last executing test programs: 1m50.954039931s ago: executing program 1 (id=388): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffee2, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bda6, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xe, 0xffe0}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x88dc}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = geteuid() openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [{0x8, 0x4, r7}], {0x10, 0x2}}, 0x2c, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [{0x8, 0x4, r7}], {0x10, 0x2}}, 0x2c, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000002c0), &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340), 0x82000, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@allow_other}], [{@pcr={'pcr', 0x3d, 0x19}}, {@seclabel}, {@euid_gt={'euid>', r8}}, {@subj_role={'subj_role', 0x3d, 'fw\x00'}}, {@fsname={'fsname', 0x3d, '{&^{'}}]}}) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) open$dir(&(0x7f0000000040)='./file0/file1\x00', 0x20482, 0x20) (async) open$dir(&(0x7f0000000040)='./file0/file1\x00', 0x20482, 0x20) 1m48.642017482s ago: executing program 1 (id=388): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffee2, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bda6, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xe, 0xffe0}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x88dc}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = geteuid() openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [{0x8, 0x4, r7}], {0x10, 0x2}}, 0x2c, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [{0x8, 0x4, r7}], {0x10, 0x2}}, 0x2c, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000002c0), &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340), 0x82000, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@allow_other}], [{@pcr={'pcr', 0x3d, 0x19}}, {@seclabel}, {@euid_gt={'euid>', r8}}, {@subj_role={'subj_role', 0x3d, 'fw\x00'}}, {@fsname={'fsname', 0x3d, '{&^{'}}]}}) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) open$dir(&(0x7f0000000040)='./file0/file1\x00', 0x20482, 0x20) (async) open$dir(&(0x7f0000000040)='./file0/file1\x00', 0x20482, 0x20) 1m48.523476049s ago: executing program 1 (id=422): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuacct.usage_all\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xb4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x0) 1m48.453962534s ago: executing program 1 (id=423): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x6, @pix={0xb78d0f0, 0x6, 0x47425247, 0x5, 0x6, 0x0, 0x5, 0x4, 0x0, 0x4, 0x2, 0x7}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410019012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chown(&(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0xee01) fspick(0xffffffffffffff9c, &(0x7f0000000580)='./bus/file1\x00', 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x7, 0x1, &(0x7f0000000180)='l', 0xb, 0x4, 0x7, 0x7, 0x0, 0x2, 0x2, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@none}) mount(&(0x7f0000000340)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000080)='vfat\x00', 0x2a21401, &(0x7f0000000000)='\xf5\xce\x1equ}tO') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0xa, &(0x7f0000000440)=[{0x4, 0x9, 0x81, 0x4}, {0x8000, 0x2, 0x1, 0x9}, {0x9, 0x0, 0x7, 0x2}, {0x0, 0x8, 0x7, 0x4}, {0x7, 0x0, 0x3, 0x1}, {0x9, 0x6, 0x5, 0x93}, {0x4, 0x2, 0x5, 0x1}, {0x5, 0x9, 0x6, 0x6}, {0x5a6, 0xff, 0x3, 0x80000000}, {0x4, 0x9, 0x3}]}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000500)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x256, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x220, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xfc}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0xfffffffd, 0x0, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000001991319c00"}, {0x5, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}]}}}}}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000140000001c0007800c00040000000000000000000c0003000000000000000000"], 0x30}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000a00)={&(0x7f0000000600), 0xc, &(0x7f00000009c0)={&(0x7f0000000a80)={0x2fc, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @remote, 0x10}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff4}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x544}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88ca}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x581}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x289}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x61849696}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9ba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4040151}, 0x2000800d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000380)='./file0/file0/file0\x00', 0x1) getgid() 1m48.373653702s ago: executing program 1 (id=425): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 1m46.57422045s ago: executing program 1 (id=448): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x2, 0x0, 0x0, 0x0, @tick, {0x4}, {0x6}, @addr={0x7, 0x3}}, {0xd, 0x0, 0x0, 0x0, @time={0xfffb, 0xa5}, {}, {}, @connect={{0x2, 0x2}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0xc}, {}, @control={0x40, 0x0, 0x8}}, {0x0, 0x0, 0x0, 0x0, @tick=0x3, {0x3, 0x11}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000004b80)={0x0, 0x0, 0x0}, 0x2000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/1:0:0:0\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000040)=0x4055366c) 1m46.489109408s ago: executing program 32 (id=448): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x2, 0x0, 0x0, 0x0, @tick, {0x4}, {0x6}, @addr={0x7, 0x3}}, {0xd, 0x0, 0x0, 0x0, @time={0xfffb, 0xa5}, {}, {}, @connect={{0x2, 0x2}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0xc}, {}, @control={0x40, 0x0, 0x8}}, {0x0, 0x0, 0x0, 0x0, @tick=0x3, {0x3, 0x11}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000004b80)={0x0, 0x0, 0x0}, 0x2000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/1:0:0:0\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000040)=0x4055366c) 1m42.242990713s ago: executing program 3 (id=510): r0 = userfaultfd(0x801) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6a0}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)=0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, 0x84) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xa) 1m42.043761833s ago: executing program 3 (id=513): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=virtio,access=any']) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000c100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000100), &(0x7f00000001c0)=r0}, 0x20) set_robust_list(0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000005c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005c40)={&(0x7f0000002080)={0x3bc0, 0xd, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x878, 0x3, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6689cf743cae9c96}, @NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0xa5, 0x6, 0x1, 0x0, "5fda35961a7b3a78a7c52533a0ba8f19a1a35849266f03a2000739afa07058c8cfc156104fc8e584c7f712785b9fad9d8eb7c40955b168e94e25e14563c8c5126b34948eaee8d3c015935807958e91af2532796d9c1ac549b29b2195644b1e303e323c54b135a8ff5f067855e942ce862852ca02308d48bacfeaa10a7d600b0da0736df010869cea62a6a7574be959a737ad9e6b7887ba8295c6248ce7f6f39abc"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x590, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0xcc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "618b48364e2aeee119bf62a6b4323a0ec99f2c0b90af34cf84f850a41fcbecf2da14ef6b8c3d0504e9131954ef3c02d666e2b973d2d52740a9b98c74e662e3f613ebad7cd1c5c9f3662ea7f72c882e7b2324ce255445194c42030d8424118e85876eb7878fc64fb1948283d0c4"}, @NFTA_DATA_VALUE={0x1b, 0x1, "616d0318e40e6e6d458cabf3cf62020818b76baf8faa9d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xc195086a1dcc63d1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0xf0, 0xb, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1f54}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x50, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, 'syz\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1e}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x28}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x292}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFTA_LOG_QTHRESHOLD={0x6}]}}}]}, @NFTA_SET_ELEM_USERDATA={0xb2, 0x6, 0x1, 0x0, "5a6b9127934dfe6aa215e99815cf30e1d3d51308a1f72ba93068f3ccf24a2b6f6977d2d9eef4a4653c6743d7875889d4c56bbc8257238c84a0ef952dc603dcdf3950aac38cfb46c863423484485c69c933f99ae2073e1f49355722b8082003daf4f2dd009f0903e503e2837b3842fcfffcf862fd2911292aa20f34ff2070f67d79611bb740f1166b492fd36830b76c38e456c51134a95ecd5ffeb58f258cc6795b1166c375802a28b9558446c455"}, @NFTA_SET_ELEM_DATA={0x244, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe9, 0x1, "dfa9f074f27bad33153af42b362717bedbe97289310f1b2667b62fe19bb69285a8911da7dbdf63ba6af3957603c1e401526e8c1199f1ec7042266040b5a2c285d73df1ceaf308ed93d2b1ba52d719d8c4a062705420f9207cd475f63f3e3a4f2256239358c494a733d631f14b12605fc5c957f3f266209f9c4875dfcce5f96fc70762cb7dce8260309d89908b510c193c26e07c71f677c8ad8aa86fd3d506aabb4020ac4aa6548b1a9845aa6d46d81ca7894a245a38dce8c1a9307e758354466993b79a5e111246700eb0ffaa4d92f883166a06caa093fdd2aa1f4d08c8bb4d2062eb1eb5e"}, @NFTA_DATA_VALUE={0x9c, 0x1, "b8946404714e06ba4882de425b60ed6a69d65ad7eff7cfa530a4b3296f6180e0bb5c42279bb519b5afeba9e5b6c71472b5583c91073545f3e754bad55dde354dc6f120463a8f612d608a649858f26acad3641434852ce0a321426b329b3fa2a08c985e6b09084818896d74d88341bc6d735be9446f466988a776ca24ec194523ab810e8e2ae78b58b7ed3522696dc65ca708295a98bb0c1d"}, @NFTA_DATA_VALUE={0xb7, 0x1, "748c4aef2b65a7f22e17795aa25878b0486f1a19eb050b4ec25c988fc3a5bc5f33161824d09d68165718f35cbf3479927d5a6daf7565ad74a9fc951195d7f9fc830bdac14629e8ccd6a2bd7d6869ae3bc656cc7cfcfcbb0cd256369a700c1cbc63f19e941886fa9b6a71e56fa6cdd81d6a2d339b9ca324ba835edc018aff453554e047697663dad5fab229abddf6266e5d7843b9865450c65728e9ae0b1adb3341758d6c992ea8727f75c64f84724195c28b13"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @tproxy={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1b409603253c6b71}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, {0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5516cd8c220d3fb9}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xcd1}, @NFTA_SET_ELEM_USERDATA={0x74, 0x6, 0x1, 0x0, "5ef88d7ea6a36c7386d5ce0cdd3d90be2a1499759e16fbe4c743612eeffec43bfda52e1b4ab857765d781101a01c671cb95cc8016acf1719d93d3c387dadddfd164fa0943ad044f7117e581d1de80e85b766c3d3f2eee9447d28110219216b35d6236bd337bfd8a8752e7a2078dc9617"}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}, {0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x54, 0x6, 0x1, 0x0, "f56a19f96368a8a8b3ead0700130eb40e02c7add654ca047748defcfc0f10f18dfa74e2398ea64bc972fa9e2f827d6a1749e72578daa696021a914c7f3629f4da058bbba85fd6c6a3b816dbe51113f4a"}, @NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x32fc, 0x3, 0x0, 0x1, [{0x4c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10000}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_ELEM_KEY_END={0x18, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY={0x2a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x70, 0x1, "7b09fd203dc3d1d168e1a12f9a2f15e2cbe4a36eb342087284e46e2bf43ab5dbbd2eef7f76ad54d5d15b58b12cdfe6cb2baac1b0af81569fcacbec6ca37699c386609c5376ed15f0eec4577855c4509221b6dce518c53d1bd19d93bfeaaa937b9f6f325b534826544a03b7d6"}, @NFTA_DATA_VALUE={0xc6, 0x1, "50312a1ebbd4310ef20f9d85c37975e9c80cd0aedaebf626dd4a6e1dbe5056c240f5a26137b2c0691704558c742812aad8ce30f1823b753fe4d1e8099eb5a4dedb19acce635394d27af56e25a401322438baae630b090783d9517ce26600cea6ed5fed2676b792fdc9c964d70f5d302dcf7245145f45469d12432cc379d6784644ab10c8af4aafa48f44b30c6c7dc3d4c0f91949da8e8675d9dcb6e7c7e4da44942c74539ead63de031a2c28c70b4ce4dd07d75ceabb5c5555705bdf7a9607380c55"}, @NFTA_DATA_VALUE={0xc5, 0x1, "2a19a23bf7c57379ce599a143eeece73ade4947a180e61f9b829fddf4e3799028b4adbf512f1ebdc7162e38530799d3e5be5d129f41a4bc62decf67187902158e670fe84c6fee2446d9e543298963441af2b49f71ff868c117976b4a2415f2ad69ed59138cc3f056f7096b144958b1dc87d3fa45756c0a5b885956dd1abb7f489afcaf44909d420ab96d3045593ed3c6bc6dad53e51b08fc00fe71a13ea24bd097773693e0e6a66450c117fa43735c107d8731afab2976d449277fe372a3455142"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1f, 0x1, "c4830c6c70e65507c32d9329b49f89225a06e8183655a6dc256931"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x1e0, 0x7, 0x0, 0x1, @match={{0xa}, @val={0x1d0, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'icmp6\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x3f, 0x3, "32267af1d8ddd68e4b24a5ebf7b55d0c6a4f1f8704b1483b46a4994a4659ec790a1350e450f1a8a3f51d1faad1626120ae52a2e2baa55904158d85"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0xfa, 0x3, "449b717d8dc014dc3db7dca27d3265be371fb4ab959ce060923ce48ceb198a4cc5d559f370cd5b04d008d0ac4b8c34c9281b0694f4e437a9e759f2234fad04dd7315d314a6d7bed44fa37919021ee7e229222bc451a90d7351aefab2576d38fcc83d09c88a17544ed17fd3bf0fc289ca294f3261703ad637c182d04185a9a75448e5285a1ccaa013257a0942f36ffb3c9c6687ca62efaf9beb883632e029b6653e75fbc8d225e6092ebae8292cf6ef1f503aa4c421d2c1d7ab8c8d498b7c15951d555e4f42fd25c2b495238190a7540ab27cc52f9a1d0cea559012bb8e13a91a1692ad4e48aac36a77fd8f315e99a0d60f0543cdbaf0"}, @NFTA_MATCH_INFO={0x71, 0x3, "d3b9d414659401b4c49c918aeb2e1f96ff22cd5a522a6c9b71a70cdb092aad4d290d53bea5a81d3971937e25ce31901624824eccfbf11e501269351c1c67741bd1607fe23215741920b8d48da1f0c5076da85ee064460f198912e2195ca8fa5734bd9e2f7d26d26f55eeec182c"}]}}}]}, {0x1934, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xf8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf4, 0x1, "75fdb20d5962a085c64257e03a88829acb84f805b7d1cf16d7064540755d4df9ecb496b44c7f57197b33f66643e9cf7c4fd60a77fd00e15c10e9fcbeab2f89bea1ab7345edd5cf44deccb2a6e4bac69b7f5ee2fb3159a062cbbf28522d86e2294d362f317765b965de65efc4e90fbec1f1c14ec2db61d2f855717d18843a5750f79a0810fec4ec5e30b34e087bb8071be21f8ad310468c0ff28ca27220d610d40a8eb480d9c4a24af39f23f04721aec4f89483faccc8b8f80289623c221aeb513be886e36e7b4e93010bb7c23a32aaedf655e33ac808f1c71ebfce32a1c9b1bf6e37889fa37bd5c39cda9eef20d1394b"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1838, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x44, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}, {0x16b0, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x16a0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_BITWISE_MASK={0x270, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5d, 0x1, "1ecfe848be9004e2f1cee8703544e679f94a7e877584dc58217d6c6a42fb8a5a1db0e427704ca762def8f3633bc56025c757ce3a4d9c8114ae4ae98255327f07a1b859821391d7693abfdcbe6dcf92de7639132e9bb9aacbf6"}, @NFTA_DATA_VALUE={0x15, 0x1, "589777d0228c69fe0ebf762667578d468f"}, @NFTA_DATA_VALUE={0x85, 0x1, "718ea00fc3cd740cf9dd72ea00568d192ebd07132d5a01c4d6d699c5a07cd8b2717deb24f768b7be3458747eee95c8ac9175b4e1ad6c84c73803b6d1fdc42cf03477fd307c477e32a959e07aa2c6af885a657990c8709b7942deeb08df47c893e25a24ecbb6737d4d6951d0499242ba0cf19ffe357cb78bec5d1070b70a1b8b7e5"}, @NFTA_DATA_VALUE={0xd3, 0x1, "9dfaa20fdc8327374b833a3f2d6cfc322e2d712f2ea4f3d77310dda79418dc1058342d9aa70f771bf87fa921da766ef4a538ad7409022010f73015dd2c8bf56ef3889a587244c59031d7491ca0120842246520d15377c8b99b307be50f8379980bbfb3afaf848ab734367f1928d5a925a6a890ada8c39a7b224c05e3d19f8291603836e9b8dc587a79fda60309433d78ef0dc172ed90eacf16efa68aadf7ea0ac6de66ef702c9b88742c4fec9540618cf828ec4a58ffc253d7b3d1b1bd8b9494c212c92eba1acc28602ea3b4056231"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_BITWISE_XOR={0x250, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xab, 0x1, "26469ec3937d83f0b99c3658be7e2249ce80b8bd7f84b8fe2e37f90f938d58fd859318a4b001c64192d033e722852afdd635db48f285ff8db7f32af5fb8eacf1ec8b9970f7f6ae7acc70a37ca67f2966666b64ba9ca5559f029fc755323f22532eafb1bb9e51bf641b7a8c2c51e57247d724e221da52ab294a32614d99eecfb278d3d73e5aff8efbc1c110dc1c72c6b1a9568e0bdbd24f8126f705ae7578ead4307928406aa5d5"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "54a4372fc37f5c06708a9b87155730ee989dd2c452837e9ef13b01527394735f635976e01279f73ec0e069da2175025d8a1878e238593986c4c150f8f669a5142378cdf105adb294ac73a9699b25b662aa9011f2ac1e5f0da652f28e3dae3273f487bddd5d76cf44b2"}, @NFTA_DATA_VALUE={0x5b, 0x1, "89cca3ced08cdd71d27c835ccd45ab4c03f5cebdd518c802f294293fac226438e9df046f794f5405248c56fc8bb2594a29d7d557632efe6727b6f5af7856c844e75ab64259113b6406a3addb4b40f1d8f6b54bc64b1b71"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "22ddf0f181a929bced23a3832c50234920e1ff94af7c5c3b91e2af66b04b2cbb6c974eaed20f5d61442cd6739c512edbadcf561c5f984d776cb2ec6f6e2aac881e4546132b0fc82fc92b94f7f5a7797e3ac2ff9f63b4"}]}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DATA={0x11b4, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5c, 0x1, "08819f28ece8bdcf6b32b8a29d84f3314e833c1e9bea89e3b0dfdd417b8659297090375a9d1835a3549f79c2a2a8c7599ff3573098a96af731de64902543bdfa963dec302738a5f42963df0d4efdf93ee1c35f7517b3b8fd"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "16ab72ba39a66dc5f065ee07a947d3df96f1dd87d33b3b62047c00cfa70239b7996be7d4b25d56dbc3a0564fafdb8bc50eea91df0746624be354f95a1771d8f0b430f8937ee25b302c187be6f45cfcb58e0d2df076aca195d591bdd9b5b0d62442c862e66f0b15fb03fe91c96bb4b591afdf4304f333efc84156b74c66b47f2f4eb2f56bca97806b696707424c0c9ac0cc16b7cef6a5ecce7e057818c06694a2d45734be"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_BITWISE_OP={0x8}]}}}, {0x4c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6a602031}]}}}, {0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x32a78adf126f24e4}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}]}, {0x13b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1220, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "809f29"}, @NFTA_DATA_VALUE={0x91, 0x1, "8deea593909e3e8d9485df51e217546b78a8dc945f19abce6f877473e287a64217eb731e95684f0bee641f9cb011f793e4ccd848f18ab5b26bbd97a7e067774e5095c178907ff9692e2824f8274471de9ab0ae64e140fb1b9cda9aa7c9efbe5a40cd0d23a37726e0a5c8fd88a5e3e99dd982c81446d356859d0f310957a7ff261908770157bc140756f936fcc6"}, @NFTA_DATA_VALUE={0x8b, 0x1, "4bc138767e630f23baa0f73ef698d34d32b4bbff46bee2470601ec2bb9ef330d41d614034d9a08e8cf2145825fd9653d5e7cd2e3cd32360fcf2a974e413f86368451facbb8d168104a14979235f27c553b5cfef21c9482e4fad5c73fc9559e129b28a5117c5559059c17034dae8b9894e5df4f58f334cf2244c5069d82baa66a8c87ec9bf41ca2"}, @NFTA_DATA_VALUE={0xee, 0x1, "410966b64910efd01037e95ae3ed9ca145157d3c8a491ee1bbcea7248fe401bfd53b8424afa509e4001db2027277e7e2b8b79c03c49d1ab93644e0f3efcd30405c9f28c62547d49deff40f592e89d4c44b130ba0c02a06416193da4916fcafde23b126cc62094d5f20cc63bc791c083e32e534b4d8cf10e5fcb8e2a848663fd359cbdfeb93aef043fa737e9c9e11c22fcd167be4ab802a6fd053e0a710a4f92ef0a68b8b12e3784a4a378359a33a33c270d7440a983f9b3b8fedfd7cdaa29c5057c2c1b722824b456113d832445f9336f41f3be6be89291553d044b76f9c64f41393132e64e3aff65dc3"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6}]}}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY_END={0xf0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xcd, 0x1, "c190a4e0afa66ae3469ef9fd328db62d17f95e7062d3add39d2390e08dd5e630185d06e46ee3e76772d0bfe326ff795cc4c01e733ba20c3d01772a5f5259b7e8eeec6d6877bd3283f0b88dfb6df9d6e224a5d7a50b7e1c9ea98c723ed1ccdb050ccef3397d80d29d952e84c952f90b1470848740af5c3172e5834d394ec99bf0c96791882cf587a41f74628afbbb78785eb2c08192c70e9da6f9f575146c801088f4a4218868e86bccda729530c9943c1903052f617fb1a1d8624c3ceb9938fb346c941990ee07180a"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0x150, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xf4, 0x6, 0x1, 0x0, "be7c34352548f492955a055ec53da7b43b8368941809d610ab57f5f989a00b7c6ed6c14898b4eddad762f35c946f1e326148cea3436fe926958d51bf180c9f48dd838f3baf01beb4e9e93ba03fee0bce81353dc9c816cccb4f8ecf3e68e223c280e646ac85bd6d76cfa704df0d0ccb4847b98b75210915dbbbcb375940013952ad27aabc7ec8e1e396176bca8ec2d7c095e58a7abbe4332eb5451ccf769e9ecc519914957bec79b672d1fdcb03167d19f52dc9d6f9102a9323cf361a1626340e09c48b1668aa92e9eecae575ea9e32cbffb2f0c15bcb297e2da5da757995b81f9809c755156a2ab85956c2d821bf3804"}, @NFTA_SET_ELEM_DATA={0x40, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x3bc0}, 0x1, 0x0, 0x0, 0x40001}, 0x40) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) 1m41.953510045s ago: executing program 3 (id=514): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r2, 0x34da2000) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) 1m41.793865184s ago: executing program 3 (id=517): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x2) r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) timerfd_create(0x9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x3}}, 0x10, 0x0}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_emit_ethernet(0x86, &(0x7f0000000380)={@local, @random="d8be17d19221", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x74, 0x64, 0x0, 0xf, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x20, 0x6071, 0x0, 0x9, {[@nop, @timestamp={0x8, 0xa, 0x40e48d43, 0x3}, @exp_fastopen={0xfe, 0x14, 0xf989, "79f896e581a39c08c9f0187d483b8c08"}, @generic={0xfe, 0x5, "de5293"}, @exp_fastopen={0xfe, 0x3, 0xf989, "a89cae8e2ac5"}, @md5sig={0x13, 0x12, "a957799803a0736c906e5975329864ca"}]}}}}}}}, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) lsetxattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)=@known='trusted.overlay.impure\x00', &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x11, 0x2) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m41.731498003s ago: executing program 3 (id=518): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000180)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x1ff, 0x7, {{0x1e, 0x4, 0x0, 0x8, 0x78, 0x68, 0x0, 0x80, 0x2f, 0x0, @local, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xbf, 0x0, 0x1, [0x8, 0x200, 0xe6]}, @timestamp={0x44, 0x18, 0xa7, 0x0, 0x4, [0x0, 0x10, 0xe19, 0x9, 0x9]}, @timestamp_addr={0x44, 0x1c, 0x13, 0x1, 0x4, [{@multicast1, 0xf3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@remote, 0x7}]}, @rr={0x7, 0x13, 0xe, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010100, @broadcast]}, @end, @end, @ssrr={0x89, 0x7, 0x79, [@loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000002180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002140)={&(0x7f00000002c0)=@newtfilter={0x1e70, 0x2c, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x9, 0xe}, {0x10, 0x4}}, [@f_tcindex={{0xc}, {0x458, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x46dd}, @TCA_TCINDEX_POLICE={0x444, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fffffff}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd8}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x7fffffff, 0x8, 0x0, 0x5, 0xb41, 0x80000000, 0x0, 0x3, 0x41cff0a0, 0x7, 0x4, 0xfffffffb, 0x1, 0x200, 0xffffffa4, 0x5, 0x100, 0x4, 0xf6, 0x1000, 0x3, 0xdd8c, 0x3a6, 0x4, 0x26, 0x8, 0x7, 0x81, 0x6, 0x6, 0xc0000000, 0x9, 0x11, 0x2, 0xfffffff7, 0xf, 0x9, 0x1ff, 0x1, 0x8, 0x3, 0x3, 0x80000001, 0xffffffff, 0x7fffffff, 0x71bc, 0x238, 0x8, 0x656, 0x5, 0x401, 0x1ff, 0x8, 0x3, 0xfffffffd, 0x2, 0x3, 0x9, 0x4, 0x81, 0x9, 0x1, 0xff, 0xfffffff8, 0xa57a5d4, 0xfd7, 0x9, 0x8, 0x80000000, 0x0, 0x1ff, 0xbe, 0x2, 0x401, 0x10000000, 0x4, 0x3, 0x9, 0xd, 0x1000, 0x7, 0x4, 0x10001, 0x4, 0x3, 0x777, 0x1000, 0xed, 0x2, 0x8, 0x1, 0x6, 0x13, 0x4, 0x0, 0x80, 0x8, 0x7, 0x7, 0x33, 0x101, 0x2, 0x0, 0x348, 0x1, 0x4, 0x5, 0x1ff, 0x3, 0x6, 0x5, 0x5, 0x9, 0x7, 0x4, 0x8001, 0xd7, 0x800, 0x800, 0xffff0000, 0x9, 0x6, 0x5, 0x3f6, 0x4, 0xfb, 0x5, 0x4, 0x2, 0x9, 0x920, 0x8, 0xfffffb08, 0x9, 0x8, 0xffffffc0, 0xdd9f, 0x1, 0x3, 0x8d340, 0x7, 0x1, 0x0, 0x8d4, 0x1, 0x80000001, 0x2, 0x0, 0x7, 0x4, 0x4, 0x353a, 0x4, 0x9, 0x1, 0x6, 0x10, 0x0, 0x1, 0x8, 0xa8, 0x8, 0x4, 0x400, 0x2, 0x7, 0x8000, 0x6, 0x8, 0x10001, 0x2, 0xfffffffb, 0x9, 0x5, 0xffffffff, 0xd823, 0x4, 0x7, 0x3, 0x5, 0x7fffffff, 0x8001, 0x10000, 0x80000001, 0x3, 0x0, 0x903, 0x1, 0x8000, 0x0, 0x9, 0x3, 0x2, 0xfffffffd, 0x101, 0x80000000, 0xd5, 0x4, 0x8, 0xfff, 0x53, 0x7c, 0x2, 0xffffffff, 0x2, 0x93, 0x7, 0x8, 0xfffffff9, 0x9, 0x8, 0x5, 0xfffffff4, 0x5, 0x5, 0x5, 0x401, 0x778c000, 0x200, 0x0, 0x2, 0x10, 0x9, 0xffff, 0x1ff, 0xbc, 0x6, 0x5, 0x6970, 0x7fffffff, 0x8, 0x2, 0x51, 0x280, 0x7, 0x1000, 0x0, 0x7, 0x6, 0x1, 0x9, 0xfff, 0x9, 0x0, 0x5, 0x8, 0x5, 0x6, 0x4, 0x101, 0xfffffff4, 0xffffffff, 0x4, 0x3000000, 0xae37]}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}, @f_rsvp={{0x9}, {0x548, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x3, 0x2}}, @TCA_RSVP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0x8}}, @TCA_RSVP_POLICE={0x488, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x2, 0x762, 0x6a9a85c2, 0x7, {0x8, 0x2, 0xb, 0x80, 0x1, 0xf0}, {0x0, 0x0, 0x4, 0x2, 0x5, 0x6a}, 0x3ff, 0x4, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x639}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x9, 0x9, 0x0, 0x10001, 0x5e4, 0x10001, 0x5, 0x0, 0x0, 0x6, 0x3, 0x0, 0xaea, 0x4c18, 0x7, 0x5, 0x7fffffff, 0x7, 0x5, 0xffff8001, 0x15, 0x5, 0x7, 0xbe51, 0xc2, 0x8, 0x2, 0x5, 0x2a94, 0x0, 0x95, 0x2, 0x23ddc761, 0xcc, 0xfffffff7, 0x0, 0x7, 0x3, 0x100, 0xc44, 0x0, 0x43, 0x7fff, 0x9, 0x3, 0x9, 0x6, 0xa6, 0xc3, 0x18000, 0x6, 0xb808, 0xffff0001, 0x7f, 0x6, 0xf, 0x5, 0x8001, 0x8935, 0x2, 0x45c, 0x2, 0xf79, 0x9, 0x1020000, 0xfffffffb, 0x1, 0x9, 0x7b5650ae, 0x1, 0x9, 0x4, 0xfffff093, 0x4dc, 0x9, 0x4, 0xf0, 0x2, 0x5, 0x2, 0x6, 0xff, 0x5, 0x5, 0xce, 0xe, 0x7, 0x3, 0x4, 0x0, 0x7, 0xe2aa, 0xa, 0x80, 0xa67b, 0x8, 0x21, 0xffff519b, 0x1, 0x6, 0x7, 0xfffffff7, 0x2, 0x6, 0xffffffbb, 0xfffffff7, 0x2, 0x8000, 0x93f5, 0x3, 0xfffffffe, 0xe123, 0x2, 0x1, 0x27, 0x3, 0x6, 0x9, 0x5, 0x8, 0x901, 0x80, 0x90c5, 0x401, 0x81, 0x2, 0x1, 0x7, 0x1000, 0x6, 0x9, 0xfffffffa, 0x2, 0x0, 0xd, 0x427, 0x91, 0x9, 0x8, 0xffffffff, 0x0, 0xfffffc00, 0x9, 0x7, 0x6, 0x8, 0xa1, 0x8, 0x48, 0x8, 0x100, 0x6, 0x800, 0xd8ed, 0x6260, 0x34, 0xf7e, 