuous mode [ 336.868278][T19482] block nbd1: server does not support multiple connections per device. [ 336.872918][T19482] block nbd1: shutting down sockets [ 336.969497][T19485] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3849'. [ 337.010941][T19487] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3850'. [ 337.042314][T19487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19487 comm=syz.7.3850 [ 337.224333][T19498] xt_hashlimit: size too large, truncated to 1048576 [ 337.326154][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 337.403011][T19510] siw: device registration error -23 [ 337.413765][T19510] smc: removing ib device syz2 [ 337.480275][ T40] audit: type=1400 audit(2000524359.085:994): avc: denied { shutdown } for pid=19509 comm="syz.7.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 337.681977][T19521] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3861'. [ 337.685629][T19522] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3861'. [ 337.783491][T19524] bond0: (slave wlan1): Releasing backup interface [ 337.793724][T19528] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 337.796518][T19528] PKCS7: Only support pkcs7_signedData type [ 337.933831][T19530] netlink: del zone limit has 4 unknown bytes [ 337.948561][ T40] audit: type=1400 audit(2000524359.517:995): avc: denied { ioctl } for pid=19531 comm="syz.3.3866" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 337.985370][T19536] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 337.990776][T19538] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 338.015431][ T40] audit: type=1326 audit(2000524359.583:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19541 comm="syz.9.3869" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9589f9c799 code=0x0 [ 338.149019][T19553] netlink: 'syz.9.3872': attribute type 12 has an invalid length. [ 338.152820][T19553] netlink: 'syz.9.3872': attribute type 29 has an invalid length. [ 338.155714][T19553] netlink: 148 bytes leftover after parsing attributes in process `syz.9.3872'. [ 338.162275][T19553] netlink: 'syz.9.3872': attribute type 12 has an invalid length. [ 338.165673][T19553] netlink: 'syz.9.3872': attribute type 29 has an invalid length. [ 338.381569][ T6002] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 338.435308][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 338.543670][ T6002] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.547789][ T6002] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.551325][ T6002] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.556216][ T6002] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.559523][ T6002] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.564224][ T6002] usb 13-1: config 0 descriptor?? [ 338.851162][T15510] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 338.914599][ T5661] usb 12-1: new high-speed USB device number 34 using dummy_hcd [ 339.002234][ T6002] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 339.017859][T15510] usb 14-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 339.020952][T15510] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 339.023756][T15510] usb 14-1: Product: syz [ 339.025096][T15510] usb 14-1: Manufacturer: syz [ 339.026614][T15510] usb 14-1: SerialNumber: syz [ 339.029465][T15510] usb 14-1: config 0 descriptor?? [ 339.035654][T15510] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 339.038142][T15510] dvb-usb: bulk message failed: -22 (2/0) [ 339.041662][T15510] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 339.045686][T15510] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 339.048428][T15510] usb 14-1: media controller created [ 339.057552][T15510] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.070941][T19583] xt_connbytes: Forcing CT accounting to be enabled [ 339.108412][ T5661] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.112123][ T5661] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.115196][ T5661] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 339.123803][ T5661] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 339.127512][ T5661] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.134547][ T5661] usb 12-1: config 0 descriptor?? [ 339.224868][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 339.227883][ T1113] ata1: failed to read log page 10h (errno=-5) [ 339.230675][ T1113] ata1.00: exception Emask 0x1 SAct 0x40 SErr 0x0 action 0x0 [ 339.234346][ T1113] ata1.00: irq_stat 0x40000000 [ 339.236732][ T1113] ata1.00: failed command: WRITE FPDMA QUEUED [ 339.239433][ T1113] ata1.00: cmd 61/60:30:36:81:08/00:00:00:00:00/40 tag 6 ncq dma 49152 out [ 339.239433][ T1113] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 339.247172][ T1113] ata1.00: status: { DRDY } [ 339.249211][ T1113] ata1.00: error: { ABRT } [ 339.250083][T19569] dvb-usb: bulk message failed: -22 (4/0) [ 339.253969][T19569] cxusb: i2c read failed [ 339.254051][ T1113] ata1.00: configured for UDMA/100 [ 339.257670][T15510] cxusb: set interface failed [ 339.259178][ T1113] ata1: EH complete [ 339.262734][T15510] dvb-usb: bulk message failed: -22 (1/0) [ 339.283067][T15510] DVB: Unable to find symbol mt352_attach() [ 339.285772][T15510] dvb-usb: bulk message failed: -22 (5/0) [ 339.289823][T15510] zl10353_read_register: readreg error (reg=127, ret==-121) [ 339.292945][T15510] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 339.351628][T15510] rc_core: IR keymap rc-dvico-mce not found [ 339.354404][T15510] Registered IR keymap rc-empty [ 339.357872][T15510] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0 [ 339.363741][T15510] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0/input64 [ 339.369719][T15510] dvb-usb: schedule remote query interval to 100 msecs. [ 339.372732][T15510] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 339.380049][T15510] usb 14-1: USB disconnect, device number 3 [ 339.476013][T15510] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 339.543511][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 339.572167][ T5661] hid_parser_main: 4086 callbacks suppressed [ 339.572182][ T5661] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 339.578183][ T5661] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 339.581272][ T5661] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 339.584488][ T5661] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 339.587969][ T5661] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 339.591213][ T5661] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 339.594387][ T5661] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 339.597709][ T5661] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 339.600823][ T5661] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 339.604014][ T5661] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 339.617104][ T5661] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 339.786890][ T40] audit: type=1400 audit(2000524361.243:997): avc: denied { mounton } for pid=19572 comm="syz.7.3879" path="/110/file0" dev="gadgetfs" ino=7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 339.805155][ T6002] usb 12-1: USB disconnect, device number 34 [ 339.851391][T19602] mmap: syz.9.3887 (19602): VmData 29204480 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 339.902018][T19607] Malformed UNC in devname [ 339.902018][T19607] [ 339.905525][T19607] CIFS: VFS: Malformed UNC in devname [ 339.908158][T19605] ipvlan1: entered allmulticast mode [ 339.908177][T19605] veth0_vlan: entered allmulticast mode [ 339.913936][T19607] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 339.919332][T19607] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 339.937685][T19610] syz.7.3890 (19610): /proc/19609/oom_adj is deprecated, please use /proc/19609/oom_score_adj instead. [ 340.240092][T19622] __nla_validate_parse: 2 callbacks suppressed [ 340.240104][T19622] netlink: 4376 bytes leftover after parsing attributes in process `syz.9.3892'. [ 340.245390][T19622] netlink: 4376 bytes leftover after parsing attributes in process `syz.9.3892'. [ 340.292394][T19622] netlink: get zone limit has 4 unknown bytes [ 340.366341][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3894'. [ 340.406544][T19625] hsr_slave_1 (unregistering): left promiscuous mode [ 340.526373][ T6002] usb 13-1: reset high-speed USB device number 19 using dummy_hcd [ 340.652169][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 340.748393][ T5661] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 340.882922][T19629] binder: 19628:19629 ioctl c018620c 200000000280 returned -1 [ 340.941221][ T5661] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 340.945788][ T5661] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 340.950507][ T5661] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 340.955638][ T5661] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.962406][T19627] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 340.968790][ T5661] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 340.996820][T19633] netlink: 'syz.7.3898': attribute type 39 has an invalid length. [ 341.190492][ T60] usb 8-1: USB disconnect, device number 32 [ 341.369615][T19646] binder: 19642:19646 ioctl c0306201 200000000680 returned -14 [ 341.667754][T19653] /dev/sr0: Can't open blockdev [ 341.701696][T19660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.771519][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 341.797652][ T40] audit: type=1400 audit(2000524363.128:999): avc: denied { setopt } for pid=19664 comm="syz.8.3907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 341.814101][ T40] audit: type=1400 audit(2000524363.128:998): avc: denied { read } for pid=19664 comm="syz.8.3907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 342.002367][T19675] netlink: 'syz.7.3909': attribute type 10 has an invalid length. [ 342.008206][T19675] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3909'. [ 342.090666][ T6525] usb 13-1: USB disconnect, device number 19 [ 342.180323][T19683] netlink: 'syz.7.3911': attribute type 1 has an invalid length. [ 342.184970][T19683] i2c i2c-1: Invalid block write size 34 [ 342.333505][T19710] fuse: Bad value for 'rootmode' [ 342.473043][T19728] binder: 19727:19728 ioctl c0306201 200000000680 returned -14 [ 342.526721][T19740] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3927'. [ 342.675228][T19750] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 342.760725][T19755] netlink: 'syz.9.3930': attribute type 2 has an invalid length. [ 342.869727][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 343.370343][T19765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=19765 comm=syz.8.3933 [ 343.415169][T19767] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 343.776577][T19781] netlink: 'syz.3.3935': attribute type 8 has an invalid length. [ 343.779653][T19781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3935'. [ 343.785865][T19781] bond0: entered promiscuous mode [ 343.794207][T19783] binder: 19782:19783 ioctl c0306201 200000000680 returned -14 [ 343.795568][T19781] bond_slave_0: entered promiscuous mode [ 343.799740][T19781] bond_slave_1: entered promiscuous mode [ 343.801648][T19781] bridge_slave_1: entered promiscuous mode [ 343.804353][T19781] gretap0: entered promiscuous mode [ 343.806669][T19781] debugfs: 'hsr1' already exists in 'hsr' [ 343.809217][T19781] Cannot create hsr debugfs directory [ 343.811193][T19781] hsr1: entered promiscuous mode [ 343.978200][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 343.981632][T19798] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3938'. [ 343.985401][T19798] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3938'. [ 344.450136][ T40] audit: type=1326 audit(2000524365.624:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19769 comm="syz.3.3935" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69dfb9c799 code=0x7fc00000 [ 344.460531][ T40] audit: type=1326 audit(2000524365.633:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19769 comm="syz.3.3935" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69dfb9c799 code=0x7fc00000 [ 344.470874][ T40] audit: type=1326 audit(2000524365.633:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19769 comm="syz.3.3935" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69dfb9c799 code=0x7fc00000 [ 344.484148][ T40] audit: type=1326 audit(2000524365.633:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19769 comm="syz.3.3935" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69dfb9c799 