0x9, 0x1, 0x81, 0x59b, 0x9, 0xd3, 0x0, 0x0, 0x2, 0x5, 0x7, 0x1, 0x6, 0x800, 0x2, 0xffff, 0xfffffffe, 0xb1, 0xffff, 0x6, 0x8, 0x3, 0xa, 0x0, 0x80000000, 0x7, 0x5, 0xffffffff, 0x1, 0x2, 0xd, 0xfd, 0x6, 0x1, 0x81, 0x7, 0x6, 0x7, 0x4d71, 0x4, 0x5, 0xfffffffe, 0x3, 0x80, 0x5e96, 0x7, 0x8, 0x5, 0x4, 0x3ff, 0xa12, 0x8, 0x2, 0x1, 0x6, 0x400, 0xb, 0xb, 0x0, 0x4, 0xc, 0x2, 0xfffff190, 0x3, 0x3, 0xc, 0x2, 0x9, 0x0, 0x1, 0x3c, 0x1, 0x7ff, 0x5, 0xfffffeff, 0xfffffffa, 0x4, 0x9, 0x1, 0xd, 0xfffffffa, 0x40, 0x41, 0xe, 0x6, 0x7, 0x9, 0x1000, 0xe, 0x9, 0x401, 0x2, 0xa, 0x8, 0x7, 0x2, 0xbdc, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0xa}}, @TCA_RSVP_POLICE={0x74, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x2, 0x2, 0xffff, 0x0, {0x1, 0x2, 0x8000, 0x1, 0x1ff, 0x1}, {0x3, 0x2, 0x2b6f, 0x9, 0x8000, 0x7}, 0xffff8e10, 0x80000001, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x277}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffff0000}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7fff, 0x5, 0x4}, {0x6c, 0x2, 0xc}, 0x16, 0x81, 0x8}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}]}}, @f_rsvp6={{0xa}, {0x68, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0xe}}, @TCA_RSVP_POLICE={0x54, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9448}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x800, 0x0, 0x33, {0x7, 0x1, 0x7, 0x6, 0x8, 0x4}, {0x8, 0x1, 0x2, 0x1000, 0xc8b, 0x7}, 0x6, 0x8, 0x1c0}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff3, 0xfff3}}]}}, @f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}]}}, @f_rsvp6={{0xa}, {0x3ac, 0x2, [@TCA_RSVP_ACT={0x388, 0x6, [@m_ct={0x84, 0x5, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "5c5301ca05f4dd86029a5740169e2ee6"}, @TCA_CT_LABELS={0x14, 0x7, "bae69a552ecfe4153750b7590e461a5d"}, @TCA_CT_LABELS={0x14, 0x7, "173b275dce43d5fe324fe986e532b2b0"}]}, {0x16, 0x6, "d7975a8f1af356fac72987a68d2205ec7a6c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x7c, 0xf, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x7, 0x8, 0x9, 0x8}, 0x4, r4}}]}, {0x2d, 0x6, "5c6796dfc24179c321eb3e05eb2ed6b714d136d10223a1ba96ca25cb93752523a885da5d2ab58d225a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x190, 0x11, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0x9, 0x8, 0x612, 0xd50b}, @multicast1, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfd33, 0x1, 0x8, 0x5, 0x5}, @dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7, 0xfffffffffffffffa, 0xffffffff, 0x2}, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0xff}}]}, {0xed, 0x6, "bd0ac2e41c791f70dec7c97ccb2fe4e9554b757af546e0eecb7688009103a4e13da38d41480c526663ae8a2ed719560b7bf41242a2214aefa460f80083bc09c715b8130d8f2955b146a19c6489f770cf652eeb4ab24e33623f74e40588ff9994ae7f673acf7f2bd5527e6c1fb40c7874615edf8e21fc9103693efa402d4093e30b64cbc79191d3741ade05078dd2b1354b9e0ada3924aec8a447d28d466634b04e52c8b785eaecbbc8440d6bb5201d42859d63f75fcc52eb5f369e5a27f6de09afc727356be60e524ad80e88c3fe6368e958515c0d9e93c4f8e9ca3181818232f2b4a00608079e6301"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xa0, 0x19, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0xa, 0x2, 0x8, 0x157e661e}}]}, {0x5a, 0x6, "dd78d42c7e67268966ede0f9f1ab2283d6a7d48d0187417ad2ade17074260918f2bf65be50c7fc5bfd3ce6ff1be8203686e12e7acfaecb2d0ad3a30fbfa9dd558adfa1c67214d642a0f9f1bb741e2bc8aa3889735ca2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_bpf={0x54, 0x18, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x18, 0x6, "f31bd945fc2a5b9e1a140fe45c23dfbaaa20b4fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xffffffff, 0xffffffff, 0x25}, {0x7, 0x450, 0xc}, 0x2e, 0xfa, 0xe8}}]}}, @f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_SRC={0x8, 0x3, @private=0xa010100}, @TCA_RSVP_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x29}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0x3}}, @TCA_RSVP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xfd}}]}}, @f_rsvp={{0x9}, {0x834, 0x2, [@TCA_RSVP_POLICE={0x828, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x200, 0x3878c41e, 0x2, 0x5, 0x1000, 0x1, 0x1, 0x63, 0x4c, 0x1ff, 0x9, 0xfff, 0x9adb763, 0x6, 0x1, 0x535, 0x3, 0x8001, 0x7, 0x1, 0x0, 0x4, 0x8, 0x81, 0x40, 0x7fffffff, 0x0, 0x7, 0x6b51, 0x4, 0x4, 0xf, 0x2, 0x40, 0x2, 0x57f, 0x1, 0x9, 0xffffaf20, 0x4, 0x6, 0xd05, 0x0, 0xfffffe01, 0x5, 0x955, 0x9, 0x3, 0x1, 0x9, 0x10001, 0x7290, 0x9, 0xd02b, 0x1, 0x4f, 0x1, 0xfffffffe, 0x6, 0xaec8, 0x9, 0x9, 0x3, 0xede, 0x1000, 0x0, 0x6ee, 0x8, 0x0, 0x2, 0xfffffff8, 0x1, 0x7, 0x6, 0x4bff, 0x8, 0x8000, 0x8, 0x1ff, 0x1, 0x0, 0xffffffc0, 0xffffff07, 0x80, 0x1, 0x3, 0x3, 0x2, 0x6, 0x2, 0x0, 0x100, 0x1, 0x7f, 0x27, 0x7, 0x6, 0x2, 0xffff6e90, 0x2, 0x3, 0x20000, 0xe, 0x401, 0x5, 0x31, 0x9, 0x8001, 0x818, 0xfffffffc, 0x7, 0x200, 0xffffffff, 0x2, 0x9, 0x3, 0x8001, 0x81, 0x8, 0x9, 0x56, 0x401, 0x2, 0x1, 0x6, 0x7f, 0x7, 0x10000, 0x7fffffff, 0x3, 0x10000, 0x4, 0x4, 0xc, 0x422, 0x9, 0xcf, 0x2, 0x80, 0x1, 0x9, 0x3ff, 0x1, 0x9, 0x3, 0x4, 0x9, 0x7fffffff, 0x340d, 0x101, 0x7, 0x6, 0x0, 0xf, 0x101, 0x10, 0x1, 0xbb, 0xafd, 0xfffffff9, 0xe, 0x2, 0x9, 0x800, 0x9, 0x40, 0x0, 0x80, 0x8, 0x4, 0x8, 0x80000, 0x200, 0xf1c6, 0x4, 0x0, 0x6, 0x0, 0x2, 0xa, 0x224b, 0xfffffffa, 0x2, 0xf, 0x0, 0x1, 0x6, 0x7, 0x1, 0x4, 0x5, 0x1000, 0x81, 0x9, 0x985, 0x3, 0x5, 0xfff, 0x88eb, 0x4, 0x9, 0x4b58, 0xb12, 0x0, 0xd75, 0x5, 0x1, 0x6, 0x10000, 0x9, 0x4e, 0x400, 0x3, 0x7d, 0x9, 0xe, 0xe8, 0x2, 0x0, 0x6, 0x71, 0x2, 0x7fffffff, 0x3, 0x0, 0xfff, 0xffffff91, 0xfffffffd, 0x7fff, 0x80000000, 0x7, 0x20000, 0x9, 0x4, 0x8, 0xfffffffe, 0x2, 0x3, 0x2, 0x0, 0xf, 0x10, 0x200, 0x0, 0x416, 0xd, 0x49, 0xc8, 0x8, 0x2, 0x9, 0x81, 0x1000, 0xfffffff8, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x85, 0x26, 0x499, 0x70f8d306, 0x6, 0x1ff, 0x8, 0x6, 0x9, 0x8000, 0x6, 0xc, 0x401, 0x8, 0x81, 0xf, 0x8001, 0x5, 0x3, 0xe, 0xa, 0xff5, 0x3, 0x52e, 0x2, 0x0, 0xd46b, 0x9, 0x0, 0xa, 0x40000000, 0x67e80000, 0x2, 0x7, 0xfffffffc, 0x8000, 0x4, 0xc, 0x2, 0x3, 0xab, 0x1, 0xfff, 0x8, 0x2, 0x0, 0x4, 0x7, 0x2, 0x80, 0xf, 0x1, 0x1, 0xfffffffb, 0xed, 0x1000, 0x401, 0x0, 0x4, 0x0, 0x1, 0x6a68, 0x0, 0x1000, 0x40, 0x26, 0x1, 0x5, 0x6, 0x9, 0x9, 0x1, 0x9, 0x4, 0x12f, 0x1000, 0x5, 0x4, 0xfff, 0x3, 0x4, 0x200, 0x2, 0x2, 0xfffffff0, 0x8001, 0x0, 0xc, 0x2, 0x9, 0x2, 0x96d, 0x48, 0xb, 0x8, 0x6, 0x7, 0x3, 0x9, 0xfffffff8, 0x1, 0xd, 0x7f, 0x3, 0x4, 0xd, 0xd3c, 0x10000, 0x3, 0x9, 0x0, 0x7, 0x7fff, 0x6, 0x1ffb, 0x1, 0x2, 0x200, 0x2, 0x40, 0x9, 0xe, 0x4, 0x2396, 0x8, 0x7, 0xe, 0xff1d, 0xffff8000, 0x10000, 0x401, 0x403f, 0x7, 0x4, 0x2, 0xfffffffb, 0x1000, 0x1ff, 0x80000000, 0x3, 0x8, 0x6, 0x4, 0x200, 0x0, 0x401, 0x200, 0x0, 0x400, 0xb8af, 0x20, 0x3, 0x4, 0xec, 0x7, 0x6, 0x6, 0x101, 0x1, 0x9, 0x1, 0x4bd, 0x100, 0xd, 0x3, 0x4, 0x4e3, 0x4dc, 0x4, 0x3, 0x4, 0xfff, 0xffff, 0x101, 0x8, 0x0, 0x9, 0xf2, 0x2, 0x7c81df7a, 0x1, 0x7, 0x0, 0x1, 0x1ff, 0x9, 0x9, 0x5, 0x0, 0x3, 0x6, 0x5, 0xfffffff9, 0x6a4, 0x90, 0x7fff, 0x1, 0x0, 0x7, 0x9, 0x5, 0x9, 0xc5, 0x9, 0x4fd4, 0x4, 0xa14, 0x36b, 0x2, 0x2, 0x4, 0x0, 0x4, 0x7db, 0x5, 0x2, 0xd, 0x6, 0x2, 0x9, 0xd, 0x2, 0x6, 0xf4d9, 0x3, 0x5, 0x6d18d2a0, 0x5, 0x4, 0x6, 0x3a2d3205, 0x1, 0x8, 0x7, 0x3, 0x4, 0x80, 0x6, 0x6, 0x7fffffff, 0x1, 0x2, 0x93, 0x2, 0xffffffff, 0x9, 0x0, 0xfffffff9, 0xd, 0x47c, 0x2, 0x5, 0x9, 0x3, 0x100, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x157}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff1, 0xf}}]}}, @f_rsvp={{0x9}, {0x7c0, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xd}}, @TCA_RSVP_ACT={0x258, 0x6, [@m_xt={0x254, 0xc, 0x0, 0x0, {{0x7}, {0x228, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x10e, 0x6, {0x80, 'nat\x00', 0xf0, 0x3, "bf4617b7ee6abac18d6b9379c577b9e01803d726e52d792422efe0ba444700d07b4c98a06d2b465f557452cef848b6c4106081fa3f2cfe888cd1ff00984a359c6501caeca17b4ea7f7eb4e89ab9a30d4fcaaf5cd3ce7ac5e3fb580ce40af02de40cfe1f8ccd127b167b8da8cd9942fc33e905b8c59e93dcdac6ae29fc57e8881b070d10295680e049df80eb309a746370125e1c11f38ccba27cb4f2fe83e9c689629a6bcee5baa5b49b45fdd1348051233d4a6aa8c02adf8dbe50222a40e690043d3a03c4e0b7f475d6fce6ad9185ea81bd6369b4470b24ec8411209de5849836a15db18"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xd}, @TCA_IPT_INDEX={0x8, 0x3, 0x1d6}, @TCA_IPT_HOOK={0x8, 0x2, 0xce2f2468247f7cd1}, @TCA_IPT_TARG={0xc8, 0x6, {0xf8ea, 'filter\x00', 0x1, 0x8, "9e380378369eb0f649b6a496585adcc6c5143ea12f5eab3a3e66514d4a948317d3ec4fe606797cbb9c0d2458f8424de1ad4f619f255a7b2ebabdcdcc4efd3800c7833922d8110c0fdf421013abcd8e888cf3171afa5a5b8dc2dd4ebee63f14e23a5a765314d185c13cd15eee7c178c07701bec289970a94a8f3af2d0e3c92fb366baf31d7890f380a5c3aa8659d27693dc9a7adf769cad69de6556a9a07b"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x7, 0x6, "8e0df1"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_RSVP_ACT={0xac, 0x6, [@m_vlan={0xa8, 0x1c, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8d}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x7fff, 0x4, 0x1, 0x101}, 0x3}}]}, {0x3f, 0x6, "74d175bb3609bfc66c5afdff9992f12512b669f54024f2b1776dae5b62fb2bd6da5b7dbcea2c9e69568c296f9bcb959522bdcb9d1a7ba019d9701b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}]}, @TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x1812, 0x1, 0x3e, 0x6fe43060, 0xfffffc01, 0x200, 0x0, 0x2, 0x7, 0x6, 0x10, 0x31, 0x5, 0x2, 0x3d, 0x9, 0xce, 0x2, 0x9, 0x118, 0x5, 0x7, 0x6, 0x504, 0x2, 0xe, 0x5, 0xb, 0x15cf, 0xffffffb4, 0xd, 0x1ff, 0x5a1b, 0x8, 0x7, 0x8, 0x1, 0x2, 0x6, 0x3, 0xffffffff, 0x6, 0xffff0000, 0x8, 0x1, 0xdc, 0x8, 0x800, 0x3, 0xfffffffd, 0x2, 0xfffffffa, 0x0, 0x4000000, 0x2, 0x24, 0xc4, 0xfffff9cf, 0x9, 0x6f, 0x5, 0x4, 0xff, 0x0, 0x9, 0x200, 0x8d0, 0x1, 0x3, 0x0, 0x2, 0xff, 0x9, 0x7, 0x0, 0xff, 0x10, 0x4, 0xfffffffe, 0x7, 0xfffffff6, 0x8001, 0xfffffffe, 0x1, 0x6, 0x3, 0x1, 0x3, 0x1, 0x1, 0xfff, 0x80, 0x6, 0x2, 0x4, 0x9, 0x9, 0x3ff, 0x1, 0xfffffffd, 0x4, 0x8001, 0x7, 0x4, 0x6, 0x2, 0xb914, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x19, 0x8a, 0x6, 0x3a, 0x6, 0x3, 0x8000, 0x3, 0xd8, 0x3, 0x300, 0x5d5, 0x4, 0x1, 0x814f, 0x4801, 0x690e, 0x10, 0x6, 0xfffffff9, 0x3, 0x7, 0xfffffff9, 0x6, 0x4, 0xfffffffa, 0x3, 0x66, 0x27, 0x80000000, 0x9, 0xffffa16b, 0x2, 0x0, 0x1, 0x3, 0x100, 0x6, 0x3, 0xfffffffe, 0x6, 0x5, 0x0, 0x200, 0xffffffff, 0x43b, 0xe0, 0xfffffff7, 0xaf544032, 0xcd, 0xd, 0x80000000, 0x9, 0x5, 0x10000, 0x7f, 0x1, 0x6, 0x7, 0x8001, 0x9, 0x9, 0x5, 0x10000, 0x7, 0x32, 0xb, 0xf6, 0x7fffffff, 0x8e, 0x5, 0x4, 0x9, 0x100, 0x4, 0x3, 0x6029, 0x1, 0x0, 0x7ff, 0xb, 0x1, 0x2, 0x1000, 0x3, 0x4, 0x11, 0x9, 0x0, 0x2, 0x0, 0x8, 0xffff, 0xc2b3, 0x0, 0x1, 0x7fffffff, 0x0, 0x8, 0x9, 0x1, 0x10001, 0x99, 0x80, 0x2, 0x2, 0xdf, 0x0, 0x5, 0x3, 0x8, 0x7, 0xd41, 0x56, 0x8, 0x4, 0x1, 0x0, 0x9, 0xa, 0x4, 0x10, 0x10, 0x7, 0x200, 0x9, 0x58000000, 0x1, 0x1, 0x1, 0x3ff, 0x6f, 0x8001, 0xbd, 0x2, 0xff, 0x2, 0x7, 0x5, 0x9, 0x6, 0x25de, 0x6]}]}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x2, 0x3, 0x10}, {0x6, 0x28}, 0x5e, 0x10, 0x40}}, @TCA_RSVP_POLICE={0x50, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x9, 0x8, 0x3b3f, {0x10, 0x0, 0x8, 0xfff9, 0x7, 0x510}, {0xb, 0x0, 0x7fff, 0x8, 0x4, 0x7}, 0x10001, 0xf0e5, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc79d}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfffd, 0xe}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xffffff81}, {0xb, 0xffffffff, 0x7a75}, 0x11, 0x6, 0x3}}]}}]}, 0x1e70}}, 0x20020040) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 1m40.09383426s ago: executing program 3 (id=525): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) socket$kcm(0x21, 0x2, 0xa) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="030d25bd7000fbdbdf251b000000080015000200000008000100", @ANYRES32=0x0, @ANYBLOB="04001900922028cccde520b1887dea9ea3cbc94b24952e70811e96c7d1de75a60f1dd6f4fc388aaad776130daa67de20b68f181f704b98361ec517c15d3f4795c0cc262300aa6487c2c59bbf593eb57df69e"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8010) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085001000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000eca1318b10b77b1c0db4000000000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000300), &(0x7f0000000280)=r4}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) (async) syz_emit_ethernet(0x11, &(0x7f00000005c0)={@remote, @random="92433eabaa43", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x42, 0xd4, "d4"}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="14640200000000002400128009000100626f6e640000000014040280050001000600000005001b0000000000"], 0x44}}, 0x0) 1m40.059296837s ago: executing program 33 (id=525): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) socket$kcm(0x21, 0x2, 0xa) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="030d25bd7000fbdbdf251b000000080015000200000008000100", @ANYRES32=0x0, @ANYBLOB="04001900922028cccde520b1887dea9ea3cbc94b24952e70811e96c7d1de75a60f1dd6f4fc388aaad776130daa67de20b68f181f704b98361ec517c15d3f4795c0cc262300aa6487c2c59bbf593eb57df69e"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8010) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085001000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000eca1318b10b77b1c0db4000000000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000300), &(0x7f0000000280)=r4}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) (async) syz_emit_ethernet(0x11, &(0x7f00000005c0)={@remote, @random="92433eabaa43", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x42, 0xd4, "d4"}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="14640200000000002400128009000100626f6e640000000014040280050001000600000005001b0000000000"], 0x44}}, 0x0) 1m30.261699563s ago: executing program 0 (id=664): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) (async) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x800) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x4, 0x1}, 0x10) 1m30.193471704s ago: executing program 0 (id=665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c00078008000640fffffffd05000500020000000500010006"], 0x58}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000000c0)={0x3, "a8df7802c53b418126a7aed1c00000000000e7ffffffffdeffff0000df00", 0x2, 0x7ffffff8, 0x4, 0xb700, 0x400, 0x8}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0xffffffff, 0x0, 0xce024d}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 1m30.191516537s ago: executing program 0 (id=666): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x3}}, 0xffffffffffffff00) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4011}, 0x48000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) 1m30.033907767s ago: executing program 0 (id=667): socket$inet6(0xa, 0x80009, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x2800, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000380)='./file0/file0/file0\x00', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r4 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x15, &(0x7f0000000200)=[{0x34, '\x00', @data=0x400, 0x7fffffff}]}) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="150a00000000000061116400000000009500000d239f0000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0xa40, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)}, 0x4) 1m29.953262112s ago: executing program 0 (id=670): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x104082, &(0x7f0000000340)='\x00\x00\x00\x10e\x00\x00a\xc0!\x92\x8d\x9er\xc8\xad\xf0\x12\x9e\x8a\x15\xb6,\xcc\xe6\xe4\xbe\xcc\x90\xe9\x06\x9d\xab`HF\xb9\x8f\x84\xfa4\xad=\x0eQ=D\x1b\xa9\x83\x92F\'\xbd\v\x0ev\xd3Xx\x88\xfe\x93\x93i\ax\xb6Ac\xf6\xb3\x92\x0e\xe0\x1e*\xf4\x97k\xe5\x1ee\xbe\xce\x98\x00\x00\x00\x00\x00\x00\x00\x00') (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, r1) 1m29.572745471s ago: executing program 0 (id=672): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x0, @isdn={0x22, 0x54, 0x67, 0x98}, @hci={0x1f, 0x2, 0x3}, @l2tp={0x2, 0x0, @remote}, 0x7f, 0x0, 0x0, 0x0, 0xa388, &(0x7f0000000300)='ip6_vti0\x00', 0x5b6c, 0x0, 0x8}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x35, 0x0, 0x0, 0x0, 0x1, 0x1, {0x4400}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x1, 0x0, 0x80000000}}) r5 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) io_uring_enter(r5, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) socket$key(0xf, 0x3, 0x2) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8, {0x9}}, './file1\x00'}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r11, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x58000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0x84, 0x4, 0xb}, {0xeeee8000, 0xd000, 0x10, 0x3, 0x3, 0xb, 0x5, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x7000, 0x4, 0x4, 0x11, 0x81, 0x0, 0x5, 0x5, 0x4, 0x92, 0x9}, {0x40000, 0xeeef0000, 0x1b, 0x7, 0x1, 0xfa, 0x0, 0x0, 0xfa, 0x29, 0x9, 0x9}, {0xeeee8000, 0x0, 0xe, 0x9, 0x1, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x80a0000, 0x10, 0x2, 0xad, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0xeeef0000, 0xeeef0000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x7f, 0x7, 0x2, 0x8}, {0x100000, 0x405}, {0xeeef0000, 0xff81}, 0xe0000031, 0x0, 0x6000, 0x61, 0x5, 0xa800, 0x8000000, 0x1, [0x6257, 0x2, 0x8000000000000003, 0xc]}) recvfrom$inet(r0, &(0x7f0000000140)=""/208, 0xd0, 0x2000, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) 1m29.506500352s ago: executing program 34 (id=672): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x0, @isdn={0x22, 0x54, 0x67, 0x98}, @hci={0x1f, 0x2, 0x3}, @l2tp={0x2, 0x0, @remote}, 0x7f, 0x0, 0x0, 0x0, 0xa388, &(0x7f0000000300)='ip6_vti0\x00', 0x5b6c, 0x0, 0x8}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_REMOVE={0x7, 0x35, 0x0, 0x0, 0x0, 0x1, 0x1, {0x4400}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x1, 0x0, 0x80000000}}) r5 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) io_uring_enter(r5, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) socket$key(0xf, 0x3, 0x2) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8, {0x9}}, './file1\x00'}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r11, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x58000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0x84, 0x4, 0xb}, {0xeeee8000, 0xd000, 0x10, 0x3, 0x3, 0xb, 0x5, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x7000, 0x4, 0x4, 0x11, 0x81, 0x0, 0x5, 0x5, 0x4, 0x92, 0x9}, {0x40000, 0xeeef0000, 0x1b, 0x7, 0x1, 0xfa, 0x0, 0x0, 0xfa, 0x29, 0x9, 0x9}, {0xeeee8000, 0x0, 0xe, 0x9, 0x1, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x80a0000, 0x10, 0x2, 0xad, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0xeeef0000, 0xeeef0000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x7f, 0x7, 0x2, 0x8}, {0x100000, 0x405}, {0xeeef0000, 0xff81}, 0xe0000031, 0x0, 0x6000, 0x61, 0x5, 0xa800, 0x8000000, 0x1, [0x6257, 0x2, 0x8000000000000003, 0xc]}) recvfrom$inet(r0, &(0x7f0000000140)=""/208, 0xd0, 0x2000, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) 1m10.489219997s ago: executing program 4 (id=958): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x2, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x8000, 0x5, 0x1, r2}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f00000001c0)=0x10) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000300)={&(0x7f0000000200)=""/216, 0xd8, 0x2, 0x8}) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000340)={r2, 0x9, 0x8, 0x5, 0x2, 0x5cb}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x3, @mcast2, 0x3}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}, 0x2}, @in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x48) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000400)) r5 = signalfd4(r1, &(0x7f0000000440)={[0xb7b]}, 0x8, 0x800) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa4, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x28}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4048841}, 0x24008880) listen(r5, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x4, 0xb9, 0x6, 0x4, 0x58, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x7, 0x4, 0x6}}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000700)={@empty, r7}, 0x14) ioctl$XFS_IOC_GETBMAPX(r5, 0xc0205838, &(0x7f0000000740)={0x1c, 0x766, 0x7, 0xa9d2, 0x40, 0x3f, 0x8}) ioctl$TIOCL_SELLOADLUT(r5, 0x541c, &(0x7f0000000780)={0x5, 0x8, 0x6, 0x100000001, 0x80000000}) write$binfmt_script(r5, &(0x7f00000007c0)={'#! ', './file0', [{0x20, 'syzkaller1\x00'}, {0x20, '.,'}, {0x20, 'ip6_vti0\x00'}, {0x20, 'ip6_vti0\x00'}], 0xa, "3a45df147e72f0d35816723649412a6294dd6d072116f8aee1c17951ab5eebaac0c77b8f62619994c7a339d0ef009eeb3844e3e5bb36ff39e7a588301a288534fffd84217426db5af852bb505d5ac13ac58e87ce10ac530426ad4deadbb271554310257b796fe4100508a9d2671b70879fb2a63ff4590a5b9a1a0cdb30e408e2735de1f979a8e051b66ee4c99410c80981b2a685c11bd88f8be0308179f0eb434a5903f32abac64393366fc600b3c375f3df458e1b278cf26ed4b36c9f7678afcd83df"}, 0xf1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f00000008c0)=0x7, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=@delnexthop={0x50, 0x69, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000004) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r8, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000b80)={0x1, [0x0]}, &(0x7f0000000bc0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000c00)={r2, 0xf4}, 0x8) readlinkat(r5, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)=""/235, 0xeb) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000d80)={r4, @in6={{0xa, 0x4e24, 0x8, @mcast1, 0x3478}}, 0x5, 0x7, 0x0, 0x2, 0x9}, &(0x7f0000000e40)=0x98) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000e80)={r9, 0x7}, 0x8) 1m10.402643377s ago: executing program 4 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="edb38728578691955a2f6ef3bb5e5d3c2542c9a9e391df5af5abcc380d07ad64e9218a3dc0d988ffa2dc199cac26c0", @ANYRES16=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRESDEC=r0], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x881) 1m10.397782125s ago: executing program 4 (id=961): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40041) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="e8ff07fffe03000b030000000400000001020100b3f46c9f599f14854e9da99871a116c125f260313b03049ecbcf785ae92119292cc9f270ee8ed0ea5b130079e8a8aa44a18b0ba89108", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000070000000500"/24, @ANYRES32, @ANYBLOB], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7", 0x3f}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f9479", 0x52}], 0x2}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x1, @empty, 0x200}}, 0xff, 0x2}, 0x90) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000e00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x33, 0xa8, @random="9128c4d36e1ee1a84ac6be089234bd9d478bf89f30cbab48a4bc6b610e4e98cd3ab8ba14f2777a251aaac551ead29c"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffffffffffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0xaa3594958f6abf77}, 0x44080) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r6, @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r1, 0xffffffffffffffff, 0x400000000000000) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x2000c000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc}) 1m10.343566716s ago: executing program 4 (id=962): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000000000000000000000e00000020000e0ff00000000000000000000000000000000000000a02c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x154}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000000c0)="27d9", 0x2}], 0x2) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$char_usb(r4, &(0x7f0000000440)="64e99d", 0x3) recvfrom$inet_nvme(r4, &(0x7f0000000540)=""/85, 0x55, 0x40000040, &(0x7f00000005c0)=@isdn={0x22, 0x6, 0x7, 0xd9}, 0x80) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') fchdir(r6) r7 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) ioctl$USERFAULTFD_IOC_NEW(r7, 0xaa00) syz_clone(0x8081d11, 0x0, 0xffffffffffffffa7, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) fsopen(&(0x7f0000000000)='omfs\x00', 0x0) exit(0xffff) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r9, {0x0, 0xfff2}, {0x13, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4048840) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000008000000000000", @ANYRES32=r6, @ANYBLOB='Vj\x00'/20, @ANYRES32=r9, @ANYRES32=r6, @ANYBLOB="000000000500000001000000000000000000000024ffffff00000000"], 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x70bd2d, 0x3, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x10004}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1m9.493345369s ago: executing program 4 (id=972): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) capget(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x80, 0x3, 0x7460b2b1, 0x800, 0xd55, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1m8.843395609s ago: executing program 4 (id=985): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x60) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@fowner_lt={'fowner<', r2}}], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e1800, 0x56) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) 1m8.771844755s ago: executing program 35 (id=985): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b25090987f70e06d038e7ff7fc6e5539b303d0e8b089b07323068090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b35070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2d8160f94e35f2d2d12913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516259e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc1943cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x60) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@fowner_lt={'fowner<', r2}}], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e1800, 0x56) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) 52.430657835s ago: executing program 6 (id=1086): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) (async) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 52.338608236s ago: executing program 6 (id=1087): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d130f0100000000000d000a0006471a010000190581"], 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f00000021c0)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="897a00ccf6042d99", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x60) syz_open_dev$char_usb(0xc, 0xb4, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000240)={0x0, 0x2457, 0x400, 0x1000002, 0x20000}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) syz_clone(0xa2000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000002000)={[{0x0}, {0x0}, {0x0, 0xffffffffffffffe8}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 50.833047948s ago: executing program 6 (id=1100): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x14000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000008240), 0x1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$binfmt_register(r5, &(0x7f0000008280)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x38, 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, './file0'}, 0x79) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvfrom$inet6(r3, &(0x7f0000000080)=""/26, 0x1a, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_SOURCE(r2, 0xc0045406) r8 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') r9 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x8, 0x0, 0x0, 0x0) execveat$binfmt(r1, r8, &(0x7f00000003c0)={[&(0x7f0000000380)='GPL\x00']}, &(0x7f0000000580)={[&(0x7f0000000400)='-\'-)*/]\\\\(&*(##*n\x00', &(0x7f0000000440)='&&\x00', &(0x7f0000000480)='encrypted\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='syz']}, 0x400) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000002c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000280)={0x20, r10, 0x1, 0x0, &(0x7f0000000240)=[{}]}) write$P9_RLERRORu(r2, &(0x7f0000000340)=ANY=[], 0x10) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000300)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffdc0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x0, 0x4], 0x0, 0x0, 0x2, 0x1}}, 0x40) 50.832495486s ago: executing program 6 (id=1101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x86000, 0x0) ioctl$CDROM_GET_MCN(r0, 0x5311, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 50.70150944s ago: executing program 6 (id=1102): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x57, 0x2, 0x2, "14a5d19aea562d299914ea48f12ec9745f0000000000000dc9c181f0bfa73100", 0x32525942}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x3}, 0x90) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x57, 0x2, 0x2, "14a5d19aea562d299914ea48f12ec9745f0000000000000dc9c181f0bfa73100", 0x32525942}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x3}, 0x90) (async) 50.472852745s ago: executing program 6 (id=1103): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x18100, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123402, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) r5 = socket(0x27, 0x3, 0xd) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x703d26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xfffffffffffffeaa, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x9, 0x0, 0x0, 0x3dc, 0x3], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x7ffffffffffffffc, 0x8005, 0x101, 0x4000000000000006, 0x1000, 0x8000f, 0x10, 0x4, 0x7ffffffffffffffd, 0x1, 0x0, 0x3, 0x5, 0x6, 0xfffffffffbfffffe], 0x0, 0x804}) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000f50000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}, @TCA_RATE={0x6, 0x5, {0xa4, 0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000008f40), 0x0, 0x0) clock_gettime(0x0, &(0x7f000000a240)) r12 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r12) syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x4000010, r12, 0x180000000) ppoll(&(0x7f00000000c0)=[{r11, 0xb4a2}, {r11, 0x3806}, {r0, 0x100}, {r3, 0x3462}], 0x4, 0x0, 0x0, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5390, 0x0) 50.390797933s ago: executing program 36 (id=1103): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x18100, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123402, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) r5 = socket(0x27, 0x3, 0xd) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x703d26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xfffffffffffffeaa, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x9, 0x0, 0x0, 0x3dc, 0x3], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x7ffffffffffffffc, 0x8005, 0x101, 0x4000000000000006, 0x1000, 0x8000f, 0x10, 0x4, 0x7ffffffffffffffd, 0x1, 0x0, 0x3, 0x5, 0x6, 0xfffffffffbfffffe], 0x0, 0x804}) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000f50000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}, @TCA_RATE={0x6, 0x5, {0xa4, 0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000008f40), 0x0, 0x0) clock_gettime(0x0, &(0x7f000000a240)) r12 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r12) syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x4000010, r12, 0x180000000) ppoll(&(0x7f00000000c0)=[{r11, 0xb4a2}, {r11, 0x3806}, {r0, 0x100}, {r3, 0x3462}], 0x4, 0x0, 0x0, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5390, 0x0) 5.690425164s ago: executing program 5 (id=1751): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0xc708, 0x5}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000180)={r7}) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x34, r6, 0x1, 0x0, 0x0, {0x3a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) 5.582052836s ago: executing program 5 (id=1752): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r1, 0x0, 0x21, 0x0, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0xba87317d461c07c9, 0x70bd26, 0x4004}, 0x14}, 0x1, 0x0, 0x0, 0x40000c9}, 0x1000) r3 = socket(0x1e, 0x4, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x10f, 0x11, 0x0, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xe) fchdir(r6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x2) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3cea0000", @ANYRES16=r4, @ANYBLOB="200026bd7000fcdbdf250e000000080005000400000020000380060007004e200000140002006d6163766c616e310000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000080) 4.572486644s ago: executing program 7 (id=1753): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @local}}, [0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0xfffffffffffffffc, 0x1]}, &(0x7f0000000000)=0x100) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) unshare(0x2a020480) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141000, 0x1c3) fdatasync(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000100), 0x10) unshare(0x480) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYBLOB="af905c7deba2916e1d8ae8ad9773ce960971e7b8cd511be607594165a3fa2a6ea6e74af2a19fe8007a9935726f6dfbb221448915a2b080ac1d7dcc9eef788f294e2dcb7f57a16623592e11bacfec12ca8d187f1988a0ce3fdff67291081491237e4711a15cd40e586d28be", @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @local}}, [0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0xfffffffffffffffc, 0x1]}, &(0x7f0000000000)=0x100) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) unshare(0x2a020480) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141000, 0x1c3) (async) fdatasync(r3) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000100), 0x10) (async) unshare(0x480) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYBLOB="af905c7deba2916e1d8ae8ad9773ce960971e7b8cd511be607594165a3fa2a6ea6e74af2a19fe8007a9935726f6dfbb221448915a2b080ac1d7dcc9eef788f294e2dcb7f57a16623592e11bacfec12ca8d187f1988a0ce3fdff67291081491237e4711a15cd40e586d28be", @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) (async) 3.592641611s ago: executing program 5 (id=1754): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername$inet(r7, &(0x7f0000000280)={0x2, 0x0, @dev}, &(0x7f00000002c0)=0x10) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000097c0)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xe, 0xfff3}, {}, {0xf, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000884a}, 0x20004800) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000a000000060000000000000d"], 0x0, 0x3e}, 0x20) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x90, 0x200, 0x0, 0x5, 0xf34}) 2.850796179s ago: executing program 7 (id=1756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4048010) (async) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000280)="240000001e005f0214f90408faac4700001e0000010000000000080008000dc00e0000ff", 0x24) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0x100801000, &(0x7f0000000180), 0x0, 0x0, {0x1d}, &(0x7f0000000240)=""/118, 0x76, 0x0, 0x0}, 0x58) (async, rerun: 32) lseek(r2, 0x164, 0x0) (rerun: 32) 2.772083136s ago: executing program 5 (id=1759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x4000800) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x48202) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) (async) prctl$PR_SET_THP_DISABLE(0x41, 0x1) (async, rerun: 32) prctl$PR_SET_THP_DISABLE(0x41, 0x1) (async, rerun: 32) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$XFS_IOC_GETBMAP(0xffffffffffffffff, 0xc0205826, &(0x7f0000000200)={0x4, 0x9, 0xc639, 0xa, 0x1}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x2, 0xfff3}, {}, {0x1, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x74, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x58, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x172}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xc1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xe2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 2.672021395s ago: executing program 5 (id=1761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000080)={0x20004, r3, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000300)={r6, 0x80000}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xa) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b9410101c0b800800000ba000000000f3067f0428170c939000000c744240059000000c7442402ac030231ff1c240f20d835080000000f22d80fc76f06400f239cc01643c744240000000000c744240206000000c7442406000000000f01142466460f2f8c6902000000b9da0b00000f32", 0x71}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000004500)=""/102386, 0x18ff2}], 0x1, 0x0, 0x2) read$FUSE(r8, &(0x7f00000024c0)={0x2020}, 0xfffffec1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000000)="a52aeb742ee133ea97b591646bd1f32ef12035a7dc", &(0x7f00000001c0)=""/195, &(0x7f00000002c0)="bf60edcd1be327e7bbdc0018596d8d8751b30d4527ee559e976633e5d3778dd456f1cd16a06d43c1109c3276e1371fb385d88ad65f6c92fc14c930c70af340da106ce85f125410d35a6b89a8170816823ec0ea0bf9d4ade66f72002c8f71c21468d18e8746f0c16cebe3932f1190edf945e2089f66726f206e2b07549337925671bd64bb56baec9d85c443e0d1550be0de7caaf2fca82f650ed81bbb89848de390018800c9ef1d4465a1c7117147c99b5852b018a2550d144db479e8a2cfbaf97d8c47dc691f0e9a0787138a4287cacd29f3c03ffee22abd018b2316fe067efe", &(0x7f00000003c0)="fd87d5d2d3763b7bdbf73a5e3b4263d0415ae718b77fdfcb47f052ebb3abd6743105ce749ccaa11bc3213b796a0519c49450034b1f080795cac2dd6e14775bb8dcc81f8a60b21dc2cf43b9e54f73bfd7832e34d0939561f8619d7c2d3d83c928cfb5b7cb7b6014da3f5a6afbdb79735b8953ec2c55d0a4e9eae3daea86fdf0f76956c0694362ef9718dc0cc87fa1d34f60676b3986eb0b2c480a54ccb3ad03f28eb18d", 0x6, r8}, 0x38) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000080)={0x20004, r3, 0x2}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000300)={r6, 0x80000}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xa) (async) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b9410101c0b800800000ba000000000f3067f0428170c939000000c744240059000000c7442402ac030231ff1c240f20d835080000000f22d80fc76f06400f239cc01643c744240000000000c744240206000000c7442406000000000f01142466460f2f8c6902000000b9da0b00000f32", 0x71}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000004500)=""/102386, 0x18ff2}], 0x1, 0x0, 0x2) (async) read$FUSE(r8, &(0x7f00000024c0)={0x2020}, 0xfffffec1) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000000)="a52aeb742ee133ea97b591646bd1f32ef12035a7dc", &(0x7f00000001c0)=""/195, &(0x7f00000002c0)="bf60edcd1be327e7bbdc0018596d8d8751b30d4527ee559e976633e5d3778dd456f1cd16a06d43c1109c3276e1371fb385d88ad65f6c92fc14c930c70af340da106ce85f125410d35a6b89a8170816823ec0ea0bf9d4ade66f72002c8f71c21468d18e8746f0c16cebe3932f1190edf945e2089f66726f206e2b07549337925671bd64bb56baec9d85c443e0d1550be0de7caaf2fca82f650ed81bbb89848de390018800c9ef1d4465a1c7117147c99b5852b018a2550d144db479e8a2cfbaf97d8c47dc691f0e9a0787138a4287cacd29f3c03ffee22abd018b2316fe067efe", &(0x7f00000003c0)="fd87d5d2d3763b7bdbf73a5e3b4263d0415ae718b77fdfcb47f052ebb3abd6743105ce749ccaa11bc3213b796a0519c49450034b1f080795cac2dd6e14775bb8dcc81f8a60b21dc2cf43b9e54f73bfd7832e34d0939561f8619d7c2d3d83c928cfb5b7cb7b6014da3f5a6afbdb79735b8953ec2c55d0a4e9eae3daea86fdf0f76956c0694362ef9718dc0cc87fa1d34f60676b3986eb0b2c480a54ccb3ad03f28eb18d", 0x6, r8}, 0x38) (async) 2.505492099s ago: executing program 5 (id=1763): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1031}}, 0x1006) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) (async) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000000040)) (async) r3 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000300), 0x20040, 0x0) read$ptp(r3, 0x0, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 1.960731303s ago: executing program 7 (id=1769): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595b, 0x400, 0x4, 0x34}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x24, 0x6000, @fd_index=0x9, 0x6, &(0x7f0000000240)=[{0x0}], 0x1, 0x15, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}}) (async) syz_emit_ethernet(0x26, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x4, 0x0, 0x4}}, {@can={0xc, {{0x1, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "f8af0529c1483fa8"}}}}, &(0x7f00000000c0)={0x0, 0x2, [0xeb7, 0x83d, 0xac3, 0x71c]}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @local, @remote}}}}, 0x0) (async, rerun: 64) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r7 = fcntl$dupfd(r6, 0x406, r6) write$tun(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x48010}, 0xc091) 1.342263914s ago: executing program 8 (id=1775): r0 = epoll_create1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendfile(r0, r1, 0x0, 0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x20, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x200}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x1000, 0xaa, &(0x7f00000003c0)=""/170, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xe, 0x3c, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r1], 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000931700300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed13"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x13, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x6d8c7dc1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0x80000000) write$binfmt_aout(r3, &(0x7f0000000700)=ANY=[], 0xff2e) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000800)=""/71, 0x47}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="4f4741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a494741494e0a50486ce2369e9e7101d386d8c8cc4f4e454f55540a535045414b4552202743442043617074757265272030303030303030303133373433383935333437320a50484f4e454f55540a494d495820274344272030303030303030303030303030303030303030300a4c494e45202753796e74682720303030303030303030acbf2fe0e605d44e83583ee2f2cddf7992259ea84754fdd87564fbec262e05b993a949d5993c5c1ee4c22f6fd6e14288666bbacfdb6d858b3c1708f54d1bc0836a8549166c118b"], 0xaf) close(r7) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000180)={0x0, 0x2, 0xfffffffe}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xd8be, 0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.282220533s ago: executing program 8 (id=1777): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01062dbd7000ffdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="040005010a003400010101010101000004000801060066"], 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000000) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x80701) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r6) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040094}, 0x84) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f0000000300)={0x4b5a9da54893e123, 0x3, 0x2, 0x2}, 0x8, 0x203ffffd, 0x10, 0x0, 0x2, 0x0, 0x0}) 1.191404961s ago: executing program 7 (id=1780): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x17bb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc3}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_raw(r3, &(0x7f0000000080)={0x1d, r5}, 0x10) r6 = socket(0x400000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000006c0)=@get={0x1, &(0x7f00000005c0)=""/224, 0x8f}) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmmsg$sock(r7, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004014) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c0001002dbd700000", @ANYRES32=r10, @ANYBLOB="8000ba060a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 1.121363783s ago: executing program 8 (id=1782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x200, 0x8001, 0x200}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x40811) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9064e, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x200, 0x8001, 0x200}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x40811) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9064e, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) 991.675665ms ago: executing program 8 (id=1784): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0xc}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) sendmmsg$inet(r3, &(0x7f00000029c0)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000480)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000440)="d2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000e80)="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", 0x599}], 0x1}}], 0x3, 0x4040040) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000080)) 872.173514ms ago: executing program 2 (id=1785): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)={0x2c, 0x41, 0x1, 0x5fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str='{\x00'}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) 871.729755ms ago: executing program 2 (id=1786): r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) fcntl$setpipe(r2, 0x407, 0x7000000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x0, 0x20000, 0x4}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x5e) ioctl$I2C_PEC(r0, 0x708, 0x3) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000001380)={0x0, 0x49, 0x8, &(0x7f0000001340)={0xd, "c8660972daadf38033035d21dcc910b0dbf5be74076dc3f2f67b364ef9ed965b13"}}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x800) r6 = syz_open_procfs(0x0, &(0x7f0000000900)='stat\x00') lseek(r6, 0x7, 0x1) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x22002) ioctl$CEC_ADAP_S_PHYS_ADDR(r7, 0x40026102, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r5, 0x4030582b, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x5, 0x622, 0x7fff}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x4000, 0x1e8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) 822.179558ms ago: executing program 7 (id=1787): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030527bd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00600000061800002c00126500001c00028008000400020000000600030002000000f2e45a97be494d538183171c0800150010b20e000800", @ANYRES32=r1, @ANYBLOB], 0x54}}, 0x440b0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fchmodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x40) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r5, 0xa) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(r5, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000", @ANYRES64=r1, @ANYRESOCT=0x0, @ANYRES32=r6, @ANYBLOB="06001200970a00000a00060008021100000000000600b500f30100000600b500a20000"], 0xb8}, 0x1, 0x0, 0x0, 0x20000}, 0x400d4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) open$dir(&(0x7f0000000040)='./file0/file1\x00', 0x20482, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES16=r8, @ANYRESOCT=r7, @ANYRESOCT=r2, @ANYBLOB="0c00990100000000fdffffff14000e001c"], 0x3c}}, 0x40010) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002f00090027bd7000000000000400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x42004}, 0x10) 752.498625ms ago: executing program 2 (id=1788): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000180)='-\'\x00::*& ', 0x210000, &(0x7f00000000c0)={@align=0x5, {0x13, 0x6, 0x6, 0xffffffffffffd535}}, 0x4, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xceaf}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f00000001c0)={0x4141, 0x5, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r4 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440), 0x1) (async) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES64=r1], 0x2c}}, 0x0) 750.40936ms ago: executing program 2 (id=1789): r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) ppoll(&(0x7f0000000280)=[{r0, 0x10320}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 662.350214ms ago: executing program 2 (id=1790): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x14, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="040029ff0a00060008110010000000000000000000000000000000002beec2aa38b4f58da3"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40805) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000680)={0x53, 0xfffffffffffffffc, 0x6, 0x40, @buffer={0x0, 0x1000, &(0x7f0000000a00)=""/4096}, &(0x7f0000000040)="add18bb6803d", 0x0, 0xce9, 0x10, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) close(r0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf250a000000060009000000000008000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x40004004}, 0x20040044) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r12 = syz_open_dev$evdev(&(0x7f0000001040), 0x1, 0x181080) ioctl$EVIOCSMASK(r12, 0x40104593, &(0x7f0000000380)={0x4, 0x3, &(0x7f0000000500)="583ec3"}) 292.67833ms ago: executing program 7 (id=1791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0900000001001f", 0x7) ioctl$KVM_SET_ONE_REG(r2, 0x4048aecb, &(0x7f0000000040)=@arm64_ccsidr={0x6020000000110009, &(0x7f0000000300)=0xd8}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000100)={0x6, &(0x7f0000000200)=[{0x13, '\x00', @buffer={"eb4de66fe5a05cc2520bb3cb000722e64dc432bca0ee9d99c7d8751b80c2c208", 0x20}, 0x6}]}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x2e, 0x46, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 292.028608ms ago: executing program 2 (id=1792): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x10, 0x42032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000023000000", 0x18) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x16, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}, [@call={0x85, 0x0, 0x0, 0x5}, @tail_call, @exit, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400800}}, @ringbuf_query]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000180)={0x0, 0xfffffffd}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x7fffffff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, r8, 0x15, 0x0, @void}, 0xffffffffffffff2e) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r9, r7, 0x4, r7}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x43, 0x0, 0x2, @mcast2, @mcast2, 0x7, 0x708, 0x7, 0xa96}}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@deltfilter={0x2c, 0x2d, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfffd, 0x1}, {0x1, 0xe}, {0x12, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r11 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r11, 0xc048aeca, &(0x7f0000000340)={0x3, 0x0, [{0x119, 0x0, 0x10000}, {0xb2e, 0x0, 0x39294324}, {0x1df, 0x0, 0x8}]}) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r13 = fanotify_init(0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x5a) close_range(r13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 2.671159ms ago: executing program 8 (id=1793): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) syz_open_dev$vbi(&(0x7f0000000680), 0x0, 0x2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x84, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x11, 0x2}, 0x8, 0x203ffffb, 0x300, 0x0, 0x2, 0x20000, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f00000001c0)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x21, 0x3, 0x610, 0x278, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x540, 0xffffffff, 0xffffffff, 0x540, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x230, 0x278, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x3, 0x5b, 0x1e, 0x1a1, 0x101}}, @common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x3, 0x4, 0x60, 0x400, 0x1, 0xf6, 0x7fffffff, 0x20, 0x80}, {0x50}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1, 0x8994, 0x0, 'netbios-ns\x00', {0x3}}}}, {{@uncond, 0x0, 0x258, 0x2c8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x3, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'ip6erspan0\x00', {0x3, 0xd, 0x41, 0x1, 0x2, 0x1000, 0x6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x2, 0x5, 0x1, 0x0, "ea1ee5d1c9601b30deb958a92fe3434d35835e19a41abc1c94d6a2fafc10325c60f0f8e407c0ad2bf4a9bcbc2a6c01a85913d84289f09effeb1b72461200"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x670) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000006c0)={'raw\x00', 0x77, "14b8fa20e384bae97d0e193866f688ab945384f4e00bb5694b2118342ce16f5e07d40b683f0d0bbe40f1406118486acf196f89f5173e7e6f6061aa58ff72f31ce58c145bb9b6a1ffe9af0c46a9edcc22f3928276a78a402d4095082d173bedf6db796f4eb93eec1113ea8d8704b426f5f2c181f5afd559"}, &(0x7f0000000780)=0x9b) 0s ago: executing program 8 (id=1794): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x40085500, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x44d41, 