code=0x7fc00000 [ 344.494165][ T40] audit: type=1326 audit(2000524365.633:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19769 comm="syz.3.3935" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69dfb9c799 code=0x7fc00000 [ 344.504339][ T40] audit: type=1326 audit(2000524365.633:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19769 comm="syz.3.3935" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69dfb9c799 code=0x7fc00000 [ 344.514409][ T40] audit: type=1326 audit(2000524365.633:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19769 comm="syz.3.3935" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69dfb9c799 code=0x7fc00000 [ 344.628065][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.634135][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.636971][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.640617][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.643663][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.646742][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.649752][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.652814][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.655659][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.658634][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.664528][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.667739][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.670685][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.673844][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.676677][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.679561][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.683023][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.686105][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.688924][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.691878][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.695198][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.698131][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.701106][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.704401][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.707399][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.710274][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.713124][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.716644][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.720115][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.723066][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.726482][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.729467][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.732447][T19805] tmpfs: Unknown parameter 'gT9Z+' [ 344.821227][T19813] tmpfs: Unknown parameter 'huge-' [ 344.965009][T19829] sctp: [Deprecated]: syz.3.3946 (pid 19829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.965009][T19829] Use struct sctp_sack_info instead [ 345.086873][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 345.221666][T19842] tmpfs: Bad value for 'mpol' [ 345.394057][T19855] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3955'. [ 345.396087][T19856] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3955'. [ 345.452966][T19855] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 345.651857][ T5661] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 345.660066][T19861] comedi: valid board names for 8255 driver are: [ 345.662212][T19861] 8255 [ 345.663465][T19861] comedi: valid board names for vmk80xx driver are: [ 345.665639][T19861] vmk80xx [ 345.666714][T19861] comedi: valid board names for usbduxsigma driver are: [ 345.669100][T19861] usbduxsigma [ 345.670450][T19861] comedi: valid board names for usbduxfast driver are: [ 345.673329][T19861] usbduxfast [ 345.674590][T19861] comedi: valid board names for usbdux driver are: [ 345.676701][T19861] usbdux [ 345.677681][T19861] comedi: valid board names for ni6501 driver are: [ 345.679748][T19861] ni6501 [ 345.680715][T19861] comedi: valid board names for dt9812 driver are: [ 345.682848][T19861] dt9812 [ 345.684194][T19861] comedi: valid board names for ni_labpc_cs driver are: [ 345.687495][T19861] ni_labpc_cs [ 345.689157][T19861] comedi: valid board names for ni_daq_700 driver are: [ 345.692193][T19861] ni_daq_700 [ 345.693687][T19861] comedi: valid board names for labpc_pci driver are: [ 345.696672][T19861] labpc_pci [ 345.698113][T19861] comedi: valid board names for adl_pci9118 driver are: [ 345.700988][T19861] pci9118dg [ 345.702444][T19861] pci9118hg [ 345.704024][T19861] pci9118hr [ 345.705722][T19861] comedi: valid board names for 8255_pci driver are: [ 345.708866][T19861] 8255_pci [ 345.710357][T19861] comedi: valid board names for s526 driver are: [ 345.713183][T19861] s526 [ 345.715197][T19861] comedi: valid board names for multiq3 driver are: [ 345.718305][T19861] multiq3 [ 345.719818][T19861] comedi: valid board names for pcmuio driver are: [ 345.722816][T19861] pcmuio48 [ 345.724066][T19861] pcmuio96 [ 345.725239][T19861] comedi: valid board names for pcmmio driver are: [ 345.727902][T19861] pcmmio [ 345.728973][T19861] comedi: valid board names for pcmda12 driver are: [ 345.731187][T19861] pcmda12 [ 345.732221][T19861] comedi: valid board names for pcmad driver are: [ 345.734221][T19861] pcmad12 [ 345.735257][T19861] pcmad16 [ 345.736335][T19861] comedi: valid board names for ni_labpc driver are: [ 345.738621][T19861] lab-pc-1200 [ 345.739885][T19861] lab-pc-1200ai [ 345.741076][T19861] lab-pc+ [ 345.742059][T19861] comedi: valid board names for atmio16 driver are: [ 345.744137][T19861] atmio16 [ 345.745163][T19861] atmio16d [ 345.746221][T19861] comedi: valid board names for ni_at_ao driver are: [ 345.748769][T19861] at-ao-6 [ 345.750246][T19861] at-ao-10 [ 345.751591][T19861] comedi: valid board names for ni_at_a2150 driver are: [ 345.754371][T19861] ni_at_a2150 [ 345.755601][T19861] comedi: valid board names for adq12b driver are: [ 345.758072][T19861] adq12b [ 345.759600][T19861] comedi: valid board names for mpc624 driver are: [ 345.762116][T19861] mpc624 [ 345.763116][T19861] comedi: valid board names for c6xdigio driver are: [ 345.765140][T19861] c6xdigio [ 345.766092][T19861] comedi: valid board names for aio_iiro_16 driver are: [ 345.768151][T19861] aio_iiro_16 [ 345.769266][T19861] comedi: valid board names for aio_aio12_8 driver are: [ 345.771804][T19861] aio_aio12_8 [ 345.773111][T19861] aio_ai12_8 [ 345.774185][T19861] aio_ao12_4 [ 345.775291][T19861] comedi: valid board names for fl512 driver are: [ 345.777402][T19861] fl512 [ 345.778400][T19861] comedi: valid board names for dmm32at driver are: [ 345.780741][T19861] dmm32at [ 345.781904][T19861] comedi: valid board names for dt282x driver are: [ 345.784034][T19861] dt2821 [ 345.785021][T19861] dt2821-f [ 345.786074][T19861] dt2821-g [ 345.787149][T19861] dt2823 [ 345.788361][T19861] dt2824-pgh [ 345.789548][T19861] dt2824-pgl [ 345.790719][T19861] dt2825 [ 345.791727][T19861] dt2827 [ 345.792764][T19861] dt2828 [ 345.793742][T19861] dt2829 [ 345.794724][T19861] dt21-ez [ 345.795763][T19861] dt23-ez [ 345.797005][T19861] dt24-ez [ 345.798230][T19861] dt24-ez-pgl [ 345.799637][T19861] comedi: valid board names for dt2817 driver are: [ 345.801885][T19861] dt2817 [ 345.803137][T19861] comedi: valid board names for dt2815 driver are: [ 345.805902][T19861] dt2815 [ 345.807247][T19861] comedi: valid board names for dt2814 driver are: [ 345.810050][T19861] dt2814 [ 345.811380][T19861] comedi: valid board names for dt2811 driver are: [ 345.814454][T19861] dt2811-pgh [ 345.815918][T19861] dt2811-pgl [ 345.817385][T19861] comedi: valid board names for dt2801 driver are: [ 345.820231][T19861] dt2801 [ 345.821553][T19861] comedi: valid board names for das6402 driver are: [ 345.822379][ T5661] usb 8-1: Using ep0 maxpacket: 32 [ 345.824652][T19861] das6402-12 [ 345.828426][T19861] das6402-16 [ 345.829363][ T5661] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 345.829953][T19861] comedi: valid board names for das1800 driver are: [ 345.834640][ T5661] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 345.837428][T19861] das-1701st [ 345.842716][ T5661] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.844225][T19861] das-1701st-da [ 345.844236][T19861] das-1702st [ 345.844244][T19861] das-1702st-da [ 345.849019][ T5661] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 345.850483][T19861] das-1702hr [ 345.854607][ T5661] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 345.858896][T19861] das-1702hr-da [ 345.860171][ T5661] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.863721][T19861] das-1701ao [ 345.863732][T19861] das-1702ao [ 345.863738][T19861] das-1801st [ 345.863743][T19861] das-1801st-da [ 345.863749][T19861] das-1802st [ 345.863754][T19861] das-1802st-da [ 345.863760][T19861] das-1802hr [ 345.865758][ T5661] usb 8-1: Product: syz [ 345.868178][T19861] das-1802hr-da [ 345.868185][T19861] das-1801hc [ 345.869703][ T5661] usb 8-1: Manufacturer: syz [ 345.870800][T19861] das-1802hc [ 345.870806][T19861] das-1801ao [ 345.872308][ T5661] usb 8-1: SerialNumber: syz [ 345.873670][T19861] das-1802ao [ 345.873678][T19861] comedi: valid board names for das800 driver are: [ 345.882109][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 345.883181][T19861] das-800 [ 345.886663][ T5661] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input65 [ 345.887534][T19861] cio-das800 [ 345.899107][T19861] das-801 [ 345.900159][T19861] cio-das801 [ 345.901256][T19861] das-802 [ 345.902318][T19861] cio-das802 [ 345.903463][T19861] cio-das802/16 [ 345.904677][T19861] comedi: valid board names for isa-das08 driver are: [ 345.906927][T19861] isa-das08 [ 345.908093][T19861] das08-pgm [ 345.912270][T19861] das08-pgh [ 345.913804][T19861] das08-pgl [ 345.915345][T19861] das08-aoh [ 345.916856][T19861] das08-aol [ 345.919249][T19861] das08-aom [ 345.920764][T19861] das08/jr-ao [ 345.922356][T19861] das08jr-16-ao [ 345.924085][T19861] pc104-das08 [ 345.925737][T19861] das08jr/16 [ 345.927344][T19861] comedi: valid board names for das16m1 driver are: [ 345.930525][T19861] das16m1 [ 345.931983][T19861] comedi: valid board names for dac02 driver are: [ 345.934750][T19861] dac02 [ 345.936042][T19861] comedi: valid board names for rti802 driver are: [ 345.938849][T19861] rti802 [ 345.940294][T19861] comedi: valid board names for rti800 driver are: [ 345.943067][T19861] rti800 [ 345.944447][T19861] rti815 [ 345.945787][T19861] comedi: valid board names for pcm3724 driver are: [ 345.948787][T19861] pcm3724 [ 345.950937][T19861] comedi: valid board names for pcl818 driver are: [ 345.953223][T19861] pcl818l [ 345.954226][T19861] pcl818h [ 345.955274][T19861] pcl818hd [ 345.956294][T19861] pcl818hg [ 345.957370][T19861] pcl818 [ 345.958321][T19861] pcl718 [ 345.960975][T19861] pcm3718 [ 345.962142][T19861] comedi: valid board names for pcl816 driver are: [ 345.964461][T19861] pcl816 [ 345.965450][T19861] pcl814b [ 345.966469][T19861] comedi: valid board names for pcl812 driver are: [ 345.968563][T19861] pcl812 [ 345.969566][T19861] pcl812pg [ 345.970661][T19861] acl8112pg [ 345.972016][T19861] acl8112dg [ 345.973116][T19861] acl8112hg [ 345.974183][T19861] a821pgl [ 345.975210][T19861] a821pglnda [ 345.976589][T19861] a821pgh [ 345.977728][T19861] a822pgl [ 345.978765][T19861] a822pgh [ 345.979949][T19861] a823pgl [ 345.981008][T19861] a823pgh [ 345.982959][T19861] pcl813 [ 345.984173][T19861] pcl813b [ 345.985412][T19861] acl8113 [ 345.986656][T19861] iso813 [ 345.987856][T19861] acl8216 [ 345.989215][T19861] a826pg [ 345.990598][T19861] comedi: valid board names for pcl730 driver are: [ 345.993806][T19861] pcl730 [ 345.995178][T19861] iso730 [ 345.996525][T19861] acl7130 [ 345.997642][T19861] pcm3730 [ 345.998690][T19861] pcl725 [ 345.999792][T19861] p8r8dio [ 346.000938][T19861] acl7225b [ 346.002307][T19861] p16r16dio [ 346.003863][T19861] pcl733 [ 346.005231][T19861] pcl734 [ 346.006453][T19861] opmm-1616-xt [ 346.007658][T19861] pearl-mm-p [ 346.009310][T19861] ir104-pbf [ 346.010677][T19861] comedi: valid board names for pcl726 driver are: [ 346.012930][T19861] pcl726 [ 346.014275][T19861] pcl727 [ 346.015481][T19861] pcl728 [ 346.016489][T19861] acl6126 [ 346.017539][T19861] acl6128 [ 346.018644][T19861] comedi: valid board names for pcl724 driver are: [ 346.020911][T19861] pcl724 [ 346.021945][T19861] pcl722 [ 346.022950][T19861] pcl731 [ 346.023990][T19861] acl7122 [ 346.025431][T19861] acl7124 [ 346.026647][T19861] pet48dio [ 346.027802][T19861] pcmio48 [ 346.028846][T19861] onyx-mm-dio [ 346.030007][T19861] comedi: valid board names for pcl711 driver are: [ 346.032081][T19861] pcl711 [ 346.033106][T19861] pcl711b [ 346.034244][T19861] acl8112hg [ 346.035591][T19861] acl8112dg [ 346.036814][T19861] comedi: valid board names for amplc_pc263 driver are: [ 346.039196][T19861] pc263 [ 346.040170][T19861] comedi: valid board names for amplc_pc236 driver are: [ 346.042389][T19861] pc36at [ 346.043370][T19861] comedi: valid board names for amplc_dio200 driver are: [ 346.045739][T19861] pc212e [ 346.047194][T19861] pc214e [ 346.049161][T19861] pc215e [ 346.050258][T19861] pc218e [ 346.051260][T19861] pc272e [ 346.052294][T19861] comedi: valid board names for comedi_parport driver are: [ 346.054779][T19861] comedi_parport [ 346.056117][T19861] comedi: valid board names for comedi_test driver are: [ 346.059136][T19861] comedi_test [ 346.060290][T19861] comedi: valid board names for comedi_bond driver are: [ 346.062570][T19861] comedi_bond [ 346.120928][ T5661] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 346.124821][ T5661] (id 0x00) [ 346.150889][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 346.150906][ T40] audit: type=1400 audit(2000524367.209:1070): avc: denied { append } for pid=19876 comm="syz.9.3961" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 346.155760][T19879] binder: 19876:19879 ioctl c0306201 2000000003c0 returned -14 [ 346.185083][ T5661] rc_core: IR keymap rc-imon-pad not found [ 346.187076][ T5661] Registered IR keymap rc-empty [ 346.188756][ T5661] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 346.192344][ T5661] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 346.195677][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 346.207450][T19882] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 346.214624][T19882] JFS: discard option not supported on device [ 346.219531][T19882] Mount JFS Failure: -5 [ 346.234460][ T40] audit: type=1400 audit(2000524367.293:1071): avc: denied { read } for pid=19881 comm="syz.9.3962" path="socket:[91104]" dev="sockfs" ino=91104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 346.336738][ T5661] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 346.341568][ T5661] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input66 [ 346.347527][T19890] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 346.349647][ T5661] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:33> initialized [ 346.436744][T19900] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3968'. [ 346.459201][T19900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.533774][T19858] imon:vfd_write: invalid payload size [ 346.536915][ T5661] usb 8-1: USB disconnect, device number 33 [ 346.914332][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3971'. [ 346.977166][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3971'. [ 346.981553][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3971'. [ 346.986677][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3971'. [ 346.990833][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3971'. [ 347.162155][T19921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3974'. [ 347.179853][T19921] vim2m vim2m.0: vidioc_s_fmt queue busy [ 347.304451][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 347.439950][T19940] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3979'. [ 347.836080][T19968] xt_cluster: node mask cannot exceed total number of nodes [ 348.172368][T19982] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3995'. [ 348.337675][ T40] audit: type=1400 audit(2000524369.263:1072): avc: denied { accept } for pid=19991 comm="syz.7.4001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 348.381211][T19996] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4002'. [ 348.412845][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 349.374719][T20033] bond0: Error: Cannot enslave bond to itself. [ 349.421053][T20040] omfs: Invalid superblock (0) [ 349.434550][ T40] audit: type=1400 audit(2000524370.295:1073): avc: denied { create } for pid=20032 comm="syz.3.4014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 349.521496][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 349.617549][ T6010] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 349.651813][ T40] audit: type=1400 audit(2000524370.502:1074): avc: denied { bind } for pid=20048 comm="syz.7.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 349.788768][ T6010] usb 13-1: Using ep0 maxpacket: 16 [ 349.792892][ T6010] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.796562][ T6010] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.801006][ T6010] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 349.804360][ T6010] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 349.808638][ T6010] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.814689][ T6010] usb 13-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 349.817859][ T6010] usb 13-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 349.820972][ T6010] usb 13-1: Manufacturer: syz [ 349.825671][ T6010] usb 13-1: config 0 descriptor?? [ 350.086654][ T6010] rc_core: IR keymap rc-hauppauge not found [ 350.090253][ T6010] Registered IR keymap rc-empty [ 350.093206][ T6010] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 350.107927][ T6010] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 350.129689][ T6010] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 350.134611][ T6010] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input68 [ 350.142599][ T6010] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 350.161359][ T6010] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 350.182653][ T6010] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 350.203954][ T6010] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 350.218717][T20073] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 350.230311][ T40] audit: type=1400 audit(2000524371.046:1075): avc: denied { setattr } for pid=20072 comm="syz.7.4025" name="file0" dev="overlay" ino=73662693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 350.236108][ T6010] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 350.240569][ T40] audit: type=1400 audit(2000524371.046:1076): avc: denied { write open } for pid=20072 comm="syz.7.4025" path=2F202864656C6574656429 dev="tmpfs" ino=879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 350.252769][ T40] audit: type=1400 audit(2000524371.046:1077): avc: denied { read } for pid=20072 comm="syz.7.4025" dev="tmpfs" ino=879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 350.257196][ T6010] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 350.262904][ T40] audit: type=1400 audit(2000524371.046:1078): avc: denied { link } for pid=20072 comm="syz.7.4025" name="#879" dev="tmpfs" ino=879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 350.279679][ T40] audit: type=1400 audit(2000524371.083:1079): avc: denied { unlink } for pid=17850 comm="syz-executor" name="file0" dev="tmpfs" ino=879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 350.289123][ T6010] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 350.310365][ T6010] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 350.343001][ T6010] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 350.374651][ T6010] mceusb 13-1:0.0: Error: mce write submit urb error = -90 [ 350.406306][T18039] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 350.411959][ T6010] mceusb 13-1:0.0: Registered with mce emulator interface version 1 [ 350.416935][ T6010] mceusb 13-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 350.428886][ T6010] usb 13-1: USB disconnect, device number 20 [ 350.468125][T20082] openvswitch: netlink: Flow key attribute not present in set flow. [ 350.494696][T20081] 9p: Bad value for 'version' [ 350.540442][T20084] xt_TCPMSS: Only works on TCP SYN packets [ 350.577362][T18039] usb 14-1: Using ep0 maxpacket: 16 [ 350.582567][T18039] usb 14-1: config 0 has an invalid interface number: 8 but max is 0 [ 350.586286][T18039] usb 14-1: config 0 has no interface number 0 [ 350.592745][T18039] usb 14-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 350.597952][T18039] usb 14-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 350.604681][T18039] usb 14-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 350.609366][T18039] usb 14-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 350.613368][T18039] usb 14-1: Product: syz [ 350.615388][T18039] usb 14-1: SerialNumber: syz [ 350.621182][T18039] usb 14-1: config 0 descriptor?? [ 350.627124][T18039] cm109 14-1:0.8: invalid payload size 0, expected 4 [ 350.630218][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 350.635852][T18039] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.8/input/input69 [ 350.852080][ C2] cm109 14-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 350.853205][ T6002] usb 14-1: USB disconnect, device number 4 [ 350.855471][ C2] cm109 14-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 350.877384][T20103] GUP no longer grows the stack in syz.8.4035 (20103): 200000007000-20000000a000 (200000004000) [ 350.881494][T20103] CPU: 3 UID: 0 PID: 20103 Comm: syz.8.4035 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.881513][T20103] Tainted: [L]=SOFTLOCKUP [ 350.881517][T20103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.881524][T20103] Call Trace: [ 350.881528][T20103] [ 350.881534][T20103] dump_stack_lvl+0x100/0x190 [ 350.881565][T20103] gup_vma_lookup.cold+0x83/0x96 [ 350.881583][T20103] __get_user_pages+0x241/0x34d0 [ 350.881599][T20103] ? xdp_umem_create+0x648/0x11e0 [ 350.881619][T20103] ? xsk_setsockopt+0x7d8/0xab0 [ 350.881634][T20103] ? do_sock_setsockopt+0xf3/0x1d0 [ 350.881648][T20103] ? __pfx___get_user_pages+0x10/0x10 [ 350.881659][T20103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.881674][T20103] __gup_longterm_locked+0x279/0x16f0 [ 350.881687][T20103] ? __lock_acquire+0x3c0/0x2630 [ 350.881763][T20103] ? __pfx___gup_longterm_locked+0x10/0x10 [ 350.881796][T20103] pin_user_pages+0x13c/0x160 [ 350.881811][T20103] ? __pfx_pin_user_pages+0x10/0x10 [ 350.881824][T20103] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 350.881843][T20103] ? security_capset+0x270/0x270 [ 350.881878][T20103] xdp_umem_create+0x723/0x11e0 [ 350.881901][T20103] xsk_setsockopt+0x7d8/0xab0 [ 350.881918][T20103] ? __pfx_xsk_setsockopt+0x10/0x10 [ 350.881934][T20103] ? find_held_lock+0x2b/0x80 [ 350.881949][T20103] ? __fget_files+0x215/0x3d0 [ 350.881963][T20103] ? selinux_socket_setsockopt+0x6a/0x80 [ 350.881975][T20103] ? __pfx_xsk_setsockopt+0x10/0x10 [ 350.881992][T20103] do_sock_setsockopt+0xf3/0x1d0 [ 350.882009][T20103] __sys_setsockopt+0x195/0x220 [ 350.882023][T20103] __x64_sys_setsockopt+0xbd/0x160 [ 350.882034][T20103] ? do_syscall_64+0x95/0xf80 [ 350.882045][T20103] ? lockdep_hardirqs_on+0x78/0x100 [ 350.882058][T20103] do_syscall_64+0x106/0xf80 [ 350.882069][T20103] ? clear_bhb_loop+0x40/0x90 [ 350.882084][T20103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.882096][T20103] RIP: 0033:0x7ff361d9c799 [ 350.882108][T20103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.882119][T20103] RSP: 002b:00007ff362d08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 350.882132][T20103] RAX: ffffffffffffffda RBX: 00007ff362016090 RCX: 00007ff361d9c799 [ 350.882139][T20103] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 350.882146][T20103] RBP: 00007ff361e32bd9 R08: 0000000000000020 R09: 0000000000000000 [ 350.882153][T20103] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 350.882159][T20103] R13: 00007ff362016128 R14: 00007ff362016090 R15: 00007ffc35c11d18 [ 350.882174][T20103] [ 350.889462][T20102] 8021q: VLANs not supported on sit0 [ 350.891765][ T6002] cm109 14-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 350.893885][T20102] Invalid source name [ 350.997854][T20111] netlink: 'syz.7.4039': attribute type 11 has an invalid length. [ 350.998988][T20102] UBIFS error (pid: 20102): cannot open "./file0", error -22 [ 351.009883][T20111] netlink: 'syz.7.4039': attribute type 11 has an invalid length. [ 351.119011][T20115] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 351.132440][T20115] bridge_slave_0: left allmulticast mode [ 351.134489][T20115] bridge_slave_0: left promiscuous mode [ 351.136817][T20115] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.147680][T20115] bond0: (slave bridge_slave_1): Releasing backup interface [ 