0x0) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000000)="6047a707cc8209cca6cf4ff5f9eb4fca6e64f2eb9b15aef7be9a8dadb06700"/42, 0x2a}, {&(0x7f0000000180)="4f985c0ab8caa43d59814f1a5fd4cc6038a284ad66d567cbc4ca293a45efe0d1d1da852e0b17c27f56504c305534ffc207485c716bd33a11e20e23e5dc1990f002d1053f4985891795e91d1385257f8b14a668d1ece24ed4a75bf9789ceaf0fbd2d316731b05b8b4d7db190d04548ab0c7f2b82e7875737b689c5537f58dcd30e82ea4c9a65158949417e2baaf38c643b481f3868049fec34884bd1108c154", 0xfffffe9c}, {&(0x7f0000001640)="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", 0xf37}], 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xc}}, 0x14, &(0x7f0000000140)={&(0x7f00000000c0)="7ea98c8cf5194af084d651559f27049d5f755a74e02b0a279df00853f8f3e817a0cf3e2f786f", 0x26}, 0x1, 0x0, 0x0, 0x80cd}, 0x20000004) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000002380)) preadv(r5, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) writev(r1, &(0x7f0000000280), 0x0) kernel console output (not intermixed with test programs): n process `syz.5.1034'. [ 124.841122][ T5740] Bluetooth: hci2: command tx timeout [ 124.976508][ T9688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.134689][ T9688] veth0_vlan: entered promiscuous mode [ 125.139973][ T9688] veth1_vlan: entered promiscuous mode [ 125.160225][ T9688] veth0_macvtap: entered promiscuous mode [ 125.164720][ T9688] veth1_macvtap: entered promiscuous mode [ 125.174995][ T9688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.182733][ T9688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.188925][ T9794] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.192158][ T9794] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.196706][ T9794] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.199728][ T9794] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.270633][ T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.276073][ T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.297109][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.300467][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.635646][ T9942] overlayfs: missing 'lowerdir' [ 125.693484][ T9942] tun0: tun_chr_ioctl cmd 1074025675 [ 125.695253][ T9942] tun0: persist enabled [ 125.698816][ T9942] tun0: tun_chr_ioctl cmd 1074025675 [ 125.700586][ T9942] tun0: persist disabled [ 125.785891][ T9951] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1046'. [ 125.894883][ T2327] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 126.033005][ T1488] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 126.161898][ T9993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.167264][ T9993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.201610][ T1488] usb 11-1: Using ep0 maxpacket: 16 [ 126.208980][ T1488] usb 11-1: config 128 has an invalid interface number: 193 but max is 2 [ 126.213425][ T1488] usb 11-1: config 128 has an invalid interface number: 236 but max is 2 [ 126.216231][ T1488] usb 11-1: config 128 has an invalid interface number: 112 but max is 2 [ 126.219413][ T1488] usb 11-1: config 128 has no interface number 0 [ 126.221920][ T1488] usb 11-1: config 128 has no interface number 1 [ 126.224054][ T1488] usb 11-1: config 128 has no interface number 2 [ 126.226214][ T1488] usb 11-1: config 128 interface 193 altsetting 70 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 126.230005][ T1488] usb 11-1: config 128 interface 193 altsetting 70 has a duplicate endpoint with address 0x7, skipping [ 126.234844][ T1488] usb 11-1: config 128 interface 193 altsetting 70 has a duplicate endpoint with address 0x6, skipping [ 126.239509][ T1488] usb 11-1: config 128 interface 193 altsetting 70 has a duplicate endpoint with address 0x8, skipping [ 126.243805][ T1488] usb 11-1: config 128 interface 193 altsetting 70 has an invalid descriptor for endpoint zero, skipping [ 126.247733][ T1488] usb 11-1: config 128 interface 193 altsetting 70 has a duplicate endpoint with address 0xD, skipping [ 126.251549][ T1488] usb 11-1: config 128 interface 193 altsetting 70 has a duplicate endpoint with address 0xD, skipping [ 126.255149][ T1488] usb 11-1: config 128 interface 193 altsetting 70 has a duplicate endpoint with address 0x3, skipping [ 126.258703][ T1488] usb 11-1: config 128 interface 193 altsetting 70 has a duplicate endpoint with address 0xD, skipping [ 126.262460][ T1488] usb 11-1: config 128 interface 193 altsetting 70 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 126.268492][ T1488] usb 11-1: config 128 interface 193 altsetting 70 endpoint 0x81 has invalid maxpacket 30220, setting to 1024 [ 126.273147][ T1488] usb 11-1: config 128 interface 193 altsetting 70 bulk endpoint 0x81 has invalid maxpacket 1024 [ 126.276523][ T1488] usb 11-1: config 128 interface 193 altsetting 70 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 126.280920][ T1488] usb 11-1: config 128 interface 236 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 126.286689][ T1488] usb 11-1: config 128 interface 112 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 126.292291][ T1488] usb 11-1: config 128 interface 112 altsetting 13 endpoint 0xE has an invalid bInterval 243, changing to 7 [ 126.295880][ T1488] usb 11-1: config 128 interface 112 altsetting 13 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 126.299386][ T1488] usb 11-1: config 128 interface 112 altsetting 13 has a duplicate endpoint with address 0x8, skipping [ 126.305253][ T1488] usb 11-1: config 128 interface 112 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 126.308858][ T1488] usb 11-1: config 128 interface 112 altsetting 13 has a duplicate endpoint with address 0x4, skipping [ 126.313253][ T1488] usb 11-1: config 128 interface 112 altsetting 13 has a duplicate endpoint with address 0x7, skipping [ 126.317647][ T1488] usb 11-1: config 128 interface 112 altsetting 13 has a duplicate endpoint with address 0xD, skipping [ 126.322405][ T1488] usb 11-1: config 128 interface 112 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 126.327121][ T1488] usb 11-1: config 128 interface 112 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 126.332085][ T1488] usb 11-1: config 128 interface 112 altsetting 13 has a duplicate endpoint with address 0x1, skipping [ 126.336599][ T1488] usb 11-1: config 128 interface 193 has no altsetting 0 [ 126.339544][ T1488] usb 11-1: config 128 interface 236 has no altsetting 0 [ 126.343153][ T1488] usb 11-1: config 128 interface 112 has no altsetting 0 [ 126.349274][ T1488] usb 11-1: New USB device found, idVendor=0baf, idProduct=00f2, bcdDevice=2d.07 [ 126.353216][ T1488] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.356588][ T1488] usb 11-1: Product: syz [ 126.358376][ T1488] usb 11-1: Manufacturer: syz [ 126.360458][ T1488] usb 11-1: SerialNumber: syz [ 126.369157][ T9964] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 126.574735][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.577916][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.921108][ T5740] Bluetooth: hci2: command tx timeout [ 127.372491][ T1488] usb 11-1: [ueagle-atm] pre-firmware device, uploading firmware [ 127.383140][ T10] usb 11-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 127.387070][ T10] usb 11-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 127.391287][ T1488] usb 11-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 127.405500][ T1488] usb 11-1: [ueagle-atm] pre-firmware device, uploading firmware [ 127.409118][ T1488] usb 11-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 127.416119][ T1488] usb 11-1: [ueagle-atm] pre-firmware device, uploading firmware [ 127.419625][ T1488] usb 11-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 127.428551][ T1488] usb 11-1: USB disconnect, device number 9 [ 129.001245][ T5740] Bluetooth: hci2: command tx timeout [ 129.115609][ T42] kauditd_printk_skb: 2072 callbacks suppressed [ 129.115627][ T42] audit: type=1400 audit(1784134384.825:3129): avc: denied { write } for pid=10011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.171818][ T42] audit: type=1400 audit(1784134384.885:3130): avc: denied { write } for pid=10014 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.103864][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.322894][ T42] audit: type=1400 audit(1784134389.035:3131): avc: denied { write } for pid=10019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.378459][ T42] audit: type=1400 audit(1784134389.085:3132): avc: denied { write } for pid=10022 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.587014][ T42] audit: type=1400 audit(1784134389.295:3133): avc: denied { write } for pid=10025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.645689][ T42] audit: type=1400 audit(1784134389.355:3134): avc: denied { write } for pid=10028 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.542675][ T42] audit: type=1400 audit(1784134390.255:3135): avc: denied { write } for pid=10031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.588711][ T42] audit: type=1400 audit(1784134390.295:3136): avc: denied { write } for pid=10034 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.205799][ T42] audit: type=1400 audit(1784134390.915:3137): avc: denied { write } for pid=10037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.251939][ T42] audit: type=1400 audit(1784134390.965:3138): avc: denied { write } for pid=10040 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.724874][ T42] audit: type=1400 audit(1784134391.435:3139): avc: denied { write } for pid=10043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.767837][ T42] audit: type=1400 audit(1784134391.475:3140): avc: denied { write } for pid=10046 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.357346][T10090] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1068'. [ 136.397150][ T42] audit: type=1400 audit(1784134392.105:3141): avc: denied { read write } for pid=10095 comm="syz.5.1070" name="vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 136.410245][ T42] audit: type=1400 audit(1784134392.105:3142): avc: denied { open } for pid=10095 comm="syz.5.1070" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 136.422920][ T42] audit: type=1400 audit(1784134392.105:3143): avc: denied { ioctl } for pid=10095 comm="syz.5.1070" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 136.442839][T10103] nicvf0: renamed from team0 (while UP) [ 136.454431][T10103] nicvf0: Cannot enslave team device to itself [ 136.457807][T10103] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 136.564449][ T42] audit: type=1400 audit(1784134392.275:3144): avc: denied { ioctl } for pid=10111 comm="syz.6.1077" path="socket:[36117]" dev="sockfs" ino=36117 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 136.641964][ T34] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 136.791095][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 136.799218][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 136.805873][ T34] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 136.810505][ T34] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 136.822398][ T34] usb 7-1: config 14 has no interface number 0 [ 136.829536][ T34] usb 7-1: config 14 has no interface number 1 [ 136.835687][ T34] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 136.843118][ T34] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 136.852093][ T34] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 136.863264][ T34] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 136.867875][ T34] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 136.872586][ T34] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.878104][ T34] usb 7-1: config 14 interface 57 has no altsetting 0 [ 136.880880][ T34] usb 7-1: config 14 interface 228 has no altsetting 0 [ 136.890023][ T34] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 136.895948][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.899184][ T34] usb 7-1: Product: syz [ 136.900835][ T34] usb 7-1: Manufacturer: syz [ 136.902421][ T34] usb 7-1: SerialNumber: syz [ 137.111135][ T1488] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 137.271144][ T1488] usb 11-1: Using ep0 maxpacket: 8 [ 137.274315][ T1488] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.278130][ T1488] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 137.281764][ T1488] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 137.286431][ T1488] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 137.290782][ T1488] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 137.294540][ T1488] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.303853][ T1488] hub 11-1:1.0: bad descriptor, ignoring hub [ 137.306457][ T1488] hub 11-1:1.0: probe with driver hub failed with error -5 [ 137.310127][ T1488] cdc_wdm 11-1:1.0: skipping garbage [ 137.312399][ T1488] cdc_wdm 11-1:1.0: skipping garbage [ 137.314628][ T1488] cdc_wdm 11-1:1.0: skipping garbage [ 137.320187][ T1488] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 137.323220][ T1488] cdc_wdm 11-1:1.0: Unknown control protocol [ 137.326036][ T34] legousbtower 7-1:14.57: interrupt endpoints not found [ 137.359277][ T34] legousbtower 7-1:14.228: get version request failed: -71 [ 137.366713][ T34] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 137.377842][ T34] usb 7-1: USB disconnect, device number 18 [ 137.383618][T10158] usb usb8: usbfs: process 10158 (syz.5.1091) did not claim interface 0 before use [ 137.666026][T10172] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1095'. [ 137.681300][ T1488] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 137.811681][T10145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.815213][T10145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.861053][ T1488] usb 10-1: Using ep0 maxpacket: 8 [ 137.864364][ T1488] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.867995][ T1488] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.871567][ T1488] usb 10-1: config 0 interface 0 has no altsetting 0 [ 137.874507][ T1488] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 137.878199][ T1488] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.891152][ T1488] usb 10-1: config 0 descriptor?? [ 137.961099][ T34] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 138.072850][ T24] usb 11-1: USB disconnect, device number 10 [ 138.080753][T10185] ip6gretap0: entered promiscuous mode [ 138.124588][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.128609][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.133898][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.137627][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.197660][T10189] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 138.200260][T10189] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 138.202907][T10189] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 138.205443][T10189] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 138.207966][T10189] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 138.210482][T10189] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 138.213059][T10189] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 138.215623][T10189] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 138.218135][T10189] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 138.304984][ T1488] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 138.307418][ T1488] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 138.309660][ T1488] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 138.312061][ T1488] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 138.314392][ T1488] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 138.317040][ T1488] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 138.349215][ T34] usb 7-1: usb_control_msg returned -32 [ 138.351081][ T34] usbtmc 7-1:16.0: can't read capabilities [ 138.516533][T10158] No source specified [ 138.520536][ T34] usb 10-1: USB disconnect, device number 6 [ 138.709851][T10199] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 138.720339][ T1488] usb 7-1: USB disconnect, device number 19 [ 138.898208][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.905194][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.909312][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.912919][ T5738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.915745][ T5738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.076032][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1105'. [ 139.081713][T10201] ±ÿ speed is unknown, defaulting to 1000 [ 139.084539][T10212] capability: warning: `syz.5.1105' uses 32-bit capabilities (legacy support in use) [ 139.113598][T10216] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1106'. [ 139.252103][T10201] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.254514][T10201] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.256825][T10201] bridge_slave_0: entered allmulticast mode [ 139.256882][T10227] loop5: detected capacity change from 0 to 7 [ 139.262055][T10201] bridge_slave_0: entered promiscuous mode [ 139.262107][T10227] Dev loop5: unable to read RDB block 7 [ 139.266324][T10227] loop5: unable to read partition table [ 139.268882][T10227] loop5: partition table beyond EOD, truncated [ 139.269116][T10201] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.271585][T10227] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 139.279588][T10201] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.283565][T10201] bridge_slave_1: entered allmulticast mode [ 139.287737][T10201] bridge_slave_1: entered promiscuous mode [ 139.309185][T10230] netlink: 'syz.5.1109': attribute type 2 has an invalid length. [ 139.331963][T10201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.338951][T10201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.375878][T10201] team0: Port device team_slave_0 added [ 139.380934][T10201] team0: Port device team_slave_1 added [ 139.414711][T10201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.417186][T10201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.431299][T10201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.436956][T10201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.439441][T10201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.451437][T10201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.491749][T10201] hsr_slave_0: entered promiscuous mode [ 139.494761][T10201] hsr_slave_1: entered promiscuous mode [ 139.496883][T10201] debugfs: 'hsr0' already exists in 'hsr' [ 139.498675][T10201] Cannot create hsr debugfs directory [ 139.707180][T10201] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 139.717172][T10201] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.720483][T10201] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 139.726882][T10201] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.732047][T10201] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 139.737840][T10201] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.741851][T10201] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 139.746898][T10201] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.770492][T10201] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.772857][T10201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.775435][T10201] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.777942][T10201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.816750][T10201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.824476][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.827247][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.839685][T10201] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.845678][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.847968][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.854252][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.856582][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.895832][T10260] : renamed from bridge_slave_1 (while UP) [ 139.936028][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 139.986857][T10268] fuse: Bad value for 'fd' [ 140.111835][T10201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.112921][T10276] ublk_ctrl_add_dev: invalid recovery flags 10 [ 140.181053][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 140.181068][ T42] audit: type=1400 audit(1784134395.885:3152): avc: denied { unmount } for pid=7979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 140.215527][ T42] audit: type=1400 audit(1784134395.925:3153): avc: denied { ioctl } for pid=10282 comm="syz.5.1118" path="socket:[37303]" dev="sockfs" ino=37303 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.225727][ T42] audit: type=1400 audit(1784134395.925:3154): avc: denied { listen } for pid=10282 comm="syz.5.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.275504][T10201] veth0_vlan: entered promiscuous mode [ 140.293798][T10201] veth1_vlan: entered promiscuous mode [ 140.316043][T10201] veth0_macvtap: entered promiscuous mode [ 140.320759][T10201] veth1_macvtap: entered promiscuous mode [ 140.334645][T10201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.343595][T10201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.349603][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.353389][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.357087][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.361836][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.436886][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.444363][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.473069][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.476038][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.571130][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 140.711386][ T24] usb 10-1: device descriptor read/64, error -71 [ 140.971170][ T24] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 141.014144][ T5738] Bluetooth: hci1: command tx timeout [ 141.101129][ T24] usb 10-1: device descriptor read/64, error -71 [ 141.211663][ T24] usb usb10-port1: attempt power cycle [ 141.551108][ T24] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 141.571552][ T24] usb 10-1: device descriptor read/8, error -71 [ 141.811121][ T24] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 141.831985][ T24] usb 10-1: device descriptor read/8, error -71 [ 141.867591][T10330] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 141.883001][T10330] 8021q: adding VLAN 0 to HW filter on device bond8 [ 141.887790][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1129'. [ 141.890772][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 141.900750][ T42] audit: type=1400 audit(1784134397.605:3155): avc: denied { call } for pid=10329 comm="syz.2.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 141.908877][ T42] audit: type=1400 audit(1784134397.605:3156): avc: denied { transfer } for pid=10329 comm="syz.2.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 141.941110][T10333] ±ÿ speed is unknown, defaulting to 1000 [ 141.958111][ T24] usb usb10-port1: unable to enumerate USB device [ 141.996575][ T42] audit: type=1400 audit(1784134397.705:3157): avc: denied { read } for pid=10332 comm="syz.8.1130" name="file1" dev="9p" ino=83099731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.009790][ T42] audit: type=1400 audit(1784134397.705:3158): avc: denied { ioctl } for pid=10332 comm="syz.8.1130" path="/6/file0/file1" dev="9p" ino=83099731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.056344][T10346] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 142.060189][T10346] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 142.065099][T10346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1134'. [ 142.318794][T10360] tmpfs: Bad value for 'mpol' [ 142.327221][T10360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10360 comm=syz.7.1139 [ 142.333335][T10360] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1139'. [ 142.465136][T10365] kvm: Disabled LAPIC found during irq injection [ 142.481900][T10365] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46678 sclass=netlink_xfrm_socket pid=10365 comm=syz.7.1141 [ 142.496437][T10365] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1141'. [ 142.973433][ T42] audit: type=1400 audit(1784134398.685:3159): avc: denied { ioctl } for pid=10378 comm="syz.7.1145" path="/dev/uhid" dev="devtmpfs" ino=1295 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 143.081503][ T5738] Bluetooth: hci1: command tx timeout [ 143.175057][T10395] NILFS (nbd2): device size too small [ 143.195238][T10395] syzkaller0: entered promiscuous mode [ 143.197266][T10395] syzkaller0: entered allmulticast mode [ 143.209543][T10395] xt_hashlimit: size too large, truncated to 1048576 [ 143.510447][T10409] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1150'. [ 143.614073][ T42] audit: type=1400 audit(1784134399.325:3160): avc: denied { name_bind } for pid=10430 comm="syz.7.1154" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 143.653547][ T42] audit: type=1400 audit(1784134399.365:3161): avc: denied { create } for pid=10432 comm="syz.2.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.826942][T10443] program syz.7.1154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.991802][T10451] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input20 [ 144.491988][ T34] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 144.520866][T10468] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1166'. [ 144.529775][T10469] netlink: 'syz.7.1166': attribute type 1 has an invalid length. [ 144.553087][T10469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.671227][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 144.676632][ T34] usb 10-1: unable to get BOS descriptor or descriptor too short [ 144.682110][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 144.687623][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 144.701063][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 144.704646][ T34] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 144.706286][T10478] gtp0: entered promiscuous mode [ 144.708160][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 144.709738][T10478] gtp0: entered allmulticast mode [ 144.721408][ T34] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 812 [ 144.728671][ T34] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 144.734380][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.741048][ T34] usb 10-1: Product: syz [ 144.742729][ T34] usb 10-1: Manufacturer: syz [ 144.751051][ T34] usb 10-1: SerialNumber: syz [ 144.756963][ T34] usb 10-1: config 0 descriptor?? [ 144.762066][T10466] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 144.765016][T10466] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 144.786671][ T34] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.885982][ T5738] Bluetooth: hci2: ACL packet too small [ 145.031501][T10481] xt_CT: No such helper "pptp" [ 145.033905][T10481] 0x00000000001d-0x2000000000dd : "" [ 145.035735][T10481] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ffe3 [ 145.069516][T10481] ftl_cs: FTL header corrupt! [ 145.161092][ T5738] Bluetooth: hci1: command tx timeout [ 145.244134][T10487] gfs2: Unknown parameter 'norecoveryage_percpu' [ 145.417134][T10494] kernel read not supported for file /file0 (pid: 10494 comm: syz.8.1171) [ 145.422327][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 145.422384][ T42] audit: type=1800 audit(1784134401.125:3191): pid=10494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1171" name="file0" dev="mqueue" ino=37686 res=0 errno=0 [ 145.477193][T10498] befs: (loop8): No write support. Marking filesystem read-only [ 145.480431][T10498] befs: (loop8): unable to read superblock [ 145.533383][T10502] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 145.760760][T10515] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1179'. [ 145.764461][T10515] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1179'. [ 146.207577][ T847] libceph: connect (1)[c::]:6789 error -101 [ 146.213430][ T847] libceph: mon0 (1)[c::]:6789 connect error [ 146.239626][ T847] libceph: connect (1)[c::]:6789 error -101 [ 146.242389][ T847] libceph: mon0 (1)[c::]:6789 connect error [ 146.262265][T10523] ceph: No mds server is up or the cluster is laggy [ 146.457626][T10540] netlink: 'syz.8.1185': attribute type 12 has an invalid length. [ 146.460376][T10540] netlink: 'syz.8.1185': attribute type 29 has an invalid length. [ 146.465491][T10540] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1185'. [ 146.468909][T10540] netlink: 'syz.8.1185': attribute type 3 has an invalid length. [ 146.471957][T10540] netlink: 'syz.8.1185': attribute type 2 has an invalid length. [ 146.552815][T10545] tmpfs: Bad value for 'mpol' [ 146.671056][ T42] audit: type=1400 audit(1784134402.375:3192): avc: denied { write } for pid=10550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.728825][ T42] audit: type=1400 audit(1784134402.435:3193): avc: denied { write } for pid=10556 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.844681][ T42] audit: type=1400 audit(1784134402.555:3194): avc: denied { write } for pid=10558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.914541][ T42] audit: type=1400 audit(1784134402.625:3195): avc: denied { write } for pid=10566 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.009180][ T42] audit: type=1400 audit(1784134402.715:3196): avc: denied { write } for pid=10572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.020530][T10577] bridge1: entered allmulticast mode [ 147.081417][ T42] audit: type=1400 audit(1784134402.785:3197): avc: denied { write } for pid=10579 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.193245][ T42] audit: type=1400 audit(1784134402.905:3198): avc: denied { write } for pid=10581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.241316][ T5738] Bluetooth: hci1: command tx timeout [ 147.244261][ T42] audit: type=1400 audit(1784134402.955:3199): avc: denied { write } for pid=10586 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.323297][ T42] audit: type=1400 audit(1784134403.025:3200): avc: denied { write } for pid=10588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.344078][T10594] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 147.365322][ T24] usb 10-1: USB disconnect, device number 11 [ 147.641557][ T2327] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 147.794439][ T2327] usb 13-1: config 0 has no interfaces? [ 147.796981][ T2327] usb 13-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 147.800754][ T2327] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.806358][ T2327] usb 13-1: config 0 descriptor?? [ 147.921136][ T24] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 148.020336][ T2327] usb 13-1: USB disconnect, device number 2 [ 148.051115][ T24] usb 10-1: device descriptor read/64, error -71 [ 148.301086][ T24] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 148.451713][ T24] usb 10-1: device descriptor read/64, error -71 [ 148.561463][ T24] usb usb10-port1: attempt power cycle [ 148.901157][ T34] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 148.911142][ T24] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 148.931839][ T24] usb 10-1: device descriptor read/8, error -71 [ 149.054193][ T34] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.058293][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.062048][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 149.065241][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.069377][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.072363][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.078318][ T34] usb 7-1: config 0 descriptor?? [ 149.171088][ T24] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 149.191713][ T24] usb 10-1: device descriptor read/8, error -71 [ 149.302716][ T24] usb usb10-port1: unable to enumerate USB device [ 149.310011][ T34] usbhid 7-1:0.0: can't add hid device: -71 [ 149.312484][ T34] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 149.317382][ T34] usb 7-1: USB disconnect, device number 20 [ 149.433768][T10637] random: crng reseeded on system resumption [ 149.622412][T10657] ubi8: attaching mtd0 [ 149.627029][T10657] ubi8: scanning is finished [ 149.628576][T10657] ubi8: empty MTD device detected [ 149.630221][T10657] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 149.730254][T10668] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 149.818346][T10673] xt_hashlimit: size too large, truncated to 1048576 [ 149.905905][ T5834] bridge0: entered promiscuous mode [ 149.932513][T10657] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 149.974735][T10684] bridge_slave_0: left allmulticast mode [ 149.976548][T10684] bridge_slave_0: left promiscuous mode [ 149.978407][T10684] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.985515][T10684] bridge_slave_1: left allmulticast mode [ 149.987425][T10684] bridge_slave_1: left promiscuous mode [ 149.989262][T10684] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.996636][T10684] bond0: (slave bond_slave_0): Releasing backup interface [ 150.002774][T10684] bond0: (slave bond_slave_1): Releasing backup interface [ 150.009584][T10684] team0: Port device team_slave_0 removed [ 150.022805][T10684] team0: Port device team_slave_1 removed [ 150.025208][T10684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.027639][T10684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.030795][T10684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.034326][T10684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.039099][T10684] net_ratelimit: 45 callbacks suppressed [ 150.039115][T10684] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.056572][T10690] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 150.083930][T10693] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 150.302565][T10706] pimreg: entered allmulticast mode [ 150.384753][T10708] block device autoloading is deprecated and will be removed. [ 150.586395][T10719] CIFS mount error: No usable UNC path provided in device string! [ 150.586395][T10719] [ 150.590157][T10719] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 150.594587][T10719] CUSE: unknown device info "" [ 150.596748][T10719] CUSE: unknown device info "" [ 150.598839][T10719] CUSE: unknown device info "" [ 150.600870][T10719] CUSE: unknown device info "" [ 150.604134][T10719] CUSE: zero length info key specified [ 150.750543][T10726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55184 sclass=netlink_route_socket pid=10726 comm=syz.7.1224 [ 150.759635][T10731] fuse: Unknown parameter 'fdT¦ãM-À ̇9šÏš_ÎÙ÷€•Pôuºk¼;he:‡U¨ôºŒOá6•!FV“·©@S± [ 150.759635][T10731] Ø’óî‚Y­ŸH”Jbø–¿æØ0x0000000000000009' [ 150.759728][T10732] fuse: Unknown parameter 'fdT¦ãM-À ̇9šÏš_ÎÙ÷€•Pôuºk¼;he:‡U¨ôºŒOá6•!FV“·©@S± [ 150.759728][T10732] Ø’óî‚Y­ŸH”Jbø–¿æØ0x0000000000000009' [ 150.833532][T10748] netlink: 'syz.2.1231': attribute type 1 has an invalid length. [ 150.842771][T10746] __nla_validate_parse: 2 callbacks suppressed [ 150.842781][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1230'. [ 150.859526][T10748] 8021q: adding VLAN 0 to HW filter on device bond9 [ 150.882184][T10753] binder: 10752:10753 ioctl c00c620f 200000000500 returned -22 [ 150.932736][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 150.932750][ T42] audit: type=1400 audit(1784134406.645:3208): avc: denied { connect } for pid=10761 comm="syz.7.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.029646][T10771] use of bytesused == 0 is deprecated and will be removed in the future, [ 151.033506][T10771] use the actual size instead. [ 151.042029][T10771] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present [ 151.093462][T10776] serio: Serial port ptm0 [ 151.108104][T10780] ubi: refuse attaching mtd1 - zero erasesize flash is not supported [ 151.117189][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1242'. [ 151.220911][T10786] devpts: Bad value for 'max' [ 151.276210][ T42] audit: type=1400 audit(1784134406.985:3209): avc: denied { write } for pid=10789 comm="syz.5.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 151.304422][T10795] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 151.390124][T10810] tmpfs: Bad value for 'mpol' [ 151.446032][T10811] syzkaller1: entered allmulticast mode [ 151.510696][T10819] Invalid argument reading file caps for ./file0 [ 151.663580][ T42] audit: type=1400 audit(1784134407.375:3210): avc: denied { mounton } for pid=10818 comm="syz.5.1252" path="/proc/666/task" dev="proc" ino=38868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 151.712464][ T42] audit: type=1400 audit(1784134407.425:3211): avc: denied { bind } for pid=10836 comm="syz.8.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.713443][T10838] cgroup: noprefix used incorrectly [ 151.748228][T10841] Sensor A: ================= START STATUS ================= [ 151.748485][T10842] Sensor A: ================= START STATUS ================= [ 151.750900][T10841] Sensor A: Test Pattern: 75% Colorbar [ 151.757298][T10841] Sensor A: Show Information: All [ 151.758930][T10841] Sensor A: Vertical Flip: false [ 151.760565][T10841] Sensor A: Horizontal Flip: true [ 151.761137][ T2327] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 151.762342][T10841] Sensor A: Brightness: 128 [ 151.768007][T10841] Sensor A: Contrast: 128 [ 151.769398][T10841] Sensor A: Hue: 0 [ 151.770824][T10841] Sensor A: Saturation: 128 [ 151.772609][T10841] Sensor A: Pixel Rate: 160000000 [ 151.774369][T10841] Sensor A: Horizontal Blanking: 800 [ 151.776063][T10841] Sensor A: Vertical Blanking: 3223 [ 151.777764][T10841] Sensor A: ================== END STATUS ================== [ 151.777827][T10842] Sensor A: Test Pattern: 75% Colorbar [ 151.782281][T10842] Sensor A: Show Information: All [ 151.783921][T10842] Sensor A: Vertical Flip: false [ 151.785473][T10842] Sensor A: Horizontal Flip: true [ 151.787007][T10842] Sensor A: Brightness: 128 [ 151.788444][T10842] Sensor A: Contrast: 128 [ 151.789891][T10842] Sensor A: Hue: 0 [ 151.791064][ T29] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 151.792351][T10842] Sensor A: Saturation: 128 [ 151.795068][T10842] Sensor A: Pixel Rate: 160000000 [ 151.796657][T10842] Sensor A: Horizontal Blanking: 800 [ 151.798349][T10842] Sensor A: Vertical Blanking: 3223 [ 151.802890][T10842] Sensor A: ================== END STATUS ================== [ 151.809144][T10841] netlink: 'syz.8.1260': attribute type 2 has an invalid length. [ 151.811753][T10842] netlink: 'syz.8.1260': attribute type 2 has an invalid length. [ 151.916505][T10852] netlink: 25 bytes leftover after parsing attributes in process `syz.7.1264'. [ 151.923645][T10852] netlink: 'syz.7.1264': attribute type 14 has an invalid length. [ 151.942584][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 151.947653][ T29] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.951297][ T29] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.954417][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 151.956581][ T29] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 151.959379][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.964625][ T29] usb 7-1: config 0 descriptor?? [ 151.995660][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1266'. [ 152.041200][T10864] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 152.041200][T10864] program syz.7.1268 not setting count and/or reply_len properly [ 152.086995][T10870] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1269'. [ 152.090711][T10870] netlink: 'syz.7.1269': attribute type 1 has an invalid length. [ 152.168164][T10872] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.271627][ T5834] usb 13-1: new full-speed USB device number 3 using dummy_hcd [ 152.294812][T10872] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.366974][T10872] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.378548][ T29] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 152.383712][ T29] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 152.386101][ T29] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 152.390647][ T29] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 152.393494][ T29] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 152.397430][ T29] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 152.401135][ T5834] usb 13-1: device descriptor read/64, error -71 [ 152.518976][T10872] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.570130][T10882] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 152.573506][T10882] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 152.576374][T10882] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 152.579094][T10882] UDF-fs: Scanning with blocksize 512 failed [ 152.582776][T10882] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 152.585925][T10882] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 152.588869][T10882] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 152.591415][T10882] UDF-fs: Scanning with blocksize 1024 failed [ 152.592297][ T29] usb 7-1: USB disconnect, device number 21 [ 152.593755][T10882] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 152.598630][T10882] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 152.601797][T10882] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 152.604382][T10882] UDF-fs: Scanning with blocksize 2048 failed [ 152.606964][T10882] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 152.610240][T10882] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 152.613866][T10882] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 152.616265][T10882] UDF-fs: Scanning with blocksize 4096 failed [ 152.618177][T10882] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 152.640583][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.651352][ T5834] usb 13-1: new full-speed USB device number 4 using dummy_hcd [ 152.656451][ T9794] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.665474][ T9794] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.679081][ T9794] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.791399][ T5834] usb 13-1: device descriptor read/64, error -71 [ 152.874723][T10899] netlink: 'syz.7.1279': attribute type 16 has an invalid length. [ 152.877298][T10899] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.1279'. [ 152.880584][T10899] netlink: 'syz.7.1279': attribute type 16 has an invalid length. [ 152.883450][T10899] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.1279'. [ 152.886940][T10900] xt_hashlimit: size too large, truncated to 1048576 [ 152.887064][T10899] netlink: 'syz.7.1279': attribute type 16 has an invalid length. [ 152.892438][T10899] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.1279'. [ 152.911215][ T5834] usb usb13-port1: attempt power cycle [ 153.247136][T10914] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 153.271514][ T5834] usb 13-1: new full-speed USB device number 5 using dummy_hcd [ 153.303166][ T5834] usb 13-1: device descriptor read/8, error -71 [ 153.374276][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1288'. [ 153.399328][T10935] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.410007][T10935] macvlan1: entered allmulticast mode [ 153.415381][T10935] veth1_vlan: entered allmulticast mode [ 153.419482][T10935] bond3: (slave macvlan1): Enslaving as an active interface with an up link [ 153.474217][ T42] audit: type=1400 audit(1784134409.185:3212): avc: denied { bind } for pid=10937 comm="syz.5.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 153.552288][ T2327] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 153.554804][T10941] syzkaller1: entered allmulticast mode [ 153.562784][ T5834] usb 13-1: new full-speed USB device number 6 using dummy_hcd [ 153.592048][ T5834] usb 13-1: device descriptor read/8, error -71 [ 153.681106][ T2327] usb 7-1: device descriptor read/64, error -71 [ 153.723709][ T5834] usb usb13-port1: unable to enumerate USB device [ 153.757062][ T56] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 153.769833][ T56] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 153.773680][ T56] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 153.776680][ T56] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 153.778909][ T56] rtc rtc0: __rtc_set_alarm: err=-22 [ 153.805576][T10969] @: renamed from tunl0 (while UP) [ 153.817407][T10966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10966 comm=syz.7.1294 [ 153.817410][T10965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10965 comm=syz.7.1294 [ 153.821174][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1295'. [ 153.824246][T10969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10969 comm=syz.5.1295 [ 153.923440][ T2327] usb 7-1: new full-speed USB device number 23 using dummy_hcd qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 153.952393][ T42] audit: type=1400 audit(1784134409.655:3213): avc: denied { write } for pid=10980 comm="syz.5.1298" name="/" dev="9p" ino=83099727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.960536][ T42] audit: type=1400 audit(1784134409.665:3214): avc: denied { write } for pid=10980 comm="syz.5.1298" name="/" dev="9p" ino=83099727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.975941][ T42] audit: type=1400 audit(1784134409.665:3215): avc: denied { add_name } for pid=10980 comm="syz.5.1298" name="blkio.throttle.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.983165][ T42] audit: type=1400 audit(1784134409.665:3216): avc: denied { create } for pid=10980 comm="syz.5.1298" name="blkio.throttle.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 153.989914][ T42] audit: type=1400 audit(1784134409.665:3217): avc: denied { associate } for pid=10980 comm="syz.5.1298" name="blkio.throttle.io_service_bytes" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 154.061613][ T2327] usb 7-1: device descriptor read/64, error -71 [ 154.172215][ T2327] usb usb7-port1: attempt power cycle [ 154.194532][T10992] binder: 10991:10992 ioctl c0306201 2000000001c0 returned -14 [ 154.197183][T10992] binder: 10991:10992 ioctl c0502100 200000004b40 returned -22 [ 154.511137][ T2327] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 154.532804][ T2327] usb 7-1: device descriptor read/8, error -71 [ 154.771365][ T2327] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 154.801841][ T2327] usb 7-1: device descriptor read/8, error -71 [ 154.921514][ T2327] usb usb7-port1: unable to enumerate USB device [ 155.127796][T11017] netlink: 'syz.7.1307': attribute type 1 has an invalid length. [ 155.143669][T11017] bond4: Invalid ad_actor_system MAC address. [ 155.145715][T11017] bond4: option ad_actor_system: invalid value (1) [ 155.149159][T11017] bond4 (unregistering): Released all slaves [ 155.366427][T11031] netlink: 'syz.7.1311': attribute type 3 has an invalid length. [ 155.461201][ T34] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 155.615129][ T34] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.615171][ T34] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 155.615189][ T34] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.618368][ T34] usb 13-1: config 0 descriptor?? [ 155.823455][ T34] usbhid 13-1:0.0: can't add hid device: -71 [ 155.825530][ T34] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 155.844229][ T34] usb 13-1: USB disconnect, device number 7 [ 156.261098][ T34] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 156.411120][ T34] usb 13-1: Using ep0 maxpacket: 32 [ 156.416353][ T34] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.425606][ T34] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 156.441101][ T34] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.445376][ T34] usb 13-1: config 0 descriptor?? [ 156.450113][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 156.450123][ T42] audit: type=1400 audit(1784134412.155:3222): avc: denied { write } for pid=11058 comm="syz.2.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.450377][ T34] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 156.465335][ T34] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 156.513077][T11064] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input22 [ 156.617970][T11068] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 156.624028][T11068] cgroup2: Unknown parameter 'euid<00000000000000049663' [ 156.658398][T11072] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 156.660543][T11072] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 156.663379][T11072] vhci_hcd vhci_hcd.0: Device attached [ 156.666728][T11073] vhci_hcd: cannot find the pending unlink 6 [ 156.697433][T11073] vhci_hcd: connection closed [ 156.698904][ T5813] vhci_hcd vhci_hcd.5: stop threads [ 156.702622][ T5738] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 156.705313][ T5813] vhci_hcd vhci_hcd.5: release socket [ 156.707074][ T5813] vhci_hcd vhci_hcd.5: disconnect device [ 156.828012][ T42] audit: type=1326 audit(1784134412.535:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11083 comm="syz.5.1325" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77bc39de59 code=0x0 [ 157.108420][T11023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.111858][T11023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.117038][T11023] __nla_validate_parse: 7 callbacks suppressed [ 157.117048][T11023] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1309'. [ 157.121206][ T847] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 157.124733][ T6070] usb 13-1: USB disconnect, device number 8 [ 157.129734][ T6070] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 157.252468][ T847] usb 10-1: device descriptor read/64, error -71 [ 157.379824][ T42] audit: type=1400 audit(1784134413.085:3224): avc: denied { getopt } for pid=11088 comm="syz.7.