351.180469][T20116] netlink: 'syz.8.4040': attribute type 10 has an invalid length. [ 351.186555][T20115] bond0: (slave bond_slave_0): Releasing backup interface [ 351.241023][T20115] bond0: (slave bond_slave_1): Releasing backup interface [ 351.287955][T20115] team0: Port device team_slave_0 removed [ 351.295124][T20115] team0: Port device team_slave_1 removed [ 351.298995][T20115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.302525][T20115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.307172][T20115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.310289][T20115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.315822][T20115] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 351.322810][T20116] mac80211_hwsim hwsim37 wlan1: left promiscuous mode [ 351.331458][T20116] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 351.496375][T20132] kAFS: No cell specified [ 351.625757][T20137] netlink: 'syz.8.4047': attribute type 21 has an invalid length. [ 351.739687][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 351.793233][T20143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.984387][ T6525] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 352.154589][ T6525] usb 13-1: Using ep0 maxpacket: 32 [ 352.159727][ T6525] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 352.163937][ T6525] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 352.171385][ T6525] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.176893][ T6525] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 352.184424][ T6525] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 352.189393][ T6525] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.193237][ T6525] usb 13-1: Product: syz [ 352.195279][ T6525] usb 13-1: Manufacturer: syz [ 352.197963][ T6525] usb 13-1: SerialNumber: syz [ 352.206204][ C3] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 352.211785][ T6525] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input70 [ 352.378785][ T60] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 352.442458][ T6525] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 352.445702][ T6525] (id 0x00) [ 352.495937][ T6525] rc_core: IR keymap rc-imon-pad not found [ 352.498020][ T6525] Registered IR keymap rc-empty [ 352.499717][ T6525] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 352.503240][ T6525] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 352.528486][ T60] usb 8-1: device descriptor read/64, error -71 [ 352.656506][ T6525] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 352.662251][ T6525] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input71 [ 352.672005][ T6525] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:21> initialized [ 352.784889][ T60] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 352.847623][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 352.851022][T20144] imon:vfd_write: invalid payload size [ 352.854224][T15510] usb 13-1: USB disconnect, device number 21 [ 352.933372][ T60] usb 8-1: device descriptor read/64, error -71 [ 353.050448][ T60] usb usb8-port1: attempt power cycle [ 353.081349][T20167] FAT-fs (sr0): unable to read boot sector [ 353.292906][T20183] __nla_validate_parse: 7 callbacks suppressed [ 353.292922][T20183] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4061'. [ 353.332938][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 353.332953][ T40] audit: type=1400 audit(2000524373.954:1084): avc: denied { read } for pid=20184 comm="syz.9.4062" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 353.347356][ T40] audit: type=1400 audit(2000524373.963:1085): avc: denied { open } for pid=20184 comm="syz.9.4062" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 353.356708][ T40] audit: type=1400 audit(2000524373.963:1086): avc: denied { ioctl } for pid=20184 comm="syz.9.4062" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 353.371024][T20186] EXT4-fs (sr0): unable to read superblock [ 353.391280][T15519] usb 12-1: new high-speed USB device number 35 using dummy_hcd [ 353.416913][ T60] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 353.446690][ T60] usb 8-1: device descriptor read/8, error -71 [ 353.583229][T15519] usb 12-1: Using ep0 maxpacket: 32 [ 353.586790][T15519] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 353.590610][T15519] usb 12-1: config 0 has no interface number 0 [ 353.594939][T15519] usb 12-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 353.598752][T15519] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.602108][T15519] usb 12-1: Product: syz [ 353.603911][T15519] usb 12-1: Manufacturer: syz [ 353.606140][T15519] usb 12-1: SerialNumber: syz [ 353.609712][T15519] usb 12-1: config 0 descriptor?? [ 353.613472][T15519] usb 12-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 353.617279][T15519] usb 12-1: selecting invalid altsetting 1 [ 353.619496][T15519] usb 12-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 353.623793][T15519] usb 12-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 353.628420][T15519] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 353.631402][T15519] usb 12-1: media controller created [ 353.638186][T15519] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.711031][ T60] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 353.711086][T18039] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 353.733032][ T60] usb 8-1: device descriptor read/8, error -71 [ 353.849882][ T60] usb usb8-port1: unable to enumerate USB device [ 353.881895][T18039] usb 14-1: Using ep0 maxpacket: 8 [ 353.886467][T18039] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 353.889849][T18039] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 353.893716][T18039] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.897078][T18039] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.902581][T18039] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 353.906491][T18039] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.966828][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 354.132218][T18039] usb 14-1: GET_CAPABILITIES returned 0 [ 354.134818][T18039] usbtmc 14-1:16.0: can't read capabilities [ 354.346796][ C2] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 354.357450][T18039] usb 14-1: USB disconnect, device number 5 [ 354.819887][T15519] usb 12-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 354.825786][T15519] zl10353_read_register: readreg error (reg=127, ret==-110) [ 354.855582][T20156] usb 12-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 354.952982][T15519] usb 12-1: USB disconnect, device number 35 [ 355.065089][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 355.154405][T20216] netdevsim netdevsim7 netdevsim0: IPsec offload requires 128 bit authentication [ 355.273346][T20226] geneve2: entered promiscuous mode [ 355.275994][T20226] geneve2: entered allmulticast mode [ 355.319769][T20231] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4076'. [ 355.336322][T20231] netlink: 'syz.9.4076': attribute type 3 has an invalid length. [ 355.340019][T20231] netlink: 'syz.9.4076': attribute type 3 has an invalid length. [ 355.348571][T20231] overlayfs: missing 'workdir' [ 355.375772][T20235] netlink: 'syz.3.4078': attribute type 21 has an invalid length. [ 355.718334][T20272] netlink: 'syz.8.4091': attribute type 1 has an invalid length. [ 355.738644][T20272] 8021q: adding VLAN 0 to HW filter on device bond5 [ 355.752255][T20272] vlan3: entered promiscuous mode [ 355.754616][T20272] bond5: entered promiscuous mode [ 355.757138][T20272] vlan3: entered allmulticast mode [ 355.760849][T20272] bond5: entered allmulticast mode [ 355.800512][ T5661] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 355.821732][T18039] usb 12-1: new high-speed USB device number 36 using dummy_hcd [ 355.919090][ T60] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 355.970958][ T5661] usb 8-1: Using ep0 maxpacket: 32 [ 355.974974][ T5661] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 355.979670][ T5661] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 355.985491][ T5661] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 355.990441][ T5661] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 355.992303][T18039] usb 12-1: Using ep0 maxpacket: 32 [ 356.000204][T18039] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 356.000598][ T5661] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 356.005483][T18039] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 356.009801][ T5661] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.013940][T18039] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.015081][ T6002] usb 13-1: new full-speed USB device number 22 using dummy_hcd [ 356.016912][ T5661] usb 8-1: Product: syz [ 356.020690][T18039] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 356.022332][T18039] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 356.024234][ T5661] usb 8-1: Manufacturer: syz [ 356.025634][T18039] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.031572][ T5661] usb 8-1: SerialNumber: syz [ 356.041709][T18039] usb 12-1: Product: syz [ 356.043389][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 356.043580][T18039] usb 12-1: Manufacturer: syz [ 356.048835][T18039] usb 12-1: SerialNumber: syz [ 356.049065][ T5661] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input73 [ 356.061959][ C2] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 356.065247][T18039] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input74 [ 356.077926][ T60] usb 14-1: Using ep0 maxpacket: 32 [ 356.082032][ T60] usb 14-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 356.086552][ T60] usb 14-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 356.092523][ T60] usb 14-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.097344][ T60] usb 14-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 356.105723][ T60] usb 14-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 356.110476][ T60] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.113952][ T60] usb 14-1: Product: syz [ 356.115822][ T60] usb 14-1: Manufacturer: syz [ 356.117905][ T60] usb 14-1: SerialNumber: syz [ 356.125735][ C3] imon 14-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 356.130575][ T60] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/input/input77 [ 356.177703][ T6002] usb 13-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 356.182419][ T6002] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 356.184294][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 356.187809][ T6002] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 356.195849][ T6002] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 356.200598][ T6002] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.209571][ T6002] usb 13-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 356.213595][ T6002] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.217207][ T6002] usb 13-1: Product: syz [ 356.219200][ T6002] usb 13-1: Manufacturer: syz [ 356.221308][ T6002] usb 13-1: SerialNumber: syz [ 356.227109][ T6002] usb 13-1: config 0 descriptor?? [ 356.230205][T20272] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 356.238575][ T6002] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input79 [ 356.280216][ T5661] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 356.284929][ T5661] (id 0x00) [ 356.298600][T18039] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 356.303416][T18039] (id 0x00) [ 356.333413][ T5661] rc_core: IR keymap rc-imon-pad not found [ 356.336172][ T5661] Registered IR keymap rc-empty [ 356.338545][ T5661] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 356.343916][ T5661] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 356.355046][T18039] rc_core: IR keymap rc-imon-pad not found [ 356.357132][T18039] Registered IR keymap rc-empty [ 356.359647][T18039] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 356.363621][T18039] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 356.365716][ T60] imon 14-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 356.371335][ T60] (id 0x00) [ 356.430507][ T60] rc_core: IR keymap rc-imon-pad not found [ 356.433098][ T60] Registered IR keymap rc-empty [ 356.434726][ T60] imon 14-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 356.437910][ T60] imon 14-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 356.504465][T18039] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc1 [ 356.504848][ T5661] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 