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 157.491148][ T847] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 157.621100][ T847] usb 10-1: device descriptor read/64, error -71 [ 157.731549][ T847] usb usb10-port1: attempt power cycle [ 157.733777][T11116] xt_hashlimit: size too large, truncated to 1048576 [ 157.953214][ T6070] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 158.071124][ T847] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 158.091777][ T847] usb 10-1: device descriptor read/8, error -71 [ 158.103167][ T6070] usb 7-1: unable to get BOS descriptor or descriptor too short [ 158.107542][ T6070] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 158.113930][ T6070] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.117721][ T6070] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.122455][ T6070] usb 7-1: Product: syz [ 158.124288][ T6070] usb 7-1: Manufacturer: syz [ 158.127068][ T6070] usb 7-1: SerialNumber: syz [ 158.340117][ T6070] cdc_ncm 7-1:1.0: bind() failure [ 158.341064][ T847] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 158.345071][ T6070] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 158.347214][ T6070] cdc_ncm 7-1:1.1: bind() failure [ 158.353427][ T6070] usb 7-1: USB disconnect, device number 26 [ 158.361481][ T847] usb 10-1: device descriptor read/8, error -71 [ 158.472994][ T847] usb usb10-port1: unable to enumerate USB device [ 158.692151][ T34] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 158.720101][ T42] audit: type=1400 audit(1784134414.425:3225): avc: denied { write } for pid=11138 comm="syz.7.1340" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 158.775753][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1341'. [ 158.824254][T11145] tmpfs: Unknown parameter 'grpµ†[&‹¥ôode_hardlimit' [ 158.826708][ T5738] Bluetooth: hci2: Dropping invalid advertising data [ 158.828661][T11146] netlink: 'syz.7.1342': attribute type 2 has an invalid length. [ 158.832591][ T5738] Bluetooth: hci2: Malformed LE Event: 0x02 [ 158.841065][ T34] usb 13-1: Using ep0 maxpacket: 8 [ 158.844242][ T34] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 158.846990][ T34] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.849995][ T34] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.854226][ T34] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.857599][ T34] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.861801][ T34] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.864833][ T34] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.994283][T11150] netlink: 'syz.7.1344': attribute type 4 has an invalid length. [ 158.996709][T11150] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1344'. [ 159.004801][T11150] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 159.072230][ T34] usb 13-1: usb_control_msg returned -32 [ 159.074159][ T34] usbtmc 13-1:16.0: can't read capabilities [ 159.131123][ T8711] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 159.271068][ T8711] usb 7-1: device descriptor read/64, error -71 [ 159.293647][T11158] block nbd7: NBD_DISCONNECT [ 159.294988][T11159] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 159.344503][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1347'. [ 159.396487][T11164] jfs: Unknown parameter 'disœë£m' [ 159.427641][T11165] netlink: 'syz.8.1339': attribute type 1 has an invalid length. [ 159.449136][T11165] bond1: entered promiscuous mode [ 159.451787][T11165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.467013][ T42] audit: type=1804 audit(1784134415.175:3226): pid=11168 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.1348" name="/newroot/111/cgroup.controllers" dev="tmpfs" ino=600 res=1 errno=0 [ 159.474481][ T42] audit: type=1800 audit(1784134415.175:3227): pid=11168 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.1348" name="cgroup.controllers" dev="tmpfs" ino=600 res=0 errno=0 [ 159.484705][T11165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.488182][T11165] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 159.492752][T11165] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 159.500231][T11165] bond1: (slave vti0): making interface the new active one [ 159.503468][T11165] vti0: entered promiscuous mode [ 159.507381][T11165] bond1: (slave vti0): Enslaving as an active interface with an up link [ 159.516750][T11165] usbtmc 13-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 159.531092][ T8711] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 159.565740][T11175] netlink: 348 bytes leftover after parsing attributes in process `syz.7.1350'. [ 159.671360][ T8711] usb 7-1: device descriptor read/64, error -71 [ 159.679303][T11178] netlink: 'syz.7.1351': attribute type 5 has an invalid length. [ 159.687901][T11178] syzkaller1: entered promiscuous mode [ 159.690317][T11178] syzkaller1: entered allmulticast mode [ 159.718979][ T847] usb 13-1: USB disconnect, device number 9 [ 159.781521][ T8711] usb usb7-port1: attempt power cycle [ 160.141224][ T8711] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 160.162001][ T8711] usb 7-1: device descriptor read/8, error -71 [ 160.263177][T11202] bridge0: port 3(syz_tun) entered blocking state [ 160.276880][T11202] bridge0: port 3(syz_tun) entered disabled state [ 160.278615][T11204] loop4: detected capacity change from 0 to 2640 [ 160.283305][T11202] syz_tun: entered allmulticast mode [ 160.288826][T11202] syz_tun: entered promiscuous mode [ 160.294691][T11202] bridge0: port 3(syz_tun) entered blocking state [ 160.297420][T11202] bridge0: port 3(syz_tun) entered forwarding state [ 160.297542][T11204] buffer_io_error: 30 callbacks suppressed [ 160.297558][T11204] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.309002][T11204] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.312785][T11204] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.316376][T11204] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.324188][T11204] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.328759][T11204] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.332677][T11204] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.333547][ T42] audit: type=1400 audit(1784134416.045:3228): avc: denied { load_policy } for pid=11203 comm="syz.5.1362" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 160.333925][T11205] SELinux: policydb magic number 0xfffff78c does not match expected magic number 0xf97cff8c [ 160.334233][T11205] SELinux: failed to load policy [ 160.336692][T10897] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.340895][T11207] smc: net device wlan0 applied user defined pnetid SYZ0 [ 160.356440][T10291] libceph: connect (1)[c::]:6789 error -101 [ 160.361313][T10291] libceph: mon0 (1)[c::]:6789 connect error [ 160.381476][T11204] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.384966][T11204] ldm_validate_partition_table(): Disk read failed. [ 160.385089][T10897] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.393449][T11204] Dev loop4: unable to read RDB block 0 [ 160.396336][T11204] loop4: unable to read partition table [ 160.398937][T11204] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 160.421184][ T8711] usb 7-1: new low-speed USB device number 30 using dummy_hcd [ 160.445109][T11207] ceph: No mds server is up or the cluster is laggy [ 160.451844][ T8711] usb 7-1: device descriptor read/8, error -71 [ 160.518083][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1364'. [ 160.574446][ T8711] usb usb7-port1: unable to enumerate USB device [ 160.687063][ T42] audit: type=1400 audit(1784134416.395:3229): avc: denied { map } for pid=11228 comm="syz.5.1368" path="/dev/video36" dev="devtmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 160.769459][T11231] bond4: entered promiscuous mode [ 160.793119][T11234] bond5: entered promiscuous mode [ 160.824069][T11238] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 160.830007][ T42] audit: type=1400 audit(1784134416.535:3230): avc: denied { relabelto } for pid=11236 comm="syz.8.1370" name="66" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 160.833565][T11238] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1370'. [ 160.838879][ T42] audit: type=1400 audit(1784134416.535:3231): avc: denied { associate } for pid=11236 comm="syz.8.1370" name="66" dev="tmpfs" ino=355 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 160.856203][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1370'. [ 161.073994][T11259] program syz.8.1376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.186336][T11261] kvm: pic: non byte write [ 161.261197][ T24] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 161.421128][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 161.428459][ T24] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 161.435854][ T24] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.439869][ T24] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 161.443448][ T24] usb 10-1: Product: syz [ 161.445307][ T24] usb 10-1: Manufacturer: syz [ 161.449709][ T24] usb 10-1: SerialNumber: syz [ 161.454196][ T24] usb 10-1: config 0 descriptor?? [ 161.456344][T11256] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 161.460772][ T24] hub 10-1:0.0: bad descriptor, ignoring hub [ 161.463158][ T24] hub 10-1:0.0: probe with driver hub failed with error -5 [ 161.476085][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1378'. [ 161.607164][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 161.607177][ T42] audit: type=1400 audit(1784134417.315:3238): avc: denied { create } for pid=11265 comm="syz.7.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 161.636836][T11266] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1379'. [ 161.769391][T11274] veth1_vlan (unregistering): left allmulticast mode [ 161.787776][T11274] bond3: (slave macvlan1): Releasing backup interface [ 161.957028][T11276] netlink: 'syz.2.1382': attribute type 1 has an invalid length. [ 161.986322][T11281] syzkaller0: entered promiscuous mode [ 161.988676][T11281] syzkaller0: entered allmulticast mode [ 162.099831][T11294] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 162.173186][ T42] audit: type=1400 audit(1784134417.885:3239): avc: denied { create } for pid=11299 comm="syz.8.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.207183][T11298] bridge3: entered promiscuous mode [ 162.209440][T11298] bridge3: entered allmulticast mode [ 162.265659][T11312] netlink: 'syz.8.1391': attribute type 12 has an invalid length. [ 162.286022][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'. [ 162.293225][T11309] tmpfs: Bad value for 'mpol' [ 162.345561][T11318] binder_alloc: 11316: binder_alloc_buf size 14336 failed, no address space [ 162.349686][T11318] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 162.511113][ T34] usb 13-1: new full-speed USB device number 10 using dummy_hcd [ 162.527625][T11257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.536817][T11317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.540194][T11257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.540712][T11317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.655392][ T42] audit: type=1400 audit(1784134418.365:3240): avc: denied { setopt } for pid=11319 comm="syz.2.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.675414][ T34] usb 13-1: not running at top speed; connect to a high speed hub [ 162.685745][ T34] usb 13-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.691703][ T34] usb 13-1: config 1 interface 0 has no altsetting 0 [ 162.697225][ T34] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.700966][ T34] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.704491][ T34] usb 13-1: Product: syz [ 162.706225][ T34] usb 13-1: Manufacturer: syz [ 162.708200][ T34] usb 13-1: SerialNumber: syz [ 162.749331][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1375'. [ 162.932162][T11330] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1396'. [ 162.940159][ T34] cdc_ether 13-1:1.0: probe with driver cdc_ether failed with error -71 [ 162.947735][ T34] usb 13-1: USB disconnect, device number 10 [ 163.045763][T11341] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1401'. [ 163.048629][T11341] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1401'. [ 163.148460][T11348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.211371][ T29] usb 12-1: new low-speed USB device number 2 using dummy_hcd [ 163.323804][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'. [ 163.372898][ T29] usb 12-1: No LPM exit latency info found, disabling LPM. [ 163.377324][ T29] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 163.381859][ T29] usb 12-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 163.391091][ T29] usb 12-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 163.402124][ T29] usb 12-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice= 0.40 [ 163.407975][ T29] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.418088][ T29] usb 12-1: Product: 〠[ 163.419865][ T29] usb 12-1: Manufacturer: à°‡ [ 163.422676][ T29] usb 12-1: SerialNumber: Ъ [ 163.426925][ T29] usb 12-1: rejected 1 configuration due to insufficient available bus power [ 163.430518][ T29] usb 12-1: no configuration chosen from 1 choice [ 163.486383][T11362] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 163.515428][T11364] netlink: 'syz.2.1407': attribute type 64 has an invalid length. [ 163.526494][ T42] audit: type=1400 audit(1784134419.235:3241): avc: denied { write } for pid=11363 comm="syz.2.1407" name="usbmon6" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 163.582132][ T42] audit: type=1400 audit(1784134419.295:3242): avc: denied { append } for pid=11363 comm="syz.2.1407" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 164.012254][ T42] audit: type=1400 audit(1784134419.725:3243): avc: denied { name_connect } for pid=11385 comm="syz.2.1412" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 164.180239][T11397] loop5: detected capacity change from 0 to 2640 [ 164.184116][T11397] ldm_validate_partition_table(): Disk read failed. [ 164.186589][T11397] Dev loop5: unable to read RDB block 0 [ 164.189221][T11397] loop5: unable to read partition table [ 164.192168][T11397] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 164.199268][T11397] ldm_validate_partition_table(): Disk read failed. [ 164.206603][T11397] Dev loop5: unable to read RDB block 0 [ 164.209430][T11397] loop5: unable to read partition table [ 165.215281][T11406] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1418'. [ 165.218992][ T42] audit: type=1400 audit(1784134420.925:3244): avc: denied { accept } for pid=11405 comm="syz.2.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 165.792747][T11412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1420'. [ 165.979633][ T847] usb 12-1: USB disconnect, device number 2 [ 166.004444][T11424] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=11424 comm=syz.7.1423 [ 166.004598][T11425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=11425 comm=syz.7.1423 [ 166.004850][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 166.016724][ T42] audit: type=1400 audit(1784134421.725:3245): avc: denied { setattr } for pid=11421 comm="syz.2.1422" name="/" dev="9p" ino=83099727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.034315][ T2327] usb 10-1: USB disconnect, device number 21 [ 166.066027][T11429] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 166.080514][T11429] tap0: tun_chr_ioctl cmd 1074025675 [ 166.082484][T11429] tap0: persist disabled [ 166.188095][T11436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1424'. [ 166.268611][ T42] audit: type=1400 audit(1784134421.975:3246): avc: denied { name_bind } for pid=11448 comm="syz.7.1429" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 166.357381][T11456] sctp: [Deprecated]: syz.2.1430 (pid 11456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.357381][T11456] Use struct sctp_sack_info instead [ 166.603054][T11472] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 166.634076][T11474] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 166.801672][T11484] binder: 11483:11484 ioctl c0306201 0 returned -14 [ 167.231153][ T24] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 167.246218][T11498] netlink: 'syz.2.1446': attribute type 14 has an invalid length. [ 167.288144][T11502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11502 comm=syz.2.1447 [ 167.383558][ T24] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.388140][ T24] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.399217][ T24] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.401258][ T42] audit: type=1400 audit(1784134423.105:3247): avc: denied { getattr } for pid=11499 comm="syz.5.1448" path="pid:[4026532867]" dev="nsfs" ino=4026532867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 167.404338][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.415540][ T42] audit: type=1400 audit(1784134423.105:3248): avc: denied { mounton } for pid=11499 comm="syz.5.1448" path="/267/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 167.633587][ T24] usb 12-1: usb_control_msg returned -32 [ 167.636977][ T24] usbtmc 12-1:16.0: can't read capabilities [ 167.935087][T11541] __nla_validate_parse: 3 callbacks suppressed [ 167.935107][T11541] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1455'. [ 168.198508][ T5834] usb 12-1: USB disconnect, device number 3 [ 168.411376][ T29] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 168.441288][T11567] random: crng reseeded on system resumption [ 168.561116][ T5882] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 168.562530][ T29] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.581062][ T29] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 168.585130][ T29] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.588545][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.605040][T11557] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 168.611106][ T29] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.712736][ T5882] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.721469][ T5882] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.729049][ T5882] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.733725][T11570] batadv_slave_1: entered promiscuous mode [ 168.733753][ T5882] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.736850][T11569] batadv_slave_1: left promiscuous mode [ 168.738716][ T5882] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.740029][ T5882] usb 13-1: config 0 descriptor?? [ 168.849520][ T5834] usb 10-1: USB disconnect, device number 22 [ 169.360977][ T42] audit: type=1400 audit(1784134425.065:3249): avc: denied { mounton } for pid=11554 comm="syz.8.1459" path="/81/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 169.376958][ T5882] usbhid 13-1:0.0: can't add hid device: -71 [ 169.380129][ T5882] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 169.389787][ T5882] usb 13-1: USB disconnect, device number 11 [ 169.426853][ T42] audit: type=1400 audit(1784134425.135:3250): avc: denied { cmd } for pid=11579 comm="syz.2.1468" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 169.479024][T11583] mmap: syz.5.1469 (11583): VmData 37400576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 169.507979][T11574] syz.7.1466 (11574): drop_caches: 2 [ 169.570337][T11595] fuse: Unknown parameter 'Ø 90x0000000000000004' [ 169.614644][T11600] overlayfs: maximum fs stacking depth exceeded [ 169.880474][T11619] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1478'. [ 170.024713][T11635] fuse: Unknown parameter '' [ 170.245165][ T5882] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 170.275555][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1486'. [ 170.314992][T11648] dummy0: entered allmulticast mode [ 170.360177][T11650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59152 sclass=netlink_route_socket pid=11650 comm=syz.8.1488 [ 170.408832][ T5882] usb 10-1: unable to get BOS descriptor or descriptor too short [ 170.412639][ T5882] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 170.414946][ T5882] usb 10-1: can't read configurations, error -71 [ 170.556235][T11667] netlink: 'syz.7.1495': attribute type 1 has an invalid length. [ 170.567028][T11667] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 170.798009][T11693] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 170.867518][T11699] syz.8.1504 (11699) used greatest stack depth: 19120 bytes left [ 170.990540][T11710] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 170.997215][T11710] netlink: 'syz.8.1508': attribute type 1 has an invalid length. [ 171.002174][ T42] audit: type=1400 audit(1784134426.715:3251): avc: denied { read } for pid=11709 comm="syz.8.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 171.170677][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1511'. [ 171.209890][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1512'. [ 171.267818][T11727] omfs: Invalid superblock (0) [ 171.270451][T11729] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20004 [ 171.273333][ T42] audit: type=1400 audit(1784134426.975:3252): avc: denied { nlmsg_write } for pid=11728 comm="syz.8.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 171.300965][T11727] netlink: zone id is out of range [ 171.303321][T11727] netlink: zone id is out of range [ 171.543043][T11741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.548743][T11740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.571750][T11749] input: syz1 as /devices/virtual/input/input23 [ 171.610533][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1518'. [ 171.910467][ T42] audit: type=1400 audit(1784134427.615:3253): avc: denied { bind } for pid=11776 comm="syz.8.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.918619][ T42] audit: type=1400 audit(1784134427.625:3254): avc: denied { read } for pid=11776 comm="syz.8.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.927676][T11777] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1526'. [ 172.230781][T11780] binder: 11779:11780 ioctl c0306201 200000000080 returned -14 [ 172.230792][T11789] binder: 11779:11789 ioctl c0306201 200000000080 returned -14 [ 172.242115][T11780] binder: 11779:11780 ioctl c0306201 2000000001c0 returned -22 [ 172.340732][ T42] audit: type=1326 audit(1784134428.045:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11790 comm="syz.5.1530" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77bc39de59 code=0x0 [ 172.687272][T11806] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1535'. [ 173.245993][ T42] audit: type=1400 audit(1784134428.955:3256): avc: denied { setopt } for pid=11820 comm="syz.2.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.366148][T11829] loop8: detected capacity change from 0 to 7 [ 173.372348][T11829] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 173.374796][T11829] loop8: partition table partially beyond EOD, truncated [ 173.377318][T11829] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 173.381939][T11829] loop8: p2 start 121280928 is beyond EOD, truncated [ 173.416812][ T42] audit: type=1400 audit(1784134429.125:3257): avc: denied { watch_with_perm } for pid=11831 comm="syz.2.1544" path="/398/bus" dev="tmpfs" ino=2198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.422695][T10897] udevd[10897]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 173.431146][ T42] audit: type=1400 audit(1784134429.125:3258): avc: denied { watch_with_perm } for pid=11831 comm="syz.2.1544" path="/398/bus" dev="tmpfs" ino=2198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.506199][T11838] 9p: Invalid uid '0x00000000ffffffff' [ 173.509050][T11837] tmpfs: Unknown parameter 'flock' [ 173.509122][T11838] tmpfs: Unknown parameter 'flock' [ 173.650886][T11860] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 173.966885][T11878] erspan0: entered promiscuous mode [ 174.246273][T11897] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 174.309526][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1563'. [ 174.314968][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1563'. [ 174.582999][T11919] netlink: 'syz.7.1569': attribute type 19 has an invalid length. [ 174.584503][ T5738] Bluetooth: hci2: adv larger than maximum supported [ 174.585636][ T5738] Bluetooth: hci2: Malformed LE Event: 0x0d [ 174.695569][ T42] audit: type=1400 audit(1784134430.405:3259): avc: denied { write } for pid=11924 comm="syz.7.1571" name="/" dev="9p" ino=83099727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.704398][ T42] audit: type=1400 audit(1784134430.405:3260): avc: denied { unlink } for pid=11924 comm="syz.7.1571" name="file0" dev="9p" ino=83099729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.713038][ T42] audit: type=1400 audit(1784134430.415:3261): avc: denied { write } for pid=11924 comm="syz.7.1571" name="/" dev="9p" ino=83099727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.721294][ T42] audit: type=1400 audit(1784134430.425:3262): avc: denied { link } for pid=11924 comm="syz.7.1571" name="file1" dev="9p" ino=83099731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.729283][ T42] audit: type=1400 audit(1784134430.425:3263): avc: denied { write } for pid=11924 comm="syz.7.1571" name="/" dev="9p" ino=83099727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.765336][T11934] fuse: Bad value for 'fd' [ 174.858854][T11949] netlink: 'syz.5.1578': attribute type 2 has an invalid length. [ 174.864620][T11949] netlink: 'syz.5.1578': attribute type 2 has an invalid length. [ 174.867332][T11949] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.1578'. [ 174.959678][ T42] audit: type=1400 audit(1784134430.665:3264): avc: denied { append } for pid=11959 comm="syz.7.1576" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 174.971092][ T5834] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 175.038475][T11971] netlink: 'syz.8.1583': attribute type 4 has an invalid length. [ 175.044062][T11971] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1583'. [ 175.178178][T11985] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 175.617571][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'. [ 176.121971][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1593'. [ 176.124279][T12003] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1594'. [ 176.125797][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1593'. [ 176.165836][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1593'. [ 176.169696][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1593'. [ 176.308269][T12027] fuse: fd is not a fuse device [ 176.392509][ T42] audit: type=1400 audit(1784134432.105:3265): avc: denied { ioctl } for pid=12036 comm="syz.7.1605" path="socket:[48774]" dev="sockfs" ino=48774 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 176.407894][T12039] futex_wake_op: syz.2.1604 tries to shift op by -1; fix this program [ 176.423163][T12041] netlink: 'syz.5.1606': attribute type 12 has an invalid length. [ 176.472041][T12046] program syz.2.1609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.485328][T12049] xt_TCPMSS: Only works on TCP SYN packets [ 176.606029][T12064] netlink: 'syz.2.1612': attribute type 3 has an invalid length. [ 176.618716][T12064] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 176.646632][T12056] kvm: kvm [12055]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 176.668563][T12069] batadv_slave_1: entered promiscuous mode [ 176.679262][T12068] batadv_slave_1: left promiscuous mode [ 176.784482][T12078] bond0: entered promiscuous mode [ 176.789500][T12078] batadv0: entered promiscuous mode [ 176.794329][T12078] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 176.809462][T12078] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 176.819577][T12078] bond0: left promiscuous mode [ 176.824318][T12078] batadv0: left promiscuous mode [ 176.841456][T12081] netlink: 'syz.2.1619': attribute type 29 has an invalid length. [ 