356.510052][T18039] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc1/input76 [ 356.515919][ T5661] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input75 [ 356.519284][T18039] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:36> initialized [ 356.523414][T15519] usb 13-1: USB disconnect, device number 22 [ 356.534224][ T5661] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:38> initialized [ 356.624801][ T60] imon:send_packet: packet tx failed (-71) [ 356.644165][ T60] imon 14-1:155.0: remote input dev register failed [ 356.647069][ T60] imon 14-1:155.0: imon_init_intf0: rc device setup failed [ 356.700130][T20256] imon:display_open: display port is already open [ 356.703302][T20264] FAULT_INJECTION: forcing a failure. [ 356.703302][T20264] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 356.705224][ T5661] usb 8-1: USB disconnect, device number 38 [ 356.711840][T20264] CPU: 2 UID: 0 PID: 20264 Comm: syz.7.4088 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.711876][T20264] Tainted: [L]=SOFTLOCKUP [ 356.711881][T20264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 356.711890][T20264] Call Trace: [ 356.711894][T20264] [ 356.711899][T20264] dump_stack_lvl+0x100/0x190 [ 356.711929][T20264] should_fail_ex.cold+0x5/0xa [ 356.711944][T20264] _copy_from_user+0x2e/0xd0 [ 356.711965][T20264] vfd_write+0x14b/0x580 [ 356.711976][T20264] ? rw_verify_area+0xce/0x6d0 [ 356.711993][T20264] vfs_write+0x2aa/0x1070 [ 356.712010][T20264] ? __pfx_vfd_write+0x10/0x10 [ 356.712022][T20264] ? __pfx_vfs_write+0x10/0x10 [ 356.712038][T20264] ? find_held_lock+0x2b/0x80 [ 356.712052][T20264] ? __fget_files+0x215/0x3d0 [ 356.712063][T20264] ? __fget_files+0x215/0x3d0 [ 356.712077][T20264] ? __fget_files+0x21f/0x3d0 [ 356.712092][T20264] ksys_write+0x12a/0x250 [ 356.712109][T20264] ? __pfx_ksys_write+0x10/0x10 [ 356.712130][T20264] do_syscall_64+0x106/0xf80 [ 356.712146][T20264] ? clear_bhb_loop+0x40/0x90 [ 356.712161][T20264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.712172][T20264] RIP: 0033:0x7f5ce7f9c799 [ 356.712182][T20264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.712193][T20264] RSP: 002b:00007f5ce8f12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.712204][T20264] RAX: ffffffffffffffda RBX: 00007f5ce8215fa0 RCX: 00007f5ce7f9c799 [ 356.712212][T20264] RDX: 0000000000000001 RSI: 0000200000006800 RDI: 0000000000000005 [ 356.712218][T20264] RBP: 00007f5ce8f12090 R08: 0000000000000000 R09: 0000000000000000 [ 356.712224][T20264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.712231][T20264] R13: 00007f5ce8216038 R14: 00007f5ce8215fa0 R15: 00007ffd9f3a3118 [ 356.712246][T20264] [ 356.713916][T18039] usb 12-1: USB disconnect, device number 36 [ 356.793942][ T60] imon 14-1:155.0: unable to initialize intf0, err 0 [ 356.796752][ T60] imon:imon_probe: failed to initialize context! [ 356.799386][ T60] imon 14-1:155.0: unable to register, err -19 [ 356.803843][ T60] usb 14-1: USB disconnect, device number 6 [ 357.164514][ T40] audit: type=1400 audit(2000524377.537:1087): avc: denied { ioctl } for pid=20283 comm="syz.8.4093" path="socket:[96367]" dev="sockfs" ino=96367 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 357.282205][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 357.322588][T20296] dummy0: entered allmulticast mode [ 357.347930][T20299] netlink: 'syz.7.4099': attribute type 9 has an invalid length. [ 357.350467][T20299] netlink: 'syz.7.4099': attribute type 11 has an invalid length. [ 357.353117][T20299] netlink: 'syz.7.4099': attribute type 12 has an invalid length. [ 357.355725][T20299] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.4099'. [ 357.395000][T20301] can0: slcan on ttyS3. [ 357.440328][T20305] /dev/sg0: Can't lookup blockdev [ 357.496913][T20301] can0 (unregistered): slcan off ttyS3. [ 357.534511][ T40] audit: type=1400 audit(2000524377.894:1088): avc: denied { lock } for pid=20302 comm="syz.7.4101" path="/186/file0/cpuset.effective_cpus" dev="9p" ino=73662711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 357.549612][ T40] audit: type=1800 audit(2000524377.912:1089): pid=20303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4101" name="file3" dev="9p" ino=73662721 res=0 errno=0 [ 357.559201][T20303] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4101'. [ 357.559355][ T40] audit: type=1400 audit(2000524377.912:1090): avc: denied { mounton } for pid=20302 comm="syz.7.4101" path="/186/file0/file3" dev="9p" ino=73662721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 357.571186][T20303] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4101'. [ 357.848484][ T5661] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 357.996457][ T5661] usb 8-1: device descriptor read/64, error -71 [ 358.051336][ T5284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.060639][ T5284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.068119][ T5284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.073814][ T5284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.078074][ T5284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.091943][T19232] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.102968][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 358.106574][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 358.110154][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 358.113640][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 358.116486][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 358.195364][T19232] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.259150][T20321] chnl_net:caif_netlink_parms(): no params data found [ 358.263314][ T5661] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 358.291283][T19232] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.356864][T20321] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.360662][T20321] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.364133][T20321] bridge_slave_0: entered allmulticast mode [ 358.368268][T20321] bridge_slave_0: entered promiscuous mode [ 358.387108][T19232] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.391095][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 358.398821][T20321] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.401678][T20321] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.403988][ T1163] IPVS: starting estimator thread 0... [ 358.404296][T20321] bridge_slave_1: entered allmulticast mode [ 358.409126][T20321] bridge_slave_1: entered promiscuous mode [ 358.413085][ T5661] usb 8-1: device descriptor read/64, error -71 [ 358.442077][T20321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.449827][T20321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.490193][T20321] team0: Port device team_slave_0 added [ 358.495397][T20321] team0: Port device team_slave_1 added [ 358.497466][T20335] IPVS: using max 46 ests per chain, 110400 per kthread [ 358.527392][T20321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.530668][T20321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.531340][ T5661] usb usb8-port1: attempt power cycle [ 358.542323][T20321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.544154][T20321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.556273][T20321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.572240][T20321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.654304][T20321] hsr_slave_0: entered promiscuous mode [ 358.657774][T20321] hsr_slave_1: entered promiscuous mode [ 358.661073][T20321] debugfs: 'hsr0' already exists in 'hsr' [ 358.663664][T20321] Cannot create hsr debugfs directory [ 358.699680][T19232] bridge_slave_1: left allmulticast mode [ 358.702330][T19232] bridge_slave_1: left promiscuous mode [ 358.704478][T19232] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.708952][T19232] bridge_slave_0: left allmulticast mode [ 358.711195][T19232] bridge_slave_0: left promiscuous mode [ 358.713104][T19232] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.796004][ T10] usb 13-1: new low-speed USB device number 23 using dummy_hcd [ 358.905060][ T5661] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 358.924883][ T5661] usb 8-1: device descriptor read/8, error -71 [ 358.925493][T20364] netlink: 156 bytes leftover after parsing attributes in process `syz.9.4122'. [ 358.957152][ T10] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 358.959772][ T10] usb 13-1: config 0 has no interface number 0 [ 358.961899][ T10] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 358.965566][ T10] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 358.970784][ T10] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 358.974625][ T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.979805][ T10] usb 13-1: config 0 descriptor?? [ 358.982548][T20347] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 358.994476][ T10] iowarrior 13-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 359.098619][T19232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.129677][T19232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.190506][ T5661] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 359.191551][T19232] bond0 (unregistering): Released all slaves [ 359.198292][T19232] bond1 (unregistering): Released all slaves [ 359.207165][T19232] bond2 (unregistering): Released all slaves [ 359.212392][ T5661] usb 8-1: device descriptor read/8, error -71 [ 359.256476][T16086] usb 13-1: USB disconnect, device number 23 [ 359.258548][ C1] iowarrior 13-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 359.271191][T20370] dlm: no local IP address has been set [ 359.295724][T20370] dlm: cannot start dlm midcomms -107 [ 359.329422][ T5661] usb usb8-port1: unable to enumerate USB device [ 359.350584][T19232] : left promiscuous mode [ 359.469915][T20347] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4117'. [ 359.490831][T20380] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4126'. [ 359.507288][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 359.645177][T20380] gtp0: entered promiscuous mode [ 359.647077][T20380] gtp0: entered allmulticast mode [ 359.913810][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4127'. [ 360.007102][T19232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.010813][T19232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.016521][T19232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.030825][T19232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.045930][T19232] veth1_macvtap: left promiscuous mode [ 360.047939][T19232] veth0_macvtap: left promiscuous mode [ 360.049803][T19232] veth1_vlan: left promiscuous mode [ 360.051668][T19232] veth0_vlan: left promiscuous mode [ 360.199616][T19232] team0 (unregistering): Port device team_slave_1 removed [ 360.220302][T19232] team0 (unregistering): Port device team_slave_0 removed [ 360.331110][ T6002] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 360.352787][ T5284] Bluetooth: hci0: command tx timeout [ 360.461014][ T40] audit: type=1400 audit(2000524380.642:1091): avc: denied { getattr } for pid=20424 comm="syz.9.4135" path="socket:[94934]" dev="sockfs" ino=94934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 360.478238][T20425] tmpfs: Bad value for 'mpol' [ 360.521664][ T6002] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 360.526245][ T6002] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 360.530660][ T6002] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.540008][ T6002] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 360.544810][ T6002] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.548771][ T6002] usb 13-1: Product: syz [ 360.550821][ T6002] usb 13-1: Manufacturer: syz [ 360.552981][ T6002] usb 13-1: SerialNumber: syz [ 360.571216][ T6002] hub 13-1:1.0: bad descriptor, ignoring hub [ 360.573365][ T6002] hub 13-1:1.0: probe with driver hub failed with error -5 [ 360.608229][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 360.709519][T20436] 9p: Unknown Cache mode or invalid value f [ 360.730291][T20436] mkiss: ax0: crc mode is auto. [ 360.780123][ T6002] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 361.021485][T20451] pimreg: entered allmulticast mode [ 361.026902][T20452] pimreg: left allmulticast mode [ 361.180542][T20466] netlink: 'syz.9.4142': attribute type 6 has an invalid length. [ 361.479627][T20321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 361.495538][T20321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 361.516661][T20321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 361.525589][T20321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 361.673119][T20321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.699425][T20321] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.716883][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 361.724566][T19232] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.727097][T19232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.737299][T19230] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.739951][T19230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.750659][T20412] usb 13-1: reset high-speed USB device number 24 using dummy_hcd [ 361.755075][T20412] usb 13-1: device reset changed ep0 maxpacket size! [ 361.772891][T20525] xt_time: unknown flags 0xf4 [ 361.779174][ T6010] usb 13-1: USB disconnect, device number 24 [ 361.791971][ T6010] usblp0: removed [ 361.818937][T20525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4152'. [ 361.861480][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4151'. [ 361.879639][T20535] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4151'. [ 361.883104][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4151'. [ 361.909960][T20321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.936715][T20321] veth0_vlan: entered promiscuous mode [ 361.940736][ T6010] usb 13-1: new high-speed USB device number 25 using dummy_hcd [ 361.943049][T20321] veth1_vlan: entered promiscuous mode [ 361.958593][T20321] veth0_macvtap: entered promiscuous mode [ 361.966946][T20321] veth1_macvtap: entered promiscuous mode [ 361.978139][T20321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.987089][T20321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.996038][T19229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.000574][T19229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.011436][T19229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.016458][T19229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.072819][T10264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.087225][T10264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.100728][ T6010] usb 13-1: Using ep0 maxpacket: 8 [ 362.103871][ T6010] usb 13-1: config 4 has an invalid interface number: 50 but max is 0 [ 362.106622][ T6010] usb 13-1: config 4 has no interface number 0 [ 362.113192][T19229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.113481][ T6010] usb 13-1: string descriptor 0 read error: -22 [ 362.116999][T19229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.119238][ T6010] usb 13-1: New USB device found, idVendor=0df6, idProduct=90ac, bcdDevice=e4.8e [ 362.125518][ T6010] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.347571][T20560] ipvlan1: entered allmulticast mode [ 362.349737][T20560] veth0_vlan: entered allmulticast mode [ 362.359761][ T60] usb 13-1: USB disconnect, device number 25 [ 362.572524][ T5284] Bluetooth: hci0: command tx timeout [ 362.630199][ T40] audit: type=1800 audit(2000524382.668:1092): pid=20577 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4156" name="bus" dev="overlay" ino=42 res=0 errno=0 [ 362.848582][ T40] audit: type=1804 audit(2000524382.884:1093): pid=20598 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.4161" name="/newroot/6/file0" dev="tmpfs" ino=58 res=1 errno=0 [ 362.851785][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 362.967026][T20610] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4164'. [ 362.970911][T20610] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4164'. [ 363.934227][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 364.797735][ T5284] Bluetooth: hci0: command tx timeout [ 365.042846][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 365.788704][T20600] tipc: Enabling of bearer rejected, failed to enable media [ 365.793386][T20608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4163'. [ 365.894454][ T40] audit: type=1400 audit(2000524385.726:1094): avc: denied { ioctl } for pid=20631 comm="syz.9.4167" path="socket:[96878]" dev="sockfs" ino=96878 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 365.910883][T20632] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4167'. [ 365.919999][T20636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20636 comm=syz.2.4168 [ 365.925815][T20636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4168'. [ 365.930274][T20636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20636 comm=syz.2.4168 [ 365.959264][T20636] batman_adv: batadv0: Adding interface: ipvlan2 [ 365.963134][T20636] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.974708][T20636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.979361][T20636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.983615][T20636] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 366.047218][T20647] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4173'. [ 366.079157][T20643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4171'. [ 366.151551][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 366.152212][T20653] XFS (nbd3): SB validate failed with error -5. [ 366.172926][T20663] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4177'. [ 366.269613][T20663] block nbd1: server does not support multiple connections per device. [ 366.275475][T20663] block nbd1: shutting down sockets [ 366.409042][T20690] netlink: 'syz.9.4182': attribute type 1 has an invalid length. [ 366.416078][T20689] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4183'. [ 366.425617][T20690] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.429054][T20690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4182'. [ 366.441849][T20690] bond2: (slave bridge2): making interface the new active one [ 366.445102][T20690] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 366.614101][T20706] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4188'. [ 366.617916][T20706] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4188'. [ 366.930350][T20727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=20727 comm=syz.3.4196 [ 366.947647][T20730] rtc_cmos 00:05: Alarms can be up to one day in the future [ 367.015104][ T5284] Bluetooth: hci0: command tx timeout [ 367.020091][T20735] netlink: 'syz.9.4197': attribute type 2 has an invalid length. [ 367.023602][T20735] netlink: 'syz.9.4197': attribute type 2 has an invalid length. [ 367.222159][ T40] audit: type=1400 audit(2000524386.983:1095): avc: denied { recv } for pid=19232 comm="kworker/u32:66" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 367.240329][T20750] netlink: 'syz.9.4203': attribute type 10 has an invalid length. [ 367.244088][T20750] veth1_macvtap: left promiscuous mode [ 367.260239][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 367.262257][T20750] binder: 20749:20750 ioctl 89e6 200000000140 returned -22 [ 367.452114][ T5661] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 367.611944][ T5661] usb 8-1: Using ep0 maxpacket: 32 [ 367.623976][ T5661] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 367.627833][ T5661] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 367.632104][ T5661] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 367.640380][ T5661] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 367.648917][ T5661] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 367.652153][ T5661] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.656353][ T5661] usb 8-1: Product: syz [ 367.657760][ T5661] usb 8-1: Manufacturer: syz [ 367.659369][ T5661] usb 8-1: SerialNumber: syz [ 367.664673][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 367.677150][ T5661] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input80 [ 367.865211][T20793] x_tables: duplicate underflow at hook 3 [ 367.899803][ T5661] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 367.903369][ T5661] (id 0x00) [ 367.931900][ T40] audit: type=1326 audit(2000524387.640:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20796 comm="syz.8.4218" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff361d9c799 code=0x0 [ 367.974593][ T5661] rc_core: IR keymap rc-imon-pad not found [ 367.979100][ T5661] Registered IR keymap rc-empty [ 367.981730][ T5661] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 367.986697][ T5661] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 368.124648][ T5661] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 368.129580][ T5661] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input81 [ 368.134965][ T5661] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:43> initialized [ 368.368878][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 368.554918][T20809] binder: 20808:20809 ioctl c0306201 200000000040 returned -22 [ 368.558814][T20809] binder: 20808:20809 ioctl c0306201 200000000640 returned -22 [ 369.139216][T20820] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 369.477615][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 370.336221][T20829] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 370.403142][ T39] usb 8-1: USB disconnect, device number 43 [ 370.597078][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 370.895463][ T5661] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 371.055498][ T5661] usb 13-1: Using ep0 maxpacket: 16 [ 371.059049][ T5661] usb 13-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 371.062653][ T5661] usb 13-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 371.066757][ T5661] usb 13-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 371.070704][ T5661] usb 13-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 371.074414][ T5661] usb 13-1: config 0 interface 0 has no altsetting 0 [ 371.078561][ T5661] usb 13-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 371.081930][ T5661] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.084508][ T5661] usb 13-1: Product: syz [ 371.085859][ T5661] usb 13-1: Manufacturer: syz [ 371.087608][ T5661] usb 13-1: SerialNumber: syz [ 371.091614][ T5661] usb 13-1: config 0 descriptor?? [ 371.095653][T20849] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 371.173104][T20801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.315481][T20849] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 371.325281][ T5661] input: syz syz as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input82 [ 371.356282][T20866] fuse: Unknown parameter 'zc4r]$' [ 371.478737][T20877] macvlan1: mtu less than device minimum [ 371.534152][T20850] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 371.560856][ T40] audit: type=1400 audit(2000524391.055:1097): avc: denied { recv } for pid=5835 comm="syz-executor" saddr=127.0.0.1 src=51794 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 371.569776][ T40] audit: type=1400 audit(2000524391.055:1098): avc: denied { read write } for pid=20321 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 371.581666][ T40] audit: type=1400 audit(2000524391.055:1099): avc: denied { open } for pid=20321 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 371.608181][ T40] audit: type=1400 audit(2000524391.055:1100): avc: denied { ioctl } for pid=20321 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 371.624997][ T40] audit: type=1400 audit(2000524391.055:1101): avc: denied { write } for pid=20880 comm="syz.9.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.634651][ T40] audit: type=1400 audit(2000524391.055:1102): avc: denied { read } for pid=20880 comm="syz.9.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.652509][ T40] audit: type=1400 audit(2000524391.055:1103): avc: denied { create } for pid=20880 comm="syz.9.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.659444][T20894] __nla_validate_parse: 7 callbacks suppressed [ 371.659462][T20894] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4242'. [ 371.660207][ T40] audit: type=1400 audit(2000524391.055:1104): avc: denied { ioctl } for pid=20880 comm="syz.9.4238" path="socket:[96997]" dev="sockfs" ino=96997 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.660380][ T34] usb 13-1: USB disconnect, device number 26 [ 371.660516][ C3] synaptics_usb 13-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 371.664123][T20894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4242'. [ 371.668917][ T40] audit: type=1400 audit(2000524391.064:1105): avc: denied { shutdown } for pid=20880 comm="syz.9.