176.880757][T12084] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 176.885210][T12084] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 177.050099][T12090] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 177.077384][T12086] kvm: requested 38552 ns i8254 timer period limited to 200000 ns [ 177.084411][T12086] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 177.090207][T12086] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 177.094428][T12086] kvm: requested 98057 ns i8254 timer period limited to 200000 ns [ 177.348844][T12096] netlink: 'syz.7.1624': attribute type 1 has an invalid length. [ 177.352646][T12096] netlink: 'syz.7.1624': attribute type 1 has an invalid length. [ 177.442695][T12100] bond0: entered promiscuous mode [ 177.445005][T12100] bond_slave_0: entered promiscuous mode [ 177.447068][T12100] bond_slave_1: entered promiscuous mode [ 177.449706][T12100] team0: entered promiscuous mode [ 177.452537][T12100] team_slave_0: entered promiscuous mode [ 177.456435][T12100] team_slave_1: entered promiscuous mode [ 177.459314][T12100] veth0_to_bond: entered promiscuous mode [ 177.566721][T12107] ±ÿ speed is unknown, defaulting to 1000 [ 177.699609][T12120] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 177.704198][T12123] sctp: [Deprecated]: syz.7.1630 (pid 12123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.704198][T12123] Use struct sctp_sack_info instead [ 177.766930][T12129] netlink: 'syz.2.1634': attribute type 1 has an invalid length. [ 177.783096][T12129] 8021q: adding VLAN 0 to HW filter on device bond11 [ 178.125549][T12181] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45 sclass=netlink_xfrm_socket pid=12181 comm=syz.7.1646 [ 178.301217][ T5834] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 178.461170][T12228] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.462215][ T5834] usb 7-1: Using ep0 maxpacket: 32 [ 178.474983][T12228] syz_tun: left allmulticast mode [ 178.475840][ T5834] usb 7-1: config index 0 descriptor too short (expected 15270, got 18) [ 178.476630][T12228] syz_tun: left promiscuous mode [ 178.482444][T12228] bridge0: port 3(syz_tun) entered disabled state [ 178.484782][ T5834] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 178.484803][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.484818][ T5834] usb 7-1: Product: syz [ 178.484828][ T5834] usb 7-1: Manufacturer: syz [ 178.484839][ T5834] usb 7-1: SerialNumber: syz [ 178.502237][ T5834] usb 7-1: config 0 descriptor?? [ 178.504881][T12228] bridge_slave_0: left allmulticast mode [ 178.506554][ T5834] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 178.506702][T12228] bridge_slave_0: left promiscuous mode [ 178.509208][ T5834] dvb-usb: bulk message failed: -22 (4/0) [ 178.511663][T12228] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.512923][ T5834] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 178.518513][ T5834] dvb-usb: bulk message failed: -22 (5/0) [ 178.520322][ T5834] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 178.534436][T12232] kAFS: No cell specified [ 178.535360][T12228] bridge_slave_1: left allmulticast mode [ 178.537772][T12228] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.539138][ T5834] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 178.543815][ T5834] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 178.546390][ T5834] usb 7-1: media controller created [ 178.553321][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.562764][ T5834] usb 7-1: selecting invalid altsetting 3 [ 178.564638][ T5834] ttusb2: set interface to alts=3 failed [ 178.582903][ T5834] DVB: Unable to find symbol tda10086_attach() [ 178.585060][ T5834] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 178.586419][T12228] bond0: (slave bond_slave_0): Releasing backup interface [ 178.588112][ T5834] dvb-usb: bulk message failed: -22 (4/0) [ 178.596188][ T5834] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 178.599435][ T5834] dvb-usb: bulk message failed: -22 (5/0) [ 178.602841][ T5834] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 178.606058][ T5834] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 178.611910][T12228] bond0: (slave bond_slave_1): Releasing backup interface [ 178.631719][T12228] team0: Port device team_slave_0 removed [ 178.637475][T12228] team0: Port device team_slave_1 removed [ 178.639748][T12228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.642323][T12228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.645590][T12228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.647970][T12228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.651205][T12228] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.734785][T12175] ttusb2: i2c rd len=203 too high [ 178.740238][T12175] fuse: Bad value for 'fd' [ 179.154509][T12175] infiniband syz0: set active [ 179.162259][T12175] infiniband syz0: added veth1 [ 179.164716][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 179.164730][ T42] audit: type=1400 audit(1784134434.865:3277): avc: denied { accept } for pid=12259 comm="syz.5.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 179.201450][T12175] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 179.207603][T12175] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 179.214878][T12175] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 179.244035][T12175] RDS/IB: syz0: added [ 179.248232][T12175] smc: adding ib device syz0 with port count 1 [ 179.253778][T12175] smc: ib device syz0 port 1 has no pnetid [ 179.321123][T12272] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.597130][T12287] program syz.7.1678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.639398][T12289] openvswitch: netlink: IP tunnel dst address not specified [ 179.688406][T12292] fuse: fd is not a fuse device [ 179.823075][T12297] openvswitch: netlink: IP tunnel dst address not specified [ 179.936671][T12302] vlan2: entered allmulticast mode [ 179.936690][T12302] bridge_slave_0: entered allmulticast mode [ 180.031778][T12305] __nla_validate_parse: 9 callbacks suppressed [ 180.031798][T12305] netlink: 277 bytes leftover after parsing attributes in process `syz.8.1685'. [ 180.032884][T12305] fuse: fd is not a fuse device [ 180.037077][T12305] validate_nla: 2 callbacks suppressed [ 180.037090][T12305] netlink: 'syz.8.1685': attribute type 2 has an invalid length. [ 180.037106][T12305] netlink: 'syz.8.1685': attribute type 2 has an invalid length. [ 180.076649][T12308] netlink: 'syz.8.1686': attribute type 10 has an invalid length. [ 180.077175][T12308] dummy0: left allmulticast mode [ 180.098422][T12308] team0: Port device dummy0 added [ 180.207301][ T5834] usb 7-1: USB disconnect, device number 33 [ 180.241197][ T5834] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 180.276452][T12318] x_tables: duplicate underflow at hook 2 [ 180.392909][T12327] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12327 comm=syz.8.1691 [ 180.442824][ T42] audit: type=1400 audit(1784134436.155:3278): avc: denied { write } for pid=10201 comm="syz-executor" name="172" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 180.442861][ T42] audit: type=1400 audit(1784134436.155:3279): avc: denied { write } for pid=10201 comm="syz-executor" name="172" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 180.442886][ T42] audit: type=1400 audit(1784134436.155:3280): avc: denied { write } for pid=10201 comm="syz-executor" name="172" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 180.443433][ T42] audit: type=1400 audit(1784134436.155:3281): avc: denied { write } for pid=10201 comm="syz-executor" name="172" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 180.468617][T12333] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1693'. [ 180.871261][ T2327] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 180.872062][T12357] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 181.021379][ T2327] usb 12-1: Using ep0 maxpacket: 32 [ 181.025250][ T2327] usb 12-1: config 0 has no interfaces? [ 181.029768][ T2327] usb 12-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 181.033872][ T2327] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.037444][ T2327] usb 12-1: Product: syz [ 181.039269][ T2327] usb 12-1: Manufacturer: syz [ 181.041399][ T2327] usb 12-1: SerialNumber: syz [ 181.048904][ T2327] usb 12-1: config 0 descriptor?? [ 181.158772][T12365] ufs: You didn't specify the type of your ufs filesystem [ 181.158772][T12365] [ 181.158772][T12365] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 181.158772][T12365] [ 181.158772][T12365] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 181.168656][T12365] ufs: failed to set blocksize [ 181.270901][T10291] usb 12-1: USB disconnect, device number 4 [ 181.350481][ T42] audit: type=1400 audit(1784134437.055:3282): avc: denied { ioctl } for pid=12370 comm="syz.7.1705" path="/178/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 181.415839][T12372] block nbd7: NBD_DISCONNECT [ 181.418262][T12370] block nbd7: Disconnected due to user request. [ 181.421165][T12370] block nbd7: shutting down sockets [ 181.441154][ T8711] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 181.519124][T12376] netlink: 6040 bytes leftover after parsing attributes in process `syz.8.1707'. [ 181.595250][ T8711] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.600182][ T8711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 181.604240][ T8711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 181.605054][T12380] ±ÿ speed is unknown, defaulting to 1000 [ 181.609615][ T8711] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 181.613036][ T8711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.615631][ T8711] usb 7-1: Product: syz [ 181.616928][ T8711] usb 7-1: Manufacturer: syz [ 181.618501][ T8711] usb 7-1: SerialNumber: syz [ 181.624304][ T8711] usb 7-1: config 0 descriptor?? [ 181.627126][T12367] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 181.672320][ T8711] rc_core: IR keymap rc-streamzap not found [ 181.676506][ T8711] Registered IR keymap rc-empty [ 181.678589][ T8711] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 181.683709][ T8711] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input25 [ 181.821031][ T42] audit: type=1400 audit(1784134437.525:3283): avc: denied { map } for pid=12397 comm="syz.7.1712" path="socket:[53443]" dev="sockfs" ino=53443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.845667][ T24] usb 7-1: USB disconnect, device number 34 [ 181.869194][T12407] vivid-000: ================= START STATUS ================= [ 181.872629][T12407] vivid-000: RDS Tx I/O Mode: Block I/O [ 181.876282][T12407] vivid-000: RDS Program ID: 32904 [ 181.883269][T12407] vivid-000: RDS Program Type: 3 [ 181.885067][T12407] vivid-000: RDS PS Name: VIVID-TX [ 181.886852][T12407] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 181.890190][T12407] vivid-000: RDS Stereo: true [ 181.899419][T12407] vivid-000: RDS Artificial Head: false [ 181.901280][T12407] vivid-000: RDS Compressed: false [ 181.902917][T12407] vivid-000: RDS Dynamic PTY: false [ 181.904667][T12407] vivid-000: RDS Traffic Announcement: false [ 181.906563][T12407] vivid-000: RDS Traffic Program: true [ 181.908551][T12407] vivid-000: RDS Music: true [ 181.910069][T12407] vivid-000: ================== END STATUS ================== [ 182.397973][ T42] audit: type=1400 audit(1784134438.105:3284): avc: denied { search } for pid=12441 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.411188][ T42] audit: type=1400 audit(1784134438.115:3285): avc: denied { read write } for pid=12441 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 182.420883][ T42] audit: type=1400 audit(1784134438.115:3286): avc: denied { open } for pid=12441 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 syzkaller syzkaller login: [ 182.653444][T12451] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 182.735104][T12455] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1729'. [ 182.765163][T12457] overlayfs: failed to clone upperpath [ 182.812854][T12465] netlink: 'syz.7.1732': attribute type 1 has an invalid length. [ 182.845648][T12465] bond5: (slave geneve2): making interface the new active one [ 182.849785][T12465] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 182.853965][ T12] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.858182][ T12] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.861966][ T12] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.862197][T12465] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1732'. [ 182.865598][ T12] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.874492][T12465] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.952491][T12472] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1734'. [ 183.183453][T12486] could not allocate digest TFM handle sha512-ssse3 [ 183.204472][T12490] netlink: 'syz.7.1740': attribute type 16 has an invalid length. [ 183.207883][T12490] netlink: 'syz.7.1740': attribute type 17 has an invalid length. [ 183.248051][T12490] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 183.340600][T12502] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1745'. [ 184.556847][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888038db4400: rx timeout, send abort [ 184.564380][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888038db4400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 184.566300][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 184.566311][ T42] audit: type=1400 audit(1784134440.275:3292): avc: denied { read } for pid=5128 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 184.570222][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888038db6800: rx timeout, send abort [ 184.572820][ T42] audit: type=1400 audit(1784134440.275:3293): avc: denied { search } for pid=5128 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.579052][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888038db6800: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 184.581850][ T42] audit: type=1400 audit(1784134440.275:3294): avc: denied { write search } for pid=5128 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.605696][ T42] audit: type=1400 audit(1784134440.275:3295): avc: denied { add_name } for pid=5128 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.612681][ T42] audit: type=1400 audit(1784134440.275:3296): avc: denied { create } for pid=5128 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.619324][ T42] audit: type=1400 audit(1784134440.275:3297): avc: denied { append open } for pid=5128 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.628068][ T42] audit: type=1400 audit(1784134440.275:3298): avc: denied { getattr } for pid=5128 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.628208][T12523] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1753'. [ 184.635917][ T42] audit: type=1400 audit(1784134440.325:3299): avc: denied { create } for pid=12522 comm="syz.7.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 184.644874][ T42] audit: type=1400 audit(1784134440.325:3300): avc: denied { getopt } for pid=12522 comm="syz.7.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 186.375781][T12541] fuse: fd is not a fuse device [ 186.380508][T12542] openvswitch: netlink: Duplicate or invalid key (type 0). [ 186.383787][T12542] openvswitch: netlink: Actions may not be safe on all matching packets [ 186.485188][ T42] audit: type=1400 audit(1784134442.195:3301): avc: denied { write } for pid=12552 comm="syz.8.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 186.899582][T12580] siw: device registration error -23 [ 186.961136][ T5884] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 186.995455][T12583] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1765'. [ 187.119987][T12587] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 187.122348][ T5884] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 187.127092][ T5884] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 187.132133][ T5884] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 187.135074][ T5884] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.137642][ T5884] usb 10-1: Product: syz [ 187.138975][ T5884] usb 10-1: Manufacturer: syz [ 187.145368][ T5884] usb 10-1: SerialNumber: syz [ 187.158406][ T5884] usb 10-1: config 0 descriptor?? [ 187.165941][ T5884] hub 10-1:0.0: bad descriptor, ignoring hub [ 187.168348][ T5884] hub 10-1:0.0: probe with driver hub failed with error -5 [ 187.177058][ T5884] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input26 [ 187.307369][T12601] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3553608544 (454861893632 ns) > initial count (263189446144 ns). Using initial count to start timer. [ 187.325707][T12602] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3553608544 (454861893632 ns) > initial count (263189446144 ns). Using initial count to start timer. [ 187.370129][T12605] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.1763' sets config #1 [ 187.657155][T12617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.973533][ T5738] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 187.976111][ T5738] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 188.102801][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1781'. [ 188.115264][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1781'. [ 188.120371][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1781'. [ 188.128096][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1781'. [ 188.141129][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1781'. [ 188.143973][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1781'. [ 188.146800][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1781'. [ 188.149579][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1781'. [ 188.157913][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1781'. [ 188.331156][T12665] openvswitch: netlink: IP tunnel dst address not specified [ 188.637345][T12679] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12679 comm=syz.2.1790 [ 188.964759][T12569] syz.7.1756 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 189.001036][T12569] CPU: 2 UID: 0 PID: 12569 Comm: syz.7.1756 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.001056][T12569] Tainted: [L]=SOFTLOCKUP [ 189.001060][T12569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.001067][T12569] Call Trace: [ 189.001071][T12569] [ 189.001076][T12569] dump_stack_lvl+0x100/0x190 [ 189.001268][T12569] dump_header+0xfb/0x606 [ 189.001305][T12569] oom_kill_process.cold+0xd/0x330 [ 189.001318][T12569] out_of_memory+0x340/0x14f0 [ 189.001391][T12569] ? __pfx_out_of_memory+0x10/0x10 [ 189.001410][T12569] mem_cgroup_out_of_memory+0xc6/0x130 [ 189.001428][T12569] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 189.001443][T12569] ? find_held_lock+0x2b/0x80 [ 189.001482][T12569] ? do_raw_spin_unlock+0x145/0x1e0 [ 189.001496][T12569] ? _raw_spin_unlock+0x28/0x50 [ 189.001651][T12569] try_charge_memcg+0x6e5/0xdf0 [ 189.001668][T12569] ? __pfx_try_charge_memcg+0x10/0x10 [ 189.001681][T12569] ? find_held_lock+0x2b/0x80 [ 189.001695][T12569] ? rcu_read_unlock+0x17/0x60 [ 189.001709][T12569] ? rcu_read_unlock+0x17/0x60 [ 189.001723][T12569] ? find_held_lock+0x2b/0x80 [ 189.001738][T12569] ? rcu_read_unlock+0x17/0x60 [ 189.001755][T12569] charge_memcg+0x187/0x1e0 [ 189.001769][T12569] __mem_cgroup_charge+0x2b/0x1c0 [ 189.001786][T12569] shmem_alloc_and_add_folio+0x451/0xd40 [ 189.001806][T12569] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 189.001824][T12569] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 189.001845][T12569] shmem_get_folio_gfp+0x6ad/0x1910 [ 189.001863][T12569] ? __lock_acquire+0x49f/0x1a40 [ 189.001875][T12569] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 189.001896][T12569] shmem_write_begin+0x1a4/0x420 [ 189.001914][T12569] ? __pfx_shmem_write_begin+0x10/0x10 [ 189.001932][T12569] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 189.001944][T12569] ? lockdep_hardirqs_on+0x78/0x100 [ 189.001962][T12569] generic_perform_write+0x292/0xa40 [ 189.001981][T12569] ? __pfx_generic_perform_write+0x10/0x10 [ 189.001998][T12569] ? file_update_time_flags+0x373/0x500 [ 189.002033][T12569] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 189.002045][T12569] shmem_file_write_iter+0x10e/0x140 [ 189.002058][T12569] __kernel_write_iter+0x2ac/0x930 [ 189.002075][T12569] ? __pfx___kernel_write_iter+0x10/0x10 [ 189.002091][T12569] ? __up_read+0x333/0x980 [ 189.002105][T12569] ? dump_user_range+0x65e/0xad0 [ 189.002144][T12569] dump_user_range+0x3f9/0xad0 [ 189.002160][T12569] ? __pfx_dump_user_range+0x10/0x10 [ 189.002179][T12569] ? __pfx_writenote+0x10/0x10 [ 189.002193][T12569] ? elf_core_dump+0x1f25/0x3d20 [ 189.002209][T12569] elf_core_dump+0x2d68/0x3d20 [ 189.002231][T12569] ? __pfx_elf_core_dump+0x10/0x10 [ 189.002244][T12569] ? kasan_save_stack+0x3f/0x50 [ 189.002256][T12569] ? kasan_save_stack+0x30/0x50 [ 189.002266][T12569] ? kasan_save_track+0x14/0x30 [ 189.002276][T12569] ? __kasan_kmalloc+0xaa/0xb0 [ 189.002286][T12569] ? vfs_coredump+0x22a6/0x56f0 [ 189.002297][T12569] ? get_signal+0x1f2a/0x21e0 [ 189.002311][T12569] ? arch_do_signal_or_restart+0x91/0x7e0 [ 189.002327][T12569] ? 0xffffffffff600000 [ 189.002360][T12569] ? vfs_coredump+0x294b/0x56f0 [ 189.002372][T12569] vfs_coredump+0x294b/0x56f0 [ 189.002390][T12569] ? __pfx_vfs_coredump+0x10/0x10 [ 189.002404][T12569] ? __lock_acquire+0x49f/0x1a40 [ 189.002429][T12569] ? bpf_ksym_find+0x128/0x1c0 [ 189.002450][T12569] ? unwind_get_return_address+0x59/0xa0 [ 189.002472][T12569] ? arch_stack_walk+0xa6/0xf0 [ 189.002499][T12569] ? __sigqueue_free+0xbe/0x2a0 [ 189.002520][T12569] ? stack_trace_save+0x8e/0xc0 [ 189.002550][T12569] ? __pfx_stack_trace_save+0x10/0x10 [ 189.002572][T12569] ? stack_depot_save_flags+0x27/0x9d0 [ 189.002711][T12569] ? proc_coredump_connector+0x2d3/0x4f0 [ 189.002852][T12569] ? __pfx_proc_coredump_connector+0x10/0x10 [ 189.002871][T12569] ? rcu_is_watching+0x12/0xc0 [ 189.002890][T12569] get_signal+0x1f2a/0x21e0 [ 189.002910][T12569] ? __pfx_get_signal+0x10/0x10 [ 189.002923][T12569] ? __pfx_force_sig_fault+0x10/0x10 [ 189.002939][T12569] arch_do_signal_or_restart+0x91/0x7e0 [ 189.002951][T12569] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 189.002971][T12569] irqentry_exit+0x402/0xa00 [ 189.002990][T12569] asm_exc_page_fault+0x26/0x30 [ 189.003001][T12569] RIP: 0033:0x0 [ 189.003009][T12569] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 189.003055][T12569] RSP: 002b:00002000000002be EFLAGS: 00010217 [ 189.003064][T12569] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f0bc6f9de59 [ 189.003071][T12569] RDX: 00007f0bc7e5cf10 RSI: 0000000000000058 RDI: 00007f0bc7e5cf10 [ 189.003078][T12569] RBP: 00007f0bc7033e6f R08: 0000000000000000 R09: 0000000000000058 [ 189.003084][T12569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.003090][T12569] R13: 00007f0bc7226038 R14: 00007f0bc7225fa0 R15: 00007ffc4f0e5388 [ 189.003105][T12569] [ 189.003316][T12569] memory: usage 307200kB, limit 307200kB, failcnt 13415 [ 189.058693][T12685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.061379][T12569] memory+swap: usage 378100kB, limit 9007199254740988kB, failcnt 0 [ 189.163446][T12569] kmem: usage 9728kB, limit 9007199254740988kB, failcnt 0 [ 189.165714][T12569] Memory cgroup stats for /syz7: [ 189.165865][T12569] cache 304209920 [ 189.168692][T12569] rss 372736 [ 189.169864][T12569] rss_huge 0 [ 189.171325][T12569] shmem 304209920 [ 189.172589][T12569] mapped_file 0 [ 189.173757][T12569] dirty 0 [ 189.174690][T12569] writeback 0 [ 189.175737][T12569] workingset_refault_anon 0 [ 189.177224][T12569] workingset_refault_file 0 [ 189.178792][T12569] swap 72601600 [ 189.180116][T12569] swapcached 72605696 [ 189.181946][T12569] pgpgin 125261 [ 189.183357][T12569] pgpgout 50900 [ 189.184482][T12569] pgfault 38953 [ 189.185605][T12569] pgmajfault 3 [ 189.186703][T12569] inactive_anon 224366592 [ 189.188050][T12569] active_anon 80216064 [ 189.189338][T12569] inactive_file 0 [ 189.190814][T12569] active_file 0 [ 189.192046][T12569] unevictable 0 [ 189.193202][T12569] hierarchical_memory_limit 314572800 [ 189.194961][T12569] hierarchical_memsw_limit 9223372036854771712 [ 189.196911][T12569] total_cache 304209920 [ 189.198225][T12569] total_rss 372736 [ 189.199413][T12569] total_rss_huge 0 [ 189.199602][T12689] xt_hashlimit: invalid interval [ 189.200632][T12569] total_shmem 304209920 [ 189.200638][T12569] total_mapped_file 0 [ 189.205310][T12569] total_dirty 0 [ 189.206422][T12569] total_writeback 0 [ 189.207630][T12569] total_workingset_refault_anon 0 [ 189.209195][T12569] total_workingset_refault_file 0 [ 189.210800][T12569] total_swap 72601600 [ 189.212166][T12569] total_swapcached 72605696 [ 189.213698][T12569] total_pgpgin 125261 [ 189.214958][T12569] total_pgpgout 50900 [ 189.216201][T12569] total_pgfault 38953 [ 189.217440][T12569] total_pgmajfault 3 [ 189.218661][T12569] total_inactive_anon 224366592 [ 189.220198][T12569] total_active_anon 80216064 [ 189.221883][T12569] total_inactive_file 0 [ 189.223220][T12569] total_active_file 0 [ 189.224489][T12569] total_unevictable 0 [ 189.225929][T12569] anon_cost 0 [ 189.227098][T12569] file_cost 0 [ 189.228152][T12569] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1756,pid=12555,uid=0 [ 189.234684][T12569] Memory cgroup out of memory: Killed process 12555 (syz.7.1756) total-vm:98536kB, anon-rss:1256kB, file-rss:49668kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 189.247385][T12559] syz.7.1756 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 189.251435][T12559] CPU: 2 UID: 0 PID: 12559 Comm: syz.7.1756 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.251452][T12559] Tainted: [L]=SOFTLOCKUP [ 189.251456][T12559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.251462][T12559] Call Trace: [ 189.251466][T12559] [ 189.251470][T12559] dump_stack_lvl+0x100/0x190 [ 189.251489][T12559] dump_header+0xfb/0x606 [ 189.251502][T12559] oom_kill_process.cold+0xd/0x330 [ 189.251515][T12559] out_of_memory+0x340/0x14f0 [ 189.251540][T12559] ? __pfx_out_of_memory+0x10/0x10 [ 189.251558][T12559] mem_cgroup_out_of_memory+0xc6/0x130 [ 189.251576][T12559] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 189.251592][T12559] ? find_held_lock+0x2b/0x80 [ 189.251610][T12559] ? do_raw_spin_unlock+0x145/0x1e0 [ 189.251625][T12559] ? _raw_spin_unlock+0x28/0x50 [ 189.251641][T12559] try_charge_memcg+0x6e5/0xdf0 [ 189.251657][T12559] ? __pfx_try_charge_memcg+0x10/0x10 [ 189.251670][T12559] ? find_held_lock+0x2b/0x80 [ 189.251685][T12559] ? rcu_read_unlock+0x17/0x60 [ 189.251698][T12559] ? rcu_read_unlock+0x17/0x60 [ 189.251712][T12559] ? find_held_lock+0x2b/0x80 [ 189.251727][T12559] ? rcu_read_unlock+0x17/0x60 [ 189.251744][T12559] charge_memcg+0x187/0x1e0 [ 189.251758][T12559] __mem_cgroup_charge+0x2b/0x1c0 [ 189.251774][T12559] shmem_alloc_and_add_folio+0x451/0xd40 [ 189.251801][T12559] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 189.251828][T12559] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 189.251857][T12559] shmem_get_folio_gfp+0x6ad/0x1910 [ 189.251885][T12559] ? __lock_acquire+0x49f/0x1a40 [ 189.251903][T12559] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 189.251934][T12559] shmem_write_begin+0x1a4/0x420 [ 189.251962][T12559] ? __pfx_shmem_write_begin+0x10/0x10 [ 189.251990][T12559] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 189.252009][T12559] ? lockdep_hardirqs_on+0x78/0x100 [ 189.252037][T12559] generic_perform_write+0x292/0xa40 [ 189.252067][T12559] ? __pfx_generic_perform_write+0x10/0x10 [ 189.252094][T12559] ? file_update_time_flags+0x373/0x500 [ 189.252117][T12559] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 189.252136][T12559] shmem_file_write_iter+0x10e/0x140 [ 189.252157][T12559] __kernel_write_iter+0x2ac/0x930 [ 189.252185][T12559] ? __pfx___kernel_write_iter+0x10/0x10 [ 189.252210][T12559] ? __up_read+0x333/0x980 [ 189.252235][T12559] ? dump_user_range+0x65e/0xad0 [ 189.252258][T12559] ? copy_mc_enhanced_fast_string+0x6/0xf [ 189.252282][T12559] dump_user_range+0x3f9/0xad0 [ 189.252308][T12559] ? __pfx_dump_user_range+0x10/0x10 [ 189.252338][T12559] ? __pfx_writenote+0x10/0x10 [ 189.252361][T12559] ? elf_core_dump+0x1f25/0x3d20 [ 189.252386][T12559] elf_core_dump+0x2d68/0x3d20 [ 189.252424][T12559] ? __pfx_elf_core_dump+0x10/0x10 [ 189.252445][T12559] ? kasan_save_stack+0x3f/0x50 [ 189.252463][T12559] ? kasan_save_stack+0x30/0x50 [ 189.252480][T12559] ? kasan_save_track+0x14/0x30 [ 189.252497][T12559] ? __kasan_kmalloc+0xaa/0xb0 [ 189.252514][T12559] ? vfs_coredump+0x22a6/0x56f0 [ 189.252538][T12559] ? get_signal+0x1f2a/0x21e0 [ 189.252559][T12559] ? arch_do_signal_or_restart+0x91/0x7e0 [ 189.252582][T12559] ? 