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 371.694246][ T40] audit: type=1400 audit(2000524391.092:1106): avc: denied { read } for pid=20890 comm="syz.3.4241" dev="nsfs" ino=4026533619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 371.695008][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 371.742671][T20903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4245'. [ 371.746407][T20904] Invalid source name [ 371.753475][T20904] UBIFS error (pid: 20904): cannot open "./file0", error -22 [ 371.764834][T20904] binder: 20901:20904 ioctl c0306201 200000000040 returned -22 [ 371.777773][T20906] netlink: 'syz.9.4247': attribute type 2 has an invalid length. [ 371.790982][T20906] netlink: 46 bytes leftover after parsing attributes in process `syz.9.4247'. [ 371.909716][T20910] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ,π'FVluc'f`ކ;1 [ 372.037046][T20916] netlink: 'syz.3.4251': attribute type 9 has an invalid length. [ 372.039850][T20916] netlink: 'syz.3.4251': attribute type 11 has an invalid length. [ 372.042547][T20916] netlink: 'syz.3.4251': attribute type 12 has an invalid length. [ 372.045597][T20916] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.4251'. [ 372.049885][T20916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4251'. [ 372.630935][T20965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=20965 comm=syz.9.4266 [ 372.700170][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4270'. [ 372.703855][T20976] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 372.799943][T20980] syzkaller0: entered promiscuous mode [ 372.802582][T20980] syzkaller0: entered allmulticast mode [ 372.804704][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 372.849345][T20978] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4269'. [ 372.853414][T20978] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4269'. [ 373.058166][T20987] binder: 20985:20987 ioctl c0306201 200000000040 returned -22 [ 373.245552][T20996] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4276'. [ 373.724650][T21009] binder: BINDER_SET_CONTEXT_MGR already set [ 373.727509][T21009] binder: 21008:21009 ioctl 4018620d 200000000100 returned -16 [ 373.741119][T21009] binder: BINDER_SET_CONTEXT_MGR already set [ 373.744571][T21009] binder: 21008:21009 ioctl 4018620d 200000004a80 returned -16 [ 373.749782][T21009] binder: 21008:21009 ioctl c0306201 200000000080 returned -14 [ 373.912220][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 374.146767][T21017] veth1_macvtap: entered promiscuous mode [ 374.150730][T21017] macsec0: entered promiscuous mode [ 374.152837][T21017] macsec0: entered allmulticast mode [ 374.154780][T21017] veth1_macvtap: entered allmulticast mode [ 374.582553][T21033] netlink: 'syz.3.4290': attribute type 4 has an invalid length. [ 374.593646][T21033] `: renamed from bond0 (while UP) [ 374.700382][T21047] dvmrp0: entered allmulticast mode [ 375.031564][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 375.085007][ T34] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 375.206708][T21069] tipc: Started in network mode [ 375.208979][T21069] tipc: Node identity , cluster identity 4711 [ 375.211696][T21069] tipc: Failed to obtain node identity [ 375.214500][T21069] tipc: Enabling of bearer rejected, failed to enable media [ 375.246952][T21069] syzkaller0: entered promiscuous mode [ 375.249467][T21069] syzkaller0: entered allmulticast mode [ 375.255675][ T34] usb 13-1: Using ep0 maxpacket: 32 [ 375.259444][T21069] syzkaller0: left promiscuous mode [ 375.259528][ T34] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.261243][T21069] syzkaller0: left allmulticast mode [ 375.266323][ T34] usb 13-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 375.271700][ T34] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.280151][ T34] usb 13-1: config 0 descriptor?? [ 375.286159][ T34] usbhid 13-1:0.0: couldn't find an input interrupt endpoint [ 375.502379][T21060] Bluetooth: MGMT ver 1.23 [ 375.516945][ T34] usb 13-1: USB disconnect, device number 27 [ 376.140230][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 376.375950][T21098] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 376.389609][T21098] block device autoloading is deprecated and will be removed. [ 376.534728][ T9996] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 376.673251][ T9996] usb 14-1: device descriptor read/64, error -71 [ 376.930518][ T9996] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 377.089015][ T9996] usb 14-1: device descriptor read/64, error -71 [ 377.206762][ T9996] usb usb14-port1: attempt power cycle [ 377.248852][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 377.569142][ T9996] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 377.574154][T21081] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 377.578139][T21081] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 377.594973][ T40] kauditd_printk_skb: 165 callbacks suppressed [ 377.594985][ T40] audit: type=1400 audit(2000524396.711:1272): avc: denied { firmware_load } for pid=21080 comm="syz.3.4303" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 377.606676][ T9996] usb 14-1: device descriptor read/8, error -71 [ 377.609372][T21081] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 377.656436][ T40] audit: type=1400 audit(2000524396.767:1273): avc: denied { write } for pid=21103 comm="syz.8.4309" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 377.669682][ T40] audit: type=1400 audit(2000524396.767:1274): avc: denied { write } for pid=21103 comm="syz.8.4309" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 377.672837][T21105] usb usb8: usbfs: interface 0 claimed by hub while 'syz.8.4309' resets device [ 377.677865][T21107] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 377.752553][T21109] ntfs3(sr0): try to read out of volume at offset 0x0 [ 377.759739][ T40] audit: type=1400 audit(2000524396.861:1275): avc: denied { mount } for pid=21115 comm="syz.8.4312" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 377.771256][ T40] audit: type=1400 audit(2000524396.861:1276): avc: denied { create } for pid=21119 comm="syz.3.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 377.780582][ T40] audit: type=1400 audit(2000524396.871:1277): avc: denied { setopt } for pid=21119 comm="syz.3.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 377.812590][T21126] ubi0: attaching mtd0 [ 377.817552][T21126] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 377.818535][ T40] audit: type=1400 audit(2000524396.917:1278): avc: denied { create } for pid=21123 comm="syz.8.4314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 377.822369][T21126] __nla_validate_parse: 8 callbacks suppressed [ 377.822385][T21126] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4311'. [ 377.822875][T21125] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 377.823882][T21125] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4314'. [ 377.833728][ T40] audit: type=1400 audit(2000524396.917:1279): avc: denied { bind } for pid=21123 comm="syz.8.4314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 377.847075][T21128] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21128 comm=syz.3.4315 [ 377.864421][ T40] audit: type=1400 audit(2000524396.917:1280): avc: denied { read } for pid=21123 comm="syz.8.4314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 377.877904][T21128] netlink: 'syz.3.4315': attribute type 83 has an invalid length. [ 377.878871][ T9996] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 377.889471][ T40] audit: type=1400 audit(2000524396.983:1281): avc: denied { name_bind } for pid=21127 comm="syz.3.4315" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 377.912951][ T9996] usb 14-1: device descriptor read/8, error -71 [ 378.028998][ T9996] usb usb14-port1: unable to enumerate USB device [ 378.064108][T21147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4320'. [ 378.348284][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 378.591398][T21185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4327'. [ 378.895439][T21206] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4334'. [ 379.148541][T21221] netlink: 'syz.8.4339': attribute type 1 has an invalid length. [ 379.184988][T21223] dummy0: entered allmulticast mode [ 379.194237][T21222] dummy0: left allmulticast mode [ 379.405019][T14053] ================================================================== [ 379.408427][T14053] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x4f3/0x5d0 [ 379.411935][T14053] Read of size 4 at addr ffff88802dafb83c by task syz.3.2255/14053 [ 379.416253][T14053] [ 379.418148][T14053] CPU: 3 UID: 0 PID: 14053 Comm: syz.3.2255 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.418176][T14053] Tainted: [L]=SOFTLOCKUP [ 379.418183][T14053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 379.418193][T14053] Call Trace: [ 379.418206][T14053] [ 379.418214][T14053] dump_stack_lvl+0x100/0x190 [ 379.418244][T14053] print_report+0x156/0x4c9 [ 379.418267][T14053] ? __virt_addr_valid+0x81/0x620 [ 379.418291][T14053] ? __phys_addr+0xe8/0x180 [ 379.418315][T14053] ? dvb_frontend_release+0x4f3/0x5d0 [ 379.418332][T14053] kasan_report+0xdf/0x1e0 [ 379.418358][T14053] ? dvb_frontend_release+0x4f3/0x5d0 [ 379.418377][T14053] dvb_frontend_release+0x4f3/0x5d0 [ 379.418395][T14053] ? __pfx_dvb_frontend_release+0x10/0x10 [ 379.418412][T14053] __fput+0x3ff/0xb40 [ 379.418433][T14053] task_work_run+0x150/0x240 [ 379.418451][T14053] ? __pfx_task_work_run+0x10/0x10 [ 379.418471][T14053] do_exit+0x829/0x2aa0 [ 379.418496][T14053] ? __pfx_do_exit+0x10/0x10 [ 379.418519][T14053] ? cgroup_update_frozen_flag+0x107/0x210 [ 379.418538][T14053] ? find_held_lock+0x2b/0x80 [ 379.418558][T14053] ? get_signal+0x184f/0x21e0 [ 379.418580][T14053] do_group_exit+0xd5/0x2a0 [ 379.418603][T14053] get_signal+0x1ec7/0x21e0 [ 379.418623][T14053] ? __asan_memset+0x23/0x50 [ 379.418646][T14053] ? __pfx_get_signal+0x10/0x10 [ 379.418667][T14053] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 379.418684][T14053] arch_do_signal_or_restart+0x91/0x7a0 [ 379.418707][T14053] ? __pfx_get_timespec64+0x10/0x10 [ 379.418728][T14053] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 379.418752][T14053] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 379.418776][T14053] exit_to_user_mode_loop+0x86/0x4a0 [ 379.418803][T14053] do_syscall_64+0x67c/0xf80 [ 379.418820][T14053] ? clear_bhb_loop+0x40/0x90 [ 379.418839][T14053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.418856][T14053] RIP: 0033:0x7f69dfb5cfce [ 379.418869][T14053] Code: Unable to access opcode bytes at 0x7f69dfb5cfa4. [ 379.418877][T14053] RSP: 002b:00007f69e0970f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 379.418894][T14053] RAX: fffffffffffffdfc RBX: 00007f69e09716c0 RCX: 00007f69dfb5cfce [ 379.418905][T14053] RDX: 00007f69e0970fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.418916][T14053] RBP: 00007f69dfc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 379.418927][T14053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.418937][T14053] R13: 00007f69dfe16038 R14: 00007f69dfe15fa0 R15: 00007ffe4e72e1d8 [ 379.418954][T14053] [ 379.418960][T14053] [ 379.466337][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 379.466546][T14053] Allocated by task 1: [ 379.466556][T14053] kasan_save_stack+0x30/0x50 [ 379.517901][T14053] kasan_save_track+0x14/0x30 [ 379.519834][T14053] __kasan_kmalloc+0xaa/0xb0 [ 379.521861][T14053] dvb_register_device+0x1d6/0x1e20 [ 379.524180][T14053] dvb_register_frontend+0x5a8/0x8a0 [ 379.526341][T14053] vidtv_bridge_probe+0x44b/0xa30 [ 379.528412][T14053] platform_probe+0x106/0x1d0 [ 379.530311][T14053] really_probe+0x241/0xa60 [ 379.532221][T14053] __driver_probe_device+0x1de/0x400 [ 379.533945][T14053] driver_probe_device+0x4c/0x1b0 [ 379.535615][T14053] __driver_attach+0x2f4/0x6a0 [ 379.537574][T14053] bus_for_each_dev+0x13e/0x1d0 [ 379.539827][T14053] bus_add_driver+0x305/0x5b0 [ 379.541455][T14053] driver_register+0x1e2/0x360 [ 379.543132][T14053] vidtv_bridge_init+0x38/0x70 [ 379.544970][T14053] do_one_initcall+0x11d/0x760 [ 379.546645][T14053] kernel_init_freeable+0x6e5/0x7a0 [ 379.548945][T14053] kernel_init+0x1f/0x1e0 [ 379.550886][T14053] ret_from_fork+0x754/0xd80 [ 379.552728][T14053] ret_from_fork_asm+0x1a/0x30 [ 379.554692][T14053] [ 379.555598][T14053] Freed by task 14053: [ 379.557552][T14053] kasan_save_stack+0x30/0x50 [ 379.559276][T14053] kasan_save_track+0x14/0x30 [ 379.560958][T14053] kasan_save_free_info+0x3b/0x70 [ 379.562600][T14053] __kasan_slab_free+0x5f/0x80 [ 379.564190][T14053] kfree+0x1f6/0x6b0 [ 379.565588][T14053] dvb_device_put.part.0+0x57/0x90 [ 379.567403][T14053] dvb_generic_release+0xe2/0x160 [ 379.569110][T14053] dvb_frontend_release+0x13d/0x5d0 [ 379.570870][T14053] __fput+0x3ff/0xb40 [ 379.572243][T14053] task_work_run+0x150/0x240 [ 379.573869][T14053] do_exit+0x829/0x2aa0 [ 379.575461][T14053] do_group_exit+0xd5/0x2a0 [ 379.577161][T14053] get_signal+0x1ec7/0x21e0 [ 379.578870][T14053] arch_do_signal_or_restart+0x91/0x7a0 [ 379.581107][T14053] exit_to_user_mode_loop+0x86/0x4a0 [ 379.583012][T14053] do_syscall_64+0x67c/0xf80 [ 379.584648][T14053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.586729][T14053] [ 379.587613][T14053] The buggy address belongs to the object at ffff88802dafb800 [ 379.587613][T14053] which belongs to the cache kmalloc-256 of size 256 [ 379.592400][T14053] The buggy address is located 60 bytes inside of [ 379.592400][T14053] freed 256-byte region [ffff88802dafb800, ffff88802dafb900) [ 379.597232][T14053] [ 379.598045][T14053] The buggy address belongs to the physical page: [ 379.600228][T14053] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802dafb000 pfn:0x2dafa [ 379.604137][T14053] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 379.607426][T14053] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 379.610233][T14053] page_type: f5(slab) [ 379.611572][T14053] raw: 00fff00000000240 ffff88801b842b40 ffffea0000ff3c10 ffffea0000e78190 [ 379.614384][T14053] raw: ffff88802dafb000 000000080010000f 00000000f5000000 0000000000000000 [ 379.617512][T14053] head: 00fff00000000240 ffff88801b842b40 ffffea0000ff3c10 ffffea0000e78190 [ 379.620642][T14053] head: ffff88802dafb000 000000080010000f 00000000f5000000 0000000000000000 [ 379.623496][T14053] head: 00fff00000000001 ffffea0000b6be81 00000000ffffffff 00000000ffffffff [ 379.626417][T14053] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 379.629578][T14053] page dumped because: kasan: bad access detected [ 379.632291][T14053] page_owner tracks the page as allocated [ 379.634800][T14053] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17675685796, free_ts 0 [ 379.642717][T14053] post_alloc_hook+0x153/0x170 [ 379.644337][T14053] get_page_from_freelist+0x111d/0x3140 [ 379.646193][T14053] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 379.648168][T14053] new_slab+0xa6/0x6d0 [ 379.649613][T14053] refill_objects+0x26b/0x400 [ 379.651227][T14053] __pcs_replace_empty_main+0x19f/0x600 [ 379.653122][T14053] __kmalloc_noprof+0x688/0x850 [ 379.654900][T14053] usb_hcd_submit_urb+0x601/0x2150 [ 379.657210][T14053] usb_submit_urb+0x8aa/0x1910 [ 379.659412][T14053] usb_start_wait_urb+0x106/0x4c0 [ 379.661601][T14053] usb_control_msg+0x326/0x4a0 [ 379.663603][T14053] usb_get_string+0xab/0x1a0 [ 379.665557][T14053] usb_string_sub+0x103/0x3b0 [ 379.667604][T14053] usb_string+0x1d0/0x570 [ 379.669146][T14053] usb_cache_string+0x80/0x140 [ 379.670964][T14053] usb_new_device+0x166/0x7d0 [ 379.672866][T14053] page_owner free stack trace missing [ 379.674777][T14053] [ 379.675782][T14053] Memory state around the buggy address: [ 379.677701][T14053] ffff88802dafb700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 379.680799][T14053] ffff88802dafb780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 379.683909][T14053] >ffff88802dafb800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 379.686826][T14053] ^ [ 379.688990][T14053] ffff88802dafb880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 379.691794][T14053] ffff88802dafb900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 379.694371][T14053] ================================================================== [ 379.700891][T14053] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 379.704151][T14053] CPU: 1 UID: 0 PID: 14053 Comm: syz.3.2255 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.709051][T14053] Tainted: [L]=SOFTLOCKUP [ 379.710949][T14053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 379.715314][T14053] Call Trace: [ 379.716815][T14053] [ 379.718162][T14053] dump_stack_lvl+0x100/0x190 [ 379.720390][T14053] vpanic+0x552/0x970 [ 379.722147][T14053] ? __pfx_vpanic+0x10/0x10 [ 379.724134][T14053] ? __pfx_vprintk_emit+0x10/0x10 [ 379.726328][T14053] ? dvb_frontend_release+0x4f3/0x5d0 [ 379.728644][T14053] panic+0xd1/0xe0 [ 379.730304][T14053] ? __pfx_panic+0x10/0x10 [ 379.732438][T14053] ? dvb_frontend_release+0x4f3/0x5d0 [ 379.734913][T14053] ? preempt_schedule_common+0x42/0xc0 [ 379.737353][T14053] ? check_panic_on_warn+0x1f/0x90 [ 379.739611][T14053] check_panic_on_warn.cold+0x19/0x34 [ 379.741908][T14053] end_report.part.0+0x3a/0x90 [ 379.743962][T14053] kasan_report.cold+0xe/0x18 [ 379.745928][T14053] ? dvb_frontend_release+0x4f3/0x5d0 [ 379.748265][T14053] dvb_frontend_release+0x4f3/0x5d0 [ 379.750651][T14053] ? __pfx_dvb_frontend_release+0x10/0x10 [ 379.753487][T14053] __fput+0x3ff/0xb40 [ 379.755341][T14053] task_work_run+0x150/0x240 [ 379.757253][T14053] ? __pfx_task_work_run+0x10/0x10 [ 379.759481][T14053] do_exit+0x829/0x2aa0 [ 379.761242][T14053] ? __pfx_do_exit+0x10/0x10 [ 379.763203][T14053] ? cgroup_update_frozen_flag+0x107/0x210 [ 379.765733][T14053] ? find_held_lock+0x2b/0x80 [ 379.767758][T14053] ? get_signal+0x184f/0x21e0 [ 379.769790][T14053] do_group_exit+0xd5/0x2a0 [ 379.771783][T14053] get_signal+0x1ec7/0x21e0 [ 379.773812][T14053] ? __asan_memset+0x23/0x50 [ 379.776130][T14053] ? __pfx_get_signal+0x10/0x10 [ 379.778560][T14053] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 379.780922][T14053] arch_do_signal_or_restart+0x91/0x7a0 [ 379.783318][T14053] ? __pfx_get_timespec64+0x10/0x10 [ 379.785544][T14053] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 379.788260][T14053] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 379.790726][T14053] exit_to_user_mode_loop+0x86/0x4a0 [ 379.792974][T14053] do_syscall_64+0x67c/0xf80 [ 379.794948][T14053] ? clear_bhb_loop+0x40/0x90 [ 379.797201][T14053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.799912][T14053] RIP: 0033:0x7f69dfb5cfce [ 379.801843][T14053] Code: Unable to access opcode bytes at 0x7f69dfb5cfa4. [ 379.804859][T14053] RSP: 002b:00007f69e0970f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 379.808614][T14053] RAX: fffffffffffffdfc RBX: 00007f69e09716c0 RCX: 00007f69dfb5cfce [ 379.812386][T14053] RDX: 00007f69e0970fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.816023][T14053] RBP: 00007f69dfc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 379.819420][T14053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.822730][T14053] R13: 00007f69dfe16038 R14: 00007f69dfe15fa0 R15: 00007ffe4e72e1d8 [ 379.826106][T14053] [ 379.828363][T14053] Kernel Offset: disabled [ 379.830379][T14053] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:51:16 Registers: info registers vcpu 0 CPU#0 RAX=ffff88802b2ca540 RBX=0000000000000004 RCX=ffffffff81e53018 RDX=1ffff110056594a8 RSI=0000000000000000 RDI=ffff888053306788 RBP=ffffc90003a5fa20 RSP=ffffc90003a5f8f0 R8 =0000000000000001 R9 =fffff5200074bf0c R10=0000000000000003 R11=0000000000000000 R12=dffffc0000000000 R13=ffff88803750e000 R14=ffff88802b2ca540 R15=ffff88803750f000 RIP=ffffffff84fe35fd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc904601880 ffffffff 00c00000 GS =0000 ffff8880d6345000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd1706120c0 CR3=000000003525e000 CR4=00352ef0 DR0=00000000000000f8 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=000000000000007f Opmask03=000000007bbffffb Opmask04=0000000001000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564a848fee70 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564a8490b620 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732539f7fc6483 7373253c93b0ac59 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 03c40243d61b166d 7373737617db3b8f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e746567646167 2d7761722f737265 766972642f746567 6461672f7375622f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616c702f73656369 7665642f7379732f 0000000000000041 0000000000000039 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 386c6c696b66722f 0849eef5c10619f4 2d9c46b94d8b86f1 257812b5319c1b90 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70b77130a568651e 0000564fe027b51a 0000000000000181 642e73656c750038 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f766564752f6269 6c2f0073656c7572 2e72656c6c616b7a 79732d30352f642e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f766530752f621e 0000004f6527751a 000000000000017a 642e2d30352f002e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=00000000df31fa09 RCX=ffffffff84f69274 RDX=ffff88802dd6c980 RSI=ffffffff84f69205 RDI=ffff88802dd6c980 RBP=ffff8880551b192a RSP=ffffc9000399f190 R8 =0000000000000007 R9 =0000000000000000 R10=00000000000006d6 R11=0000000000000000 R12=dffffc0000000000 R13=00000000000006d5 R14=00000000000006d5 R15=0000000000000000 RIP=ffffffff8208b32a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f40c2ffd300 ffffffff 00c00000 GS =0000 ffff8880d6445000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555becbc8000 CR3=00000000275c4000 CR4=00352ef0 DR0=0000000000000009 DR1=ffffffffffffff00 DR2=0004000000000020 DR3=0000000000000005 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000010fe 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0320808092100008 8080801000000406 0144c22e0000062b 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0410003410000602 75f6098004108283 909a080001000000 0806060112a20000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001ff ffffffffffffffdf 0809a00310080009 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 98031ffe08000990 030c080009880300 0800098003000400 0180c18008000880 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0401c7100008004d b600757363762f76 65642f01ffffffff ffffffffeb080880 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100029a003001000 2990030004002984 0310800400298003 00000018080628f8 ZMM25=d3c9db5fd3c9db5f d3c9db5fd3c9db5f d3c9db5fd3c9db5f d3c9db5fd3c9db5f d3c9db5fd3c9db5f d3c9db5fd3c9db5f d3c9db5fd3c9db5f d3c9db5fd3c9db5f ZMM26=e3c14f4de3c14f4d e3c14f4de3c14f4d e3c14f4de3c14f4d e3c14f4de3c14f4d e3c14f4de3c14f4d e3c14f4de3c14f4d e3c14f4de3c14f4d e3c14f4de3c14f4d ZMM27=ee52796bee52796b ee52796bee52796b ee52796bee52796b ee52796bee52796b ee52796bee52796b ee52796bee52796b ee52796bee52796b ee52796bee52796b ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5d1300005d130000 5d1300005d130000 5d1300005d130000 5d1300005d130000 5d1300005d130000 5d1300005d130000 5d1300005d130000 5d1300005d130000 info registers vcpu 2 CPU#2 RAX=000000000036a1e9 RBX=ffff88801eafc980 RCX=ffffffff8b8fec75 RDX=0000000000000000 RSI=ffffffff8de72ef9 RDI=ffffffff8c1af6a0 RBP=0000000000000002 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c6795 R10=ffff88806a633cab R11=0000000000000000 R12=ffffed1003d5f930 R13=0000000000000002 R14=ffffffff90d98410 R15=0000000000000000 RIP=ffffffff8b8fd5df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6545000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff361d578b0 CR3=0000000052e6c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7570637265705f65 676173752e746363 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff697bdd16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff697bdd16 00007fff697bdd1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f958a0331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f958a0331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f958a033360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f958a0331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857955e5 RDI=ffffffff9b4a09c0 RBP=ffffffff9b4a0980 RSP=ffffc900063ff460 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000035 R14=0000000000000010 R15=ffffffff85795580 RIP=ffffffff8579560f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6645000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff361fbfd70 CR3=0000000039197000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=00000000bf21e780 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 657565757165642e 7166622e6f696b6c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca17908f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca17908f6 00007ffca17908fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1704331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1704331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd170433360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1704331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000