0xffffffffff600000 [ 189.252634][T12559] ? vfs_coredump+0x294b/0x56f0 [ 189.252652][T12559] vfs_coredump+0x294b/0x56f0 [ 189.252670][T12559] ? __pfx_vfs_coredump+0x10/0x10 [ 189.252684][T12559] ? __lock_acquire+0x49f/0x1a40 [ 189.252708][T12559] ? bpf_ksym_find+0x128/0x1c0 [ 189.252727][T12559] ? unwind_get_return_address+0x59/0xa0 [ 189.252745][T12559] ? arch_stack_walk+0xa6/0xf0 [ 189.252782][T12559] ? __sigqueue_free+0xbe/0x2a0 [ 189.252797][T12559] ? stack_trace_save+0x8e/0xc0 [ 189.252814][T12559] ? __pfx_stack_trace_save+0x10/0x10 [ 189.252831][T12559] ? stack_depot_save_flags+0x27/0x9d0 [ 189.252870][T12559] ? proc_coredump_connector+0x2d3/0x4f0 [ 189.252888][T12559] ? __pfx_proc_coredump_connector+0x10/0x10 [ 189.252907][T12559] ? rcu_is_watching+0x12/0xc0 [ 189.252924][T12559] get_signal+0x1f2a/0x21e0 [ 189.252942][T12559] ? __pfx_get_signal+0x10/0x10 [ 189.252955][T12559] ? __pfx_force_sig_fault+0x10/0x10 [ 189.252971][T12559] arch_do_signal_or_restart+0x91/0x7e0 [ 189.252982][T12559] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 189.253001][T12559] irqentry_exit+0x402/0xa00 [ 189.253018][T12559] asm_exc_page_fault+0x26/0x30 [ 189.253030][T12559] RIP: 0033:0x0 [ 189.253038][T12559] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 189.253043][T12559] RSP: 002b:00002000000002be EFLAGS: 00010217 [ 189.253053][T12559] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007f0bc6f9de59 [ 189.253059][T12559] RDX: 00007f0bc7e5cf10 RSI: 0000000000000058 RDI: 00007f0bc7e5cf10 [ 189.253066][T12559] RBP: 00007f0bc7033e6f R08: 0000000000000000 R09: 0000000000000058 [ 189.253071][T12559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.253078][T12559] R13: 00007f0bc7226038 R14: 00007f0bc7225fa0 R15: 00007ffc4f0e5388 [ 189.253091][T12559] [ 189.253184][T12559] memory: usage 307192kB, limit 307200kB, failcnt 13422 [ 189.305044][T12692] ip6gretap0: entered promiscuous mode [ 189.305626][T12559] memory+swap: usage 365248kB, limit 9007199254740988kB, failcnt 0 [ 189.420771][ T5821] ================================================================== [ 189.438698][ T5821] BUG: KASAN: slab-use-after-free in uea_upload_pre_firmware+0x3bd/0x3d0 [ 189.441406][T12559] kmem: usage 9696kB, limit 9007199254740988kB, failcnt 0 [ 189.442275][ T5821] Read of size 8 at addr ffff888026d020b8 by task kworker/0:4/5821 [ 189.442294][ T5821] [ 189.442307][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.442333][ T5821] Tainted: [L]=SOFTLOCKUP [ 189.442341][ T5821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.442353][ T5821] Workqueue: events request_firmware_work_func [ 189.442420][ T5821] Call Trace: [ 189.442426][ T5821] [ 189.442435][ T5821] dump_stack_lvl+0x100/0x190 [ 189.442457][ T5821] print_report+0x13d/0x4b0 [ 189.442482][ T5821] ? __virt_addr_valid+0x239/0x430 [ 189.442503][ T5821] ? uea_upload_pre_firmware+0x3bd/0x3d0 [ 189.442528][ T5821] kasan_report+0xdf/0x1c0 [ 189.442550][ T5821] ? uea_upload_pre_firmware+0x3bd/0x3d0 [ 189.442576][ T5821] uea_upload_pre_firmware+0x3bd/0x3d0 [ 189.442626][ T5821] ? __pfx__request_firmware+0x10/0x10 [ 189.442653][ T5821] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 189.442678][ T5821] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 189.442703][ T5821] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 189.442728][ T5821] request_firmware_work_func+0x13f/0x440 [ 189.442756][ T5821] ? __pfx_request_firmware_work_func+0x10/0x10 [ 189.442784][ T5821] ? rcu_is_watching+0x12/0xc0 [ 189.442810][ T5821] process_one_work+0xa23/0x1940 [ 189.442833][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 189.442853][ T5821] ? __pfx_request_firmware_work_func+0x10/0x10 [ 189.442886][ T5821] worker_thread+0x5ef/0xe50 [ 189.442905][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 189.442921][ T5821] ? kthread+0x13a/0x450 [ 189.442946][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 189.442962][ T5821] kthread+0x370/0x450 [ 189.442986][ T5821] ? __pfx_kthread+0x10/0x10 [ 189.443011][ T5821] ret_from_fork+0x72b/0xd50 [ 189.443033][ T5821] ? __pfx_ret_from_fork+0x10/0x10 [ 189.443055][ T5821] ? __switch_to+0x800/0x10f0 [ 189.443081][ T5821] ? __pfx_kthread+0x10/0x10 [ 189.443106][ T5821] ret_from_fork_asm+0x1a/0x30 [ 189.443135][ T5821] [ 189.443141][ T5821] [ 189.447693][T12559] Memory cgroup stats for [ 189.450494][ T5821] Allocated by task 5135: [ 189.450507][ T5821] kasan_save_stack+0x30/0x50 [ 189.450529][ T5821] kasan_save_track+0x14/0x30 [ 189.450544][ T5821] __kasan_kmalloc+0xaa/0xb0 [ 189.450558][ T5821] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 189.451794][T12559] /syz7 [ 189.456820][ T5821] syslog_print+0xf8/0x620 [ 189.456847][ T5821] do_syslog+0x5bd/0x6d0 [ 189.456866][ T5821] __x64_sys_syslog+0x74/0xb0 [ 189.456891][ T5821] do_syscall_64+0x115/0x870 [ 189.456917][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.459211][T12559] : [ 189.463241][ T5821] [ 189.463249][ T5821] Freed by task 5135: [ 189.463258][ T5821] kasan_save_stack+0x30/0x50 [ 189.463277][ T5821] kasan_save_track+0x14/0x30 [ 189.463293][ T5821] kasan_save_free_info+0x3b/0x70 [ 189.463317][ T5821] __kasan_slab_free+0x5f/0x80 [ 189.463334][ T5821] kfree+0x22b/0x6c0 [ 189.463356][ T5821] syslog_print+0x548/0x620 [ 189.463373][ T5821] do_syslog+0x5bd/0x6d0 [ 189.463392][ T5821] __x64_sys_syslog+0x74/0xb0 [ 189.463412][ T5821] do_syscall_64+0x115/0x870 [ 189.463437][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.463454][ T5821] [ 189.463459][ T5821] The buggy address belongs to the object at ffff888026d02000 [ 189.463459][ T5821] which belongs to the cache kmalloc-2k of size 2048 [ 189.463473][ T5821] The buggy address is located 184 bytes inside of [ 189.463473][ T5821] freed 2048-byte region [ffff888026d02000, ffff888026d02800) [ 189.463489][ T5821] [ 189.463494][ T5821] The buggy address belongs to the physical page: [ 189.463502][ T5821] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026d03000 pfn:0x26d00 [ 189.463518][ T5821] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 189.463531][ T5821] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 189.463548][ T5821] page_type: f5(slab) [ 189.463564][ T5821] raw: 00fff00000000240 ffff88801bc42f00 ffffea0000d78810 ffffea0000f6c010 [ 189.463580][ T5821] raw: ffff888026d03000 0000000800080007 00000000f5000000 0000000000000000 [ 189.463597][ T5821] head: 00fff00000000240 ffff88801bc42f00 ffffea0000d78810 ffffea0000f6c010 [ 189.463612][ T5821] head: ffff888026d03000 0000000800080007 00000000f5000000 0000000000000000 [ 189.466282][T12559] cache 290205696 [ 189.467452][ T5821] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 189.467468][ T5821] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 189.467477][ T5821] page dumped because: kasan: bad access detected [ 189.467517][ T5821] page_owner tracks the page as allocated [ 189.468809][T12559] rss 364544 [ 189.470758][ T5821] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5739, tgid 5739 (syz-executor), ts 47240453406, free_ts 46487093864 [ 189.470792][ T5821] post_alloc_hook+0xfd/0x120 [ 189.470817][ T5821] get_page_from_freelist+0xf48/0x3530 [ 189.470842][ T5821] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 189.472886][T12559] rss_huge 0 [ 189.474852][ T5821] new_slab+0xa2/0x650 [ 189.474887][ T5821] refill_objects+0xe3/0x410 [ 189.474912][ T5821] __pcs_replace_empty_main+0x376/0x680 [ 189.477271][T12559] shmem 290205696 [ 189.479053][ T5821] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 189.479077][ T5821] kmalloc_reserve+0xe8/0x350 [ 189.481503][T12559] mapped_file 0 [ 189.483654][ T5821] pskb_expand_head+0x249/0x10e0 [ 189.483701][ T5821] netlink_trim+0x22d/0x2f0 [ 189.486011][T12559] dirty 0 [ 189.488422][ T5821] netlink_broadcast_filtered+0x6d/0xf20 [ 189.488451][ T5821] nlmsg_notify+0xb1/0x290 [ 189.488473][ T5821] rtmsg_ifinfo+0x177/0x1b0 [ 189.488493][ T5821] __dev_notify_flags+0x24c/0x2e0 [ 189.490601][T12559] writeback 0 [ 189.492495][ T5821] rtnl_configure_link+0x1b5/0x280 [ 189.492521][ T5821] vxcan_newlink+0x42f/0x650 [ 189.492622][ T5821] page last free pid 5734 tgid 5734 stack trace: [ 189.492630][ T5821] __free_frozen_pages+0x79f/0x1090 [ 189.492644][ T5821] qlist_free_all+0x47/0xf0 [ 189.492653][ T5821] kasan_quarantine_reduce+0x1a0/0x1f0 [ 189.492663][ T5821] __kasan_slab_alloc+0x69/0x90 [ 189.492673][ T5821] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 189.492683][ T5821] vm_area_alloc+0x1f/0x160 [ 189.492697][ T5821] __mmap_region+0x1033/0x2db0 [ 189.492711][ T5821] mmap_region+0x35d/0x620 [ 189.492719][ T5821] do_mmap+0xc63/0x12f0 [ 189.492730][ T5821] vm_mmap_pgoff+0x29e/0x470 [ 189.492741][ T5821] vm_mmap+0x8e/0xc0 [ 189.492751][ T5821] elf_load+0x46e/0x720 [ 189.492767][ T5821] load_elf_binary+0x14b9/0x51c0 [ 189.492784][ T5821] bprm_execve+0x8fb/0x1730 [ 189.492803][ T5821] do_execveat_common.isra.0+0x4a5/0x580 [ 189.492818][ T5821] __x64_sys_execve+0x93/0xd0 [ 189.492831][ T5821] [ 189.492834][ T5821] Memory state around the buggy address: [ 189.492840][ T5821] ffff888026d01f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 189.492848][ T5821] ffff888026d02000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.492855][ T5821] >ffff888026d02080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.492861][ T5821] ^ [ 189.492867][ T5821] ffff888026d02100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.492873][ T5821] ffff888026d02180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.492879][ T5821] ================================================================== [ 189.493479][ T5820] Oops: general protection fault, probably for non-canonical address 0xedccaa0405250cae: 0000 [#1] SMP KASAN NOPTI [ 189.498041][T12559] workingset_refault_anon 0 [ 189.499121][ T5820] KASAN: maybe wild-memory-access in range [0x6e65702029286570-0x6e65702029286577] [ 189.499137][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.499152][ T5820] Tainted: [L]=SOFTLOCKUP [ 189.499156][ T5820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.499164][ T5820] Workqueue: events request_firmware_work_func [ 189.499186][ T5820] RIP: 0010:dev_driver_string+0x10c/0x150 [ 189.501952][T12559] workingset_refault_file 0 [ 189.502844][ T5820] Code: 88 04 00 00 48 c7 c3 80 ba 70 8c 48 85 ed 0f 84 64 ff ff ff e8 d5 08 ae fb 48 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 84 40 ff ff ff 48 89 ef e8 72 82 1e fc e9 33 ff ff [ 189.502856][ T5820] RSP: 0018:ffffc9000482f998 EFLAGS: 00010203 [ 189.505442][T12559] swap 64970752 [ 189.506830][ T5820] RAX: dffffc0000000000 RBX: ffffffff8c70ba80 RCX: 0000000000000000 [ 189.506840][ T5820] RDX: 0dccae0405250cae RSI: ffffffff865bd3cb RDI: ffffffff8c70be08 [ 189.506847][ T5820] RBP: 6e65702029286574 R08: 0000000000000001 R09: 0000000000000000 [ 189.506853][ T5820] R10: 0000000000000001 R11: 000000000000758b R12: ffffc9000482fa00 [ 189.506859][ T5820] R13: ffffffff8cb61820 R14: 000000000000006b R15: ffffffff8c70b8d0 [ 189.506866][ T5820] FS: 0000000000000000(0000) GS:ffff8880d5de8000(0000) knlGS:0000000000000000 [ 189.506889][ T5820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.506898][ T5820] CR2: 0000200000094000 CR3: 0000000042045000 CR4: 0000000000352ef0 [ 189.509061][T12559] swapcached 73273344 [ 189.510271][ T5820] Call Trace: [ 189.510277][ T5820] [ 189.510281][ T5820] __dev_printk+0x7f/0x100 [ 189.510324][ T5820] _dev_err+0xef/0x127 [ 189.512634][T12559] pgpgin 127259 [ 189.513806][ T5820] ? __pfx__dev_err+0x10/0x10 [ 189.513823][ T5820] ? kfree+0x22b/0x6c0 [ 189.513838][ T5820] ? _raw_spin_unlock+0x28/0x50 [ 189.513854][ T5820] ? _request_firmware+0x274/0x13c0 [ 189.515696][T12559] pgpgout 56319 [ 189.517036][ T5820] uea_upload_pre_firmware.cold+0x80/0xfa [ 189.517055][ T5820] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 189.517072][ T5820] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 189.517086][ T5820] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 189.517102][ T5820] request_firmware_work_func+0x13f/0x440 [ 189.520152][T12559] pgfault 39078 [ 189.521479][ T5820] ? __pfx_request_firmware_work_func+0x10/0x10 [ 189.521504][ T5820] ? rcu_is_watching+0x12/0xc0 [ 189.521520][ T5820] process_one_work+0xa23/0x1940 [ 189.521533][ T5820] ? __pfx_process_one_work+0x10/0x10 [ 189.521545][ T5820] ? __pfx_request_firmware_work_func+0x10/0x10 [ 189.521563][ T5820] worker_thread+0x5ef/0xe50 [ 189.521574][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 189.521585][ T5820] ? kthread+0x13a/0x450 [ 189.521600][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 189.521609][ T5820] kthread+0x370/0x450 [ 189.521625][ T5820] ? __pfx_kthread+0x10/0x10 [ 189.521640][ T5820] ret_from_fork+0x72b/0xd50 [ 189.521655][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 189.521669][ T5820] ? __switch_to+0x800/0x10f0 [ 189.521685][ T5820] ? __pfx_kthread+0x10/0x10 [ 189.521700][ T5820] ret_from_fork_asm+0x1a/0x30 [ 189.521719][ T5820] [ 189.521723][ T5820] Modules linked in: [ 189.522307][ T5820] ---[ end trace 0000000000000000 ]--- [ 189.524050][T12559] pgmajfault 3 [ 189.525488][ T10] (NULL device *): [UEAGLE-ATM] firmware is not available [ 189.529848][T12559] inactive_anon 207249408 [ 189.530666][ T10] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#2] SMP KASAN NOPTI [ 189.530679][ T10] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 189.530691][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G D L syzkaller #0 PREEMPT(full) [ 189.533279][T12559] active_anon 83206144 [ 189.534379][ T10] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 189.534385][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.534392][ T10] Workqueue: events request_firmware_work_func [ 189.536255][T12559] inactive_file 0 [ 189.537817][ T10] RIP: 0010:do_raw_spin_lock+0x6c/0x260 [ 189.537836][ T10] Code: c3 e5 81 49 8d 14 04 c7 02 f1 f1 f1 f1 c7 42 04 04 f3 f3 f3 65 48 8b 15 aa bc 7d 12 48 89 54 24 60 31 d2 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 b1 [ 189.537847][ T10] RSP: 0018:ffffc900000d79f0 EFLAGS: 00010003 [ 189.537856][ T10] RAX: dffffc0000000000 RBX: 0000000000000008 RCX: 0000000000000000 [ 189.539056][T12559] active_file 0 [ 189.540392][ T10] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000c [ 189.540400][ T10] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000000 [ 189.540407][ T10] R10: ffffffff91223d97 R11: 0000000032383554 R12: 1ffff9200001af3f [ 189.540414][ T10] R13: ffff88801eadaa04 R14: ffff88803c7e5d60 R15: ffffffffffffff50 [ 189.540421][ T10] FS: 0000000000000000(0000) GS:ffff8880d5de8000(0000) knlGS:0000000000000000 [ 189.540443][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.542270][T12559] unevictable 0 [ 189.543786][ T10] CR2: 0000200000094000 CR3: 0000000042045000 CR4: 0000000000352ef0 [ 189.543796][ T10] Call Trace: [ 189.543800][ T10] [ 189.543805][ T10] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 189.543821][ T10] ? lock_acquire+0x301/0x370 [ 189.545766][T12559] hierarchical_memory_limit 314572800 [ 189.547512][ T10] ? _raw_spin_lock_irqsave+0x52/0x60 [ 189.547531][ T10] _raw_spin_lock_irqsave+0x42/0x60 [ 189.547545][ T10] ? complete+0x1d/0x200 [ 189.547560][ T10] complete+0x1d/0x200 [ 189.548681][T12559] hierarchical_memsw_limit 9223372036854771712 [ 189.549340][ T10] uea_upload_pre_firmware.cold+0x2e/0xfa [ 189.550768][T12559] total_cache 290205696 [ 189.552175][ T10] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 189.552194][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 189.552209][ T10] ? __pfx_uea_upload_pre_firmware+0x10/0x10 [ 189.552224][ T10] request_firmware_work_func+0x13f/0x440 [ 189.552243][ T10] ? __pfx_request_firmware_work_func+0x10/0x10 [ 189.552260][ T10] ? rcu_is_watching+0x12/0xc0 [ 189.552277][ T10] process_one_work+0xa23/0x1940 [ 189.552289][ T10] ? __pfx_process_one_work+0x10/0x10 [ 189.552301][ T10] ? __pfx_request_firmware_work_func+0x10/0x10 [ 189.552318][ T10] worker_thread+0x5ef/0xe50 [ 189.552329][ T10] ? __pfx_worker_thread+0x10/0x10 [ 189.552339][ T10] ? kthread+0x13a/0x450 [ 189.552355][ T10] ? __pfx_worker_thread+0x10/0x10 [ 189.552364][ T10] kthread+0x370/0x450 [ 189.552379][ T10] ? __pfx_kthread+0x10/0x10 [ 189.552395][ T10] ret_from_fork+0x72b/0xd50 [ 189.552410][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 189.552423][ T10] ? __switch_to+0x800/0x10f0 [ 189.552440][ T10] ? __pfx_kthread+0x10/0x10 [ 189.552455][ T10] ret_from_fork_asm+0x1a/0x30 [ 189.552473][ T10] [ 189.552477][ T10] Modules linked in: [ 189.552487][ T10] ---[ end trace 0000000000000000 ]--- [ 189.552493][ T10] RIP: 0010:dev_driver_string+0x10c/0x150 [ 189.552515][ T10] Code: 88 04 00 00 48 c7 c3 80 ba 70 8c 48 85 ed 0f 84 64 ff ff ff e8 d5 08 ae fb 48 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 84 40 ff ff ff 48 89 ef e8 72 82 1e fc e9 33 ff ff [ 189.552526][ T10] RSP: 0018:ffffc9000482f998 EFLAGS: 00010203 [ 189.552535][ T10] RAX: dffffc0000000000 RBX: ffffffff8c70ba80 RCX: 0000000000000000 [ 189.552541][ T10] RDX: 0dccae0405250cae RSI: ffffffff865bd3cb RDI: ffffffff8c70be08 [ 189.552548][ T10] RBP: 6e65702029286574 R08: 0000000000000001 R09: 0000000000000000 [ 189.552554][ T10] R10: 0000000000000001 R11: 000000000000758b R12: ffffc9000482fa00 [ 189.552561][ T10] R13: ffffffff8cb61820 R14: 000000000000006b R15: ffffffff8c70b8d0 [ 189.552568][ T10] FS: 0000000000000000(0000) GS:ffff8880d5de8000(0000) knlGS:0000000000000000 [ 189.554746][T12559] total_rss 364544 [ 189.556077][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.556086][ T10] CR2: 0000200000094000 CR3: 0000000042045000 CR4: 0000000000352ef0 [ 189.556095][ T10] Kernel panic - not syncing: Fatal exception [ 189.556825][ T10] Kernel Offset: disabled VM DIAGNOSIS: 16:54:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81e830ce RDX=ffff888032714a80 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc9000483f838 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=000000000000758b R12=1ffff92000907f0a R13=0000000000000000 R14=ffff888028e2ca80 R15=ffffc9000483f908 RIP=ffffffff8209d6b8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5de8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000094000 CR3=0000000042045000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bd15d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec1cc2f96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec1cc2f96 00007ffec1cc2f9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc434452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc434492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc4345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc434484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc5f0600 00007f77bc5f05e0 00007f77bc5f05e8 00007f77bc5f0618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc5f05f8 00007f77bc5f05c8 00007f77bc5f0600 00007f77bc5f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006580000 RBX=ffff88802b314000 RCX=ffffffff86f6ab0e RDX=00000000ffffffff RSI=ffffffff86f6ab1b RDI=ffff888028e2ca80 RBP=0000000000000000 RSP=ffffc900006a0ec0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff88802b315808 R14=ffff88802b315420 R15=0000000000000000 RIP=ffffffff86f6ab48 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0bc7e5d6c0 ffffffff 00c00000 GS =0000 ffff8880d5ee8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200001000000 CR3=0000000042a15000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bd15d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec1cc2f96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec1cc2f96 00007ffec1cc2f9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc434452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc434492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc4345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc434484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc5f0600 00007f77bc5f05e0 00007f77bc5f05e8 00007f77bc5f0618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc5f05f8 00007f77bc5f05c8 00007f77bc5f0600 00007f77bc5f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8ebe6180 RBP=ffffffff8ebe6180 RSP=ffffc90005c26248 R8 =0000000000000000 R9 =0000000000000200 R10=0000000000000200 R11=0000000000018509 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e5739f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0bc7e5d6c0 ffffffff 00c00000 GS =0000 ffff8880d5fe8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c4468f4 CR3=000000002e009000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f2400001 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6428eba08000fa92 91fc0ff4e7a590f4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1267cc974ad903d1 e45a884493036769 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc413fb40b879122 b3f4b7b619abb698 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c736a578c5070293 5ee41db879c16dc4 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000072c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000001000000 c8c2008001000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0073fe8c0073fe8f b5c2ef38620cc6a8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b06000800073fe8d 0100000008520080 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9060111febb0e5d2 dd9400800073fe89 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f82aa7ba562348b 211fde2b0fce0185 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5fc22d0418ff25c1 7abea4d0b5e7c4a0 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e52454b5f504647 2830636378303d6b 73616d5f70666720 3a72656c6c696b2d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303030313a6a6461 5f65726f63735f6d 6f6f20426b363731 3a73656c62617467 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7020303a44495520 2c426b303a737372 2d6d656d6873202c 426b38363639343a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373722d656c6966 202c426b36353231 3a7373722d6e6f6e 61202c426b363335 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38393a6d762d6c61 746f742029363537 312e372e7a797328 2035353532312073 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81fd46fd RDX=ffff888024730000 RSI=ffffffff81fd46d7 RDI=ffff888024730000 RBP=ffff88806a543540 RSP=ffffc9000163ef68 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4a86a9 R14=0000000000000001 R15=ffff88806a73c880 RIP=ffffffff81fd46eb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60e8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000042045000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bd15d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec1cc2f96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec1cc2f96 00007ffec1cc2f9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc434452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc434492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc4345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc434484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc5f0600 00007f77bc5f05e0 00007f77bc5f05e8 00007f77bc5f0618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77bc5f05f8 00007f77bc5f05c8 00007f77bc5f0600 00007f77bc5f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000